# changelog

author: tbogendoerfer@suse.de
changelog:
  - net/mlx5: Check capability for fw_reset (git-fixes).
  - Refresh
    patches.suse/net-mlx5-Fix-MTMP-register-capability-offset-in-MCAM.patch.
  - commit 480249d


author: tbogendoerfer@suse.de
changelog:
  - ice: map XDP queues to vectors in ice_vsi_map_rings_to_vectors()
    (git-fixes).
  - Refresh
    patches.suse/ice-move-netif_queue_set_napi-to-rtnl-protected-sect.patch.
  - commit 7b44c3c


author: tbogendoerfer@suse.de
changelog:
  - ppp: fix ppp_async_encode() illegal access (CVE-2024-50035
    bsc#1232392).
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO
    (CVE-2024-49949 bsc#1232160).
  - commit f4bcea0


author: fdmanana@suse.com
changelog:
  - btrfs: wait for fixup workers before stopping cleaner kthread
    during umount (bsc#1232262 CVE-2024-49867).
  - btrfs: fix race setting file private on concurrent lseek using
    same fd (bsc#1231869 CVE-2024-47741).
  - commit af36a3e


author: krisman@suse.de
changelog:
  - crypto: stm32/cryp - call finalize with bh disabled
    (CVE-2024-47658 bsc#1231436).
  - commit 2854148


author: tiwai@suse.de
changelog:
  - spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
    (git-fixes).
  - spi: mtk-snfi: fix kerneldoc for mtk_snand_is_page_ops()
    (git-fixes).
  - spi: atmel-quadspi: Fix wrong register value written to MR
    (git-fixes).
  - commit fd0b348


author: tzimmermann@suse.com
changelog:
  - drm/amd/display: Check link_res->hpo_dp_link_enc before using it (bsc#1231944 CVE-2024-47704)
  - commit 931c899


author: tzimmermann@suse.com
changelog:
  - drm/amd/display: Check null pointers before multiple uses (bsc#1232313 CVE-2024-49920)
  - commit 5447aa1


author: vkarasulli@suse.de
changelog:
  - iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI
    devices (git-fixes).
  - commit 28951a9


author: shung-hsi.yu@suse.com
changelog:
  - kABI: bpf: struct bpf_map kABI workaround (CVE-2024-50063
    bsc#1232435).
  - selftests/bpf: Add test for lsm tail call (CVE-2024-50063
    bsc#1232435).
  - bpf: Prevent tail call between progs attached to different hooks
    (CVE-2024-50063 bsc#1232435).
  - commit 666246a


author: dsterba@suse.com
changelog:
  - btrfs: clean up our handling of refs == 0 in snapshot delete (CVE-2024-46840 bsc#1231105)
  - commit 788d396


author: dsterba@suse.com
changelog:
  - media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning (CVE-2024-47753 bsc#1231868)
  - commit fed66a9


author: dsterba@suse.com
changelog:
  - media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning (CVE-2024-47754 bsc#1232131)
  - commit dacb1c6


author: dsterba@suse.com
changelog:
  - media: mediatek: vcodec: Fix H264 stateless decoder smatch warning (CVE-2024-47752 bsc#1232130)
  - commit 086cd43


author: dsterba@suse.com
changelog:
  - padata: use integer wrap around to prevent deadlock on seq_nr overflow (CVE-2024-47739 bsc#1232124)
  - commit 7e58560


author: dsterba@suse.com
changelog:
  - drivers/perf: Fix ali_drw_pmu driver interrupt status clearing (CVE-2024-47731 bsc#1232117)
  - commit 774dc33


author: dsterba@suse.com
changelog:
  - drm/amd/display: Initialize get_bytes_per_element's default to 1 (CVE-2024-49892 bsc#1232220)
  - commit e1539d0


author: dsterba@suse.com
changelog:
  - drm/amd/pm: ensure the fw_info is not null before using it (CVE-2024-49890 bsc#1232217)
  - commit a0e8b9f


author: dsterba@suse.com
changelog:
  - drm/amd/display: Deallocate DML memory if allocation fails (CVE-2024-49972 bsc#1232315)
  - commit dd5ab13


author: nik.borisov@suse.com
changelog:
  - Refresh patches.suse/x86-fix-user-address-masking-non-canonical-speculation-iss.patch. (bsc#1232529)
    Give check_range a unique label. Otherwise the macro's 1b label
    conflicts with __get_user_1's 1 label and this causes the exception fixup
    entry, installed at the end of the file to match the wrong thing.
    Instead of matching __get_user_1's 1b label it will match check_range's 1b
    label when this macro is expanded for the last time in __get_user_8.
    This fixes intermittent random crashes when copying data from userspace.
  - commit 3a35fd0


author: petr.pavlu@suse.com
changelog:
  - tracing/hwlat: Fix a race during cpuhp processing (git-fixes).
  - tracing/timerlat: Fix a race during cpuhp processing
    (git-fixes).
  - tracing/timerlat: Drop interface_lock in stop_kthread()
    (git-fixes).
  - tracing/timerlat: Fix duplicated kthread creation due to CPU
    online/offline (git-fixes).
  - tracing/osnoise: Fix build when timerlat is not enabled
    (git-fixes).
  - tracing/timerlat: Add interface_lock around clearing of kthread
    in stop_kthread() (git-fixes).
  - tracing/timerlat: Only clear timer if a kthread exists
    (git-fixes).
  - tracing/osnoise: Use a cpumask to know what threads are kthreads
    (git-fixes).
  - tracing/timerlat: Move hrtimer_init to timerlat_fd open()
    (git-fixes).
  - tracing/timerlat: Add user-space interface (git-fixes).
  - tracing/osnoise: Skip running osnoise if all instances are off
    (git-fixes).
  - tracing/osnoise: Switch from PF_NO_SETAFFINITY to
    migrate_disable (git-fixes).
  - commit 8482ad0


author: petr.pavlu@suse.com
changelog:
  - mm: khugepaged: fix the arguments order in
    khugepaged_collapse_file trace point (git-fixes).
  - commit 43546b6


author: petr.pavlu@suse.com
changelog:
  - fgraph: Use CPU hotplug mechanism to initialize idle shadow
    stacks (git-fixes).
  - commit 4265ef9


author: mfranc@suse.cz
changelog:
  - KVM: s390: gaccess: Check if guest address is in memslot
    (git-fixes bsc#1232623).
  - commit b583687


author: mfranc@suse.cz
changelog:
  - KVM: s390: Change virtual to physical address access in diag
    0x258 handler (git-fixes bsc#1232626).
  - commit 2b0b1e9


author: mfranc@suse.cz
changelog:
  - s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
    (git-fixes bsc#1232627).
  - commit 5725ee0


author: petr.pavlu@suse.com
changelog:
  - uprobe: avoid out-of-bounds memory access of fetching args
    (git-fixes).
  - uprobes: encapsulate preparation of uprobe args buffer
    (git-fixes).
  - commit ead6cfe


author: petr.pavlu@suse.com
changelog:
  - tracing: Consider the NULL character when validating the event
    length (git-fixes).
  - commit 6b1d97f


author: petr.pavlu@suse.com
changelog:
  - module: abort module loading when sysfs setup suffer errors
    (git-fixes).
  - Refresh patches.suse/add-suse-supported-flag.patch.
  - commit db27509


author: petr.pavlu@suse.com
changelog:
  - static_call: Replace pointless WARN_ON() in
    static_call_module_notify() (bsc#1232155 CVE-2024-49954).
  - commit 03b6c35


author: vkarasulli@suse.de
changelog:
  - drm/amd/display: Fix index out of bounds in DCN30 color
    transformation (CVE-2024-49969 bsc#1232519).
  - commit 7d6c264


author: dsterba@suse.com
changelog:
  - ext4: aovid use-after-free in ext4_ext_insert_extent() (CVE-2024-49883 bsc#1232199)
  - commit 2db9cb5


author: krisman@suse.de
changelog:
  - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info()
    in walk_down_proc() (CVE-2024-46841 bsc#1231094).
  - commit fb4a0c7


author: dsterba@suse.com
changelog:
  - of: Add cleanup.h based auto release via __free(device_node) markings (bsc#1232386)
  - commit 794e5ba


author: dsterba@suse.com
changelog:
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (CVE-2024-49959 bsc#1232149)
  - commit 8307a3a


author: dsterba@suse.com
changelog:
  - ext4: dax: fix overflowing extents beyond inode size when partially writing (CVE-2024-50015 bsc#1232079)
  - commit 9768b7c


author: vkarasulli@suse.de
changelog:
  - iommu/vt-d: Fix potential lockup if qi_submit_sync called
    with 0 count (bsc#1232316 CVE-2024-49993).
  - commit f1e5ce7


author: krisman@suse.de
changelog:
  - io_uring: check if we need to reschedule during overflow flush
    (bsc#1232417 CVE-2024-50060).
  - commit 695bc5f


author: dsterba@suse.com
changelog:
  - ext4: fix i_data_sem unlock order in ext4_ind_migrate() (CVE-2024-50006 bsc#1232442)
  - commit de0e62b


author: dsterba@suse.com
changelog:
  - ext4: fix access to uninitialised lock in fc replay path (CVE-2024-50014 bsc#1232446)
  - commit 1b2ba45


author: tzimmermann@suse.com
changelog:
  - drm/amd/display: Check null pointers before using dc->clk_mgr (bsc#1232334 CVE-2024-49907)
  - commit 366c63a


author: tzimmermann@suse.com
changelog:
  - drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (bsc#1232335 CVE-2024-49908)
  - commit 64a943f


author: tzimmermann@suse.com
changelog:
  - drm/amd/display: Add null check for pipe_ctx->plane_state in (bsc#1232369 CVE-2024-49914)
  - commit c236474


author: tzimmermann@suse.com
changelog:
  - drm/amd/display: Check null pointer before try to access it (bsc#1232332 CVE-2024-49906)
  - commit f2b2892


author: nik.borisov@suse.com
changelog:
  - RAS/AMD/ATL: Expand helpers for adding and removing base and hole (jsc#PED-10559).
  - commit 2b18348


author: dsterba@suse.com
changelog:
  - drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (CVE-2024-49901 bsc#1232305)
  - commit 69be7bb


author: dsterba@suse.com
changelog:
  - drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream (CVE-2024-49913 bsc#1232307)
  - commit 60f7853


author: dsterba@suse.com
changelog:
  - drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func (CVE-2024-49909 bsc#1232337)
  - commit 11facc9


author: dsterba@suse.com
changelog:
  - drm/amd/display: Fix index out of bounds in degamma hardware format translation (CVE-2024-49894 bsc#1232354)
  - commit db76ccb


author: dsterba@suse.com
changelog:
  - drm/amd/display: Check phantom_stream before it is used (CVE-2024-49897 bsc#1232355)
  - commit d3fcaed


author: dsterba@suse.com
changelog:
  - Update references for patches.suse/0001-drm-amd-display-Add-null-check-for-afb-in-amdgpu_dm_.patch (bsc#1232335 CVE-2024-49908 bsc#1232357 CVE-2024-49905)
  - commit fa3a85a


author: dsterba@suse.com
changelog:
  - drm/amd/display: Initialize denominators' default to 1 (CVE-2024-49899 bsc#1232358)
  - commit 282fa51


author: dsterba@suse.com
changelog:
  - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (CVE-2024-49895 bsc#1232352)
  - commit f36c162


author: dsterba@suse.com
changelog:
  - drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags (CVE-2024-49923 bsc#1232361)
  - commit 3759560


author: dsterba@suse.com
changelog:
  - drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func (CVE-2024-49911 bsc#1232366)
  - commit 6c83ea7


author: dsterba@suse.com
changelog:
  - drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream' (CVE-2024-49912 bsc#1232367)
  - commit 2394db2


author: dsterba@suse.com
changelog:
  - drm/amd/display: Check null pointers before using them (CVE-2024-49922 bsc#1232374)
  - commit 342005c


author: tiwai@suse.de
changelog:
  - Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
    (git-fixes).
  - wifi: cfg80211: clear wdev->cqm_config pointer on free
    (git-fixes).
  - Revert "wifi: iwlwifi: remove retry loops in start" (git-fixes).
  - wifi: iwlwifi: mvm: don't add default link in fw restart flow
    (git-fixes).
  - wifi: iwlwifi: mvm: Fix response handling in
    iwl_mvm_send_recovery_cmd() (git-fixes).
  - wifi: iwlwifi: mvm: don't leak a link on AP removal (git-fixes).
  - wifi: ath11k: Fix invalid ring usage in full monitor mode
    (git-fixes).
  - wifi: ath10k: Fix memory leak in management tx (git-fixes).
  - wifi: brcm80211: BRCM_TRACING should depend on TRACING
    (git-fixes).
  - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
    (git-fixes).
  - wifi: mac80211: do not pass a stopped vif to the driver in
    .get_txpower (git-fixes).
  - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
    (git-fixes).
  - wifi: iwlegacy: Fix "field-spanning write" warning in
    il_enqueue_hcmd() (git-fixes).
  - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
    (git-fixes).
  - platform/x86: dell-wmi: Ignore suspend notifications
    (stable-fixes).
  - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix
    initial lid detection issue (stable-fixes).
  - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
    (stable-fixes).
  - drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
    (stable-fixes).
  - drm/amd: Guard against bad data for ATIF ACPI method
    (git-fixes).
  - usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING
    store (git-fixes).
  - accel/qaic: Fix the for loop used to walk SG table (git-fixes).
  - drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
    (git-fixes).
  - drm/msm/dpu: don't always program merge_3d block (git-fixes).
  - drm/msm: Allocate memory for disp snapshot with kvzalloc()
    (git-fixes).
  - drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
    (git-fixes).
  - drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate
    calculation (git-fixes).
  - drm/msm/dsi: improve/fix dsc pclk calculation (git-fixes).
  - drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
    (git-fixes).
  - drm/msm/dpu: move CRTC resource assignment to
    dpu_encoder_virt_atomic_check (git-fixes).
  - drm/msm/dpu: make sure phys resources are properly initialized
    (git-fixes).
  - platform/x86: dell-sysman: add support for alienware products
    (stable-fixes).
  - drm/vboxvideo: Replace fake VLA at end of
    vbva_mouse_pointer_shape with real VLA (stable-fixes).
  - usb: gadget: f_uac2: fix non-newline-terminated function name
    (stable-fixes).
  - usb: gadget: f_uac2: Replace snprintf() with the safer
    scnprintf() variant (stable-fixes).
  - commit 09f40f7


author: tiwai@suse.de
changelog:
  - drm/mediatek: Fix get efuse issue for MT8188 DPTX (git-fixes).
  - drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
    (git-fixes).
  - ACPI: CPPC: Make rmw_lock a raw_spin_lock (git-fixes).
  - firmware: arm_sdei: Fix the input parameter of
    cpuhp_remove_state() (git-fixes).
  - kasan: Fix Software Tag-Based KASAN with GCC (git-fixes).
  - commit 2a07e04


author: tiwai@suse.de
changelog:
  - ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6
    mb1 (stable-fixes).
  - ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
    (stable-fixes).
  - ALSA: usb-audio: Add quirks for Dell WD19 dock (stable-fixes).
  - ASoC: dapm: fix bounds checker error in dapm_widget_list_create
    (git-fixes).
  - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error
    (git-fixes).
  - ASoC: Intel: sst: Support LPE0F28 ACPI HID (stable-fixes).
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla
    10 tablet (stable-fixes).
  - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated
    codec (stable-fixes).
  - ASoC: codecs: rt5640: Always disable IRQs from
    rt5640_cancel_work() (stable-fixes).
  - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
    (stable-fixes).
  - ALSA: hda/realtek: Limit internal Mic boost on Dell platform
    (stable-fixes).
  - commit 0d350ca


author: tiwai@suse.de
changelog:
  - ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book
    init (stable-fixes).
  - Refresh
    patches.suse/ALSA-hda-realtek-Add-quirk-for-Huawei-MateBook-13-KL.patch.
  - commit 98d4026


author: petr.pavlu@suse.com
changelog:
  - static_call: Handle module init failure correctly in
    static_call_del_module() (bsc#1232083 CVE-2024-50002).
  - commit af953b9


author: petr.pavlu@suse.com
changelog:
  - sched: sch_cake: fix bulk flow accounting logic for host
    fairness (bsc#1231114 CVE-2024-46828).
  - commit ad42d5f


author: petr.pavlu@suse.com
changelog:
  - uprobes: fix kernel info leak via "[uprobes]" vma (bsc#1231114
    CVE-2024-46828).
  - uprobes: turn xol_area->pages into xol_area->page (bsc#1231114).
  - uprobes: introduce the global struct vm_special_mapping
    xol_mapping (bsc#1231114).
  - commit 4f9954c


author: ailiop@suse.com
changelog:
  - audit: don't take task_lock() in audit_exe_compare() code path
    (git-fixes).
  - Refresh patches.suse/vfs-add-super_operations-get_inode_dev.
  - commit d4e23ef


author: ailiop@suse.com
changelog:
  - ubifs: Fix unattached xattr inode if powercut happens after
    deleting (git-fixes).
  - commit 6c90268


author: ailiop@suse.com
changelog:
  - Revert "ubifs: ubifs_symlink: Fix memleak of inode->i_link in
    error path" (git-fixes).
  - commit 0a7c17d


author: ailiop@suse.com
changelog:
  - keys, dns: Allow key types (eg. DNS) to be reclaimed immediately
    on expiry (git-fixes).
  - commit ce262a7


author: ailiop@suse.com
changelog:
  - splice: always fsnotify_access(in), fsnotify_modify(out)
    on success (git-fixes).
  - commit e7f8947


author: ailiop@suse.com
changelog:
  - splice: fsnotify_access(in), fsnotify_modify(out) on success
    in tee (git-fixes).
  - commit d518e6d


author: neilb@suse.de
changelog:
  - NFSD: Force all NFSv4.2 COPY requests to be synchronous
    (CVE-2024-49974 bsc#1232383).
  - commit 16045fc


author: jlee@suse.com
changelog:
  - Update
    patches.suse/i3c-mipi-i3c-hci-Fix-out-of-bounds-access-in-hci_dma.patch
    (git-fixes CVE-2023-52766 bsc#1230620).
  - Update
    patches.suse/media-pci-cx23885-check-cx23885_vdev_init-return.patch
    (stable-fixes CVE-2023-52918 bsc#1232047).
  - Update
    patches.suse/nfc-nci-fix-possible-NULL-pointer-dereference-in-sen.patch
    (git-fixes CVE-2023-52919 bsc#1231988).
  - Update
    patches.suse/ntb-intel-Fix-the-NULL-vs-IS_ERR-bug-for-debugfs_cre.patch
    (git-fixes CVE-2023-52917 bsc#1231849).
  - Update
    patches.suse/tcp-do-not-accept-ACK-of-bytes-we-never-sent.patch
    (CVE-2023-52881 bsc#1225611 bsc#1223384).
  - Update patches.suse/wifi-ath11k-fix-htt-pktlog-locking.patch
    (git-fixes CVE-2023-52800 bsc#1230600).
  - commit 9859953


author: jlee@suse.com
changelog:
  - Update
    patches.suse/0002-x86-mm-ident_map-Use-gbpages-only-where-full-GB-page.patch
    (bsc#1220382 CVE-2024-50017 bsc#1232312).
  - Update patches.suse/ACPI-PAD-fix-crash-in-exit_round_robin.patch
    (stable-fixes CVE-2024-49935 bsc#1232370).
  - Update
    patches.suse/ACPI-battery-Fix-possible-crash-when-unregistering-a.patch
    (git-fixes CVE-2024-49955 bsc#1232154).
  - Update
    patches.suse/ACPI-sysfs-validate-return-type-of-_STR-method.patch
    (git-fixes CVE-2024-49860 bsc#1231861).
  - Update
    patches.suse/ACPICA-check-null-return-of-ACPI_ALLOCATE_ZEROED-in-.patch
    (stable-fixes CVE-2024-49962 bsc#1232314).
  - Update
    patches.suse/ALSA-asihpi-Fix-potential-OOB-array-access.patch
    (stable-fixes CVE-2024-50007 bsc#1232394).
  - Update
    patches.suse/Bluetooth-Call-iso_exit-on-module-unload.patch
    (git-fixes CVE-2024-50078 bsc#1232503).
  - Update
    patches.suse/Bluetooth-ISO-Fix-multiple-init-when-debugfs-is-disa.patch
    (git-fixes CVE-2024-50077 bsc#1232504).
  - Update
    patches.suse/Bluetooth-RFCOMM-FIX-possible-deadlock-in-rfcomm_sk_.patch
    (git-fixes CVE-2024-50044 bsc#1231904).
  - Update
    patches.suse/IB-core-Fix-ib_cache_setup_one-error-flow-cleanup.patch
    (git-fixes CVE-2024-47693 bsc#1232013).
  - Update
    patches.suse/IB-core-Implement-a-limit-on-UMAD-receive-List.patch
    (bsc#1228743 CVE-2024-42145 bsc#1223384).
  - Update
    patches.suse/Input-adp5589-keys-fix-NULL-pointer-dereference.patch
    (git-fixes CVE-2024-49871 bsc#1232287).
  - Update
    patches.suse/KEYS-prevent-NULL-pointer-dereference-in-find_asymme.patch
    (git-fixes CVE-2024-47743 bsc#1232129).
  - Update
    patches.suse/KVM-Use-dedicated-mutex-to-protect-kvm_usage_count-t.patch
    (git-fixes CVE-2024-47744 bsc#1232132).
  - Update
    patches.suse/PCI-keystone-Fix-if-statement-expression-in-ks_pcie_.patch
    (git-fixes CVE-2024-47756 bsc#1232185).
  - Update
    patches.suse/PCI-kirin-Fix-buffer-overflow-in-kirin_pcie_parse_po.patch
    (git-fixes CVE-2024-47751 bsc#1232127).
  - Update
    patches.suse/RDMA-cxgb4-Added-NULL-check-for-lookup_atid.patch
    (git-fixes CVE-2024-47749 bsc#1232180).
  - Update
    patches.suse/RDMA-hns-Fix-Use-After-Free-of-rsv_qp-on-HIP08.patch
    (git-fixes CVE-2024-47750 bsc#1232182).
  - Update
    patches.suse/RDMA-hns-Fix-spin_unlock_irqrestore-called-with-IRQs.patch
    (git-fixes CVE-2024-47735 bsc#1232111).
  - Update
    patches.suse/RDMA-iwcm-Fix-WARNING-at_kernel-workqueue.c-check_fl.patch
    (git-fixes CVE-2024-47696 bsc#1231864).
  - Update
    patches.suse/RDMA-rtrs-clt-Reset-cid-to-con_num-1-to-stay-in-boun.patch
    (git-fixes CVE-2024-47695 bsc#1231931).
  - Update
    patches.suse/RDMA-rtrs-srv-Avoid-null-pointer-deref-during-path-e.patch
    (git-fixes CVE-2024-50062 bsc#1232232).
  - Update
    patches.suse/aoe-fix-the-potential-use-after-free-problem-in-more.patch
    (bsc#1218562 CVE-2023-6270 CVE-2024-49982 bsc#1232097).
  - Update
    patches.suse/bpf-Fail-verification-for-sign-extension-of-packet-d.patch
    (git-fixes CVE-2024-47702 bsc#1231924).
  - Update
    patches.suse/bpf-Fix-helper-writes-to-read-only-maps.patch
    (git-fixes CVE-2024-49861 bsc#1232254).
  - Update
    patches.suse/bpf-Fix-use-after-free-in-bpf_uprobe_multi_link_attach.patch
    (git-fixes CVE-2024-47675 bsc#1231926).
  - Update
    patches.suse/bpf-Zero-former-ARG_PTR_TO_-LONG-INT-args-in-case-of.patch
    (git-fixes CVE-2024-47728 bsc#1232076).
  - Update
    patches.suse/bpf-correctly-handle-malformed-BPF_CORE_TYPE_ID_LOCA.patch
    (git-fixes CVE-2024-49850 bsc#1232189).
  - Update
    patches.suse/cachefiles-fix-dentry-leak-in-cachefiles_open_file.patch
    (bsc#1231183 CVE-2024-49870 bsc#1232279).
  - Update
    patches.suse/can-bcm-Clear-bo-bcm_proc_read-after-remove_proc_ent.patch
    (git-fixes CVE-2024-47709 bsc#1232048).
  - Update
    patches.suse/crypto-iaa-Fix-potential-use-after-free-bug.patch
    (git-fixes CVE-2024-47732 bsc#1232109).
  - Update
    patches.suse/cxl-pci-Fix-disabling-memory-if-DVSEC-CXL-Range-does.patch
    (git-fixes CVE-2024-26761 bsc#1230375).
  - Update
    patches.suse/driver-core-Fix-a-potential-null-ptr-deref-in-module.patch
    (git-fixes CVE-2024-47688 bsc#1232009).
  - Update
    patches.suse/driver-core-bus-Fix-double-free-in-driver-API-bus_re.patch
    (stable-fixes CVE-2024-50055 bsc#1232329).
  - Update
    patches.suse/drivers-media-dvb-frontends-rtl2830-fix-an-out-of-bo.patch
    (git-fixes CVE-2024-47697 bsc#1231858).
  - Update
    patches.suse/drivers-media-dvb-frontends-rtl2832-fix-an-out-of-bo.patch
    (git-fixes CVE-2024-47698 bsc#1231859).
  - Update
    patches.suse/drm-amd-display-Add-null-check-for-set_output_gamma-.patch
    (git-fixes CVE-2024-47720 bsc#1232043).
  - Update
    patches.suse/drm-amd-display-Check-null-pointer-before-dereferenc.patch
    (stable-fixes CVE-2024-50049 bsc#1232309).
  - Update
    patches.suse/drm-amd-display-fixed-integer-types-and-null-check-l.patch
    (git-fixes CVE-2024-26767 bsc#1230339).
  - Update
    patches.suse/drm-omapdrm-Add-missing-check-for-alloc_ordered_work.patch
    (git-fixes CVE-2024-49879 bsc#1232349).
  - Update
    patches.suse/drm-v3d-Stop-the-active-perfmon-before-being-destroy.patch
    (git-fixes CVE-2024-50031 bsc#1231947).
  - Update
    patches.suse/efistub-tpm-Use-ACPI-reclaim-memory-for-event-log-to.patch
    (stable-fixes CVE-2024-49858 bsc#1232251).
  - Update
    patches.suse/ep93xx-clock-Fix-off-by-one-in-ep93xx_div_recalc_rat.patch
    (git-fixes CVE-2024-47686 bsc#1232000).
  - Update
    patches.suse/exfat-fix-memory-leak-in-exfat_load_bitmap.patch
    (git-fixes CVE-2024-50013 bsc#1232080).
  - Update
    patches.suse/fbcon-Fix-a-NULL-pointer-dereference-issue-in-fbcon_.patch
    (stable-fixes CVE-2024-50048 bsc#1232310).
  - Update
    patches.suse/firmware-arm_scmi-Fix-double-free-in-OPTEE-transport.patch
    (git-fixes CVE-2024-49853 bsc#1232192).
  - Update patches.suse/firmware_loader-Block-path-traversal.patch
    (git-fixes CVE-2024-47742 bsc#1232126).
  - Update
    patches.suse/i2c-stm32f7-Do-not-prepare-unprepare-clock-during-ru.patch
    (git-fixes CVE-2024-49985 bsc#1232094).
  - Update
    patches.suse/i3c-master-cdns-Fix-use-after-free-vulnerability-in-.patch
    (stable-fixes CVE-2024-50061 bsc#1232263).
  - Update
    patches.suse/i3c-master-svc-Fix-use-after-free-vulnerability-in-s.patch
    (git-fixes CVE-2024-49874 bsc#1232295).
  - Update
    patches.suse/i40e-Fix-XDP-program-unloading-while-removing-the-dr.patch
    (git-fixes CVE-2024-41047 bsc#1228537).
  - Update
    patches.suse/idpf-fix-UAFs-when-destroying-the-queues.patch
    (git-fixes CVE-2024-44932 bsc#1229808).
  - Update
    patches.suse/idpf-fix-memory-leaks-and-crashes-while-performing-a.patch
    (git-fixes CVE-2024-44964 bsc#1230220).
  - Update
    patches.suse/iommufd-Protect-against-overflow-of-ALIGN-during-iov.patch
    (git-fixes CVE-2024-47719 bsc#1231865).
  - Update
    patches.suse/jffs2-prevent-xattr-node-from-overflowing-the-eraseblock.patch
    (git-fixes CVE-2024-38599 bsc#1226848 bsc#1223384).
  - Update patches.suse/jfs-Fix-uaf-in-dbFreeBits.patch (git-fixes
    CVE-2024-49903 bsc#1232362).
  - Update
    patches.suse/jfs-Fix-uninit-value-access-of-new_ea-in-ea_buffer.patch
    (git-fixes CVE-2024-49900 bsc#1232359).
  - Update
    patches.suse/jfs-check-if-leafidx-greater-than-num-leaves-per-dmap-tree.patch
    (git-fixes CVE-2024-49902 bsc#1232378).
  - Update
    patches.suse/jfs-fix-out-of-bounds-in-dbNextAG-and-diAlloc.patch
    (git-fixes CVE-2024-47723 bsc#1232050).
  - Update
    patches.suse/mailbox-bcm2835-Fix-timeout-during-suspend-mode.patch
    (git-fixes CVE-2024-49963 bsc#1232147).
  - Update
    patches.suse/md-Don-t-ignore-suspended-array-in-md_check_recovery-1baa.patch
    (bsc#1219596 CVE-2024-26758 bsc#1230341).
  - Update patches.suse/media-edia-dvbdev-fix-a-use-after-free.patch
    (git-fixes CVE-2024-27043 bsc#1223824 bsc#1218562).
  - Update
    patches.suse/media-i2c-ar0521-Use-cansleep-version-of-gpiod_set_v.patch
    (git-fixes CVE-2024-49961 bsc#1232148).
  - Update
    patches.suse/media-venus-fix-use-after-free-bug-in-venus_remove-d.patch
    (git-fixes CVE-2024-49981 bsc#1232098).
  - Update
    patches.suse/nbd-fix-race-between-timeout-and-normal-completion.patch
    (bsc#1230918 CVE-2024-49855 bsc#1232195).
  - Update
    patches.suse/net-phy-Remove-LED-entry-from-LEDs-list-on-unregiste.patch
    (git-fixes CVE-2024-50023 bsc#1231955).
  - Update
    patches.suse/net-test-for-not-too-small-csum_start-in-virtio_net_.patch
    (git-fixes CVE-2024-49947 bsc#1232162).
  - Update
    patches.suse/nfsd-call-cache_put-if-xdr_reserve_space-returns-NULL.patch
    (git-fixes CVE-2024-47737 bsc#1232056).
  - Update
    patches.suse/nfsd-map-the-EBADMSG-to-nfserr_io-to-avoid-warning.patch
    (git-fixes CVE-2024-49875 bsc#1232333).
  - Update
    patches.suse/nilfs2-fix-potential-null-ptr-deref-in-nilfs_btree_insert.patch
    (git-fixes CVE-2024-47699 bsc#1231916).
  - Update
    patches.suse/nilfs2-fix-potential-oob-read-in-nilfs_btree_check_delete.patch
    (git-fixes CVE-2024-47757 bsc#1232187).
  - Update
    patches.suse/nouveau-dmem-handle-kcalloc-allocation-failure.patch
    (git-fixes CVE-2024-26943 bsc#1230527).
  - Update
    patches.suse/ocfs2-cancel-dqi_sync_work-before-freeing-oinfo.patch
    (git-fixes CVE-2024-49966 bsc#1232141).
  - Update
    patches.suse/ocfs2-fix-null-ptr-deref-when-journal-load-failed.patch
    (git-fixes CVE-2024-49957 bsc#1232152).
  - Update
    patches.suse/ocfs2-fix-possible-null-ptr-deref-in-ocfs2_set_buffer_uptodate.patch
    (git-fixes CVE-2024-49877 bsc#1232339).
  - Update
    patches.suse/ocfs2-remove-unreasonable-unlock-in-ocfs2_read_blocks.patch
    (git-fixes CVE-2024-49965 bsc#1232142).
  - Update
    patches.suse/parport-Proper-fix-for-array-out-of-bounds-access.patch
    (git-fixes CVE-2024-50074 bsc#1232507).
  - Update
    patches.suse/pinctrl-apple-check-devm_kasprintf-returned-value.patch
    (git-fixes CVE-2024-50069 bsc#1232511).
  - Update
    patches.suse/platform-x86-ISST-Fix-the-KASAN-report-slab-out-of-b.patch
    (git-fixes CVE-2024-49886 bsc#1232196).
  - Update
    patches.suse/powercap-intel_rapl-Fix-off-by-one-in-get_rpi.patch
    (git-fixes CVE-2024-49862 bsc#1231871).
  - Update
    patches.suse/resource-fix-region_intersects-vs-add_memory_driver_.patch
    (git-fixes CVE-2024-49878 bsc#1232340).
  - Update
    patches.suse/scsi-fnic-Move-flush_work-initialization-out-of-if-b.patch
    (bsc#1230055 CVE-2024-50025 bsc#1231953).
  - Update
    patches.suse/scsi-lpfc-validate-hdwq-pointers-before-dereferencing-in.patch
    (bsc#1229429 jsc#PED-9899 CVE-2024-49891 bsc#1232218).
  - Update
    patches.suse/scsi-sd-Fix-off-by-one-error-in-sd_read_block_charac.patch
    (bsc#1223848 CVE-2024-47682 bsc#1231856).
  - Update
    patches.suse/serial-protect-uart_port_dtr_rts-in-uart_shutdown-to.patch
    (stable-fixes CVE-2024-50058 bsc#1232285).
  - Update
    patches.suse/tpm-Clean-up-TPM-space-after-command-failure.patch
    (git-fixes CVE-2024-49851 bsc#1232134).
  - Update
    patches.suse/tty-n_gsm-Fix-use-after-free-in-gsm_cleanup_mux.patch
    (stable-fixes CVE-2024-50073 bsc#1232520).
  - Update
    patches.suse/vhost-scsi-null-ptr-dereference-in-vhost_scsi_get_re.patch
    (git-fixes CVE-2024-49863 bsc#1232255).
  - Update
    patches.suse/vhost_vdpa-assign-irq-bypass-producer-token-correctl.patch
    (git-fixes CVE-2024-47748 bsc#1232174).
  - Update patches.suse/vmxnet3-Fix-missing-reserved-tailroom.patch
    (bsc#1226498 CVE-2024-27026 bsc#1223700).
  - Update
    patches.suse/vt-prevent-kernel-infoleak-in-con_font_get.patch
    (git-fixes CVE-2024-50076 bsc#1232505).
  - Update
    patches.suse/wifi-ath11k-fix-array-out-of-bound-access-in-SoC-sta.patch
    (stable-fixes CVE-2024-49930 bsc#1232260).
  - Update
    patches.suse/wifi-ath12k-fix-array-out-of-bound-access-in-SoC-sta.patch
    (stable-fixes CVE-2024-49931 bsc#1232275).
  - Update
    patches.suse/wifi-ath9k_htc-Use-__skb_set_length-for-resetting-ur.patch
    (stable-fixes CVE-2024-49938 bsc#1232552).
  - Update
    patches.suse/wifi-cfg80211-Set-correct-chandef-when-starting-CAC.patch
    (stable-fixes CVE-2024-49937 bsc#1232427).
  - Update
    patches.suse/wifi-iwlwifi-mvm-avoid-NULL-pointer-dereference.patch
    (stable-fixes CVE-2024-49929 bsc#1232253).
  - Update
    patches.suse/wifi-mac80211-don-t-use-rate-mask-for-offchannel-TX-.patch
    (git-fixes CVE-2024-47738 bsc#1232114).
  - Update
    patches.suse/wifi-mac80211-use-two-phase-skb-reclamation-in-ieee8.patch
    (git-fixes CVE-2024-47713 bsc#1232016).
  - Update
    patches.suse/wifi-mt76-mt7915-fix-oops-on-non-dbdc-mt7986.patch
    (git-fixes CVE-2024-47715 bsc#1231860).
  - Update
    patches.suse/wifi-mt76-mt7996-fix-NULL-pointer-dereference-in-mt7.patch
    (git-fixes CVE-2024-47681 bsc#1231855).
  - Update
    patches.suse/wifi-mt76-mt7996-use-hweight16-to-get-correct-tx-ant.patch
    (git-fixes CVE-2024-47714 bsc#1232018).
  - Update
    patches.suse/wifi-mwifiex-Fix-memcpy-field-spanning-write-warning.patch
    (stable-fixes CVE-2024-50008 bsc#1232317).
  - Update
    patches.suse/wifi-rtw88-always-wait-for-both-firmware-loading-att.patch
    (git-fixes CVE-2024-47718 bsc#1232015).
  - Update
    patches.suse/wifi-rtw89-avoid-reading-out-of-bounds-when-loading-.patch
    (stable-fixes CVE-2024-49928 bsc#1232250).
  - Update
    patches.suse/wifi-rtw89-avoid-to-add-interface-to-list-twice-when.patch
    (stable-fixes CVE-2024-49939 bsc#1232381).
  - Update
    patches.suse/wifi-wilc1000-fix-potential-RCU-dereference-issue-in.patch
    (git-fixes CVE-2024-47712 bsc#1232017).
  - Update
    patches.suse/xhci-tegra-fix-checked-USB2-port-number.patch
    (git-fixes CVE-2024-50075 bsc#1232506).
  - commit a270265


author: neilb@suse.de
changelog:
  - NFSv3: only use NFS timeout for MOUNT when protocols are
    compatible (bsc#1231016).
  - commit ddbeb4f


author: neilb@suse.de
changelog:
  - nfsd: cancel nfsd_shrinker_work using sync mode in
    nfs4_state_shutdown_net (git-fixes).
  - commit ed2b339


author: jslaby@suse.cz
changelog:
  - Refresh
    patches.suse/PCI-Fix-pci_enable_acs-support-for-the-ACS-quirks.patch.
    Update upstream status.
  - commit f283868


author: tiwai@suse.de
changelog:
  - phy: tegra: xusb: Add error pointer check in xusb.c (git-fixes).
  - phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL
    lock check (git-fixes).
  - phy: ti: phy-j721e-wiz: fix usxgmii configuration (git-fixes).
  - phy: qcom: qmp-combo: move driver data initialisation earlier
    (git-fixes).
  - phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
    (git-fixes).
  - dmaengine: ti: k3-udma: Set EOP for all TRs in cyclic BCDMA
    transfer (git-fixes).
  - dmaengine: sh: rz-dmac: handle configs where one address is zero
    (git-fixes).
  - Revert "driver core: Fix uevent_show() vs driver detach race"
    (git-fixes).
  - usb: phy: Fix API devm_usb_put_phy() can not release the phy
    (git-fixes).
  - usb: typec: fix unreleased fwnode_handle in
    typec_port_register_altmodes() (git-fixes).
  - xhci: Fix Link TRB DMA in command ring stopped completion event
    (git-fixes).
  - xhci: Use pm_runtime_get to prevent RPM on unsupported systems
    (git-fixes).
  - usbip: tools: Fix detach_port() invalid port error path
    (git-fixes).
  - iio: adc: ad7124: fix division by zero in
    ad7124_set_channel_odr() (git-fixes).
  - staging: iio: frequency: ad9832: fix division by zero in
    ad9832_calc_freqreg() (git-fixes).
  - iio: light: veml6030: fix microlux value calculation
    (git-fixes).
  - iio: gts-helper: Fix memory leaks for the error path of
    iio_gts_build_avail_scale_table() (git-fixes).
  - iio: gts-helper: Fix memory leaks in
    iio_gts_build_avail_scale_table() (git-fixes).
  - mei: use kvmalloc for read buffer (git-fixes).
  - Input: edt-ft5x06 - fix regmap leak when probe fails
    (git-fixes).
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on
    32-bit host (git-fixes).
  - modpost: fix acpi MODULE_DEVICE_TABLE built with mismatched
    endianness (git-fixes).
  - sumversion: Fix a memory leak in get_src_version() (git-fixes).
  - genirq/msi: Fix off-by-one error in msi_domain_alloc()
    (git-fixes).
  - commit df7fb9d


author: vbabka@suse.cz
changelog:
  - mm: split critical region in remap_file_pages() and invoke
    LSMs in between (CVE-2024-47745 bsc#1232135 git-fix).
  - commit 8228ecb


author: dwagner@suse.de
changelog:
  - nvme: re-fix error-handling for io_uring nvme-passthrough
    (git-fixes).
  - nvmet-auth: assign dh_key to NULL after kfree_sensitive
    (git-fixes).
  - nvme-pci: fix race condition between reset and
    nvme_dev_disable() (git-fixes).
  - nvme: null terminate nvme_tls_attrs (git-fixes).
  - nvme-pci: set doorbell config before unquiescing (git-fixes).
  - commit d7598b1


author: tiwai@suse.de
changelog:
  - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
    (CVE-2024-49991 bsc#1232282).
  - commit 1b15839


author: mfranc@suse.cz
changelog:
  - net/xen-netback: prevent UAF in xenvif_flush_hash()
    (CVE-2024-49936 bsc#1232424).
  - commit ae05dab


author: dwagner@suse.de
changelog:
  - scsi: lpfc: Update lpfc version to 14.4.0.5 (bsc#1232757).
  - scsi: lpfc: Support loopback tests with VMID enabled
    (bsc#1232757).
  - scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR
    to KERN_WARNING (bsc#1232757).
  - scsi: lpfc: Ensure DA_ID handling completion before deleting
    an NPIV instance (bsc#1232757).
  - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo
    handler (bsc#1232757).
  - scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs
    (bsc#1232757 bsc#1228119).
  - scsi: lpfc: Update phba link state conditional before sending
    CMF_SYNC_WQE (bsc#1232757).
  - scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in
    lpfc_els_flush_cmd() (bsc#1232757).
  - scsi: lpfc: Remove trailing space after \n newline
    (bsc#1232757).
  - commit 3cf27b4


author: tiwai@suse.de
changelog:
  - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
    (bsc#1228269).
  - commit 13ce240


author: dsterba@suse.com
changelog:
  - Update references for patches.suse/tracing-timerlat-Fix-a-race-during-cpuhp-processing.patch (CVE-2024-49866 bsc#1232259 git-fixes)
  - commit d9311d0


author: tiwai@suse.de
changelog:
  - rpmsg: glink: Handle rejected intent request better (git-fixes).
  - firmware: arm_scmi: Fix slab-use-after-free in
    scmi_bus_notifier() (git-fixes).
  - commit 01fe6bf


author: shung-hsi.yu@suse.com
changelog:
  - selftests/bpf: Workaround strict bpf_lsm return value check
    (CVE-2024-47703 bsc#1231946).
  - selftests/bpf: Add verifier tests for bpf lsm (CVE-2024-47703
    bsc#1231946).
  - selftests/bpf: Add return value checks for failed tests
    (CVE-2024-47703 bsc#1231946).
  - bpf: Fix compare error in function retval_range_within
    (CVE-2024-47703 bsc#1231946).
  - bpf, lsm: Add check for BPF LSM return value (CVE-2024-47703
    bsc#1231946).
  - Refresh patches.suse/bpf-Fail-verification-for-sign-extension-of-packet-d.patch
  - Refresh patches.kabi/bpf-struct-bpf_insn_access_aux-workaround.patch
  - selftests/bpf: fix timer/test_bad_ret subtest on
    test_progs-cpuv4 flavor (CVE-2024-47703 bsc#1231946).
  - commit a0c7d4f


author: jwiesner@suse.de
changelog:
  - Update config files.
    c37e85c135ce ("clocksource: Loosen clocksource watchdog constraints")
    introduced a new default for the time skew measured by the clocksource
    watchdog. The value was raised from 100 to 125 microseconds. Reflect this
    change in the kernel config. This is an x86_64 option only.
  - commit 14c1b2d


author: mfranc@suse.cz
changelog:
  - scsi: elx: libefc: Fix potential use after free in
    efc_nport_vport_del() (CVE-2024-49852 bsc#1232819).
  - commit 51395e6


author: oneukum@suse.com
changelog:
  - media: core: v4l2-ioctl: check if ioctl is known to avoid NULL
    name (git-fixes).
  - commit c862b93


author: krisman@suse.de
changelog:
  - blk-mq: setup queue ->tag_set before initializing hctx
    (CVE-2024-50081 bsc#1232501).
  - commit 87d4a82


author: krisman@suse.de
changelog:
  - ublk: don't allow user copy for unprivileged device
    (CVE-2024-50080 bsc#1232502).
  - commit 267c92f


author: jlee@suse.com
changelog:
  - fbdev: efifb: Register sysfs groups through driver core
    (bsc#1232224 CVE-2024-49925).
  - commit 4fd0365


author: mhocko@suse.com
changelog:
  - Update
    patches.suse/mm-mmap-no-need-to-call-khugepaged_enter_vma-for-sta.patch
    (jsc#PED-11442).
  - commit d087a3b


author: shung-hsi.yu@suse.com
changelog:
  - bpftool: Fix undefined behavior in qsort(NULL, 0,
    ...) (bsc#1232258 CVE-2024-49987).
  - commit 80f8e64


author: shung-hsi.yu@suse.com
changelog:
  - netfilter: bpf: must hold reference on net namespace
    (bsc#1232894 CVE-2024-50130).
  - commit 7d292ad


author: shung-hsi.yu@suse.com
changelog:
  - selftests/bpf: Add tests for sdiv/smod overflow cases
    (CVE-2024-49888 bsc#1232208).
  - commit b193d4f


author: tiwai@suse.de
changelog:
  - security/keys: fix slab-out-of-bounds in key_task_permission
    (git-fixes).
  - platform/x86/amd/pmc: Detect when STB is not available
    (git-fixes).
  - HID: core: zero-initialize the report buffer (git-fixes).
  - commit 277fa5f


author: jack@suse.cz
changelog:
  - ext4: avoid OOB when system.data xattr changes underneath the
    filesystem (bsc#1231920 CVE-2024-47701).
  - commit f292cb3


author: jack@suse.cz
changelog:
  - vfs: fix race between evice_inodes() and find_inode()&iput()
    (bsc#1231930 CVE-2024-47679).
  - commit dcf9f6e


author: jack@suse.cz
changelog:
  - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid
    double-free (bsc#1232096 CVE-2024-49983).
  - commit 4a6ac53


author: jack@suse.cz
changelog:
  - ext4: filesystems without casefold feature cannot be mounted
    with siphash (bsc#1232264 CVE-2024-49968).
  - commit 1907014


author: jack@suse.cz
changelog:
  - fs/inode: Prevent dump_mapping() accessing invalid
    dentry.d_name.name (bsc#1232387 CVE-2024-49934).
  - commit cf2a806


author: jack@suse.cz
changelog:
  - ext4: explicitly exit when ext4_find_inline_entry returns an
    error (bsc#1231920 CVE-2024-47701).
  - commit e600961


author: jack@suse.cz
changelog:
  - ext4: ext4_search_dir should return a proper error (bsc#1231920
    CVE-2024-47701).
  - commit 7c02130


author: sjaeckel@suse.de
changelog:
  - mptcp: fix double-free on socket dismantle (CVE-2024-26782
    bsc#1222590).
  - mptcp: deal with large GSO size (CVE-2023-52778 bsc#1224948).
  - commit 86ee052


author: tiwai@suse.de
changelog:
  - thermal: intel: int340x: processor: Fix warning during module
    unload (git-fixes).
  - commit 2c3d870


author: dsterba@suse.com
changelog:
  - drm/amd/display: Fix system hang while resume with TBT monitor (CVE-2024-50003 bsc#1232385)
  - commit 24ceb7a


author: dsterba@suse.com
changelog:
  - drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35 (CVE-2024-50004 bsc#1232396)
  - commit d5739f8


author: dsterba@suse.com
changelog:
  - drm/amd/display: fix double free issue during amdgpu module unload (CVE-2024-49989 bsc#1232483)
  - commit 6511376


author: dsterba@suse.com
changelog:
  - net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test() (CVE-2024-50084 bsc#1232494)
  - commit e53e21a


author: dsterba@suse.com
changelog:
  - btrfs: fix uninitialized pointer free in add_inode_ref() (CVE-2024-50088 bsc#1232498)
  - commit 75b1127


author: dsterba@suse.com
changelog:
  - btrfs: fix uninitialized pointer free on read_alloc_one_name() error (CVE-2024-50087 bsc#1232499)
  - commit a3c097a


author: dsterba@suse.com
changelog:
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (CVE-2024-50082 bsc#1232500)
  - commit 6a67bac


author: tiwai@suse.de
changelog:
  - can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
    (git-fixes).
  - can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing
    configuration when switching CAN modes (git-fixes).
  - can: c_can: fix {rx,tx}_errors statistics (git-fixes).
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode
    (git-fixes).
  - commit c5fa961


author: jack@suse.cz
changelog:
  - ext4: fix error message when rejecting the default hash
    (bsc#1232264 CVE-2024-49968).
  - commit 5d137c7


author: ggherdovich@suse.cz
changelog:
  - cpufreq: amd-pstate: add check for cpufreq_cpu_get's return
    value (CVE-2024-50009 bsc#1232318).
  - commit 15f7e86


author: tiwai@suse.de
changelog:
  - drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (git-fixes).
  - ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
    (git-fixes).
  - ASoC: stm32: spdifrx: fix dma channel release in
    stm32_spdifrx_remove (git-fixes).
  - ALSA: firewire-lib: fix return value on fail in
    amdtp_tscm_init() (git-fixes).
  - media: pulse8-cec: fix data timestamp at pulse8_setup()
    (git-fixes).
  - media: stb0899_algo: initialize cfr before using it (git-fixes).
  - media: adv7604: prevent underflow condition when reporting
    colorspace (git-fixes).
  - media: cx24116: prevent overflows on SNR calculus (git-fixes).
  - media: ar0521: don't overflow when checking PLL values
    (git-fixes).
  - media: s5p-jpeg: prevent buffer overflows (git-fixes).
  - media: dvb_frontend: don't play tricks with underflow values
    (git-fixes).
  - media: dvbdev: prevent the risk of out of memory access
    (git-fixes).
  - media: v4l2-tpg: prevent the risk of a division by zero
    (git-fixes).
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
    (git-fixes).
  - thunderbolt: Honor TMU requirements in the domain when setting
    TMU mode (stable-fixes).
  - wifi: iwlegacy: Clear stale interrupts before resuming device
    (stable-fixes).
  - USB: gadget: dummy-hcd: Fix "task hung" problem (git-fixes).
  - usb: gadget: dummy_hcd: execute hrtimer callback in softirq
    context (git-fixes).
  - usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
    (stable-fixes).
  - usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
    (stable-fixes).
  - commit c5281d0


author: tiwai@suse.de
changelog:
  - ASoC: stm: Prevent potential division by zero in
    stm32_sai_get_clk_div() (stable-fixes).
  - ASoC: stm: Prevent potential division by zero in
    stm32_sai_mclk_round_rate() (stable-fixes).
  - ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad
    E14 Gen 6 (stable-fixes).
  - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
    (stable-fixes).
  - ASoC: tas2781: Add new driver version for tas2563 & tas2781
    qfn chip (stable-fixes).
  - commit 1f9992e


author: tiwai@suse.de
changelog:
  - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE
    is not set (git-fixes).
  - USB: serial: io_edgeport: fix use after free in debug printk
    (git-fixes).
  - usb: typec: fix potential out of bounds in
    ucsi_ccg_update_set_new_cam_cmd() (git-fixes).
  - usb: musb: sunxi: Fix accessing an released usb phy (git-fixes).
  - commit d16f490


author: jack@suse.cz
changelog:
  - Revert "mm/writeback: fix possible divide-by-zero in
    wb_dirty_limits(), again" (CVE-2024-42102 bsc#1233132).
  - commit 696592c


author: tbogendoerfer@suse.de
changelog:
  - e1000e: Remove Meteor Lake SMBUS workarounds (git-fixes).
  - i40e: fix race condition by adding filter's intermediate sync
    state (git-fixes).
  - commit f4e661d


author: tbogendoerfer@suse.de
changelog:
  - net/ncsi: Disable the ncsi work before freeing the associated
    structure (CVE-2024-49945 bsc#1232165).
  - commit 75d875c


author: ailiop@suse.com
changelog:
  - nilfs2: fix kernel bug due to missing clearing of checked flag
    (bsc#1233206 CVE-2024-50230).
  - commit ba9ac5c


author: rgoldwyn@suse.com
changelog:
  - fsdax: dax_unshare_iter needs to copy entire blocks
    (bsc#1233226, CVE-2024-50250).
  - fsdax: remove zeroing code from dax_unshare_iter  (bsc#1233226,
    CVE-2024-50250).
  - commit 94457ab


author: sjaeckel@suse.de
changelog:
  - net: sched: fix use-after-free in taprio_change()
    (CVE-2024-50127 bsc#1232907).
  - commit 8d80c7f


author: sjaeckel@suse.de
changelog:
  - Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
    (CVE-2024-36968 bsc#1226130).
  - Refresh
    patches.suse/Bluetooth-Ignore-too-large-handle-values-in-BIG.patch.
  - Refresh patches.suse/Bluetooth-L2CAP-Fix-deadlock.patch.
  - Refresh
    patches.suse/Bluetooth-btnxpuart-Enable-Power-Save-feature-on-sta.patch.
  - Refresh
    patches.suse/bluetooth-hci-disallow-setting-handle-bigger-than-HC.patch.
  - Refresh
    patches.suse/bluetooth-l2cap-sync-sock-recv-cb-and-release.patch.
  - commit c95a285


author: vkarasulli@suse.de
changelog:
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
    (CVE-2024-50115 bsc#1232919).
  - commit b8f7c4d


author: tiwai@suse.de
changelog:
  - ASoC: SOF: topology: Parse DAI type token for dspless mode
    (bsc#1233305).
  - ASoC: SOF: topology: dynamically allocate and store DAI
    widget->private (bsc#1233305).
  - ASoC: SOF: ipc4-topology: change chain_dma handling in
    dai_config (bsc#1233305).
  - ASoC: SOF: ipc4-topology: set config_length based on
    device_count (bsc#1233305).
  - ASoC: SOF: Rename amd_bt sof_dai_type (bsc#1233305).
  - ASoC: SOF: Add i2s bt dai configuration support for AMD
    platforms (bsc#1233305).
  - ASoC: SOF: Refactor sof_i2s_tokens reading to update acpbt dai
    (bsc#1233305).
  - ASoC: SOF: IPC4: synchronize fw_config_params with fw
    definitions (bsc#1233305).
  - ASoC: SOF: Wire up buffer flags (bsc#1233305).
  - ASoC: SOF: add alignment for topology header file struct
    definition (bsc#1233305).
  - ASoC: SOF: align topology header file with sof topology header
    (bsc#1233305).
  - ASoC: SOF: ipc4-topology: Add module ID print during module
    set up (bsc#1233305).
  - ASoC: SOF: ipc4: Add data struct for module notification
    message from firmware (bsc#1233305).
  - ASoC: SOF: ipc4-topology: Helper to find an swidget by
    module/instance id (bsc#1233305).
  - ASoC: SOF: Add support for configuring PDM interface from
    topology (bsc#1233305).
  - ASoC: SOF: IPC4: get pipeline priority from topology
    (bsc#1233305).
  - ASoC: SOF: ipc4-mtrace: move debug slot related definitions
    to header.h (bsc#1233305).
  - ASoC: SOF: ipc4-control: Add support for ALSA enum control
    (bsc#1233305).
  - ASoC: SOF: ipc4-control: Add support for ALSA switch control
    (bsc#1233305).
  - ASoC: SOF: ipc4-topology: export
    sof_ipc4_copier_is_single_format (bsc#1233305).
  - ASoC: SOF: ipc4: Add new message type:
    SOF_IPC4_GLB_LOAD_LIBRARY_PREPARE (bsc#1233305).
  - ASoC: SOF: ipc4-topology: Add deep buffer size to debug prints
    (bsc#1233305).
  - ASoC: SOF: Deprecate invalid enums in IPC3 (bsc#1233305).
  - commit ccbfc43


author: tiwai@suse.de
changelog:
  - ASoC: SOF: ipc4-topology: Add definition for generic switch/enum
    control (bsc#1233305).
  - Refresh
    patches.suse/ASoC-SOF-ipc4-topology-Correct-data-structures-for-t-e238b68.patch.
  - commit 6d4ee28


author: tbogendoerfer@suse.de
changelog:
  - macsec: Fix use-after-free while sending the offloading packet
    (CVE-2024-50261 bsc#1233253).
  - commit 493a21e


author: sjaeckel@suse.de
changelog:
  - kABI fix for - Bluetooth: L2CAP: Fix
    div-by-zero in l2cap_le_flowctl_init()
    (CVE-2024-36968 bsc#1226130). - Refresh
    patches.suse/Bluetooth-Ignore-too-large-handle-values-in-BIG.patch.
  - Refresh
    patches.suse/Bluetooth-L2CAP-Fix-deadlock.patch. - Refresh
    patches.suse/Bluetooth-btnxpuart-Enable-Power-Save-feature-on-sta.patch.
  - Refresh
    patches.suse/bluetooth-hci-disallow-setting-handle-bigger-than-HC.patch.
  - Refresh
    patches.suse/bluetooth-l2cap-sync-sock-recv-cb-and-release.patch.
  - commit d93ac77


author: shung-hsi.yu@suse.com
changelog:
  - selftests/bpf: add stack access precision test (bsc#1232823
    CVE-2023-52920).
  - bpf: support non-r10 register spill/fill to/from stack in
    precision tracking (bsc#1232823 CVE-2023-52920).
  - Refresh patches.suse/bpf-Fix-accesses-to-uninit-stack-slots.patch
  - Refresh patches.kabi/bpf-verifier-kABI-workarounds.patch
  - commit 2dc84ae


author: jslaby@suse.cz
changelog:
  - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
    (CVE-2024-50192 bsc#1233106).
  - kABI: Don't allow a VMOVP on a dying VPE (kabi CVE-2024-50192
    bsc#1233106).
  - irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack
    (git-fixes).
  - commit 9bd7834


author: jslaby@suse.cz
changelog:
  - irqchip/gic-v4: Correctly deal with set_affinity on
    lazily-mapped VPEs (CVE-2024-50192 bsc#1233106).
  - commit 4258dbe


author: mgorman@suse.de
changelog:
  - mm: shmem: fix data-race in shmem_getattr() (CVE-2024-50228,
    bsc#1233204, git fixes (mm/shmem)).
  - commit 89c94b7


author: krisman@suse.de
changelog:
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
    (git-fixes).
  - io_uring/sqpoll: close race on waiting for sqring entries
    (git-fixes).
  - commit 83eaece


author: tiwai@suse.de
changelog:
  - ASoC: SOF: ipc4-topology: Only handle dai_config with HW_PARAMS
    for ChainDMA (bsc#1233305).
  - commit 1b06409


author: shung-hsi.yu@suse.com
changelog:
  - Refresh patches.kabi/bpf-verifier-kABI-workarounds.patch (bsc#1233350)
    Correctly workaround kABI breakage that was introduced with fixes
    backported for bsc#1225903.
  - commit 52684a5


author: sjaeckel@suse.de
changelog:
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink()
    (CVE-2024-50154 bsc#1233070).
  - commit 43fc2d5


author: ptesarik@suse.com
changelog:
  - u64_stats: fix u64_stats_init() for lockdep when used repeatedly
    in one file (git-fixes).
  - commit 017d59a


author: jgross@suse.com
changelog:
  - KVM: SEV-ES: Fix svm_get_msr()/svm_set_msr() for KVM_SEV_ES_INIT
    guests (bsc#1232207).
  - commit 4b9eff5


author: jgross@suse.com
changelog:
  - virtio_pmem: Check device status before requesting flush
    (CVE-2024-50184 bsc#1233135).
  - commit 4e28ae6


author: sjaeckel@suse.de
changelog:
  - Rename to
    patches.kabi/kABI-fix-for-Bluetooth-L2CAP-Fix-div-by-zero-in-l2ca.patch.
    Fixes: d93ac77c0df4b8dfe469c26e60d4fb45fc305341
  - commit 1f6a42b


author: dsterba@suse.com
changelog:
  - Update references in patches.suse/ntfs3-Add-bounds-checking-to-mi_enum_attr.patch (CVE-2024-50248 bsc#1233219 bsc#1233207)
  - commit 56e1d55


author: jslaby@suse.cz
changelog:
  - Update
    patches.suse/ACPI-CPPC-Make-rmw_lock-a-raw_spin_lock.patch
    (git-fixes CVE-2024-50249 bsc#1233197).
  - Update
    patches.suse/ACPI-PRM-Find-EFI_MEMORY_RUNTIME-block-for-PRM-handl.patch
    (git-fixes CVE-2024-50141 bsc#1233065).
  - Update
    patches.suse/ALSA-firewire-lib-Avoid-division-by-zero-in-apply_co.patch
    (git-fixes CVE-2024-50205 bsc#1233293).
  - Update
    patches.suse/ALSA-hda-cs8409-Fix-possible-NULL-dereference.patch
    (git-fixes CVE-2024-50160 bsc#1233074).
  - Update
    patches.suse/ASoC-qcom-Fix-NULL-Dereference-in-asoc_qcom_lpass_cp.patch
    (git-fixes CVE-2024-50103 bsc#1232878).
  - Update
    patches.suse/Bluetooth-bnep-fix-wild-memory-access-in-proto_unreg.patch
    (git-fixes CVE-2024-50148 bsc#1233063).
  - Update
    patches.suse/Bluetooth-hci-fix-null-ptr-deref-in-hci_read_support.patch
    (git-fixes CVE-2024-50255 bsc#1233238).
  - Update
    patches.suse/HID-amd_sfh-Switch-to-device-managed-dmam_alloc_cohe.patch
    (git-fixes CVE-2024-50189 bsc#1233105).
  - Update
    patches.suse/RDMA-bnxt_re-Add-a-check-for-memory-allocation.patch
    (git-fixes CVE-2024-50209 bsc#1233114).
  - Update
    patches.suse/RDMA-bnxt_re-Avoid-CPU-lockups-due-fifo-occupancy-ch.patch
    (git-fixes CVE-2024-50157 bsc#1233032).
  - Update
    patches.suse/RDMA-bnxt_re-Fix-a-bug-while-setting-up-Level-2-PBL-.patch
    (git-fixes CVE-2024-50208 bsc#1233117).
  - Update
    patches.suse/RDMA-bnxt_re-Fix-a-possible-memory-leak.patch
    (git-fixes CVE-2024-50172 bsc#1233029).
  - Update patches.suse/RDMA-bnxt_re-Fix-out-of-bound-check.patch
    (git-fixes CVE-2024-50158 bsc#1233036).
  - Update
    patches.suse/RDMA-mad-Improve-handling-of-timed-out-WRs-of-mad-ag.patch
    (git-fixes CVE-2024-50095 bsc#1232873).
  - Update
    patches.suse/USB-gadget-dummy-hcd-Fix-task-hung-problem.patch
    (git-fixes CVE-2024-50100 bsc#1232876).
  - Update
    patches.suse/arm64-probes-Fix-uprobes-for-big-endian-kernels.patch
    (git-fixes CVE-2024-50194 bsc#1233111).
  - Update
    patches.suse/arm64-probes-Remove-broken-LDR-literal-uprobe-support.patch
    (git-fixes CVE-2024-50099 bsc#1232887).
  - Update
    patches.suse/ceph-remove-the-incorrect-Fw-reference-check-when-dir.patch
    (bsc#1231182 CVE-2024-50179 bsc#1233123).
  - Update
    patches.suse/clk-imx-Remove-CLK_SET_PARENT_GATE-for-DRAM-mux-for-.patch
    (stable-fixes CVE-2024-50181 bsc#1233127).
  - Update
    patches.suse/drm-amd-Guard-against-bad-data-for-ATIF-ACPI-method.patch
    (git-fixes CVE-2024-50117 bsc#1232897).
  - Update
    patches.suse/drm-amd-display-Disable-PSR-SU-on-Parade-08-01-TCON-.patch
    (stable-fixes CVE-2024-50108 bsc#1232884).
  - Update
    patches.suse/drm-amd-pm-Vangogh-Fix-kernel-memory-out-of-bounds-w.patch
    (git-fixes CVE-2024-50221 bsc#1233185).
  - Update
    patches.suse/drm-msm-Avoid-NULL-dereference-in-msm_disp_state_pri.patch
    (git-fixes CVE-2024-50156 bsc#1233073).
  - Update patches.suse/drm-radeon-Fix-encoder-possible_clones.patch
    (git-fixes CVE-2024-50201 bsc#1233104).
  - Update
    patches.suse/drm-vboxvideo-Replace-fake-VLA-at-end-of-vbva_mouse_.patch
    (stable-fixes CVE-2024-50134 bsc#1232890).
  - Update
    patches.suse/drm-vc4-Stop-the-active-perfmon-before-being-destroy.patch
    (git-fixes CVE-2024-50187 bsc#1233108).
  - Update
    patches.suse/ext4-fix-slab-use-after-free-in-ext4_split_extent_at.patch
    (bsc#1232201 CVE-2024-49884 bsc#1232198).
  - Update patches.suse/fbdev-sisfb-Fix-strbuf-array-overflow.patch
    (stable-fixes CVE-2024-50180 bsc#1233125).
  - Update
    patches.suse/firmware-arm_scmi-Fix-the-double-free-in-scmi_debugf.patch
    (git-fixes CVE-2024-50159 bsc#1233041).
  - Update
    patches.suse/iio-adc-ad7124-fix-division-by-zero-in-ad7124_set_ch.patch
    (git-fixes CVE-2024-50232 bsc#1233209).
  - Update
    patches.suse/iio-gts-helper-Fix-memory-leaks-in-iio_gts_build_ava.patch
    (git-fixes CVE-2024-50231 bsc#1233208).
  - Update
    patches.suse/iio-light-veml6030-fix-IIO-device-retrieval-from-emb.patch
    (git-fixes CVE-2024-50198 bsc#1233100).
  - Update
    patches.suse/iommu-vt-d-Fix-incorrect-pci_for_each_dma_alias-for-.patch
    (git-fixes CVE-2024-50101 bsc#1232869).
  - Update
    patches.suse/maple_tree-correct-tree-corruption-on-spanning-store.patch
    (git-fixes CVE-2024-50200 bsc#1233088).
  - Update
    patches.suse/media-qcom-camss-Remove-use_count-guard-in-stop_stre.patch
    (git-fixes CVE-2024-50175 bsc#1233092).
  - Update
    patches.suse/net-mlx5-Fix-command-bitmask-initialization.patch
    (git-fixes CVE-2024-50147 bsc#1233067).
  - Update
    patches.suse/net-mlx5-Unregister-notifier-on-eswitch-init-failure.patch
    (git-fixes CVE-2024-50136 bsc#1232914).
  - Update
    patches.suse/net-mlx5e-Don-t-call-cleanup-on-profile-rollback-fai.patch
    (git-fixes CVE-2024-50146 bsc#1233056).
  - Update
    patches.suse/net-phy-dp83869-fix-memory-corruption-when-enabling-.patch
    (git-fixes CVE-2024-50188 bsc#1233107).
  - Update
    patches.suse/netdevsim-use-cond_resched-in-nsim_dev_trap_report_w.patch
    (git-fixes CVE-2024-50155 bsc#1233035).
  - Update
    patches.suse/nfsd-cancel-nfsd_shrinker_work-using-sync-mode-in-nf.patch
    (git-fixes CVE-2024-50121 bsc#1232925).
  - Update
    patches.suse/nilfs2-fix-kernel-bug-due-to-missing-clearing-of-buffer-delay-flag.patch
    (git-fixes CVE-2024-50116 bsc#1232892).
  - Update
    patches.suse/nilfs2-fix-potential-deadlock-with-newly-created-symlinks.patch
    (git-fixes CVE-2024-50229 bsc#1233205).
  - Update
    patches.suse/nouveau-dmem-Fix-vulnerability-in-migrate_to_ram-upo.patch
    (git-fixes CVE-2024-50096 bsc#1232870).
  - Update
    patches.suse/nvme-pci-fix-race-condition-between-reset-and-nvme_d.patch
    (git-fixes CVE-2024-50135 bsc#1232888).
  - Update
    patches.suse/nvmet-auth-assign-dh_key-to-NULL-after-kfree_sensiti.patch
    (git-fixes CVE-2024-50215 bsc#1233189).
  - Update
    patches.suse/ocfs2-pass-u64-to-ocfs2_truncate_inline-maybe-overflow.patch
    (git-fixes CVE-2024-50218 bsc#1233191).
  - Update
    patches.suse/phy-qcom-qmp-usb-fix-NULL-deref-on-runtime-suspend.patch
    (git-fixes CVE-2024-50240 bsc#1233217).
  - Update
    patches.suse/pinctrl-ocelot-fix-system-hang-on-level-based-interr.patch
    (stable-fixes CVE-2024-50196 bsc#1233113).
  - Update
    patches.suse/remoteproc-k3-r5-Fix-error-handling-when-power-up-fa.patch
    (git-fixes CVE-2024-50176 bsc#1233091).
  - Update
    patches.suse/scsi-lpfc-Ensure-DA_ID-handling-completion-before-de.patch
    (bsc#1232757 CVE-2024-50183 bsc#1233130).
  - Update
    patches.suse/spi-spi-fsl-dspi-Fix-crash-when-not-using-GPIO-chip-.patch
    (git-fixes CVE-2024-50224 bsc#1233188).
  - Update
    patches.suse/staging-iio-frequency-ad9832-fix-division-by-zero-in.patch
    (git-fixes CVE-2024-50233 bsc#1233210).
  - Update
    patches.suse/thermal-intel-int340x-processor-Fix-warning-during-m.patch
    (git-fixes CVE-2024-50093 bsc#1232877).
  - Update
    patches.suse/tracing-Consider-the-NULL-character-when-validating-the-event-length.patch
    (git-fixes CVE-2024-50131 bsc#1232896).
  - Update
    patches.suse/tracing-timerlat-Drop-interface_lock-in-stop_kthread.patch
    (git-fixes CVE-2024-49976 bsc#1232103).
  - Update
    patches.suse/tracing-timerlat-Only-clear-timer-if-a-kthread-exists.patch
    (git-fixes CVE-2024-46845 bsc#1231076).
  - Update
    patches.suse/unicode-Don-t-special-case-ignorable-code-points.patch
    (stable-fixes CVE-2024-50089 bsc#1232860).
  - Update
    patches.suse/uprobe-avoid-out-of-bounds-memory-access-of-fetching-args.patch
    (git-fixes CVE-2024-50067 bsc#1232416).
  - Update
    patches.suse/uprobes-fix-kernel-info-leak-via-uprobes-vma.patch
    (bsc#1231114 CVE-2024-46828 CVE-2024-49975 bsc#1232104).
  - Update
    patches.suse/usb-typec-altmode-should-keep-reference-to-parent.patch
    (git-fixes CVE-2024-50150 bsc#1233051).
  - Update
    patches.suse/wifi-ath10k-Fix-memory-leak-in-management-tx.patch
    (git-fixes CVE-2024-50236 bsc#1233212).
  - Update
    patches.suse/wifi-cfg80211-clear-wdev-cqm_config-pointer-on-free.patch
    (git-fixes CVE-2024-50235 bsc#1233176).
  - Update
    patches.suse/wifi-iwlegacy-Clear-stale-interrupts-before-resuming.patch
    (stable-fixes CVE-2024-50234 bsc#1233211).
  - Update
    patches.suse/wifi-mac80211-do-not-pass-a-stopped-vif-to-the-drive.patch
    (git-fixes CVE-2024-50237 bsc#1233216).
  - Update
    patches.suse/x86-fix-user-address-masking-non-canonical-speculation-iss.patch
    (git-fixes CVE-2024-50102 bsc#1232880).
  - Update
    patches.suse/xfs-fix-finding-a-last-resort-AG-in-xfs_filestream_pick_ag.patch
    (git-fixes CVE-2024-50216 bsc#1233179).
  - commit 7d67ea3


author: mfranc@suse.cz
changelog:
  - secretmem: disable memfd_secret() if arch cannot set direct map
    (CVE-2024-50182 bsc#1233129).
  - commit 0d23f21


author: mfranc@suse.cz
changelog:
  - net: explicitly clear the sk pointer, when pf->create fails
    (CVE-2024-50186 bsc#1233110).
  - commit dfaff4b


author: tiwai@suse.de
changelog:
  - Delete patches.suse/wifi-mac80211-fix-RCU-list-iterations.patch
    It was reverted on 6.6.x stable
  - commit e2ead50


author: tiwai@suse.de
changelog:
  - Bluetooth: btintel: Direct exception event to bluetooth stack
    (git-fixes).
  - Bluetooth: hci_core: Fix calling mgmt_device_connected
    (git-fixes).
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx
    (stable-fixes).
  - USB: serial: option: add Quectel RG650V (stable-fixes).
  - USB: serial: option: add Fibocom FG132 0x0112 composition
    (stable-fixes).
  - tools/lib/thermal: Fix sampling handler context ptr (git-fixes).
  - drm/amdgpu: add missing size check in
    amdgpu_debugfs_gprwave_read() (stable-fixes).
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions
    (stable-fixes).
  - drm/amdgpu: Adjust debugfs register access permissions
    (stable-fixes).
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not
    supported (git-fixes).
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (git-fixes).
  - net: wwan: t7xx: Fix off-by-one error in
    t7xx_dpmaif_rx_buf_alloc() (git-fixes).
  - net: phy: dp83822: Fix reset pin definitions (git-fixes).
  - commit 48ec995


author: mfranc@suse.cz
changelog:
  - Update
    patches.suse/thermal-intel-int340x-processor-Fix-warning-during-m.patch
    (git-fixes bsc#1232877 CVE-2024-50093).
  - commit 6ec2cb2


author: mfranc@suse.cz
changelog:
  - scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
    (CVE-2024-50098 bsc#1232881).
  - commit f344a8e


author: mfranc@suse.cz
changelog:
  - xfrm: fix one more kernel-infoleak in algo dumping
    (CVE-2024-50110 bsc#1232885).
  - commit 2ae0e01


author: sjaeckel@suse.de
changelog:
  - Fix for kABI fix for Bluetooth: L2CAP: Fix
    div-by-zero in l2cap_le_flowctl_init() (CVE-2024-36968 bsc#1226130).
    The chosen position of `mtu` in the `struct hci_conn` in the first
    iteration of this patch was done based on the wrong version of the header
    and therefore on the wrong position. Correct that.
    Fixes: d93ac77c0df4b8dfe469c26e60d4fb45fc305341
  - commit 77fc56a


author: mfranc@suse.cz
changelog:
  - octeon_ep: Add SKB allocation failures handling in
    __octep_oq_process_rx() (CVE-2024-50145 bsc#1233044).
  - octeon_ep: Implement helper for iterating packets in Rx queue
    (CVE-2024-50145 bsc#1233044).
  - commit 6b574c1


author: mfranc@suse.cz
changelog:
  - scsi: target: core: Fix null-ptr-deref in target_alloc_device()
    (CVE-2024-50153 bsc#1233061).
  - commit 76e65bc


author: dsterba@suse.com
changelog:
  - net: systemport: fix potential memory leak in bcm_sysport_xmit() (CVE-2024-50171 bsc#1233057)
  - commit 24f9c7b


author: dsterba@suse.com
changelog:
  - posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195 bsc#1233103)
  - commit 5c410cf


author: ailiop@suse.com
changelog:
  - ocfs2: remove entry once instead of null-ptr-dereference in
    ocfs2_xa_remove() (git-fixes).
  - commit 7a347a0


author: tiwai@suse.de
changelog:
  - drm/amdgpu: fix check in gmc_v9_0_get_vm_pte() (git-fixes).
  - drm/bridge: tc358768: Fix DSI command tx (git-fixes).
  - nouveau/dp: handle retries for AUX CH transfers with GSP
    (git-fixes).
  - nouveau: handle EBUSY and EAGAIN for GSP aux errors (git-fixes).
  - nouveau: fw: sync dma after setup is called (git-fixes).
  - drm/rockchip: vop: Fix a dereferenced before check warning
    (git-fixes).
  - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger
    than 4K" (git-fixes).
  - mmc: sunxi-mmc: Fix A100 compatible description (git-fixes).
  - ALSA: hda/realtek - update set GPIO3 to default for Thinkpad
    with ALC1318 (git-fixes).
  - ASoC: fsl_micfil: Add sample rate constraint (stable-fixes).
  - ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop
    issue (stable-fixes).
  - ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA
    (stable-fixes).
  - ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA
    (stable-fixes).
  - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
    (stable-fixes).
  - net: wwan: fix global oob in wwan_rtnl_policy (git-fixes).
  - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard
    (stable-fixes).
  - HID: multitouch: Add quirk for Logitech Bolt receiver w/
    Casa touchpad (stable-fixes).
  - drm/vmwgfx: Limit display layout ioctl array size to
    VMWGFX_NUM_DISPLAY_UNITS (stable-fixes).
  - drm/amdkfd: Accounting pdd vram_usage for svm (stable-fixes).
  - crypto: api - Fix liveliness check in crypto_alg_tested
    (stable-fixes).
  - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
    (stable-fixes).
  - HID: multitouch: Add support for B2402FVA track point
    (stable-fixes).
  - commit 42778ee


author: tiwai@suse.de
changelog:
  - ASoC: audio-graph-card2: Purge absent supplies for device tree
    nodes (stable-fixes).
  - ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook
    645 G10 (stable-fixes).
  - ALSA: hda/realtek - Fixed Clevo platform headset Mic issue
    (stable-fixes).
  - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (stable-fixes).
  - commit 03ba04a


author: msuchanek@suse.de
changelog:
  - kernel-binary: Enable livepatch package only when livepatch is enabled
    Otherwise the filelist may be empty failing the build (bsc#1218644).
  - commit f730eec


author: fdmanana@suse.com
changelog:
  - btrfs: reinitialize delayed ref list after deleting it from
    the list (bsc#1233462 CVE-2024-50273).
  - commit 174bbc2


author: tiwai@suse.de
changelog:
  - doc: rcu: update printed dynticks counter bits (git-fixes).
  - hwmon: (nct6775-core) Fix overflows seen when writing limit
    attributes (git-fixes).
  - ACPI: CPPC: Fix _CPC register setting issue (git-fixes).
  - thermal: core: Initialize thermal zones before registering them
    (git-fixes).
  - amd-pstate: Set min_perf to nominal_perf for active mode
    performance gov (git-fixes).
  - crypto: cavium - Fix an error handling path in
    cpt_ucode_load_fw() (git-fixes).
  - crypto: bcm - add error check in the ahash_hmac_init function
    (git-fixes).
  - crypto: caam - add error check to caam_rsa_set_priv_key_form
    (git-fixes).
  - crypto: inside-secure - Fix the return value of
    safexcel_xcbcmac_cra_init() (git-fixes).
  - crypto: cavium - Fix the if condition to exit loop after timeout
    (git-fixes).
  - crypto: x86/aegis128 - access 32-bit arguments as 32-bit
    (git-fixes).
  - crypto: pcrypt - Call crypto layer directly when
    padata_do_parallel() return -EBUSY (git-fixes).
  - crypto: qat - remove faulty arbiter config reset (git-fixes).
  - crypto: qat/qat_4xxx - fix off by one in uof_get_name()
    (git-fixes).
  - crypto: qat - remove check after debugfs_create_dir()
    (git-fixes).
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown()
    (git-fixes).
  - firmware: google: Unregister driver_info on failure (git-fixes).
  - platform/chrome: cros_ec_typec: fix missing fwnode reference
    decrement (git-fixes).
  - acpi/arm64: Adjust error handling procedure in
    gtdt_parse_timer_block() (git-fixes).
  - commit af7e948


author: tiwai@suse.de
changelog:
  - soc: fsl: rcpm: fix missing of_node_put() in
    copy_ippdexpcr1_setting() (git-fixes).
  - firmware: arm_scpi: Check the DVFS OPP count returned by the
    firmware (git-fixes).
  - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
    (git-fixes).
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
    (git-fixes).
  - drivers: soc: xilinx: add the missing kfree in
    xlnx_add_cb_for_suspend() (git-fixes).
  - efi/libstub: Free correct pointer on failure (git-fixes).
  - tpm: fix signed/unsigned bug when checking event logs
    (git-fixes).
  - efi/libstub: fix efi_parse_options() ignoring the default
    command line (git-fixes).
  - platform/x86: panasonic-laptop: Return errno correctly in show
    callback (git-fixes).
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED
    in uvc_parse_format (git-fixes).
  - media: platform: exynos4-is: Fix an OF node reference leak in
    fimc_md_is_isp_available (git-fixes).
  - media: atomisp: Add check for rgby_data memory allocation
    failure (git-fixes).
  - media: gspca: ov534-ov772x: Fix off-by-one error in
    set_frame_rate() (git-fixes).
  - media: venus: Fix pm_runtime_set_suspended() with runtime pm
    enabled (git-fixes).
  - media: amphion: Fix pm_runtime_set_suspended() with runtime
    pm enabled (git-fixes).
  - media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime
    pm enabled (git-fixes).
  - media: mantis: remove orphan mantis_core.h (git-fixes).
  - media: vb2: Fix comment (git-fixes).
  - media: uvcvideo: Stop stream during unregister (git-fixes).
  - media: ts2020: fix null-ptr-deref in ts2020_probe() (git-fixes).
  - media: platform: allegro-dvt: Fix possible memory leak in
    allocate_buffers_internal() (git-fixes).
  - media: i2c: tc358743: Fix crash in the probe error path when
    using polling (git-fixes).
  - media: wl128x: Fix atomicity violation in fmc_send_cmd()
    (git-fixes).
  - media: imx-jpeg: Ensure power suppliers be suspended before
    detach them (git-fixes).
  - media: amphion: Set video drvdata before register video device
    (git-fixes).
  - media: imx-jpeg: Set video drvdata before register video device
    (git-fixes).
  - media: mtk-jpeg: Fix null-ptr-deref during unload module
    (git-fixes).
  - media: uvcvideo: Require entities to have a non-zero unique ID
    (git-fixes).
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed
    values (git-fixes).
  - mmc: mmc_spi: drop buggy snprintf() (git-fixes).
  - =?UTF-8?q?spi:=20zynqmp-gqspi:=20Undo=20runtime=20PM=20ch?=
    =?UTF-8?q?anges=20at=20driver=20exit=20time=E2=80=8B?=
    (git-fixes).
  - spi: tegra210-quad: Avoid shift-out-of-bounds (git-fixes).
  - regmap: irq: Set lockdep class for hierarchical IRQ domains
    (git-fixes).
  - Documentation: kgdb: Correct parameter error (git-fixes).
  - efi/libstub: zboot.lds: Discard .discard sections
    (stable-fixes).
  - commit fbb8e93


author: lduncan@suse.com
changelog:
  - scsi: kABI: restore no_start_on_resume to scsi_device
    (git-fixes).
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
    (git-fixes).
  - scsi: mpi3mr: Validate SAS port assignments (git-fixes).
  - scsi: scsi_transport_fc: Allow setting rport state to current
    state (git-fixes).
  - scsi: wd33c93: Don't use stale scsi_pointer value (git-fixes).
  - scsi: pm8001: Do not overwrite PCI queue mapping (git-fixes).
  - scsi: smartpqi: correct stream detection (git-fixes).
  - scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
    (git-fixes).
  - scsi: NCR5380: Check for phase match during PDMA fixup
    (git-fixes).
  - scsi: mac_scsi: Disallow bus errors during PDMA send
    (git-fixes).
  - scsi: mac_scsi: Refactor polling loop (git-fixes).
  - scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
    (git-fixes).
  - scsi: smartpqi: revert
    propagate-the-multipath-failure-to-SML-quickly (git-fixes).
  - scsi: aacraid: Rearrange order of struct aac_srb_unit
    (git-fixes).
  - scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in
    progress (git-fixes).
  - scsi: core: Fix the return value of scsi_logical_block_count()
    (git-fixes).
  - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
    (git-fixes).
  - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES
    (git-fixes).
  - scsi: pm80xx: Set phy->enable_completion only when we wait
    for it (git-fixes).
  - scsi: libsas: Fix exp-attached device scan after probe failure
    scanned in again after probe failed (git-fixes).
  - scsi: mpi3mr: Fix ATA NCQ priority support (git-fixes).
  - scsi: core: Disable CDL by default (git-fixes).
  - scsi: core: Handle devices which return an unusually large
    VPD page count (git-fixes).
  - scsi: qedf: Set qed_slowpath_params to zero before use
    (git-fixes).
  - scsi: sr: Fix unintentional arithmetic wraparound (git-fixes).
  - scsi: core: alua: I/O errors for ALUA state transitions
    (git-fixes).
  - scsi: hpsa: Fix allocation size for Scsi_Host private data
    (git-fixes).
  - scsi: libsas: Fix the failure of adding phy with zero-address
    to port (git-fixes).
  - scsi: mpi3mr: Avoid possible run-time warning with long
    manufacturer strings (git-fixes).
  - scsi: core: Fix handling of SCMD_FAIL_IF_RECOVERING (git-fixes).
  - scsi: hisi_sas: Handle the NCQ error returned by D2H frame
    (git-fixes).
  - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING
    (git-fixes).
  - scsi: spi: Fix sshdr use (git-fixes).
  - scsi: Remove scsi device no_start_on_resume flag (git-fixes).
  - commit d5d37f8


author: tiwai@suse.de
changelog:
  - drm/amdkfd: Fix wrong usage of INIT_WORK() (git-fixes).
  - drm/panfrost: Add missing OPP table refcnt decremental
    (git-fixes).
  - drm: use ATOMIC64_INIT() for atomic64_t (git-fixes).
  - drm/vkms: Drop unnecessary call to drm_crtc_cleanup()
    (git-fixes).
  - drm/etnaviv: hold GPU lock across perfmon sampling (git-fixes).
  - drm/etnaviv: Request pages from DMA32 zone on addressing_limited
    (git-fixes).
  - drm/amd/display: Fix brightness level not retained over reboot
    (git-fixes).
  - drm/msm/dpu: cast crtc_clk calculation to u64 in
    _dpu_core_perf_calc_clk() (git-fixes).
  - drm/mediatek: Fix child node refcount handling in early exit
    (git-fixes).
  - drm/msm/gpu: Check the status of registration to PM QoS
    (git-fixes).
  - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
    (git-fixes).
  - drm/msm: Fix some typos in comment (git-fixes).
  - drm/msm/dpu: drop LM_3 / LM_4 on MSM8998 (git-fixes).
  - drm/msm/dpu: drop LM_3 / LM_4 on SDM845 (git-fixes).
  - drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block (git-fixes).
  - drm: xlnx: zynqmp_dpsub: fix hotplug detection (git-fixes).
  - drm: zynqmp_kms: Unplug DRM device before removal (git-fixes).
  - drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
    (git-fixes).
  - drm/panfrost: Remove unused id_mask from struct panfrost_model
    (git-fixes).
  - drm/amdgpu: Fix JPEG v4.0.3 register write (git-fixes).
  - drm/bridge: tc358767: Fix link properties discovery (git-fixes).
  - drm/vc4: Match drm_dev_enter and exit calls in
    vc4_hvs_atomic_flush (git-fixes).
  - drm/bridge: it6505: Drop EDID cache on bridge power off
    (git-fixes).
  - drm/bridge: anx7625: Drop EDID cache on bridge power off
    (git-fixes).
  - drm/v3d: Address race-condition in MMU flush (git-fixes).
  - drm/sti: avoid potential dereference of error pointers
    (git-fixes).
  - drm/sti: avoid potential dereference of error pointers in
    sti_gdp_atomic_check (git-fixes).
  - drm/sti: avoid potential dereference of error pointers in
    sti_hqvdp_atomic_check (git-fixes).
  - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
    (git-fixes).
  - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
    (git-fixes).
  - drm/omap: Fix locking in omap_gem_new_dmabuf() (git-fixes).
  - drm/omap: Fix possible NULL dereference (git-fixes).
  - drm/vc4: hvs: Correct logic on stopping an HVS channel
    (git-fixes).
  - drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs
    function (git-fixes).
  - drm/vc4: hvs: Fix dlist debug not resetting the next entry
    pointer (git-fixes).
  - drm/vc4: hdmi: Avoid hang with debug registers when suspended
    (git-fixes).
  - drm/vc4: hvs: Don't write gamma luts on 2711 (git-fixes).
  - drm/mm: Mark drm_mm_interval_tree*() functions with
    __maybe_unused (git-fixes).
  - ASoC: codecs: Fix atomicity violation in
    snd_soc_component_get_drvdata() (git-fixes).
  - ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c
    (git-fixes).
  - ASoC: fsl_micfil: fix regmap_write_bits usage (git-fixes).
  - ALSA: 6fire: Release resources at card release (git-fixes).
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
    (git-fixes).
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection
    (git-fixes).
  - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
    (git-fixes).
  - Bluetooth: fix use-after-free in device_for_each_child()
    (git-fixes).
  - wifi: brcmfmac: release 'root' node in all execution paths
    (git-fixes).
  - wifi: cw1200: Fix potential NULL dereference (git-fixes).
  - wifi: wfx: Fix error handling in wfx_core_init() (git-fixes).
  - wifi: ath12k: fix warning when unbinding (git-fixes).
  - wifi: ath12k: fix crash when unbinding (git-fixes).
  - wifi: ath12k: remove msdu_end structure for WCN7850 (git-fixes).
  - wifi: ath11k: Fix CE offset address calculation for WCN6750
    in SSR (git-fixes).
  - wifi: ath12k: Skip Rx TID cleanup for self peer (git-fixes).
  - wifi: ath10k: fix invalid VHT parameters in
    supported_vht_mcs_rate_nss2 (git-fixes).
  - wifi: ath10k: fix invalid VHT parameters in
    supported_vht_mcs_rate_nss1 (git-fixes).
  - wifi: ath9k: add range check for conn_rsp_epid in
    htc_connect_service() (git-fixes).
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in
    mwifiex_config_scan() (git-fixes).
  - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
    (git-fixes).
  - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).
  - commit c54011d


author: tiwai@suse.de
changelog:
  - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load
    (git-fixes).
  - ALSA: hda: Poll jack events for LS7A HD-Audio (stable-fixes).
  - ALSA: usb-audio: Add Pioneer DJ/AlphaTheta DJM-A9 Mixer
    (stable-fixes).
  - ALSA: usb-audio: Use snprintf instead of sprintf in
    build_mixer_unit_ctl (stable-fixes).
  - ALSA: ice1712: Remove redundant code in stac9460_dac_vol_put
    (stable-fixes).
  - commit e772374


author: tiwai@suse.de
changelog:
  - ALSA: usb-audio: Make mic volume workarounds globally applicable
    (stable-fixes).
  - Refresh
    patches.suse/ALSA-usb-audio-Add-quirk-for-HP-320-FHD-Webcam.patch.
  - commit 777a5df


author: tiwai@suse.de
changelog:
  - cpufreq: mediatek-hw: Fix wrong return value in
    mtk_cpufreq_get_cpu_power() (git-fixes).
  - cpufreq: CPPC: Fix possible null-ptr-deref for
    cppc_get_cpu_cost() (git-fixes).
  - cpufreq: CPPC: Fix possible null-ptr-deref for
    cpufreq_cpu_get_raw() (git-fixes).
  - Revert "cpufreq: brcmstb-avs-cpufreq: Fix initial command check"
    (stable-fixes).
  - cpufreq: loongson2: Unregister platform_driver on failure
    (git-fixes).
  - mtd: rawnand: atmel: Fix possible memory leak (git-fixes).
  - mtd: spi-nor: core: replace dummy buswidth from addr to data
    (git-fixes).
  - clk: qcom: clk-alpha-pll: fix lucid 5lpe pll enabled check
    (git-fixes).
  - clk: qcom: clk-alpha-pll: drop lucid-evo pll enabled warning
    (git-fixes).
  - clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (git-fixes).
  - clk: clk-axi-clkgen: make sure to enable the AXI bus clock
    (git-fixes).
  - clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset (git-fixes).
  - clk: imx: clk-scu: fix clk enable state save and restore
    (git-fixes).
  - clk: imx: fracn-gppll: fix pll power up (git-fixes).
  - clk: imx: fracn-gppll: correct PLL initialization flow
    (git-fixes).
  - clk: imx: lpcg-scu: SW workaround for errata (e10858)
    (git-fixes).
  - clk: renesas: rzg2l: Fix FOUTPOSTDIV clk (git-fixes).
  - clk: clk-apple-nco: Add NULL check in applnco_probe (git-fixes).
  - leds: lp55xx: Remove redundant test for invalid channel number
    (git-fixes).
  - mfd: rt5033: Fix missing regmap_del_irq_chip() (git-fixes).
  - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to
    fix race (git-fixes).
  - drm/amd: Fix initialization mistake for NBIO 7.7.0
    (stable-fixes).
  - drm/amd/display: Adjust VSDB parser for replay feature
    (stable-fixes).
  - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
    (stable-fixes).
  - commit 15015b2


author: tiwai@suse.de
changelog:
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
    (git-fixes).
  - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
    (git-fixes).
  - commit b53ff09


author: nmorey@suse.com
changelog:
  - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci (git-fixes)
  - commit c0d9dba


author: nmorey@suse.com
changelog:
  - RDMA/mlx5: Move events notifier registration to be after device registration (git-fixes)
  - commit ff613dc


author: tiwai@suse.de
changelog:
  - maple_tree: refine mas_store_root() on storing NULL (git-fixes).
  - maple_tree: fix alloc node fail issue (git-fixes).
  - unicode: Fix utf8_load() error path (git-fixes).
  - commit 7f4b1c4


author: nmorey@suse.com
changelog:
  - Fix warning in patches.suse/RDMA-mlx5-Move-events-notifier-registration-to-be-af.patch
    Fixes: ff613dcf3cc9c8aa5b4cc959d0bdfac2dec81854
  - commit 56a258b


author: sjaeckel@suse.de
changelog:
  - dccp/tcp: Unhash sk from ehash for tb2 alloc failure after
    check_estalblished() (CVE-2024-26741 bsc#1222587).
  - commit 9a5ac8a


author: sjaeckel@suse.de
changelog:
  - netfilter: nft_set_pipapo: walk over current view on netlink
    dump (CVE-2024-27017 bsc#1223733).
  - commit d1885c4


author: sjaeckel@suse.de
changelog:
  - net: esp: fix bad handling of pages from page_pool
    (CVE-2024-26953 bsc#1223656).
  - commit b0a65f5


author: sjaeckel@suse.de
changelog:
  - erspan: make sure erspan_base_hdr is present in skb->head
    (CVE-2024-35888 bsc#1224518).
  - commit aaa779d


author: sjaeckel@suse.de
changelog:
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
    (CVE-2024-36905 bsc#1225742).
  - commit 84c8bd7


author: mfranc@suse.cz
changelog:
  - vsock/virtio: Initialization of the dangling pointer occurring
    in vsk->trans (CVE-2024-50264 bsc#1233453).
  - arm64/sve: Discard stale CPU state when handling SVE traps
    (CVE-2024-50275 bsc#1233464).
  - commit 2855c61


author: tbogendoerfer@suse.de
changelog:
  - fsl/fman: Fix refcount handling of fman-related devices
    (CVE-2024-50166 bsc#1233050).
  - fsl/fman: Save device references taken in mac_probe()
    (CVE-2024-50166 bsc#1233050).
  - commit cff0dea


author: vbabka@suse.cz
changelog:
  - mm: avoid unsafe VMA hook invocation when error arises on mmap
    hook (git-fixes).
  - commit 2b96063


author: vbabka@suse.cz
changelog:
  - kabi, mm: refactor arch_calc_vm_flag_bits() and arm64 MTE
    handling (git-fixes kabi).
  - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
    (git-fixes).
  - commit f31b0e3


author: tiwai@suse.de
changelog:
  - ALSA: hda/realtek: Enable speaker pins for Medion E15443
    platform (bsc#1233298).
  - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of
    Infinix Y4 Max (bsc#1233298).
  - commit dd8caae


author: vbabka@suse.cz
changelog:
  - Update references for
    patches.suse/mm-resolve-faulty-mmap_region-error-path-behaviour.patch
    (git-fixes CVE-2024-53096 bsc#1233756).
  - commit 6c0d091


author: sjaeckel@suse.de
changelog:
  - kABI fix for netfilter: nft_set_pipapo: walk over current view
    on netlink dump (CVE-2024-27017 bsc#1223733).
  - commit 2be46c1


author: tiwai@suse.de
changelog:
  - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb()
    (git-fixes).
  - pinctrl: k210: Undef K210_PC_DEFAULT (git-fixes).
  - pinctrl: qcom: spmi: fix debugfs drive strength (git-fixes).
  - pinctrl: zynqmp: drop excess struct member description
    (git-fixes).
  - lib: string_helpers: silence snprintf() output truncation
    warning (git-fixes).
  - fbdev: sh7760fb: Fix a possible memory leak in
    sh7760fb_alloc_mem() (git-fixes).
  - Input: hycon-hy46xx - add missing dependency on REGMAP_I2C
    (git-fixes).
  - Input: hideep - add missing dependency on REGMAP_I2C
    (git-fixes).
  - commit 17f846a


author: msuchanek@suse.de
changelog:
  - KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on
    pending doorbells (bsc#1215199).
  - KVM: PPC: Book3S HV: Stop using vc->dpdes for nested KVM guests
    (bsc#1215199).
  - Revert "KVM: PPC: Book3S HV Nested: Stop forwarding all HFUs
    to L1" (bsc#1215199).
  - commit d27c0c3


author: tbogendoerfer@suse.de
changelog:
  - net: hns3: fix a deadlock problem when config TC during
    resetting (CVE-2024-44995 bsc#1230231).
  - commit e1fa968


author: sjaeckel@suse.de
changelog:
  - net: relax socket state check at accept time (git-fixes).
  - netfilter: nf_tables: missing iterator type in lookup walk
    (git-fixes).
  - commit 180e959


author: tiwai@suse.de
changelog:
  - hwmon: (tps23861) Fix reporting of negative temperatures
    (git-fixes).
  - i3c: master: svc: Fix pm_runtime_set_suspended() with runtime
    pm enabled (git-fixes).
  - i3c: master: Fix miss free init_dyn_addr at
    i3c_master_put_i3c_addrs() (git-fixes).
  - PCI: Fix reset_method_store() memory leak (git-fixes).
  - PCI: rockchip-ep: Fix address translation unit programming
    (git-fixes).
  - PCI: keystone: Add link up check to ks_pcie_other_map_bus()
    (git-fixes).
  - PCI: keystone: Set mode as Root Complex for "ti,keystone-pcie"
    compatible (git-fixes).
  - PCI: endpoint: Clear secondary (not primary) EPC in
    pci_epc_remove_epf() (git-fixes).
  - commit 29a3aa9


author: tbogendoerfer@suse.de
changelog:
  - net: xfrm: preserve kabi for xfrm_state (bsc#1233754).
  - idpf: avoid vport access in idpf_get_link_ksettings
    (CVE-2024-50274 bsc#1233463).
  - xfrm: Export symbol xfrm_dev_state_delete (bsc#1233754).
  - xfrm: Fix unregister netdevice hang on hardware offload
    (bsc#1233754).
  - commit 8c4cfeb


author: osalvador@suse.de
changelog:
  - mm/hugetlb: fix missing hugetlb_lock for resv uncharge
    (bsc#1224548 CVE-2024-36000).
  - commit 92c1bc7


author: nmorey@suse.com
changelog:
  - Update references for patches.suse/RDMA-siw-Add-sendpage_ok-check-to-disable-MSG_SPLICE.patch (bsc#1233641 CVE-2024-53094)
  - commit 1f528cf


author: tbogendoerfer@suse.de
changelog:
  - ice: fix crash on probe for DPLL enabled E810 LOM
    (CVE-2024-53048 bsc#1233721).
  - commit 5f7ca77


author: tiwai@suse.de
changelog:
  - thermal: int3400: Fix reading of current_uuid for active policy
    (git-fixes).
  - gpio: exar: set value when external pull-up or pull-down is
    present (git-fixes).
  - gpio: zevio: Add missed label initialisation (git-fixes).
  - commit a62e144


author: tiwai@suse.de
changelog:
  - Drop OCFS2 patch causing a regression (bsc#1233255)
    Deleted:
    patches.suse/ocfs2-fix-the-la-space-leak-when-unmounting-an-ocfs2-volume.patch
  - commit 2a24fc4


author: dsterba@suse.com
changelog:
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (CVE-2024-50195 bsc#1233103)
  - commit 6192694


author: tiwai@suse.de
changelog:
  - Bluetooth: MGMT: Fix slab-use-after-free Read in
    set_powered_sync (git-fixes).
  - net: mdio-ipq4019: add missing error check (git-fixes).
  - net: usb: lan78xx: Fix refcounting and autosuspend on invalid
    WoL configuration (git-fixes).
  - net: usb: lan78xx: Fix memory leak on device unplug by freeing
    PHY device (git-fixes).
  - net: usb: lan78xx: Fix double free issue with interrupt buffer
    allocation (git-fixes).
  - spi: Fix acpi deferred irq probe (git-fixes).
  - spi: atmel-quadspi: Fix register name in verbose logging
    function (git-fixes).
  - power: supply: rt9471: Use IC status regfield to report real
    charger status (git-fixes).
  - power: supply: rt9471: Fix wrong WDT function regfield
    declaration (git-fixes).
  - power: supply: bq27xxx: Fix registers of bq27426 (git-fixes).
  - power: supply: core: Remove might_sleep() from
    power_supply_put() (git-fixes).
  - commit 0e6f9cb


author: mgorman@suse.de
changelog:
  - mm: revert "mm: shmem: fix data-race in shmem_getattr()"
    (CVE-2024-50228, bsc#1233204, git fixes (mm/shmem)).
    CVE is likely a non-issue while the fix introduces real bugs.
  - commit b77756a


author: dfaggioli@suse.com
changelog:
  - bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock (git-fixes).
  - commit 8db08f8


author: nmorey@suse.com
changelog:
  - RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset (git-fixes)
  - commit 41e9c5b


author: tiwai@suse.de
changelog:
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in
    hwss_setup_dpp (git-fixes).
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in
    dcn20_program_pipe (git-fixes).
  - drm/amd: Add some missing straps from NBIO 7.11.0 (git-fixes).
  - ASoC: SOF: ipc3-topology: Convert the topology pin index to
    ALH dai index (git-fixes).
  - ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry
    (git-fixes).
  - ALSA: ump: Fix evaluation of MIDI 1.0 FB info (git-fixes).
  - ALSA: hda/realtek: Update ALC225 depop procedure (git-fixes).
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy
    and Mbox devices (git-fixes).
  - ALSA: hda/realtek: Update ALC256 depop procedure (git-fixes).
  - ALSA: ac97: bus: Fix the mistake in the comment (git-fixes).
  - =?UTF-8?q?iio:=20accel:=20kxcjk-1013:=20Remove=20redundan?=
    =?UTF-8?q?t=20I=C2=B2C=20ID?= (git-fixes).
  - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name()
    (git-fixes).
  - iio: accel: kx022a: Fix raw read format (git-fixes).
  - iio: gts: fix infinite loop for gain_to_scaletables()
    (git-fixes).
  - iio: gts: Fix uninitialized symbol 'ret' (git-fixes).
  - ad7780: fix division by zero in ad7780_write_raw() (git-fixes).
  - iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
    (git-fixes).
  - comedi: Flush partial mappings in error case (git-fixes).
  - goldfish: Fix unused const variable 'goldfish_pipe_acpi_match'
    (git-fixes).
  - iio: adc: ad7606: Fix typo in the driver name (git-fixes).
  - iio: light: al3010: Fix an error handling path in al3010_probe()
    (git-fixes).
  - misc: apds990x: Fix missing pm_runtime_disable() (git-fixes).
  - firmware_loader: Fix possible resource leak in
    fw_log_firmware_info() (git-fixes).
  - usb: dwc3: gadget: Fix looping of queued SG entries (git-fixes).
  - usb: dwc3: gadget: Fix checking for number of TRBs left
    (git-fixes).
  - Revert "usb: gadget: composite: fix OS descriptors w_value
    logic" (git-fixes).
  - usb: ehci-spear: fix call balance of sehci clk handling routines
    (git-fixes).
  - USB: serial: ftdi_sio: Fix atomicity violation in
    get_serial_info() (git-fixes).
  - usb: dwc3: gadget: Add missing check for single port RAM in
    TxFIFO resizing logic (git-fixes).
  - usb: musb: Fix hardware lockup on first Rx endpoint request
    (git-fixes).
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue
    (git-fixes).
  - USB: chaoskey: fail open after removal (git-fixes).
  - usb: yurex: make waiting on yurex_write interruptible
    (git-fixes).
  - usb: using mutex lock and supporting O_NONBLOCK flag in
    iowarrior_read() (git-fixes).
  - apparmor: fix 'Do simple duplicate message elimination'
    (git-fixes).
  - apparmor: test: Fix memory leak for aa_unpack_strdup()
    (git-fixes).
  - apparmor: use kvfree_sensitive to free data->data (git-fixes).
  - commit 875afee


author: tiwai@suse.de
changelog:
  - ALSA: hda: Show the codec quirk info at probing (stable-fixes).
  - ALSA: hda/realtek: Set PCBeep to default value for ALC274
    (stable-fixes).
  - ALSA: usb-audio: Fix out of bounds reads when finding clock
    sources (stable-fixes).
  - ALSA: pcm: Add sanity NULL check for the default mmap fault
    handler (stable-fixes).
  - commit 0da3d44


author: tiwai@suse.de
changelog:
  - tools/power turbostat: Fix trailing '\n' parsing (git-fixes).
  - modpost: remove incorrect code in do_eisa_entry() (git-fixes).
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage
    notification (git-fixes).
  - rtc: rzn1: fix BCD to rtc_time conversion errors (git-fixes).
  - rtc: check if __rtc_read_time was successful in
    rtc_timer_do_work() (git-fixes).
  - rtc: abx80x: Fix WDT bit position of the status register
    (git-fixes).
  - rtc: bbnsm: add remove hook (git-fixes).
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
    (git-fixes).
  - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
    (git-fixes).
  - serial: 8250: omap: Move pm_runtime_get_sync (git-fixes).
  - commit 003de2e


author: nik.borisov@suse.com
changelog:
  - x86/microcode/intel: Remove unnecessary cache writeback and invalidation (git-fixes).
  - commit dc97c33


author: vkarasulli@suse.de
changelog:
  - Update
    patches.suse/ASoC-dapm-fix-bounds-checker-error-in-dapm_widget_li.patch
    (git-fixes CVE-2024-53045 bsc#1233524).
  - Update
    patches.suse/ASoC-stm32-spdifrx-fix-dma-channel-release-in-stm32_.patch
    (git-fixes CVE-2024-50292 bsc#1233481).
  - Update
    patches.suse/HID-core-zero-initialize-the-report-buffer.patch
    (git-fixes CVE-2024-50302 bsc#1233491).
  - Update
    patches.suse/USB-serial-io_edgeport-fix-use-after-free-in-debug-p.patch
    (git-fixes CVE-2024-50267 bsc#1233456).
  - Update patches.suse/can-bcm-Fix-UAF-in-bcm_proc_show.patch
    (bsc#1012628 CVE-2023-52922 bsc#1233977).
  - Update
    patches.suse/drm-amdgpu-add-missing-size-check-in-amdgpu_debugfs_.patch
    (stable-fixes CVE-2024-50282 bsc#1233471).
  - Update
    patches.suse/drm-amdgpu-fix-possible-UAF-in-amdgpu_cs_pass1.patch
    (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
    jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
    jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-52921
    bsc#1233452).
  - Update
    patches.suse/drm-amdgpu-prevent-NULL-pointer-dereference-if-ATIF-.patch
    (git-fixes CVE-2024-53060 bsc#1233554).
  - Update
    patches.suse/firmware-arm_scmi-Fix-slab-use-after-free-in-scmi_bu.patch
    (git-fixes CVE-2024-53068 bsc#1233561).
  - Update
    patches.suse/fs-Fix-uninitialized-value-issue-in-from_kuid-and-from_kgid.patch
    (git-fixes CVE-2024-53101 bsc#1233769).
  - Update
    patches.suse/i40e-fix-race-condition-by-adding-filter-s-intermedi.patch
    (git-fixes CVE-2024-53088 bsc#1233580).
  - Update
    patches.suse/iio-gts-helper-Fix-memory-leaks-for-the-error-path-o.patch
    (git-fixes CVE-2024-53076 bsc#1233567).
  - Update
    patches.suse/io_uring-rw-fix-missing-NOWAIT-check-for-O_DIRECT-st.patch
    (git-fixes CVE-2024-53052 bsc#1233548).
  - Update
    patches.suse/media-ar0521-don-t-overflow-when-checking-PLL-values.patch
    (git-fixes CVE-2024-53081 bsc#1233572).
  - Update
    patches.suse/media-cx24116-prevent-overflows-on-SNR-calculus.patch
    (git-fixes CVE-2024-50290 bsc#1233479).
  - Update
    patches.suse/media-dvbdev-prevent-the-risk-of-out-of-memory-acces.patch
    (git-fixes CVE-2024-53063 bsc#1233557).
  - Update
    patches.suse/media-s5p-jpeg-prevent-buffer-overflows.patch
    (git-fixes CVE-2024-53061 bsc#1233555).
  - Update
    patches.suse/media-v4l2-tpg-prevent-the-risk-of-a-division-by-zer.patch
    (git-fixes CVE-2024-50287 bsc#1233476).
  - Update
    patches.suse/nfs-Fix-KMSAN-warning-in-decode_getfattr_attrs.patch
    (git-fixes CVE-2024-53066 bsc#1233560).
  - Update
    patches.suse/ocfs2-remove-entry-once-instead-of-null-ptr-dereference-in-ocfs2_xa_remove.patch
    (git-fixes CVE-2024-50265 bsc#1233454).
  - Update
    patches.suse/platform-x86-amd-pmc-Detect-when-STB-is-not-availabl.patch
    (git-fixes CVE-2024-53072 bsc#1233564).
  - Update
    patches.suse/posix-clock-posix-clock-Fix-unbalanced-locking-in-pc.patch
    (CVE-2024-50195 bsc#1233103 CVE-2024-50210 bsc#1233097).
  - Update
    patches.suse/scsi-wd33c93-Don-t-use-stale-scsi_pointer-value.patch
    (git-fixes CVE-2024-50026 bsc#1231952).
  - Update
    patches.suse/security-keys-fix-slab-out-of-bounds-in-key_task_per.patch
    (git-fixes CVE-2024-50301 bsc#1233490).
  - Update
    patches.suse/tpm-Lock-TPM-chip-in-tpm_pm_suspend-first.patch
    (bsc#1082555 git-fixes CVE-2024-53085 bsc#1233577).
  - Update
    patches.suse/usb-musb-sunxi-Fix-accessing-an-released-usb-phy.patch
    (git-fixes CVE-2024-50269 bsc#1233458).
  - Update
    patches.suse/usb-typec-fix-potential-out-of-bounds-in-ucsi_ccg_up.patch
    (git-fixes CVE-2024-50268 bsc#1233457).
  - Update
    patches.suse/wifi-iwlwifi-mvm-Fix-response-handling-in-iwl_mvm_se.patch
    (git-fixes CVE-2024-53059 bsc#1233553).
  - Update
    patches.suse/wifi-iwlwifi-mvm-don-t-leak-a-link-on-AP-removal.patch
    (git-fixes CVE-2024-53074 bsc#1233566).
  - commit 5a024cd


author: nik.borisov@suse.com
changelog:
  - x86/resctrl: Remove hard-coded memory bandwidth limit (git-fixes).
  - Refresh patches.suse/x86-resctrl-Annotate-get_mem_config-functions-as-__init.patch.
  - commit 6888d66


author: tbogendoerfer@suse.de
changelog:
  - net: arc: fix the device for dma_map_single/dma_unmap_single
    (CVE-2024-50295 bsc#1233484).
  - net: vertexcom: mse102x: Fix possible double free of TX skb
    (CVE-2024-50276 bsc#1233465).
  - net: enetc: allocate vf_state during PF probes (CVE-2024-50298
    bsc#1233487).
  - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged
    SKB data (CVE-2024-53058 bsc#1233552).
  - commit ae38000


author: jack@suse.cz
changelog:
  - ext4: fix unttached inode after power cut with orphan file
    feature enabled (bsc#1234009).
  - commit 3e057c0


author: vbabka@suse.cz
changelog:
  - mm: convert free_transhuge_folio() to
    folio_undo_large_rmappable() (CVE-2024-53079 bsc#1233570
    prerequisity).
  - commit 4e7d9f6


author: jack@suse.cz
changelog:
  - jbd2: fix potential data lost in recovering journal raced with
    synchronizing fs bdev (bsc#1234044).
  - commit 5fbdfed


author: jack@suse.cz
changelog:
  - jbd2: correct the printing of write_flags in
    jbd2_write_superblock() (bsc#1234045).
  - commit fe6bf4e


author: oneukum@suse.com
changelog:
  - Input: xpad - spelling fixes for "Xbox" (git-fixes).
  - Refresh
    patches.suse/Input-xpad-add-HyperX-Clutch-Gladiate-Support.patch.
  - Refresh
    patches.suse/Input-xpad-add-Lenovo-Legion-Go-controllers.patch.
  - Refresh patches.suse/Input-xpad-add-PXN-V900-support.patch.
  - Refresh
    patches.suse/Input-xpad-add-additional-HyperX-Controller-Identifi.patch.
  - Refresh
    patches.suse/Input-xpad-add-support-for-ASUS-ROG-RAIKIRI.patch.
  - Refresh
    patches.suse/Input-xpad-add-support-for-Snakebyte-GAMEPADs.patch.
  - commit 15a1c29


author: oneukum@suse.com
changelog:
  - Input: xpad - sort xpad_device by vendor and product ID
    (git-fixes).
  - Refresh
    patches.suse/Input-xpad-add-support-for-Snakebyte-GAMEPADs.patch.
  - commit 5f46bd9


author: oneukum@suse.com
changelog:
  - Input: xpad - add support for 8BitDo Ultimate 2C Wireless
    Controller (git-fixes).
  - commit 0d7bec2


author: osalvador@suse.de
changelog:
  - mm/hugetlb: fix nodes huge page allocation when there are
    surplus pages (bsc#1234012).
  - commit 9fde6f7


author: vbabka@suse.cz
changelog:
  - mm: always initialise folio->_deferred_list (CVE-2024-53079
    bsc#1233570 prerequisity).
  - commit 3c832a9


author: dwagner@suse.de
changelog:
  - scsi: lpfc: Copyright updates for 14.4.0.6 patches (bsc#1233241
    jsc#PED-9943).
  - scsi: lpfc: Update lpfc version to 14.4.0.6 (bsc#1233241
    jsc#PED-9943).
  - scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask
    (bsc#1233241 jsc#PED-9943).
  - scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure
    (bsc#1233241 jsc#PED-9943).
  - scsi: lpfc: Prevent NDLP reference count underflow in
    dev_loss_tmo callback (bsc#1233241 jsc#PED-9943).
  - scsi: lpfc: Add cleanup of nvmels_wq after HBA reset
    (bsc#1233241 jsc#PED-9943).
  - scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting
    follow up FDMI (bsc#1233241 jsc#PED-9943).
  - scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE
    before BSG flag (bsc#1233241 jsc#PED-9943).
  - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod
    paths (bsc#1233241 jsc#PED-9943).
  - scsi: lpfc: Check devloss callbk done flag for potential stale
    NDLP ptrs (bsc#1233241 jsc#PED-9943).
  - scsi: lpfc: Modify CGN warning signal calculation based on
    EDC response (bsc#1233241 jsc#PED-9943).
  - commit 566c7c9


author: dwagner@suse.de
changelog:
  - Update
    patches.suse/scsi-qla2xxx-Update-version-to-10.02.09.300-k.patch
    (bsc#1228850 jsc#PED-9943 jsc#PED-11316).
    This is the latest greatest version of qla2xxx. Add the jira
    reference so that it is tracked.
  - commit 8eff9b2


author: dwagner@suse.de
changelog:
  - Rename to
    patches.suse/nvme-multipath-defer-partition-scanning.patch. (git-fixes bsc#122824)
  - commit 79fcf69


author: dwagner@suse.de
changelog:
  - nvme-loop: flush off pending I/O while shutting down loop
    controller (git-fixes).
  - commit 85bcc27


author: dwagner@suse.de
changelog:
  - nvme-fabrics: fix kernel crash while shutting down controller
    (git-fixes).
  - nvme-pci: reverse request order in nvme_queue_rqs (git-fixes).
  - nvme-pci: fix freeing of the HMB descriptor table (git-fixes).
  - nvme/host: Fix RCU list traversal to use SRCU primitive
    (git-fixes).
  - commit 9f9c907


author: vliaskovitis@suse.com
changelog:
  - cxl: downgrade a warning message to debug level in
    cxl_probe_component_regs() (bsc#1229165).
  - commit 388d64b


author: vbabka@suse.cz
changelog:
  - mm/thp: fix deferred split unqueue naming and locking
    (CVE-2024-53079 bsc#1233570).
  - commit b50ea3e


author: jslaby@suse.cz
changelog:
  - PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS
    milliseconds (git-fixes).
  - PCI: Add T_PVPERL macro (git-fixes).
  - commit 664a849


author: neelx@suse.com
changelog:
  - btrfs: fix a NULL pointer dereference when failed to start a
    new trasacntion (CVE-2024-49868 bsc#1232272).
  - commit cc68ee3


author: shung-hsi.yu@suse.com
changelog:
  - selftests/bpf: validate fake register spill/fill precision
    backtracking logic (bsc#1232823 CVE-2023-52920).
  - bpf: handle fake register spill to stack with BPF_ST_MEM
    instruction (bsc#1232823 CVE-2023-52920).
  - commit 52cdf87


author: mfranc@suse.cz
changelog:
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in
    ip_tunnel_init_flow() (CVE-2024-53042 bsc#1233540).
  - commit 6649f10


author: mfranc@suse.cz
changelog:
  - dm cache: fix out-of-bounds access to the dirty bitset when
    resizing (CVE-2024-50279 bsc#1233468).
  - commit 2080b22


author: ohering@suse.de
changelog:
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (git-fixes).
  - commit 109e508


author: mkoutny@suse.com
changelog:
  - signal: restore the override_rlimit logic (CVE-2024-50271
    bsc#1233460).
  - ucounts: fix counter leak in inc_rlimit_get_ucounts()
    (bsc#1233460).
  - commit 232c2a6


author: ptesarik@suse.com
changelog:
  - kexec_file: fix elfcorehdr digest exclusion when
    CONFIG_CRASH_HOTPLUG=y (git-fixes).
  - commit 1b2a54a


author: mkoutny@suse.com
changelog:
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs
    (bsc#1234108).
  - Revert "cgroup: Fix memory leak caused by missing
    cgroup_bpf_offline" (bsc#1234108).
  - commit 6a48bcc


author: sjaeckel@suse.de
changelog:
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (CVE-2024-50125
    bsc#1232928).
  - Refresh
    patches.suse/Bluetooth-ISO-Fix-UAF-on-iso_sock_timeout.patch.
    Revert Bluetooth-ISO-Fix-UAF-on-iso_sock_timeout.patch to the upstream
    version of the patch.
    The reverted version was a mix of 1bf4470a and 246b435a, since they were
    accidentally identified as two different commits doing the same changes.
    The changes are indeed mostly the same, but to different files.
  - commit 5725fe5


author: mhocko@suse.com
changelog:
  - Update
    patches.suse/drm-amd-display-Adjust-VSDB-parser-for-replay-featur.patch
    (stable-fixes CVE-2024-53108 bsc#1234081).
  - Update
    patches.suse/fs-ntfs3-Fixed-overflow-check-in-mi_enum_attr.patch
    (bsc#1233207 CVE-2024-27407 bsc#1224429).
  - Update
    patches.suse/ima-fix-buffer-overrun-in-ima_eventdigest_init_commo.patch
    (git-fixes CVE-2024-53106 bsc#1234083).
  - Update
    patches.suse/keys-Fix-overwrite-of-key-expiration-on-instantiation.patch
    (git-fixes CVE-2024-36031 bsc#1225713).
  - Update
    patches.suse/media-uvcvideo-Skip-parsing-frames-of-type-UVC_VS_UN.patch
    (git-fixes CVE-2024-53104 bsc#1234025).
  - Update
    patches.suse/net-relax-socket-state-check-at-accept-time.patch
    (git-fixes CVE-2024-36484 bsc#1226872).
  - Update
    patches.suse/nvme-multipath-defer-partition-scanning.patch
    (bsc#122824 git-fixes CVE-2024-53093 bsc#1233640).
  - Update
    patches.suse/nvme-tcp-avoid-race-between-queue_lock-lock-and-dest.patch
    (git-fixes CVE-2024-53100 bsc#1233771).
  - Update
    patches.suse/ocfs2-uncache-inode-which-has-failed-entering-the-group.patch
    (git-fixes CVE-2024-53112 bsc#1234087).
  - Update
    patches.suse/scsi-mpi3mr-Avoid-memcpy-field-spanning-write-WARNING.patch
    (git-fixes CVE-2024-36920 bsc#1225768).
  - Update
    patches.suse/scsi-pm80xx-Set-phy-enable_completion-only-when-we-wait-for-it.patch
    (git-fixes CVE-2024-47666 bsc#1231453).
  - Update
    patches.suse/tcp-Fix-refcnt-handling-in-__inet_hash_connect.patch
    (git-fixes CVE-2024-26864 bsc#1223112).
  - Update
    patches.suse/tracing-osnoise-Use-a-cpumask-to-know-what-threads-are-kthreads.patch
    (git-fixes CVE-2024-46788 bsc#1230817).
  - Update
    patches.suse/tracing-timerlat-Move-hrtimer_init-to-timerlat_fd-open.patch
    (git-fixes CVE-2024-26703 bsc#1222423).
  - Update
    patches.suse/x86-CPU-AMD-Clear-virtualized-VMLOAD-VMSAVE-on-Zen4-client
    (bsc#1233443 CVE-2024-53114 bsc#1234072).
  - commit 420eea1


author: dsterba@suse.com
changelog:
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption (CVE-2024-49952 bsc#1232157)
  - commit d0f307b


author: dsterba@suse.com
changelog:
  - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (CVE-2024-49944 bsc#1232166)
  - commit c7bd304


author: henrique.carvalho@suse.com
changelog:
  - smb: client: Fix use-after-free of network namespace
    (bsc#1233642 CVE-2024-53095).
    Also applies:
    smb: client: fix warning in generic_ip_connect()
  - commit 97b3d9a


author: sjaeckel@suse.de
changelog:
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler()
    (CVE-2024-50154 bsc#1233070).
  - commit 297942f


author: iivanov@suse.de
changelog:
  - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610 (git-fixes)
  - commit eac58a3


author: msuchanek@suse.de
changelog:
  - powerpc/kexec: Fix return of uninitialized variable
    (bsc#1194869).
  - powerpc/pseries: Fix KVM guest detection for disabling
    hardlockup detector (bsc#1194869).
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
    (bsc#1194869).
  - powerpc/mm/fault: Fix kfence page fault reporting (bsc#1194869).
  - powerpc/powernv: Free name on error in opal_event_init()
    (bsc#1194869).
  - powerpc/atomic: Use YZ constraints for DS-form instructions
    (bsc#1194869).
  - powerpc/mm: Fix boot warning with hugepages and
    CONFIG_DEBUG_VIRTUAL (bsc#1194869).
  - powerpc/mm: Fix boot crash with FLATMEM (bsc#1194869).
  - commit 290216a


author: iivanov@suse.de
changelog:
  - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (git-fixes)
  - commit dd2d99e


author: msuchanek@suse.de
changelog:
  - powerpc/fadump: Move fadump_cma_init to setup_arch() after
    initmem_init() (bsc#1215199).
  - powerpc/fadump: Refactor and prepare fadump_cma_init for late
    init (bsc#1215199).
  - powerpc/pseries: Use correct data types from pseries_hp_errorlog
    struct (bsc#1215199).
  - powerpc/vdso: Inconditionally use CFUNC macro (bsc#1215199).
  - powerpc/64s: Fix unnecessary copy to 0 when kernel is booted
    at address 0 (bsc#1215199).
  - commit d36d28e


author: dsterba@suse.com
changelog:
  - net: hns3: fix kernel crash when uninstalling driver (CVE-2024-50296 bsc#1233485)
  - commit 6e41fd9


author: dsterba@suse.com
changelog:
  - net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (CVE-2024-26596 bsc#1220355)
  - commit 4861dc8


author: dsterba@suse.com
changelog:
  - Bluetooth: btnxpuart: Fix random crash seen while removing driver (CVE-2024-46680 bsc#1230557)
  - commit 3831431


author: dsterba@suse.com
changelog:
  - Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test (bsc#1230557)
  - commit 9ca14b5


author: dsterba@suse.com
changelog:
  - drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (CVE-2024-53056 bsc#1233568)
  - commit 95cef70


author: dsterba@suse.com
changelog:
  - drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (CVE-2024-53051 bsc#1233547)
  - commit 5262489


author: tiwai@suse.de
changelog:
  - can: j1939: j1939_session_new(): fix skb reference counting
    (git-fixes).
  - can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum
    DS80000789E 6 (git-fixes).
  - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics
    (git-fixes).
  - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
    (git-fixes).
  - can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics
    (git-fixes).
  - can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics
    (git-fixes).
  - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors
    statistics (git-fixes).
  - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors
    statistics (git-fixes).
  - can: hi311x: hi3110_can_ist(): fix potential use-after-free
    (git-fixes).
  - can: sun4i_can: sun4i_can_err(): call can_change_state()
    even if cf is NULL (git-fixes).
  - can: c_can: c_can_handle_bus_err(): update statistics if skb
    allocation fails (git-fixes).
  - can: dev: can_set_termination(): allow sleeping GPIOs
    (git-fixes).
  - HID: wacom: fix when get product name maybe null pointer
    (git-fixes).
  - watchdog: rti: of: honor timeout-sec property (git-fixes).
  - watchdog: mediatek: Make sure system reset gets asserted in
    mtk_wdt_restart() (git-fixes).
  - watchdog: apple: Actually flush writes after requesting watchdog
    restart (git-fixes).
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
    (git-fixes).
  - commit 535e699


author: tbogendoerfer@suse.de
changelog:
  - net/mlx5: fs, lock FTE when checking if active (CVE-2024-53121
    bsc#1234078).
  - mlxsw: spectrum_ipip: Fix memory leak when changing remote
    IPv6 address (CVE-2024-50252 bsc#1233201).
  - commit 06c045b


author: jgross@suse.com
changelog:
  - vp_vdpa: fix id_table array not null terminated error
    (CVE-2024-53110 bsc#1234085).
  - commit ffc9457


author: tbogendoerfer@suse.de
changelog:
  - net/mlx5e: kTLS, Fix incorrect page refcounting (CVE-2024-53138
    bsc#1234223).
  - ice: protect XDP configuration with a mutex (CVE-2024-46765
    bsc#1230807).
  - sch/netem: fix use after free in netem_dequeue (CVE-2024-46800
    bsc#1230827).
  - commit c9f3783


author: tiwai@suse.de
changelog:
  - drm/v3d: Enable Performance Counters before clearing them
    (git-fixes).
  - drm/sti: Add __iomem for mixer_dbg_mxn's parameter (git-fixes).
  - dma-fence: Use kernel's sort for merging fences (git-fixes).
  - dma-fence: Fix reference leak on fence merge failure path
    (git-fixes).
  - ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec
    (git-fixes).
  - ASoC: SOF: ipc3-topology: fix resource leaks in
    sof_ipc3_widget_setup_comp_dai() (git-fixes).
  - ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).
  - regmap: detach regmap from dev on regmap_exit (git-fixes).
  - spi: mpc52xx: Add cancel_work_sync before module remove
    (git-fixes).
  - mmc: core: Further prevent card detect during shutdown
    (git-fixes).
  - commit 87e627e


author: tiwai@suse.de
changelog:
  - ASoC: Intel: avs: da7219: Remove suspend_pre() and resume_post()
    (stable-fixes).
  - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360
    (NP730QFG) (stable-fixes).
  - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook
    430 G8 (stable-fixes).
  - ALSA: usb-audio: add mixer mapping for Corsair HS80
    (stable-fixes).
  - ALSA: hda/conexant: fix Z60MR100 startup pop issue
    (stable-fixes).
  - commit 8c25a0a


author: jack@suse.cz
changelog:
  - Update tags in
    patches.suse/ext4-fix-slab-use-after-free-in-ext4_split_extent_at.patch
    (bsc#1232201 CVE-2024-49884 bsc#1232198).
  - commit 9d4c3ec


author: colyli@suse.de
changelog:
  - percpu: Add {raw,this}_cpu_try_cmpxchg() (bsc#1220773).
  - instrumentation: Wire up cmpxchg128() (bsc#1220773).
  - arch: Introduce arch_{,try_}_cmpxchg128{,_local}() (bsc#1220773).
  - types: Introduce [us]128 (bsc#1220773).
  - cyrpto/b128ops: Remove struct u128 (bsc#1220773).
  - commit 83bf8ec


author: colyli@suse.de
changelog:
  - percpu: Wire up cmpxchg128 (bsc#1220773).
  - Refresh for the above change,
    patches.kabi/kabi-partial-revert-commit-20516d6e51dd.patch.
    patches.suse/x86-Stop-using-weak-symbols-for-__iowrite32_copy.patch.
  - commit afeecf1


author: colyli@suse.de
changelog:
  - x86,amd_iommu: Replace cmpxchg_double() (bsc#1220773).
  - Refresh for the above change,
    patches.suse/iommu-amd-Remove-the-unused-struct-amd_ir_data.ref.
  - commit 8594442


author: colyli@suse.de
changelog:
  - s390/cpum_sf: Convert to cmpxchg128() (bsc#1220773).
  - arch: Remove cmpxchg_double (bsc#1220773).
  - slub: Replace cmpxchg_double() (bsc#1220773).
  - x86,intel_iommu: Replace cmpxchg_double() (bsc#1220773).
  - commit e59d679


author: jack@suse.cz
changelog:
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read
    lock required!" (bsc#1234140).
  - commit 1c37ba4


author: jack@suse.cz
changelog:
  - loop: fix the the direct I/O support check when used on top
    of block devices (bsc#1234143).
  - commit 19fc4dd


author: jack@suse.cz
changelog:
  - Revert "block/mq-deadline: use correct way to throttling write
    requests" (bsc#1234146).
  - commit bfb157c


author: jack@suse.cz
changelog:
  - block, bfq: choose the last bfqq from merge chain in
    bfq_setup_cooperator() (bsc#1234149).
  - commit 31f51cb


author: jack@suse.cz
changelog:
  - ext4: fix memory leaks in
    ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954).
  - commit 858c12d


author: jack@suse.cz
changelog:
  - ext4: add correct group descriptors and reserved GDT blocks
    to system zone (bsc#1234164).
  - commit b2d7f10


author: jack@suse.cz
changelog:
  - ext4: do not let fstrim block system suspend
    (https://bugzilla.kernel.org/show_bug.cgi?id=216322
    bsc#1234166).
  - commit 97d74ff


author: jack@suse.cz
changelog:
  - ext4: remove gdb backup copy for meta bg in
    setup_new_flex_group_blocks (bsc#1234173).
  - commit 0b21c6d


author: jack@suse.cz
changelog:
  - ext4: mark buffer new if it is unwritten to avoid stale data
    exposure (bsc#1234175).
  - commit 4f219a3


author: jack@suse.cz
changelog:
  - ext4: convert to exclusive lock while inserting delalloc extents
    (bsc#1234178).
  - commit 840bfbc


author: jack@suse.cz
changelog:
  - ext4: forbid commit inconsistent quota data when
    errors=remount-ro (bsc#1234178).
  - commit be3e759


author: jack@suse.cz
changelog:
  - ext4: set type of ac_groups_linear_remaining to __u32 to avoid
    overflow (bsc#1234181).
  - commit 8e12e03


author: jack@suse.cz
changelog:
  - ext4: set the type of max_zeroout to unsigned int to avoid
    overflow (bsc#1234182).
  - commit 0667b2e


author: jack@suse.cz
changelog:
  - ext4: check the extent status again before inserting delalloc
    block (bsc#1234186).
  - commit d4fbc74


author: jack@suse.cz
changelog:
  - ext4: fix incorrect tid assumption in
    ext4_wait_for_tail_page_commit() (bsc#1234188).
  - commit caeda6d


author: jack@suse.cz
changelog:
  - ext4: fix incorrect tid assumption in
    __jbd2_log_wait_for_space() (bsc#1234188).
  - commit 623004d


author: jack@suse.cz
changelog:
  - ext4: fix incorrect tid assumption in
    jbd2_journal_shrink_checkpoint_list() (bsc#1234188).
  - commit 38cda9c


author: jack@suse.cz
changelog:
  - ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with
    discard (bsc#1234190).
  - commit 639ad7f


author: jack@suse.cz
changelog:
  - ext4: propagate errors from ext4_find_extent() in
    ext4_insert_range() (bsc#1234194).
  - commit a2d285b


author: jack@suse.cz
changelog:
  - isofs: handle CDs with bad root inode but good Joliet root
    directory (bsc#1234199).
  - commit 70006a0


author: jack@suse.cz
changelog:
  - writeback, cgroup: switch inodes with dirty timestamps to
    release dying cgwbs (bsc#1234203).
  - commit c53bcd7


author: jack@suse.cz
changelog:
  - mm/filemap: avoid buffered read/write race to read inconsistent
    data (bsc#1234204).
  - commit fe65737


author: jack@suse.cz
changelog:
  - fs/writeback: bail out if there is no more inodes for IO and
    queued once (bsc#1234207).
  - commit 749caac


author: jack@suse.cz
changelog:
  - ext4: using nofail preallocation in
    ext4_es_insert_delayed_block() (bsc#1234170).
  - commit 7a53aa3


author: jack@suse.cz
changelog:
  - readahead: use ilog2 instead of a while loop in
    page_cache_ra_order() (bsc#1234208).
  - commit e601535


author: jack@suse.cz
changelog:
  - block, bfq: fix procress reference leakage for bfqq in merge
    chain (bsc#1234280).
  - commit e551f87


author: tiwai@suse.de
changelog:
  - iio: magnetometer: yas530: use signed integer type for clamp
    limits (git-fixes).
  - scatterlist: fix incorrect func name in kernel-doc (git-fixes).
  - kasan: make report_lock a raw spinlock (git-fixes).
  - commit c03eb5e


author: ohering@suse.de
changelog:
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of
    SRB_STATUS_DATA_OVERRUN as an error (git-fixes).
  - net :mana :Request a V2 response version for MANA_QUERY_GF_STAT
    (git-fixes).
  - commit 5ae2067


author: tbogendoerfer@suse.de
changelog:
  - net: bridge: mcast: wait for previous gc cycles when removing
    port (CVE-2024-44934 bsc#1229809).
  - commit 4999b27


author: sjaeckel@suse.de
changelog:
  - netfilter: nft_set_pipapo: do not free live element
    (CVE-2024-26924 bsc#1223387).
  - commit e933c39


author: mgorman@suse.de
changelog:
  - sched/numa: fix memory leak due to the overwritten
    vma->numab_state (git fixes (sched/numa)).
  - commit 639ae96


author: tzimmermann@suse.com
changelog:
  - drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221 CVE-2024-53133)
    Added an additional fixes tag refering to commit abd26a3252cb ("drm/amd/display:
    Add dml2 copy functions").
  - commit 100a7fa


author: ddiss@suse.de
changelog:
  - Update
    patches.suse/initramfs-avoid-filename-buffer-overrun.patch
    (CVE-2024-53142 bsc#1232436).
  - commit d5d0ad8


author: davide.benini@suse.com
changelog:
  - kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len)
    (CVE-2024-50039 bsc#1231909).
  - commit cc27caf


author: vbabka@suse.cz
changelog:
  - mm: page_alloc: move mlocked flag clearance into
    free_pages_prepare() (CVE-2024-53105 bsc#1234069).
  - commit d988d1d


author: vbabka@suse.cz
changelog:
  - mm/mremap: fix address wraparound in move_page_tables()
    (CVE-2024-53111 bsc#1234086).
  - commit 85bf967


author: vbabka@suse.cz
changelog:
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
    (CVE-2024-53113 bsc#1234077).
  - commit 0c80b5e


author: jack@suse.cz
changelog:
  - Update tags in:
    patches.suse/udf-fix-uninit-value-use-in-udf_get_fileshortad.patch
    (bsc#1234243 bsc#1233038 CVE-2024-50143).
  - commit 420cdda


author: jack@suse.cz
changelog:
  - Update tags in
    patches.suse/udf-refactor-inode_bmap-to-handle-error.patch
    (bsc#1234242 bsc#1233096 CVE-2024-50211).
  - commit 18aa07e


author: ailiop@suse.com
changelog:
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
    (bsc#1234220 CVE-2024-53131).
  - commit 6de8c49


author: ailiop@suse.com
changelog:
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
    (bsc#1234219 CVE-2024-53130).
  - commit c6f7b3e


author: tiwai@suse.de
changelog:
  - serial: 8250_fintek: Add support for F81216E (stable-fixes).
  - drm/amdgpu: fix usage slab after free (stable-fixes).
  - drm/amdkfd: Use the correct wptr size (stable-fixes).
  - drm/radeon: Fix spurious unplug event on radeon HDMI
    (git-fixes).
  - drm/amd/pm: update current_socclk and current_uclk in
    gpu_metrics on smu v13.0.7 (stable-fixes).
  - ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad
    P14s Gen 5 21MES00B00 (stable-fixes).
  - counter: ti-ecap-capture: Add check for clk_enable()
    (git-fixes).
  - counter: stm32-timer-cnt: Add check for clk_enable()
    (git-fixes).
  - Bluetooth: MGMT: Fix possible deadlocks (git-fixes).
  - PCI: Fix use-after-free of slot->bus on hot remove
    (stable-fixes).
  - checkpatch: always parse orig_commit in fixes tag (git-fixes).
  - mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE
    (git-fixes).
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
    (git-fixes).
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
    (git-fixes).
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
    (git-fixes).
  - mfd: da9052-spi: Change read-mask to write-mask (git-fixes).
  - drm/etnaviv: flush shader L1 cache after user commandstream
    (stable-fixes).
  - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
    (stable-fixes).
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse
    in case of failures (stable-fixes).
  - clocksource/drivers/timer-ti-dm: Fix child node refcount
    handling (git-fixes).
  - clocksource/drivers:sp804: Make user selectable (git-fixes).
  - hwmon: (pmbus/core) clear faults after setting smbalert mask
    (git-fixes).
  - drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F
    DMI match less strict (stable-fixes).
  - regulator: rk808: Add apply_bit for BUCK3 on RK809
    (stable-fixes).
  - can: j1939: fix error in J1939 documentation (stable-fixes).
  - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events
    (stable-fixes).
  - platform/x86: dell-smbios-base: Extends support to Alienware
    products (stable-fixes).
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
    (git-fixes).
  - soc: qcom: Add check devm_kasprintf() returned value
    (stable-fixes).
  - firmware: arm_scmi: Reject clear channel request on A2P
    (stable-fixes).
  - usb: typec: use cleanup facility for 'altmodes_node'
    (stable-fixes).
  - mac80211: fix user-power when emulating chanctx (stable-fixes).
  - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend
    (stable-fixes).
  - net: usb: qmi_wwan: add Quectel RG650V (stable-fixes).
  - usb: add support for new USB device ID 0x17EF:0x3098 for the
    r8152 driver (stable-fixes).
  - PCI: j721e: Add reset GPIO to struct j721e_pcie (stable-fixes).
  - PCI: cadence: Set cdns_pcie_host_init() global (stable-fixes).
  - PCI: cadence: Extract link setup sequence from
    cdns_pcie_host_setup() (stable-fixes).
  - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
    (stable-fixes).
  - drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw
    (stable-fixes).
  - drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
    (stable-fixes).
  - drm/radeon: change rdev->ddev to rdev_to_drm(rdev)
    (stable-fixes).
  - drm/radeon: add helper rdev_to_drm(rdev) (stable-fixes).
  - checkpatch: check for missing Fixes tags (stable-fixes).
  - hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK
    (stable-fixes).
  - PCI: j721e: Add PCIe 4x lane selection support (stable-fixes).
  - PCI: j721e: Add per platform maximum lane settings
    (stable-fixes).
  - mtd: hyperbus: rpc-if: Convert to platform remove callback
    returning void (stable-fixes).
  - commit c2f6105


author: tiwai@suse.de
changelog:
  - platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW
    showing incorrect fan speed (stable-fixes).
  - commit 16ab399


author: tiwai@suse.de
changelog:
  - drm/dp_mst: Fix resetting msg rx state after topology removal
    (git-fixes).
  - ALSA: usb-audio: Notify xrun for low-latency mode (git-fixes).
  - commit 4cb8f05


author: sjaeckel@suse.de
changelog:
  - netfilter: nf_tables: use timestamp to check for set element
    timeout (CVE-2024-27397 bsc#1224095).
  - netfilter: nft_set_rbtree: .deactivate fails if element has
    expired (CVE-2024-27397 bsc#1224095).
  - commit 7c6b7ec


author: sjaeckel@suse.de
changelog:
  - netfilter: bridge: replace physindev with physinif in
    nf_bridge_info (CVE-2024-35839 bsc#1224726).
  - netfilter: propagate net to nf_bridge_get_physindev
    (CVE-2024-35839 bsc#1224726).
  - netfilter: nf_queue: remove excess nf_bridge variable
    (CVE-2024-35839 bsc#1224726).
  - netfilter: nfnetlink_log: use proper helper for fetching
    physinif (CVE-2024-35839 bsc#1224726).
  - commit bcdb77b


author: tiwai@suse.de
changelog:
  - tpm/eventlog: Limit memory allocations for event logs with
    excessive size (bsc#1233260 bsc#1233259 bsc#1232421).
  - commit 9c38d71


author: tiwai@suse.de
changelog:
  - dmaengine: idxd: Check for driver name match before sva user
    feature (bsc#1234357).
  - commit 2a8f3bf


author: jslaby@suse.cz
changelog:
  - PCI: Add T_PERST_CLK_US macro (git-fixes).
  - PCI: j721e: Add suspend and resume support (git-fixes).
  - PCI: j721e: Use T_PERST_CLK_US macro (git-fixes).
  - Refresh
    patches.suse/PCI-j721e-Deassert-PERST-after-a-delay-of-PCIE_T_PVP.patch.
  - commit 48f05ae


author: sjaeckel@suse.de
changelog:
  - kABI fix for netfilter: bridge: replace physindev with physinif
    in nf_bridge_info (CVE-2024-35839 bsc#1224726).
  - commit cf24c71


author: henrique.carvalho@suse.com
changelog:
  - Delete
    patches.suse/smb-client-Fix-use-after-free-of-network-namespace-.patch
    (bsc#1233642 CVE-2024-53095).
    [hcarvalho: revert because the fix is incomplete. The patch fixes UAF of
    network namespace but causes in another UAF (of the socket) when the
    cifs module is removed].
  - commit 928bab1


author: colyli@suse.de
changelog:
  - Update References: field,
    patches.suse/dm-cache-fix-out-of-bounds-access-to-the-dirty-bitset-when-resizing.patch
    (bsc#1233467, bsc#1233468, CVE-2024-50278, CVE-2024-50279).
  - commit c98dcb1


author: colyli@suse.de
changelog:
  - dm cache: fix potential out-of-bounds access on the first resume
    (bsc#1233467, CVE-2024-50278).
  - dm cache: optimize dirty bit checking with find_next_bit when
    resizing (bsc#1233467, CVE-2024-50278).
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr
    error (bsc#1233467, CVE-2024-50278, bsc#1233469, CVE-2024-50280).
  - dm cache: correct the number of origin blocks to match the
    target length (bsc#1233467, CVE-2024-50278).
  - commit 44af9e6


author: ailiop@suse.com
changelog:
  - nilfs2: propagate directory read errors from nilfs_find_entry()
    (bsc#1233324 CVE-2024-50202).
  - commit 3d85d69


author: tbogendoerfer@suse.de
changelog:
  - net: preserve kabi for napi_struct and net_device
    (CVE-2024-50018 bsc#1232419).
  - commit 8d46390


author: tbogendoerfer@suse.de
changelog:
  - netfilter: nf_reject_ipv6: fix potential crash in
    nf_send_reset6() (CVE-2024-50256 bsc#1233200).
  - net: napi: Prevent overflow of napi_defer_hard_irqs
    (CVE-2024-50018 bsc#1232419).
  - commit bb4ef32


author: tiwai@suse.de
changelog:
  - Revert "unicode: Don't special case ignorable code points"
    (stable-fixes).
  - crypto: x86/sha256 - Add parentheses around macros' single
    arguments (stable-fixes).
  - crypto: qat - disable IOV in adf_dev_stop() (git-fixes).
  - accel/habanalabs: fix debugfs files permissions (stable-fixes).
  - accel/habanalabs: increase HL_MAX_STR to 64 bytes to avoid
    warnings (stable-fixes).
  - accel/habanalabs: export dma-buf only if size/offset multiples
    of PAGE_SIZE (stable-fixes).
  - accel/habanalabs/gaudi2: unsecure tpc count registers
    (stable-fixes).
  - commit 64f4d90


author: tiwai@suse.de
changelog:
  - drm/amd/display: Allow backlight to go below
    `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT` (stable-fixes).
  - drm/amdkfd: Fix resource leak in criu restore queue
    (stable-fixes).
  - drm/amdgpu: enable gfxoff quirk on HP 705G4 (stable-fixes).
  - drm/amdgpu: add raven1 gfxoff quirk (stable-fixes).
  - drm/amdgpu/gfx10: use rlc safe mode for soft recovery
    (stable-fixes).
  - drm/amdgpu/gfx11: use rlc safe mode for soft recovery
    (stable-fixes).
  - drm/amd/display: Fix Synaptics Cascaded Panamera DSC
    Determination (stable-fixes).
  - drm/printer: Allow NULL data in devcoredump printer
    (stable-fixes).
  - drm/amdgpu/gfx9: use rlc safe mode for soft recovery
    (stable-fixes).
  - drm/amdgpu: Block MMR_READ IOCTL in reset (stable-fixes).
  - drm/radeon/r100: Handle unknown family in
    r100_cp_init_microcode() (stable-fixes).
  - drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
    (stable-fixes).
  - drm/amd/display: Revert Avoid overflow assignment
    (stable-fixes).
  - drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2
    surfaces (stable-fixes).
  - drm/amd/display: Avoid overflow assignment in link_dp_cts
    (stable-fixes).
  - drm/amdgpu/gfx9: properly handle error ints on all pipes
    (stable-fixes).
  - drm/nouveau/gsp: Use the sg allocator for level 2 of radix3
    (stable-fixes).
  - drm/amdgpu/umsch: don't execute umsch test when GPU is in
    reset/suspend (stable-fixes).
  - drm/amdgpu/pm: Remove gpu_od if it's an empty directory
    (stable-fixes).
  - drm/amdgpu: differentiate external rev id for gfx 11.5.0
    (stable-fixes).
  - drm/amd/pm: fix the high voltage issue after unload
    (stable-fixes).
  - drm/amdgpu: add smu 14.0.1 discovery support (stable-fixes).
  - drm/amdgpu/umsch: reinitialize write pointer in hw init
    (stable-fixes).
  - commit f0f6440


author: tbogendoerfer@suse.de
changelog:
  - igb: Fix potential invalid memory access in igb_init_module()
    (git-fixes).
  - ixgbe: downgrade logging of unsupported VF API version to debug
    (git-fixes).
  - ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5
    (git-fixes).
  - ice: fix PHY Clock Recovery availability check (git-fixes).
  - net/mlx5e: Remove workaround to avoid syndrome for internal port
    (git-fixes).
  - net/qed: allow old cards not supporting "num_images" to work
    (git-fixes).
  - bnxt_en: Fix receive ring space parameters when XDP is active
    (git-fixes).
  - bnxt_en: Set backplane link modes correctly for ethtool
    (git-fixes).
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface
    is down (git-fixes).
  - vdpa/mlx5: Fix suboptimal range on iotlb iteration (git-fixes).
  - i40e: Fix handling changed priv flags (git-fixes).
  - ice: consistently use q_idx in ice_vc_cfg_qs_msg() (git-fixes).
  - Revert "igb: Disable threaded IRQ for igb_msix_other"
    (git-fixes).
  - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
    (git-fixes).
  - net/mlx5e: clear xdp features on non-uplink representors
    (git-fixes).
  - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
    (git-fixes).
  - vDPA/ifcvf: Fix pci_read_config_byte() return code handling
    (git-fixes).
  - vdpa: solidrun: Fix UB bug with devres (git-fixes).
  - drivers: net: ionic: add missed debugfs cleanup to ionic_probe()
    error path (git-fixes).
  - ice: change q_index variable type to s16 to store -1 value
    (git-fixes).
  - Octeontx2-pf: Free send queue buffers incase of leaf to inner
    (git-fixes).
  - devlink: Fix length of eswitch inline-mode (git-fixes).
  - net: Return error from sk_stream_wait_connect() if
    sk_wait_event() fails (git-fixes).
  - commit fa15ce4


author: ailiop@suse.com
changelog:
  - ubifs: Correct the total block count by deducting journal
    reservation (git-fixes).
  - commit 3145547


author: ailiop@suse.com
changelog:
  - nilfs2: fix potential out-of-bounds memory access in
    nilfs_find_entry() (git-fixes).
  - commit cb9e5a0


author: ailiop@suse.com
changelog:
  - xfs: remove unknown compat feature check in superblock write
    validation (git-fixes).
  - commit 6933b9b


author: vkarasulli@suse.de
changelog:
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated
    tables (git-fixes).
  - commit 0c9ae1f


author: dsterba@suse.com
changelog:
  - drm/i915/hdcp: Add encoder check in hdcp2_get_capability (CVE-2024-53050 bsc#1233546)
  - commit 410a89a


author: dsterba@suse.com
changelog:
  - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (CVE-2024-53122 bsc#1234076)
  - commit 129e03d


author: dsterba@suse.com
changelog:
  - Update references for patches.suse/bpf-arm64-Fix-address-emission-with-tag-based-KASAN-enabled.patch (CVE-2024-50203 bsc#1233328 git-fixes)
  - commit 6ae65a2


author: tiwai@suse.de
changelog:
  - Bluetooth: SCO: Add support for 16 bits transparent voice
    setting (git-fixes).
  - Bluetooth: iso: Fix recursive locking warning (git-fixes).
  - batman-adv: Do not let TT changes list grows indefinitely
    (git-fixes).
  - batman-adv: Remove uninitialized data in full table TT response
    (git-fixes).
  - batman-adv: Do not send uninitialized TT changes (git-fixes).
  - wifi: mac80211: fix station NSS capability initialization order
    (git-fixes).
  - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
    (git-fixes).
  - commit 54fd934


author: jslaby@suse.cz
changelog:
  - rpm/kernel-binary.spec.in: fix KMPs build on 6.13+ (bsc#1234454)
    Upstream commit 822b11a74ba2 (kbuild: use absolute path in the generated
    wrapper Makefile) sets also KBUILD_OUTPUT in objdir's Makefile before
    including srcdir's Makefile.
    So emulate this too, otherwise KMPs fail to build:
    /usr/src/linux-6.13.0-rc2-1.gf92fc5d/Makefile:782: /usr/src/linux-6.13.0-rc2-1.gf92fc5d/include/config/auto.conf: No such file or directory
  - commit 46168e5


author: vbabka@suse.cz
changelog:
  - percpu: Fix self-assignment of __old in raw_cpu_generic_try_cmpxchg() (bsc#1220773 git-fix).
  - commit ceecf8a


author: vbabka@suse.cz
changelog:
  - locking/atomic/x86: Correct the definition of __arch_try_cmpxchg128() (bsc#1220773 git-fix).
  - commit 60d5cb5


author: dsterba@suse.com
changelog:
  - Update references for patches.suse/net-mlx5e-CT-Fix-null-ptr-deref-in-add-rule-err-flow.patch (CVE-2024-53120 bsc#1234075 git-fixes).
  - commit 76825cc


author: neilb@suse.de
changelog:
  - Delete patches.suse/NFSD-Convert-the-callback-workqueue-to-use-delayed_w.patch.  (bsc#1233837)
  - Delete patches.suse/NFSD-Reschedule-CB-operations-when-backchannel-rpc_c.patch.  (bsc#1233837)
  - commit 5e13c63


author: neilb@suse.de
changelog:
  - autofs: fix memory leak of waitqueues in autofs_catatonic_mode
    (git-fixes).
  - Refresh
    patches.suse/autofs-use-wake_up-instead-of-wake_up_interruptible.patch.
  - commit 232ce22


author: nmorey@suse.com
changelog:
  - IB/mlx5: Allocate resources just before first QP/SRQ is created (git-fixes)
    Refresh patches.suse/RDMA-mlx5-Move-events-notifier-registration-to-be-af.patch
  - commit 1acdd4a


author: davide.benini@suse.com
changelog:
  - net: Make copy_safe_from_sockptr() match documentation
    (git-fixes CVE-2024-36915 bsc#1225758).
  - commit 169ff54


author: mfranc@suse.cz
changelog:
  - s390/facility: Disable compile time optimization for
    decompressor code (git-fixes).
  - commit 0a4f48e


author: mhocko@suse.com
changelog:
  - Update
    patches.suse/Bluetooth-hci_event-Align-BR-EDR-JUST_WORKS-paring-w.patch
    (git-fixes, bsc#1230697, CVE-2024-8805).
  - commit c30f45f


author: pmladek@suse.com
changelog:
  - kdb: Use format-strings rather than '\0' injection in kdb_read()
    (bsc#1234654).
  - commit 02dd473


author: pmladek@suse.com
changelog:
  - kdb: Fix console handling when editing and tab-completing
    commands (bsc#1234655).
  - commit dfcc116


author: pmladek@suse.com
changelog:
  - kdb: Use format-specifiers rather than memset() for padding
    in kdb_read() (bsc#1234658).
  - commit 4289748


author: jgross@suse.com
changelog:
  - xen/netfront: fix crash when removing device (XSA-465
    CVE-2024-53240 bsc#1234281).
  - commit a1f1eb9


author: jgross@suse.com
changelog:
  - x86: make get_cpu_vendor() accessible from Xen code (XSA-466
    CVE-2024-53241 bsc#1234282).
  - commit e26e99c


author: jgross@suse.com
changelog:
  - x86/static-call: provide a way to do very early static-call
    updates (XSA-466 CVE-2024-53241 bsc#1234282).
  - commit ad3c5c8


author: jgross@suse.com
changelog:
  - x86/xen: don't do PV iret hypercall through hypercall page
    (XSA-466 CVE-2024-53241 bsc#1234282).
  - commit 65b9ccb


author: jgross@suse.com
changelog:
  - x86/xen: use new hypercall functions instead of hypercall page
    (XSA-466 CVE-2024-53241 bsc#1234282).
  - commit 6b3f759


author: tbogendoerfer@suse.de
changelog:
  - idpf: fix idpf_vc_core_init error path (CVE-2024-53064
    bsc#1233558 bsc#1234464).
  - commit a3dcc3f


author: mkoutny@suse.com
changelog:
  - af_unix: Call manage_oob() for every skb in
    unix_stream_read_generic() (bsc#1234725).
  - commit 03c4c99


author: jslaby@suse.cz
changelog:
  - wifi: ath5k: add PCI ID for Arcadyan devices (git-fixes).
  - wifi: ath5k: add PCI ID for SX76X (git-fixes).
  - genirq/irqdesc: Honor caller provided affinity in alloc_desc()
    (git-fixes).
  - genirq/cpuhotplug: Retry with cpu_online_mask when migration
    fails (git-fixes).
  - genirq/cpuhotplug: Skip suspended interrupts when restoring
    affinity (git-fixes).
  - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
    (git-fixes).
  - arch: consolidate arch_irq_work_raise prototypes (git-fixes).
  - commit 8315804


author: ailiop@suse.com
changelog:
  - jfs: add a check to prevent array-index-out-of-bounds in
    dbAdjTree (git-fixes).
  - commit 25ee5c2


author: tonyj@suse.de
changelog:
  - x86/static-call: fix 32-bit build (git-fixes).
    Branch maintainer: Fix git-fixes warning when merging backport of
    upstream 0ef8047b737d.
    We don't support 32bit but fix is innocuous so we may as well take
    it vs blacklisting.
  - commit 74a7f88


author: shung-hsi.yu@suse.com
changelog:
  - bpf: Check validity of link->type in bpf_link_show_fdinfo()
    (bsc#1233772 CVE-2024-53099).
  - commit 8a3e410


author: shung-hsi.yu@suse.com
changelog:
  - selftests/bpf: Test PROBE_MEM of VSYSCALL_ADDR on x86-64
    (git-fixes).
  - bpf, x86: Fix PROBE_MEM runtime load check (git-fixes).
  - commit 2300edd


author: tiwai@suse.de
changelog:
  - dmaengine: tegra: Return correct DMA status when paused
    (git-fixes).
  - dmaengine: mv_xor: fix child node refcount handling in early
    exit (git-fixes).
  - dmaengine: apple-admac: Avoid accessing registers in probe
    (git-fixes).
  - dmaengine: dw: Select only supported masters for ACPI devices
    (git-fixes).
  - dmaengine: at_xdmac: avoid null_prt_deref in
    at_xdmac_prep_dma_memset (git-fixes).
  - amdgpu/uvd: get ring reference from rq scheduler (git-fixes).
  - Documentation: PM: Clarify pm_runtime_resume_and_get() return
    value (git-fixes).
  - ACPICA: events/evxfregn: don't release the ContextMutex that
    was never acquired (git-fixes).
  - ACPI: resource: Fix memory resource type union access
    (git-fixes).
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
    (git-fixes).
  - ASoC: amd: yc: Fix the wrong return value (git-fixes).
  - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
    (stable-fixes).
  - Bluetooth: hci_event: Fix using rcu_read_(un)lock while
    iterating (git-fixes).
  - drm/amdgpu/hdp5.2: do a posting read when flushing HDP
    (stable-fixes).
  - drm/dp_mst: Verify request type in the corresponding down
    message reply (stable-fixes).
  - drm/dp_mst: Fix MST sideband message body length check
    (stable-fixes).
  - dma-buf: fix dma_fence_array_signaled v4 (stable-fixes).
  - drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted
    on vcn v4.0.3 (stable-fixes).
  - ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad
    T14s Gen 6 21M1CTO1WW (stable-fixes).
  - ASoC: amd: yc: fix internal mic on Redmi G 2022 (stable-fixes).
  - driver core: fw_devlink: Stop trying to optimize cycle detection
    logic (git-fixes).
  - ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[]
    (stable-fixes).
  - ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8
    A1-840 (stable-fixes).
  - drm/bridge: it6505: Fix inverted reset polarity (git-fixes).
  - drm/amdgpu: set the right AMDGPU sg segment limitation
    (stable-fixes).
  - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
    (stable-fixes).
  - drm/sched: memset() 'job' in drm_sched_job_init()
    (stable-fixes).
  - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel
    (stable-fixes).
  - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
    (stable-fixes).
  - drm/amdgpu: Dereference the ATCS ACPI buffer (stable-fixes).
  - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
    for vega20_ih (stable-fixes).
  - drm/radeon/r600_cs: Fix possible int overflow in
    r600_packet3_check() (stable-fixes).
  - drm/display: Fix building with GCC 15 (stable-fixes).
  - drm/mcde: Enable module autoloading (stable-fixes).
  - drm/bridge: it6505: Enable module autoloading (stable-fixes).
  - drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK
    (stable-fixes).
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Founder
    edition (stable-fixes).
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
    (stable-fixes).
  - drm/vc4: hvs: Set AXI panic modes for the HVS (stable-fixes).
  - drm/vc4: hdmi: Avoid log spam for audio start failure
    (stable-fixes).
  - ASoC: hdmi-codec: reorder channel allocation list
    (stable-fixes).
  - dma-debug: fix a possible deadlock on radix_lock (stable-fixes).
  - Bluetooth: hci_core: Fix not checking skb length on
    hci_acldata_packet (stable-fixes).
  - Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device
    tables (stable-fixes).
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error
    in l2cap_sock_create() (stable-fixes).
  - ACPI: x86: Make UART skip quirks work on PCI UARTs without an
    UID (stable-fixes).
  - ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C
    (stable-fixes).
  - ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
    (stable-fixes).
  - drm/bridge: it6505: update usleep_range for RC circuit charge
    time (stable-fixes).
  - can: gs_usb: add VID/PID for Xylanta SAINT3 product family
    (stable-fixes).
  - driver core: Add FWLINK_FLAG_IGNORE to completely ignore a
    fwnode link (stable-fixes).
  - driver core: fw_devlink: Improve logs for cycle detection
    (stable-fixes).
  - Bluetooth: ISO: Reassociate a socket with an active BIS
    (stable-fixes).
  - commit e98af40


author: tiwai@suse.de
changelog:
  - drm/amdgpu: don't access invalid sched (git-fixes).
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
    (stable-fixes).
  - drm/panel: novatek-nt35950: fix return value check in
    nt35950_probe() (git-fixes).
  - drm/i915: Fix memory leak by correcting cache object name in
    error handler (git-fixes).
  - drm/i915: Fix NULL pointer dereference in capture_engine
    (git-fixes).
  - HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support
    (stable-fixes).
  - gpio: grgpio: Add NULL check in grgpio_probe (git-fixes).
  - gpio: grgpio: use a helper variable to store the address of
    ofdev->dev (stable-fixes).
  - commit caf7811


author: tiwai@suse.de
changelog:
  - PCI/MSI: Handle lack of irqdomain gracefully (git-fixes).
  - i2c: microchip-core: fix "ghost" detections (git-fixes).
  - i2c: microchip-core: actually use repeated sends (git-fixes).
  - i2c: imx: add imx7d compatible string for applying erratum
    ERR007805 (git-fixes).
  - linux/dmaengine.h: fix a few kernel-doc warnings (git-fixes).
  - phy: core: Fix an OF node refcount leakage in
    of_phy_provider_lookup() (git-fixes).
  - phy: core: Fix an OF node refcount leakage in _of_phy_get()
    (git-fixes).
  - phy: core: Fix that API devm_phy_destroy() fails to destroy
    the phy (git-fixes).
  - phy: core: Fix that API devm_of_phy_provider_unregister()
    fails to unregister the phy provider (git-fixes).
  - phy: core: Fix that API devm_phy_put() fails to release the phy
    (git-fixes).
  - phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP
    (git-fixes).
  - phy: rockchip: naneng-combphy: fix phy reset (git-fixes).
  - phy: usb: Toggle the PHY power during init (git-fixes).
  - mtd: rawnand: arasan: Fix missing de-registration of NAND
    (git-fixes).
  - mtd: rawnand: arasan: Fix double assertion of chip-select
    (git-fixes).
  - mtd: diskonchip: Cast an operand to prevent potential overflow
    (git-fixes).
  - mtd: rawnand: fix double free in atmel_pmecc_create_user()
    (git-fixes).
  - of/irq: Fix using uninitialized variable @addr_len in API
    of_irq_parse_one() (git-fixes).
  - of: Fix refcount leakage for OF node returned by
    __of_get_dma_parent() (git-fixes).
  - of: Fix error path in of_parse_phandle_with_args_map()
    (git-fixes).
  - media: dvb-frontends: dib3000mb: fix uninit-value in
    dib3000_write_reg (git-fixes).
  - hwmon: (tmp513) Fix interpretation of values of Temperature
    Result and Limit Registers (git-fixes).
  - hwmon: (tmp513) Fix Current Register value interpretation
    (git-fixes).
  - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage
    and Limit Registers (git-fixes).
  - i915/guc: Accumulate active runtime on gt reset (git-fixes).
  - i915/guc: Ensure busyness counter increases motonically
    (git-fixes).
  - i915/guc: Reset engine utilization buffer before registration
    (git-fixes).
  - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC
    quirk (git-fixes).
  - i2c: riic: Always round-up when calculating bus period
    (git-fixes).
  - i2c: pnx: Fix timeout in wait functions (git-fixes).
  - mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia
    Edu Atla 10 tablet (stable-fixes).
  - PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs
    (stable-fixes).
  - PCI: qcom: Add support for IPQ9574 (stable-fixes).
  - PCI: Add ACS quirk for Wangxun FF5xxx NICs (stable-fixes).
  - PCI: Detect and trust built-in Thunderbolt chips (stable-fixes).
  - PCI: Add 'reset_subordinate' to reset hierarchy below bridge
    (stable-fixes).
  - PCI: vmd: Set devices to D0 before enabling PM L1 Substates
    (stable-fixes).
  - pinctrl: qcom: spmi-mpp: Add PM8937 compatible (stable-fixes).
  - pinctrl: qcom-pmic-gpio: add support for PM8937 (stable-fixes).
  - leds: class: Protect brightness_show() with led_cdev->led_access
    mutex (stable-fixes).
  - media: cx231xx: Add support for Dexatek USB Video Grabber
    1d19:6108 (stable-fixes).
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared
    camera (stable-fixes).
  - media: uvcvideo: RealSense D421 Depth module metadata
    (stable-fixes).
  - mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting (git-fixes).
  - mmc: mtk-sd: fix devm_clk_get_optional usage (stable-fixes).
  - mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED
    (stable-fixes).
  - mmc: core: Add SD card quirk for broken poweroff notification
    (stable-fixes).
  - hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list
    (stable-fixes).
  - of: address: Report error on resource bounds overflow
    (stable-fixes).
  - PCI/AER: Disable AER service on suspend (stable-fixes).
  - PCI: Use preserve_config in place of pci_flags (stable-fixes).
  - PCI: Add ACS quirk for Broadcom BCM5760X NIC (stable-fixes).
  - hwmon: (tmp513) Use SI constants from units.h (stable-fixes).
  - hwmon: (tmp513) Simplify with dev_err_probe() (stable-fixes).
  - hwmon: (tmp513) Don't use "proxy" headers (stable-fixes).
  - commit 5b99336


author: tiwai@suse.de
changelog:
  - power: supply: gpio-charger: Fix set charge current limits
    (git-fixes).
  - USB: serial: option: add Telit FE910C04 rmnet compositions
    (stable-fixes).
  - USB: serial: option: add MediaTek T7XX compositions
    (stable-fixes).
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
    (stable-fixes).
  - USB: serial: option: add MeiG Smart SLM770A (stable-fixes).
  - USB: serial: option: add TCL IK512 MBIM & ECM (stable-fixes).
  - usb: dwc2: Fix HCD port connection race (git-fixes).
  - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature (git-fixes).
  - usb: dwc2: Fix HCD resume (git-fixes).
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed
    due to accessing null pointer (git-fixes).
  - usb: dwc3: xilinx: make sure pipe clock is deselected in usb2
    only mode (git-fixes).
  - usb: typec: anx7411: fix OF node reference leaks in
    anx7411_typec_switch_probe() (git-fixes).
  - usb: typec: anx7411: fix fwnode_handle reference leak
    (git-fixes).
  - usb: host: max3421-hcd: Correctly abort a USB request
    (git-fixes).
  - usb: ehci-hcd: fix call balance of clocks handling routines
    (git-fixes).
  - spi: aspeed: Fix an error handling path in
    aspeed_spi_[read|write]_user() (git-fixes).
  - wifi: cfg80211: sme: init n_channels before channels[] access
    (git-fixes).
  - wifi: mac80211: init cnt before accessing elem in
    ieee80211_copy_mbssid_beacon (git-fixes).
  - rtc: cmos: avoid taking rtc_lock for extended period of time
    (stable-fixes).
  - serial: amba-pl011: fix build regression (git-fixes).
  - serial: amba-pl011: Fix RX stall when DMA is used (git-fixes).
  - serial: 8250_dw: Add Sophgo SG2044 quirk (stable-fixes).
  - usb: dwc3: ep0: Don't clear ep0 DWC3_EP_TRANSFER_STARTED
    (git-fixes).
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set
    (stable-fixes).
  - pinmux: Use sequential access to access desc->pinmux data
    (stable-fixes).
  - thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens
    (stable-fixes).
  - wifi: brcmfmac: Fix oops due to NULL pointer dereference in
    brcmf_sdiod_sglist_rw() (stable-fixes).
  - wifi: ipw2x00: libipw_rx_any(): fix bad alignment
    (stable-fixes).
  - wifi: rtw89: check return value of ieee80211_probereq_get()
    for RNR (stable-fixes).
  - soc: fsl: cpm1: qmc: Set the ret error code on
    platform_get_irq() failure (git-fixes).
  - soc: imx8m: Probe the SoC driver as platform driver
    (stable-fixes).
  - soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their
    CPM1 version (stable-fixes).
  - soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its
    CPM1 version (stable-fixes).
  - soc: fsl: cpm1: qmc: Re-order probe() operations (stable-fixes).
  - soc: fsl: cpm1: qmc: Fix blank line and spaces (stable-fixes).
  - usb: dwc3: ep0: Don't reset resource alloc flag (including ep0)
    (git-fixes).
  - usb: dwc2: gadget: Don't write invalid mapped sg entries into
    dma_desc with iommu enabled (stable-fixes).
  - usb: cdns3-ti: Add workaround for Errata i2409 (stable-fixes).
  - usb: cdns3: Add quirk flag to enable suspend residency
    (stable-fixes).
  - usb: dwc3: ep0: Don't reset resource alloc flag (git-fixes).
  - xhci: Allow RPM on the USB controller (1022:43f7) by default
    (stable-fixes).
  - usb: dwc3: gadget: Rewrite endpoint allocation flow
    (stable-fixes).
  - soc/fsl: cpm: qmc: Convert to platform remove callback returning
    void (stable-fixes).
  - commit 07f38d1


author: tiwai@suse.de
changelog:
  - serial: amba-pl011: Use port lock wrappers (stable-fixes).
  - Refresh patches.suse/ARM-PL011-Fix-DMA-support.patch.
  - commit acf4ef9


author: tiwai@suse.de
changelog:
  - wifi: mac80211: clean up 'ret' in sta_link_apply_parameters()
    (stable-fixes).
  - Refresh
    patches.suse/wifi-mac80211-fix-station-NSS-capability-initializat.patch.
  - commit 484b5d2


author: tiwai@suse.de
changelog:
  - Drop recent ACPI fixes for kABI breakage
    Deleted:
    patches.suse/ACPI-x86-Make-UART-skip-quirks-work-on-PCI-UARTs-wit.patch
    patches.suse/ACPI-x86-Move-acpi_quirk_skip_serdev_enumeration-out.patch
  - commit c49880b


author: krisman@suse.de
changelog:
  - io_uring: always lock __io_cqring_overflow_flush (git-fixes).
  - io_uring/rw: avoid punting to io-wq directly (git-fixes).
  - commit b99f1b6


author: krisman@suse.de
changelog:
  - io_uring: check if iowq is killed before queuing (git-fixes).
  - io_uring: Fix registered ring file refcount leak (git-fixes).
  - commit 3d9d45c


author: fweisbecker@suse.de
changelog:
  - rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
    (bsc#1234810 CVE-2024-53160).
  - commit 94f148d


author: ptesarik@suse.com
changelog:
  - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE
    (git-fixes).
  - swiotlb: Enforce page alignment in swiotlb_alloc() (git-fixes).
  - commit c0aa9ec


author: tiwai@suse.de
changelog:
  - drm/dp_mst: Ensure mst_primary pointer is valid in
    drm_dp_mst_handle_up_req() (stable-fixes).
  - regmap: Use correct format specifier for logging range errors
    (stable-fixes).
  - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
    (stable-fixes).
  - ALSA: seq: ump: Use guard() for locking (stable-fixes).
  - commit 19dff9a


author: tiwai@suse.de
changelog:
  - ALSA: seq: ump: Use automatic cleanup of kfree() (stable-fixes).
  - Refresh
    patches.suse/ALSA-seq-ump-Skip-useless-ports-for-static-blocks.patch.
  - commit 013a8a9


author: jlee@suse.com
changelog:
  - Update
    patches.suse/ALSA-pcm-Add-sanity-NULL-check-for-the-default-mmap-.patch
    (stable-fixes CVE-2024-53180 bsc#1234929).
  - Update
    patches.suse/ALSA-usb-audio-Fix-out-of-bounds-reads-when-finding-.patch
    (stable-fixes CVE-2024-53150 bsc#1234834).
  - Update patches.suse/Bluetooth-MGMT-Fix-possible-deadlocks.patch
    (git-fixes CVE-2024-53207 bsc#1234907).
  - Update
    patches.suse/Bluetooth-MGMT-Fix-slab-use-after-free-Read-in-set_p.patch
    (git-fixes CVE-2024-53208 bsc#1234909).
  - Update
    patches.suse/Bluetooth-fix-use-after-free-in-device_for_each_chil.patch
    (git-fixes CVE-2024-53237 bsc#1235007).
  - Update
    patches.suse/Bluetooth-hci_event-Align-BR-EDR-JUST_WORKS-paring-w.patch
    (git-fixes bsc#1230697 CVE-2024-8805 CVE-2024-53144
    bsc#1234690).
  - Update
    patches.suse/NFSD-Prevent-NULL-dereference-in-nfsd4_process_cb_update.patch
    (git-fixes CVE-2024-53217 bsc#1234999).
  - Update
    patches.suse/NFSD-Prevent-a-potential-integer-overflow.patch
    (git-fixes CVE-2024-53146 bsc#1234853).
  - Update
    patches.suse/NFSv4.0-Fix-a-use-after-free-problem-in-the-asynchronous-open.patch
    (git-fixes CVE-2024-53173 bsc#1234891).
  - Update
    patches.suse/RDMA-mlx5-Move-events-notifier-registration-to-be-af.patch
    (git-fixes CVE-2024-53224 bsc#1235009).
  - Update
    patches.suse/RDMA-rxe-Fix-the-qp-flush-warnings-in-req.patch
    (git-fixes CVE-2024-53229 bsc#1234905).
  - Update
    patches.suse/Revert-mmc-dw_mmc-Fix-IDMAC-operation-with-pages-big.patch
    (git-fixes CVE-2024-53127 bsc#1234153).
  - Update
    patches.suse/SUNRPC-make-sure-cache-entry-active-before-cache_show.patch
    (git-fixes CVE-2024-53174 bsc#1234899).
  - Update
    patches.suse/ad7780-fix-division-by-zero-in-ad7780_write_raw.patch
    (git-fixes CVE-2024-56567 bsc#1234916).
  - Update
    patches.suse/blk-iocost-do-not-WARN-if-iocg-was-already-offlined.patch
    (bsc#1234147 CVE-2024-36908 bsc#1225743).
  - Update
    patches.suse/block-bfq-fix-bfqq-uaf-in-bfq_limit_depth.patch
    (bsc#1234160 CVE-2024-53166 bsc#1234884).
  - Update
    patches.suse/block-bfq-fix-uaf-for-accessing-waker_bfqq-after-spl.patch
    (bsc#1234279 CVE-2024-49854 bsc#1232193).
  - Update
    patches.suse/bnxt_en-Fix-receive-ring-space-parameters-when-XDP-i.patch
    (git-fixes CVE-2024-53209 bsc#1235002).
  - Update
    patches.suse/clk-clk-apple-nco-Add-NULL-check-in-applnco_probe.patch
    (git-fixes CVE-2024-53154 bsc#1234826).
  - Update
    patches.suse/comedi-Flush-partial-mappings-in-error-case.patch
    (git-fixes CVE-2024-53148 bsc#1234832).
  - Update
    patches.suse/crypto-caam-Fix-the-pointer-passed-to-caam_qi_shutdo.patch
    (git-fixes CVE-2024-56754 bsc#1234918).
  - Update
    patches.suse/crypto-qat-qat_4xxx-fix-off-by-one-in-uof_get_name.patch
    (git-fixes CVE-2024-53162 bsc#1234843).
  - Update
    patches.suse/drm-amd-display-Add-NULL-check-for-clk_mgr-in-dcn32_.patch
    (stable-fixes CVE-2024-49915 bsc#1231963).
  - Update
    patches.suse/drm-amd-display-Avoid-overflow-assignment-in-link_dp.patch
    (stable-fixes CVE-2024-50016 bsc#1232420).
  - Update
    patches.suse/drm-amd-display-Fix-null-check-for-pipe_ctx-plane_st-2bc96c9.patch
    (git-fixes CVE-2024-53200 bsc#1234968).
  - Update
    patches.suse/drm-amd-display-Fix-null-check-for-pipe_ctx-plane_st.patch
    (git-fixes CVE-2024-53201 bsc#1234969).
  - Update
    patches.suse/drm-i915-Fix-NULL-pointer-dereference-in-capture_eng.patch
    (git-fixes CVE-2024-56667 bsc#1235016).
  - Update
    patches.suse/drm-nouveau-gr-gf100-Fix-missing-unlock-in-gf100_gr_.patch
    (git-fixes CVE-2024-56752 bsc#1234937).
  - Update
    patches.suse/drm-rockchip-vop-Fix-a-dereferenced-before-check-war.patch
    (git-fixes CVE-2024-53129 bsc#1234155).
  - Update
    patches.suse/filemap-Fix-bounds-checking-in-filemap_read.patch
    (bsc#1234209 CVE-2024-50272 bsc#1233461).
  - Update
    patches.suse/firmware-arm_scpi-Check-the-DVFS-OPP-count-returned-.patch
    (git-fixes CVE-2024-53157 bsc#1234827).
  - Update
    patches.suse/firmware_loader-Fix-possible-resource-leak-in-fw_log.patch
    (git-fixes CVE-2024-53202 bsc#1234970).
  - Update
    patches.suse/hwmon-nct6775-core-Fix-overflows-seen-when-writing-l.patch
    (git-fixes CVE-2024-53159 bsc#1234848).
  - Update
    patches.suse/i3c-master-Fix-miss-free-init_dyn_addr-at-i3c_master.patch
    (git-fixes CVE-2024-56562 bsc#1234930).
  - Update
    patches.suse/kdb-Fix-buffer-overflow-during-tab-complete.patch
    (bsc#1234652 CVE-2024-39480 bsc#1227445).
  - Update
    patches.suse/media-i2c-tc358743-Fix-crash-in-the-probe-error-path.patch
    (git-fixes CVE-2024-56576 bsc#1235019).
  - Update
    patches.suse/mm-revert-mm-shmem-fix-data-race-in-shmem_getattr.patch
    (CVE-2024-50228 bsc#1233204 git fixes (mm/shmem) CVE-2024-53136
    bsc#1234161).
  - Update
    patches.suse/msft-hv-3081-hv_sock-Initializing-vsk-trans-to-NULL-to-prevent-a-.patch
    (git-fixes CVE-2024-53103 bsc#1234024).
  - Update
    patches.suse/net-usb-lan78xx-Fix-double-free-issue-with-interrupt.patch
    (git-fixes CVE-2024-53213 bsc#1234973).
  - Update
    patches.suse/nfsd-release-svc_expkey-svc_export-with-rcu_work.patch
    (git-fixes CVE-2024-53216 bsc#1235003).
  - Update
    patches.suse/nvme-fabrics-fix-kernel-crash-while-shutting-down-co.patch
    (git-fixes CVE-2024-53169 bsc#1234900).
  - Update
    patches.suse/nvme-pci-fix-freeing-of-the-HMB-descriptor-table.patch
    (git-fixes CVE-2024-56756 bsc#1234922).
  - Update
    patches.suse/ocfs2-fix-uninitialized-value-in-ocfs2_file_read_iter.patch
    (git-fixes CVE-2024-53155 bsc#1234855).
  - Update
    patches.suse/s390-iucv-MSG_PEEK-causes-memory-leak-in-iucv_sock_destruct.patch
    (git-fixes CVE-2024-53210 bsc#1234971).
  - Update patches.suse/smb-client-fix-UAF-in-async-decryption.patch
    (bsc#1232418 (CVE-2024-50047) CVE-2024-50047).
  - Update
    patches.suse/soc-qcom-geni-se-fix-array-underflow-in-geni_se_clk_.patch
    (git-fixes CVE-2024-53158 bsc#1234811).
  - Update patches.suse/svcrdma-Address-an-integer-overflow.patch
    (git-fixes CVE-2024-53151 bsc#1234829).
  - Update
    patches.suse/svcrdma-fix-miss-destroy-percpu_counter-in-svc_rdma_proc_init.patch
    (git-fixes CVE-2024-53215 bsc#1234962).
  - Update
    patches.suse/tcp-Fix-use-after-free-of-nreq-in-reqsk_timer_handler.patch
    (CVE-2024-50154 bsc#1233070 CVE-2024-53206 bsc#1234960).
  - Update
    patches.suse/ubifs-authentication-Fix-use-after-free-in-ubifs_tnc_end_commit.patch
    (git-fixes CVE-2024-53171 bsc#1234889).
  - Update patches.suse/vdpa-solidrun-Fix-UB-bug-with-devres.patch
    (git-fixes CVE-2024-53126 bsc#1234158).
  - Update patches.suse/wifi-ath12k-fix-crash-when-unbinding.patch
    (git-fixes CVE-2024-53188 bsc#1234948).
  - Update patches.suse/wifi-ath12k-fix-warning-when-unbinding.patch
    (git-fixes CVE-2024-53191 bsc#1234952).
  - Update
    patches.suse/wifi-ath9k-add-range-check-for-conn_rsp_epid-in-htc_.patch
    (git-fixes CVE-2024-53156 bsc#1234846).
  - Update
    patches.suse/wifi-cw1200-Fix-potential-NULL-dereference.patch
    (git-fixes CVE-2024-56536 bsc#1234911).
  - Update
    patches.suse/wifi-mwifiex-Fix-memcpy-field-spanning-write-warning-d241a13.patch
    (git-fixes CVE-2024-56539 bsc#1234963).
  - Update
    patches.suse/wifi-rtlwifi-Drastically-reduce-the-attempts-to-read.patch
    (stable-fixes CVE-2024-53190 bsc#1234950).
  - commit 525626c


author: dsterba@suse.com
changelog:
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (CVE-2024-53141 bsc#1234381)
  - commit 51ec3c0


author: rgoldwyn@suse.com
changelog:
  - netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING
    (CVE-2024-56755 bsc#1234920).
  - cachefiles: Fix NULL pointer dereference in object->file
    (CVE-2024-56549 bsc#1234912).
  - commit 785eb5b


author: tiwai@suse.de
changelog:
  - wifi: cw1200: Fix potential NULL dereference (git-fixes).
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap
    locking (git-fixes).
  - ALSA: seq: Check UMP support for midi_version change
    (git-fixes).
  - ALSA: usb-audio: US16x08: Initialize array before use
    (git-fixes).
  - drm: adv7511: Drop dsi single lane support (git-fixes).
  - drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
    (git-fixes).
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly
    (git-fixes).
  - drm/i915/dg1: Fix power gate sequence (git-fixes).
  - commit f7b7a9b


author: tiwai@suse.de
changelog:
  - ALSA hda/realtek: Add quirk for Framework F111:000C
    (stable-fixes).
  - ALSA: seq: oss: Fix races at processing SysEx messages
    (stable-fixes).
  - ALSA: hda/realtek: Fix headset mic on Acer Nitro 5
    (stable-fixes).
  - commit d982feb


author: lduncan@suse.com
changelog:
  - Delete patches.suse/drdb-Convert-to-use-bdev_open_by_path.patch.
    See bsc#1234668. This backport did not copile correctly, and
    needed too many other patches to work correctly, since it was
    part of a larger series. So remove it.
  - commit 7f1c582


author: neilb@suse.de
changelog:
  - blacklist.conf:
  - Delete
    patches.suse/nfsd-release-svc_expkey-svc_export-with-rcu_work.patch.
    This was reverted upstream.  There is a better fix.
  - commit 49617fd


author: neilb@suse.de
changelog:
  - nfsd: fix UAF when access ex_uuid or ex_stats (CVE-2024-53216
    bsc#1235003).
  - SUNRPC: no need get cache ref when protected by rcu
    (CVE-2024-53216 bsc#1235003).
  - nfsd: no need get cache ref when protected by rcu
    (CVE-2024-53216 bsc#1235003).
  - SUNRPC: introduce cache_check_rcu to help check in rcu context
    (CVE-2024-53216 bsc#1235003).
  - commit 4d2bea1


author: neilb@suse.de
changelog:
  - Refresh patches.suse/NFSv3-only-use-NFS-timeout-for-MOUNT-when-protocols-.patch.
    Add upstream commit id.
  - commit 4b11aed


author: neilb@suse.de
changelog:
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
    (git-fixes).
  - nfs: ignore SB_RDONLY when mounting nfs (git-fixes).
  - NFSD: initialize copy->cp_clp early in nfsd4_copy for use by
    trace point (git-fixes).
  - commit f025866


author: nmorey@suse.com
changelog:
  - RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters (git-fixes)
  - commit 02a3ccc


author: jslaby@suse.cz
changelog:
  - serial: qcom-geni: fix receiver enable (git-fixes).
  - serial: qcom-geni: fix dma rx cancellation (git-fixes).
  - serial: qcom-geni: fix shutdown race (git-fixes).
  - serial: qcom-geni: revert broken hibernation support
    (git-fixes).
  - serial: qcom-geni: fix polled console initialisation
    (git-fixes).
  - serial: qcom-geni: fix polled console corruption (git-fixes).
  - serial: qcom-geni: disable interrupts during console writes
    (git-fixes).
  - serial: qcom-geni: fix console corruption (git-fixes).
  - serial: qcom-geni: fix false console tx restart (git-fixes).
  - serial: qcom-geni: fix fifo polling timeout (git-fixes).
  - serial: don't use uninitialized value in uart_poll_init()
    (git-fixes).
  - serial: qcom-geni: fix hard lockup on buffer flush (git-fixes).
  - serial: qcom-geni: fix soft lockup on sw flow control and
    suspend (git-fixes).
  - serial: imx: set receiver level before starting uart
    (git-fixes).
  - serial: 8250_dw: Don't use struct dw8250_data outside of 8250_dw
    (git-fixes).
  - Refresh
    patches.suse/serial-8250_dw-Add-Sophgo-SG2044-quirk.patch.
  - serial: stm32: Return IRQ_NONE in the ISR if no handling happend
    (git-fixes).
  - serial: 8250_dw: Replace ACPI device check by a quirk
    (git-fixes).
  - serial: qcom-geni: Don't cancel/abort if we can't get the port
    lock (git-fixes).
  - serial: Do not hold the port lock when setting rx-during-tx GPIO
    (git-fixes).
  - tty: serial: kgdboc: Fix 8250_* kgdb over serial (git-fixes).
  - hvc/xen: fix console unplug (git-fixes).
  - hvc/xen: fix error path in xen_hvc_init() to always register
    frontend driver (git-fixes).
  - hvc/xen: fix event channel handling for secondary consoles
    (git-fixes).
  - commit 2277c72


author: jslaby@suse.cz
changelog:
  - serial: imx: only set receiver level if it is zero (git-fixes).
  - serial: stm32: do not always set SER_RS485_RX_DURING_TX if
    RS485 is enabled (git-fixes).
  - commit f2c678b


author: jslaby@suse.cz
changelog:
  - serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield()
    (git-fixes).
  - serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit()
    (git-fixes).
  - soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR
    registers (git-fixes).
  - commit 89e9015


author: nik.borisov@suse.com
changelog:
  - RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (jsc#PED-10467).
  - commit eb8da28


author: jlee@suse.com
changelog:
  - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in
    rfcomm_sock_alloc() (bsc#1235056 CVE-2024-56604).
  - Bluetooth: Consolidate code around sk_alloc into a helper
    function (bsc#1235056 CVE-2024-56604).
    Refresh
    patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_sock_timeout.patch.
  - commit 9ad4dd1


author: ohering@suse.de
changelog:
  - Drivers: hv: util: Avoid accessing a ringbuffer not initialized
    yet (git-fixes).
  - tools: hv: change permissions of NetworkManager configuration
    file (git-fixes).
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
    (git-fixes).
  - commit b596020


author: vbabka@suse.cz
changelog:
  - mm/slub: Avoid list corruption when removing a slab from the
    full list (CVE-2024-56566 bsc#1235033).
  - commit fa88fa6


author: ddiss@suse.de
changelog:
  - erofs: handle NONHEAD !delta[1] lclusters gracefully
    (bsc#1235045 CVE-2024-53234).
  - commit ac75a6e


author: tiwai@suse.de
changelog:
  - wifi: ath10k: avoid NULL pointer error during sdio remove
    (CVE-2024-56599 bsc#1235138).
  - commit ee28d42


author: jlee@suse.com
changelog:
  - vfio/pci: Properly hide first-in-list PCIe extended capability
    (bsc#1235004 CVE-2024-53214).
  - commit 84c948c


author: dwagner@suse.de
changelog:
  - scsi: qla2xxx: Update version to 10.02.09.400-k (bsc#1235406).
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
    (bsc#1235406).
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue (bsc#1235406).
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to
    rsp_sg_cnt (bsc#1235406).
  - scsi: qla2xxx: Fix use after free on unload (bsc#1235406).
  - scsi: qla2xxx: Fix abort in bsg timeout (bsc#1235406).
  - scsi: qla2xxx: Remove the unused 'del_list_entry' field in
    struct fc_port (bsc#1235406).
  - commit 7f98a5d


author: dsterba@suse.com
changelog:
  - btrfs: fix use-after-free in btrfs_encoded_read_endio() (CVE-2024-56582 bsc#1235128)
  - commit 03199ca


author: dwagner@suse.de
changelog:
  - scsi: lpfc: Copyright updates for 14.4.0.7 patches
    (bsc#1235409).
  - scsi: lpfc: Update lpfc version to 14.4.0.7 (bsc#1235409).
  - scsi: lpfc: Add support for large fw object application layer
    reads (bsc#1235409).
  - scsi: lpfc: Update definition of firmware configuration mbox
    cmds (bsc#1235409).
  - scsi: lpfc: Change lpfc_nodelist save_flags member into a
    bitmask (bsc#1235409).
  - scsi: lpfc: Add handling for LS_RJT reason explanation
    authentication required (bsc#1235409).
  - scsi: lpfc: Modify handling of ADISC based on ndlp state and
    RPI registration (bsc#1235409).
  - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage
    (bsc#1235409).
  - scsi: lpfc: Restrict the REG_FCFI MAM field to FCoE adapters
    only (bsc#1235409).
  - scsi: lpfc: Redefine incorrect type in lpfc_create_device_data()
    (bsc#1235409).
  - commit 9acd44f


author: pmladek@suse.com
changelog:
  - workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work
    from !WQ_MEM_RECLAIM worker (bsc#1235416).
  - commit 1f8402d


author: dwagner@suse.de
changelog:
  - nvme-rdma: unquiesce admin_q before destroy it (git-fixes).
  - nvme-tcp: fix the memleak while create new ctrl failed
    (git-fixes).
  - nvme/multipath: Fix RCU list traversal to use SRCU primitive
    (git-fixes).
  - nvme: fix metadata handling in nvme-passthrough (git-fixes).
  - nvme: apple: fix device reference counting (git-fixes).
  - commit d75a9f8


author: jbohac@suse.cz
changelog:
  - powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump
    is active (bsc#1235108).
  - commit c2d7be7


author: henrique.carvalho@suse.com
changelog:
  - smb: client: Fix use-after-free of network namespace
    (CVE-2024-53095 bsc#1233642).
  - commit a29a1bc


author: henrique.carvalho@suse.com
changelog:
  - smb: client: fix TCP timers deadlock after rmmod (git-fixes)
    [hcarvalho: fix issue described in bsc#1233642]
  - commit 6448f16


author: tbogendoerfer@suse.de
changelog:
  - idpf: trigger SW interrupt when exiting wb_on_itr mode
    (bsc#1235507).
  - idpf: add support for SW triggered interrupts (bsc#1235507).
  - net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024
    (bsc#1235246).
  - idpf: enable WB_ON_ITR (bsc#1235507).
  - commit 561bd1f


author: tiwai@suse.de
changelog:
  - Update
    patches.suse/Bluetooth-L2CAP-do-not-leave-dangling-sk-pointer-on-.patch
    (stable-fixes CVE-2024-56605 bsc#1235061).
  - Update
    patches.suse/can-j1939-j1939_session_new-fix-skb-reference-counti.patch
    (git-fixes CVE-2024-56645 bsc#1235134).
  - Update patches.suse/drm-amdgpu-fix-usage-slab-after-free.patch
    (stable-fixes CVE-2024-56551 bsc#1235075).
  - commit 3b5652e


author: tiwai@suse.de
changelog:
  - Delete XHCI patch for regression (bsc#1235550)
    Deleted:
    patches.suse/xhci-fix-possible-null-pointer-deref-during-xhci-urb.patch
  - commit 9b365a6


author: dsterba@suse.com
changelog:
  - sctp: properly validate chunk size in sctp_sf_ootb() (CVE-2024-50299 bsc#1233488)
  - commit 9038d7f


author: mhocko@suse.com
changelog:
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer()
    (CVE-2024-56642 bsc#1235433).
  - commit 644f840


author: dsterba@suse.com
changelog:
  - ubi: fastmap: Fix duplicate slab cache names while attaching (CVE-2024-53172 bsc#1234898)
  - commit f996297


author: ddiss@suse.de
changelog:
  - ovl: Filter invalid inodes with missing lookup function
    (bsc#1235035 CVE-2024-56570).
  - commit 0cddc7c


author: neelx@suse.com
changelog:
  - btrfs: fix use-after-free waiting for encoded read endios
    (bsc#1235445).
  - btrfs: fix use-after-free in btrfs_encoded_read_endio()
    (bsc#1235445).
  - commit ae44992


author: dsterba@suse.com
changelog:
  - net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603 bsc#1235415)
  - commit 53bb420


author: dsterba@suse.com
changelog:
  - smb: client: fix NULL ptr deref in crypto_aead_setkey() (CVE-2024-53185 bsc#1234901)
  - commit 77b5b00


author: nmorey@suse.com
changelog:
  - af_packet: avoid erroring out after sock_init_data() in packet_create() (CVE-2024-5660 bsc#123541)
  - commit c21a9e5


author: nmorey@suse.com
changelog:
  - bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (CVE-2024-56656  bsc#1235444)
  - commit a44ef4d


author: nmorey@suse.com
changelog:
  - net/mlx5: DR, prevent potential error pointer dereference (CVE-2024-56660 bsc#1235437)
  - commit 0e2235c


author: mhocko@suse.com
changelog:
  - net: hsr: avoid potential out-of-bound access in
    fill_frame_info() (CVE-2024-56648 bsc#1235451).
  - commit 79ce319


author: mhocko@suse.com
changelog:
  - net: ieee802154: do not leave a dangling sk pointer in
    ieee802154_create() (CVE-2024-56602 bsc#1235521).
  - commit 2d367ac


author: nmorey@suse.com
changelog:
  - Fix CVE reference for patches.suse/af_packet-avoid-erroring-out-after-sock_init_data-in.patch (CVE-2024-56606)
  - commit f8ce5de


author: mhocko@suse.com
changelog:
  - scsi: sg: Fix slab-use-after-free read in sg_release()
    (CVE-2024-56631 bsc#1235480).
  - commit cb70e79


author: tiwai@suse.de
changelog:
  - Bluetooth: btnxpuart: Fix driver sending truncated data
    (git-fixes).
  - Bluetooth: MGMT: Fix Add Device to responding before completing
    (git-fixes).
  - Bluetooth: hci_sync: Fix not setting Random Address when
    required (git-fixes).
  - ieee802154: ca8210: Add missing check for kfifo_alloc() in
    ca8210_probe() (git-fixes).
  - irqchip/gic: Correct declaration of *percpu_base pointer in
    union gic_base (stable-fixes).
  - drm/amdkfd: Correct the migration DMA map direction
    (stable-fixes).
  - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
    (stable-fixes).
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
    (stable-fixes).
  - drm/amd/display: Fix incorrect DSC recompute trigger
    (stable-fixes).
  - i2c: i801: Add support for Intel Panther Lake (stable-fixes).
  - Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925
    (stable-fixes).
  - Bluetooth: btusb: mediatek: add callback function in
    btusb_disconnect (stable-fixes).
  - docs: media: update location of the media patches
    (stable-fixes).
  - cleanup: Adjust scoped_guard() macros to avoid potential warning
    (stable-fixes).
  - cleanup: Remove address space of returned pointer (git-fixes).
  - crypto: ecdsa - Avoid signed integer overflow on signature
    decoding (stable-fixes).
  - irqchip/gic-v3: Force propagation of the active state with a
    read-back (stable-fixes).
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
    (stable-fixes).
  - i2c: i801: Add support for Intel Arrow Lake-H (stable-fixes).
  - crypto: ecdsa - Use ecc_digits_from_bytes to convert signature
    (stable-fixes).
  - drm/amd/display: Fix DSC-re-computing (stable-fixes).
  - Bluetooth: btusb: add callback function in btusb suspend/resume
    (stable-fixes).
  - crypto: ecc - Prevent ecc_digits_from_bytes from reading too
    many bytes (git-fixes).
  - Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925
    (stable-fixes).
  - crypto: ecdsa - Rename keylen to bufsize where necessary
    (stable-fixes).
  - crypto: ecdsa - Convert byte arrays with key coordinates to
    digits (stable-fixes).
  - ALSA: ump: Use guard() for locking (stable-fixes).
  - Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925
    (stable-fixes).
  - cleanup: Add conditional guard support (stable-fixes).
  - i2c: xgene-slimpro: Migrate to use generic PCC shmem related
    macros (stable-fixes).
  - ACPI: PCC: Add PCC shared memory region command and status
    bitfields (stable-fixes).
  - mailbox: pcc: Support shared interrupt for multiple subspaces
    (stable-fixes).
  - mailbox: pcc: Add support for platform notification handling
    (stable-fixes).
  - Bluetooth: Add support ITTIM PE50-M75C (stable-fixes).
  - commit 964672e


author: tiwai@suse.de
changelog:
  - modpost: fix the missed iteration for the max bit in do_input()
    (git-fixes).
  - net: wwan: iosm: Properly check for valid exec stage in
    ipc_mmio_init() (git-fixes).
  - net: wwan: t7xx: Fix FSM command timeout issue (git-fixes).
  - thunderbolt: Add support for Intel Panther Lake-M/P
    (stable-fixes).
  - sound: usb: format: don't warn that raw DSD is unsupported
    (stable-fixes).
  - sound: usb: enable DSD output for ddHiFi TC44C (stable-fixes).
  - net: usb: qmi_wwan: add Telit FE910C04 compositions
    (stable-fixes).
  - wifi: mac80211: wake the queues in case of failure in resume
    (stable-fixes).
  - wifi: mac80211: fix mbss changed flags corruption on 32 bit
    systems (stable-fixes).
  - watchdog: rzg2l_wdt: Power on the watchdog domain in the
    restart handler (stable-fixes).
  - wifi: ath12k: fix atomic calls in
    ath12k_mac_op_set_bitrate_mask() (stable-fixes).
  - wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
    (stable-fixes).
  - wifi: mac80211: export ieee80211_purge_tx_queue() for drivers
    (stable-fixes).
  - wifi: mac80211: Add non-atomic station iterator (stable-fixes).
  - watchdog: rzg2l_wdt: Rely on the reset driver for doing proper
    reset (stable-fixes).
  - watchdog: rzg2l_wdt: Remove reset de-assert from probe
    (stable-fixes).
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4035
    (stable-fixes).
  - thunderbolt: Add support for Intel Lunar Lake (stable-fixes).
  - usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag
    (stable-fixes).
  - commit c96ed05


author: tiwai@suse.de
changelog:
  - udmabuf: fix memory leak on last export_udmabuf() error path
    (CVE-2024-56712 bsc#1235565).
  - commit bbc81b4


author: mhocko@suse.com
changelog:
  - bpf, sockmap: Fix race between element replace and close()
    (CVE-2024-56664 bsc#1235249).
  - commit 81511fb


author: tiwai@suse.de
changelog:
  - Update patches.suse/tipc-fix-NULL-deref-in-cleanup_bearer.patch
    (CVE-2024-56642 bsc#1235433).
  - commit 6f4f559


author: tiwai@suse.de
changelog:
  - thermal: of: fix OF node leak in of_thermal_zone_find()
    (git-fixes).
  - drm/mediatek: Add return value check when reading DPCD
    (git-fixes).
  - drm/mediatek: mtk_dsi: Add registers to pdata to fix
    MT8186/MT8188 (git-fixes).
  - drm/mediatek: Fix mode valid issue for dp (git-fixes).
  - drm/mediatek: Fix YCbCr422 color format issue for DP
    (git-fixes).
  - drm/mediatek: stop selecting foreign drivers (git-fixes).
  - drm/mediatek: Add support for 180-degree rotation in the
    display driver (git-fixes).
  - drm/mediatek: Set private->all_drm_private[i]->drm to NULL if
    mtk_drm_bind returns err (git-fixes).
  - drm/amdkfd: fixed page fault when enable MES shader debugger
    (git-fixes).
  - platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042
    actually enabled it (git-fixes).
  - commit 4e3d452


author: tiwai@suse.de
changelog:
  - hwmon: (drivetemp) Fix driver producing garbage data when SCSI
    errors occur (git-fixes).
  - commit b04cc0b


author: tiwai@suse.de
changelog:
  - iio: inkern: call iio_device_put() only on mapped devices
    (git-fixes).
  - iio: adc: at91: call input_free_device() on allocated iio_dev
    (git-fixes).
  - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
    (git-fixes).
  - iio: pressure: zpa2326: fix information leak in triggered buffer
    (git-fixes).
  - iio: adc: rockchip_saradc: fix information leak in triggered
    buffer (git-fixes).
  - iio: imu: kmx61: fix information leak in triggered buffer
    (git-fixes).
  - iio: light: vcnl4035: fix information leak in triggered buffer
    (git-fixes).
  - iio: adc: ti-ads8688: fix information leak in triggered buffer
    (git-fixes).
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in
    triggered buffer (git-fixes).
  - iio: gyro: fxas21002c: Fix missing data update in trigger
    handler (git-fixes).
  - iio: test : check null return of kunit_kmalloc in
    iio_rescale_test_scale (git-fixes).
  - iio: adc: ad7124: Disable all channels at probe time
    (git-fixes).
  - staging: iio: ad9832: Correct phase range check (git-fixes).
  - staging: iio: ad9834: Correct phase range check (git-fixes).
  - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
    (git-fixes).
  - USB: core: Disable LPM only for non-suspended ports (git-fixes).
  - usb: fix reference leak in usb_new_device() (git-fixes).
  - usb: gadget: u_serial: Disable ep before setting port to null
    to fix the crash caused by port being null (git-fixes).
  - usb: gadget: configfs: Ignore trailing LF for user strings to
    cdev (git-fixes).
  - USB: usblp: return error when setting unsupported protocol
    (git-fixes).
  - usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
    (git-fixes).
  - usb: typec: tcpm/tcpci_maxim: fix error code in
    max_contaminant_read_resistance_kohm() (git-fixes).
  - usb: dwc3-am62: Disable autosuspend during remove (git-fixes).
  - usb: dwc3: gadget: fix writing NYET threshold (git-fixes).
  - commit 04c952e


author: tiwai@suse.de
changelog:
  - misc: microchip: pci1xxxx: Resolve return code mismatch during
    GPIO set config (git-fixes).
  - misc: microchip: pci1xxxx: Resolve kernel panic during GPIO
    IRQ handling (git-fixes).
  - commit 5eb3001


author: davide.benini@suse.com
changelog:
  - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
    (CVE-2024-49951 bsc#1232158).
  - commit 8b8b4db


author: mfranc@suse.cz
changelog:
  - KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (git-fixes
    bsc#1235776).
  - KVM: s390: Reject setting flic pfault attributes on ucontrol
    VMs (git-fixes bsc#1235777).
  - KVM: s390: vsie: fix virtual/physical address in unpin_scb()
    (git-fixes bsc#1235778).
  - iommu/s390: Implement blocking domain (CVE-2024-53232
    bsc#1235050).
  - commit aa0d65c


author: ematsumiya@suse.de
changelog:
  - smb: client: fix OOBs when building SMB2_IOCTL request
    (bsc#1233055, CVE-2024-50151).
  - commit 6434503


author: krisman@suse.de
changelog:
  - Update
    patches.suse/ALSA-6fire-Release-resources-at-card-release.patch
    (git-fixes CVE-2024-53239 bsc#1235054).
  - Update
    patches.suse/ALSA-caiaq-Use-snd_card_free_when_closed-at-disconne.patch
    (git-fixes CVE-2024-56531 bsc#1235057).
  - Update
    patches.suse/ALSA-us122l-Use-snd_card_free_when_closed-at-disconn.patch
    (git-fixes CVE-2024-56532 bsc#1235059).
  - Update
    patches.suse/ALSA-usb-audio-Fix-potential-out-of-bound-accesses-f.patch
    (git-fixes CVE-2024-53197 bsc#1235464).
  - Update
    patches.suse/ALSA-usx2y-Use-snd_card_free_when_closed-at-disconne.patch
    (git-fixes CVE-2024-56533 bsc#1235053).
  - Update
    patches.suse/Bluetooth-hci_core-Fix-not-checking-skb-length-on-hc.patch
    (stable-fixes CVE-2024-56590 bsc#1235038).
  - Update
    patches.suse/Bluetooth-hci_event-Fix-using-rcu_read_-un-lock-whil.patch
    (git-fixes CVE-2024-56654 bsc#1235532).
  - Update
    patches.suse/HID-wacom-fix-when-get-product-name-maybe-null-point.patch
    (git-fixes CVE-2024-56629 bsc#1235473).
  - Update
    patches.suse/NFSv3-only-use-NFS-timeout-for-MOUNT-when-protocols-.patch
    (bsc#1231016 CVE-2024-50106 bsc#1232882).
  - Update patches.suse/PCI-Fix-reset_method_store-memory-leak.patch
    (git-fixes CVE-2024-56745 bsc#1235563).
  - Update
    patches.suse/PCI-Fix-use-after-free-of-slot-bus-on-hot-remove.patch
    (stable-fixes CVE-2024-53194 bsc#1235459).
  - Update
    patches.suse/PCI-MSI-Handle-lack-of-irqdomain-gracefully.patch
    (git-fixes CVE-2024-56760 bsc#1235616).
  - Update
    patches.suse/RDMA-hns-Fix-cpu-stuck-caused-by-printings-during-re.patch
    (git-fixes CVE-2024-56722 bsc#1235570).
  - Update
    patches.suse/acpi-nfit-vmalloc-out-of-bounds-Read-in-acpi_nfit_ct.patch
    (git-fixes CVE-2024-56662 bsc#1235533).
  - Update
    patches.suse/af_packet-avoid-erroring-out-after-sock_init_data-in.patch
    (CVE-2024-56606 bsc#123541 bsc#1235417).
  - Update
    patches.suse/apparmor-test-Fix-memory-leak-for-aa_unpack_strdup.patch
    (git-fixes CVE-2024-56741 bsc#1235502).
  - Update
    patches.suse/blk-cgroup-Fix-UAF-in-blkcg_unpin_online.patch
    (bsc#1234726 CVE-2024-56672 bsc#1235534).
  - Update
    patches.suse/can-dev-can_set_termination-allow-sleeping-GPIOs.patch
    (git-fixes CVE-2024-56625 bsc#1235223).
  - Update
    patches.suse/can-hi311x-hi3110_can_ist-fix-potential-use-after-fr.patch
    (git-fixes CVE-2024-56651 bsc#1235528).
  - Update
    patches.suse/crypto-bcm-add-error-check-in-the-ahash_hmac_init-fu.patch
    (git-fixes CVE-2024-56681 bsc#1235557).
  - Update
    patches.suse/crypto-pcrypt-Call-crypto-layer-directly-when-padata.patch
    (git-fixes CVE-2024-56690 bsc#1235428).
  - Update
    patches.suse/dlm-fix-possible-lkb_resource-null-dereference.patch
    (git-fixes CVE-2024-47809 bsc#1235714).
  - Update
    patches.suse/dma-debug-fix-a-possible-deadlock-on-radix_lock.patch
    (stable-fixes CVE-2024-47143 bsc#1235710).
  - Update
    patches.suse/dmaengine-at_xdmac-avoid-null_prt_deref-in-at_xdmac_.patch
    (git-fixes CVE-2024-56767 bsc#1235160).
  - Update
    patches.suse/drivers-soc-xilinx-add-the-missing-kfree-in-xlnx_add.patch
    (git-fixes CVE-2024-56546 bsc#1235070).
  - Update patches.suse/drm-amdgpu-don-t-access-invalid-sched.patch
    (git-fixes CVE-2024-46896 bsc#1235707).
  - Update
    patches.suse/drm-amdgpu-set-the-right-AMDGPU-sg-segment-limitatio.patch
    (stable-fixes CVE-2024-56594 bsc#1235413).
  - Update
    patches.suse/drm-dp_mst-Fix-MST-sideband-message-body-length-chec.patch
    (stable-fixes CVE-2024-56616 bsc#1235427).
  - Update
    patches.suse/drm-modes-Avoid-divide-by-zero-harder-in-drm_mode_vr.patch
    (stable-fixes CVE-2024-56369 bsc#1235750).
  - Update
    patches.suse/drm-sti-avoid-potential-dereference-of-error-pointer-831214f.patch
    (git-fixes CVE-2024-56776 bsc#1235647).
  - Update
    patches.suse/drm-sti-avoid-potential-dereference-of-error-pointer-e965e77.patch
    (git-fixes CVE-2024-56777 bsc#1235641).
  - Update
    patches.suse/drm-sti-avoid-potential-dereference-of-error-pointer.patch
    (git-fixes CVE-2024-56778 bsc#1235635).
  - Update
    patches.suse/drm-vc4-hdmi-Avoid-hang-with-debug-registers-when-su.patch
    (git-fixes CVE-2024-56683 bsc#1235497).
  - Update
    patches.suse/drm-zynqmp_kms-Unplug-DRM-device-before-removal.patch
    (git-fixes CVE-2024-56538 bsc#1235051).
  - Update
    patches.suse/efi-libstub-Free-correct-pointer-on-failure.patch
    (git-fixes CVE-2024-56573 bsc#1235042).
  - Update
    patches.suse/fbdev-sh7760fb-Fix-a-possible-memory-leak-in-sh7760f.patch
    (git-fixes CVE-2024-56746 bsc#1235622).
  - Update
    patches.suse/gpio-grgpio-Add-NULL-check-in-grgpio_probe.patch
    (git-fixes CVE-2024-56634 bsc#1235486).
  - Update
    patches.suse/hfsplus-don-t-query-the-device-logical-block-size-multiple-times.patch
    (git-fixes CVE-2024-56548 bsc#1235073).
  - Update
    patches.suse/igb-Fix-potential-invalid-memory-access-in-igb_init_.patch
    (git-fixes CVE-2024-52332 bsc#1235700).
  - Update
    patches.suse/iio-adc-ad7923-Fix-buffer-overflow-for-tx_buf-and-ri.patch
    (git-fixes CVE-2024-56557 bsc#1235122).
  - Update
    patches.suse/io_uring-check-if-iowq-is-killed-before-queuing.patch
    (git-fixes CVE-2024-56709 bsc#1235552).
  - Update
    patches.suse/io_uring-tctx-work-around-xa_store-allocation-error-.patch
    (git-fixes CVE-2024-56584 bsc#1235117).
  - Update
    patches.suse/jfs-add-a-check-to-prevent-array-index-out-of-bounds-in-dbAdjTree.patch
    (git-fixes CVE-2024-56595 bsc#1235410).
  - Update
    patches.suse/jfs-array-index-out-of-bounds-fix-in-dtReadFirst.patch
    (git-fixes CVE-2024-56598 bsc#1235220).
  - Update
    patches.suse/jfs-fix-array-index-out-of-bounds-in-jfs_readdir.patch
    (git-fixes CVE-2024-56596 bsc#1235458).
  - Update patches.suse/jfs-fix-shift-out-of-bounds-in-dbSplit.patch
    (git-fixes CVE-2024-56597 bsc#1235222).
  - Update
    patches.suse/leds-class-Protect-brightness_show-with-led_cdev-led.patch
    (stable-fixes CVE-2024-56587 bsc#1235125).
  - Update
    patches.suse/media-atomisp-Add-check-for-rgby_data-memory-allocat.patch
    (git-fixes CVE-2024-56705 bsc#1235568).
  - Update
    patches.suse/media-dvb-frontends-dib3000mb-fix-uninit-value-in-di.patch
    (git-fixes CVE-2024-56769 bsc#1235155).
  - Update
    patches.suse/media-imx-jpeg-Ensure-power-suppliers-be-suspended-b.patch
    (git-fixes CVE-2024-56575 bsc#1235039).
  - Update
    patches.suse/media-imx-jpeg-Set-video-drvdata-before-register-vid.patch
    (git-fixes CVE-2024-56578 bsc#1235115).
  - Update
    patches.suse/media-mtk-jpeg-Fix-null-ptr-deref-during-unload-modu.patch
    (git-fixes CVE-2024-56577 bsc#1235112).
  - Update
    patches.suse/media-platform-allegro-dvt-Fix-possible-memory-leak-.patch
    (git-fixes CVE-2024-56572 bsc#1235043).
  - Update
    patches.suse/media-ts2020-fix-null-ptr-deref-in-ts2020_probe.patch
    (git-fixes CVE-2024-56574 bsc#1235040).
  - Update
    patches.suse/media-uvcvideo-Require-entities-to-have-a-non-zero-u.patch
    (git-fixes CVE-2024-56571 bsc#1235037).
  - Update
    patches.suse/media-wl128x-Fix-atomicity-violation-in-fmc_send_cmd.patch
    (git-fixes CVE-2024-56700 bsc#1235500).
  - Update
    patches.suse/mfd-intel_soc_pmic_bxtwc-Use-IRQ-domain-for-PMIC-dev.patch
    (git-fixes CVE-2024-56723 bsc#1235571).
  - Update
    patches.suse/mfd-intel_soc_pmic_bxtwc-Use-IRQ-domain-for-TMU-devi.patch
    (git-fixes CVE-2024-56724 bsc#1235577).
  - Update
    patches.suse/mfd-intel_soc_pmic_bxtwc-Use-IRQ-domain-for-USB-Type.patch
    (git-fixes CVE-2024-56691 bsc#1235425).
  - Update
    patches.suse/msft-hv-3095-Drivers-hv-util-Avoid-accessing-a-ringbuffer-not-ini.patch
    (git-fixes CVE-2024-55916 bsc#1235747).
  - Update
    patches.suse/mtd-rawnand-fix-double-free-in-atmel_pmecc_create_us.patch
    (git-fixes CVE-2024-56766 bsc#1235219).
  - Update
    patches.suse/net-ipv6-release-expired-exception-dst-cached-in-soc.patch
    (bsc#1216813 CVE-2024-56644 bsc#1235133).
  - Update
    patches.suse/nfsd-fix-nfs4_openowner-leak-when-concurrent-nfsd4_open-occur.patch
    (git-fixes CVE-2024-56779 bsc#1235632).
  - Update
    patches.suse/nfsd-make-sure-exp-active-before-svc_export_show.patch
    (git-fixes CVE-2024-56558 bsc#1235100).
  - Update
    patches.suse/nilfs2-fix-potential-out-of-bounds-memory-access-in-nilfs_find_entry.patch
    (git-fixes CVE-2024-56619 bsc#1235224).
  - Update
    patches.suse/nvme-apple-fix-device-reference-counting.patch
    (git-fixes CVE-2024-43913 bsc#1229833).
  - Update
    patches.suse/nvme-rdma-unquiesce-admin_q-before-destroy-it.patch
    (git-fixes CVE-2024-49569 bsc#1235730).
  - Update
    patches.suse/nvme-tcp-fix-the-memleak-while-create-new-ctrl-faile.patch
    (git-fixes CVE-2024-56632 bsc#1235483).
  - Update
    patches.suse/ocfs2-free-inode-when-ocfs2_get_init_inode-fails.patch
    (git-fixes CVE-2024-56630 bsc#1235479).
  - Update
    patches.suse/pinmux-Use-sequential-access-to-access-desc-pinmux-d.patch
    (stable-fixes CVE-2024-47141 bsc#1235708).
  - Update
    patches.suse/power-supply-gpio-charger-Fix-set-charge-current-lim.patch
    (git-fixes CVE-2024-57792 bsc#1235764).
  - Update
    patches.suse/powerpc-fadump-Move-fadump_cma_init-to-setup_arch-af.patch
    (bsc#1215199 CVE-2024-56677 bsc#1235494).
  - Update
    patches.suse/powerpc-mm-fault-Fix-kfence-page-fault-reporting.patch
    (bsc#1194869 CVE-2024-56678 bsc#1235495).
  - Update
    patches.suse/powerpc-pseries-Fix-dtl_access_lock-to-be-a-rw_semap.patch
    (bsc#1194869 CVE-2024-56701 bsc#1235496).
  - Update
    patches.suse/quota-flush-quota_release_work-upon-quota-writeback.patch
    (bsc#1234195 CVE-2024-56780 bsc#1235650).
  - Update
    patches.suse/rtc-check-if-__rtc_read_time-was-successful-in-rtc_t.patch
    (git-fixes CVE-2024-56739 bsc#1235611).
  - Update
    patches.suse/scsi-qla2xxx-Fix-use-after-free-on-unload.patch
    (bsc#1235406 CVE-2024-56623 bsc#1235466).
  - Update
    patches.suse/smb-client-fix-TCP-timers-deadlock-after-rmmod.patch
    (CVE-2024-53095 bsc#1233642 CVE-2024-54680 bsc#1235723).
  - Update
    patches.suse/soc-imx8m-Probe-the-SoC-driver-as-platform-driver.patch
    (stable-fixes CVE-2024-56787 bsc#1235663).
  - Update
    patches.suse/spi-mpc52xx-Add-cancel_work_sync-before-module-remov.patch
    (git-fixes CVE-2024-50051 bsc#1235739).
  - Update
    patches.suse/sunrpc-clear-XPRT_SOCK_UPD_TIMEOUT-when-reset-transport.patch
    (git-fixes CVE-2024-56688 bsc#1235538).
  - Update
    patches.suse/sunrpc-fix-one-UAF-issue-caused-by-sunrpc-kernel-tcp.patch
    (git-fixes CVE-2024-53168 bsc#1234887).
  - Update patches.suse/tipc-fix-NULL-deref-in-cleanup_bearer.patch
    (CVE-2024-56642 bsc#1235433 CVE-2024-56661 bsc#1234931).
  - Update patches.suse/unicode-Fix-utf8_load-error-path.patch
    (git-fixes CVE-2024-53233 bsc#1235046).
  - Update
    patches.suse/usb-dwc3-gadget-Fix-looping-of-queued-SG-entries.patch
    (git-fixes CVE-2024-56698 bsc#1235491).
  - Update
    patches.suse/usb-gadget-u_serial-Fix-the-issue-that-gs_start_io-c.patch
    (git-fixes CVE-2024-56670 bsc#1235488).
  - Update
    patches.suse/usb-musb-Fix-hardware-lockup-on-first-Rx-endpoint-re.patch
    (git-fixes CVE-2024-56687 bsc#1235537).
  - Update
    patches.suse/wifi-ath12k-Skip-Rx-TID-cleanup-for-self-peer.patch
    (git-fixes CVE-2024-56543 bsc#1235065).
  - Update
    patches.suse/wifi-ath12k-fix-atomic-calls-in-ath12k_mac_op_set_bi.patch
    (stable-fixes CVE-2024-56607 bsc#1235423).
  - Update
    patches.suse/wifi-brcmfmac-Fix-oops-due-to-NULL-pointer-dereferen.patch
    (stable-fixes CVE-2024-56593 bsc#1235252).
  - Update
    patches.suse/wifi-nl80211-fix-NL80211_ATTR_MLO_LINK_ID-off-by-one.patch
    (git-fixes CVE-2024-56663 bsc#1235454).
  - Update
    patches.suse/wifi-rtw88-use-ieee80211_purge_tx_queue-to-purge-TX-.patch
    (stable-fixes CVE-2024-56609 bsc#1235389).
  - Update
    patches.suse/wifi-rtw89-check-return-value-of-ieee80211_probereq_.patch
    (stable-fixes CVE-2024-48873 bsc#1235716).
  - commit 8258b9d


author: dsterba@suse.com
changelog:
  - scsi: hisi_sas: Add cond_resched() for no forced preemption model (CVE-2024-56589 bsc#1235241)
  - commit a1ef870


author: osalvador@suse.de
changelog:
  - mm/sparsemem: fix race in accessing memory_section->usage
    (bsc#1221326 CVE-2023-52489).
  - commit 13000fd


author: tbogendoerfer@suse.de
changelog:
  - net: tun: fix tun_napi_alloc_frags() (CVE-2024-56372
    bsc#1235753).
  - net: renesas: rswitch: avoid use-after-put for a device tree
    node (CVE-2024-55639 bsc#1235737).
  - commit 0d5db72


author: jslaby@suse.cz
changelog:
  - PCI: imx6: Fix suspend/resume support on i.MX6QDL
    (CVE-2024-57809 bsc#1235793).
  - commit 11fd956


author: andrea.porta@suse.com
changelog:
  - Revert 'arm64: Kconfig: Make SME depend on BROKEN for now'
    This reverts commit 2ccfee6be929dd4ea49ef59a7ae686473aae40b6
    CONFIG_ARM64_SME is enabled by default so some customers may
    rely on SME. We need further analysis to evaluate to what
    extent we are impacted and in case we'll disable SME support
    later.
  - commit f83551c


author: ggherdovich@suse.cz
changelog:
  - cpufreq: intel_pstate: Drop redundant locking from
    intel_pstate_driver_cleanup() (bsc#1234619).
  - commit e58d8d7


author: ggherdovich@suse.cz
changelog:
  - cpufreq: intel_pstate: Wait for canceled delayed work to
    complete (bsc#1234619).
  - commit a725954


author: ggherdovich@suse.cz
changelog:
  - cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE()
    annotations (bsc#1234619).
  - commit 682d75a


author: ggherdovich@suse.cz
changelog:
  - cpufreq: intel_pstate: Fold intel_pstate_max_within_limits()
    into caller (bsc#1234619).
  - commit 430dfdb


author: vkarasulli@suse.de
changelog:
  - virt: tdx-guest: Just leak decrypted memory on unrecoverable
    errors (CVE-2024-57793 bsc#1235768).
  - commit 0fbd2e1


author: tiwai@suse.de
changelog:
  - Drop uvcvideo fix due to regression (bsc#1235894)
  - Delete
    patches.suse/media-uvcvideo-Require-entities-to-have-a-non-zero-u.patch.
  - blacklist.conf update
  - commit 90c0ac7


author: ggherdovich@suse.cz
changelog:
  - cpufreq: intel_pstate: Refine computation of P-state for given
    frequency (bsc#1234619).
  - commit 8135bb3


author: ggherdovich@suse.cz
changelog:
  - cpufreq: intel_pstate: Do not update global.turbo_disabled
    after initialization (bsc#1234619).
  - Refresh
    patches.suse/cpufreq-intel_pstate-Ramp-up-frequency-faster-when-u.patch.
  - commit 536c9fc


author: dsterba@suse.com
changelog:
  - scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (CVE-2024-56620 bsc#1235227)
  - commit 00c6f8f


author: ggherdovich@suse.cz
changelog:
  - cpufreq: intel_pstate: Rearrange show_no_turbo() and
    store_no_turbo() (bsc#1234619).
  - commit 9383d66


author: ggherdovich@suse.cz
changelog:
  - cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE()
    (bsc#1234619).
  - Refresh
    patches.suse/cpufreq-intel_pstate-Ramp-up-frequency-faster-when-u.patch.
  - Refresh
    patches.suse/cpufreq-intel_pstate-Temporarily-boost-P-state-when-.patch.
  - commit 1c8960e


author: ggherdovich@suse.cz
changelog:
  - cpufreq: intel_pstate: Replace three global.turbo_disabled
    checks (bsc#1234619).
  - commit 0ad4ebe


author: ggherdovich@suse.cz
changelog:
  - cpufreq: intel_pstate: Update the maximum CPU frequency
    consistently (bsc#1234619).
  - commit 110e6ef


author: ggherdovich@suse.cz
changelog:
  - cpufreq: intel_pstate: Check turbo_is_disabled() in
    store_no_turbo() (bsc#1234619).
  - commit f5b59a5


author: dsterba@suse.com
changelog:
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (CVE-2024-56748 bsc#1235627)
  - commit 75f84ca


author: mhocko@suse.com
changelog:
  - net/smc: check return value of sock_recvmsg when draining clc
    data (CVE-2024-57791 bsc#1235759).
  - commit a343ecd


author: dsterba@suse.com
changelog:
  - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (CVE-2024-48881 bsc#1235727)
  - commit 5c5ddcb


author: neelx@suse.com
changelog:
  - btrfs: add a sanity check for btrfs root in btrfs_search_slot()
    (CVE-2024-56774 bsc#1235653).
  - commit cd76b1a


author: dsterba@suse.com
changelog:
  - i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (CVE-2024-45828 bsc#1235705)
  - commit 6a03a5a


author: ailiop@suse.com
changelog:
  - ipc: fix memleak if msg_init_ns failed in create_ipc_ns
    (bsc#1234893 CVE-2024-53175).
  - commit 5f77971


author: ailiop@suse.com
changelog:
  - xsk: Free skb when TX metadata options are invalid (bsc#1235000
    CVE-2024-53236).
  - commit 7d68164


author: ailiop@suse.com
changelog:
  - bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
    (bsc#1235555 CVE-2024-56675).
  - commit 403c5dd


author: ailiop@suse.com
changelog:
  - netdevsim: prevent bad user input in
    nsim_dev_health_break_write() (bsc#1235587 CVE-2024-56716).
  - commit 28d54d6


author: dsterba@suse.com
changelog:
  - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (CVE-2024-56611 bsc#1235391)
  - commit 2731a92


author: dsterba@suse.com
changelog:
  - bpf: fix recursive lock when verdict program return SK_PASS (CVE-2024-56694 bsc#1235412)
  - commit 19cb085


author: tiwai@suse.de
changelog:
  - ALSA: hda/realtek: Add support for Ayaneo System using CS35L41
    HDA (stable-fixes).
  - ALSA: hda/realtek - Add support for ASUS Zen AIO 27
    Z272SD_A272SD audio (stable-fixes).
  - commit 4039f17


author: tiwai@suse.de
changelog:
  - ALSA: hda/realtek: Add support for Galaxy Book2 Pro (NP950XEE)
    (stable-fixes).
  - Refresh
    patches.suse/ALSA-hda-realtek-Add-support-for-Samsung-Galaxy-Book.patch.
  - commit 231fb10


author: tiwai@suse.de
changelog:
  - Drop downstream TPM fix patch (bsc#1233260 bsc#1233259 bsc#1232421)
    Deleted (to be replaced with the newer upstream fix):
    patches.suse/tpm-eventlog-Limit-memory-allocations-for-event-logs.patch
  - commit 39b3b52


author: tbogendoerfer@suse.de
changelog:
  - net/mlx5e: Skip restore TC rules for vport rep without loaded
    flag (CVE-2024-57801 bsc#1235940).
  - commit 2c1c8f0


author: lduncan@suse.com
changelog:
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched
    in sysfs (CVE-2024-57804 bsc#1235779).
  - block: fix uaf for flush rq while iterating tags (CVE-2024-53170
    bsc#1234888).
  - scsi: qedi: Fix a possible memory leak in
    qedi_alloc_and_init_sb() (CVE-2024-56747 bsc#1234934).
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
    (CVE-2024-53227 bsc#1235011).
  - scsi: hisi_sas: Create all dump files during debugfs
    initialization (CVE-2024-56588 bsc#1235123).
  - commit 2865882


author: ptesarik@suse.com
changelog:
  - ftrace: Fix regression with module command in stack_trace_filter
    (CVE-2024-56569 bsc#1235031).
  - commit fe237c2


author: tiwai@suse.de
changelog:
  - drm/v3d: Ensure job pointer is set to NULL after job completion
    (git-fixes).
  - drm/vmwgfx: Add new keep_resv BO param (git-fixes).
  - selftests: mptcp: avoid spurious errors on disconnect
    (git-fixes).
  - commit 5e7e8a8


author: jgross@suse.com
changelog:
  - x86/static-call: Remove early_boot_irqs_disabled check to fix
    Xen PVH dom0 (git-fixes).
  - commit cbe946f


author: jgross@suse.com
changelog:
  - Refresh
    patches.suse/x86-xen-don-t-do-PV-iret-hypercall-through-hypercall.patch.
  - commit 745fddd


author: jgross@suse.com
changelog:
  - xen: Fix the issue of resource not being properly released in
    xenbus_dev_probe() (CVE-2024-53198 bsc#1234923).
  - commit aeb4569


author: jgross@suse.com
changelog:
  - KVM: arm64: Don't retire aborted MMIO instruction
    (CVE-2024-53196 bsc#1234906).
  - commit 8dbc3ed


author: mfranc@suse.cz
changelog:
  - s390/entry: Mark IRQ entries to fix stack depot warnings
    (CVE-2024-57838 bsc#1235798).
  - commit 17604ac


author: nik.borisov@suse.com
changelog:
  - cacheinfo: Allocate memory during CPU hotplug if not done from the  primary CPU (bsc#1235429 CVE-2024-56617).
  - commit 9e688fc


author: tiwai@suse.de
changelog:
  - Revert "mtd: spi-nor: core: replace dummy buswidth from addr
    to data" (git-fixes).
  - hwmon: (tmp513) Fix division of negative numbers (git-fixes).
  - gpio: xilinx: Convert gpio_lock to raw spinlock (git-fixes).
  - i2c: rcar: fix NACK handling when being a target (git-fixes).
  - i2c: mux: demux-pinctrl: check initial mux selection, too
    (git-fixes).
  - i2c: core: fix reference leak in i2c_register_adapter()
    (git-fixes).
  - USB: serial: option: add Neoway N723-EA support (stable-fixes).
  - USB: serial: option: add MeiG Smart SRM815 (stable-fixes).
  - USB: serial: cp210x: add Phoenix Contact UPS Device
    (stable-fixes).
  - usb-storage: Add max sectors quirk for Nokia 208 (stable-fixes).
  - ACPI: resource: Add TongFang GM5HG0A to
    irq1_edge_low_force_override[] (stable-fixes).
  - ACPI: resource: Add Asus Vivobook X1504VAP to
    irq1_level_low_skip_override[] (stable-fixes).
  - drm/amd/display: Add check for granularity in dml ceil/floor
    helpers (stable-fixes).
  - drm/amd/display: increase MAX_SURFACES to the value supported
    by hw (stable-fixes).
  - ASoC: mediatek: disable buffer pre-allocation (stable-fixes).
  - ASoC: rt722: add delay time to wait for the calibration
    procedure (stable-fixes).
  - commit 356d535


author: heming.zhao@suse.com
changelog:
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
    (bsc#1235964 CVE-2024-57892).
  - ocfs2: correct return value of ocfs2_local_free_info()
    (bsc#1235964 CVE-2024-57892).
  - commit d27bf4b


author: shung-hsi.yu@suse.com
changelog:
  - bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx
    (CVE-2024-53091 bsc#1233638).
  - commit 313e9b6


author: nmorey@suse.com
changelog:
  - RDMA/hns: Refactor mtr find (git-fixes)
    Refresh patches.suse/RDMA-hns-Use-macro-instead-of-magic-number.patch
  - commit de53bbe


author: nmorey@suse.com
changelog:
  - RDMA/hns: Remove unused parameters and variables (git-fixes)
    Refresh patches.suse/RDMA-hns-Fix-mapping-error-of-zero-hop-WQE-buffer.patch
  - commit ad435f0


author: nmorey@suse.com
changelog:
  - RDMA/bnxt_re: Allow MSN table capability check (git-fixes)
    Refresh patches:
    - patches.suse/RDMA-bnxt_re-Fix-the-GID-table-length.patch
    - patches.suse/RDMA-bnxt_re-Remove-always-true-dattr-validity-check.patch
  - commit 1ac774c


author: nmorey@suse.com
changelog:
  - RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters (git-fixes)
    Refresh patches:
    - patches.suse/RDMA-bnxt_re-Disable-use-of-reserved-wqes.patch
    - patches.suse/RDMA-bnxt_re-Fix-the-max-CQ-WQEs-for-older-adapters.patch
  - commit c3e9f58


author: osalvador@suse.de
changelog:
  - mm/memory_hotplug: use pfn math in place of direct struct page
    manipulation (git-fixes).
  - commit 120d675


author: osalvador@suse.de
changelog:
  - mm,page_owner: don't remove __GFP_NOLOCKDEP in
    add_stack_record_to_list (git-fixes).
  - commit 26a8c23


author: osalvador@suse.de
changelog:
  - memory tiering: count PGPROMOTE_SUCCESS when mem tiering is
    enabled (git-fixes).
  - commit 86638ef


author: osalvador@suse.de
changelog:
  - vmscan,migrate: fix page count imbalance on node stats when
    demoting pages (git-fixes).
  - commit 4d259d3


author: heming.zhao@suse.com
changelog:
  - series.conf: temporarily disable upstream patch
    patches.suse/ocfs2-fix-UBSAN-warning-in-ocfs2_verify_volume.patch
    (bsc#1236138)
  - commit 9179570


author: osalvador@suse.de
changelog:
  - mm/migrate: fix kernel BUG at mm/compaction.c:2761! (git-fixes).
    Refreshed: patches.suse/mm-migrate-fix-deadlock-in-migrate_pages_batch-on-la.patch
  - commit 7d17ae8


author: dsterba@suse.com
changelog:
  - smb: Initialize cfid->tcon before performing network ops (CVE-2024-56729 bsc#1235503)
  - commit fd558fd


author: dsterba@suse.com
changelog:
  - net: enetc: Do not configure preemptible TCs if SIs do not support (CVE-2024-56649 bsc#1235449)
  - commit 4181889


author: colyli@suse.de
changelog:
  - dm array: fix releasing a faulty array block twice in
    dm_array_cursor_end (bsc#1236096, CVE-2024-57929).
  - commit 38c0041


author: dsterba@suse.com
changelog:
  - geneve: do not assume mac header is set in geneve_xmit_skb() (CVE-2024-56636 bsc#1235520)
  - commit 3073d9c


author: fdmanana@suse.com
changelog:
  - btrfs: fix use-after-free when COWing tree bock and tracing
    is enabled (bsc#1235645 CVE-2024-56759).
  - btrfs: flush delalloc workers queue before stopping cleaner
    kthread during unmount (bsc#1235965 CVE-2024-57896).
  - btrfs: rename and export __btrfs_cow_block() (bsc#1235645
    CVE-2024-56759).
  - btrfs: use round_down() to align block offset at
    btrfs_cow_block() (bsc#1235645 CVE-2024-56759).
  - btrfs: remove noinline attribute from btrfs_cow_block()
    (bsc#1235645 CVE-2024-56759).
  - commit 503809f


author: dsterba@suse.com
changelog:
  - netfilter: ipset: Hold module reference while requesting a module (CVE-2024-56637 bsc#1235523)
  - commit 53ff17c


author: vkarasulli@suse.de
changelog:
  - KVM: x86: Play nice with protected guests in
    complete_hypercall_exit() (CVE-2024-55881 bsc#1235745).
  - commit 4bd067f


author: osalvador@suse.de
changelog:
  - mm/migrate: make migrate_pages_batch() stats consistent
    (git-fixes).
    Refreshed:
    patches.suse/mm-migrate-fix-deadlock-in-migrate_pages_batch-on-la.patch
  - commit 69ecdc4


author: osalvador@suse.de
changelog:
  - mm: memory-failure: ensure moving HWPoison flag to the raw
    error pages (git-fixes).
  - commit 8250e5e


author: osalvador@suse.de
changelog:
  - mm: memory-failure: fetch compound head after extra page refcnt
    is held (git-fixes).
  - commit dea0e54


author: osalvador@suse.de
changelog:
  - mm: memory-failure: fix race window when trying to get hugetlb
    folio (git-fixes).
  - commit fdf1377


author: osalvador@suse.de
changelog:
  - mm: memory-failure: fix potential page refcnt leak in
    memory_failure() (git-fixes).
  - commit 2df790d


author: osalvador@suse.de
changelog:
  - mm/memory-failure: fix crash in split_huge_page_to_list from
    soft_offline_page (git-fixes).
  - commit 044809f


author: osalvador@suse.de
changelog:
  - mm/memory-failure: use raw_spinlock_t in struct
    memory_failure_cpu (git-fixes).
  - commit 25daa9d


author: msuchanek@suse.de
changelog:
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
    (bsc#1218470 ltc#204531).
  - commit 7a7f1e1


author: tbogendoerfer@suse.de
changelog:
  - net: hns3: don't auto enable misc vector (CVE-2025-21651
    bsc#1236145).
  - gve: guard XSK operations on the existence of queues
    (CVE-2024-57933 bsc#1236178).
  - gve: guard XDP xmit NDO on existence of xdp queues
    (CVE-2024-57932 bsc#1236190).
  - commit 4cf5801


author: dsterba@suse.com
changelog:
  - net/smc: initialize close_work early to avoid warning (CVE-2024-56641 bsc#1235526)
  - commit 075f0f7


author: dsterba@suse.com
changelog:
  - EDAC/igen6: Avoid segmentation fault on module unload (CVE-2024-56708 bsc#1235564)
  - commit cbccd47


author: dsterba@suse.com
changelog:
  - iommu/arm-smmu: Defer probe of clients after smmu device bound (CVE-2024-56568 bsc#1235032)
  - commit cd5e85b


author: dsterba@suse.com
changelog:
  - tracing: Prevent bad count for tracing_cpumask_write (CVE-2024-56763 bsc#1235638)
  - commit b7a1a0d


author: tbogendoerfer@suse.de
changelog:
  - net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of
    bounds issue (CVE-2025-21650 bsc#1236144).
  - net: hns3: Support tlv in regs data for HNS3 VF driver
    (CVE-2025-21650 bsc#1236144).
  - commit d07cfee


author: nmorey@suse.com
changelog:
  - net/mlx5: Fix variable not being completed when function returns (bsc#1236198 CVE-2025-21662)
  - commit 766ce3e


author: nmorey@suse.com
changelog:
  - net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143 CVE-2025-21649)
  - commit ab51b8f


author: jslaby@suse.cz
changelog:
  - x86/fpu: Ensure shadow stack is active before "getting"
    registers (CVE-2025-21632 bsc#1236106).
  - commit 6ea3a8f


author: vliaskovitis@suse.com
changelog:
  - ceph: improve error handling and short/overflow-read logic in
    __ceph_sync_read() (bsc#1228592).
  - commit b40380c


author: msuchanek@suse.de
changelog:
  - powerpc/iommu: Move pSeries specific functions to
    pseries/iommu.c (bsc#1220711 ltc#205755).
  - powerpc/iommu: Only build sPAPR access functions on pSeries
    (bsc#1220711 ltc#205755).
  - commit 1165a9d


author: msuchanek@suse.de
changelog:
  - powerpc/powernv/pci: Remove last IODA1 defines (bsc#1220711
    ltc#205755).
  - powerpc/powernv/pci: Remove MVE code (bsc#1220711 ltc#205755).
  - powerpc/powernv/pci: Remove ioda1 support (bsc#1220711
    ltc#205755).
  - commit 5733e6d


author: davide.benini@suse.com
changelog:
  - gso: fix udp gso fraglist segmentation after pull from frag_list
    (CVE-2024-49978 bsc#1232101).
  - commit 8453570


author: dsterba@suse.com
changelog:
  - bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (CVE-2024-56665 bsc#1235489)
  - commit b2f97f8


author: davide.benini@suse.com
changelog:
  - net: add more sanity checks to qdisc_pkt_len_init()
    (CVE-2024-49948 bsc#1232161).
  - commit 940829f


author: dsterba@suse.com
changelog:
  - usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (CVE-2024-53203 bsc#1235001)
  - commit 601cb11


author: dsterba@suse.com
changelog:
  - usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (bsc#1235001)
  - commit 8b4d1ad


author: davide.benini@suse.com
changelog:
  - net: inet: do not leave a dangling sk pointer in inet_create()
    (CVE-2024-56601 bsc#1235230).
  - commit 959586f


author: mhocko@suse.com
changelog:
  - Update
    patches.suse/ALSA-seq-oss-Fix-races-at-processing-SysEx-messages.patch
    (stable-fixes CVE-2024-57893 bsc#1235920).
  - Update
    patches.suse/RDMA-bnxt_re-Fix-max-SGEs-for-the-Work-Request.patch
    (git-fixes CVE-2024-57936 bsc#1236181).
  - Update
    patches.suse/RDMA-hns-Fix-accessing-invalid-dip_ctx-during-destro.patch
    (git-fixes CVE-2024-57935 bsc#1236180).
  - Update
    patches.suse/RDMA-rtrs-Ensure-ib_sge-list-is-accessible.patch
    (git-fixes CVE-2024-36476 bsc#1235902).
  - Update
    patches.suse/RDMA-uverbs-Prevent-integer-overflow-issue.patch
    (git-fixes CVE-2024-57890 bsc#1235919).
  - Update patches.suse/afs-Fix-the-maximum-cell-name-length.patch
    (git-fixes CVE-2025-21646 bsc#1236168).
  - Update
    patches.suse/arm64-ptrace-fix-partial-SETREGSET-for-NT_ARM_TAGGED_ADDR_CTRL.patch
    (git-fixes CVE-2024-57874 bsc#1235808).
  - Update
    patches.suse/cpufreq-CPPC-Fix-possible-null-ptr-deref-for-cppc_ge.patch
    (git-fixes CVE-2024-53230 bsc#1235976).
  - Update
    patches.suse/cpufreq-CPPC-Fix-possible-null-ptr-deref-for-cpufreq.patch
    (git-fixes CVE-2024-53231 bsc#1235977).
  - Update
    patches.suse/drm-adv7511-Fix-use-after-free-in-adv7533_attach_dsi.patch
    (git-fixes CVE-2024-57887 bsc#1235952).
  - Update
    patches.suse/drm-amd-display-Add-check-for-granularity-in-dml-cei.patch
    (stable-fixes CVE-2024-57922 bsc#1236080).
  - Update
    patches.suse/drm-amdkfd-Correct-the-migration-DMA-map-direction.patch
    (stable-fixes CVE-2024-57897 bsc#1235969).
  - Update
    patches.suse/drm-dp_mst-Ensure-mst_primary-pointer-is-valid-in-dr.patch
    (stable-fixes CVE-2024-57798 bsc#1235818).
  - Update
    patches.suse/drm-dp_mst-Fix-resetting-msg-rx-state-after-topology.patch
    (git-fixes CVE-2024-57876 bsc#1235806).
  - Update
    patches.suse/drm-mediatek-Set-private-all_drm_private-i-drm-to-NU.patch
    (git-fixes CVE-2024-57926 bsc#1236082).
  - Update
    patches.suse/exfat-fix-the-infinite-loop-in-exfat_readdir.patch
    (git-fixes CVE-2024-57940 bsc#1236227).
  - Update
    patches.suse/hwmon-drivetemp-Fix-driver-producing-garbage-data-wh.patch
    (git-fixes CVE-2025-21656 bsc#1236248).
  - Update
    patches.suse/iio-adc-at91-call-input_free_device-on-allocated-iio.patch
    (git-fixes CVE-2024-57904 bsc#1236078).
  - Update
    patches.suse/iio-adc-rockchip_saradc-fix-information-leak-in-trig.patch
    (git-fixes CVE-2024-57907 bsc#1236090).
  - Update
    patches.suse/iio-adc-ti-ads8688-fix-information-leak-in-triggered.patch
    (git-fixes CVE-2024-57906 bsc#1236088).
  - Update
    patches.suse/iio-dummy-iio_simply_dummy_buffer-fix-information-le.patch
    (git-fixes CVE-2024-57911 bsc#1236098).
  - Update
    patches.suse/iio-imu-kmx61-fix-information-leak-in-triggered-buff.patch
    (git-fixes CVE-2024-57908 bsc#1236091).
  - Update
    patches.suse/iio-light-vcnl4035-fix-information-leak-in-triggered.patch
    (git-fixes CVE-2024-57910 bsc#1236097).
  - Update
    patches.suse/iio-pressure-zpa2326-fix-information-leak-in-trigger.patch
    (git-fixes CVE-2024-57912 bsc#1236101).
  - Update
    patches.suse/jffs2-Prevent-rtime-decompress-memory-corruption.patch
    (git-fixes CVE-2024-57850 bsc#1235812).
  - Update
    patches.suse/misc-microchip-pci1xxxx-Resolve-kernel-panic-during-.patch
    (git-fixes CVE-2024-57916 bsc#1236125).
  - Update
    patches.suse/net-wwan-t7xx-Fix-FSM-command-timeout-issue.patch
    (git-fixes CVE-2024-39282 bsc#1235903).
  - Update
    patches.suse/netfilter-nf_tables-adapt-set-backend-to-use-G.patch
    (bsc#1012628 CVE-2023-52923 bsc#1236104).
  - Update patches.suse/nilfs2-prevent-use-of-deleted-inode.patch
    (git-fixes CVE-2024-53690 bsc#1235842).
  - Update
    patches.suse/platform-x86-amd-pmc-Only-disable-IRQ1-wakeup-where-.patch
    (git-fixes CVE-2025-21645 bsc#1236131).
  - Update
    patches.suse/powerpc-pseries-vas-Add-close-callback-in-vas_vm_ops.patch
    (bsc#1234825 CVE-2024-56765 bsc#1235643).
  - Update
    patches.suse/s390-cpum_sf-Handle-CPU-hotplug-remove-during-sampling.patch
    (git-fixes CVE-2024-57849 bsc#1235814).
  - Update
    patches.suse/usb-gadget-f_fs-Remove-WARN_ON-in-functionfs_bind.patch
    (git-fixes CVE-2024-57913 bsc#1236102).
  - Update
    patches.suse/usb-gadget-u_serial-Disable-ep-before-setting-port-t.patch
    (git-fixes CVE-2024-57915 bsc#1236120).
  - Update
    patches.suse/wifi-mac80211-fix-mbss-changed-flags-corruption-on-3.patch
    (stable-fixes CVE-2024-57899 bsc#1235924).
  - Update
    patches.suse/workqueue-Do-not-warn-when-cancelling-WQ_MEM_RECLAIM-work-from-WQ_MEM_RECLAIM-worker.patch
    (bsc#1235416 CVE-2024-57888 bsc#1235918).
  - commit 56e243f


author: mgorman@suse.de
changelog:
  - sched/fair: Fix value reported by hot tasks pulled in
    /proc/schedstat (bsc#1235865).
  - commit 9837653


author: tiwai@suse.de
changelog:
  - Drop PCI patch that caused a regression
    Deleted:
    patches.suse/PCI-Use-preserve_config-in-place-of-pci_flags.patch
  - commit 30fb9e7


author: tiwai@suse.de
changelog:
  - Input: bbnsm_pwrkey - add remove hook (git-fixes).
  - drm/i915/fb: Relax clear color alignment to 64 bytes
    (stable-fixes).
  - drm/amdgpu: always sync the GFX pipe on ctx switch
    (stable-fixes).
  - ACPI: resource: acpi_dev_irq_override(): Check DMI match last
    (stable-fixes).
  - mac802154: check local interfaces before deleting sdata list
    (stable-fixes).
  - selftests: tc-testing: reduce rshift value (stable-fixes).
  - kheaders: Ignore silly-rename files (stable-fixes).
  - commit cbbd806


author: tiwai@suse.de
changelog:
  - ACPI: fan: cleanup resources in the error path of .probe()
    (git-fixes).
  - cpupower: fix TSC MHz calculation (git-fixes).
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
    (git-fixes).
  - Align git commit ID abbreviation guidelines and checks
    (git-fixes).
  - drm/tidss: Clear the interrupt status for interrupts being
    disabled (git-fixes).
  - drm/tidss: Fix issue in irq handling causing irq-flood issue
    (git-fixes).
  - drm/v3d: Stop active perfmon if it is being destroyed
    (git-fixes).
  - drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event()
    (git-fixes).
  - commit 737a47e


author: tiwai@suse.de
changelog:
  - drm/msm: Check return value of of_dma_configure() (git-fixes).
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8550 (git-fixes).
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8350 (git-fixes).
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8250 (git-fixes).
  - drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X (git-fixes).
  - drm/msm/dpu: link DSPP_2/_3 blocks on SM8150 (git-fixes).
  - drm/msm/dp: set safe_to_exit_level before printing it
    (git-fixes).
  - drm/amdgpu: tear down ttm range manager for doorbell in
    amdgpu_ttm_fini() (git-fixes).
  - drm/etnaviv: Fix page property being used for non writecombine
    buffers (git-fixes).
  - Revert "drm/i915/dpt: Make DPT object unshrinkable"
    (stable-fixes).
  - drm/amdgpu: simplify return statement in amdgpu_ras_eeprom_init
    (git-fixes).
  - drm/amdgpu/vcn: reset fw_shared under SRIOV (git-fixes).
  - drm/amdgpu: Fix potential NULL pointer dereference in
    atomctrl_get_smc_sclk_range_table (git-fixes).
  - drm/amd/pm: Fix an error handling path in
    vega10_enable_se_edc_force_stall_config() (git-fixes).
  - drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE
    (git-fixes).
  - drm/rockchip: vop2: Check linear format for Cluster windows
    on rk3566/8 (git-fixes).
  - drm/rcar-du: dsi: Fix PHY lock bit check (git-fixes).
  - drm/rockchip: vop2: Fix the mixer alpha setup for layer 0
    (git-fixes).
  - drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters
    offset (git-fixes).
  - commit 2f1e321


author: tiwai@suse.de
changelog:
  - ktest.pl: Fix typo "accesing" (git-fixes).
  - ktest.pl: Fix typo in comment (git-fixes).
  - ktest.pl: Remove unused declarations in run_bisect_test function
    (git-fixes).
  - ktest.pl: Check kernelrelease return in get_version (git-fixes).
  - landlock: Handle weird files (git-fixes).
  - samples/landlock: Fix possible NULL dereference in parse_path()
    (git-fixes).
  - selftests: timers: clocksource-switch: Adapt progress to
    kselftest framework (git-fixes).
  - selftest: media_tests: fix trivial UAF typo (git-fixes).
  - Input: davinci-keyscan - remove leftover header (git-fixes).
  - HID: core: Fix assumption that Resolution Multipliers must be
    in Logical Collections (git-fixes).
  - HID: fix generic desktop D-Pad controls (git-fixes).
  - HID: hid-thrustmaster: Fix warning in thrustmaster_probe by
    adding endpoint check (git-fixes).
  - HID: multitouch: fix support for Goodix PID 0x01e9 (git-fixes).
  - Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad"
    (stable-fixes).
  - ipmi: ssif_bmc: Fix new request loss when bmc ready for a
    response (git-fixes).
  - ipmi: ipmb: Add check devm_kasprintf() returned value
    (git-fixes).
  - pwm: stm32: Add check for clk_enable() (git-fixes).
  - pwm: stm32-lp: Add check for clk_enable() (git-fixes).
  - leds: netxbig: Fix an OF node reference leak in
    netxbig_leds_get_of_pdata() (git-fixes).
  - leds: lp8860: Write full EEPROM, not only half of it
    (git-fixes).
  - HID: hid-sensor-hub: don't use stale platform-data on remove
    (git-fixes).
  - regulator: of: Implement the unwind path of of_regulator_match()
    (git-fixes).
  - net/rose: prevent integer overflows in rose_setsockopt()
    (git-fixes).
  - drm/msm: don't clean up priv->kms prematurely (git-fixes).
  - selftests/powerpc: Fix argument order to timer_sub()
    (git-fixes).
  - selftests/alsa: Fix circular dependency involving global-timer
    (stable-fixes).
  - ktest.pl: Avoid false positives with grub2 skip regex
    (stable-fixes).
  - ktest: force $buildonly = 1 for 'make_warnings_file' test type
    (stable-fixes).
  - commit 3e5bf1b


author: tiwai@suse.de
changelog:
  - tools: Sync if_xdp.h uapi tooling header (git-fixes).
  - selftests/landlock: Fix error message (git-fixes).
  - selftests: harness: fix printing of mismatch values in
    __EXPECT() (git-fixes).
  - spi: zynq-qspi: Add check for clk_enable() (git-fixes).
  - wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC (git-fixes).
  - wifi: mt76: mt7925: fix off by one in mt7925_load_clc()
    (git-fixes).
  - wifi: rtw89: mcc: consider time limits not divisible by 1024
    (git-fixes).
  - wifi: rtlwifi: rtl8821ae: Fix media status report (git-fixes).
  - wifi: cfg80211: adjust allocation of colocated AP data
    (git-fixes).
  - wifi: mac80211: don't flush non-uploaded STAs (git-fixes).
  - wifi: mac80211: Fix common size calculation for ML element
    (git-fixes).
  - wifi: mac80211: fix tid removal during mesh forwarding
    (git-fixes).
  - wifi: mac80211: prohibit deactivating all links (git-fixes).
  - wifi: iwlwifi: fw: read STEP table from correct UEFI var
    (git-fixes).
  - wifi: wlcore: fix unbalanced pm_runtime calls (git-fixes).
  - wifi: rtlwifi: pci: wait for firmware loading before releasing
    memory (git-fixes).
  - wifi: rtlwifi: fix memory leaks and invalid access at probe
    error path (git-fixes).
  - wifi: rtlwifi: destroy workqueue at rtl_deinit_core (git-fixes).
  - wifi: rtlwifi: remove unused check_buddy_priv (git-fixes).
  - wifi: rtlwifi: usb: fix workqueue leak when probe fails
    (git-fixes).
  - wifi: rtlwifi: fix init_sw_vars leak when probe fails
    (git-fixes).
  - wifi: rtlwifi: wait for firmware loading before releasing memory
    (git-fixes).
  - wifi: rtlwifi: rtl8192se: rise completion of firmware loading
    as last step (git-fixes).
  - wifi: rtlwifi: do not complete firmware loading needlessly
    (git-fixes).
  - wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix
    infinite loop (git-fixes).
  - wifi: brcmfmac: add missing header include for brcmf_dbg
    (git-fixes).
  - wifi: ath11k: cleanup struct ath11k_mon_data (git-fixes).
  - wifi: wcn36xx: fix channel survey memory allocation size
    (git-fixes).
  - wifi: ath11k: Fix unexpected return buffer manager error for
    WCN6750/WCN6855 (git-fixes).
  - selinux: Fix SCTP error inconsistency in selinux_socket_bind()
    (git-fixes).
  - commit 40f350b


author: tiwai@suse.de
changelog:
  - wifi: ath12k: fix tx power, max reg power update to firmware
    (git-fixes).
  - wifi: mt76: mt7996: fix ldpc setting (git-fixes).
  - wifi: mt76: mt7996: fix definition of tx descriptor (git-fixes).
  - wifi: mt76: mt7996: fix incorrect indexing of MIB FW event
    (git-fixes).
  - wifi: mt76: mt7996: fix HE Phy capability (git-fixes).
  - wifi: mt76: mt7996: fix the capability of reception of EHT MU
    PPDU (git-fixes).
  - wifi: mt76: mt7996: add max mpdu len capability (git-fixes).
  - wifi: mt76: mt7996: fix register mapping (git-fixes).
  - wifi: mt76: mt7915: fix register mapping (git-fixes).
  - wifi: mt76: mt7915: firmware restart on devices with a second
    pcie link (git-fixes).
  - wifi: mt76: mt7996: fix rx filter setting for bfee functionality
    (git-fixes).
  - wifi: mt76: mt7915: fix overflows seen when writing limit
    attributes (git-fixes).
  - wifi: mt76: mt7996: fix overflows seen when writing limit
    attributes (git-fixes).
  - wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz
    on MT7916 (git-fixes).
  - wifi: mt76: mt7921: fix using incorrect group cipher after
    disconnection (git-fixes).
  - wifi: mt76: mt76u_vendor_request: Do not print error messages
    when -EPROTO (git-fixes).
  - commit f15e8b4


author: mgorman@suse.de
changelog:
  - sched/fair: Fix value reported by hot tasks pulled in
    /proc/schedstat -kabi (bsc#1235865).
  - commit a0069bc


author: dsterba@suse.com
changelog:
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (CVE-2024-57884 bsc#1235948)
  - commit abc82c3


author: dsterba@suse.com
changelog:
  - topology: Keep the cpumask unchanged when printing cpumap (CVE-2024-57917 bsc#1236127)
  - commit 1d17273


author: dsterba@suse.com
changelog:
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (CVE-2024-57938 bsc#1236182)
  - commit 338cf1f


author: dsterba@suse.com
changelog:
  - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (CVE-2025-21653 bsc#1236161)
  - commit 9089d3b


author: dsterba@suse.com
changelog:
  - dm thin: make get_first_thin use rcu-safe list first function (CVE-2025-21664 bsc#1236262)
  - commit 83d356e


author: dsterba@suse.com
changelog:
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (CVE-2024-56608 bsc#1235487)
  - commit df4e9dd


author: dsterba@suse.com
changelog:
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (CVE-2024-56679 bsc#1235498)
  - commit becbeeb


author: dsterba@suse.com
changelog:
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (CVE-2024-56707 bsc#1235545)
  - commit 67e8754


author: dsterba@suse.com
changelog:
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (CVE-2024-56725 bsc#1235578)
  - commit 4f995f2


author: dsterba@suse.com
changelog:
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (CVE-2024-56726 bsc#1235582)
  - commit ac2994c


author: dsterba@suse.com
changelog:
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (CVE-2024-56727 bsc#1235583)
  - commit b6e61cf


author: dsterba@suse.com
changelog:
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (CVE-2024-56728 bsc#1235656)
  - commit acc444a


author: tiwai@suse.de
changelog:
  - mailbox: tegra-hsp: Clear mailbox before using message
    (git-fixes).
  - soc: qcom: socinfo: Avoid out of bounds read of serial number
    (git-fixes).
  - soc: qcom: smem_state: fix missing of_node_put in error path
    (git-fixes).
  - soc: mediatek: mtk-devapc: Fix leaking IO map on error paths
    (git-fixes).
  - memory: tegra20-emc: fix an OF node reference bug in
    tegra_emc_find_node_by_ram_code() (git-fixes).
  - soc: atmel: fix device_node release in atmel_soc_device_init()
    (git-fixes).
  - fbdev: omapfb: Fix an OF node leak in
    dss_of_port_get_parent_device() (git-fixes).
  - ASoC: Intel: avs: Fix theoretical infinite loop (git-fixes).
  - ASoC: sun4i-spdif: Add clock multiplier settings (git-fixes).
  - ALSA: hda/realtek - Fixed headphone distorted sound on Acer
    Aspire A115-31 laptop (git-fixes).
  - crypto: iaa - Fix IAA disabling that occurs when sync_mode is
    set to 'async' (git-fixes).
  - crypto: ixp4xx - fix OF node reference leaks in
    init_ixp_crypto() (git-fixes).
  - crypto: qce - fix priority to be less than ARMv8 CE (git-fixes).
  - crypto: qce - unregister previously registered algos in error
    path (git-fixes).
  - crypto: qce - fix goto jump in error path (git-fixes).
  - crypto: caam - use JobR's space to access page 0 regs
    (git-fixes).
  - pinctrl: amd: Take suspend type into consideration which pins
    are non-wake (git-fixes).
  - pinctrl: samsung: fix fwnode refcount cleanup if
    platform_get_irq_optional() fails (git-fixes).
  - commit b034543


author: tiwai@suse.de
changelog:
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx
    (stable-fixes).
  - ALSA: usb-audio: Add delay quirk for USB Audio Device
    (stable-fixes).
  - ALSA: hda/realtek: Enable headset mic on Positivo C6400
    (stable-fixes).
  - commit 744cb45


author: tiwai@suse.de
changelog:
  - remoteproc: core: Fix ida_free call while not allocated
    (git-fixes).
  - mtd: spinand: Remove write_enable_op() in markbad() (git-fixes).
  - mtd: onenand: Fix uninitialized retlen in do_otp_read()
    (git-fixes).
  - PCI: rcar-ep: Fix incorrect variable used when calling
    devm_request_mem_region() (git-fixes).
  - PCI: dwc: Always stop link in the dw_pcie_suspend_noirq
    (git-fixes).
  - PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL
    on error (git-fixes).
  - PCI: endpoint: Finish virtual EP removal in
    pci_epf_remove_vepf() (git-fixes).
  - PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
    (git-fixes).
  - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
    (git-fixes).
  - media: dvb-usb-v2: af9035: fix ISO C90 compilation error on
    af9035_i2c_master_xfer (git-fixes).
  - staging: media: imx: fix OF node leak in
    imx_media_add_of_subdevs() (git-fixes).
  - media: nxp: imx8-isi: fix v4l2-compliance test errors
    (git-fixes).
  - media: uvcvideo: Propagate buf->error to userspace (git-fixes).
  - media: uvcvideo: Remove dangling pointers (git-fixes).
  - media: uvcvideo: Remove redundant NULL assignment (git-fixes).
  - media: uvcvideo: Only save async fh if success (git-fixes).
  - media: uvcvideo: Support partial control reads (git-fixes).
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events
    (git-fixes).
  - media: uvcvideo: Fix double free in error path (git-fixes).
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use
    (git-fixes).
  - staging: media: max96712: fix kernel oops when removing module
    (git-fixes).
  - media: camif-core: Add check for clk_enable() (git-fixes).
  - media: mipi-csis: Add check for clk_enable() (git-fixes).
  - media: ov5640: fix get_light_freq on auto (git-fixes).
  - media: mc: fix endpoint iteration (git-fixes).
  - media: i2c: ov9282: Correct the exposure offset (git-fixes).
  - media: ccs: Fix cleanup order in ccs_probe() (git-fixes).
  - media: imx296: Add standby delay during probe (git-fixes).
  - media: i2c: imx412: Add missing newline to prints (git-fixes).
  - media: ccs: Clean up parsed CCS static data on parse failure
    (git-fixes).
  - media: ccs: Fix CCS static data parsing for large block sizes
    (git-fixes).
  - media: marvell: Add check for clk_enable() (git-fixes).
  - media: lmedm04: Handle errors for lme2510_int_read (git-fixes).
  - media: rc: iguanair: handle timeouts (git-fixes).
  - media: rkisp1: Fix unused value issue (git-fixes).
  - media: imx-jpeg: Fix potential error pointer dereference in
    detach_pm() (git-fixes).
  - commit 059dbb0


author: tiwai@suse.de
changelog:
  - selftests/mm/cow: modify the incorrect checking parameters
    (git-fixes).
  - maple_tree: simplify split calculation (git-fixes).
  - latencytop: use correct kernel-doc format for func params
    (git-fixes).
  - lib/inflate.c: remove dead code (git-fixes).
  - commit 2970302


author: tbogendoerfer@suse.de
changelog:
  - net: stmmac: dwmac-tegra: Read iommu stream id from device tree
    (CVE-2025-21663 bsc#1236260).
  - commit fc91755


author: mkoutny@suse.com
changelog:
  - padata: avoid UAF for reorder_work (git-fixes).
  - padata: fix UAF in padata_reorder (git-fixes).
  - commit 9cec1e0


author: rgoldwyn@suse.com
changelog:
  - Revert 0dd78566990 ("Disable ceph (jsc#PED-7242)")
    Apparently, jsc#PED-7242 is only deprecate ceph for 15-SP6 and
    disable for 15-SP7.
    Revert the disabling.
  - commit 4573861


author: tiwai@suse.de
changelog:
  - drm/v3d: Assign job pointer to NULL before signaling the fence
    (git-fixes).
  - iio: light: as73211: fix channel handling in only-color
    triggered buffer (git-fixes).
  - intel_th: core: fix kernel-doc warnings (git-fixes).
  - bus: mhi: host: Free mhi_buf vector inside
    mhi_alloc_bhie_table() (git-fixes).
  - iio: iio-mux: kzalloc instead of devm_kzalloc to ensure page
    alignment (git-fixes).
  - iio: adc: ad_sigma_delta: Handle CS assertion as intended in
    ad_sd_read_reg_raw() (git-fixes).
  - misc: fastrpc: Fix copy buffer page size (git-fixes).
  - misc: fastrpc: Fix registered buffer page address (git-fixes).
  - misc: fastrpc: Deregister device nodes properly in error
    scenarios (git-fixes).
  - VMCI: fix reference to ioctl-number.rst (git-fixes).
  - drivers/card_reader/rtsx_usb: Restore interrupt based detection
    (git-fixes).
  - uio: uio_dmem_genirq: check the return value of devm_kasprintf()
    (git-fixes).
  - uio: Fix return value of poll (git-fixes).
  - misc: misc_minor_alloc to use ida for all dynamic/misc dynamic
    minors (git-fixes).
  - Revert "usb: gadget: u_serial: Disable ep before setting port to
    null to fix the crash caused by port being null" (stable-fixes).
  - USB: serial: quatech2: fix null-ptr-deref in
    qt2_process_read_urb() (git-fixes).
  - usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to
    PD_T_SENDER_RESPONSE (git-fixes).
  - usb: host: xhci-plat: Assign shared_hcd->rsrc_start (git-fixes).
  - usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk()
    (git-fixes).
  - usb: gadget: f_tcm: Don't prepare BOT write request twice
    (git-fixes).
  - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
    (git-fixes).
  - usb: gadget: f_tcm: Fix Get/SetInterface return value
    (git-fixes).
  - usb: gadget: f_tcm: Decrement command ref count on cleanup
    (git-fixes).
  - usb: gadget: f_tcm: Translate error to sense (git-fixes).
  - usb: gadget: f_tcm: Don't free command immediately (git-fixes).
  - power: ip5xxx_power: Fix return value on ADC read errors
    (git-fixes).
  - pps: add an error check in parport_attach (git-fixes).
  - pps: remove usage of the deprecated ida_simple_xx() API
    (stable-fixes).
  - commit 15d6406


author: jslaby@suse.cz
changelog:
  - PCI: microchip: Set inbound address translation for coherent
    or non-coherent mode (git-fixes).
  - PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset()
    (git-fixes).
  - PCI: imx6: Skip controller_id generation logic for i.MX7D
    (git-fixes).
  - PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test
    (git-fixes).
  - PCI: dwc: ep: Prevent changing BAR size/flags in
    pci_epc_set_bar() (git-fixes).
  - PCI: dwc: ep: Write BAR_MASK before iATU registers in
    pci_epc_set_bar() (git-fixes).
  - genirq: Make handle_enforce_irqctx() unconditionally available
    (git-fixes).
  - commit 9d69135


author: nmorey@suse.com
changelog:
  - RDMA/mlx4: Avoid false error about access to uninitialized gids array (git-fixes)
  - commit 61636fb


author: nmorey@suse.com
changelog:
  - RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (git-fixes)
  - commit 95b5d71


author: tiwai@suse.de
changelog:
  - driver core: class: Fix wild pointer dereferences in API
    class_dev_iter_next() (git-fixes).
  - devcoredump: cleanup some comments (git-fixes).
  - serial: sh-sci: Do not probe the serial port if its slot in
    sci_ports[] is in use (git-fixes).
  - serial: sh-sci: Drop __initdata macro for port_cfg (git-fixes).
  - serial: 8250: Adjust the timeout for FIFO mode (git-fixes).
  - commit 3ee6c35


author: mhocko@suse.com
changelog:
  - netfilter: nf_tables: validate family when identifying table
    via handle (bsc#1233778 ZDI-24-1454).
  - commit 8a5e7e8


author: mhocko@suse.com
changelog:
  - netfilter: x_tables: fix LED ID check in led_tg_check()
    (CVE-2024-56650 bsc#1235430).
  - commit e2ba4f9


author: jgross@suse.com
changelog:
  - virtio-blk: don't keep queue frozen during system suspend
    (CVE-2024-57946 bsc#1236247).
  - commit bc49326


author: dsterba@suse.com
changelog:
  - Delete patches.suse/iommu-arm-smmu-Defer-probe-of-clients-after-smmu-dev.patch
    Reverted upstream by 97cb1fa02726 iommu/arm-smmu: Retire probe deferral
    workaround.
  - commit 2dda00e


author: tiwai@suse.de
changelog:
  - dmaengine: ti: edma: fix OF node reference leaks in edma_driver
    (git-fixes).
  - regulator: core: Add missing newline character (git-fixes).
  - commit a55a5c7


author: tiwai@suse.de
changelog:
  - ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro
    7130 (bsc#1235686).
  - commit 63a2d06


author: krisman@suse.de
changelog:
  - brd: defer automatic disk creation until module initialization
    succeeds (CVE-2024-56693 bsc#1235418).
  - commit b6cdeb6


author: tiwai@suse.de
changelog:
  - rtc: zynqmp: Fix optional clock name property (git-fixes).
  - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
    (git-fixes).
  - PM: hibernate: Add error handling for syscore_suspend()
    (git-fixes).
  - Bluetooth: L2CAP: accept zero as a special value for MTU
    auto-selection (git-fixes).
  - Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
    (git-fixes).
  - usbnet: ipheth: use static NDP16 location in URB (git-fixes).
  - usbnet: ipheth: check that DPE points past NCM header
    (git-fixes).
  - usbnet: ipheth: fix possible overflow in DPE length check
    (git-fixes).
  - net: usb: rtl8150: enable basic endpoint checking (git-fixes).
  - net: phy: c45-tjaxx: add delay between MDIO write and read in
    soft_reset (git-fixes).
  - net: rose: fix timer races against user threads (git-fixes).
  - NFC: nci: Add bounds checking in nci_hci_create_pipe()
    (git-fixes).
  - docs: power: Fix footnote reference for Toshiba Satellite
    P10-554 (git-fixes).
  - gpio: mxc: remove dead code after switch to DT-only (git-fixes).
  - pm:cpupower: Add missing powercap_set_enabled() stub function
    (git-fixes).
  - commit d7c0bf6


author: ggherdovich@suse.cz
changelog:
  - cpufreq: intel_pstate: fix pstate limits enforcement for
    adjust_perf call back (git-fixes).
  - commit dd83446


author: ggherdovich@suse.cz
changelog:
  - cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is
    missing (git-fixes).
  - commit 1e10ad3


author: krisman@suse.de
changelog:
  - Refresh
    patches.suse/io_uring-check-for-overflows-in-io_pin_pages.patch.
    There was an error on my backport of this patch that caused an Oops as
    soon as a pbuf is registered.
  - commit 83010fb


author: krisman@suse.de
changelog:
  - io_uring/eventfd: ensure io_eventfd_signal() defers another
    RCU period (CVE-2025-21655 bsc#1236163).
  - commit 4487b43


author: krisman@suse.de
changelog:
  - kcsan: Turn report_filterlist_lock into a raw_spinlock
    (CVE-2024-56610 bsc#1235390).
  - commit d41073a


author: tbogendoerfer@suse.de
changelog:
  - blacklist.conf: Not affected by CVE-2024-44932 and CVE-2024-44964
  - Delete
    patches.suse/idpf-fix-UAFs-when-destroying-the-queues.patch.
  - Delete
    patches.suse/idpf-fix-memory-leaks-and-crashes-while-performing-a.patch.
    This fixes bsc#1236628
  - commit 3ac3069


author: tiwai@suse.de
changelog:
  - kconfig: fix file name in warnings when loading
    KCONFIG_DEFCONFIG_LIST (git-fixes).
  - genksyms: fix memory leak when the same symbol is read from
    * .symref file (git-fixes).
  - genksyms: fix memory leak when the same symbol is added from
    source (git-fixes).
  - ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback
    (git-fixes).
  - commit 472aca3


author: tiwai@suse.de
changelog:
  - ASoC: acp: Support microphone from Lenovo Go S (stable-fixes).
  - ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro
    (stable-fixes).
  - commit 7bec8fa


author: tiwai@suse.de
changelog:
  - Input: atkbd - map F23 key to support default copilot shortcut
    (stable-fixes).
  - Input: xpad - add unofficial Xbox 360 wireless receiver clone
    (stable-fixes).
  - Input: xpad - add support for wooting two he (arm)
    (stable-fixes).
  - Input: xpad - improve name of 8BitDo controller 2dc8:3106
    (stable-fixes).
  - Input: xpad - add QH Electronics VID/PID (stable-fixes).
  - Input: xpad - add support for Nacon Evol-X Xbox One Controller
    (stable-fixes).
  - Input: xpad - add support for Nacon Pro Compact (stable-fixes).
  - hwmon: (drivetemp) Set scsi command timeout to 10s
    (stable-fixes).
  - drm/amd/display: Use HW lock mgr for PSR1 (stable-fixes).
  - seccomp: Stub for !CONFIG_SECCOMP (stable-fixes).
  - ASoC: samsung: Add missing depends on I2C (git-fixes).
  - ASoC: samsung: Add missing selects for MFD_WM8994
    (stable-fixes).
  - ASoC: wm8994: Add depends on MFD core (stable-fixes).
  - ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf()
    (stable-fixes).
  - commit c243755


author: dwagner@suse.de
changelog:
  - nvme: Add error path for xa_store in nvme_init_effects
    (git-fixes).
  - nvme: Add error check for xa_store in nvme_get_effects_log
    (git-fixes).
  - nvme-tcp: Fix I/O queue cpu spreading for multiple controllers
    (git-fixes).
  - nvmet: propagate npwg topology (git-fixes).
  - commit f7cc3e5


author: ohering@suse.de
changelog:
  - scsi: storvsc: Ratelimit warning logs to prevent VM denial of
    service (git-fixes).
  - hyperv: Do not overlap the hvcall IO areas in get_vtl()
    (git-fixes).
  - commit 20e731b


author: davide.benini@suse.com
changelog:
  - net: inet6: do not leave a dangling sk pointer in inet6_create()
    (CVE-2024-56600 bsc#1235217).
  - commit d23e8d7


author: iivanov@suse.de
changelog:
  - arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes bsc#1236245)
    Update arm64 default configuration file
  - commit 1003b05


author: davide.benini@suse.com
changelog:
  - net: fix crash when config small gso_max_size/gso_ipv4_max_size
    (CVE-2024-50258 bsc#1233221 CVE-2024-50258 bsc#1233221).
  - commit a93195b


author: davide.benini@suse.com
changelog:
  - netfilter: nft_payload: sanitize offset and length before
    calling skb_checksum() (CVE-2024-50251 bsc#1233248).
  - commit d7e2f51


author: davide.benini@suse.com
changelog:
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in
    ip_tunnel_find() (CVE-2024-50304 bsc#1233522).
  - commit 0aac3e1


author: tbogendoerfer@suse.de
changelog:
  - net/mlx5e: Fix inversion dependency warning while enabling
    IPsec tunnel (CVE-2025-21674 bsc#1236688).
  - net: fec: handle page_pool_dev_alloc_pages error (CVE-2025-21676
    bsc#1236696).
  - eth: bnxt: always recalculate features after XDP clearing,
    fix null-deref (CVE-2025-21682 bsc#1236703).
  - commit a806d7c


author: ailiop@suse.com
changelog:
  - xfs: Propagate errors from xfs_reflink_cancel_cow_range in
    xfs_dax_write_iomap_end (git-fixes).
  - commit f8ad9a2


author: dwagner@suse.de
changelog:
  - Update
    patches.suse/nvme-tcp-Fix-I-O-queue-cpu-spreading-for-multiple-co.patch
    (git-fixes bsc#1224049).
  - commit 6783feb


author: tbogendoerfer@suse.de
changelog:
  - gtp: Destroy device along with udp socket's netns dismantle
    (CVE-2025-21678 bsc#1236698).
  - gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp()
    (git-fixes).
  - net: mana: Cleanup "mana" debugfs dir after cleanup of all
    children (bsc#1236760).
  - r8169: enable SG/TSO on selected chip versions per default
    (bsc#1235874).
  - net: mana: Enable debugfs files for MANA device (bsc#1236758).
  - net: netvsc: Update default VMBus channels (bsc#1236757).
  - commit 2caa23f


author: mgorman@suse.de
changelog:
  - mm/compaction: fix UBSAN shift-out-of-bounds warning (git fixes
    (mm/compaction)).
  - commit 6473a2a


author: oneukum@suse.com
changelog:
  - media: firewire: firedtv-avc.c: replace BUG with proper,
    error return (git-fixes).
  - commit 658942c


author: dfaggioli@suse.com
changelog:
  - virtio-mem: convert most offline_and_remove_memory() errors to -EBUSY
    (git-fixes).
  - commit cf4a9ad


author: dfaggioli@suse.com
changelog:
  - virtio-mem: keep retrying on offline_and_remove_memory() errors in Sub Block Mode (SBM)
    (git-fixes).
  - commit 50036f1


author: dfaggioli@suse.com
changelog:
  - virtio-mem: check if the config changed before fake offlining memory
    (git-fixes).
  - commit 7c5b67f


author: sjaeckel@suse.de
changelog:
  - net: defer final 'struct net' free in netns dismantle
    (CVE-2024-56658 bsc#1235441).
  - commit 5df7b43


author: sjaeckel@suse.de
changelog:
  - kABI fix for net: defer final 'struct net' free in netns
    dismantle (CVE-2024-56658 bsc#1235441)
  - commit fd18f29


author: nmorey@suse.com
changelog:
  - net/mlx5: Clear port select structure when fail to create (bsc#1236694 CVE-2025-21675)
  - commit 97050c4


author: nmorey@suse.com
changelog:
  - vsock/virtio: discard packets if the transport changes (CVE-2025-21669 bsc#1236683)
  - commit 01b1ae3


author: nmorey@suse.com
changelog:
  - vsock/bpf: return early if transport is not assigned (CVE-2025-21670 bsc#1236685)
  - commit 938e02d


author: nmorey@suse.com
changelog:
  - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (CVE-2025-21666 bsc#1236680)
  - commit 5667481


author: oneukum@suse.com
changelog:
  - usb: chipidea: ci_hdrc_imx: decrement device's refcount in
    .remove() and in the error path of .probe() (git-fixes).
  - commit 243c2cb


author: shung-hsi.yu@suse.com
changelog:
  - selftests/bpf: Test the update operations for htab of maps
    (bsc#1235244 CVE-2024-56592).
  - selftests/bpf: Move ENOTSUPP from bpf_util.h (bsc#1235244
    CVE-2024-56592).
  - bpf: Call free_htab_elem() after htab_unlock_bucket()
    (bsc#1235244 CVE-2024-56592).
  - selftests/bpf: Clean up open-coded gettid syscall invocations
    (bsc#1235244 CVE-2024-56592).
  - commit 1ed8f4f


author: jslaby@suse.cz
changelog:
  - scripts/git_sort/series_sort.py: use realpath for __file__
    scripts/series_sort.py is a symlink to scripts/git_sort/series_sort.py,
    but __file__ remains ./scripts/series_sort.py. Use
    os.path.realpath(__file__) to resolve symlinks and add a proper dir to
    sys.path.
    Otherwise we see:
    Traceback (most recent call last):
    File "./scripts/series_sort.py", line 44, in <module>
      import suse_git.exc as exc
    ModuleNotFoundError: No module named 'suse_git'
  - commit 3a56e6d


author: crrodriguez@opensuse.org
changelog:
  - Update to kmod 19
    * Fix missing CLOEXEC in library
    * Fix error message while opening kmod's index
    * static-nodes: when writing in tmpfiles format, indicate that
    creation of static nodes should only happen at boot. This is used
    and required by systemd-217+.


author: mmarek@suse.cz
changelog:
  - Update to kmod 20
    * More robust ELF parsing
    * To fix a race, modprobe only looks at modules.builtin to
    determine a builtin module, so e.g. 'modprobe vt' will no longer
    work.
    * Other fixes
    * Testsuite moved to a separate package, since it is now building
    the test modules from sources, which requires the kernel package.
    * dropped kmod-blacklist-fixtest.patch (merged upstream)
    * includes 0001-Fix-race-while-loading-modules.patch (bsc#998906)


author: jengelh@inai.de
changelog:
  - Update to new upstream release 21
    * The kmod tool now prints the relevant configuration options it was built
    with when the "--version" argument is passed.


author: jengelh@inai.de
changelog:
  - Update to new upstream release 22
    * support `insmod -f`
    * depmod: do not fall back to uname on bad version


author: dvaleev@suse.com
changelog:
  - Fix kernel master build for ppc64le (bsc#1070209)
    depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch


author: mmarek@suse.cz
changelog:
  - libkmod: Handle long lines in /proc/modules (bsc#983754)
    0001-libkmod-Handle-long-lines-in-proc-modules.patch


author: jengelh@inai.de
changelog:
  - Update to new upstream release 23
    * Don't add comment to modules.devname if it would otherwise be
    empty.
    * Ignore .TOC. symbols in depmod parsing.
    * Fix crash on modinfo while checking for available signature of
    unknown type.
    * Teach modinfo about PKCS#7 module signatures.
  - Drop depmod-Ignore_PowerPC64_ABIv2_.TOC.symbol.patch (merged),
    0001-libkmod-Handle-long-lines-in-proc-modules.patch (merged)


author: yousaf.kaukab@suse.com
changelog:
  - 0002-depmod-ignore-related-modules-in-depmod_report_cycle.patch:
    Fix buffer overflow when printing modules in cyclic dependency
    chain (boo#1008186)


author: jengelh@inai.de
changelog:
  - Update to new upstream release 24
    * libkmod: fix  use of strcpy
    * depmod: fix string overflow
    * depmod: ignore related modules in depmod_report_cycles
    * libkmod: Fix handling of quotes in kernel command line
    * libkmod-config: replace 0/1 with bool
    * depmod: handle nested loops
  - Drop 0001-use-correct-sort-method-in-test-array.patch,
    0002-depmod-ignore-related-modules-in-depmod_report_cycle.patch,
    0009-libkmod-Implement-filtering-of-unsupported-modules-o.patch
    (applied upstream)
  - Remove support for openSUSE < 13.2 (non-dracut mkinitrd)
  - Separate bash completion functions into extra package
  - Move some of the symlinks from kmod-compat to kmod,
    as kmod still does not have native support for all functions.


author: msuchanek@suse.com
changelog:
  - Fix resolving .TOC. in modules on 4.4 and older kernel (bsc#1070209)
    depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch


author: msuchanek@suse.com
changelog:
  - Update to kmod v25
    * Fix resolving symbols with MODULE_REL_CRCS (bsc#1077867)
  - Drop depmod-Don-t-add-.TOC.-when-it-s-in-the-kernel.patch


author: msuchanek@suse.com
changelog:
  - Fix PKCS#7 signature display in modinfo (bsc#1077693).
    * Add libkmod-signature-implement-pkcs7-parsing-with-asn1c.patch
    * Add libkmod-signature-Fix-crash-when-module-signature-is.patch
    * Refresh 0010-modprobe-Implement-allow-unsupported-modules.patch


author: ro@suse.de
changelog:
  - for sle, buildexclude the 32bit platforms in kmod-testsuite,
    they have no kernel binaries anyway (bnc#1085640)


author: msuchanek@suse.com
changelog:
  - Fix crash when PKCS#7 signer name is not present in signature (bsc#1088244)
    Add libkmod-signature-pkcs-7-fix-crash-when-signer-info-.patch


author: vlad.botanic@gmail.com
changelog:
  - allow 'modprobe -c' print the status of "allow_unsupported_modules" option.
    Add 0012-modprobe-print-unsupported-status.patch


author: msuchanek@suse.de
changelog:
  - Fix module dependency file corruption on parallel invocation (bsc#1118629).
  - Add depmod-Prevent-module-dependency-files-corruption-du.patch
  - Add depmod-Prevent-module-dependency-files-missing-durin.patch
  - Add depmod-shut-up-gcc-insufficinet-buffer-warning.patch


author: jengelh@inai.de
changelog:
  - Update to new upstream release 26
    * depmod now handles parallel invocations better by protecting
      the temporary files being used.
    * modprobe has a new --show-exports option. Under the hood,
      this reads the .symtab and .strtab sections rather than
      __versions so it shows useful data even if kernel is
      configured without modversions (CONFIG_MODVERSIONS).
    * modinfo supports PKCS#7 parsing by using openssl.
  - Replaced the asn1c-based parser by an openssl-based PKCS
    parser.
  - Remove libkmod-signature-Fix-crash-when-module-signature-is.patch,
    libkmod-signature-pkcs-7-fix-crash-when-signer-info-.patch,
    libkmod-signature-implement-pkcs7-parsing-with-asn1c.patch
    (not accepted upstream)
  - Remove enum.patch,
    depmod-Prevent-module-dependency-files-corruption-du.patch,
    depmod-Prevent-module-dependency-files-missing-durin.patch,
    depmod-shut-up-gcc-insufficinet-buffer-warning.patch
    (accepted upstream)


author: msuchanek@suse.com
changelog:
  - Enable PKCS#7 signature parsing again - requires openssl
  - Fix testsuite build - requires kernel-default-devel


author: jengelh@inai.de
changelog:
  - Update to release 27
    * Link to libcrypto rather than requiring openssl.
    * Use PKCS#7 instead of CMS for parsing module signature to be
      compatible with LibreSSL and OpenSSL < 1.1.0.
    * Teach modinfo to parse modules.builtin.modinfo. When using
      Linux kernel >= v5.2~rc1, it is possible to get module
      information from this new file.


author: msuchanek@suse.com
changelog:
  - Drop kmod-compat (boo#1173353):
    The symlinks in kmod-compat are not obsolete. They are
    desirable for kernel module autoload. The "kernel.modprobe"
    sysctl references /sbin/modprobe, and changing it to
    "/usr/bin/kmod load" is not possible, because this sysctl
    specifies a single executable, not a command (so spaces will be
    treated as part of the filename).


author: msuchanek@suse.de
changelog:
  - Update usr-lib-modprobe.patch to upstream submission (boo#1180821).
  - Require libxslt-tools for xsltproc and use local stylesheet.
    * no-stylesheet-download.patch


author: msuchanek@suse.com
changelog:
  - Update to v28
    * Add Zstandard to the supported compression formats using libzstd
      (tests only - cannot be disabled in tests)
    * Ignore ill-formed kernel command line, e.g. with "ivrs_acpihid[00:14.5]=AMD0020:0"
      option in it
    * Fix some memory leaks
    * Fix 0-length builtin.alias.bin: it needs at least the index header


author: dimstar@opensuse.org
changelog:
  - Supplement bash-completion subpackage against the main package
    and bash-completion.
  - Also require the main package plus bash-completion: the
    completion package is useless without either of the two.


author: msuchanek@suse.de
changelog:
  - Fix tests to not test disabled features. Disable zstd again.
    * kmod-populate-modules-Use-more-bash-more-quotes.patch
    * kmod-testsuite-compress-modules-if-feature-is-enabled.patch
    * kmod-also-test-xz-compression.patch


author: jslaby@suse.cz
changelog:
  - Fix grub's requoted kernel parameters (bsc#1181111)
    * 0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch
    * 0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch


author: jengelh@inai.de
changelog:
  - Update to release 29
    * Fix `modinfo -F` not working for built-in modules and
      certain fields.
    * Fix a memory leak, overflow and double free on error path.
  - Drop 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch,
    0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch,
    0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch
    (all merged)


author: msuchanek@suse.de
changelog:
  - /usr/lib should override /lib where both are available. Support /usr/lib for
    depmod.d as well.
    * Refresh usr-lib-modprobe.patch
  - Remove test patches included in release 29
    - kmod-populate-modules-Use-more-bash-more-quotes.patch
    - kmod-testsuite-compress-modules-if-feature-is-enabled.patch
    - kmod-also-test-xz-compression.patch


author: msuchanek@suse.de
changelog:
  - Display module information even for modules built into the running kernel
    (bsc#1189537).
    + libkmod-Provide-info-even-for-modules-built-into-the.patch


author: msuchanek@suse.com
changelog:
  - Use docbook 4 rather than docbook 5 for building man pages (bsc#1190190).
    * Refres no-stylesheet-download.patch


author: msuchanek@suse.com
changelog:
  - Enable ZSTD on 15.3 as well (boo#1192104).
  - Only test ZSTD in testsuite on releases where it is available.


author: opensuse@cboltz.de
changelog:
  - update to AppArmor 2.9.0 (r2759)
    - change aa-mergeprof to the final commandline syntax
    - lots of bugfixes in the aa-* tools (bnc#900163, lp#1328707 and several
      bugs without a formal bugreport)
    - small additions to gnome, freedesktop.org, ubuntu-browsers.d/java
      and user-mail abstractions
    - fix mod_apparmor to not break basic auth
    - update perl modules to support signal, unix and ptrace rules (bnc#900013)
    - don't warn about rules not supported by the kernel
    - fix logging of "audit capability" (lp#1378091)
    - add support for the "hat" keyword in apparmor.vim
    - build html version of apparmor.vim manpage again (lp#1366572)
    - see also http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_0
  - update apparmor-abstractions-no-multiline.diff
  - remove upstreamed apparmor-profiles-ntpd-pid-location.diff


author: dimstar@opensuse.org
changelog:
  - No longer perform gpg validation; osc source_validator does it
    implicit:
    + Drop gpg-offline BuildRequires.
    + No longer execute gpg_verify.


author: cbosdonnat@suse.com
changelog:
  - Fix dnsmasq profile to allow executing bash to run the --dhcp-script
    argument. Also fixed /usr/lib -> /usr/{lib,lib64} to get libvirt
    leasehealper script to run even on x86_64.
    dnsmasq-profile-fixes.patch. boo#911001


author: opensuse@cboltz.de
changelog:
  - update to AppArmor 2.9.1 (2.9 branch r2831)
    - fix log parsing for 3.16 kernels and syslog-style logs (boo#905368)
    - several fixes and performance improvements in the aa-* utils
    - profile updates for dnsmasq (boo#907870), nscd (boo#904620#c14 and
      bnc#908856), useradd, sendmail, man and passwd
    - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_1
      for full release notes
  - refresh dnsmasq-profile-fixes.patch


author: opensuse@cboltz.de
changelog:
  - add apparmor-changes-since-2.9.1.diff with upstream fixes since the
    2.9.1 release
    - update logparser.py to support changed syslog format (lp#1399027)
    - update usr.sbin.dovecot and usr.lib.dovecot.imap{, -login} profiles
      (lp#1296667)
    - update the mysqld profile
    - fix network rule description in apparmor.d(5) manpage
  - drop upstreamed dnsmasq-profile-fixes.patch
  - update expired GPG key


author: opensuse@cboltz.de
changelog:
  - add Requires: python3 to python3-apparmor package - readline isn't
    part of python3-base (boo#917577)


author: rguenther@suse.com
changelog:
  - add apparmor-fix-stl-ostream.diff which fixes odd uses of
    std::ostream which are not valid.  Fixes build with GCC 5


author: opensuse@cboltz.de
changelog:
  - make sure %service_del_postun doesn't call systemctl try-restart
    (boo#853019, bare systemd edition)
  - add samba-4.2-profiles.diff: update samba (winbindd and nmb)
    profiles for samba 4.2 (boo#921098, boo#923201)


author: opensuse@cboltz.de
changelog:
  - update to AppArmor 2.9.2 (2.9 branch r2911)
    - lots of bugfixes in the parser and the aa-* tools (including
      boo#918787)
    - update dovecot and dnsmasq profiles and several abstractions
      (including boo#911001)
    - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_9_2 for the
      full changelog
  - remove upstream(ed) patches apparmor-changes-since-2.9.1.diff and
    apparmor-fix-stl-ostream.diff
  - replace GPG key with new AppArmor GPG signing key, see
    https://launchpad.net/apparmor/+announcement/13404


author: opensuse@cboltz.de
changelog:
  - systemd-rpm-macros and %systemd_requires were at the wrong place,
    move them to the parser package (boo#931792)


author: opensuse@cboltz.de
changelog:
  - update to AppArmor 2.10 (trunk r3205)
    - profile names can now contain variables
    - improved profile compile time in apparmor_parser
    - lots of improvements, refactoring and bugfixes in the aa-* tools
    - new apis for managing and loading profile caches into the kernel in
      libapparmor
    - lots of profile updates
    - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10 for the
      complete changelog with more details
  - add new apparmor_private.h and the aa_query_label(2), aa_features(3),
    aa_kernel_interface(3), aa_policy_cache(3), aa_splitcon(3) manpages
    to libapparmor-devel
  - drop apparmor-2.5.1-edirectory-profile patch - it's most probably
    no longer needed (see boo#621394 for details)
  - drop upstreamed samba-4.2-profiles.diff
  - refresh apparmor-samba-include-permissions-for-shares.diff


author: opensuse@cboltz.de
changelog:
  - add apparmor-winbindd-r3213.diff - add missing k permissions for
    /etc/samba/smbd.tmp/msg/* in winbindd profile (boo#921098 #c15..19)


author: opensuse@cboltz.de
changelog:
  - add syslog-ng-profile-boo948584.diff - add several permissions needed
    by latest syslog-ng (boo#948584, boo#948753)
  - add upstream-profile-updates-r3205-3241.diff with several profile updates:
    - add /usr/share/locale-bundle/** to abstractions/base
    - allow dnsmask to use /bin/sh (boo#940749) and /bin/dash
    - allow dovecot imap to read /run/dovecot/mounts
    - allow avahi-daemon to write to /run/systemd/notify
    - allow ntpd to read $PATH directory listings (boo#945592, boo#948752)
    - update dhclient profile
    - allow skype to read @{PROC}/@{pid}/net/dev (boo#939568)
    - and some other small updates
  - drop upstreamed apparmor-winbindd-r3213.diff (included in the
    upstream-profile-updates patch)


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.10.1 (2.10 branch r3326):
    - fix incorrect output of child profile names (apparmor_parser -N) which
      caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
    - fix a crash in aa-logprof / logparser.py for change_hat log events
      (lp#1523297) and log events that look like file events, but aren't
      (lp#1540562, lp#1525119, lp#1466812)
    - write unix rules when saving a profile (lp#1522938, boo#954104#c3)
    - several fixes for variable handling in aa-logprof
    - map c (create) log events to w instead of a
    - add python to the "no Px rule" list in logprof.conf
    - let aa-logprof check for duplicate profiles
    - let aa-status work without the apparmor.fail python module (boo#971917,
      lp#1480492)
    - add permissions in several profiles (including boo#948584, boo#948753,
      boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
      boo#921098#c15).
    - and many more fixes, see the full changelog at
      http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
  - drop upstream(ed) patches:
    - fix-initscript-aa_log_end_msg.diff
    - syslog-ng-profile-boo948584.diff
    - upstream-profile-updates-r3205-3241.diff
  - refresh patches:
    - apparmor-abstractions-no-multiline.diff
    - apparmor-samba-include-permissions-for-shares.diff
  - drop libapparmor autogen.sh call (broke the build) and remove libtool BR


author: suse-beta@cboltz.de
changelog:
  - add changes-since-2.10.1--r3326..3346.diff with upstream changes and
    fixes since the 2.10.1 release, including
    - allow dac_override in winbindd profile (boo#990006#c5)
    - allow mr for /usr/lib*/ldb/*.so in samba abstractions (needed since
      Samba 4.4.x, boo#990006)
    - abstractions/nameservice: also support ConnMan-managed resolv.conf
    - let aa-genprof ask about profiles in extra dir (again)
    - fix aa-logprof "add hat" endless loop (lp#1538306)
    - honor 'chown' file events in logparser.py
    - ignore log file events with a request mask of 'send' or 'receive'
      because they are actually network events (lp#1577051, lp#1582374)
    - accept hostname with dots when parsing logs (lp#1453300 comments #1 and #2)
  - fix python LibAppArmor import failures with swig > 3.0.8 (boo#987607)
    (libapparmor-fix-import-path.diff)
  - refresh apparmor-abstractions-no-multiline.diff
  - drop upstreamed profiles-ping-inet6-r3449.diff
  - add %check section - runs libapparmor (including swig bindings),
    parser and profiles tests
  - add BuildRequires: perl(Locale::gettext) - needed for parser tests


author: suse-beta@cboltz.de
changelog:
  - add changes-since-2.10.1--r3347..3353.diff with upstream changes and
    fixes in the 2.10 branch, including
    - allow writing *.qf files (for disk-based buffering) in syslog-ng profile
    - add several permissions to the dovecot profiles (deb#835826)
    - add a missing path in the traceroute profile


author: suse-beta@cboltz.de
changelog:
  - add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and
    abstractions/nameservice (path changed in latest nscd in Tumbleweed)


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.10.2 maintenance release
    - lots of bugfixes and profile updates (including boo#1000201,
      boo#1009964, boo#1014463)
    - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_2 for details
  - add aa-unconfined-fix-netstat-call-2.10r3380.diff to fix a regression
    in aa-unconfined
  - drop upstream(ed) patches:
    - changes-since-2.10.1--r3326..3346.diff
    - changes-since-2.10.1--r3347..3353.diff
    - libapparmor-fix-import-path.diff (upstream fix is slightly different)
    - nscd-var-lib.diff
  - refresh apparmor-abstractions-no-multiline.diff


author: suse-beta@cboltz.de
changelog:
  - change /etc/apparmor.d/cache symlink to /var/lib/apparmor/cache/.
    This is part of the root partition (at least with default partitioning)
    and should be available earlier than /var/cache/apparmor/
    (boo#1015249, boo#980081, bsc#1016259)
  - add dependency on var-lib.mount to apparmor.service as safety net


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.11.0
    - apparmor_parser now supports parallel compiles and loads
    - add full support for dbus, ptrace and signal rules and events to the
      utils
    - full rewrite of the file rule handling in the utils
    - lots of improvements and fixes
    - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11 for the
      detailed changelog
  - patches:
    - add sshd-profile-drop-local-include-r3615.diff to fix 'make check'
    - drop aa-unconfined-fix-netstat-call-2.10r3380.diff, no longer needed
    - refresh apparmor-abstractions-no-multiline.diff
    - refresh apparmor-samba-include-permissions-for-shares.diff
  - spec changes:
    - aa-unconfined switched to using ss (from iproute2), adjust Recommends:
    - move libapparmor to /usr/lib*/
    - drop %if %suse_version checks for 12.x
    - change several Obsoletes from %version to < 2.9. Those package names
      weren't used since years, and 2.9 is still a careful choice
    - include apparmor.service independent of %suse_version
    - techdoc.pdf is now shipped in upstream tarball to reduce BuildRequires
    - drop latex2html, texlive-* and w3m BuildRequires
    - techdoc.txt and techdoc.html not included, drop them from the package
    - run most of utils/ make check (some tests expect /etc/apparmor.d/ and
      /sbin/apparmor_parser to exist, skip them)
    - BuildRequires python3-pyflakes (utils tests) and dejagnu (libapparmor tests)
    - drop sed'ing python3 into aa-* shebang (upstreamed)
    - build binutils
    - aa-exec is now written in C and lives in /usr/bin/, move it to the
      apparmor_parser package and create a compability symlink in /usr/sbin/
    - aa-exec manpage moved to section 1
    - aa-enabled is a small new tool to find out if AppArmor is enabled
    - package new aa_stack_profile(2) manpage


author: suse-beta@cboltz.de
changelog:
  - split libapparmor into separate spec to get rid of build loop
    involving mariadb, systemd, apparmor, libapr and mariadb again
    (see the discussion in SR 448871 for details)
  - libapparmor.spec is based on the AppArmor 2.11 apparmor.spec, but
    with minimum BuildRequires


author: suse-beta@cboltz.de
changelog:
  - add upstream-changes-r3616..3628.diff:
    - update abstractions/base, abstractions/apache2-common and dovecot profiles
    - merge ask_the_questions() of aa-logprof and aa-mergeprof
    - pass LDFLAGS when building parser, libapparmor perl bindings and pam_apparmor
  - adjust deleting the cache in profiles %post to the new cache location
  - silence errors when deleting the cache (boo#976914)


author: jmatejek@suse.com
changelog:
  - add python3-drop-re-locale.patch: remove deprecated re.LOCALE
    flag in Python UI as it was dropped from Python 3.6 (lp#1661766)


author: kukuk@suse.com
changelog:
  - Cleanup spec file:
    - don't use insserv if we afterwards call systemd, this can
      have bad side effects
    - remove dead code
    - remove now obsolete 'distro' checks
  - Replace init.d script with new wrapper working with systemd


author: suse-beta@cboltz.de
changelog:
  - add upstream-changes-r3629..3648.diff:
    - preserve unknown profiles when reloading apparmor.service
      (CVE-2017-6507, lp#1668892, boo#1029696)
    - add aa-remove-unknown utility to unload unknown profiles (lp#1668892)
    - update nvidia abstraction for newer nvidia drivers
    - don't enforce ordering of dbus rule attributes in utils (lp#1628286)
    - add --parser, --base and --Include option to aa-easyprof to allow
      non-standard paths (useful for tests) (lp#1521031)
    - move initialization code in apparmor.aa to init_aa(). This allows to
      run all utils tests even if /etc/apparmor.d/ or /sbin/apparmor_parser
      don't exist.
    - several improvements in the utils tests
  - drop upstreamed python3-drop-re-locale.patch
  - no longer delete/skip some of the utils tests (to allow this, add
    parser-tests-dbus-duplicated-conditionals.diff)
  - add var.mount dependeny to apparmor.service (boo#1016259#c34)


author: rgoldwyn@suse.com
changelog:
  - add JSON support. Required for FATE#323380.
    (apparmor-yast-cleanup.patch, apparmor-json-support.patch)


author: jmatejek@suse.com
changelog:
  - do not require exact X.Y version of "python3"
  - require also matching python(abi) which is arguably more important


author: rgoldwyn@suse.com
changelog:
  - profiles-sockets-temporary-fix.patch to cater to nameservices with the
    new sockets mediation, until unix rules are upstreamed (boo#1061195)


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.11.1
    - add permissions to several profiles and abstractions (including
      lp#1650827 and boo#1057900)
    - several fixes in the aa-* tools (including lp#1689667, lp#1628286,
      lp#1661766 and boo#1062667)
    - fix downgrading/converting of 'unix' rules (will be supported in
      kernel 4.15) to 'network unix' rules in apparmor_parser (boo#1061195)
    - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_1 for
      upstream changelog
  - remove upstream(ed) patches
    - upstream-changes-r3616..3628.diff
    - upstream-changes-r3629..3648.diff
    - parser-tests-dbus-duplicated-conditionals.diff
    - apparmor-fix-podsyntax.patch
    - sshd-profile-drop-local-include-r3615.diff
  - refresh apparmor-yast-cleanup.patch
  - add utils-fix-sorted-save_profiles-regression.diff to fix a regression
    in displaying the "changed profiles" list in aa-logprof


author: rgoldwyn@suse.com
changelog:
  - read_inactive_profile-exactly-once.patch (bsc#1069346)
    Perform reading of inactive profiles exactly once.


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.11.95 aka 2.12 beta1
    - add JSON interface to aa-logprof and aa-genprof (used by YaST)
    - drop old YaST interface code
    - update audio, base and nameservice abstractions
    - allow @{pid} to match 7-digit pids
    - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
      for the detailed upstream changelog
  - drop upstreamed patches
    - apparmor-yast-cleanup.patch
    - apparmor-json-support.patch
    - nameservice-libtirpc.diff
  - drop obsolete perl modules (YaST no longer needs them)
  - drop patches that were only needed by the obsolete perl modules:
    - apparmor-utils-string-split
    - apparmor-abstractions-no-multiline.diff
  - drop profiles-sockets-temporary-fix.patch - obsoleted by a fix in
    apparmor_parser
  - refresh utils-fix-sorted-save_profiles-regression.diff
  - add aa-teardown (new script to unload all profiles)
  - make ExecStop in apparmor.service a no-op (workaround for a systemd
    restriction, see boo#996520 and boo#853019 for details)
  - lessopen profile: allow capability dac_read_search and dac_override,
    allow groff to execute several helpers (boo#1065388)


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.12
    - add support for 'owner' rules in aa-logprof and aa-genprof
    - add support for includes with absolute path in aa-logprof etc. (lp#1733700)
    - update aa-decode to also decode PROCTITLE (lp#1736841)
    - several profile and abstraction updates, including boo#1069470
    - preserve errno across aa_*_unref() functions
    - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
      for the detailed upstream changelog
  - drop upstreamed patches:
    - read_inactive_profile-exactly-once.patch
    - utils-fix-sorted-save_profiles-regression.diff
  - lessopen profile: change all 'rix' rules to 'mrix'
  - add 32-bit-no-uid.diff to fix handling of log events without ouid on
    32 bit systems
  - no longer package static libapparmor.a


author: suse-beta@cboltz.de
changelog:
  - add parser-write-cache-warn-only.diff to make cache write failures a
    warning instead of an error (boo#1069906, boo#1074429)
  - reduce dependeny on libnotify-tools (used by aa-notify -p) to "Suggests"
    to avoid pulling in several Gnome packages on servers (boo#1067477)


author: kukuk@suse.de
changelog:
  - add disable-cache-on-ro-fs.diff - disable write cache if filesystem is
    read-only and don't bail out (bsc#1069906, bsc#1074429)


author: suse-beta@cboltz.de
changelog:
  - add dovecot-stats.diff:
    - add dovecot/stats profile and allow dovecot to run it (boo#1088161)
    - allow dovecot/auth to write /run/dovecot/old-stats-user (part of boo#1087753)
  - update 32-bit-no-uid.diff with upstream fix


author: rgoldwyn@suse.com
changelog:
  - Set flags for profiles represented by glob (bsc#1086154)
    set-flags-for-profiles-represented-by-glob.patch
    fix-regression-in-set-flags.patch


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.13
    - add support for multiple cache directories and cache overlays
      (boo#1069906, boo#1074429)
    - add support for conditional includes in policy
    - remove group restrictions from aa-notify (boo#1058787)
    - aa-complain etc.: set flags for profiles represented by a glob
    - aa-status: split profile from exec name
    - several profile and abstraction updates
    - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13
      for the detailed upstream changelog
  - drop upstreamed patches and files:
    - aa-teardown
    - apparmor.service
    - apparmor.systemd
    - 32-bit-no-uid.diff
    - disable-cache-on-ro-fs.diff
    - dovecot-stats.diff
    - parser-write-cache-warn-only.diff
    - set-flags-for-profiles-represented-by-glob.patch
    - fix-regression-in-set-flags.patch
  - drop spec code that handled installing aa-teardown, apparmor.service
    and apparmor.systemd (now part of upstream Makefile)
  - simplify "make -C profiles parser-check" call (upstream Makefile bug
    that required to call "cd" was fixed)
  - add aa-teardown-path.diff - install aa-teardown in /usr/sbin/
  - move 'exec' symlink to parser package (belongs to aa-exec)


author: suse-beta@cboltz.de
changelog:
  - create and package precompiled cache (/usr/share/apparmor/cache,
    read-only) (boo#1069906, boo#1074429)
  - change (writeable) cache directory to /var/cache/apparmor/ - with the
    new btrfs layout, the only reason for using /var/lib/apparmor/cache/
    (which was "it's part of the / subvolume") is gone, and /var/cache
    makes more sense for the cache
  - adjust parser.conf (via apparmor-enable-profile-cache.diff) to use both
    cache locations
  - clear cache also in %post of abstractions package


author: suse-beta@cboltz.de
changelog:
  - add fix-apparmor-systemd-perms.diff - fix permissions of
    /lib/apparmor/apparmor.systemd (boo#1090545)


author: suse-beta@cboltz.de
changelog:
  - exclude the /etc/apparmor.d/cache.d/ directory from aa-logprof parsing
    (logprof-skip-cache-d.diff)


author: scabrero@suse.de
changelog:
  - add fix-samba-profiles.patch - smbd loads new shared libraries.
    Allow winbindd to access new kerberos credential cache location
    (boo#1092099)


author: suse-beta@cboltz.de
changelog:
  - update rpmlintrc:
    - whitelist .features file which is part of the pre-compiled cache
    - comment out filters for the disabled tomcat_apparmor subpackage


author: suse-beta@cboltz.de
changelog:
  - update to 2.13.1
    - add qt5 and qt5-compose-cache-write abstractions
    - add @{uid} and @{uids} kernel var placeholders
    - several profile and abstraction updates
    - ignore "abi" rules in parser and tools (instead of erroring out)
    - utils: fix overwriting of child profile flags if they differ from
      the main profile
    - several bugfixes (including boo#1100779)
    - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1
      for the detailed upstream changelog
  - remove upstream(ed) patches:
    - aa-teardown-path.diff
    - fix-apparmor-systemd-perms.diff
    - logprof-skip-cache-d.diff
    - fix-samba-profiles.patch
    - make-pyflakes-happy.diff
    - dnsmasq-Add-permission-to-open-log-files.patch
  - refresh apparmor-samba-include-permissions-for-shares.diff
  - add fix-syntax-error-in-rc.apparmor.functions.patch


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.13.2
    - add profile names to most profiles
    - update dnsmasq profile (pid file and logfile path) (boo#1111342)
    - add vulkan abstraction
    - add letsencrypt certificate path to abstractions/ssl_*
    - ignore *.orig and *.rej files when loading profiles
    - fix aa-complain etc. to handle named profiles
    - several bugfixes and small profile improvements
    - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2
      for the detailed upstream changelog
  - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch


author: mt@suse.de
changelog:
  - netconfig: write resolv.conf to /run with link to /etc (fate#325872,
    boo#1097370) [patch apparmor-nameservice-resolv-conf-link.patch]


author: suse-beta@cboltz.de
changelog:
  - add profile_filename_cornercase.diff: drop check that lets aa-logprof
    error out in a corner-case (log event for a non-existing profile while
    a profile file with the default filename for that non-existing profile
    exists) (boo#1120472)


author: suse-beta@cboltz.de
changelog:
  - add apparmor-lessopen-nfs-workaround.diff: allow network access in
    lessopen.sh for reading files on NFS (workaround for boo#1119937 /
    lp#1784499)


author: suse-beta@cboltz.de
changelog:
  - add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
    to match the newly added libvirtd profile name (boo#1118952#c3)


author: suse-beta@cboltz.de
changelog:
  - add dnsmasq-revert-alternation.diff: revert path alternation in
    dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
    breaking libvirtd (boo#1127073)


author: suse-beta@cboltz.de
changelog:
  - add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
    update-alternatives (boo#1127877)


author: suse-beta@cboltz.de
changelog:
  - update to 2.13.3
    - profile updates for dnsmasq, dovecot, identd, syslog-ng
    - new "lsb_release" profile (only used when using "Px -> lsb_release")
    - fix buggy syntax in tunables/share
    - several abstraction updates
    - parser: fix "Px -> foo-bar" (the "-" was rejected before)
    - several bugfixes in aa-genprof and aa-logprof
    - some fixes in cache handling
    - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
      for the detailed upstream changelog
  - drop upstream(ed) patches:
    - apparmor-nameservice-resolv-conf-link.patch
    - profile_filename_cornercase.diff
    - dnsmasq-libvirtd.diff
    - dnsmasq-revert-alternation.diff
    - usrmerge-fixes.diff
    - libapparmor-swig-4.diff
  - re-number remaining patches


author: suse-beta@cboltz.de
changelog:
  - add abstractions-ssl-certbot-paths.diff - add certbot paths to
    abstractions/ssl_certs and abstractions/ssl_keys


author: suse-beta@cboltz.de
changelog:
  - add usr-etc-abstractions-authentification.diff to allow reading
    /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)


author: suse-beta@cboltz.de
changelog:
  - add usr-etc-abstractions-base-nameservice.diff to adjust
    abstractions/base and nameservice for /usr/etc/ (boo#1161756)


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.13.4
    - several abstraction updates (including boo#1153162)
    - disallow writing to fontconfig cache in abstractions/fonts
    - some bugfixes in the aa-* tools
    - fix log parsing for logs with an embedded newline
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
      for the detailed upstream changelog
  - drop upstreamed patches:
    - abstractions-ssl-certbot-paths.diff
    - apparmor-krb5-conf-d.diff
    - libapparmor-python3.8.diff
    - usr-etc-abstractions-authentification.diff
  - refresh usr-etc-abstractions-base-nameservice.diff


author: suse-beta@cboltz.de
changelog:
  - fix build with make 4.3 by backporting some commits from upstream
    master (boo#1167953):
    - make-4.3-capabilities.diff
    - make-4.3-capabilities-vim.diff
    - make-4.3-network.diff
    - make-4.3-fix-utils-network-test.diff


author: suse-beta@cboltz.de
changelog:
  - add changes-since-2.13.4.diff with upstream changes and fixes
    since 2.13.4 up to 5f61bd4c:
    - add several abstractions related to xdg-open:
      dbus-network-manager-strict, exo-open, gio-open, gvfs-open,
      kde-open5, xdg-open
    - introduce @{run} variable
    - update dnsmasq and winbindd profile
    - update mdns, mesa and nameservice abstraction
    - some bugfixes in the aa-* tools, including a remote bugfix in the
      YaST AppArmor module (boo#1171315)
  - drop upstream(ed) patches (now part of changes-since-2.13.4.diff):
    - make-4.3-capabilities.diff
    - make-4.3-capabilities-vim.diff
    - make-4.3-fix-utils-network-test.diff
    - make-4.3-network.diff
    - abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  - apply usr-etc-abstractions-base-nameservice.diff only for
    Tumbleweed, but not for Leap 15.x where it's not needed
  - refresh usr-etc-abstractions-base-nameservice.diff


author: suse-beta@cboltz.de
changelog:
  - add abstractions-X-xauth-mr582.diff to allow reading the xauth file
    from its new sddm location (boo#1174290, boo#1174293)


author: jfehlig@suse.com
changelog:
  - libvirt-leaseshelper.patch: add /usr/libexec as a path to the
    libvirt leaseshelper script (jsc#SLE-14253)


author: fbui@suse.com
changelog:
  - Make use of %service_del_postun_without_restart
    And stop using DISABLE_RESTART_ON_UPDATE as this interface is
    obsolete.


author: suse-beta@cboltz.de
changelog:
  - %service_del_postun_without_restart only works for Tumbleweed,
    keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 2.13.5
    - add missing permissions to several profiles and abstractions
    - bugfixes in parser and tools
    - fix two potential build failures in libapparmor
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
      for the detailed upstream changelog
  - remove upstream(ed) patches
    - changes-since-2.13.4.diff
    - abstractions-X-xauth-mr582.diff
    - sevdb-caps-mr589.diff
    - libvirt-leaseshelper.patch
    - cap_checkpoint_restore.diff
  - add libapparmor-so-number.diff to fix libapparmor so version (!658)


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 3.0.0
    - introduce feature abi declaration in profiles to enable use of
      new rule types (for openSUSE: dbus and unix rules)
    - support xattr attachment conditionals
    - experimental support for kill and unconfined profile modes
    - rewritten aa-status (in C), including support for new profile modes
    - rewritten aa-notify (in python), finally dropping the perl
      requirement at runtime
    - new tool aa-features-abi for extracting feature abis from the kernel
    - update profiles to have profile names and to use 3.0 feature abi
    - introduce @{etc_ro} and @{etc_rw} profile variables
    - new profile for php-fpm
    - several updates to profiles and abstractions (including boo#1166007)
    - fully support 'include if exists' in the aa-* tools
    - rewrite handling of alias, include, link and variable rules in
      the aa-* tools
    - rewrite and simplify log handling in the aa-logprof and aa-genprof
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0
      for the detailed upstream changelog
  - patches:
    - add changes-since-3.0.0.diff with upstream fixes since the 3.0.0
      release up to 3e18c0785abc03ee42a022a67a27a085516a7921
    - drop upstreamed usr-etc-abstractions-base-nameservice.diff
    - drop 2.13-only libapparmor-so-number.diff
    - refresh apparmor-enable-profile-cache.diff - partially upstreamed
    - update apparmor-samba-include-permissions-for-shares.diff and
      apparmor-lessopen-profile.patch - switch to "include if exists"
    - apparmor-lessopen-profile.patch: add abi rule to lessopen profile
    - refresh apparmor-lessopen-nfs-workaround.diff
  - move away very loose apache profile that doesn't even match the
    apache2 binary path in openSUSE to avoid confusion (boo#872984)
  - move rewritten aa-status from utils to parser subpackage
  - add aa-features-abi to parser subpackage
  - replace perl and libnotify-tools requires with requiring
    python3-notify2 and python3-psutil (needed by the rewritten
    aa-notify)
  - drop ancient cleanup for /etc/init.d/subdomain from parser %pre
  - drop (never enabled) conditionals to build with python2 and to
    build the python-apparmor subpackage (upstream dropped python2
    support)
  - drop setting PYTHON and PYTHON_VERSIONS env variable, no longer needed
  - set PYFLAKES path for utils check
  - add precompiled_cache build conditional to allow faster local
    builds without using kvm
  - remove duplicated BuildRequires: swig


author: suse-beta@cboltz.de
changelog:
  - add utils-fix-hotkey-conflict.diff to fix a hotkey conflict in
    de, id and sv translations (and fix the test) (MR 675)
  - add extra-profiles-fix-Pux.diff to fix an inactive profile -
    prevents a crash in aa-logprof and aa-genprof when creating a new
    profile (MR 676)


author: dimstar@opensuse.org
changelog:
  - Use apache provided variables for the module_directry:
    + Use %apache_libexecdir
    + Add apache-rpm-macros BuildRequires


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 3.0.1
    - minor additions to profiles and abstractions
    - some bugfixes in libapparmor, apparmor_parser and the aa-* utils
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.1
      for the detailed upstream changelog
  - removed upstream(ed) patches:
    - changes-since-3.0.0.diff
    - extra-profiles-fix-Pux.diff
    - utils-fix-hotkey-conflict.diff


author: suse-beta@cboltz.de
changelog:
  - add apache-extra-profile-include-if-exists.diff: make <apache2.d>
    include in apache extra profile optional to avoid problems with empty
    profile directory (boo#1178527)


author: suse-beta@cboltz.de
changelog:
  - replace %{?systemd_requires} with %{?systemd_ordering} to avoid dragging in
    systemd into containers just because apparmor-parser ships a *.service file


author: suse-beta@cboltz.de
changelog:
  - add crypto-policies-mr720.diff to allow reading crypto policies
    in abstractions/ssl_certs (boo#1183597)


author: mcepl@suse.com
changelog:
  - Remove python symbols (python means currently python2), work
    only with python3 ones (fallout from bsc#1185588).


author: suse-beta@cboltz.de
changelog:
  - move Requires: python3 back to the python3-apparmor subpackage -
    readline usage is in the python modules, not in apparmor-utils


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 3.0.2
    - add missing permissions to several profiles and abstractions
      (including boo#1188296)
    - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
      for the detailed upstream changelog
  - remove upstreamed patches:
    - apparmor-dovecot-stats-metrics.diff
    - abstractions-php8.diff
    - crypto-policies-mr720.diff


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 3.0.3
    - fix a failure in the parser tests
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
      for the detailed upstream changelog


author: suse-beta@cboltz.de
changelog:
  - lessopen.sh profile: allow reading files that live on NFS over UDP
    (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)


author: suse-beta@cboltz.de
changelog:
  - add aa-notify-more-arch-mr809.diff: Add support for reading s390x
    and aarch64 wtmp files (boo#1181155)


author: suse-beta@cboltz.de
changelog:
  - add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
    /etc/ssl/engines.d/ in abstractions/openssl which were introduced
    with the latest openssl update


author: nopower@suse.com
changelog:
  -  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
    operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).


author: scabrero@suse.de
changelog:
  - add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
    packaging to allow parallel installation with libldb (bsc#1192684).


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 3.0.4
    - various fixes in profiles, abstractions, apparmor_parser and utils
      (some of them were already included as patches)
    - add support for mctp address family
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
      for the full upstream changelog
  - remove upstream(ed) patches:
    - aa-notify-more-arch-mr809.diff
    - ruby-3.1-build-fix.diff
    - add-samba-bgqd.diff
    - openssl-engdef-mr818.diff
    - profiles-python-3.10-mr783.diff
    - update-samba-abstractions-ldb2.diff
  - refresh patches:
    - apparmor-samba-include-permissions-for-shares.diff
    - ruby-2_0-mkmf-destdir.patch


author: nopower@suse.com
changelog:
  - Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
    /proc/{pid}/fd for samba-bgqd (bnc#1196850).
  - Add update-usr-sbin-smbd.diff to add new rule to allow reading of
    openssl.cnf (bnc#1195463).


author: suse-beta@cboltz.de
changelog:
  - ensure precompiled cache files are newer than (text) profiles
  - reload profiles in %posttrans instead of %post to ensure both
    - profiles and -abstractons package are updated before the cache
    in /var/cache/apparmor/ gets built (boo#1195463 #c20)


author: nopower@suse.com
changelog:
  - Add samba_deny_net_admin.patch to add new rule to deny
    noisy setsockopt calls from systemd; (bnc#1196850).


author: nopower@suse.com
changelog:
  - Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
    which now will spawn new additional services on demand. We need to
    modify the existing smbd/winbind profiles and additionally add a
    new set of profiles to cater for the new functionality;
    (bnc#1198309);


author: suse-beta@cboltz.de
changelog:
  - add php8-fpm-mr876.patch so that php8 php-fpm can read its config
    (boo#1186267#c11)
  - parser: add conflict with apparmor-utils < 3.0 to avoid aa-status
    file conflict on upgrade (boo#1198958)
  - utils: add missing dependency on apparmor-parser (boo#1198958#c4)


author: ddiss@suse.com
changelog:
  - add profiles-permit-php-fpm-pid-files-directly-under-run.patch
    https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)


author: ddiss@suse.com
changelog:
  - Add pam_apparmor README, referenced from online cha-apparmor-pam.html
    documentation (bsc#1213472)


author: ddiss@suse.com
changelog:
  - update zgrep profile to allow egrep helper use (bsc#1214458)
    - zgrep-profile-sync-with-master.diff


author: code@bnavigator.de
changelog:
  - Add python310-help-mr848.patch so that Tumbleweed can switch
    python3 to Python 3.10
    (https://gitlab.com/apparmor/apparmor/-/merge_requests/848)


author: suse-beta@cboltz.de
changelog:
  - add dovecot-profiles-boo1199535-mr881.diff: update dovecot profiles
    for latest dovecot (boo#1199535)


author: code@bnavigator.de
changelog:
  - Add apparmor-setuptools61-mr897.patch
    https://gitlab.com/apparmor/apparmor/-/merge_requests/897
  - Add buildtime dependencies on python-rpm-macros and setuptools


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 3.0.5
    - several additions to profiles and abstractions
    - bugfixes in parser and utils
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.5
      for the detailed upstream changelog
  - remove upstream(ed) patchs:
    - apparmor-setuptools61-mr897.patch
    - dovecot-profiles-boo1199535-mr881.diff
    - php8-fpm-mr876.patch
    - python310-help-mr848.patch
    - samba-new-dcerpcd.patch
    - samba_deny_net_admin.patch
    - update-samba-bgqd.diff
    - update-usr-sbin-smbd.diff
  - apparmor-samba-include-permissions-for-shares.diff: remove
    upstreamed part
  - add dirtest-sort-mr900.diff to fix random test failures
  - change apache-extra-profile-include-if-exists.diff to the post-mv
    path (new quilt executes mv)
  - stop disabling lto (fixed upstream) (boo#1133091)
  - package profile-load script in -parser


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 3.0.6
    - fix LTO build in the parser
    - remove dbus deny rule in abstractions/exo-open
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.6
      for the detailed upstream changelog
  - drop upstream patch dirtest-sort-mr900.diff


author: code@bnavigator.de
changelog:
  - skip code linting for packaging
    * removes pyflakes from the build requirements and thus Ring1
    * see also https://gitlab.com/apparmor/apparmor/-/issues/121


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 3.0.7
    - fix setuptools version detection in buildpath.py
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.7
      for the detailed upstream changelog
  - add dnsmasq-cpu-possible.diff: allow reading /sys/devices/system/cpu/possible
    in dnsmasc//libvirt-leaseshelper profile (boo#1202849)


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 3.1.2
    - lots of cleanups, improvements and bugfixes in all areas
    - rework internal profile storage and handling in the aa-* tools
    - support boolean variable definitions in the aa-* tools
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.1
      and https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.2
      for the detailed upstream changelog
  - remove upstream(ed) patches:
    - apparmor-3.0.7-egrep.patch
    - dnsmasq.diff
    - profiles-permit-php-fpm-pid-files-directly-under-run.patch
    - zgrep-profile-mr870.diff
  - no longer ship precompiled profile cache for Tumbleweed (boo#1205659)
  - BuildRequire iproute2 (needed for aa-unconfined tests)


author: scabrero@suse.de
changelog:
  - Add samba-4-17.patch to update the samba profiles for samba
    version 4.17 (bsc#1206626);
    - samba-4-17.patch superseded by upstream merge:
      https://gitlab.com/apparmor/apparmor/-/merge_requests/926


author: suse-beta@cboltz.de
changelog:
  - add abstractions-openssl-1_1.diff: allow to read
    /etc/ssl/openssl-1_1.cnf in abstractions/openssl (boo#1207911)


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 3.1.3
    - add support for more audit.log formats in libapparmor
    - add abstractions/groff (boo#1065388)
    - various additions in abstractions and profiles
    - several bug fixes in parser and utils
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.3
      for the detailed upstream changelog
  - drop upstreamed patches:
    - abstractions-openssl-1_1.diff
    - dnsmasq-cpu-possible.diff
    - nscd-systemd-userdb.diff


author: fcrozat@suse.com
changelog:
  - Add _multibuild to define additional spec files as additional
    flavors.
    Eliminates the need for source package links in OBS.


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 3.1.4
    - parser: fix mount rules encoding (CVE-2016-1585)
    - aa-logprof: fix error when choosing named exec with plain profile names
    - aa-status: fix json output
    - several fixes for profiles and abstractions
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
      for the full upstream changelog


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 3.1.5
    - fix handling of mount rules in apparmor_parser
    - minor additions to abstractions/base and snap_browsers
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
      for the full upstream changelog
  - remove upstreamed aa-status-fix-json-mr1046.patch
  - split off apparmor-enable-precompiled-cache.diff from
    apparmor-enable-profile-cache.diff so that the precompiled cache
    path doesn't get added in parser.conf for Tumbleweed builds.
    This prevents a warning about the non-existing directory when
    loading profiles.


author: suse-beta@cboltz.de
changelog:
  - update to AppArmor 3.1.6 (jsc#PED-5600)
    - fix regression in mount rules (boo#1211989)
    - some additions to the base and authentification abstractions
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
      for the full upstream changelog


author: julio@juliogonzalez.es
changelog:
  - Add apparmor-systemd-sessions.patch to allow read access to
    /run/systemd/sessions/ (bsc#1216878)


author: suse-beta@cboltz.de
changelog:
  - Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
    unix_chkpwd, and add a profile for unix_chkpwd. This is needed
    for PAM 1.6 (boo#1219139)
  - Refresh apparmor.keyring - the key was renewed


author: suse-beta@cboltz.de
changelog:
  - Update to AppArmor 3.1.7
    - aa-logprof: don't skip exec events in hats
    - fix aa-cleanprof to work with named profiles
    - add permissions in various abstractions
    - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
      for the full list of changes
  - drop upstreamed apparmor-systemd-sessions.patch


author: ddiss@suse.com
changelog:
  - Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
    allow version specific engdef & engines openssl paths (boo#1219571)


author: nopower@suse.com
changelog:
  - Add smbd-unix_chkpwd.diff to allow smbd to execute
    unix_chkpwd and fix other pam related denies; (boo#1220032).


author: suse-beta@cboltz.de
changelog:
  - Remove workaround for boo#853019 in %postun parser -
    apparmor.service contains a more safe workaround.
    This also fixes boo#1220708 (missing daemon-reload).


author: lnussel@suse.de
changelog:
  - Update to version 0.0+git20171227.670229c:
    * Added ABI version number
    * AVX2/AVX-512F optimizations of BLAMKA
    * Set Argon2 version number from the command line
    * New bindings
    * Minor bug and warning fixes (no security issue)
  - use _service file


author: wolfgang.frisch@suse.com
changelog:
  - Update to version 0.0+git20190520.62358ba (boo#1170512):
    * Fix the Makefile to install libargon2.pc.
    * Wait for already running threads if a thread creation failed.
    * Added Argon2 Erlang binding.
    * Additional JVM bindings (Jargon2).


author: rpm@fthiessen.de
changelog:
  - Fix version of package: 20190702 is the upstream version number
    of the package
  - Replaced optflags.patch with adjust-makefile.patch, the
    patch will now also allow to set the file permissions of installed
    libraries. This fixes the rpmlint error: shared-library-not-executable


author: sbrabec@suse.cz
changelog:
  - Fix mis-compilation of libuuid without uuidd support
    (bnc#900935).
  - Fix uuidd socket activation (bnc#900935).
  - Remove obsolete sysvinit script for uuidd.
  - Remove no more needed uuidd permissions stuff.
  - Replace PreReq for obsolete pwdutils by names of binaries.
  - Add fstrim service scripts and rcfstrim helper.


author: jengelh@inai.de
changelog:
  - Remove pam_securetty.so from /etc/pam.d/login. By definition,
    local logins are always secure. Remote logins actually use
    /etc/pam.d/remote by way of `/bin/login -h` (such as rlogind).
    This solves the problem that root logins are erroneously rejected
    when using kmscon(8) or `machinectl login`, because they use
    ptys.


author: schwab@linux-m68k.org
changelog:
  - Use util-linux:/bin/logger as split-provide,
    /usr/lib/systemd/system/fstrim.service didn't exist in 13.1


author: sweet_f_a@gmx.de
changelog:
  - Update to version 2.25.2: mostly minor fixes
    (including boo#908742)
  - re-enable utmpdump and ipcs tests for all archs


author: sbrabec@suse.cz
changelog:
  - libblkid: care about unsafe chars and possible buffer overflow
    in cache (CVE-2014-9114, util-linux-libblkid-unsafe-chars.patch,
    util-linux-libblkid-overflow.patch, bsc#907434)


author: dimstar@opensuse.org
changelog:
  - Do not try to unregister an info file (ipc.info.gz) which we do
    not own. Already in May 2011, we stopped registering it: "do not
    register ipc.info.gz (not provided by this package)".


author: sweet_f_a@gmx.de
changelog:
  - define upstream source for klogconsole to remove patches
    * klogconsole-quiet.patch
    * klogconsole.diff
  - remove openSUSE 13.1 specific eject permissions, did not worked
    anyway since eject-fpie.patch was removed
  - always call autoreconf, not only for splitted packages, skip
    autopoint (gettext)


author: sbrabec@suse.cz
changelog:
  - Update to util-linux-2.26:
    * based on the git master branch of util-linux, remove backported
      patches (util-linux-libblkid-unsafe-chars.patch,
      util-linux-libblkid-overflow.patch)
    * zramctl(8): this NEW COMMAND allows to control /dev/zramN
      devices
    * agetty(8): supports new option --reload to force already
      running agetty processes to reprint the /etc/issue file
    * cfdisk(8), sfdisk(8) and fdisk(8): support sfdisk-compatible
      scripts; it's possible to save your partitioning layout to text
      files and (re)use it in all fdisks
    * fdisk(8), sfdisk(8): support new command-line option "--output
      <list>" to specify output columns for --list or print commands,
      do not abort when fdisk -l when device cannot be opened
      [bnc#886790], [bnc#893712], [bnc#890351]
    * nsenter(1): has been updated to work with the latest kernel
      changes in user namespaces supports new command-line option
    - -preserve-credentials
    * unshare(1): has been updated to work with the latest kernel
      changes in user namespaces supports new command-line option
      "--setgroups=<deny|allow>"
    * swapon(8): supports new command-line option "-o <list>" with
      the same semantics as -o for mount(8); it's now possible to
      specify swap options on the command line by the same string as
      in fstab
    * fdformat(8): supports new command-line options --from and --to
      to specify tracks and --repair for broken floppies
    * getopt(1): has been updated to the latest version (originally
      maintained outside of util-linux) and refactored
    * ldattach(8): has been improved to support GSM0710 and intro
      modem commands
    * logger(1): supports new command-line option --id= to specify
      PID (or another ID) allows to specify --rfc3164 or --rfc5424
      syslog protocols
    * lscpu: recognizes Unisys s-Par as hypervisor (FATE#318231)
    * libfdisk: the library is distributed as a shared library with a
      stable API and a standard header file
    * libmount: provides a new simple API to monitor mount-table
      changes (including changes in userspace mount options)
    * libmount: Fix mount point lookup (and mount -a) if the path
      contains // (bsc#931955).
  - Fix lack of I18N support in util-linux-systemd (mis-compilation).


author: sweet_f_a@gmx.de
changelog:
  - Update to util-linux-2.26.1:
    * cal(1): do not segfault when TERM is not defined or wrong
      (bnc#903440)
    * logger(1): major fixes and enhancements
    * agetty(8): support /usr/lib/os-release too
    * some more fixes, mostly minor ones, see ReleaseNotes
  - re-enable fixed tests (fdisk/bsd, ppc64le)


author: sweet_f_a@gmx.de
changelog:
  - Update to util-linux-2.26.2:
    * many fixes, most notable for logger, *fdisks and mount
    * (lib)mount, add support for MS_LAZYTIME
  - disable libmount/lock test to avoid random timeouts
  - socat is needed for logger tests


author: crrodriguez@opensuse.org
changelog:
  - Build with --enable-libmount-force-mountinfo the rationale is
    identical to the following commit message --> http://bit.ly/1eqf5GO
    The default behaviour is undesirable and fragile when using
    systemd.


author: sbrabec@suse.com
changelog:
  - Add %systemd_preset_pre and %systemd_preset_posttrans that will
    do one shot presetting of uuidd.service on upgrade.
    (bnc#900935#c46, FATE#318949, FATE#317727).
  - Remove one shot presetting hacks.


author: sbrabec@suse.com
changelog:
  - Update to version 2.27:
    * Many changes and improvements, most notably:
    * lsipc: new command
    * unshare provides a new option --propagation=
    * mount(8) supports read-only binds in one (not atomic) step by
      "bind,ro".
    * GNU readline support in fdisk and sfdisk.
    * JSON support in libsmartcols and findmnt, losetup, lsblk,
      lslocks, sfdisk and lsipc.
    * script has been massively improved to be more robust and less
      complex (bsc#888678, bsc#930236).
    * sulogin supports locked root accounts by --force
      (bsc#968733, bsc#963399).
    * colors support by default. It is possible to change this
      with --disable-colors-default.
    * more information in cfdisk
    * fdisk provides new commands 'F' and 'i'
    * cal supports the new options --twelve and --months <n>
    * rtcwake supports a news option --list-modes and --date, no
      support RTC_ALM_READ and RTC_ALM_SET fallbacks any more.
    * Many fixes, most notably:
    * fsck: now supports -r {fd} (bsc#923777, bsc#903738)
    * Fix fsck -C {fd} parsing (bsc#923777, bsc#903738)
    * better handling of multi-path devices
      (bsc#880468, bsc#924994)
    * flock: improve timeout handling (bsc#926945)
    * lsblk: display mountpoint even for top-level device
      (bsc#943415)
    * colcrt: fix buffer overflow (bsc#949754, CVE-2015-5218)


author: schwab@suse.de
changelog:
  - Change condition for known fail markers from test for armv6 and aarch64
    architecture to test for qemu user-space build


author: sweet_f_a@gmx.de
changelog:
  - Update to version 2.27.1, bugfix release, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.27/v2.27.1-ReleaseNotes
    (fixes bsc#950778, FATE#320552).


author: sweet_f_a@gmx.de
changelog:
  - Update to version 2.28 (bsc#974301):
    * Many changes and improvements, most notably:
    * Now cfdisk, sfdisk and fdisk wipe all filesystem and RAID
      signatures when creating a new disk label in interactive
      mode. See --wipe[=auto|never|always].
    * lsns -- this NEW COMMAND lists information about all
      currently accessible namespaces or about the given namespace.
    * The command sfdisk supports new operations --delete,
    - -move-data and --reorder.
    * The command blkdiscard supports a new option --zeroout to
      zero-fill rather than discard a specified area.
    * The command cal supports a new option --span to span the date
      when displaying multiple months.
    * The command chrt supports the DEADLINE scheduling class and
      the new options --sched-runtime --sched-period and
    - -sched-deadline.
    * The command logger supports RFC 5424 structured data through
      the new options --sd-id and --sd-param.
    * The command losetup supports a new option --direct-io.
    * The command lsblk allows to sort output by unprinted columns.
    * The command mount applies the nofail mount option to
      ENOMEDIUM errors.
    * The commands nsenter and unshare support a new option
    - -cgroup for work with cgroups namespaces (CLONE_NEWCGROUP).
    * The library libmount has been improved to properly detect
      already mounted btrfs subvolumes (bsc#947494, bsc#972684).
    * The library libsmartcols has been massively improved to print
      table ranges, multi-line cells, table titles and to support
      continuous printing.
    * The package build system and code have been improved to be
      more portable to non-Linux systems (BSD, OSX).
    * The package does not provide fallback solutions for
      openat-family functions anymore.
    * The python binding for libsmartcols is available in separate
      project at https://github.com/ignatenkobrain/python-smartcols
    * Other bug fixes (bsc#970404, bsc#975082, FATE#318444).
    * Security issue: CVE-2016-2779 is NOT FIXED yet.
  - Remove old util-linux-noenc-suse.patch


author: sweet_f_a@gmx.de
changelog:
  - fix build for openSUSE >= 13.1 (inclusive SLE 12)
  - drop build for openSUSE < 13.1
  - remove old build conditions: sysvinit_tools, enable_su and
    enable_eject
  - cosmetics: reorder configure options


author: sbrabec@suse.com
changelog:
  - Add librtas-devel to BuildRequires on Power platforms. Needed for
    proper function of lscpu (bsc#975082).


author: sbrabec@suse.com
changelog:
  - Remove incorrect --with-bashcompletiondir that breaks
    bash-completion, use path in bash-completion.pc instead
    (boo#977259).


author: sbrabec@suse.com
changelog:
  - blkid: Wipe corect area for probes with offset (bsc#976141,
    util-linux-libblkid-wipe-offset.patch).


author: dimstar@opensuse.org
changelog:
  - Do not BuildRequires bash-completion: this is tempting, but it
    pulls bash-completion and its entire dependency stack into Ring0,
    which is inacceptable. Pass the correct path
    (%{_datdir}/bash-completion/completions) via
    - -with-bashcompletiondir to configure.


author: dimstar@opensuse.org
changelog:
  - BuildIgnore util-linux: it's part of VMInstall, hence part of
    every package build. util-linux itself can be built without its
    own presence though. Helps with some rare bootstrap issues (when
    librtas changes soname for example).
  - Drop usage of gpg-offline: this has long been migrated to a
    source service that checks signatures on checkin already (osc
    service lr source_validatory).


author: sweet_f_a@gmx.de
changelog:
  - Update to version 2.28.1, bugfix release, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.28/v2.28.1-ReleaseNotes
  - Remove util-linux-libblkid-wipe-offset.patch (upstream)
  - use the new configure option --enable-libuuid-force-uuidd
    instead of sed'ing configure.ac


author: sweet_f_a@gmx.de
changelog:
  - Update to version 2.28.2, bugfix release, see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.28/v2.28.2-ReleaseNotes


author: sweet_f_a@gmx.de
changelog:
  - Update to version 2.29 (FATE#322090)
    * cal: possible to specify month by name (e.g. "cal January
      2017") and use relative placeholders (cal "+1 month")
    * fdisk(8) allows to wipe newly created partitions; the feature
      is possible to control by new command line option
    - -wipe-partitions[==auto|never|default].
    * findmnt --verify: the command scans /etc/fstab and tries to
      verify the configuration.
    * mount(8) now rejects requests to create another device and
      mount filesystem for the same backing file. The command
      `losetup --nooverlap` reuses loop device if already exists
      for the same backing file. All the functionality calculate
      with offset and sizelimit options of course, so it's fine to
      have multiple regions (partitions) in the same image file and
      mount all of them in the same time. The restriction is that
      the regions should not overlap.
    * lscpu supports the "drawer" topology for IBM S/390.
    * sfdisk: Support for deprecated --show-pt-geometry (bsc#990531).
    * libmount: various issues with cifs mount
      (bsc#982331, bsc#987176).
    * libblkid: Prevent infinite loop DoS while parsing DOS partition
      tables (bsc#988361, CVE-2016-5011).
    * More details at:
      http://karelzak.blogspot.de/2016/10/util-linux-v229-whats-new.html
      https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29-ReleaseNotes
  - refresh make-sure-sbin-resp-usr-sbin-are-in-PATH.diff


author: sbrabec@suse.com
changelog:
  - Remove no more supported --enable-libmount-force-mountinfo.
    There is --enable-libmount-support-mtab, disabled by default,
    exactly as we need.


author: fbui@suse.com
changelog:
  - Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
    libsystemd-* libs were deprecated and are gone now.


author: sweet_f_a@gmx.de
changelog:
  - don't install bash-completions for uninstalled binaries (chfn,
    chsh, newgrp, pg)
  - for now remove procps dependency  which is only needed for tests
    because it pulls systemd


author: sbrabec@suse.com
changelog:
  - Replace raw initscript by a systemd service doing the same thing.
    Based on previous work of fcrozat@suse.com (FATE#321122).


author: sbrabec@suse.com
changelog:
  - Update to version 2.29.1:
    * lscpu: add aarch64 specific names
    * lubmount: Disable disable ro/rw mtab checks (bsc#1012632)
    * More details at:
      https://www.kernel.org/pub/linux/utils/util-linux/v2.29/v2.29.1-ReleaseNotes


author: sbrabec@suse.com
changelog:
  - Merge SLE12 SP3 changes to make the package compatible with
    Tumbleweed, SLE12 SP3 and Leap 42.3.
  - Drop patch tests-script-race-on-force-only.patch from SLE12 SP3
    and Leap 42.3. Upstream has a different workaround.
    https://github.com/karelzak/util-linux/issues/296
  - INCOMPATIBLE CHANGE for SLE12 SP3 and Leap 42.3:
    losetup -L changes its meaning from SLE12 SP1&SP2 specific
    - -logical-blocksize to the upstream --nooverlap).
    - -logical-blocksize can be used only with long option
    (bsc#966891).
  - Include SLE12 + Leap 42 exclusive feature, implemented by
    hare@suse.de:
    * losetup: Add support for setting logical blocksizes
      (bsc#931634, FATE#319010)
      + util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
    SLE12 & Leap 42 specific changes:
    * Fix for SLE12: bsc#956540, SLE12 SP1: bsc#953691, Leap 42.1:
      boo#954482, was obsoleted by the systemd update, and skipped.
    * Remove --enable-ncurses that is intended to force non-wide
      ncurses (boo#978993).
    * Make release-dependent conflict with old sysvinit-tools SLE
      specific, as it is required only for SLE 11 upgrade,
      and breaks openSUSE staging builds (boo#994399).
    * Obsolete these patches, now upstreamed:
    * Drop upstreamed patches
      (tests-script-race-on-force-only.patch,
      util-linux-libmount-ignore-redundant-slashes.patch,
      util-linux-sfdisk-show-pt-geometry-1.patch,
      util-linux-sfdisk-show-pt-geometry-2.patch,
      util-linux-sfdisk-show-pt-geometry-3.patch,
      util-linux-libblkid-partition-loop.patch,
      util-linux-libblkid-wipe-offset.patch,
      util-linux-mount-reuse-loop-1.patch,
      util-linux-mount-reuse-loop-2.patch,
      util-linux-mount-reuse-loop-3.patch,
      util-linux-mount-reuse-loop-4.patch,
      util-linux-loop-reuse-01.patch, util-linux-loop-reuse-02.patch,
      util-linux-loop-reuse-03.patch, util-linux-loop-reuse-04.patch,
      util-linux-loop-reuse-05.patch, util-linux-loop-reuse-06.patch,
      util-linux-loop-reuse-07.patch, util-linux-loop-reuse-08.patch,
      util-linux-loop-reuse-09.patch, util-linux-loop-reuse-10.patch,
      util-linux-loop-reuse-12.patch, util-linux-loop-reuse-13.patch,
      util-linux-loop-reuse-14.patch, util-linux-loop-reuse-15.patch,
      util-linux-loop-reuse-16.patch, util-linux-loop-reuse-17.patch,
      util-linux-loop-reuse-18.patch, util-linux-loop-reuse-19.patch,
      util-linux-loop-reuse-20.patch,
      util-linux-libmount-cifs-is_mounted.patch).
    * Refreshed patches
      (make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
      util-linux-losetup-Add-support-for-setting-logical-blocksize.patch).


author: fbui@suse.com
changelog:
  - presets are managed by the branding presets package (bsc#1012850)
    The default activation state is defined by the branding preset
    package.
    This also get rid of the only use of the rpm preset macros so we can
    kill them.


author: sweet_f_a@gmx.de
changelog:
  - Update to version 2.29.2:
    * su(1) security issue CVE-2017-2616 (bsc#1023041)
    * minor bugfixes and enhancements


author: sbrabec@suse.com
changelog:
  - Keep dependency on insserv and fillup for compatibilitiy reasons
    in Leap 42.3. Too many poorly written packages depend on it.
    (Marked as "sysv compatibility hack".)


author: sbrabec@suse.com
changelog:
  - Conflict with old systemd-presets-branding to ensure correct
    preset migration (boo#1029775, bsc#1012850).


author: sweet_f_a@gmx.de
changelog:
  - fix util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
    - -logical-blocksize was behaving like --nooverlap


author: sbrabec@suse.com
changelog:
  - To cover release numbers of both SLE12 SP3 and Leap 42.3, relax
    release based conflict with bash-completion from 13.1 to 10.


author: agraf@suse.com
changelog:
  - Prefer sysfs exported SMBIOS3 tables in lscu (bsc#1033718)
    + arm64-lscpu-use-sysfs-for-table-access-if-available.patch


author: msuchanek@suse.com
changelog:
  - When when hypervisor_decode_sysfw fails continue with other
    detection methods (bsc#1042991, bsc#1039360, bsc#1033718)
    + util-linux-lscpu-cleanup-DMI-detection-return-codes.patch


author: sweet_f_a@gmx.de
changelog:
  - Update to version 2.30:
    * Many changes and improvements, most notably:
    * The libblkid library has been improved for hybrid CDROM/DVD
      media.
    * The deprecated command tailf has been removed. Use "tail -f"
      from coreutils.
    * blkzone -- NEW COMMAND to run zone commands on block devices
      that support Zoned Block Commands (ZBC) or Zoned-device ATA
      Commands (ZAC).
    * fincore -- NEW COMMAND to count pages of file contents in
      core (memory).
    * lsmem -- NEW COMMAND to list the ranges of available memory
      with their online status.
    * The command fallocate -- supports an "insert range" operation
      now.
    * The command "column -t|--table" has been modified to use
      libsmartcols. It now provides nearly all of that library's
      functionality from the command line.
    * Security issues:
    * hwclock - no longer makes any internal permission checks. The
      System Administrator must set proper permissions to control
      user access to the RTC. It is NOT recommended to use SUID.
    * CVE-2016-2779 - This security issue is NOT FIXED yet.
    * More details at:
      https://www.kernel.org/pub/linux/utils/util-linux/v2.30/v2.30-ReleaseNotes
  - Drop upstreamed patch
    arm64-lscpu-use-sysfs-for-table-access-if-available.patch
  - Refreshed patch
    util-linux-losetup-Add-support-for-setting-logical-blocksize.patch
  - fix compiler warnings for mkzimage_cmdline


author: lnussel@suse.de
changelog:
  - don't conflict with sysvinit-tools in Tumblweed anymore. Needed for Leap 15
    which wants to use a different release number scheme (lp150.x which produces
    lower numbers than the conflict).


author: sweet_f_a@gmx.de
changelog:
  - Update to version 2.30.1:
    Bugfix release, more details at:
    https://www.kernel.org/pub/linux/utils/util-linux/v2.30/v2.30.1-ReleaseNotes
  - Drop upstreamed patch
    util-linux-lscpu-cleanup-DMI-detection-return-codes.patch


author: sbrabec@suse.com
changelog:
  - Update to version 2.31:
    * New utilities: uuidparse, rfkill.
    * su has been refactored and extended to create pseudo terminal
      (new option --pty, CVE-2016-2779, bsc#968674). This new
      EXPERIMENTAL feature provides better isolation between root's
      terminal and an unprivileged su.
    * libuuid: Improved to match
    * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
      (sha1) as specified by RFC-4122. Provide UUID templates for
      dns, url, oid, or x500.
    * libblkid: Extended support for DM-integrity, HPE (aka
      extended-XFS) and UBI superblock. New API to hide already
      detected signatures.
    * libfdisk: New API to modify grain, make possible to completely
      disable dialog driven partitioning.
    * libsmartcols: New API to move columns.
    * column: --table-header-repeat to repeat table headers.
    * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
    * fdisk: Improved ^C and ^D behavior.
    * cfdisk: Dialog to resize partition.
    * look: Follow the WORDLIST environment variable.
    * losetup: Added support for --sector-size (FATE#319010).
    * script: Follow the usual semantics for stop/continue signals.
    * setpriv: New command line options --ambient-caps and
    - -init-groups.
    * hwclock: Reduce system shutdown times, log --systz when using
      libaudit.
    * Other bug fixes.
  - Drop upstreamed util-linux-use-tinfow.patch.
  - Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.


author: sbrabec@suse.com
changelog:
  - lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
    util-linux-lsmem-memory-zone-1.patch,
    util-linux-lsmem-memory-zone-2.patch,
    util-linux-lsmem-memory-zone-3.patch).
  - Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
    Different implementations exists in the new kernel, and it has
    a conflicting implementation in util-linux.


author: sbrabec@suse.com
changelog:
  - Integrate rfkill-block@.service and rfkill-unblock@.service from
    rfkill package (boo#1074250#c4).
  - Remove unneeded release based conflicts and obsolescences
    (boo#1074250#c18).
  - Remove sysvinit requirement.


author: sbrabec@suse.com
changelog:
  - Update to version 2.31.1:
    * blkid: Add support for LUKS2 and new LABEL attributes.
    * move rfkill to /usr/sbin (boo#1076134).
    * fsck.cramfs: Fix bus error on broken file system.
    * hwclock: add iso-8601 overflow check
    * libmount:
    * Allow MNT_FORCE and MNT_DETACH at umount
    * add nsfs between pseudo filesystems
    * lscpu: Treat read failure on Xen Hypervisor properties as
      non-fatal
    * sha1: endian fixes (affects util_linux_bigendian.patch)
    * documentation updates
    * other fixes and improvements
  - Fix regressions in 2.31.1:
    * sha1 on s390* (update util_linux_bigendian.patch)
    * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
    * fincore/count (disable, util-linux-fincore-count.patch)


author: sbrabec@suse.com
changelog:
  - su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
    add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.


author: sbrabec@suse.com
changelog:
  - Backport three upstream patches:
    * Fix crash loop in lscpu
      (bsc#1072947, util-linux-lscpu-loop.patch).
    * Fix possible segfault of umount -a
      (util-linux-libmount-umount-a-segfault.patch).
    * Fix mount -a on NFS bind mounts (bsc#1080740,
      util-linux-libmount-mount-a-nfs-bind-mount.patch).


author: sbrabec@suse.com
changelog:
  - Fix lscpu and chcpu on systems with >1024 cores
    (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
  - Fix CPU count in chcpu
    (bnc#1091164, util-linux-chcpu-cpu-count.patch).


author: tchvatal@suse.com
changelog:
  - Do not run rfkill-block@.service and rfkill-unblock@service as it
    is just template without parameter bsc#1092820 bsc#1093176


author: sbrabec@suse.com
changelog:
  - Update to version 2.32.1:
    * cal(1) has been improved and extended.
    * libblkid has been extended to support LUKS2, Micron mpool, VDO
      and Atari partition table.
    * rfkill(8) has been moved to /usr/sbin.
    * dmesg(1) provides better support for multi-line messages, new
      command line option --force-prefix.
    * fallocate(1) --dig-holes is faster and more effect now.
    * fdisk(8) provides access to Protective MBR accessible from main
      menu. Sun label support has been improved.
    * lscpu(1) provides more details about ARM CPUs now
      (FATE#326453).
    * lsmem(1) supports memory zone awareness now (FATE#324252,
      drop util-linux-lsmem-memory-zone-1.patch,
      util-linux-lsmem-memory-zone-2.patch,
      util-linux-lsmem-memory-zone-3.patch).
    * lsns(8) provides netnsid and nsfs columns now.
    * rtcwake(8) waits stdin to settle down before entering a system
      sleep.
    * Many fixes and improvements, see
      https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32-ReleaseNotes
      https://www.kernel.org/pub/linux/utils/util-linux/v2.32/v2.32.1-ReleaseNotes
      (drop util_linux_bigendian.patch, util-linux-cramfs.patch,
      util-linux-fincore-count.patch,
      util-linux-sysfs-nvme-devno.patch, util-linux-lscpu-loop.patch,
      util-linux-libmount-umount-a-segfault.patch,
      util-linux-libmount-mount-a-nfs-bind-mount.patch,
      util-linux-lscpu-chcpu-new-cpu-macros.patch,
      util-linux-chcpu-cpu-count.patch).


author: sbrabec@suse.com
changelog:
  - Drop obsolete downstream ppc utilities
    chrp-addnote and mkzimage_cmdline (boo#1109284).
  - Drop obsolete setctsid (boo#1109290).


author: sbrabec@suse.com
changelog:
  - Update to version 2.33:
    * choom: new command to adjust and display the current OOM-killer
      score.
    * libsmartcols has been improved to differentiate between
      numbers, booleans and strings in JSON output.
    * fstrim(8): trim all mounted filesystems from /etc/fstab
      (-A|--fstab), new command line option --dry-run.
    * hwclock(8) new command line option --delay.
    * mount umount, libmount allow to mount and umount filesystem in
      another namespace.
    * rename(1) new command line option --interactive.
    * setarch(8) does not require architecture when modify
      personality like ADDR_NO_RANDOMIZE. The architecture argument
      is optional now.
    * command su(1) new command line option --whitelist-environment.
    * setpriv(1) new command line option --reset-env and --pdeathsig.
    * fdisk(8), sfdisk(8): print disk model name to simplify device
      identification.
    * column --table-empty-lines" allows to use empty lines in
      formatted output.
    * wipefs improved to postpone BLKRRPART ioctl until all magic
      strings are wiped.
    * script(1) extended to store more information about terminal
      size and type to the typescript header. New command line
      option --output-limit.
    * libblkid provides BitLocker and basic APFS detection now.
    * lsblk is possible to execute against /sys and /proc dumps with
    - -sysroot is specified.
    * agetty(8) reload issue only if it is really needed
      (bsc#1085196).
  - Drop klogconsole in favor of dmesg --console-level plus
    setlogcons (kbd) (boo#1116277).


author: sbrabec@suse.com
changelog:
  - Drop rfkill-block@.service and rfkill-unblock@.service that
    functionally conflict with systemd-rfkill@.service
    (boo#1092820#c13).


author: sbrabec@suse.com
changelog:
  - agetty: Fixes for reload issue only if it is really needed
    (bsc#1085196, boo#1120298,
    util-linux-agetty-smart-reload-10.patch,
    util-linux-agetty-smart-reload-11.patch,
    util-linux-agetty-smart-reload-12.patch).


author: sbrabec@suse.com
changelog:
  - Update to version 2.33.1:
    * agetty fixes (drop util-linux-agetty-smart-reload-10.patch,
      util-linux-agetty-smart-reload-11.patch,
      util-linux-agetty-smart-reload-12.patch).
    * Other minor fixes and documentation updates.


author: mwilck@suse.com
changelog:
  - libmount: print a blacklist hint for "unknown filesystem type"
    (jsc#SLE-4085, fate#326832), and add documentation
    * add libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
    * add Add-documentation-on-blacklisted-modules-to-mount-8-.patch


author: sbrabec@suse.com
changelog:
  - Fix problems in reading of login.defs values (bsc#1121197,
    util-linux-login_defs-priority1.patch,
    util-linux-login_defs-priority2.patch,
    util-linux-login_defs-SYS_UID.patch).
  - Perform one-time reset of /etc/default/su (bsc#1121197).
  - Add virtual symbols for login.defs compatibility (bsc#1121197).
  - Add login.defs safety check util-linux-login_defs-check.sh
    (bsc#1121197).


author: sbrabec@suse.com
changelog:
  - Update to version 2.33.2 (bsc#1134337):
    * agetty: Fix 8-bit processing in get_logname() (bsc#1125886).
    * mount: Fix "mount" output for net file systems (bsc#1122417).
    * Many Other fixes, see
      https://www.kernel.org/pub/linux/utils/util-linux/v2.33/v2.33.2-ReleaseNotes


author: sbrabec@suse.com
changelog:
  - Fix /etc/default/su comments and create /etc/default/runuser
    (bsc#1121197#31).
  - Remove /etc/default/su migration from coreutils.


author: sbrabec@suse.com
changelog:
  - Update to version 2.34:
    * new command hardlink
    * rewrite of lsblk, now supports --dedup
    * support for FUSE in umount
    * support for "--all -o remount" in mount
    * su: prefer /etc/default/su over /etc/login.defs and ENV_SUPATH
      over ENV_ROOTPATH (bsc#1121197), improved --pty
    * unshare: add -S/--setuid, -G/--setgid, -R/--root and -w/--wd
    * fstrim: do not suppress warnings unless --quiet is used
    * lscpu: print 'Frequency boost' and 'Vulnerability' fields, add
    - -caches
    * logger: merge multiple MESSAGE= lines
    * libblkid: do not depend on libuuid, supports DRBD9 detection
    * libsmartcols: support N:M relationships in tree-like output
    * fstrim and uuidd systemd services: hardening settings to
      improve security and service isolation
    * fstrim: trim root filesystem on --fstab, check for read-only
      filesystems on --all and --fstab (boo#1106214).
    * fstrim -A: properly de-duplicate sub-volumes (boo#1127701).
    * Obsoletes util-linux-login_defs-priority1.patch,
      util-linux-login_defs-priority2.patch and
      util-linux-login_defs-SYS_UID.patch.
    * Many Other fixes, see
      https://www.kernel.org/pub/linux/utils/util-linux/v2.34/v2.34-ReleaseNotes
  - Provide and obsolete hardlink package.
  - util-linux-login_defs-check.sh: Update checksum, login now
    supports LASTLOG_UID_MAX.


author: sbrabec@suse.com
changelog:
  - Issue a warning for outdated pam files
    (bsc#1082293, boo#1081947#c68).
  - Fix comments and unify look of PAM files (login.pamd,
    remote.pamd, runuser-l.pamd, runuser.pamd, su-l.pamd, su.pamd).


author: kukuk@suse.de
changelog:
  - libeconf.patch: Add support for libeconf
  - Move /etc/pam.d/* to /usr/etc/pam.d
  - Remove migration code for su from coreutils to util-linux, not
    needed anymore


author: iforster@suse.com
changelog:
  - Add libmount-Avoid-triggering-autofs-in-lookup_umount_fs.patch:
    Avoid triggering autofs in lookup_umount_fs_by_statfs
    (boo#1168389)


author: sbrabec@suse.com
changelog:
  - Update to version 2.35.1:
    * agetty: add --show-issue, support for /run/issue and
    * fdisk: Correct handling of hybrid MBR, cleanup wipe warning,
      use 'r' to return from MBR to GPT.
    * lsblk: FSVER column,
      drop e3bb9bfb76c17b1d05814436ced62c05c4011f48.patch.
    * lscpu: Add HiSilicon aarch64 tsv110 cpupart, add a new columns
      to --cache.
    * mount: add --target-prefix.
    * mountpoint: add --nofollow option.
    * script: add --echo, --log-in, --logging-format, --log-out and
    - -log-timing.
    * scriptlive: new command.
    * scriptreplay: add --log-* options, --cr-mode, --stream,
    - -summary, -T --log-timing.
    * sfdisk: add progress bars.
    * unshare: add --keep-caps and --map-current-user options.
    * Many other fixes and improvements, see:
      https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.35/v2.35-ReleaseNotes
      https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.35/v2.35.1-ReleaseNotes
  - Refresh libeconf.patch.


author: fvogt@suse.com
changelog:
  - Add patch to fix sfdisk not reading its own scripts:
    * libfdisk-script-accept-sector-size.patch
  - Use %autopatch


author: mcalabkova@suse.com
changelog:
  - Include pam_securetty in login.pamd again (bsc#1033626)
  - Update to 2.35.2
    * make glibc 2.31 compatible
  - Dropped unneeded patch libfdisk-script-accept-sector-size.patch


author: sbrabec@suse.com
changelog:
  - Fix default permissions of wall and write.
  - Update to version 2.36:
    * blkdiscard(8) refuses to proceed if filesystem or RAID
      signatures are found in interactive mode (executed on a
      terminal). The option --force is required to the discard
      data.
    * new commands irqtop(1) and lsirq(1)to monitor kernel
      interrupts.
    * cal(1) provides a new --vertical command line option.
    * blkzone(8) implements open/close/finish commands now.
    * unshare(1) and nsenter(1) commands support the time namespace
      now.
    * agetty(8) now supports multiple paths in the option
    - -issue-file.
    * fdisk(8), sfdisk(8), cfdisk(8), mkswap(8) and wipefs(8) now
      support block devices locking by flock(2), new command line
      option --lock and $LOCK_BLOCK_DEVICE environmental variable.
    * dmesg(1) new command line option --follow-new to wait and
      print only new kernel messages.
    * fdisk(8) new command line option --list-details and
    - -noauto-pt.
    * fdisk(8) and sfdisk(8) support user-friendly aliases for
      partition types.
    * fstrim(8) supports new command line option --listed-in.
    * libfdisk provides API to relocate GPT backup header. New
      command line option "sfdisk --relocate".
    * mount(8) now supports mount by ID= tag.
    * login(1) supports list of "message of the day".
    * All tools which read /etc/login.defs is possible to compile
      with libeconf now.
    * more(1) has been refactored.
    * man pages cleanup
    * other fixes and improvements, see:
      https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.36/v2.36-ReleaseNotes
  - Refresh Add-documentation-on-blacklisted-modules-to-mount-8-.patch.
  - Drop upstreamed libeconf.patch,
    libmount-Avoid-triggering-autofs-in-lookup_umount_fs.patch.
  - util-linux-login_defs-check.sh: Perform all steps to integrate
    MOTD_FIRSTONLY.
  - Update baselibs.conf.


author: werner@suse.de
changelog:
  - Add patch util-linux-sulogin4bsc1175514.patch
    Avoid sulogin failing on not existing or not functional console
    devices (bsc#1175514)


author: jengelh@inai.de
changelog:
  - Do search /usr/sbin for mount helpers. (This drops /sbin/fs,
    /sbin/fs.d, which we do not use in openSUSE.)


author: sbrabec@suse.com
changelog:
  - Update to version 2.36.1:
    * chrt: use SCHED_FLAG_RESET_ON_FORK for sched_setattr()
    * fallocate: fix --dig-holes at end of files
    * fdisk: always report fdisk_create_disklabel() errors
    * flock: keep -E exit status more restrictive
    * fstrim: remove fstab condition from fstrim.timer
    * hexdump: automatically use -C when called as hd
    * hwclock: add fallback if SYS_settimeofday does not exist, fix
      SYS_settimeofday fallback
    * libblkid: allow a lot of mac partitions, fix Atari prober logic,
      limit amount of parsed partitions
    * more libfdisk improvements
    * losetup: avoid infinite busy loop, increase limit of setup
      attempts
    * lsblk: fix -T optional argument, fix SCSI_IDENT_SERIAL, print
      zero rather than empty SIZE, read ID_SCSI_IDENT_SERIAL if
      available
    * lscpu: Add FUJITSU aarch64 A64FX cpupart, Even more Arm part
      numbers, avoid segfault on PowerPC systems with valid hardware
      configurations (bsc#1175623)
    * mount: Add support for "nosymfollow" mount option.
    * pg: fix wcstombs()
    * sfdisk: correct --json --dump false exclusive, fix backward
    - -move-data
    * vipw: fix short write handling in copyfile
    * whereis: fix out of boundary read, support zst compressed man
      pages
    * minor code improvements and fixes
    * minor licensing changes
    * improve docs
  - Require both group(uuidd) and user(uuidd).


author: lnussel@suse.de
changelog:
  - s/--enable-vendordir/--with-vendordir/
  - remove pam_securetty line again. As long as there is no agreement
    from pam side having it would fail openQA (boo#1033626)


author: sbrabec@suse.com
changelog:
  - Build with libudev support to support non-root users
    (boo#1169006).
  - Move findmnt and lsblk to util-linux-systemd, as they use libudev
    (bsc#1169006#c10).


author: sbrabec@suse.com
changelog:
  - Merge package with SLE15 SP3 and openSUSE Leap 15.3:
    Obsoletes upstreamed patches:
  - libblkid: Do not trigger CDROM autoclose (v2.35, bsc#1084671,
    util-linux-libblkid-cdrom-autoclose-1.patch,
    util-linux-libblkid-cdrom-autoclose-2.patch,
    util-linux-libblkid-cdrom-autoclose-3.patch).
  - lscpu: avoid segfault on PowerPC systems with valid hardware
    configurations
    (v2.36.1, bsc#1175623, bsc#1178554, bsc#1178825,
    lscpu-avoid-segfault-on-PowerPC-systems-with-valid-h.patch)
  - Fix for SG#57988, bsc#1174942 (v2.36):
    libmount-fix-mount-a-EBUSY-for-cifs.patch: Fix warning on mounts
    to CIFS with mount ?a.
  - blockdev: Do not fail --report on kpartx-style partitions on
    multipath (v2.36,
    bsc#1168235, util-linux-blockdev-report-dm.patch).
  - nologin: Add support for -c to prevent error from su -c
    (v2.35, bsc#1151708, util-linux-nologin-su-c.patch).
  - Add libmount-Avoid-triggering-autofs-in-lookup_umount_fs.patch:
    Avoid triggering autofs in lookup_umount_fs_by_statfs
    (v2.36 boo#1168389)
  - mount: fall back to device node name if /dev/mapper link not found
    (v2.34, bsc#1149911)
    * Add patch: util-linux-canonicalize-coverity-scan.patch
  - De-duplicate fstrim -A properly (v2.34, bsc#1127701,
    util-linux-fstrim-A-1.patch, util-linux-fstrim-A-3.patch,
    util-linux-fstrim-A-4.patch).
  - Do not trim read-only volumes
    (v2.34, boo#1106214, util-linux-fstrim-A-2.patch,
    util-linux-fstrim-A-4.patch).
  - libmount: To prevent incorrect behavior, recognize more pseudofs
    and netfs (v2.34, bsc#1122417,
    util-linux-libmount-pseudofs.patch).
  - agetty: Return previous response of agetty for special characters
    (v2.34, bsc#1085196, bsc#1125886,
    util-linux-agetty-smart-reload-13.patch,
    util-linux-agetty-smart-reload-14.patch).
  - Fix problems in reading of login.defs values (v2.34, bsc#1121197,
    util-linux-login_defs-priority1.patch,
    util-linux-login_defs-priority2.patch,
    util-linux-login_defs-SYS_UID.patch).


author: jengelh@inai.de
changelog:
  - Override GTKDOCIZE with /bin/true so we can run autoreconf
    without needing gtk-doc as a dependency.


author: sbrabec@suse.com
changelog:
  - libmount: don't use "symfollow" for helpers on user mounts
    (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)


author: sbrabec@suse.com
changelog:
  - Update to version 2.36.2:
    * agetty: tty eol defaults to REPRINT
    * fsck.cramfs: fix fsck.cramfs crashes on blocksizes > 4K
    * lib/caputils: add fall back for last cap using prctl.
    * lib/signames: change license to public domain
    * libfdisk:
    * (dos) fix last possible sector calculation
    * (script) ignore empty values for start and size
    * ignore 33553920 byte optimal I/O size
    * libmount:
    * add vboxsf, virtiofs to pseudo filesystems
    * do not canonicalize ZFS source dataset
    * don't use "symfollow" for helpers on user mounts (boo#1181750,
      obsoletes util-linux-libmount-dont-use-symfollow.patch)
    * fix /{etc,proc}/filesystems use
    * login: use full tty path for PAM_TTY
    * lsblk: read SCSI_IDENT_SERIAL also from udev
    * rfkill: stop execution when rfkill device cannot be opened
    * setpriv: allow using [-+]all for capabilities.
    * su: use full tty path for PAM_TTY
    * switch_root: check if mount point to move even exists
    * umount:
    * ignore --no-canonicalize,-c for non-root users
    * Show the 'r' option in the help menu
    * Code cleanups and documentation improvements.
    * Translation updates.


author: sbrabec@suse.com
changelog:
  - ipcs: Avoid overflows (bsc#1178236,
    util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch).


author: sbrabec@suse.com
changelog:
  - ipcutils: Avoid potential memory allocation overflow
    (bsc#1188921, CVE-2021-37600,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch).
  - Add bc to BuildRequires to run more complete testsuite,
    fix testsuite (bsc#1178236#c19,
    util-linux-ipcs-shmall-overflow-ts.patch).


author: sbrabec@suse.com
changelog:
  - Update to version 2.37.2:
    * No longer uses Groff to maintain man-pages.
    * New implementation of hardlink.
    * lscpu reimplemented.
    * uclampset: new util to manipulate the utilization clamping
      attributes of the system or a process.
    * hexdump automatically uses -C when called as "hd".
    * dmesg supports new command-line options --since and --until.
    * findmnt supports new command-line options --shadowed to print
      only filesystems over-mounted by another filesystem.
    * mount supports --read-only command-line option for non-root
      users too.
    * umount(8) can umount also all over-mounted filesystems (more
      filesystems on the the same mount point) when executed with
    - -recursive.
    * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
      names on input, ignoring the case of the characters and all
      non-alphanumeric and non-digit characters in the name
      (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
      for sfdisk).
    * libmount no longer contains a workaround to detect inconsistent
      /proc/self/mountinfo reads.
    * libblkid supports "probing hints" now. The hints are the
      optional way how to force probing functions to check for
      example another location -- for example specific session on
      multi-session UDF. The command blkid(8) supports this
      functionality with a new --hint option. The library has been
      also extended to support others ISO9660 and UDF identifiers.
    * blkzone provides a new "capacity" command.
    * cfdisk is possible to start in read-only mode by a new
      command-line option --read-only
    * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
      MOUNTPOINTS is used in the default output now and this new
      column prints all mount points where the device is used (btrfs
      subvolumes, bind mounts, etc).
    * losetup uses LOOP_CONFIG ioctl now.
    * column supports a new command-line option --table-columns-limit
      to specify a maximal number of the input columns. The last
      column will contain all remaining line data if the limit is
      smaller than the number of the columns in the input data.
    * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
      util-linux-ipcs-shmall-overflow-2.patch,
      util-linux-ipcs-shmall-overflow-ts.patch,
      util-linux-ipcutils-overflow-CVE-2021-37600.patch.
    * Many other new features and fixes. For the complete list see
      https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
      https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
      https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
  - Update util-linux-login_defs-check.sh and
    login_defs-support-for-util-linux to version 2.37
    (new variable LOGIN_KEEP_USERNAME).
  - INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
    not even built any more with the latest kernel.


author: sbrabec@suse.com
changelog:
  - The legacy code does not support /etc/login.defs.d used by YaST.
    Enable libeconf to read it (bsc#1192954).


author: sbrabec@suse.com
changelog:
  - Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
    bsc#1194976,
    util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
    util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).


author: sbrabec@suse.com
changelog:
  - Implement "X-fstrim.notrim" fstab mount option that skips fstrim
    for selected device (jsc#SLE-17942,
    util-linux-fstrim-implement-X-fstrim.notrim.patch).


author: sbrabec@suse.com
changelog:
  - Make uuidd lock state file usable and time based UUIDs safe again
    (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).


author: sbrabec@suse.com
changelog:
  - Prevent root owning of /var/lib/libuuid/clock.txt
    (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).


author: sbrabec@suse.com
changelog:
  - Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
    util-linux-libuuid-extend-cache.patch).


author: sbrabec@suse.com
changelog:
  - agetty: Resolve tty name even if stdin is specified (bsc#1197178,
    util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
  - libmount: When moving a mount point, update all sub mount entries
    in utab (bsc#1198731,
    util-linux-libmount-moving-mount-point-sub-mounts.patch,
    util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).


author: sbrabec@suse.com
changelog:
  - libuuid improvements (bsc#1201959, PED-1150):
    * libuuid: Fix range when parsing UUIDs
      (util-linux-libuuid-uuid_parse-overrun.patch).
    * Improve cache handling for short running applications-increment
      the cache size over runtime
      (util-linux-libuuid-improve-cache-handling.patch).
    * Implement continuous clock handling for time based UUIDs
      (util-linux-libuuid-continuous-clock-handling.patch).
    * Check clock value from clock file to provide seamless libuuid
      update (util-linux-libuuid-check-clock-value.patch).


author: sbrabec@suse.com
changelog:
  - Update to version 2.37.4 (PED-1869):
    * Fix security issue in chsh(1) and chfn(8) (CVE-2022-0563).
      SUSE is not affected (bsc#1196241).
    * CVE-2021-3996 (bsc#1194976, obsoletes
      util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch)
      Improper UID check in libmount allows an unprivileged user to unmount FUSE
      filesystems of users with similar UID.
    * CVE-2021-3995 (bsc#1194976, obsoletes
      util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch)
      This issue is related to parsing the /proc/self/mountinfo file allows an
      unprivileged user to unmount other user's filesystems that are either
      world-writable themselves or mounted in a world-writable directory.
  - linux-fs.patch: Fix conflict between <linux/fs.h> and <sys/mount.h>


author: sbrabec@suse.com
changelog:
  - libuuid continuous clock handling for time based UUIDs:
    Prevent use of the new libuuid ABI by uuidd %post before update
    of libuuid1 (bsc#1205646).
  - util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
    to prevent error message if /var/lib/libuuid/clock.txt does not
    exist.


author: david.anes@suse.com
changelog:
  - Fix tests not passing when '@' character is in build path:
    Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
  - Add util-linux-fix-tests-when-at-symbol-in-path.patch


author: pgajdos@suse.com
changelog:
  - added patches [bsc#1197437]
    fix https://git.kernel.org/pub/scm/utils/util-linux/util-linux.git/patch/?id=f4d9018183ff9a6cd6a77bf33461b60570ec7622
    + util-linux-flock-limitations.patch


author: ailiop@suse.com
changelog:
  - Add upstream patch
    util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
    bsc#1207987 gh#util-linux/util-linux@1d98827edde4


author: sbrabec@suse.com
changelog:
  - Properly neutralize escape sequences in wall
    (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
    and its prerequisites: util-linux-fputs_careful1.patch,
    util-linux-wall-migrate-to-memstream.patch
    util-linux-fputs_careful2.patch).


author: rgoldwyn@suse.com
changelog:
  - bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
    + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch


author: sbrabec@suse.com
changelog:
  - Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch).


author: sbrabec@suse.com
changelog:
  - lscpu: Add more ARM cores (bsc#1223605,
    util-linux-lscpu-add-more-ARM-cores-1.patch,
    util-linux-lscpu-add-more-ARM-cores-2.patch,
    util-linux-lscpu-add-more-ARM-cores-3.patch,
    util-linux-lscpu-add-more-ARM-cores-4.patch,
    util-linux-lscpu-add-more-ARM-cores-5.patch,
    util-linux-lscpu-add-more-ARM-cores-6.patch).


author: sbrabec@suse.com
changelog:
  - Don't delete binaries not common for all architectures. Create an
    util-linux-extra subpackage instead, so users of third party
    tools can use them. (bsc#1222285)


author: sbrabec@suse.com
changelog:
  - Document unexpected side effects of lazy destruction
    (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).


author: sbrabec@suse.com
changelog:
  - agetty: Prevent login cursor escape (bsc#1194818,
    util-linux-agetty-prevent-cursor-escape.patch).


author: tchvatal@suse.com
changelog:
  - Reflect SUSE CFLAGS
  - Do not bother with obscpio if we are fetching direct releases
  - Remove patch 0001-makefile-Fix-install-target.patch seems
    to build/install without it just fine
  - Update to 0.0.6:
    + New features
    - new extensible bpf_object__open_{file,mem} APIs and
      DECLARE_LIBBPF_OPTS() macro to go with them
    - bpf_helpers.h, bpf_endian.h, and bpf_tracing.h are now
      distributed with libbpf
    - BPF CO-RE: added field size, field existence, and bitfield
      relocation support
    - BPF CO-RE: BPF_CORE_READ(), bpf_core_field_exists(),
      bpf_core_field_size() and other BPF CO-RE related helpers
      available through bpf_core_read.h header
    - bpf_object__open() API now auto-detects program type from
      its section name
    - BPF_PROG_TRACING programs support (incuding BTF-typed raw
      tracepoints, fentry/fexit programs)
    - mmap() support for BPF global variables
    - declarative map pinning support added
    - probe_read_{user,kernel}[_str]() BPF helpers added
    - bpf_get_link_xdp_info() function to get more XDP information
      added
    - a bunch of other AF_XDP changes
    + Usability improvements
    - no need for int version SEC('version') = 1; anymore
    - raw_tp/tp and uprobe/uretprobe section prefixes added
    - new bpf_program__get_{type,expected_attach_type} getters
    - preserve error code on program load failure
    + Fixes
    - btf_dump padding handling
    - bpf_object__name() returning name, not path
    - ELF section handling off-by-one bug fix
    - mem leak/double free fix in BPF program relocation code


author: mrostecki@opensuse.org
changelog:
  - Build libbpf from kernel sources, not from github sources, for
    consistency with bpftool package.


author: msuchanek@suse.com
changelog:
  - libbpf is now a separate project, stop building from the kernel
    (bsc#1188419 jsc#SLE-17288 jsc#SLE-18805).
  - Fix LIBSUBDIR
    + libdir.patch


author: shung-hsi.yu@suse.com
changelog:
  - Update to 0.5.0:
    + New features and user-space APIs:
    - libbpf_set_strict_mode() allowing to opt-in into backwards incompatible libbpf-1.0 changes. See "Libbpf: the road to 1.0" and "Libbpf 1.0 migration guide" for more details.
    - streamlined error reporting for low-level APIs, high-level error-returning APIs, and pointer-returning APIs (as a libbpf-1.0 opt-in);
    - "Light" BPF skeleton support;
    - BPF_PROG_TYPE_SYSCALL support;
    - BPF perf link support for kprobe, uprobe, tracepoint, and perf_event BPF programs;
    - BPF cookie support for kprobe, uprobe, tracepoint, and perf_event BPF programs through bpf_program__attach_[ku]probe_opts() APIs;
    - allow to specify ref_ctr_off for USDT semaphores through bpf_program__attach_uprobe_opts() API;
    - btf_custom_path support in bpf_object_open_opts, allowing to specify custom BTF for CO-RE relocations;
    - sk_reuseport/migrate program type support;
    - btf_dump__dump_type_data() API, allowing to dump binary data according to BTF type description;
    - btf__load_into_kernel() and btf__load_from_kernel_by_id(), and split BTF variants of them;
    - btf__load_vmlinux_btf() and btf__load_module_btf() APIs;
    - bpf_map__initial_value() API to get initial value of mmap-ed BPF maps;
    - bpf_map_lookup_and_delete_elem_flags() API.
    + BPF-side APIs and features:
    - support for weak typed __ksym externs;
    - BPF timer helpers: bpf_timer_init(), bpf_timer_set_callback(), bpf_timer_start(), bpf_timer_cancel();
    - bpf_get_attach_cookie() helper to get BPF cookie from BPF program side;
    - bpf_get_func_ip() helper;
    - bpf_sys_bpf() helper;
    - bpf_task_pt_regs() helper;
    - bpf_btf_find_by_name_kind() helper;
    - usability improvements for bpf_tracing.h when target architecture is missing.
    + Bug fixes and compatibility improvements:
    - improve BPF support detection on old Red Hat kernels with backported BPF patches;
    - improvements for LTO builds with GCC 10+;
    - pass NLM_F_EXCL when creating TC qdisc;
    - better support of BPF map reuse on old kernels;
    - fix the bug resulting in sometimes closing FD 0, which wasn't created and owned by libbpf itself.
  - Remove patches merged upstream
    + libdir.patch
    + libbpf-Fix-build-with-latest-gcc-binutils-with-LTO.patch


author: shung-hsi.yu@suse.com
changelog:
  - Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
    + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  - Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
    + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch


author: shung-hsi.yu@suse.com
changelog:
  - Fix null pointer dereference in bpf_object__collect_prog_relos()
    (bsc#1221101)
    * Add libbpf-Fix-NULL-pointer-dereference-in-bpf_object__c.patch


author: jengelh@inai.de
changelog:
  - Update to release 0.6.1
    * Introduce legacy kprobe events support
    * Add legacy uprobe attaching support
    * Support uniform BTF-defined key/value specification across
      all BPF maps
    * Support kernel module function calls
    * Support detecting and attaching of writable tracepoint
      program
    * Add bloom filter map implementation
    * Add typeless and weak ksym support to gen_loader
    * Add RISC-V (RV64) support to bpf_tracing.h
    * Deprecate AF_XDP support
    * Support BTF_KIND_TYPE_TAG


author: jengelh@inai.de
changelog:
  - Update to release 0.7.0
    * legacy BPF map definitions (using struct bpf_map_def) are
      deprecated when LIBBPF_STRICT_MAP_DEFINITIONS is passed to
      libbpf_set_strict_mode(). Please use BTF-defined map
      definitions.
    * ability to control and capture BPF verifier log output on
      per-object and per-program level
    * CO-RE support and other improvements for "light skeleton"
    * improved compilation when system BTF UAPI headers are outdated


author: shung-hsi.yu@suse.com
changelog:
  - Update to release 0.8.0
    * New features and APIs:
    - support auto-resolution of binaries and shared libraries from PATH, if necessary;
    - support attaching by function names (only by IP was supported before);
    - support attaching to USDTs (SEC("usdt/...") and
      bpf_program__attach_usdt()) with initially supported architectures:
      x86-64 (amd64); x86 (i386); s390x; ARM64 (aarch64); RISC V (riscv);
    - improved BPF verifier log reporting for CO-RE relocation failures (no
      more obscure "invalid func unknown#195896080" errors);
    - auto-adjust BPF ringbuf size according to host kernel's page size requirements;
    - high-level BPF map APIs: bpf_map__lookup_elem(), bpf_map__update_elem(),
      etc that validate key/value buffer sizes;
    - bpf_link_create() can create all bpf_link-based (including raw_tp,
      fentry/fexit, etc), falling back to bpf_raw_tracepoint_open() on old
      kernels transparently;
    - support opting out from auto-loading BPF programs declaratively with
      SEC("?...");
    - support opting out from auto-creation of declarative BPF maps with
      bpf_map__set_autocreate();
    - support multi-kprobes (SEC("kprobe.multi/...") and
      bpf_program__attach_kprobe_multi_opts());
    - support target-less SEC() programs (e.g., SEC("kprobe"), SEC("tp"), etc);
    - support BPF sub-skeletons for "incomplete" BPF object files (requires
      matching bpftool to generate .subskel.h);
    - BPF cookie support for fentry/fexit/fmod_ret BPF programs
      (bpf_program__attach_trace_opts());
    - support for custom SEC() handlers (libbpf_register_prog_handler()).
    * BPF-side API
    - BPF-side USDT APIs. See new usdt.bpf.h header:
    * BPF_USDT() program wrapper macro; bpf_usdt_arg(), bpf_usdt_arg_cnt(),
    * bpf_usdt_cookie() helpers;
    - new bpf_core_field_offset() CO-RE helper and support
      bpf_core_field_size(type, field) forms;
    - barrier() and barrier_var() macros for improving BPF code generation;
    - __kptr and __kptr_ref tags added;
    - ARC architecture support in bpf_tracing.h header;
    - new BPF helpers:
    * bpf_skb_set_tstamp();
    * bpf_ima_file_hash();
    * bpf_kptr_xchg();
    * bpf_map_lookup_percpu_elem().
    * Bug fixes
    - netlink bug fixes;
    - libbpf.pc fixes to support patch releases properly;
    - BPF_MAP_TYPE_PERF_EVENT_ARRAY map auto-pinning fix;
    - minor CO-RE fixes and improvements for some corner cases;
    - various other small fixes and improvements.


author: dmueller@suse.com
changelog:
  - update to 1.0.1:
    * fix inadvertently changed struct bpf_object_open_opts memory layout;
    * fix btf.h header relying on struct enum64 type defined in kernel UAPI headers;
    * fix NULL pointer exception in API btf_dump__dump_type_data;
    * remove struct btf_map_def accidentally left in bpf_helpers.h header.
    * All deprecated APIs and features removed!
    * support for syscall-specific kprobe/kretprobe
      (SEC("ksyscall/<syscall_name>") and SEC("kretsyscall/<syscall_name>"));
    * support for sleepable uprobe BPF programs (SEC("uprobe.s"));
    * support for per-cgroup LSM BPF programs (SEC("lsm_cgroup"));
    * support for new BPF CO-RE relocation TYPE_MATCHES;
    * bpf_prog_load() and bpf_map_create() are now smarter about handling program
      and map name on old kernels (it will be ignored if kernel doesn't support
      names);
    * BTF_KIND_ENUM64 support;
    * increase tracing attachment (kprobe/uprobe/tracepoint) robustness by using
      tracefs or debugfs, whichever is mounted;
    * new APIs for converting BPF enums to their string representation:
    * libbpf_bpf_prog_type_str();
    * libbpf_bpf_map_type_str();
    * libbpf_bpf_link_type_str();
    * libbpf_bpf_attach_type_str();
    * bpf_program__set_autoattach() and bpf_program__autoattach() to allow opting
      out from auto-attaching of BPF program by BPF skeleton;
    * perf_buffer__buffer() API to give access to underlying per-CPU buffer for BPF ringbuf;
    * bpf_obj_get_opts() API for more flexible fetching of BPF kernel objects' information.
  - see https://github.com/libbpf/libbpf/releases/tag/v1.0.0 for detailed changelog


author: shung-hsi.yu@suse.com
changelog:
  - Fix out-of-bound heap write (boo#1194248 boo#1194249 CVE-2021-45940 CVE-2021-45941)
    + libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch
  - Fix use-after-free in btf_dump_name_dups (boo#1204391 CVE-2022-3534)
    + libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch
  - Fix memory leak in parse_usdt_arg() (boo#1204393 CVE-2022-3533)
    + libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
  - Fix null pointer dereference in find_prog_by_sec_insn() (boo#1204502 CVE-2022-3606)
    + libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch


author: dmueller@suse.com
changelog:
  - update to v1.1.0:
    User space-side features and APIs:
    * user-space ring buffer (BPF_MAP_TYPE_USER_RINGBUF) support;
    * new documentation page listing all recognized SEC() definitions;
    * BTF dedup improvements:
    * unambiguous fwd declaration resolution for structs and unions;
    * better handling of some corner cases with identical structs and arrays;
    * mixed enum and enum64 forward declaration resolution logic;
    * bpf_{link,btf,pro,mapg}_get_fd_by_id_opts() and bpf_get_fd_by_id_opts()
      APIs;
    * libbpf supports loading raw BTF for BPF CO-RE from known search paths;
    * support for new cgroup local storage (BPF_MAP_TYPE_CGRP_STORAGE);
    * libbpf will only add BPF_F_MMAPABLE flag for data maps with global
      (i.e., non-static) vars;
    * latest Linux UAPI headers with lots of changes synced into
      include/uapi/linux.
    BPF-side features and APIs;
    * BPF_PROG2() macro added that supports struct-by-value arguments;
    * new BPF helpers:
    * bpf_user_ringbuf_drain();
    * cgrp_storage_get() and cgrp_storage_delete().
    Bug fixes
    * better handling of padding corner cases;
    * btf__align_of() determines packed structs better now;
    * improved handling of enums of non-standard sizes;
    * USDT spec parsing improvements;
    * overflow handling fixes for ringbufs;
    * Makefile fixes to support cross-compilation for 32-bit targets;
    * fix crash if SEC("freplace") programs don't have attach_prog_fd set;
    * better handling of file existence checks when running as non-root with
      enhanced capabilities;
    * a bunch of small fixes:
    * ELF handling improvements;
    * fix memory leak in USDT argument parsing logic;
    * fix NULL dereferences in few corner cases;
    * improved netlink attribute iteration handling.
  - drop libbpf-Use-elf_getshdrnum-instead-of-e_shnum.patch,
    libbpf-Fix-use-after-free-in-btf_dump_name_dups.patch,
    libbpf-Fix-memory-leak-in-parse_usdt_arg.patch
    libbpf-Fix-null-pointer-dereference-in-find_prog_by_.patch (upstream)


author: dmueller@suse.com
changelog:
  - update to 1.2.0:
    * completely overhauled "Libbpf overview" landing documentation
      page;
    * support for BPF link-based `struct_ops` programs:
    * `SEC(".struct_ops.link")` annotations;
    * `bpf_map__attach_struct_ops()` attach API;
    * `bpf_link__update_map()` link update API;
    * support sleepable `SEC("struct_ops.s")` programs
    * improved thread-safety of libbpf print callbacks and
      `libbpf_set_print()`
    * improve handling and reporting of missing BPF kfuncs
    * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs
    * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported
      features;
    * `perf_buffer__new()` allows customizing notification/sampling
      period now;
    * BPF verifier logging improvements:
    * pass-through BPF verifier log level and flags to kernel as
      is
    * support `log_true_size` for getting required log buffer size
      to fit BPF verifier log completely;
    * allow precise control over kprobe/uprobe attach mode: legacy,
      perf-based, link-based.
    * fix legacy kprobe events names sanitization;
    * fix clobbering errno in some cases;
    * fix BPF map's `BPF_F_MMAPABLE` flag sanitization;
    * fix BPF-side USDT support code on s390x architecture;
    * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture;
    * fix kernel version setting for Debian kernels;
    * fix netlink protocol handling in some cases;
    * improve robustness of attaching to legacy kprobes and
      uprobes;
    * fix double-free during static linking empty ELF sections;
    * a bunch of other small fixes here and there.


author: shung-hsi.yu@suse.com
changelog:
  - update to v1.2.2:
    * fix a regression in perf tool caused by libbpf resetting its custom
      catch-all SEC() handler on explicit bpf_program__set_type() call
    * fix possible double-free in USDT-related libbpf code, which happens when
      libbpf runs out of space in __bpf_usdt_specs map due to having too many
      unique USDT specs


author: schwab@suse.de
changelog:
  - Update to libxcrypt 4.1.0
    * Fix spelling of SUSE.
    * Lower the minimum required automake version to 1.14.
    * Fix build with USE_SWAPCONTEXT turned off.
    * Extend --enable-weak-hashes configure option to accept optional
      "glibc" parameter.
    * Fix the leak of obtained random bytes.
    * Check expected output strings for deterministic methods.
    * Fix memory leak in crypt_sha1_rn.
    * Fix read of random bytes out of bounds in gensalt_sha1_rn.
    * Make it possible to disable individual hashes at configure time.
    * Make salt validation pickier.
    * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
    * Make crypt_gensalt for $sha1 deterministic.
    * Fix incorrect output-size computation in crypt_sha1_rn.
    * Add docs for SHA1, MD5/Sun, NTHASH.
    * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
    * Install libcrypt.pc symlink along with libxcrypt.pc.
    * Extend --enable-obsolete-api configure option.
    * Extend overall test coverage.


author: mliska@suse.cz
changelog:
  - Update to version 4.4.3:
    * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
    * Add new man3 manual pages.


author: schwab@suse.de
changelog:
  - Update to version 4.4.10
    * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
    * The crypt_* functions will now all fail and set errno to ERANGE if
      their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
      characters (this is currently 512)
    * The NT hashing method no longer truncates passphrases at 128
      characters; Windows does not do this.
  - format-overflow.patch: remove


author: schwab@suse.de
changelog:
  - Update to version 4.4.11
    * Fixes for GCC v10.x
    * Change how the known-answer tests are parallelized
  - gcc10.patch: remove


author: schwab@suse.de
changelog:
  - Update to version 4.4.15
    * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
      xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
    * Speed up ka-sunmd5 by skipping most of the test phrases
  - Package README.md and TODO.md (bsc#1165389)


author: pgajdos@suse.com
changelog:
  - fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
  - added patches
    fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
    + libxcrypt-man-fix-variable-name.patch


author: mpluskal@suse.com
changelog:
  - Update to 1.6.7
    * Cryptsetup TCRYPT mode now supports VeraCrypt devices
      (TrueCrypt extension)
    * Support keyfile-offset and keyfile-size options even for plain
      volumes.
    * Support keyfile option for luksAddKey if the master key is
      specified.
    * For historic reasons, hashing in the plain mode is not used if
      keyfile is specified (with exception of --key-file=-). Print
      a warning if these parameters are ignored.
    * Support permanent device decryption for cryptsetup-reencrypt.
      To remove LUKS encryption from a device, you can now use
    - -decrypt option.
    * Allow to use --header option in all LUKS commands. The
    - -header always takes precedence over positional device argument.
    * Allow luksSuspend without need to specify a detached header.
    * Detect if O_DIRECT is usable on a device allocation. There are
      some strange storage stack configurations which wrongly allows
      to open devices with direct-io but fails on all IO operations later.
    * Add low-level performance options tuning for dmcrypt (for
      Linux 4.0 and later).
    * Get rid of libfipscheck library.
      (Note that this option was used only for Red Hat and derived
      distributions.) With recent FIPS changes we do not need to
      link to this FIPS monster anymore. Also drop some no longer
      needed FIPS mode checks.
    * Many fixes and clarifications to man pages.
    * Prevent compiler to optimize-out zeroing of buffers for on-stack
      variables.
    * Fix a crash if non-GNU strerror_r is used.


author: asterios.dramis@gmail.com
changelog:
  - Update to 1.6.8
    * If the null cipher (no encryption) is used, allow only empty
      password for LUKS. (Previously cryptsetup accepted any password
      in this case.)
      The null cipher can be used only for testing and it is used
      temporarily during offline encrypting not yet encrypted device
      (cryptsetup-reencrypt tool).
      Accepting only empty password prevents situation when someone
      adds another LUKS device using the same UUID (UUID of existing
      LUKS device) with faked header containing null cipher.
      This could force user to use different LUKS device (with no
      encryption) without noticing.
      (IOW it prevents situation when attacker intentionally forces
      user to boot into different system just by LUKS header
      manipulation.)
      Properly configured systems should have an additional integrity
      protection in place here (LUKS here provides only
      confidentiality) but it is better to not allow this situation
      in the first place.
      (For more info see QubesOS Security Bulletin QSB-019-2015.)
    * Properly support stdin "-" handling for luksAddKey for both new
      and old keyfile parameters.
    * If encrypted device is file-backed (it uses underlying loop
      device), cryptsetup resize will try to resize underlying loop
      device as well. (It can be used to grow up file-backed device
      in one step.)
    * Cryptsetup now allows to use empty password through stdin pipe.
      (Intended only for testing in scripts.)


author: benoit.monin@gmx.fr
changelog:
  - update to 1.7.0:
    * The cryptsetup 1.7 release changes defaults for LUKS,
      there are no API changes.
    * Default hash function is now SHA256 (used in key derivation
      function and anti-forensic splitter).
    * Default iteration time for PBKDF2 is now 2 seconds.
    * Fix PBKDF2 iteration benchmark for longer key sizes.
    * Remove experimental warning for reencrypt tool.
    * Add optional libpasswdqc support for new LUKS passwords.
    * Update FAQ document.


author: alexander_naumov@opensuse.org
changelog:
  - Update to version 1.7.2:
    * Update LUKS documentation format.
      Clarify fixed sector size and keyslots alignment.
    * Support activation options for error handling modes in
      Linux kernel dm-verity module:
    - -ignore-corruption - dm-verity just logs detected corruption
    - -restart-on-corruption - dm-verity restarts the kernel if
      corruption is detected
      If the options above are not specified, default behavior for
      dm-verity remains. Default is that I/O operation fails with
      I/O error if corrupted block is detected.
    - -ignore-zero-blocks - Instructs dm-verity to not verify
      blocks that are expected to contain zeroes and always
      return zeroes directly instead.
      NOTE that these options could have security or functional
      impacts, do not use them without assessing the risks!
    * Fix help text for cipher benchmark specification
      (mention --cipher option).
    * Fix off-by-one error in maximum keyfile size.
      Allow keyfiles up to compiled-in default and not that value
      minus one.
    * Support resume of interrupted decryption in cryptsetup-reencrypt
      utility. To resume decryption, LUKS device UUID (--uuid option)
      option must be used.
    * Do not use direct-io for LUKS header with unaligned keyslots.
      Such headers were used only by the first cryptsetup-luks-1.0.0
      release (2005).
    * Fix device block size detection to properly work on particular
      file-based containers over underlying devices with 4k sectors.
  - Update to version 1.7.1:
    * Code now uses kernel crypto API backend according to new
      changes introduced in mainline kernel
      While mainline kernel should contain backward compatible
      changes, some stable series kernels do not contain fully
      backported compatibility patches.
      Without these patches  most of cryptsetup operations
      (like unlocking device) fail.
      This change in cryptsetup ensures that all operations using
      kernel crypto API works even on these kernels.
    * The cryptsetup-reencrypt utility now properly detects removal
      of underlying link to block device and does not remove
      ongoing re-encryption log.
      This allows proper recovery (resume) of reencrypt operation later.
      NOTE: Never use /dev/disk/by-uuid/ path for reencryption utility,
      this link disappears once the device metadata is temporarily
      removed from device.
    * Cryptsetup now allows special "-" (standard input) keyfile handling
      even for TCRYPT (TrueCrypt and VeraCrypt compatible) devices.
    * Cryptsetup now fails if there are more keyfiles specified
      for non-TCRYPT device.
    * The luksKillSlot command now does not suppress provided password
      in batch mode (if password is wrong slot is not destroyed).
      Note that not providing password in batch mode means that keyslot
      is destroyed unconditionally.


author: mpluskal@suse.com
changelog:
  - Update to version 1.7.4:
    * Allow to specify LUKS1 hash algorithm in Python luksFormat
      wrapper.
    * Use LUKS1 compiled-in defaults also in Python wrapper.
    * OpenSSL backend: Fix OpenSSL 1.1.0 support without backward
      compatible API.
    * OpenSSL backend: Fix LibreSSL compatibility.
    * Check for data device and hash device area overlap in
      veritysetup.
    * Fix a possible race while allocating a free loop device.
    * Fix possible file descriptor leaks if libcryptsetup is run from
      a forked process.
    * Fix missing same_cpu_crypt flag in status command.
    * Various updates to FAQ and man pages.
  - Changes for version 1.7.3:
    * Fix device access to hash offsets located beyond the 2GB device
      boundary in veritysetup.
    * Set configured (compile-time) default iteration time for
      devices created directly through libcryptsetup
    * Fix PBKDF2 benchmark to not double iteration count for specific
      corner case.
    * Verify passphrase in cryptsetup-reencrypt when encrypting a new
      drive.
    * OpenSSL backend: fix memory leak if hash context was repeatedly
      reused.
    * OpenSSL backend: add support for OpenSSL 1.1.0.
    * Fix several minor spelling errors.
    * Properly check maximal buffer size when parsing UUID from
      /dev/disk/.


author: mpluskal@suse.com
changelog:
  - Update to version 1.7.5:
    * Fixes to luksFormat to properly support recent kernel running
      in FIPS mode (bsc#1031998).
    * Fixes accesses to unaligned hidden legacy TrueCrypt header.
    * Fixes to optional dracut ramdisk scripts for offline
      re-encryption on initial boot.


author: archie.cobbs@gmail.com
changelog:
  - Update to version 2.0.0:
    * Add support for new on-disk LUKS2 format
    * Enable to use system libargon2 instead of bundled version
    * Install tmpfiles.d configuration for LUKS2 locking directory
    * New command integritysetup: support for the new dm-integrity kernel target
    * Support for larger sector sizes for crypt devices
    * Miscellaneous fixes and improvements


author: astieger@suse.com
changelog:
  - update to 2.0.1:
    * To store volume key into kernel keyring, kernel 4.15 with
      dm-crypt 1.18.1 is required
    * Increase maximum allowed PBKDF memory-cost limit to 4 GiB
    * Use /run/cryptsetup as default for cryptsetup locking dir
    * Introduce new 64-bit byte-offset *keyfile_device_offset functions.
    * New set of fucntions that allows 64-bit offsets even on 32bit systems
      are now availeble:
    - crypt_resume_by_keyfile_device_offset
    - crypt_keyslot_add_by_keyfile_device_offset
    - crypt_activate_by_keyfile_device_offset
    - crypt_keyfile_device_read
      The new functions have added the _device_ in name.
      Old functions are just internal wrappers around these.
    * Also cryptsetup --keyfile-offset and --new-keyfile-offset now
      allows 64-bit offsets as parameters.
    * Add error hint for wrongly formatted cipher strings in LUKS1 and
      properly fail in luksFormat if cipher format is missing required IV.


author: lnussel@suse.de
changelog:
  - New version 2.0.4
    Changes since version 2.0.3
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~
    * Use the libblkid (blockid) library to detect foreign signatures
      on a device before LUKS format and LUKS2 auto-recovery.
      This change fixes an unexpected recovery using the secondary
      LUKS2 header after a device was already overwritten with
      another format (filesystem or LVM physical volume).
      LUKS2 will not recreate a primary header if it detects a valid
      foreign signature. In this situation, a user must always
      use cryptsetup repair command for the recovery.
      Note that libcryptsetup and utilities are now linked to libblkid
      as a new dependence.
      To compile code without blockid support (strongly discouraged),
      use --disable-blkid configure switch.
    * Add prompt for format and repair actions in cryptsetup and
      integritysetup if foreign signatures are detected on the device
      through the blockid library.
      After the confirmation, all known signatures are then wiped as
      part of the format or repair procedure.
    * Print consistent verbose message about keyslot and token numbers.
      For keyslot actions: Key slot <number> unlocked/created/removed.
      For token actions: Token <number> created/removed.
    * Print error, if a non-existent token is tried to be removed.
    * Add support for LUKS2 token definition export and import.
      The token command now can export/import customized token JSON file
      directly from command line. See the man page for more details.
    * Add support for new dm-integrity superblock version 2.
    * Add an error message when nothing was read from a key file.
    * Update cryptsetup man pages, including --type option usage.
    * Add a snapshot of LUKS2 format specification to documentation
      and accordingly fix supported secondary header offsets.
    * Add bundled optimized Argon2 SSE (X86_64 platform) code.
      If the bundled Argon2 code is used and the new configure switch
    - -enable-internal-sse-argon2 option is present, and compiler flags
      support required optimization, the code will try to use optimized
      and faster variant.
      Always use the shared library (--enable-libargon2) if possible.
      This option was added because an enterprise distribution
      rejected to support the shared Argon2 library and native support
      in generic cryptographic libraries is not ready yet.
    * Fix compilation with crypto backend for LibreSSL >= 2.7.0.
      LibreSSL introduced OpenSSL 1.1.x API functions, so compatibility
      wrapper must be commented out.
    * Fix on-disk header size calculation for LUKS2 format if a specific
      data alignment is requested. Until now, the code used default size
      that could be wrong for converted devices.
    Changes since version 2.0.2
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~
    * Expose interface to unbound LUKS2 keyslots.
      Unbound LUKS2 keyslot allows storing a key material that is independent
      of master volume key (it is not bound to encrypted data segment).
    * New API extensions for unbound keyslots (LUKS2 only)
      crypt_keyslot_get_key_size() and crypt_volume_key_get()
      These functions allow to get key and key size for unbound keyslots.
    * New enum value CRYPT_SLOT_UNBOUND for keyslot status (LUKS2 only).
    * Add --unbound keyslot option to the cryptsetup luksAddKey command.
    * Add crypt_get_active_integrity_failures() call to get integrity
      failure count for dm-integrity devices.
    * Add crypt_get_pbkdf_default() function to get per-type PBKDF default
      setting.
    * Add new flag to crypt_keyslot_add_by_key() to force update device
      volume key. This call is mainly intended for a wrapped key change.
    * Allow volume key store in a file with cryptsetup.
      The --dump-master-key together with --master-key-file allows cryptsetup
      to store the binary volume key to a file instead of standard output.
    * Add support detached header for cryptsetup-reencrypt command.
    * Fix VeraCrypt PIM handling - use proper iterations count formula
      for PBKDF2-SHA512 and PBKDF2-Whirlpool used in system volumes.
    * Fix cryptsetup tcryptDump for VeraCrypt PIM (support --veracrypt-pim).
    * Add --with-default-luks-format configure time option.
      (Option to override default LUKS format version.)
    * Fix LUKS version conversion for detached (and trimmed) LUKS headers.
    * Add luksConvertKey cryptsetup command that converts specific keyslot
      from one PBKDF to another.
    * Do not allow conversion to LUKS2 if LUKSMETA (external tool metadata)
      header is detected.
    * More cleanup and hardening of LUKS2 keyslot specific validation options.
      Add more checks for cipher validity before writing metadata on-disk.
    * Do not allow LUKS1 version downconversion if the header contains tokens.
    * Add "paes" family ciphers (AES wrapped key scheme for mainframes)
      to allowed ciphers.
      Specific wrapped ley configuration logic must be done by 3rd party tool,
      LUKS2 stores only keyslot material and allow activation of the device.
    * Add support for --check-at-most-once option (kernel 4.17) to veritysetup.
      This flag can be dangerous; if you can control underlying device
      (you can change its content after it was verified) it will no longer
      prevent reading tampered data and also it does not prevent silent
      data corruptions that appear after the block was once read.
    * Fix return code (EPERM instead of EINVAL) and retry count for bad
      passphrase on non-tty input.
    * Enable support for FEC decoding in veritysetup to check dm-verity devices
      with additional Reed-Solomon code in userspace (verify command).
    Changes since version 2.0.1
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~
    * Fix a regression in early detection of inactive keyslot for luksKillSlot.
      It tried to ask for passphrase even for already erased keyslot.
    * Fix a regression in loopaesOpen processing for keyfile on standard input.
      Use of "-" argument was not working properly.
    * Add LUKS2 specific options for cryptsetup-reencrypt.
      Tokens and persistent flags are now transferred during reencryption;
      change of PBKDF keyslot parameters is now supported and allows
      to set precalculated values (no benchmarks).
    * Do not allow LUKS2 --persistent and --test-passphrase cryptsetup flags
      combination. Persistent flags are now stored only if the device was
      successfully activated with the specified flags.
    * Fix integritysetup format after recent Linux kernel changes that
      requires to setup key for HMAC in all cases.
      Previously integritysetup allowed HMAC with zero key that behaves
      like a plain hash.
    * Fix VeraCrypt PIM handling that modified internal iteration counts
      even for subsequent activations. The PIM count is no longer printed
      in debug log as it is sensitive information.
      Also, the code now skips legacy TrueCrypt algorithms if a PIM
      is specified (they cannot be used with PIM anyway).
    * PBKDF values cannot be set (even with force parameters) below
      hardcoded minimums. For PBKDF2 is it 1000 iterations, for Argon2
      it is 4 iterations and 32 KiB of memory cost.
    * Introduce new crypt_token_is_assigned() API function for reporting
      the binding between token and keyslots.
    * Allow crypt_token_json_set() API function to create internal token types.
      Do not allow unknown fields in internal token objects.
    * Print message in cryptsetup that about was aborted if a user did not
      answer YES in a query.


author: lnussel@suse.de
changelog:
  - Suggest hmac package (boo#1090768)
  - remove old upgrade hack for upgrades from 12.1
  - New version 2.0.5
    Changes since version 2.0.4
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~
    * Wipe full header areas (including unused) during LUKS format.
      Since this version, the whole area up to the data offset is zeroed,
      and subsequently, all keyslots areas are wiped with random data.
      This ensures that no remaining old data remains in the LUKS header
      areas, but it could slow down format operation on some devices.
      Previously only first 4k (or 32k for LUKS2) and the used keyslot
      was overwritten in the format operation.
    * Several fixes to error messages that were unintentionally replaced
      in previous versions with a silent exit code.
      More descriptive error messages were added, including error
      messages if
    - a device is unusable (not a block device, no access, etc.),
    - a LUKS device is not detected,
    - LUKS header load code detects unsupported version,
    - a keyslot decryption fails (also happens in the cipher check),
    - converting an inactive keyslot.
    * Device activation fails if data area overlaps with LUKS header.
    * Code now uses explicit_bzero to wipe memory if available
      (instead of own implementation).
    * Additional VeraCrypt modes are now supported, including Camellia
      and Kuznyechik symmetric ciphers (and cipher chains) and Streebog
      hash function. These were introduced in a recent VeraCrypt upstream.
      Note that Kuznyechik requires out-of-tree kernel module and
      Streebog hash function is available only with the gcrypt cryptographic
      backend for now.
    * Fixes static build for integritysetup if the pwquality library is used.
    * Allows passphrase change for unbound keyslots.
    * Fixes removed keyslot number in verbose message for luksKillSlot,
      luksRemoveKey and erase command.
    * Adds blkid scan when attempting to open a plain device and warn the user
      about existing device signatures in a ciphertext device.
    * Remove LUKS header signature if luksFormat fails to add the first keyslot.
    * Remove O_SYNC from device open and use fsync() to speed up
      wipe operation considerably.
    * Create --master-key-file in luksDump and fail if the file already exists.
    * Fixes a bug when LUKS2 authenticated encryption with a detached header
      wiped the header device instead of dm-integrity data device area (causing
      unnecessary LUKS2 header auto recovery).


author: lnussel@suse.de
changelog:
  - New version 2.1.0
    * The default size of the LUKS2 header is increased to 16 MB.
      It includes metadata and the area used for binary keyslots;
      it means that LUKS header backup is now 16MB in size.
    * Cryptsetup now doubles LUKS default key size if XTS mode is used
      (XTS mode uses two internal keys). This does not apply if key size
      is explicitly specified on the command line and it does not apply
      for the plain mode.
      This fixes a confusion with AES and 256bit key in XTS mode where
      code used AES128 and not AES256 as often expected.
    * Default cryptographic backend used for LUKS header processing is now
      OpenSSL. For years, OpenSSL provided better performance for PBKDF.
    * The Python bindings are no longer supported and the code was removed
      from cryptsetup distribution. Please use the libblockdev project
      that already covers most of the libcryptsetup functionality
      including LUKS2.
    * Cryptsetup now allows using --offset option also for luksFormat.
    * Cryptsetup now supports new refresh action (that is the alias for
      "open --refresh").
    * Integritysetup now supports mode with detached data device through
      new --data-device option.
  - 2.1.0 would use LUKS2 as default, we stay with LUKS1 for now until
    someone has time to evaluate the fallout from switching to LUKS2.


author: vcizek@suse.com
changelog:
  - Create a weak dependency cycle between libcryptsetup and
    libcryptsetup-hmac to make sure they are installed together
    (bsc#1090768)


author: info@paolostivanin.com
changelog:
  - Update to 2.3.0 (include release notes for 2.2.0)
    * BITLK (Windows BitLocker compatible) device access
    * Veritysetup now supports activation with additional PKCS7 signature
      of root hash through --root-hash-signature option.
    * Integritysetup now calculates hash integrity size according to algorithm
      instead of requiring an explicit tag size.
    * Integritysetup now supports fixed padding for dm-integrity devices.
    * A lot of fixes to online LUKS2 reecryption.
    * Add crypt_resume_by_volume_key() function to libcryptsetup.
      If a user has a volume key available, the LUKS device can be resumed
      directly using the provided volume key.
      No keyslot derivation is needed, only the key digest is checked.
    * Implement active device suspend info.
      Add CRYPT_ACTIVATE_SUSPENDED bit to crypt_get_active_device() flags
      that informs the caller that device is suspended (luksSuspend).
    * Allow --test-passphrase for a detached header.
      Before this fix, we required a data device specified on the command
      line even though it was not necessary for the passphrase check.
    * Allow --key-file option in legacy offline encryption.
      The option was ignored for LUKS1 encryption initialization.
    * Export memory safe functions.
      To make developing of some extensions simpler, we now export
      functions to handle memory with proper wipe on deallocation.
    * Fail crypt_keyslot_get_pbkdf for inactive LUKS1 keyslot.
    * Add optional global serialization lock for memory hard PBKDF.
    * Abort conversion to LUKS1 with incompatible sector size that is
      not supported in LUKS1.
    * Report error (-ENOENT) if no LUKS keyslots are available. User can now
      distinguish between a wrong passphrase and no keyslot available.
    * Fix a possible segfault in detached header handling (double free).
    * Add integritysetup support for bitmap mode introduced in Linux kernel 5.2.
    * The libcryptsetup now keeps all file descriptors to underlying device
      open during the whole lifetime of crypt device context to avoid excessive
      scanning in udev (udev run scan on every descriptor close).
    * The luksDump command now prints more info for reencryption keyslot
      (when a device is in-reencryption).
    * New --device-size parameter is supported for LUKS2 reencryption.
    * New --resume-only parameter is supported for LUKS2 reencryption.
    * The repair command now tries LUKS2 reencryption recovery if needed.
    * If reencryption device is a file image, an interactive dialog now
      asks if reencryption should be run safely in offline mode
      (if autodetection of active devices failed).
    * Fix activation through a token where dm-crypt volume key was not
      set through keyring (but using old device-mapper table parameter mode).
    * Online reencryption can now retain all keyslots (if all passphrases
      are provided). Note that keyslot numbers will change in this case.
    * Allow volume key file to be used if no LUKS2 keyslots are present.
    * Print a warning if online reencrypt is called over LUKS1 (not supported).
    * Fix TCRYPT KDF failure in FIPS mode.
    * Remove FIPS mode restriction for crypt_volume_key_get.
    * Reduce keyslots area size in luksFormat when the header device is too small.
    * Make resize action accept --device-size parameter (supports units suffix).


author: lnussel@suse.de
changelog:
  - Split translations to -lang package
  - New version to 2.3.1
    * Support VeraCrypt 128 bytes passwords.
      VeraCrypt now allows passwords of maximal length 128 bytes
      (compared to legacy TrueCrypt where it was limited by 64 bytes).
    * Strip extra newline from BitLocker recovery keys
      There might be a trailing newline added by the text editor when
      the recovery passphrase was passed using the --key-file option.
    * Detect separate libiconv library.
      It should fix compilation issues on distributions with iconv
      implemented in a separate library.
    * Various fixes and workarounds to build on old Linux distributions.
    * Split lines with hexadecimal digest printing for large key-sizes.
    * Do not wipe the device with no integrity profile.
      With --integrity none we performed useless full device wipe.
    * Workaround for dm-integrity kernel table bug.
      Some kernels show an invalid dm-integrity mapping table
      if superblock contains the "recalculate" bit. This causes
      integritysetup to not recognize the dm-integrity device.
      Integritysetup now specifies kernel options such a way that
      even on unpatched kernels mapping table is correct.
    * Print error message if LUKS1 keyslot cannot be processed.
      If the crypto backend is missing support for hash algorithms
      used in PBKDF2, the error message was not visible.
    * Properly align LUKS2 keyslots area on conversion.
      If the LUKS1 payload offset (data offset) is not aligned
      to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
    * Validate LUKS2 earlier on conversion to not corrupt the device
      if binary keyslots areas metadata are not correct.


author: andreas.stieger@gmx.de
changelog:
  - Update to 2.3.3:
    * Fix BitLocker compatible device access that uses native 4kB
      sectors
    * Support large IV count (--iv-large-sectors) cryptsetup option
      for plain device mapping
    * Fix a memory leak in BitLocker compatible handling
    * Allow EBOIV (Initialization Vector algorithm) use
    * LUKS2: Require both keyslot cipher and key size option, do
      not fail silently
  - includes changes from 2.3.2:
    * Add option to dump content of LUKS2 unbound keyslot
    * Add support for discards (TRIM) for standalone dm-integrity
      devices (Kernel 5.7) via --allow-discards, not for LUKS2
    * Fix cryptsetup-reencrypt to work on devices that do not allow
      direct-io device access.
    * Fix a crash in the BitLocker-compatible code error path
    * Fix Veracrypt compatible support for longer (>64 bytes)
      passphrases


author: lnussel@suse.de
changelog:
  - Update to 2.3.4:
    * Fix a possible out-of-bounds memory write while validating LUKS2 data
      segments metadata (CVE-2020-14382, boo#1176128).
    * Ignore reported optimal IO size if not aligned to minimal page size.
    * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
    * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
    * Support --master-key-file option for online LUKS2 reencryption
    * Always return EEXIST error code if a device already exists.
    * Fix a problem in integritysetup if a hash algorithm has dash in the name.
    * Fix crypto backend to properly handle ECB mode.
    * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
      with a larger sector.
    * LUKS2: Do not create excessively large headers.
    * Fix unspecified sector size for BitLocker compatible mode.
    * Fix reading key data size in metadata for BitLocker compatible mode.


