Removed rpms
============

 - audaspace-plugins
 - goldendict
 - goldendict-lang
 - libHepMC3search4
 - libPocoActiveRecord92
 - libPocoCppParser92
 - libPocoCrypto92
 - libPocoData92
 - libPocoDataMySQL92
 - libPocoDataODBC92
 - libPocoDataSQLite92
 - libPocoEncodings92
 - libPocoFoundation92
 - libPocoJSON92
 - libPocoJWT92
 - libPocoMongoDB92
 - libPocoNet92
 - libPocoNetSSL92
 - libPocoPDF92
 - libPocoPrometheus92
 - libPocoRedis92
 - libPocoUtil92
 - libPocoXML92
 - libPocoZip92
 - libRivet-3_1_6
 - libabigail0
 - libaudaspace-c1_3
 - libaudaspace-py1_3
 - libaudaspace1_3
 - libcacard
 - libcob-devel
 - libdigikamcore7_9_0
 - libflux0_171_0
 - libgeos3_11_1
 - libhydrogen-core-1_1_1
 - libkrun
 - libkrunfw
 - libmgl-fltk7_5_0
 - libmgl-glut7_5_0
 - libmgl-mpi7_5_0
 - libmgl-qt5-7_5_0
 - libmgl-wnd7_5_0
 - libmgl-wx7_5_0
 - libmgl7_5_0
 - liboqs0
 - libosmo-octoi0
 - libosmo-ranap5
 - libqxmpp3
 - libvirt-lock-sanlock
 - libyara9
 - lite-xl-colors
 - lite-xl-plugins
 - lite-xl-widgets
 - lmms-vst
 - perl-Bootloader-YAML
 - python3-geographiclib
 - qemu-sgabios
 - squirrel-devel-static

Added rpms
==========

 - Rivet-data
 - ZArchive
 - ZArchive-devel
 - amfora
 - android-file-transfer-linux
 - aravis
 - aravis-viewer
 - audaspace-plugin-ffmpeg
 - audaspace-plugin-jack
 - audaspace-plugin-openal
 - audaspace-plugin-pulse
 - audaspace-plugin-sdl2
 - audaspace-plugin-sndfile
 - cargo1.72
 - clknetsim
 - cross-arm-none-gcc7-bootstrap
 - cross-avr-gcc7-bootstrap
 - cross-bpf-binutils
 - cross-epiphany-gcc7-bootstrap
 - cross-pru-binutils
 - cross-rx-gcc7-bootstrap
 - ctop
 - d2
 - docker-credential-secretservice
 - droidcam
 - droidcam-cli
 - dtrx
 - emacs-gnuplot-mode
 - emacs-gnuplot-mode-doc
 - erdtree
 - erlang-cf
 - erlang-erlware_commons
 - erlang-getopt
 - erlang-providers
 - erlang-rebar3
 - erlang-rebar3-bash-completion
 - erlang-rebar3-fish-completion
 - erlang-rebar3-zsh-completion
 - flom
 - flom-devel
 - fntsample
 - fntsample-lang
 - ft2-clone
 - ftxui-devel
 - ghostscript-fonts-grops
 - gmsh
 - gmsh-demos
 - gmsh-devel
 - gmsh-doc
 - goldendict-ng
 - goldendict-ng-lang
 - gopls
 - govulncheck
 - grml-zsh-config
 - gstreamer-plugin-aravis
 - hivelytracker
 - igrep
 - illum
 - kanidm
 - kanidm-clients
 - kanidm-docs
 - kanidm-server
 - kanidm-unixd-clients
 - kddockwidgets-devel
 - kddockwidgets-qt6-devel
 - konkretcmpi-devel
 - konkretcmpi-python3
 - libHepMC3search5
 - libPocoActiveRecord94
 - libPocoCppParser94
 - libPocoCrypto94
 - libPocoData94
 - libPocoDataMySQL94
 - libPocoDataODBC94
 - libPocoDataSQLite94
 - libPocoEncodings94
 - libPocoFoundation94
 - libPocoJSON94
 - libPocoJWT94
 - libPocoMongoDB94
 - libPocoNet94
 - libPocoNetSSL94
 - libPocoPDF94
 - libPocoPrometheus94
 - libPocoRedis94
 - libPocoUtil94
 - libPocoXML94
 - libPocoZip94
 - libRivet-3_1_8
 - libabigail2
 - libaravis-0_8-0
 - libaravis-0_8-devel
 - libaudaspace-c1_4
 - libaudaspace-py1_4
 - libaudaspace1_4
 - libdigikamcore8_1_0
 - libdovi-devel
 - libdovi3
 - libflom0
 - libflux0_193_0
 - libftxui5_0_0
 - libgeos3_11_2
 - libgmsh4_11
 - libhydrogen-core-1_2_1
 - libjim0_82
 - libkddockwidgets-qt6-1_7
 - libkddockwidgets1_7
 - libkokkos-4_1
 - libkonkretcmpi0
 - libkrun-devel
 - libkrun-sev-devel
 - libkrun-sev1
 - libkrun1
 - libkrunfw-devel
 - libkrunfw-sev-devel
 - libkrunfw-sev3
 - libkrunfw3
 - libosmo-octoi1
 - libosmo-ranap7
 - libqxmpp4
 - libreproc++14
 - libreproc14
 - libsquirrel1001
 - libta-devel
 - libta_lib0
 - libvirt-daemon-common
 - libvirt-daemon-lock
 - libvirt-daemon-log
 - libvirt-daemon-plugin-lockd
 - libvirt-daemon-plugin-sanlock
 - libvirt-daemon-proxy
 - libxdp-devel
 - libxdp1
 - libyara10
 - libzarchive0_1
 - lightdm-bash-completion
 - lite-xl-plugin-manager
 - lxgw-wenkai-screen-fonts
 - macrofusion
 - meshlab
 - mozilla-zilla-slab-fonts
 - nomino
 - nyxt
 - omnispeak
 - ouch
 - perl-Test-Future-IO-Impl
 - python3-gmsh
 - python3-kiwi_crossprepare_plugin
 - python3-virt-scenario
 - python311-geographiclib
 - qemu-doc
 - qemu-img
 - qemu-pr-helper
 - redhat-overpass-fonts
 - redhat-overpass-mono-fonts
 - reproc-devel
 - rust1.72
 - sacad
 - sc-im
 - scream
 - shadowsocks-rust
 - sidplayfp
 - sshping
 - supercollider
 - supercollider-devel
 - supercollider-emacs
 - supercollider-gedit
 - supercollider-sc3-plugins
 - supercollider-vim
 - system-user-brltty
 - tealdeer
 - tealdeer-bash-completion
 - tealdeer-fish-completion
 - tealdeer-zsh-completion
 - thunderbolt-utils
 - topgrade
 - tpm-fido
 - typelib-1_0-Aravis-0.8
 - typst
 - typst-bash-completion
 - typst-fish-completion
 - vhs
 - virt-scenario-gtk
 - virtiofsd
 - virtualbox-kmp-default
 - vkbasalt
 - vkbasalt-cli
 - wayvnc
 - wdisplays
 - weblug
 - wlrctl
 - wmenu
 - xdp-tools
 - xroachng
 - yacreader
 - yarn
 - zola
 - zola-bash-completion
 - zola-fish-completion
 - zola-zsh-completion
 - zpaqfranz
 - zynaddsubfx-bash-completion

Package Source Changes
======================

Cadence
+- Fix security bugs related to use of Fixed Temporary Files.
+  (bsc#1213330, bsc#1213983, bsc#1213985)
+  * 0001-cadence_aloop_daemon-place-lockfile-into-non-public-.patch
+  * 0001-cadence.py-wine-ASIO-settings-use-safe-tempfile.patch
+
HepMC
+- Update to version 3.2.6:
+  * Deprecated the set_cross_section function with double in
+    favour of those with vector of doubles.
+  * Better Doxygen documentation for code
+  * Improvements in ReaderFactory that should help detect the file
+    type more successfully.
+  * Multiple optimizations inspired by clang-tidy
+  * The Attributes are now set to be parsed after calls to
+    from_string or set_value
+  * API breaking changes in the search module: pass by const
+    reference
+  * Update python bindings
+  * Modernisation of cmake
+  * Fix output value of ReaderLHEF::read_event
+  * Better documentation for standalone examples
+  * Adds a protobuf-based HepMC3::Reader/Writer
+  * Update pybind11 headers to fix python 3.11.
+  * License update.
+  * Make the R/W plugins transparent - the set/get functions call
+    the handled object
+- Adapt shared lib name to SO version bump (4->5) for
+  libHepMC3search.
+- License update: bundled bxzstr is MPL-2.0.
+- Re-enable testing for i586.
+- Make doc package noarch.
+
MozillaFirefox
+- Firefox Extended Support Release 115.2.1 ESR
+  * Fixed: Security fix
+  MFSA 2023-40 (bsc#1215245)
+  * CVE-2023-4863 (bmo#https://bugs.chromium.org/p/chromium/issue
+    s/detail?id=1479274,
+    bmo#https://bugzilla.mozilla.org/show_bug.cgi?id=1852649)
+    Heap buffer overflow in libwebp
+
+- Fix i586 build by reducing debug info to -g1. (boo#1210168)
+
MozillaThunderbird
+- Mozilla Thunderbird 115.2.2
+  * fixed: Security fixes
+  MFSA 2023-40 (bsc#1215245)
+  * CVE-2023-4863
+    (https://bugs.chromium.org/p/chromium/issues/detail?id=1479274,
+    bmo#1852649)
+    Heap buffer overflow in libwebp
+- Mozilla Thunderbird 115.2.1
+  * new: Column separators are now shown between all columns in
+    tree view (bmo#1847441)
+  * fixed: Crash reporter did not work in Thunderbird Flatpak
+    (bmo#1843102)
+  * fixed: New mail notification always opened message in message
+    pane, even if pane was disabled (bmo#1840092)
+  * fixed: After moving an IMAP message to another folder, the
+    incorrect message was selected in the message list
+    (bmo#1845376)
+  * fixed: Adding a tag to an IMAP message opened in a tab failed
+    (bmo#1844452)
+  * fixed: Junk/Spam folders were not always shown in Unified
+    Folders mode (bmo#1838672)
+  * fixed: Middle-clicking a folder or message did not open it in
+    a background tab, as in previous versions (bmo#1842482)
+  * fixed: Settings tab visual improvements: Advanced Fonts
+    dialog, Section headers hidden behind search box
+    (bmo#1717382,bmo#1846751)
+  * fixed: Various visual and style fixes
+    (bmo#1843707,bmo#1849823)
+- Mozilla Thunderbird 115.2
+  * new: Thunderbird MSIX packages are now published on
+    archive.mozilla.org (bmo#1817657)
+  * changed: Size, Unread, and Total columns are now right-
+    aligned (bmo#1848604)
+  * changed: Newsgroup names in message list header are now
+    abbreviated (bmo#1833298)
+  * fixed: Message compose window did not apply theme colors to
+    menus (bmo#1845699)
+  * fixed: Reading the second new message in a folder cleared the
+    unread indicator of all other new messages (bmo#1839805)
+  * fixed: Displayed counts of unread or flagged messages could
+    become out-of-sync (bmo#1846860)
+  * fixed: Deleting a message from the context menu with messages
+    sorted in chronological order and smooth scroll enabled
+    caused message list to scroll to top (bmo#1843462)
+  * fixed: Repeatedly switching accounts in Subscribe dialog
+    caused tree view to stop updating (bmo#1845593)
+  * fixed: "Ignore thread" caused message cards to display
+    incorrectly in message list (bmo#1847966)
+  * fixed: Creating tags from unified toolbar failed
+    (bmo#1846336)
+  * fixed: Cross-folder navigation using F and N did not work
+    (bmo#1845011)
+  * fixed: Account Manager did not resize to fit content, causing
+    "Close" button to become hidden outside bounds of dialog when
+    too many accounts were listed (bmo#1847555)
+  * fixed: Remote content exceptions could not be added in
+    Settings (bmo#1847576)
+  * fixed: Newsgroup list file did not get updated after adding a
+    new NNTP server (bmo#1845464)
+  * fixed: "Download all headers" option in NNTP "Download
+    Headers" dialog was incorrectly selected by default
+    (bmo#1845457)
+  * fixed: "Convert to event/task" was missing from mail context
+    menu (bmo#1817705)
+  * fixed: Events and tasks were not shown in some cases despite
+    being present on remote server (bmo#1827100)
+  * fixed: Various visual and UX improvements
+    (bmo#1844244,bmo#1845645)
+  * fixed: Security fixes
+  MFSA 2023-38 (bsc#1214606)
+  * CVE-2023-4573 (bmo#1846687)
+    Memory corruption in IPC CanvasTranslator
+  * CVE-2023-4574 (bmo#1846688)
+    Memory corruption in IPC ColorPickerShownCallback
+  * CVE-2023-4575 (bmo#1846689)
+    Memory corruption in IPC FilePickerShownCallback
+  * CVE-2023-4576 (bmo#1846694)
+    Integer Overflow in RecordedSourceSurfaceCreation
+  * CVE-2023-4577 (bmo#1847397)
+    Memory corruption in JIT UpdateRegExpStatics
+  * CVE-2023-4051 (bmo#1821884)
+    Full screen notification obscured by file open dialog
+  * CVE-2023-4578 (bmo#1839007)
+    Error reporting methods in SpiderMonkey could have triggered
+    an Out of Memory Exception
+  * CVE-2023-4053 (bmo#1839079)
+    Full screen notification obscured by external program
+  * CVE-2023-4580 (bmo#1843046)
+    Push notifications saved to disk unencrypted
+  * CVE-2023-4581 (bmo#1843758)
+    XLL file extensions were downloadable without warnings
+  * CVE-2023-4582 (bmo#1773874)
+    Buffer Overflow in WebGL glGetProgramiv
+  * CVE-2023-4583 (bmo#1842030)
+    Browsing Context potentially not cleared when closing Private
+    Window
+  * CVE-2023-4584 (bmo#1843968, bmo#1845205, bmo#1846080,
+    bmo#1846526, bmo#1847529)
+    Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
+    Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
+  * CVE-2023-4585 (bmo#1751583, bmo#1833504, bmo#1841082,
+    bmo#1847904, bmo#1848999)
+    Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2,
+    and Thunderbird 115.2
+
+- Mozilla Thunderbird 115.1.1
+  * fixed: Some HTML emails printed headers on first page and
+    message on subsequent pages (bmo#1843628)
+  * fixed: Deleting messages from message list sometimes scrolled
+    list to bottom, selecting bottommost message (bmo#1835173)
+  * fixed: Width of icon columns (like Junk or Starred) in
+    message list did not adjust when UI density was changed
+    (bmo#1843014)
+  * fixed: Old OpenPGP secret keys could not be used to decrypt
+    messages under certain circumstances (bmo#1835786)
+  * fixed: When multiple folder modes were active, tab focus
+    navigated through all folder mode options before reaching
+    message list (bmo#1842060)
+  * fixed: Unread message count badge was not displayed on parent
+    folders of subfolder containing unread messages (bmo#1844534)
+  * fixed: "Undo archive" (via Ctrl-Z) did not un-archive
+    previously archived messages (bmo#1829340)
+  * fixed: "New" button dropdown menu in "Message Filters" dialog
+    could not be opened via keyboard navigation (bmo#1843511)
+  * fixed: "Show New Mail Alert for" input field in "Customize
+    New Mail Alert" dialog had zero width when using certain
+    language packs (bmo#1845832)
+  * fixed: "Account Wizard" dialog was too narrow when adding a
+    news server, partially hiding confirmation buttons
+    (bmo#1846588)
+  * fixed: Link Properties and Image Properties dialogs in the
+    composer were too wide (bmo#1816850)
+  * fixed: Thunderbird version number and details in "About"
+    dialog were not automatically read by screen readers when
+    first opening dialog (bmo#1847078)
+  * fixed: Flatpak improvements and bug fixes
+    (bmo#1825399,bmo#1843094,bmo#1843097)
+  * fixed: Various visual and UX improvements (bmo#1846262)
+
NsCDE
+- Remove doc files because contain scripts etc that cause OBS to fail
+- Fix duplicate filews causing OBS to fail
+- Fix .desktop file to use X-NsCDE instead of NsCDE
+- Fix Python scripts shebangs
+
OpenRGB
+- Fix openSUSE build:
+  * Add OpenRGB-mbedTLS3-hueplusplus.patch: Remove certs.h
+    dependency for embedded hueplusplus library.
+  * Add OpenRGB-GCC13.patch: Apply GCC 13 compilation fixes from
+    upstream.
+
Rivet
+- Update to version 3.1.8:
+  * Append extra newlines to plugin sources in batched rivet-build.
+  * Add ability to control the specific plugin library paths for
+    analyses to be loaded from, via new programmatic set and get
+    methods on AnalysisLoader and a new RIVET_ANALYSIS_PLUGINS
+    environment variable.
+  * Remove support for custom ASCII event-file formats.
+  * Use an immediate call to HepMC3::deduce_reader() in the file
+    and stream opening; drop local attempts to deduce the file
+    format.
+  * Require HepMC3 >= 3.2.0
+  * Add variations on the discard/select utility functions to
+    (particularly) discard single elements by equality rather than
+    needing to provide a function.
+  * Fixes in MC_TAU_Decay plot file, courtesy of George Marsden
+  * Provide an implicit cast for FourVector and derived classes to
+    PseudoJet, to avoid the incorrect conversion by PJ's template
+    constructor.
+  * Fix unit for Zjj inclusive runs in ATLAS_2017_I1627873
+  * ATLAS_2019_I1746286: fix generator ctau description in the
+    info file.
+  * Fix memory leaks in binreloc.c and the merging-related method
+    in AnalysisHandler.
+  * Fix CMS_2015_I1346843 to allow FSR photons from muon decays
+  * Add example analysis demonstrating use of an ONNX neural net.
+  * Change/correct DressedLeptons behaviour to accept photons from
+    prompt muons and taus. (Return to 2.x behaviour, accidentally
+    reverted.)
+  * Update ParticleIdUtils content to match latest MCUtils.
+    Includes a serious speed-up (6x!) in PID digit decoding!
+  * Allow linspace() and aspace() to make reversed edge-sets with
+    start > end.
+  * Add powspace() and powdbnspace() uniform-spacing functions for
+    power laws, and a generic _fnspace() function for any
+    transform/inverse function-pair.
+  * Fix couting of raw vs tmp histos when checking
+    self-consistency of output file.
+  * Replace regex_match with reg_search to pick up substring
+    matches, too.
+  * Fix bug in DELPHI_2011_I890503 and OPAL_2003_I599181, where
+    the wrong decay chain was checked for weak decays.
+  * Change configure script to use the --rpath=no option to
+    fastjet-config, removing fragile path-hacking.
+    build script.
+  * Add reentrant marker to MC_DILEPTON.info
+  * Make logger thread safe(r) by making ColorMap and LevelMap
+  * thread_local.
+  * Extend RivetLWTNN.hh to allow use of lwt::LightweightGraph
+  * Enable Cython autoconversion from C++ strings to the
+    appropriate str type for Python v2 and v3, eliminating many
+    noisy and fragile explicit encode()/decode() calls.
+  * Analyses of new experiments (long list, see
+    /usr/share/doc/packages/Rivet-devel/ChangeLog).
+- Drop Rivet-correct-python-platlib.patch: fixed upstream.
+- ExcludeArch %ix86: i586 error due to conversion from
+  `long long` to `size_t`.
+
+- Update to version 3.1.7:
+  * Add HEPTopTagger interface (since made optional, with no-build
+    example analysis).
+  * Add EXAMPLE_NTUPLE_ROOT example analysis showing how to open
+    and write to a ROOT ntuple file.
+  * Add CMS_2021_I1866118: Z boson plus jets (DPS) at 13 TeV
+  * Add EXAMPLE_NTUPLE_CSV example analysis showing how to open
+    and write to a CSV ntuple file.
+  * Add Analysis::analysisDataPath() and the RivetLWTNN.hh include
+    with convenience functions for loading of LWTNN DNNs.
+  * Add EXAMPLE_LWTNN example analysis, demonstrating use of a
+    preserved LWTNN neural network in Rivet.
+  * Install more generically named files from the analysis
+    plugin/data dirs rather than limiting to the .plot, .info,
+    .yoda* set.
+  * Move EXAMPLE_* analyses, which demonstrate functionality to
+    analysis writers rather than being directly useful in compiled
+    form, into an uncompiled analyses/examples/ directory.
+  * Hide the bundled eigen3 in a mangled RivetEigen namespace, to
+    avoid clashes.
+  * Submission of CMS_2022_I2079374: Z pT over a wide mass range
+    at 13 TeV
+  * Upgrade eigen3 and yaml-cpp bundling to remove compiler
+    warnings.
+- Add Rivet-correct-python-platlib.patch: Ensure consistent python
+  platlib across different python versions.
+- Split out data files common to C++ and Python bindings into
+  separate package (Rivet-data) and have it required from both
+  %{name}-devel and python3-%{name} packages.
+- Run tests as part of %check section.
+- Move sed fixes to hashbangs to %setup section, running them over
+  scripts in source rather than on buildroot installed dirs to
+  allow tests in %check to succeed.
+- Drop fixes to pkgconfig script made during %setup as these are
+  no longer needed.
+
WSL-DistroLauncher
+- Microsoft prefers Name and distro id to be the same for usage with wsl.exe
+  * Removing " Server" from PRETTY_NAME so distro isn't registered
+    with it in the name
+  * This way both `wsl --install SUSE-Linux-Enterprise-15-SP5` and
+    `wsl -d SUSE-Linux-Enterprise-15-SP5` work vs. the second
+    iteration needing "Server" in the name
+
afterburn
+- Update to version 5.4.1:
+  * cargo: Afterburn release 5.4.1
+  * docs/release-notes: update for release
+  * build(deps): bump pnet_datalink from 0.31.0 to 0.33.0
+  * build(deps): bump pnet_base from 0.31.0 to 0.33.0
+  * build(deps): bump serde_json from 1.0.91 to 1.0.92
+  * build(deps): bump zbus from 3.7.0 to 3.9.0
+  * build(deps): bump anyhow from 1.0.68 to 1.0.69
+  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
+  * Sync repo templates âš™
+  * build(deps): bump tokio from 1.24.1 to 1.25.0
+  * cargo: add configuration for cargo-vendor-filterer
+  * cargo: Afterburn release 5.4.0
+  * docs/release-notes: update for release
+  * util: support DHCP option lookup from NetworkManager
+  * util: factor out retries of DHCP option lookup
+  * util: refactor DHCP option query helper into an enum
+  * util: move dns_lease_key_lookup() to a separate module
+  * cargo: update MSRV to 1.66
+  * build(deps): bump reqwest from 0.11.13 to 0.11.14
+  * build(deps): bump nix from 0.26.1 to 0.26.2
+  * build(deps): bump serde_yaml from 0.9.16 to 0.9.17
+  * cargo: update all packages to fix build error
+  * cargo: continue to support openssh-keys 0.5
+  * build(deps): bump openssh-keys from 0.5.0 to 0.6.0
+  * cargo: drop serde_derive crate in favor of serde derive feature
+  * cargo: use consistent declaration syntax for slog dependency
+  * cargo: drop unused dependencies
+  * Fix clippy 1.65 lints
+  * build(deps): bump base64 from 0.13.1 to 0.21.0
+  * build(deps): bump tokio from 1.19.2 to 1.24.1
+  * workflows: update actions to current major versions
+  * workflows: replace actions-rs/toolchain with dtolnay/rust-toolchain
+  * build(deps): bump mailparse from 0.13.8 to 0.14.0
+  * build(deps): bump serde from 1.0.151 to 1.0.152
+  * build(deps): bump openssl from 0.10.44 to 0.10.45
+  * build(deps): bump libsystemd from 0.5.0 to 0.6.0
+  * build(deps): bump anyhow from 1.0.66 to 1.0.68
+  * build(deps): bump base64 from 0.13.1 to 0.20.0
+  * build(deps): bump serde_derive from 1.0.150 to 1.0.151
+  * build(deps): bump serde_json from 1.0.89 to 1.0.91
+  * build(deps): bump serde_yaml from 0.9.14 to 0.9.16
+  * cargo: continue to support base64 0.13
+  * cargo: continue to support mailparse 0.13.8
+  * build(deps): bump mailparse from 0.13.8 to 0.14.0
+  * build(deps): bump mockito from 0.31.0 to 0.31.1
+  * build(deps): bump serde from 1.0.148 to 1.0.150
+  * build(deps): bump openssl from 0.10.43 to 0.10.44
+  * build(deps): bump base64 from 0.13.1 to 0.20.0
+  * build(deps): bump nix from 0.25.0 to 0.26.1
+  * build(deps): bump vmw_backdoor from 0.2.1 to 0.2.3
+  * build(deps): bump serde from 1.0.147 to 1.0.148
+  * build(deps): bump serde_json from 1.0.87 to 1.0.89
+  * build(deps): bump openssl from 0.10.42 to 0.10.43
+  * build(deps): bump reqwest from 0.11.12 to 0.11.13
+  * cargo: continue to support clap 3.1
+  * cargo: stop enabling LTO in release builds
+  * providers/ibmcloud: avoid error if an ssh key not found in metadata
+  * build(deps): bump clap from 3.2.5 to 3.2.23
+  * build(deps): bump serde_yaml from 0.9.13 to 0.9.14
+  * build(deps): bump anyhow from 1.0.65 to 1.0.66
+  * build(deps): bump base64 from 0.13.0 to 0.13.1
+  * build(deps): bump serde from 1.0.145 to 1.0.147
+  * build(deps): bump serde_json from 1.0.86 to 1.0.87
+  * dependabot: permute the label order to flush Dependabot's config cache
+  * ci: migrate to new directory and method names
+  * build(deps): bump serde_json from 1.0.85 to 1.0.86
+  * workflows: update clippy to 1.64.0
+  * build(deps): bump serde from 1.0.144 to 1.0.145
+  * build(deps): bump openssl from 0.10.41 to 0.10.42
+  * build(deps): bump reqwest from 0.11.11 to 0.11.12
+  * Sync repo templates âš™
+  * build(deps): bump anyhow from 1.0.64 to 1.0.65
+  * build(deps): bump serde_yaml from 0.9.11 to 0.9.13
+  * docs/release-notes: fixed checkin services ordering
+  * systemd: add explicit ordering, after multi-user.target
+  * build(deps): bump serde-xml-rs from 0.5.1 to 0.6.0
+  * build(deps): bump serde_yaml from 0.9.10 to 0.9.11
+  * build(deps): bump anyhow from 1.0.62 to 1.0.64
+  * workflows: bump clippy to 1.63.0
+  * network: fix clippy 1.63.0 lints
+  * build(deps): bump serde_json from 1.0.83 to 1.0.85
+  * build(deps): bump anyhow from 1.0.61 to 1.0.62
+  * build(deps): bump serde_yaml from 0.9.9 to 0.9.10
+  * build(deps): bump serde from 1.0.143 to 1.0.144
+  * build(deps): bump serde from 1.0.142 to 1.0.143
+  * build(deps): bump nix from 0.24.2 to 0.25.0
+  * build(deps): bump serde_yaml from 0.9.4 to 0.9.9
+  * build(deps): bump anyhow from 1.0.60 to 1.0.61
+  * build(deps): bump anyhow from 1.0.59 to 1.0.60
+  * build(deps): bump serde_yaml from 0.9.2 to 0.9.4
+  * build(deps): bump serde from 1.0.141 to 1.0.142
+  * build(deps): bump serde_json from 1.0.82 to 1.0.83
+  * Sync repo templates âš™
+  * cargo: allow serde_yaml 0.8
+  * dependabot: automatically add "dependency" and "skip-notes" labels to PRs
+  * Sync repo templates âš™
+  * build(deps): bump serde_yaml from 0.8.26 to 0.9.2
+  * build(deps): bump anyhow from 1.0.58 to 1.0.59
+  * build(deps): bump serde from 1.0.140 to 1.0.141
+  * build(deps): bump serde from 1.0.139 to 1.0.140
+  * build(deps): bump nix from 0.24.1 to 0.24.2
+  * build(deps): bump serde_yaml from 0.8.25 to 0.8.26
+  * cargo: update version ranges for post-1.x deps
+  * providers: Use inline `format!` in a few places
+  * *: bump MSRV to 1.58.0
+  * build(deps): bump serde_yaml from 0.8.24 to 0.8.25
+  * build(deps): bump openssl from 0.10.40 to 0.10.41
+  * build(deps): bump serde from 1.0.138 to 1.0.139
+  * Sync repo templates âš™
+  * build(deps): bump serde from 1.0.137 to 1.0.138
+  * build(deps): bump ipnetwork from 0.19.0 to 0.20.0
+  * build(deps): bump serde_json from 1.0.81 to 1.0.82
+  * docs: add release notes
+  * Sync repo templates âš™
+  * Sync repo templates âš™
+  * Sync repo templates âš™
+  * build(deps): bump anyhow from 1.0.57 to 1.0.58
+  * templates/release-checklist: delete all .a files from vendor dir
+  * cargo: update
+  * cargo: update clap to 3.2.5
+  * build(deps): bump reqwest from 0.11.10 to 0.11.11
+  * build(deps): bump pnet_datalink from 0.30.0 to 0.31.0
+  * build(deps): bump pnet_base from 0.30.0 to 0.31.0
+  * copr: mark git checkout as safe
+  * build(deps): bump pnet_datalink from 0.29.0 to 0.30.0
+  * build(deps): bump pnet_base from 0.29.0 to 0.30.0
+  * workflows: update issue link
+  * dependabot: switch to weekly cadence
+  * ci: mark git checkout as safe
+  * providers/aws: expose instance availability-zone-id as AWS_AVAILABILITY_ZONE_ID
+  * github/release-checklist: Fixup path for Windows binaries
+  * build(deps): bump serde_json from 1.0.80 to 1.0.81
+  * build(deps): bump serde_yaml from 0.8.23 to 0.8.24
+  * build(deps): bump openssl from 0.10.38 to 0.10.40
+  * build(deps): bump serde from 1.0.136 to 1.0.137
+  * build(deps): bump serde_json from 1.0.79 to 1.0.80
+  * build(deps): bump nix from 0.23.1 to 0.24.1
+  * build(deps): bump ipnetwork from 0.18.0 to 0.19.0
+
alttab
+- Update to 1.7.1:
+  * Show username in bottom line: -b 2.
+  * Option -ns to ignore _NET_WM_STATE_SKIP_TASKBAR.
+  * Better man page.
+  * Fix an "empty window name" check,
+  * Fix typographical errors.
+
+- Update to 1.7.0:
+  * Option -e to keep the switcher.
+  * Document usage on mobile devices.
+  * Configurable bordercolor.
+  * Build scripts for OpenBSD.
+  * Fix xpm icon bug.
+  * Feature: kill window by pressing 'k'.
+  * Feature: line at the bottom of tile.
+  * Show windows on scratchpad only: -d 4
+  * Disable icons: -s 4
+  * Prevent segfault on zero size tile or icon.
+
amanda
-- security update
-- added patches
-  fix CVE-2023-30577 [bsc#1213701], Improper argument checking for runtar.c
-  + amanda-CVE-2023-30577.patch
+- version update to 3.5.4
+  * Fixed: arg checking for runtar.c (CVE-2023-30577) [bsc#1213701]
+- modified patches
+  % amanda-2.6.1p1-avoid-perl-provides.patch (refreshed)
+
+- Fix the user owner of the files in /usr from amanda to root, bsc#1172572
+
+- Update to version 3.5.3:
+  * Fixed: removed vulnerable jQuery dependency
+  * Fixed: fix suppressed 1st char of error message in
+    common-src/bsdtcp-security.c
+  * docs: improved README with Markdown
+  * docs: updated README file name for docs in Debian builds
+  * Fixed: post_inst_functions.sh to create amkey
+  * Fixed: added extern keyword for tu_debugging_enabled declaration in
+    testutils.h
+  * Fixed: https://sogis.eu complaint symmetric encryption key derivation algorithm
+  * Fixed: removed perror to fix information leak vulnerability found in the
+    calcsize SUID binary. (CVE-2022-37703, bsc#1203390)
+  * Fixed: added filter for RSH environment settings in rundump to fix
+    privilege escalation vulnerability (CVE-2022-37704, bsc#1208033)
+  * Fixed: arg checking for runtar.c (CVE-2022-37705, bsc#1208032)
+- Remove upstreamed patches:
+  * CVE-2022-37705.patch
+  * amanda-3.5.1-GCC10_extern.patch
+  * amanda-3.5.2-fix-tests.patch
+
+- Add CVE-2022-37705.patch to fix privilege scalation
+  (boo#1208032, gh#zmanda/amanda#194)
ansilove
+- Update to version 4.2.0
+  * Add support for the Spleen 8x16 font (requires libansilove >= 1.4.0)
+
+- Update to version 4.1.7
+  * Always print processing time on stderr
+  * Move manual page to the man directory
+
ansilove-term
+- Add ansilove-term-gcc13.patch: fix build using GCC 13.
+
apache2-mod_auth_gssapi
+- update to 1.6.5:
+  * Fix a bad crash bug when the GssapiUseS4U2Proxy option is set
+    but no GssapiCredStore directives are provided at all.
+  - crash bug when s4u2proxy is configured by @simo5 in #272
+- rebased patch apache2-mod_auth_gssapi-test.patch
+
+- change upstream URL to https://github.com/gssapi/mod_auth_gssapi,
+  because https://github.com/modauthgssapi/mod_auth_gssapi has no
+  releases, no activity and looks fishy
+- upgrade to 1.6.4:
+  * tests: Catch errors during tests setup by @stanislavlevin in
+    [#225]
+  * tests: Don't override the specific environment by the global
+    one by @stanislavlevin in #227
+  * Emit error in logs if keytab files can't be opened by @simo5 in
+    [#229]
+  * Add warnings if s4u2proxy options are inconsistent by @simo5 in
+    [#232]
+  * Move to python3 by default by @frozencemetery in #235
+  * Fix type/token distinction in parser.y by @frozencemetery in
+    [#237]
+  * Special ccache handling for {HOSTNAME} acceptor by @simo5 in
+    [#238]
+  * crypto: Handle EVP changes in OpenSSL 3 by @frozencemetery in
+    [#256]
+
apparmor
+- update to AppArmor 3.1.6 (jsc#PED-5600)
+  - fix regression in mount rules (boo#1211989)
+  - some additions to the base and authentification abstractions
+  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
+    for the full upstream changelog
+
+- update to AppArmor 3.1.5
+  - fix handling of mount rules in apparmor_parser
+  - minor additions to abstractions/base and snap_browsers
+  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
+    for the full upstream changelog
+- remove upstreamed aa-status-fix-json-mr1046.patch
+- split off apparmor-enable-precompiled-cache.diff from
+  apparmor-enable-profile-cache.diff so that the precompiled cache
+  path doesn't get added in parser.conf for Tumbleweed builds.
+  This prevents a warning about the non-existing directory when
+  loading profiles.
+
+- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
+  boo#1211980#c12)
+
+- update to AppArmor 3.1.4
+  - parser: fix mount rules encoding (CVE-2016-1585)
+  - aa-logprof: fix error when choosing named exec with plain profile names
+  - aa-status: fix json output
+  - several fixes for profiles and abstractions
+  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
+    for the full upstream changelog
+
+- Add _multibuild to define additional spec files as additional
+  flavors.
+  Eliminates the need for source package links in OBS.
+
+- update to AppArmor 3.1.3
+  - add support for more audit.log formats in libapparmor
+  - add abstractions/groff (boo#1065388)
+  - various additions in abstractions and profiles
+  - several bug fixes in parser and utils
+  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.3
+    for the detailed upstream changelog
+- drop upstreamed patches:
+  - abstractions-openssl-1_1.diff
+  - dnsmasq-cpu-possible.diff
+  - nscd-systemd-userdb.diff
+
+- add abstractions-openssl-1_1.diff: allow to read
+  /etc/ssl/openssl-1_1.cnf in abstractions/openssl (boo#1207911)
+
+- add nscd-systemd-userdb.diff: allow nscd to read systemd-userdb
+  (boo#1207698)
+
+- Replace transitional %usrmerged macro with regular version check (boo#1206798)
+
+  - samba-4-17.patch superseded by upstream merge:
+    https://gitlab.com/apparmor/apparmor/-/merge_requests/926
+
+- update to AppArmor 3.1.2
+  - lots of cleanups, improvements and bugfixes in all areas
+  - rework internal profile storage and handling in the aa-* tools
+  - support boolean variable definitions in the aa-* tools
+  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.1
+    and https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.2
+    for the detailed upstream changelog
+- remove upstream(ed) patches:
+  - apparmor-3.0.7-egrep.patch
+  - dnsmasq.diff
+  - profiles-permit-php-fpm-pid-files-directly-under-run.patch
+  - zgrep-profile-mr870.diff
+- no longer ship precompiled profile cache for Tumbleweed (boo#1205659)
+- BuildRequire iproute2 (needed for aa-unconfined tests)
+
+- aa-decode: use grep -E instead of deprecated egrep (boo#1203092)
+  add apparmor-3.0.7-egrep.patch
+
+- update to AppArmor 3.0.7
+  - fix setuptools version detection in buildpath.py
+  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.7
+    for the detailed upstream changelog
+- add dnsmasq-cpu-possible.diff: allow reading /sys/devices/system/cpu/possible
+  in dnsmasc//libvirt-leaseshelper profile (boo#1202849)
+- skip code linting for packaging
+  * removes pyflakes from the build requirements and thus Ring1
+  * see also https://gitlab.com/apparmor/apparmor/-/issues/121
+
+- add dnsmasq.diff: missing r permissions for dnsmasq//libvirt-leaseshelper
+  (boo#1202161)
+
+- update to AppArmor 3.0.6
+  - fix LTO build in the parser
+  - remove dbus deny rule in abstractions/exo-open
+  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.6
+    for the detailed upstream changelog
+- drop upstream patch dirtest-sort-mr900.diff
+
+- update to AppArmor 3.0.5
+  - several additions to profiles and abstractions
+  - bugfixes in parser and utils
+  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.5
+    for the detailed upstream changelog
+- remove upstream(ed) patchs:
+  - apparmor-setuptools61-mr897.patch
+  - dovecot-profiles-boo1199535-mr881.diff
+  - php8-fpm-mr876.patch
+  - python310-help-mr848.patch
+  - samba-new-dcerpcd.patch
+  - samba_deny_net_admin.patch
+  - update-samba-bgqd.diff
+  - update-usr-sbin-smbd.diff
+- apparmor-samba-include-permissions-for-shares.diff: remove
+  upstreamed part
+- add dirtest-sort-mr900.diff to fix random test failures
+- change apache-extra-profile-include-if-exists.diff to the post-mv
+  path (new quilt executes mv)
+- stop disabling lto (fixed upstream) (boo#1133091)
+- package profile-load script in -parser
+
+- Add apparmor-setuptools61-mr897.patch
+  https://gitlab.com/apparmor/apparmor/-/merge_requests/897
+- Add buildtime dependencies on python-rpm-macros and setuptools
+
+- update zgrep-profile-mr870.diff: allow zgrep to execute egrep and fgrep
+  (poo#113108)
+
+- add dovecot-profiles-boo1199535-mr881.diff: update dovecot profiles
+  for latest dovecot (boo#1199535)
+
+- Update samba-new-dcerpcd.patch for aarch64 which needs some
+  additional rules; (bnc#1198309).
+
+- Add python310-help-mr848.patch so that Tumbleweed can switch
+  python3 to Python 3.10
+  (https://gitlab.com/apparmor/apparmor/-/merge_requests/848)
+
apptainer
+- updated to 1.2.2 with following changes:
+  * Fix $APPTAINER_MESSAGELEVEL to correctly set the logging level.
+  * Fix build failures when in setuid mode and unprivileged user namespaces are
+    unavailable and the --fakeroot option is not selected.
+
+- updated to 1.2.1 to fix CVE-2023-38496 although not relevant as package is
+  compiled with setuid
+
+- update to 1.2.0 with following changes:
+  * binary is built reproducible which disables plugins
+  * Create the current working directory in a container when it doesn't exist.
+    This restores behavior as it was before singularity 3.6.0. As a result,
+    using --no-mount home won't have any effect when running apptainer from a
+    home directory and will require --no-mount home,cwd to avoid mounting that
+    directory.
+  * Handle current working directory paths containing symlinks both on the host
+    and in a container but pointing to different destinations. If detected, the
+    current working directory is not mounted when the destination directory in
+    the container exists.
+  * Destination mount points are now sorted by shortest path first to ensure
+    that a user bind doesn't override a previous bind path when set in
+    arbitrary order on the CLI. This is also applied to image binds.
+  * When the kernel supports unprivileged overlay mounts in a user namespace,
+    the container will be constructed by default using an overlay instead of an
+    underlay layout for bind mounts. A new --underlay action option can be used
+    to prefer underlay instead of overlay.
+  * sessiondir maxsize in apptainer.conf now defaults to 64 MiB for new
+    installations. This is an increase from 16 MiB in prior versions.
+  * The apptainer cache is now architecture aware, so the same home directory
+    cache can be shared by machines with different architectures.
+  * Overlay is blocked on the panfs filesystem, allowing sandbox directories to
+    be run from panfs without error.
+  * Lookup and store user/group information in stage one prior to entering any
+    namespaces, to fix an issue with winbind not correctly looking up
+    user/group information when using user namespaces.
+- New features / functionalities
+  * Support for unprivileged encryption of SIF files using gocryptfs.  This is
+    not compatible with privileged encryption, so containers encrypted by root
+    need to be rebuilt by an unprivileged user.
+  * Templating support for definition files. Users can now define variables in
+    definition files via a matching pair of double curly brackets. Variables of
+    the form {{ variable }} will be replaced by a value defined either by a
+    variable=value entry in the %arguments section of the definition file or
+    through new build options --build-arg or --build-arg-file.
+  * Add a new instance run command that will execute the runscript when an
+    instance is initiated instead of executing the startscript.
+  * The sign and verify commands now support signing and verification with
+    non-PGP key material by specifying the path to a private key via the --key
+    flag.
+  * The verify command now supports verification with X.509 certificates by
+    specifying the path to a certificate via the --certificate flag. By
+    default, the system root certificate pool is used as trust anchors unless
+    overridden via the --certificate-roots flag. A pool of intermediate
+    certificates that are not trust anchors, but can be used to form a
+    certificate chain, can also be specified via the
+  - -certificate-intermediates flag.
+  * Support for online verification checks of X.509 certificates using OCSP
+    protocol via the new verify --ocsp-verify option.
+  * The instance stats command displays the resource usage every second. The
+  - -no-stream option disables this interactive mode and shows the
+    point-in-time usage.
+  * Instances are now started in a cgroup by default, when run as root or when
+    unified cgroups v2 with systemd as manager is configured. This allows
+    apptainer instance stats to be supported by default when possible.
+  * The instance start command now accepts an optional --app <name> argument
+    which invokes a start script within the %appstart <name> section in the
+    definition file. The instance stop command still only requires the instance
+    name.
+  * The instance name is now available inside an instance via the new
+    APPTAINER_INSTANCE environment variable.
+  * The --no-mount flag now accepts the value bind-paths to disable mounting of
+    all bind path entries in apptainer.conf.
+    Support for DOCKER_HOST parsing when using docker-daemon://
+    DOCKER_USERNAME and DOCKER_PASSWORD supported without APPTAINER_ prefix.
+    Add new Linux capabilities CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE.
+  * The remote get-login-password command allows users to retrieve a remote's
+    token. This enables piping the secret directly into docker login while
+    preventing it from showing up in a shell's history.
+  * Define EUID in %environment alongside UID.
+  * In --rocm mode, the whole of /dev/dri is now bound into the container when
+  - -contain is in use. This makes /dev/dri/render devices available, required
+    for later ROCm versions.
+
+- update to 1.1.9 with following changes:
+  * Remove warning about unknown xino=on option from fuse-overlayfs, introduced
+    in 1.1.8.
+  * Ignore extraneous warning from fuse-overlayfs about a readonly /proc.
+  * Fix dropped "n" characters on some platforms in definition file stored as
+    part of SIF metadata.
+  * Remove duplicated group ids.
+  * Fix not being able to handle multiple entries in LD_PRELOAD when binding
+    fakeroot into container during apptainer startup for --fakeroot with
+    fakeroot command.
+
+- Included a fix for CVE-2023-30549 which is a vulnerability in setuid-root
+  installations of Apptainer iwhich was not active in the recent openSUSE
+  packages. Still this is included for completenss. The fix adds allow
+  setuid-mount configuration options encrypted, squashfs, and extfs, and makes
+  the default for extfs be "no". That disables the use of extfs mounts
+  including for overlays or binds while in the setuid-root mode, while leaving
+  it enabled for unprivileged user namespace mode. The default for encrypted
+  and squashfs is "yes".
+- Other bug fixes:
+  * Fix loop device 'no such device or address' spurious errors when using shared
+    loop devices.
+  * Add xino=on mount option for writable kernel overlay mount points to fix
+    inode numbers consistency after kernel cache flush (not applicable to
+    fuse-overlayfs).
+
+- updated to 1.1.7 with following changes:
+  * removed simpler-sif-building.patch as this was incoperated upstream
+  * Allow gpu options such as --nv to be nested by always inheriting all
+    libraries bound in to a parent container's /.singularity.d/libs.
+  * Map the user's home directory to the root home directory by default in the
+    non-subuid fakeroot mode like it was in the subuid fakeroot mode, for both
+    action commands and building containers from definition files.
+  * Make the error message more helpful in another place where a remote is
+    found to have no library client.
+  * Avoid incorrect error when requesting fakeroot network.
+  * Pass computed LD_LIBRARY_PATH to wrapped unsquashfs. Fixes issues where
+    unsquashfs on host uses libraries in non-default paths.
+
ardour
+- Update to 7.5.0. See https://ardour.org/whatsnew.html
+  New features:
+  * Tempo Map Editing
+  * Saving I/O Connections Per Device
+  * Sections Elements
+  * Loaded plugins can now be renamed in the processor box
+  * Some of the supported control surfaces now get activated
+    automatically upon connection to USB MIDI ports
+
+- Update to 7.4.0. See https://ardour.org/whatsnew.html
+  New features:
+  * Add a volume control to the clip picker.
+  * Add a preference item for the PPQN value in exported MIDI files
+  * Add an option to use a neutral color for new tracks & busses.
+  * Add support for MIDI subgroup busses.
+  * Add Lua DSP processor to downmix 5.1 to stereo.
+
+- Update to 7.3.0. https://ardour.org/whatsnew.html
+  New features:
+  * VST3 multi-bus support
+  * Searchable Preferences
+  * Sample-rate Independence
+  * AVX512 support
+
arpwatch-ethercodes
+- Update to version 20230808 (jsc#PED-6338)
+- supply a new python3 script, that fetches (in local builds) and
+  generates ethercodes.dat
+  [+ fetch_ethercodes.py]
+- Removed URL for source0 as this causes issues with our bots
+- sort existing oui.csv to show differences in future updates
+- add and sort downloaded oui.csv
+  [+ oui.csv]
+- removed oui txt file
+  [- oui.txt]
+- move vim commands to a place where vim can find the commands
+- Inject a QEMU/KVM entry
+
-- Initial package.
-
audaspace
+- Update to release 1.4.0
+  * Support for OS specific/native audio devices/backends has been
+    added, that is PulseAudio (Linux), WASAPI (Windows) and
+    CoreAudio (MacOS).
+  * New sound effects have been added, namely Modulator and
+    Equalizer. Thanks to Marcos Perez for contributing the
+    Equalizer.
+  * File stream info: if an audio file contains multiple streams
+    you can choose which one to process instead of taking the first
+    one (this feature is only supported by ffmpeg, not libsndfile).
+  * API Change: double instead of float for time values for more
+    precise timing control.
+  * There have been lots of bugfixes, which are basically the
+    majority of all changes.
+  * And some other minor improvements were implemented as well.
+- Drop upstream patches:
+  * audaspace-gcc7.patch
+  * audaspace-plugin-build-options.patch
+  * audaspace-support-ffmpeg4.patch
+  * 034645c883a51dfc8897dccce15aa8ee4a9d5c8c.patch
+- Add pkgconfig(pulse) to allow audio via pulseaudio/pipewire
+- Use pkgconfig(jack), let distro select jack implementation
+- Split plugins packages to avoid pulling in excessive
+  dependencies, and recommend at least one device plugin from
+  the library.
+
azote
+- Update to 1.12.3:
+  * Fix crash on spaces in directory names #184
+
+- Update to 1.12.2:
+  * Fix crash on attempt to split an image #183
+
+- Update 1.12.1
+  * Add Russian translation #182
+
+- Update to 1.12.0:
+  * Fix generic name creation when the serial number field is
+    empty / "none";
+  * As the serial numbers returned by sway and Hyprland may be
+    different for some reason, from now on we use the new
+    ~/.azotebg-hyprland setter script on Hyprland.
+    Edit your hyprland.conf.
+
+- Update to 1.11.0:
+  * Increase awk compatibility
+  * Add Hyprland-specific displays detection
+  * Fix imports
+  * Fix example wallpaper
+
+- Update to 1.10.1:
+  * Fix lang files path
+
+- Updaet to 1.10.0:
+  * Multiple langs support unified with nwg-shell;
+  * Added "Close" button to unify this matter as well.
+
barrier
+- Fix gcc13 build with fix-build2.patch
+
batctl
+- update to 2023.1:
+  * Synchronize with kernel headers
+
+- update to 2023.0:
+  * (no changes)
+
belle-sip
+- Update to 5.2.73 (no changelog)
+
+- Update to 5.2.49 (no changelog)
+- Add set_current_version.patch
+
+- Update to 5.2.30 (no changelog)
+
belr
+- update to 5.2.51:
+  * Fix bug resulting in empty matches not being considered as
+    valid when enclosed within a selector.
+  * Fix build using flexisip flags
+
bemenu
+- Update to 0.6.15:
+  * Add rounded corners/Border radius #319
+  * Add Match/Page Counter #204
+  * docs: add missing options #331
+  * Add fixed height option #270
+  * Fix Makefile to support submodule setups #329
+  * Fix: invisible right border #333
+  * Fix: select last entry if pointer/touch above last index #332
+  * ESC have no effect under Wayland while enabled Vim binding #334
+  * Small fixes #340
+
bluetuith
+- Update to 0.1.7:
+  * New HJSON-based configuration format
+  * Adapter status indicators
+  * Cancellable OBEX session creation
+  * Enhanced popups
+  * Major bugfixes and improvements
+
+- Update to 0.1.5:
+  * ui: device: Show address if name is empty
+  * agent: Display pincode in a modal #14
+
+- Update to 0.1.5:
+  * Update dependencies to resolve vulnerability
+
+- Update to 0.1.4:
+  * Minor bugfixes
+
borgmatic
+- update to 1.8.0:
+  * BREAKING: For the "borgmatic borg" action, instead of
+    implicitly injecting repository/archive into the resulting Borg
+    command-line, pass repository to Borg via an environment
+    variable and make archive available for explicit use in your
+    commands.
+  * Fix an error when running "borg key export" through borgmatic.
+  * Fix an error when dumping a database and the "exclude_nodump"
+    option is set.
+  * Add "check_i_know_what_i_am_doing" option to bypass Borg
+    confirmation prompt when running "check --repair".
+  * When merging two configuration files, error gracefully if the
+    two files do not adhere to the same format.
+  * Remove configuration sections ("location:", "storage:",
+    "hooks:" etc.), while still keeping deprecated support for
+    them. Now, all options are at the same level, and you don't
+    need to worry about commenting/uncommenting section headers
+    when you change an option (if you remove your sections first).
+  * BREAKING: The retention prefix and the consistency prefix
+    can no longer have different values (unless one is not set).
+  * BREAKING: The storage umask and the hooks umask can no longer
+    have different values (unless one is not set).
+  * BREAKING: Flags like "--config" that previously took multiple
+    values now need to be given once per value, e.g.
+    "--config first.yaml --config second.yaml" instead of
+    "--config first.yaml second.yaml". This prevents argument
+    parsing errors on ambiguous commands.
+  * BREAKING: Remove the deprecated (and silently ignored)
+    "--successful" flag on the "list" action, as newer versions
+    of Borg list successful (non-checkpoint) archives by default.
+  * All deprecated configuration option values now generate
+    warning logs.
+  * Remove the deprecated (and non-functional) "--excludes"
+    flag in favor of excludes within configuration.
+  * Fix an error when logging too-long command output during
+    error handling. Now, long command output is truncated
+    before logging.
+
+- update to 1.7.15
+  * Add configuration options and command-line flags for backing up a database
+    from one location while restoring it somewhere else.
+  * Add a documentation troubleshooting note for MySQL/MariaDB authentication
+    errors.
+  * Remove upgrade-borgmatic-config command for upgrading borgmatic 1.1.0
+    INI-style configuration.
+  * Deprecate generate-borgmatic-config in favor of new "config generate"
+    action.
+  * Deprecate validate-borgmatic-config in favor of new "config validate"
+    action.
+  * Extract borgmatic configuration from backup via new "config bootstrap"
+    action—even when borgmatic has no configuration yet!
+  * Add sample systemd user service for running borgmatic as a non-root user.
+  * Fix an error when "data" check time files are accessed without getting
+    upgraded first.
+- update to 1.7.14:
+  * Add a new verbosity level (-2) to disable output entirely (for console,
+    syslog, log file, or monitoring), so not even errors are shown.
+  * Tweak archive check probing logic to use the newest timestamp found when
+    multiple exist.
+  * Add Borg 2 date-based matching flags to various actions for archive
+    selection.
+  * Fix an error when loading the configuration schema on Fedora Linux.
+  * Fix "check" action error when repository and archive checks are configured
+    but the archive gets skipped due to the configured frequency.
+  * Fix "--archive latest" on "list" and "info" actions that only worked on the
+    first of multiple configured repositories.
+
+- update to 1.7.13:
+  * Restore particular PostgreSQL schemas from a database
+    dump via "borgmatic restore --schema"
+    flag.
+  * Fix error from PostgreSQL when dumping a database with
+    a "format" of "plain".
+  * : Fix PostgreSQL hook to support "psql_command" and
+    "pg_restore_command" options containing
+    commands with arguments.
+  * Fix calls to psql in PostgreSQL hook to ignore
+    "~/.psqlrc", whose settings can break
+    database dumping.
+  * Add support for logging each log line as a JSON object
+    via global "--log-json" flag.
+  * Fix "source_directories_must_exist" option to expand
+    globs and tildes in source directories.
+  * Add fish shell completion script so you can tab-
+    complete on the borgmatic command-line.
+  * Fix borgmatic error when not finding the configuration
+    schema for certain "pip install --editable" development
+    installs.
+  * Fix archive checks being skipped even when particular
+    archives haven't been checked
+    recently. This occurred when using multiple borgmatic
+    configuration files with different
+    "archive_name_format"s, for instance.
+  * Fix error in "borgmatic restore" action when the
+    configured repository path is relative
+    instead of absolute.
+  * Run "borgmatic borg" action without capturing output so
+    interactive prompts and flags like
+    "--progress" still work.
+
+- update to 1.7.12:
+  * Add "log_file" context to command hooks so your scripts
+    can consume the borgmatic log file.
+  * Fix error when running the "info" action with the
+    "--match-archives" or "--archive"
+    flags. Also fix the "--match-archives"/"--archive" flags
+  * Fix error when running the "prune" action with both
+    "archive_name_format" and "prefix" options set.
+  * Selectively shallow merge certain mappings or sequences
+    when including configuration files.
+  * Selectively omit list values when including
+    configuration files.
+  * View the results of configuration file merging via
+    "validate-borgmatic-config --show" flag.
+  * BREAKING: Automatically use the
+    "archive_name_format" option to filter which archives
+    get used for borgmatic actions that operate on multiple
+    archives. Override this behavior with the
+    new "match_archives" option in the storage section. This
+    change is "breaking" in that it silently
+    changes which archives get considered for "rlist",
+    "prune", "check", etc.
+  * The "prefix" options have been deprecated in
+    favor of the new "archive_name_format"
+    auto-matching behavior and the "match_archives" option.
+  * Add "--log-file-format" flag for customizing the log
+    message format.
+  * Fix regression in which the "check_repositories" option
+    failed to match repositories.
+  * Fix regression in which the "transfer" action produced
+    a traceback.
+  * Add spellchecking of source code during test runs.
+
+- update to 1.7.10:
+  * #396: When a database command errors, display and log the error message instead of swallowing it.
+  * #501: Optionally error if a source directory does not exist via "source_directories_must_exist"
+    option in borgmatic's location configuration.
+  * #576: Add support for "file://" paths within "repositories" option.
+  * #612: Define and use custom constants in borgmatic configuration files. See the documentation for
+    more information:
+    https://torsion.org/borgmatic/docs/how-to/make-per-application-backups/#constant-interpolation
+  * #618: Add support for BORG_FILES_CACHE_TTL environment variable via "borg_files_cache_ttl" option
+    in borgmatic's storage configuration.
+  * #623: Fix confusing message when an error occurs running actions for a configuration file.
+  * #635: Add optional repository labels so you can select a repository via "--repository yourlabel"
+    at the command-line. See the configuration reference for more information:
+    https://torsion.org/borgmatic/docs/reference/configuration/
+  * #649: Add documentation on backing up a database running in a container:
+    https://torsion.org/borgmatic/docs/how-to/backup-your-databases/#containers
+  * #655: Fix error when databases are configured and a source directory doesn't exist.
+  * Add code style plugins to enforce use of Python f-strings and prevent single-letter variables.
+    To join in the pedantry, refresh your test environment with "tox --recreate".
+  * Rename scripts/run-full-dev-tests to scripts/run-end-to-end-dev-tests and make it run end-to-end
+    tests only. Continue using tox to run unit and integration tests.
+
+- update to 1.7.8:
+  * #620: With the "create" action and the "--list" ("--files")
+    flag, only show excluded files at verbosity 2.
+  * #621: Add optional authentication to the ntfy monitoring
+    hook.
+  * With the "create" action, only one of "--list" ("--files")
+    and "--progress" flags can be used.
+  * This lines up with the new behavior in Borg 2.0.0b5.
+  * Internally support new Borg 2.0.0b5 "--filter" status
+    characters / item flags for the "create" action.
+  * Fix the "create" action with the "--dry-run" flag querying
+    for databases when a PostgreSQL/MySQL "all" database is
+    configured. Now, these queries are skipped due to the dry run.
+  * Add "--repository" flag to the "rcreate" action to optionally
+    select one configured repository to create.
+  * Add "--progress" flag to the "transfer" action, new in Borg
+    2.0.0b5.
+  * Add "checkpoint_volume" configuration option to creates
+    checkpoints every specified number of bytes during a
+    long-running backup, new in Borg 2.0.0b5.
+
+- Update to 1.7.7:
+  * #642: Add MySQL database hook "add_drop_database" configuration option to control whether dumped
+    MySQL databases get dropped right before restore.
+  * #643: Fix for potential data loss (data not getting backed up) when dumping large "directory"
+    format PostgreSQL/MongoDB databases. Prior to the fix, these dumps would not finish writing to
+    disk before Borg consumed them. Now, the dumping process completes before Borg starts. This only
+    applies to "directory" format databases; other formats still stream to Borg without using
+    temporary disk space.
+  * Fix MongoDB "directory" format to work with mongodump/mongorestore without error. Prior to this
+    fix, only the "archive" format worked.
+  * #393, #438, #560: Optionally dump "all" PostgreSQL/MySQL databases to separate files instead of one
+    combined dump file, allowing more convenient restores of individual databases. You can enable
+    this by specifying the database dump "format" option when the database is named "all".
+  * #602: Fix logs that interfere with JSON output by making warnings go to stderr instead of stdout.
+  * #622: Fix traceback when include merging configuration files on ARM64.
+  * #629: Skip warning about excluded special files when no special files have been excluded.
+  * #630: Add configuration options for database command customization: "list_options",
+    "restore_options", and "analyze_options" for PostgreSQL, "restore_options" for MySQL, and
+    "restore_options" for MongoDB.
+
brltty
+- Use tmpfiles_create_package
+- Use sysuser-tools unconditionally (bsc#1205161)
+
bzrtp
+- Update to 5.2.73 (no changelog)
+
+- Update to 5.2.49 (no changelog)
+
+- Update to 5.2.30 (no changelog)
+- Add set_current_version.patch
+
+- Update to version 5.2.16:
+  * Improve debug trace
+
cacti
+- cacti 1.2.25:
+  * CVE-2023-30534: Protect against Insecure deserialization of filter data (boo#1215082)
+  * CVE-2023-39360: Cross-Site Scripting vulnerability when creating new graphs (boo#1215044)
+  * CVE-2023-39361: Unauthenticated SQL Injection when viewing graphs (boo#1215045)
+  * CVE-2023-39357: SQL Injection when saving data with sql_save() (boo#1215040)
+  * CVE-2023-39362: Authenticated command injection when using SNMP options (boo#1215047)
+  * CVE-2023-39359: Authenticated SQL injection vulnerability when managing graphs (boo#1215043)
+  * CVE-2023-39358: Authenticated SQL injection vulnerability when managing reports (boo#1215042)
+  * CVE-2023-39365: SQL Injection when using regular expressions (boo#1215051)
+  * CVE-2023-39364: redirect in change password functionality (boo#1215050)
+  * CVE-2023-39366: Cross-Site Scripting vulnerability with Device Name when managing Data Sources (boo#1215052)
+  * CVE-2023-39510: Cross-Site Scripting vulnerability with Device Name when administrating Reports (boo#1215053)
+  * CVE-2023-39511: Cross-Site Scripting vulnerability with Device Name when editing Graphs whilst managing Reports (boo#1215081)
+  * CVE-2023-39512: Cross-Site Scripting vulnerability with Device Name when managing Data Sources (boo#1215054)
+  * CVE-2023-39513: Cross-Site Scripting vulnerability with Device Name when debugging data queries (boo#1215055)
+  * CVE-2023-39514: Cross-Site Scripting vulnerability with Data Source Name when managing Graphs (boo#1215056)
+  * CVE-2023-39515: Cross-Site Scripting vulnerability with Data Source Name when debugging Data Queries (boo#1215058)
+  * CVE-2023-39516: Cross-Site Scripting vulnerability with Data Source Information when managing Data Sources (boo#1215059)
+  * When rebuilding the Poller Cache from command line, allow it to be multi-threaded
+  * When searching tree or list views, the URL does not update after changes
+  * When creating a Data Source Template with a specific snmp port, the port is not always applied
+  * When a Data Query references a file, the filename should be trimmed to remove spurious spaces
+  * THold plugin may not always install or upgrade properly
+  * RRD file structures are not always updated properly, if there are more Data Sources in the Data Template than the Graph Template
+  * When reindexing devices, errors may sometimes be shown
+  * Boost may loose data when the database server is overloaded
+  * Boost can sometimes output unexpected or invalid values
+  * Boost should not attempt to start if there are no items to process
+  * Rebuilding the poller cache does not always work as expected
+  * Host CPU items may not work poll as expected when on a remote data collector where hmib is also enabled
+  * When creating new graphs, invalid offset errors may be generated
+  * When importing packages, SQL errors may be generated
+  * When managing plugins from command line, the --plugin option is not properly handled
+  * When automating an install of Cacti, error messages can be appear
+  * When performing automated install of a plugin, warnings can be thrown
+  * Automation references the wrong table name causing errors
+  * Data Source Info Mode produces invalid recommendations
+  * Data Source Debug 'Run All' generates too many log messages
+  * The description of rebuild poller cache in utilities does not display properly
+  * When reindexing a device, debug information may not always display properly
+  * Upon displaying a form with errors, the session error fields variable isn't cleared
+  * MariaDB clusters will no longer support exclusive locks
+  * RRDtool can fail to update when sources in Data Template and Graph Template data sources do not match
+  * Compatibility improvements for Boost under PHP 8.x
+  * When searching the tree, increase the time before querying for items
+  * Device Location drop down does not always populate correctly
+  * When viewing Realtime graphs, undefined variable errors may be reported
+  * SNMP Uptime is not always ignored for spikekills
+  * Improve detection of downed Devices
+  * When reporting missing functions from Plugins, ensure messages do not occur too often
+  * When starting the Cacti daemon, database errors may be reported when there is no problem
+  * When reporting from RRDcheck, ensure prefix is in the correct casing
+  * Improve Orphaned Data Source options and display
+  * Parsing the PHP Configuration may sometimes produce errors
+  * Security processes attempt to check for a user lockout even if there is no user logged in
+  * When attempting to edit a tree, the search filter for Graphs remains disabled
+  * When reindexing, a Data Source that could be un-orphaned may not always be unorphaned
+  * When parsing a date value, there could be more than 30 chars
+  * Untemplated Data Sources can fail to update due to lack of an assigned Graph
+  * When processing items to check, do not include disabled hosts
+  * When saving a Data Source Template, SQL errors may be reported
+  * When importing a Template, errors may be recorded
+  * Some display strings have invalid formatting that cannot be parsed
+  * When filtering with regular expressions, the 'does not match' option does not always function as expected
+  * When enabling a plugin, sometimes it can appear as if nothing happens
+  * Ensure the Rows Per Page option shows limitations set by configuration
+  * Plugins are unable to modify fields in the setting 'Change Device Settings'
+  * When reporting emails being sent, ensure BCC addresses are also included
+  * Improve compatibility of SNMP class trim handling under PHP 8.x
+  * When importing legacy Data Query Templates, the Template can become unusable
+  * Provide ability to raise an event when extending the settings form
+  * Prevent unsupported SQL Mode flags from being set
+  * The DSStats summary does not always display expected values
+  * When performing a fresh install, device classification may be missing.
+  * Duplication functions for Graph/Template and Data Source/Template do not return and id
+  * Duplication of Device Templates should be an API call
+  * Unable to convert database to latin1 instead of utf8 if desired
+  * When creating Graphs, the process may become slower over time as more items exist
+  * When a bulk walk size is set to automatic, this is not always set to the optimal value
+  * Update copyright notice on import packages
+  * When viewing Orphan Graphs, SQL errors may be reported
+  * When reindexing hosts from command line, ensure only one process runs at once
+  * When a Data Query has no Graphs, it may not be deletable
+  * When duplicating a Graph Template, provide an option to not duplicate Data Query association
+  * When duplicating a Data Template errors can appear in the Cacti log
+  * When importing a Package, previewing makes unexpected changes to Cacti Templates
+  * When enabling boost on a fresh install, an error may be reported
+  * Improve compatibility for backtrace logging under PHP 8.x
+  * Improve compatibility for Advanced Ping under PHP 8.x
+  * Provide new templates for Fortigate and Aruba Cluster to be available during install
+  * Provide new template for SNMP Printer to be available during install
+  * When importing devices, allow a device classification to be known
+  * Extend length of maximum name in settings table
+  * Extend length of maximum name in user settings table
+  * Data Queries do not have a Duplication function
+  * Upgrade d3.js v7.8.2 and billboard.js v3.7.4
+  * Upgrade ua-parser.js to version 1.0.35
+  * Update Cisco Device Template to include HSRP graph template
+  * New hook for device template change 'device_template_change'
+
+- cacti 1.2.24
+  * Fix: Unable to import Local Linux Machine template
+  * Fix multiple charting and display issues
+  * Compatibility changes for SNMP under PHP 8.2, and other PHP
+    compatibility updates
+  * Fix multiple issues editing settings
+  * timeout fixes for Basic Auth
+  * multiple data poller bug fixes
+
cacti-spine
+- cacti-spine 1.2.25:
+  * Spine should see if script to be executed is executable
+  * Enhance number recognition
+  * When polling devices, sort by larger number of items first
+  * Log format may be corrupted when timeout occurs
+  * Compile warning appears due to GCC flag on RHEL7/RHEL8
+  * Downed device detection only checks one of the two uptime OIDs
+  * Compile error appears due to execinfo.h on FreeBSD
+  * Bootstrap shell script contains some PHP cruft
+  * Padding is not always removed from the start of non-numeric
+    strings
+  * Improve SNMP result handling for non-numeric results
+  * Further improve SNMP result handling for non-numeric results
+  * Remove check for the max_oids column which has been present
+    since Cacti v1.0
+  * Minimize Sorting when fetching poller records for maximum
+    performance
+  * Spine should see if script to be executed is executable
+
+- cacti-spine 1.2.24:
+  * Fix segfault when ignoring older OIDs
+
calcurse
+- update to 4.8.1:
+  * Fixed characters in weekly view.
+  * Fixed import for iCal files with empty description
+  * Fixed handling of note files edited outside calcurse
+  * Fixed handling of recurrent open-ended appointments
+  * Default description for items with empty descriptions
+  * The PasswordCommand option can now be used to manage passwords
+    in an external program and is the new recommended way of
+    storing passwords for calcurse-caldav
+
cava
+- Update to 0.9.1:
+  * hardcoded pipewire include flags #519
+  * default input wrongly set to alsa instead of pulseaudio/pipewire #518
+
+- Update to 0.9.0:
+  new:
+  * glsl shader output
+  * windows operating system support
+  * gradient support in sdl output
+  breaking:
+  * some config options are now 0-100 instead of 0-1 due to windows
+    ini not supporting floats
+
chafa
+- Update to 1.12.5:
+  * Fix #123 crash on canvas created with chafa_canvas_new_similar()
+  * Fix #141 distortion when rowstride is not a multiple of 4
+  * Fix missing comma in --help output
+
chromium
+- Chromium 117.0.5938.88 (boo#1215279)
+  * CVE-2023-4900: Inappropriate implementation in Custom Tabs
+  * CVE-2023-4901: Inappropriate implementation in Prompts
+  * CVE-2023-4902: Inappropriate implementation in Input
+  * CVE-2023-4903: Inappropriate implementation in Custom Mobile Tabs
+  * CVE-2023-4904: Insufficient policy enforcement in Downloads
+  * CVE-2023-4905: Inappropriate implementation in Prompts
+  * CVE-2023-4906: Insufficient policy enforcement in Autofill
+  * CVE-2023-4907: Inappropriate implementation in Intents
+  * CVE-2023-4908: Inappropriate implementation in Picture in Picture
+  * CVE-2023-4909: Inappropriate implementation in Interstitials
+- drop patches:
+  * chromium-100-InMilliseconds-constexpr.patch
+  * chromium-115-Qt-moc-version.patch
+  * chromium-116-profile-view-utils-vector-include.patch
+  * chromium-116-blink-variant-include.patch
+  * chromium-116-abseil-limits-include.patch
+  * chromium-116-lp155-constuctors.patch
+  * chromium-115-workaround_clang_bug-structured_binding.patch
+  * chromium-115-emplace_back_on_vector-c++20.patch
+- add patches:
+  * chromium-117-blink-BUILD-mnemonic.patch
+  * chromium-117-includes.patch
+  * chromium-117-lp155-constructors.patch
+  * chromium-117-string-convert.patch
+  * chromium-117-lp155-typename.patch
+  * chromium-117-workaround_clang_bug-structured_binding.patch
+  * chromium-117-emplace_back_on_vector-c++20.patch
+
+- CVE-2023-4863: build with the bundled library on Leap (boo#1215231)
+
+- Chromium 116.0.5845.187 (boo#1215231):
+  * CVE-2023-4863: Heap buffer overflow in WebP
+
+- Chromium 116.0.5845.179 (boo#1215023):
+  * CVE-2023-4761: Out of bounds memory access in FedCM
+  * CVE-2023-4762: Type Confusion in V8
+  * CVE-2023-4763: Use after free in Networks
+  * CVE-2023-4764: Incorrect security UI in BFCache
+
clamav-database
+- database refresh on 2023-09-25 (bsc#1084929)
+
+- database refresh on 2023-09-18 (bsc#1084929)
+
clojure
+- Update to 1.11.1.1405:
+  * GitHub releases now contain .sha256 files for binaries
+
+- Update to 1.11.1.1386:
+  * Release artifacts are now published to GitHub, and the download
+    archive is used only as a mirror
+  * Download and mirroring wip
+  * With -X or -T accept `-` as a trailing argument to read the
+    remainder of args from stdin
+  * On windows installer, hide progress bar on download
+  * Update to tools.deps 0.18.1354
+  * Update to tools.tools 0.3.1
+
+- Update to 1.11.1.1342:
+  * CI related changes
+  * version bumps
+
+- Update to 1.11.1.1323:
+  * CI related changes
+
+- Update to 1.11.1.1290:
+  * add release and promote actions
+  * set aws region in workflows
+
+- Update to 1.11.1.1273:
+  * Change help text to point to -X:deps mvn-pom instead of -Spom
+  * Switch to tools.deps 0.18.1335
+
+- Update to 1.11.1.1267:
+  * Switch to tools.deps 0.18.1331
+
+- Update to 1.11.1.1262:
+  * Switch to tools.deps 0.18.1317
+
+- Update to 1.11.1.1257:
+  * Use tools.deps 0.18.1308
+
+- Update to 1.11.1.1252:
+  * Switch to passing exec args via the basis :argmap
+  * Function execution protocol support for -X/-T
+  * Use tools.deps 0.17.1297
+
+- Update to 1.11.1.1237:
+  * Added env var that can be set to temporarily allow support for
+    http repos: CLOJURE_CLI_ALLOW_HTTP_REPO
+  * Remove deprecated support for -R and -C
+  * Clean up help text around repl supporting init-opts
+  * Use tools.deps 0.16.1285
+
+- Update to 1.11.1.1224:
+  * Fix issue with git tag verification for repos with a large number of tags
+  * TDEPS-235 - Disallow http :mvn/repos
+  * TDEPS-236 - Add rlwrap -m to clj for multiline editing
+
+- Update to 1.11.1.1208:
+  * TDEPS-234 - Always include -XX:-OmitStackTraceInFastThrow by default
+  * Use tools.deps 0.16.1264
+
+- Update to 1.11.1.1200:
+  * Added support in :mvn/repos map to set release and snapshot policies
+  * TDEPS-101 Output repo policies in -Spom and -X:deps mvn-pom
+  * Use tools.deps.alpha 0.15.1254
+
+- Update to 1.11.1.1189:
+  * TDEPS-233 bash script fixes from stale jar check changes
+  * Add some missing items on help and man page
+
+- Update to 1.11.1.1182:
+  * TDEPS-70 - Detect missing jar in classpath and download automatically
+  * TDEPS-232 - Add generic posix installer
+  * TDEPS-200 - Clean up default user deps.edn
+  * TDEPS-219 Fixed -X:deps find-versions doesn’t find Maven versions
+    that start with a letter
+  * Add :n option to -X:deps find-versions and default to 8
+  * During -X:deps prep, use :exec-args of alias being prepped, if present
+  * During -X:deps prep, also prep current project if needed add :current
+    flag to prep current project, default=false
+  * Fix bad invocation of deps/prep-libs! in clojure.tools.cli.api/prep
+  * Improve error message when local dep directory is missing
+  * For downstream tools, added new well-known location to look up
+    latest stable tools release
+  * Use tools.deps.alpha 0.15.1244
+
+- Update to 1.11.1.1165:
+  * TDEPS-165 Use the env var CLJ_JVM_OPTS to pass JVM properties
+    to the internal classpath building process
+  * Add support to include the common JAVA_OPTS env var as JVM
+    properties in user program execution
+
cloud-netconfig
+- Update to version 1.8:
+  + Fix Azure metadata check (bsc#1214715)
+  + Fix cleanup on ifdown
+
cmpi-bindings
-- Building with python3 starting from Leap 15.4
-- Run spec-cleaner; do not rely on py_requires
-- Linking libpython3.6m instead of libpython3.6 for Python 3.6
-  * Add 0001-Linking-libpython3.6m-instead.patch
+- Update to 1.0.4
+  - let CMake determine the Python library name
+- Update to 1.0.3
cozette-fonts
+- Update to version 1.21.0:
+  * v.1.21.0 The BQN update
+  * Added BQN glyphs + some miscellaneous glyphs
+  * v.1.20.1 Sunglasses emoji
+  * v.1.20.0 The APL update
+  * v.1.19.3 Strikethrough rendering fix
+  * v.1.19.2-hidpi2 HiDpi fixes
+  * HiDpi builds
+  * docs: Add FreeBSD port
+
+- Update to version 1.19.0:
+  * v.1.19.0 The yoshiyoshyosh update - versioning, repo meta
+  * Changes, New glyphs, etc.
+  * v.1.18.1 images
+  * v.1.18.1 Bluetooth icons
+  * Add note about dmenu
+  * v.1.18.0 Add some logical and set operators
+  * v.1.17.2 Umlaut fixes
+  * v.1.17.1
+  * Update README.md
+
cpuid
+- Update to release 20230614
+  * Improved (synth) identification for Intel Xeon Scalable (3rd
+    Gen) (Cooper Lake A0), Intel Xeon D-1700/2700 (Ice Lake-D),
+    Intel Pentium Gold 8500 series, pure Atom x7000E, Atom C1100
+    Arizona Beach.
+  * Made the (simple synth) fields non-default. The (simple synth)
+    fields still are available, but only with the -S/--simple
+    option.
+- Update to release 20230505
+  * Fixed CPU counts for higher levels
+    not dividing out counts from lower levels.
+  * Differentiate Core i3-N300 N-Series from ordinary N-Series.
+  * Added hypervisor+4/eax bit 21: use hypercalls for MMIO config
+    space I/O, based on LX*.
+  * Added (synth) decoding for Xeon W version of Sapphire Rapids,
+    Meteor Lake-M B0.
+  * Added (synth) & (uarch synth) Emerald Rapids family: Raptor
+    Cove, and Granite Rapids family: Redwood Cove.
+
+- Update to release 20230406:
+  * Support APIC bit fields for the newest 4 topology layers:
+    module, tile, die, die group.
+  * Support leaf 0xb method for AMD/Hygon.
+  * Added prelim Bergamo A1 stepping from sample.
+  * Added AMX-COMPLEX instructions, UC-lock disable,
+    non-contiguous 1s value support, event logging supported
+    bitmap.
+  * Update CPUID utility with new feature bits as documented in
+    the AMD Processor Programming Reference for Family 19h and
+    Model 11h: extended LVT offset fault cange, enhanced
+    predictive store forwarding, FSRS, FSRC,
+    FsGsKernelGsBaseNonSerializing, number of available UMC PMCs,
+    bitmask representing active UMCs.
+  * Added (synth) decoding for Sapphire Rapids D & E0 steppings
+  * Improved (synth) decoding for Scalable 3rd Gen Xeons to Ice
+    Lake-SP, for Intel N-Series, for Raptor Lake-S/HX/P, for
+    Raptor Lake-H/U/P.
+  * Differentiate (synth) & (uarch synth) for (0,6),(11,14)
+    Alder Lake-N based on core type.
+  * Differentiate Lakefield P-cores from Tremont E-cores.
+  * Added (4th Gen) to the (synth) description of AMD EPYC Genoa.
+  * Added (uarch synth) decoding for AMD Ryzen (Phoenix E0)
+  * Added PkgType decoding for AMD Family 19h CPUs: Vermeer,
+    Cezanne/Barcelo, Raphael, and Phoenix, based on their
+    respective PPPRs.
+  * Added Alder Lake Core names: i*-12000.
+  * Decode Xen tsc mode.
+
+- updated to 20230120:
+  * Intel's 13th Generation Core datasheet provides stepping names as
+    well as numbers!  So:
+  * cpuid.c: Added synth decoding for (0,6),(11,7) Raptor Lake B0 stepping.
+  * cpuid.c: Added synth decoding for (0,6),(11,15) Raptor Lake C0
+    steppings, and clarified case for unknown stepping.
+  * cpuid.man: Added 743844: 13th Generation Core datasheet.
+  * cpuid.c: Fixed (0,6)(12,15) synth typo: Emearld Rapids.
+  * cpuid.c: Added 6/eax IA32_HW_FEEDBACK_THREAD_CONFIG bit 25.
+  * cpuid.c: Added 7/0/edx SGX-KEYS: SGX attestation services.
+  * cpuid.c: Clarified 7/0/edx IA32_MCU_OPT_CTRL SRBDS mitigation MSR.
+  * cpuid.c: Clarified 7/0/edx IA32_TSX_FORCE_ABORT MSR.
+  * cpuid.c: Added 7/1/edx CET_SSS: shadow stacks w/o page faults.
+  * cpuid.c: Added several 7/2/edx bits.
+  * cpuid.c: In 0xd/0/eax, corrected CET_U & CET_S, which were IA32_XSS.
+  * cpuid.c: In 0xd/0/eax, removed the IA32_XSS bits, which aren't
+    relevant for XCR0.
+  * cpuid.c: For 0xd/1/ecx, enumerate the IA32_XSS bits instead of a
+    hex bitmask.
+  * cpuid.c: For 0xd, added IA32_XSS PASID state (couple places).
+  * cpuid.c: Renamed 0x1a: Native Model ID.
+  * cpuid.c: Added synth & uarch decoding for (0,6),(11,15) Raptor Lake
+    from MSR_CPUID_table*.
+  * cpuid.c: Added synth decoding for (0,6),(9,7),5 Pentium Gold G7400,
+    based on instlatx64 sample.
+  * cpuid.c: Added rudimentary synth decoding for future (0,6),(12,15)
+    Emerald Rapids CPUs.
+  * cpuid.c: Added 7/1/eax LASS: linear address space separation.
+  * cpuid.c: Corrected 0x18/n/edx maximum number of addressible IDs, which
+    should use minus-one notation.
+  * cpuid.c: Certain leaves cannot be displayed correctly in isolation,
+    i.e. without information about other leaves saved in the stash.  For
+    example, the display for leaf 3 uses bits saved from leaf 1.  If the
+  - l/--leaf option is used to restrict cpuid to reading only a single
+    leaf, such leaves now are displayed as raw hex, rather than with
+    incorrect information.  This is handled by passing a NULL stash to
+    print_reg() and below, and by many new checks for a NULL stash.
+  * cpuid.c: Updated cache associativity strings used in 0x80000006 and
+    0x80000019 leaves to use value ranges, as in AMD docs.
+  * cpuid.c: Fixed mistake in AMD L3 range reservation support: it's in
+    0x80000020/0 register EBX, not ECX.
+  * cpuid.c: Added 0x80000026/0/edx extended APIC ID.
+  * cpuid.c: Added synth & uarch decoding for (10,15),(1,1) Genoa, from
+    AMD 57095 revision guide.
+  * cpuid.man: Added AMD 57095 revision guides, and some older guides that
+    I'd forgotten.
+
crmsh
+- Update to version 4.5.0+20230809.ddb17a0b:
+  * Fix: userdir: Get the effictive user name instead of using getpass.getuser (bsc#1213821)
+  * Dev: requirements: remove parallax
+
cross-aarch64-gcc7
+- Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
+  with variable length stack allocations on aarch64.
+  Fixes CVE-2023-4039.  [bsc#1214052]
+- Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
+- Add gcc7-lra-elim.patch to fix internal compiler error when forming
+  paired loads and stores on aarch64.
+
+- Disable multilib and go on riscv64
+- libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
+  build with current binutils
+
+- Backport _multibuild auto-generation.  Remove redundant
+  .changes files.
+
+- Add _multibuild to define 2nd spec file as additional flavor.
+  Eliminates the need for source package links in OBS.
+
+- Add gcc7-pr89124.patch to fix KASAN kernel compile.  [bsc#1205145]
+
+- Add gcc7-pr72764.patch to fix ICE with C++17 code as reported
+  in [bsc#1204505]
+
+- Add gcc7-libsanitizer-cherry-pick-9cf13067cb5088626ba7-from-u.patch
+  and gcc7-libgo-don-t-include-linux-fs.h-when-building-gen-sys.patch
+  in order to support glibc 2.36.
+- Enable format_spec_file otherwise one gets huge diff after
+  running change_spec.
+- Remove fixed sys/mount.h.
+
+- Add patch from upstream to fix altivec.h redefining bool in C++
+  which makes bool unusable (boo#1195517):
+  * gcc7-pr78263.patch
+
+- Add gcc7-ada-Target_Name.patch to adjust gnats idea of the
+  target, fixing the build of gprbuild.  [bsc#1196861]
+
+- Remove include-fixed/sys/rseq.h to fix build on openSUSE:Factory.
+- Avoid duplicate license in cross packages.
+
-- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
-  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
-  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
-  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
-  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
-  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
-  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
-  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
-  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
-  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
-  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
-  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
-  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
-  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
-  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
-  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
-  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
-  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
-  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
-  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
-  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
-  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
-  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
+- Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch,
+  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch,
+  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch,
+  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch,
+  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch,
+  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch,
+  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch,
+  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch,
+  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch,
+  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch,
+  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch,
+  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch,
+  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch,
+  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch,
+  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch,
+  gcc7-pfe-0016-Backport-Fix-patchable-function-entry-on-arc.patch,
+  gcc7-pfe-0017-Backport-Add-patch_area_size-and-patch_area_entry-to.patch,
+  gcc7-pfe-0018-Backport-testsuite-Adjust-patchable_function-tests-f.patch,
+  gcc7-pfe-0019-Backport-Use-the-section-flag-o-for-__patchable_func.patch,
+  gcc7-pfe-0020-Backport-varasm-Fix-up-__patchable_function_entries-.patch,
+  gcc7-pfe-0021-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch,
+  and gcc7-pfe-0022-Fix-unwinding-issues-when-pfe-is-enabled.patch
cross-arm-gcc7
+- Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
+  with variable length stack allocations on aarch64.
+  Fixes CVE-2023-4039.  [bsc#1214052]
+- Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
+- Add gcc7-lra-elim.patch to fix internal compiler error when forming
+  paired loads and stores on aarch64.
+
+- Disable multilib and go on riscv64
+- libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
+  build with current binutils
+
+- Backport _multibuild auto-generation.  Remove redundant
+  .changes files.
+
+- Add _multibuild to define 2nd spec file as additional flavor.
+  Eliminates the need for source package links in OBS.
+
+- Add gcc7-pr89124.patch to fix KASAN kernel compile.  [bsc#1205145]
+
+- Add gcc7-pr72764.patch to fix ICE with C++17 code as reported
+  in [bsc#1204505]
+
+- Add gcc7-libsanitizer-cherry-pick-9cf13067cb5088626ba7-from-u.patch
+  and gcc7-libgo-don-t-include-linux-fs.h-when-building-gen-sys.patch
+  in order to support glibc 2.36.
+- Enable format_spec_file otherwise one gets huge diff after
+  running change_spec.
+- Remove fixed sys/mount.h.
+
+- Add patch from upstream to fix altivec.h redefining bool in C++
+  which makes bool unusable (boo#1195517):
+  * gcc7-pr78263.patch
+
+- Add gcc7-ada-Target_Name.patch to adjust gnats idea of the
+  target, fixing the build of gprbuild.  [bsc#1196861]
+
+- Remove include-fixed/sys/rseq.h to fix build on openSUSE:Factory.
+- Avoid duplicate license in cross packages.
+
-- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
-  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
-  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
-  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
-  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
-  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
-  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
-  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
-  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
-  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
-  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
-  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
-  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
-  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
-  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
-  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
-  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
-  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
-  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
-  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
-  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
-  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
-  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
+- Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch,
+  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch,
+  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch,
+  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch,
+  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch,
+  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch,
+  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch,
+  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch,
+  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch,
+  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch,
+  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch,
+  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch,
+  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch,
+  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch,
+  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch,
+  gcc7-pfe-0016-Backport-Fix-patchable-function-entry-on-arc.patch,
+  gcc7-pfe-0017-Backport-Add-patch_area_size-and-patch_area_entry-to.patch,
+  gcc7-pfe-0018-Backport-testsuite-Adjust-patchable_function-tests-f.patch,
+  gcc7-pfe-0019-Backport-Use-the-section-flag-o-for-__patchable_func.patch,
+  gcc7-pfe-0020-Backport-varasm-Fix-up-__patchable_function_entries-.patch,
+  gcc7-pfe-0021-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch,
+  and gcc7-pfe-0022-Fix-unwinding-issues-when-pfe-is-enabled.patch
cross-hppa-gcc7
+- Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
+  with variable length stack allocations on aarch64.
+  Fixes CVE-2023-4039.  [bsc#1214052]
+- Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
+- Add gcc7-lra-elim.patch to fix internal compiler error when forming
+  paired loads and stores on aarch64.
+
+- Disable multilib and go on riscv64
+- libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
+  build with current binutils
+
+- Backport _multibuild auto-generation.  Remove redundant
+  .changes files.
+
+- Add _multibuild to define 2nd spec file as additional flavor.
+  Eliminates the need for source package links in OBS.
+
+- Add gcc7-pr89124.patch to fix KASAN kernel compile.  [bsc#1205145]
+
+- Add gcc7-pr72764.patch to fix ICE with C++17 code as reported
+  in [bsc#1204505]
+
+- Add gcc7-libsanitizer-cherry-pick-9cf13067cb5088626ba7-from-u.patch
+  and gcc7-libgo-don-t-include-linux-fs.h-when-building-gen-sys.patch
+  in order to support glibc 2.36.
+- Enable format_spec_file otherwise one gets huge diff after
+  running change_spec.
+- Remove fixed sys/mount.h.
+
+- Add patch from upstream to fix altivec.h redefining bool in C++
+  which makes bool unusable (boo#1195517):
+  * gcc7-pr78263.patch
+
+- Add gcc7-ada-Target_Name.patch to adjust gnats idea of the
+  target, fixing the build of gprbuild.  [bsc#1196861]
+
+- Remove include-fixed/sys/rseq.h to fix build on openSUSE:Factory.
+- Avoid duplicate license in cross packages.
+
-- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
-  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
-  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
-  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
-  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
-  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
-  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
-  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
-  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
-  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
-  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
-  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
-  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
-  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
-  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
-  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
-  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
-  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
-  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
-  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
-  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
-  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
-  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
+- Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch,
+  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch,
+  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch,
+  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch,
+  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch,
+  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch,
+  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch,
+  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch,
+  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch,
+  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch,
+  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch,
+  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch,
+  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch,
+  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch,
+  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch,
+  gcc7-pfe-0016-Backport-Fix-patchable-function-entry-on-arc.patch,
+  gcc7-pfe-0017-Backport-Add-patch_area_size-and-patch_area_entry-to.patch,
+  gcc7-pfe-0018-Backport-testsuite-Adjust-patchable_function-tests-f.patch,
+  gcc7-pfe-0019-Backport-Use-the-section-flag-o-for-__patchable_func.patch,
+  gcc7-pfe-0020-Backport-varasm-Fix-up-__patchable_function_entries-.patch,
+  gcc7-pfe-0021-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch,
+  and gcc7-pfe-0022-Fix-unwinding-issues-when-pfe-is-enabled.patch
cross-i386-gcc7
+- Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
+  with variable length stack allocations on aarch64.
+  Fixes CVE-2023-4039.  [bsc#1214052]
+- Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
+- Add gcc7-lra-elim.patch to fix internal compiler error when forming
+  paired loads and stores on aarch64.
+
+- Disable multilib and go on riscv64
+- libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
+  build with current binutils
+
+- Backport _multibuild auto-generation.  Remove redundant
+  .changes files.
+
+- Add _multibuild to define 2nd spec file as additional flavor.
+  Eliminates the need for source package links in OBS.
+
+- Add gcc7-pr89124.patch to fix KASAN kernel compile.  [bsc#1205145]
+
+- Add gcc7-pr72764.patch to fix ICE with C++17 code as reported
+  in [bsc#1204505]
+
+- Add gcc7-libsanitizer-cherry-pick-9cf13067cb5088626ba7-from-u.patch
+  and gcc7-libgo-don-t-include-linux-fs.h-when-building-gen-sys.patch
+  in order to support glibc 2.36.
+- Enable format_spec_file otherwise one gets huge diff after
+  running change_spec.
+- Remove fixed sys/mount.h.
+
+- Add patch from upstream to fix altivec.h redefining bool in C++
+  which makes bool unusable (boo#1195517):
+  * gcc7-pr78263.patch
+
+- Add gcc7-ada-Target_Name.patch to adjust gnats idea of the
+  target, fixing the build of gprbuild.  [bsc#1196861]
+
+- Remove include-fixed/sys/rseq.h to fix build on openSUSE:Factory.
+- Avoid duplicate license in cross packages.
+
-- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
-  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
-  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
-  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
-  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
-  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
-  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
-  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
-  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
-  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
-  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
-  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
-  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
-  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
-  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
-  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
-  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
-  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
-  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
-  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
-  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
-  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
-  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
+- Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch,
+  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch,
+  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch,
+  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch,
+  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch,
+  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch,
+  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch,
+  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch,
+  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch,
+  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch,
+  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch,
+  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch,
+  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch,
+  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch,
+  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch,
+  gcc7-pfe-0016-Backport-Fix-patchable-function-entry-on-arc.patch,
+  gcc7-pfe-0017-Backport-Add-patch_area_size-and-patch_area_entry-to.patch,
+  gcc7-pfe-0018-Backport-testsuite-Adjust-patchable_function-tests-f.patch,
+  gcc7-pfe-0019-Backport-Use-the-section-flag-o-for-__patchable_func.patch,
+  gcc7-pfe-0020-Backport-varasm-Fix-up-__patchable_function_entries-.patch,
+  gcc7-pfe-0021-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch,
+  and gcc7-pfe-0022-Fix-unwinding-issues-when-pfe-is-enabled.patch
cross-m68k-gcc7
+- Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
+  with variable length stack allocations on aarch64.
+  Fixes CVE-2023-4039.  [bsc#1214052]
+- Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
+- Add gcc7-lra-elim.patch to fix internal compiler error when forming
+  paired loads and stores on aarch64.
+
+- Disable multilib and go on riscv64
+- libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
+  build with current binutils
+
+- Backport _multibuild auto-generation.  Remove redundant
+  .changes files.
+
+- Add _multibuild to define 2nd spec file as additional flavor.
+  Eliminates the need for source package links in OBS.
+
+- Add gcc7-pr89124.patch to fix KASAN kernel compile.  [bsc#1205145]
+
+- Add gcc7-pr72764.patch to fix ICE with C++17 code as reported
+  in [bsc#1204505]
+
+- Add gcc7-libsanitizer-cherry-pick-9cf13067cb5088626ba7-from-u.patch
+  and gcc7-libgo-don-t-include-linux-fs.h-when-building-gen-sys.patch
+  in order to support glibc 2.36.
+- Enable format_spec_file otherwise one gets huge diff after
+  running change_spec.
+- Remove fixed sys/mount.h.
+
+- Add patch from upstream to fix altivec.h redefining bool in C++
+  which makes bool unusable (boo#1195517):
+  * gcc7-pr78263.patch
+
+- Add gcc7-ada-Target_Name.patch to adjust gnats idea of the
+  target, fixing the build of gprbuild.  [bsc#1196861]
+
+- Remove include-fixed/sys/rseq.h to fix build on openSUSE:Factory.
+- Avoid duplicate license in cross packages.
+
-- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
-  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
-  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
-  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
-  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
-  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
-  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
-  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
-  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
-  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
-  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
-  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
-  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
-  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
-  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
-  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
-  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
-  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
-  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
-  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
-  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
-  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
-  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
+- Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch,
+  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch,
+  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch,
+  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch,
+  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch,
+  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch,
+  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch,
+  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch,
+  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch,
+  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch,
+  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch,
+  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch,
+  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch,
+  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch,
+  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch,
+  gcc7-pfe-0016-Backport-Fix-patchable-function-entry-on-arc.patch,
+  gcc7-pfe-0017-Backport-Add-patch_area_size-and-patch_area_entry-to.patch,
+  gcc7-pfe-0018-Backport-testsuite-Adjust-patchable_function-tests-f.patch,
+  gcc7-pfe-0019-Backport-Use-the-section-flag-o-for-__patchable_func.patch,
+  gcc7-pfe-0020-Backport-varasm-Fix-up-__patchable_function_entries-.patch,
+  gcc7-pfe-0021-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch,
+  and gcc7-pfe-0022-Fix-unwinding-issues-when-pfe-is-enabled.patch
cross-mips-gcc7
+- Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
+  with variable length stack allocations on aarch64.
+  Fixes CVE-2023-4039.  [bsc#1214052]
+- Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
+- Add gcc7-lra-elim.patch to fix internal compiler error when forming
+  paired loads and stores on aarch64.
+
+- Disable multilib and go on riscv64
+- libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
+  build with current binutils
+
+- Backport _multibuild auto-generation.  Remove redundant
+  .changes files.
+
+- Add _multibuild to define 2nd spec file as additional flavor.
+  Eliminates the need for source package links in OBS.
+
+- Add gcc7-pr89124.patch to fix KASAN kernel compile.  [bsc#1205145]
+
+- Add gcc7-pr72764.patch to fix ICE with C++17 code as reported
+  in [bsc#1204505]
+
+- Add gcc7-libsanitizer-cherry-pick-9cf13067cb5088626ba7-from-u.patch
+  and gcc7-libgo-don-t-include-linux-fs.h-when-building-gen-sys.patch
+  in order to support glibc 2.36.
+- Enable format_spec_file otherwise one gets huge diff after
+  running change_spec.
+- Remove fixed sys/mount.h.
+
+- Add patch from upstream to fix altivec.h redefining bool in C++
+  which makes bool unusable (boo#1195517):
+  * gcc7-pr78263.patch
+
+- Add gcc7-ada-Target_Name.patch to adjust gnats idea of the
+  target, fixing the build of gprbuild.  [bsc#1196861]
+
+- Remove include-fixed/sys/rseq.h to fix build on openSUSE:Factory.
+- Avoid duplicate license in cross packages.
+
-- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
-  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
-  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
-  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
-  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
-  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
-  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
-  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
-  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
-  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
-  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
-  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
-  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
-  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
-  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
-  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
-  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
-  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
-  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
-  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
-  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
-  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
-  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
+- Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch,
+  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch,
+  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch,
+  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch,
+  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch,
+  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch,
+  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch,
+  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch,
+  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch,
+  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch,
+  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch,
+  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch,
+  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch,
+  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch,
+  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch,
+  gcc7-pfe-0016-Backport-Fix-patchable-function-entry-on-arc.patch,
+  gcc7-pfe-0017-Backport-Add-patch_area_size-and-patch_area_entry-to.patch,
+  gcc7-pfe-0018-Backport-testsuite-Adjust-patchable_function-tests-f.patch,
+  gcc7-pfe-0019-Backport-Use-the-section-flag-o-for-__patchable_func.patch,
+  gcc7-pfe-0020-Backport-varasm-Fix-up-__patchable_function_entries-.patch,
+  gcc7-pfe-0021-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch,
+  and gcc7-pfe-0022-Fix-unwinding-issues-when-pfe-is-enabled.patch
cross-nvptx-gcc7
+- Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
+  with variable length stack allocations on aarch64.
+  Fixes CVE-2023-4039.  [bsc#1214052]
+- Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
+- Add gcc7-lra-elim.patch to fix internal compiler error when forming
+  paired loads and stores on aarch64.
+
+- Disable multilib and go on riscv64
+- libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
+  build with current binutils
+
+- Backport _multibuild auto-generation.  Remove redundant
+  .changes files.
+
+- Add _multibuild to define 2nd spec file as additional flavor.
+  Eliminates the need for source package links in OBS.
+
+- Add gcc7-pr89124.patch to fix KASAN kernel compile.  [bsc#1205145]
+
+- Add gcc7-pr72764.patch to fix ICE with C++17 code as reported
+  in [bsc#1204505]
+
+- Add gcc7-libsanitizer-cherry-pick-9cf13067cb5088626ba7-from-u.patch
+  and gcc7-libgo-don-t-include-linux-fs.h-when-building-gen-sys.patch
+  in order to support glibc 2.36.
+- Enable format_spec_file otherwise one gets huge diff after
+  running change_spec.
+- Remove fixed sys/mount.h.
+
+- Add patch from upstream to fix altivec.h redefining bool in C++
+  which makes bool unusable (boo#1195517):
+  * gcc7-pr78263.patch
+
+- Add gcc7-ada-Target_Name.patch to adjust gnats idea of the
+  target, fixing the build of gprbuild.  [bsc#1196861]
+
+- Remove include-fixed/sys/rseq.h to fix build on openSUSE:Factory.
+- Avoid duplicate license in cross packages.
+
-- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
-  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
-  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
-  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
-  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
-  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
-  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
-  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
-  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
-  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
-  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
-  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
-  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
-  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
-  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
-  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
-  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
-  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
-  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
-  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
-  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
-  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
-  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
+- Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch,
+  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch,
+  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch,
+  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch,
+  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch,
+  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch,
+  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch,
+  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch,
+  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch,
+  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch,
+  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch,
+  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch,
+  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch,
+  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch,
+  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch,
+  gcc7-pfe-0016-Backport-Fix-patchable-function-entry-on-arc.patch,
+  gcc7-pfe-0017-Backport-Add-patch_area_size-and-patch_area_entry-to.patch,
+  gcc7-pfe-0018-Backport-testsuite-Adjust-patchable_function-tests-f.patch,
+  gcc7-pfe-0019-Backport-Use-the-section-flag-o-for-__patchable_func.patch,
+  gcc7-pfe-0020-Backport-varasm-Fix-up-__patchable_function_entries-.patch,
+  gcc7-pfe-0021-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch,
+  and gcc7-pfe-0022-Fix-unwinding-issues-when-pfe-is-enabled.patch
cross-ppc64-gcc7
+- Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
+  with variable length stack allocations on aarch64.
+  Fixes CVE-2023-4039.  [bsc#1214052]
+- Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
+- Add gcc7-lra-elim.patch to fix internal compiler error when forming
+  paired loads and stores on aarch64.
+
+- Disable multilib and go on riscv64
+- libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
+  build with current binutils
+
+- Backport _multibuild auto-generation.  Remove redundant
+  .changes files.
+
+- Add _multibuild to define 2nd spec file as additional flavor.
+  Eliminates the need for source package links in OBS.
+
+- Add gcc7-pr89124.patch to fix KASAN kernel compile.  [bsc#1205145]
+
+- Add gcc7-pr72764.patch to fix ICE with C++17 code as reported
+  in [bsc#1204505]
+
+- Add gcc7-libsanitizer-cherry-pick-9cf13067cb5088626ba7-from-u.patch
+  and gcc7-libgo-don-t-include-linux-fs.h-when-building-gen-sys.patch
+  in order to support glibc 2.36.
+- Enable format_spec_file otherwise one gets huge diff after
+  running change_spec.
+- Remove fixed sys/mount.h.
+
+- Add patch from upstream to fix altivec.h redefining bool in C++
+  which makes bool unusable (boo#1195517):
+  * gcc7-pr78263.patch
+
+- Add gcc7-ada-Target_Name.patch to adjust gnats idea of the
+  target, fixing the build of gprbuild.  [bsc#1196861]
+
+- Remove include-fixed/sys/rseq.h to fix build on openSUSE:Factory.
+- Avoid duplicate license in cross packages.
+
-- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
-  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
-  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
-  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
-  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
-  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
-  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
-  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
-  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
-  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
-  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
-  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
-  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
-  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
-  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
-  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
-  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
-  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
-  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
-  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
-  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
-  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
-  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
+- Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch,
+  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch,
+  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch,
+  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch,
+  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch,
+  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch,
+  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch,
+  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch,
+  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch,
+  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch,
+  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch,
+  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch,
+  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch,
+  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch,
+  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch,
+  gcc7-pfe-0016-Backport-Fix-patchable-function-entry-on-arc.patch,
+  gcc7-pfe-0017-Backport-Add-patch_area_size-and-patch_area_entry-to.patch,
+  gcc7-pfe-0018-Backport-testsuite-Adjust-patchable_function-tests-f.patch,
+  gcc7-pfe-0019-Backport-Use-the-section-flag-o-for-__patchable_func.patch,
+  gcc7-pfe-0020-Backport-varasm-Fix-up-__patchable_function_entries-.patch,
+  gcc7-pfe-0021-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch,
+  and gcc7-pfe-0022-Fix-unwinding-issues-when-pfe-is-enabled.patch
cross-ppc64le-gcc7
+- Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
+  with variable length stack allocations on aarch64.
+  Fixes CVE-2023-4039.  [bsc#1214052]
+- Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
+- Add gcc7-lra-elim.patch to fix internal compiler error when forming
+  paired loads and stores on aarch64.
+
+- Disable multilib and go on riscv64
+- libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
+  build with current binutils
+
+- Backport _multibuild auto-generation.  Remove redundant
+  .changes files.
+
+- Add _multibuild to define 2nd spec file as additional flavor.
+  Eliminates the need for source package links in OBS.
+
+- Add gcc7-pr89124.patch to fix KASAN kernel compile.  [bsc#1205145]
+
+- Add gcc7-pr72764.patch to fix ICE with C++17 code as reported
+  in [bsc#1204505]
+
+- Add gcc7-libsanitizer-cherry-pick-9cf13067cb5088626ba7-from-u.patch
+  and gcc7-libgo-don-t-include-linux-fs.h-when-building-gen-sys.patch
+  in order to support glibc 2.36.
+- Enable format_spec_file otherwise one gets huge diff after
+  running change_spec.
+- Remove fixed sys/mount.h.
+
+- Add patch from upstream to fix altivec.h redefining bool in C++
+  which makes bool unusable (boo#1195517):
+  * gcc7-pr78263.patch
+
+- Add gcc7-ada-Target_Name.patch to adjust gnats idea of the
+  target, fixing the build of gprbuild.  [bsc#1196861]
+
+- Remove include-fixed/sys/rseq.h to fix build on openSUSE:Factory.
+- Avoid duplicate license in cross packages.
+
-- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
-  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
-  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
-  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
-  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
-  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
-  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
-  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
-  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
-  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
-  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
-  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
-  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
-  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
-  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
-  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
-  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
-  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
-  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
-  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
-  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
-  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
-  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
+- Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch,
+  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch,
+  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch,
+  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch,
+  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch,
+  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch,
+  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch,
+  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch,
+  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch,
+  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch,
+  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch,
+  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch,
+  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch,
+  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch,
+  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch,
+  gcc7-pfe-0016-Backport-Fix-patchable-function-entry-on-arc.patch,
+  gcc7-pfe-0017-Backport-Add-patch_area_size-and-patch_area_entry-to.patch,
+  gcc7-pfe-0018-Backport-testsuite-Adjust-patchable_function-tests-f.patch,
+  gcc7-pfe-0019-Backport-Use-the-section-flag-o-for-__patchable_func.patch,
+  gcc7-pfe-0020-Backport-varasm-Fix-up-__patchable_function_entries-.patch,
+  gcc7-pfe-0021-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch,
+  and gcc7-pfe-0022-Fix-unwinding-issues-when-pfe-is-enabled.patch
cross-s390x-gcc7
+- Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
+  with variable length stack allocations on aarch64.
+  Fixes CVE-2023-4039.  [bsc#1214052]
+- Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
+- Add gcc7-lra-elim.patch to fix internal compiler error when forming
+  paired loads and stores on aarch64.
+
+- Disable multilib and go on riscv64
+- libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
+  build with current binutils
+
+- Backport _multibuild auto-generation.  Remove redundant
+  .changes files.
+
+- Add _multibuild to define 2nd spec file as additional flavor.
+  Eliminates the need for source package links in OBS.
+
+- Add gcc7-pr89124.patch to fix KASAN kernel compile.  [bsc#1205145]
+
+- Add gcc7-pr72764.patch to fix ICE with C++17 code as reported
+  in [bsc#1204505]
+
+- Add gcc7-libsanitizer-cherry-pick-9cf13067cb5088626ba7-from-u.patch
+  and gcc7-libgo-don-t-include-linux-fs.h-when-building-gen-sys.patch
+  in order to support glibc 2.36.
+- Enable format_spec_file otherwise one gets huge diff after
+  running change_spec.
+- Remove fixed sys/mount.h.
+
+- Add patch from upstream to fix altivec.h redefining bool in C++
+  which makes bool unusable (boo#1195517):
+  * gcc7-pr78263.patch
+
+- Add gcc7-ada-Target_Name.patch to adjust gnats idea of the
+  target, fixing the build of gprbuild.  [bsc#1196861]
+
+- Remove include-fixed/sys/rseq.h to fix build on openSUSE:Factory.
+- Avoid duplicate license in cross packages.
+
-- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
-  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
-  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
-  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
-  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
-  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
-  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
-  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
-  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
-  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
-  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
-  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
-  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
-  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
-  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
-  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
-  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
-  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
-  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
-  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
-  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
-  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
-  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
+- Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch,
+  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch,
+  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch,
+  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch,
+  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch,
+  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch,
+  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch,
+  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch,
+  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch,
+  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch,
+  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch,
+  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch,
+  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch,
+  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch,
+  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch,
+  gcc7-pfe-0016-Backport-Fix-patchable-function-entry-on-arc.patch,
+  gcc7-pfe-0017-Backport-Add-patch_area_size-and-patch_area_entry-to.patch,
+  gcc7-pfe-0018-Backport-testsuite-Adjust-patchable_function-tests-f.patch,
+  gcc7-pfe-0019-Backport-Use-the-section-flag-o-for-__patchable_func.patch,
+  gcc7-pfe-0020-Backport-varasm-Fix-up-__patchable_function_entries-.patch,
+  gcc7-pfe-0021-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch,
+  and gcc7-pfe-0022-Fix-unwinding-issues-when-pfe-is-enabled.patch
cross-sparc-gcc7
+- Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
+  with variable length stack allocations on aarch64.
+  Fixes CVE-2023-4039.  [bsc#1214052]
+- Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
+- Add gcc7-lra-elim.patch to fix internal compiler error when forming
+  paired loads and stores on aarch64.
+
+- Disable multilib and go on riscv64
+- libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
+  build with current binutils
+
+- Backport _multibuild auto-generation.  Remove redundant
+  .changes files.
+
+- Add _multibuild to define 2nd spec file as additional flavor.
+  Eliminates the need for source package links in OBS.
+
+- Add gcc7-pr89124.patch to fix KASAN kernel compile.  [bsc#1205145]
+
+- Add gcc7-pr72764.patch to fix ICE with C++17 code as reported
+  in [bsc#1204505]
+
+- Add gcc7-libsanitizer-cherry-pick-9cf13067cb5088626ba7-from-u.patch
+  and gcc7-libgo-don-t-include-linux-fs.h-when-building-gen-sys.patch
+  in order to support glibc 2.36.
+- Enable format_spec_file otherwise one gets huge diff after
+  running change_spec.
+- Remove fixed sys/mount.h.
+
+- Add patch from upstream to fix altivec.h redefining bool in C++
+  which makes bool unusable (boo#1195517):
+  * gcc7-pr78263.patch
+
+- Add gcc7-ada-Target_Name.patch to adjust gnats idea of the
+  target, fixing the build of gprbuild.  [bsc#1196861]
+
+- Remove include-fixed/sys/rseq.h to fix build on openSUSE:Factory.
+- Avoid duplicate license in cross packages.
+
-- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
-  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
-  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
-  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
-  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
-  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
-  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
-  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
-  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
-  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
-  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
-  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
-  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
-  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
-  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
-  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
-  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
-  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
-  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
-  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
-  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
-  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
-  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
+- Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch,
+  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch,
+  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch,
+  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch,
+  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch,
+  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch,
+  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch,
+  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch,
+  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch,
+  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch,
+  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch,
+  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch,
+  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch,
+  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch,
+  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch,
+  gcc7-pfe-0016-Backport-Fix-patchable-function-entry-on-arc.patch,
+  gcc7-pfe-0017-Backport-Add-patch_area_size-and-patch_area_entry-to.patch,
+  gcc7-pfe-0018-Backport-testsuite-Adjust-patchable_function-tests-f.patch,
+  gcc7-pfe-0019-Backport-Use-the-section-flag-o-for-__patchable_func.patch,
+  gcc7-pfe-0020-Backport-varasm-Fix-up-__patchable_function_entries-.patch,
+  gcc7-pfe-0021-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch,
+  and gcc7-pfe-0022-Fix-unwinding-issues-when-pfe-is-enabled.patch
cross-sparc64-gcc7
+- Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
+  with variable length stack allocations on aarch64.
+  Fixes CVE-2023-4039.  [bsc#1214052]
+- Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
+- Add gcc7-lra-elim.patch to fix internal compiler error when forming
+  paired loads and stores on aarch64.
+
+- Disable multilib and go on riscv64
+- libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
+  build with current binutils
+
+- Backport _multibuild auto-generation.  Remove redundant
+  .changes files.
+
+- Add _multibuild to define 2nd spec file as additional flavor.
+  Eliminates the need for source package links in OBS.
+
+- Add gcc7-pr89124.patch to fix KASAN kernel compile.  [bsc#1205145]
+
+- Add gcc7-pr72764.patch to fix ICE with C++17 code as reported
+  in [bsc#1204505]
+
+- Add gcc7-libsanitizer-cherry-pick-9cf13067cb5088626ba7-from-u.patch
+  and gcc7-libgo-don-t-include-linux-fs.h-when-building-gen-sys.patch
+  in order to support glibc 2.36.
+- Enable format_spec_file otherwise one gets huge diff after
+  running change_spec.
+- Remove fixed sys/mount.h.
+
+- Add patch from upstream to fix altivec.h redefining bool in C++
+  which makes bool unusable (boo#1195517):
+  * gcc7-pr78263.patch
+
+- Add gcc7-ada-Target_Name.patch to adjust gnats idea of the
+  target, fixing the build of gprbuild.  [bsc#1196861]
+
+- Remove include-fixed/sys/rseq.h to fix build on openSUSE:Factory.
+- Avoid duplicate license in cross packages.
+
-- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
-  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
-  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
-  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
-  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
-  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
-  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
-  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
-  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
-  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
-  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
-  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
-  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
-  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
-  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
-  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
-  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
-  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
-  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
-  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
-  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
-  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
-  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
+- Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch,
+  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch,
+  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch,
+  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch,
+  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch,
+  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch,
+  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch,
+  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch,
+  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch,
+  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch,
+  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch,
+  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch,
+  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch,
+  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch,
+  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch,
+  gcc7-pfe-0016-Backport-Fix-patchable-function-entry-on-arc.patch,
+  gcc7-pfe-0017-Backport-Add-patch_area_size-and-patch_area_entry-to.patch,
+  gcc7-pfe-0018-Backport-testsuite-Adjust-patchable_function-tests-f.patch,
+  gcc7-pfe-0019-Backport-Use-the-section-flag-o-for-__patchable_func.patch,
+  gcc7-pfe-0020-Backport-varasm-Fix-up-__patchable_function_entries-.patch,
+  gcc7-pfe-0021-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch,
+  and gcc7-pfe-0022-Fix-unwinding-issues-when-pfe-is-enabled.patch
cross-x86_64-gcc7
+- Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
+  with variable length stack allocations on aarch64.
+  Fixes CVE-2023-4039.  [bsc#1214052]
+- Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
+- Add gcc7-lra-elim.patch to fix internal compiler error when forming
+  paired loads and stores on aarch64.
+
+- Disable multilib and go on riscv64
+- libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
+  build with current binutils
+
+- Backport _multibuild auto-generation.  Remove redundant
+  .changes files.
+
+- Add _multibuild to define 2nd spec file as additional flavor.
+  Eliminates the need for source package links in OBS.
+
+- Add gcc7-pr89124.patch to fix KASAN kernel compile.  [bsc#1205145]
+
+- Add gcc7-pr72764.patch to fix ICE with C++17 code as reported
+  in [bsc#1204505]
+
+- Add gcc7-libsanitizer-cherry-pick-9cf13067cb5088626ba7-from-u.patch
+  and gcc7-libgo-don-t-include-linux-fs.h-when-building-gen-sys.patch
+  in order to support glibc 2.36.
+- Enable format_spec_file otherwise one gets huge diff after
+  running change_spec.
+- Remove fixed sys/mount.h.
+
+- Add patch from upstream to fix altivec.h redefining bool in C++
+  which makes bool unusable (boo#1195517):
+  * gcc7-pr78263.patch
+
+- Add gcc7-ada-Target_Name.patch to adjust gnats idea of the
+  target, fixing the build of gprbuild.  [bsc#1196861]
+
+- Remove include-fixed/sys/rseq.h to fix build on openSUSE:Factory.
+- Avoid duplicate license in cross packages.
+
-- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
-  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
-  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
-  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
-  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
-  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
-  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
-  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
-  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
-  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
-  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
-  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
-  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
-  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
-  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
-  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
-  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
-  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
-  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
-  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
-  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
-  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
-  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
+- Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch,
+  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch,
+  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch,
+  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch,
+  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch,
+  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch,
+  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch,
+  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch,
+  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch,
+  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch,
+  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch,
+  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch,
+  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch,
+  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch,
+  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch,
+  gcc7-pfe-0016-Backport-Fix-patchable-function-entry-on-arc.patch,
+  gcc7-pfe-0017-Backport-Add-patch_area_size-and-patch_area_entry-to.patch,
+  gcc7-pfe-0018-Backport-testsuite-Adjust-patchable_function-tests-f.patch,
+  gcc7-pfe-0019-Backport-Use-the-section-flag-o-for-__patchable_func.patch,
+  gcc7-pfe-0020-Backport-varasm-Fix-up-__patchable_function_entries-.patch,
+  gcc7-pfe-0021-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch,
+  and gcc7-pfe-0022-Fix-unwinding-issues-when-pfe-is-enabled.patch
crun
+- Update to 1.8.6:
+  * crun: new command "crun features".
+  * linux: fix handling of idmapped mounts when the container joins an
+    existing PID namespace.
+  * linux: support io_priority from the OCI specs.
+  * linux: handle correctly the case where the status file is not written
+    yet for a container.
+  * crun: fix segfault for "ps" when the container is not using cgroups.
+  * cgroup: allow setting swap to 0.
+
+- Update to 1.8.5:
+  * scheduler: use definition from the OCI configuration file
+    instead of the custom label that is now dropped and not
+    supported anymore.
+  * cgroup: fix creating cgroup under "domain threaded".
+  * cgroup, systemd: set the memory limit on the system scope.
+  * restore tty settings from the correct file descriptor.  It was
+    previously restoring the settings from the wrong file
+    descriptor causing the tty settings  to be changed on the
+    calling terminal.
+  * criu: check if the criu_join_ns_add function exists.
+    Fix a segfault with new versions of CRIU.
+  * linux: do not precreate devs with euid > 0.  Fix creating
+    devices when running the OCI runtime as non root user.
+  * linux: improve PID detection on systems that lack pidfd.
+    While there is still a window of time that the PID could be
+    recycled, now it is now reduced to a minimum.
+  * criu: fix memory leak.
+  * logging: improve error message when dlopen fails.
+- Changes from 1.8.4:
+  * drop custom annotation to set the time namespace and use
+    the OCI specs instead.
+  * cgroup: workaround cpu quota/period issue with v1.  Sometimes
+    setting CPU quota period fails when a new period is lower,
+    and a parent cgroup has CPU quota limit set.
+  * cgroup: fix set quota to -1 on cgroup v1.
+  * criu: drop loading unused functions.
+
+- update to 1.8.3:
+  * update: initialize the rt limits only on cgroup v1.
+  * lua bindings for libcrun.
+  * wasmedge: add current directory to preopen paths.
+  * linux: inherit parent mount flags when making a path masked.
+  * libcrun: custom annotation to set the scheduler for the
+    container process.
+  * cgroup: fallback to blkio.bfq files if blkio is not available
+    on cgroup v1.
+  * cgroup: initialize rt limits when using systemd.
+  * tty: chown the tty to the exec user instead of the user
+    specified to create the container.
+  * cgroup: fallback to create cgroupfs as sibling of the current
+    cgroup if there is none specified and it cannot be created in
+    the root cgroup.
+- add keyring for GPG validation
+
+- Update to 1.8.1
+  * linux: idmapped mounts expect the same configuration as
+    the user namespace mappings. Before they were expecting the inverted
+    mapping. It is a breaking change, but the behavior was aligned
+    to what runc will do as well.
+  * krun: always allow /dev/kvm in the cgroup configuration.
+  * handlers: disable exec for handlers that do not support it.
+  * selinux: allow setting fscontext using a custom annotation.
+  * cgroup: reset systemd unit if start fails.
+  * cgroup: rmdir the entire systemd scope. It fixes a leak on cgroupv1.
+  * cgroup: always delete the cgroup on errors.
+    On some errors it could have been leaked before.
+- changes from 1.8
+  * linux: precreate devices on the host.
+  * cgroup: support cpuset mounted with noprefix.
+  * linux: mount the source cgroup if cgroupns=host.
+  * libcrun: don't clone self from read-only mount.
+  * build: fix build without dlfcn.h.
+  * linux: set PR_SET_DUMPABLE.
+  * utils: fix applying AppArmor profile.
+  * linux: write setgroups=deny when mapping a single uid/gid.
+  * cgroup: fix enter cgroupv1 mount on RHEL 7.
+
+- Update to 1.7.2:
+  * criu: hardcode library name to libcriu.so.2.
+  * cgroup: always enable all controllers, even if the cgroup was
+    already joined. Regression caused by crun-1.7.
+- Changes from 1.7.1:
+  * criu: load libcriu dynamically.
+  * seccomp: initialize libgcrypt.
+  * handlers: fix rewriting the argv if the full cmdline doesn't
+    fit.
+  * utils: honor SELinux label when using a custom handler.
+  * utils: honor AppArmor label when using a custom handler.
+  * krun: copy the OCI configuration file into the container.
+  * utils: fix creating the default user namespace when running
+    with euid != 0.
+  * Add setlinebuf() when --debug and --log=file: are used.
+  * Fix timestamp format in the error messages.
+  * krun: disable libkrun's collection of env vars.
+- Changes from 1.7:
+  * seccomp: use a cache for the generated BPF.
+  * add support for setting the domainname through the OCI spec.
+  * handlers: define wasm and krun.
+  * wasmtime: add support for compiling .wat format.
+  * cgroup: honor checkBeforeUpdate on cgroupv2.
+  * crun: chown std streams before joining the user namespace.
+  * crun: display rundir in --version output.
+  * container: with cgroupfs use clone3 to join directly the target
+    cgroup.
+  * linux: create parent directories for created devices with mode
+    0755.
+  * wasm: inherit environment variables in the WasmEdge handler.
+
+- Update the libkrun dependency to the new libkrun1 library and
+  devel package
+
cups
+- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
+  "CUPS PostScript Parsing Heap Overflow"
+  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
+  bsc#1215204
+
+- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
+  "Information leak through Cups-Get-Document operation"
+  by requiring authentication for CUPS-Get-Document in cupsd.conf
+  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
+  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
+  bsc#1214254
+- cups-2.2.7-additional_policies.patch is an updated version
+  of cups-2.0.3-additional_policies.patch that replaces it
+  to add the 'allowallforanybody' policy to cupsd.conf
+  after cups-2.2.7-CVE-2023-32360.patch was applied
+
d0_blind_id
+- Update to version 0.8.6
+
+- Spec file cleanup
+- Use obs_scm service
+
+- Update to version 0.8.5:
+  * Update for Xonotic 0.8.5
+  * Using modern secure function to clear memory when available.
+  * Fixed version-info.
+  * main.c: missing va_end(ap).
+  * Bump version for internal changes only in this release.
+  * Fix some REALLY stupid typos in the fastreject RSA key generation.
+
-- Inital version
-
dar
+- Update to 2.7.10:
+  * displaying the slicing information about the archive of reference
+    stored within a isolated catalogue when using -l and -q options
+  * cleanup code from obsolete and unused readdir_r invocation
+  * fixing display bug in dar_manager (shell_interaction class of libdar)
+  * fixing python binding build system with John Goerzen's proposal
+  * replacing the deprecated PYBIND11_OVERLOAD_* by PYBIND11_OVERRIDE_*
+    equivalents
+
+- update to 2.7.9:
+  * added sanity check in elastic buffer code upon Sviat89@github
+  feedback.
+  * fixed bug in block_compressor module found by sviat89 while reading
+  the code. Seen its context, it does not seem however to have much
+  chance to express and would lead dar/libdar to loop forever
+  consuming CPU.
+  * adding the misc/dar_static_builder_with_musl_voidlinux.bash script
+  which automatically builds dar_static from source code under
+  VoidLinux/musl
+  * fixing bug concerning the restoration in sequential read mode of a
+  backup containing binary patches
+  * fixed bug in tuyau_global class that lead to seeking at a wrong
+  in sequential read mode and the unability to properly rely on a
+  isolated catalogue to read (test/extract/diff) an backup in sequential
+  read mode, leading dar to report CRC error.
+
dds2tar
+- Spec file modernisation
+
-- fixed neededforbuild
-
debhelper
+- fix initialization of state variables problem (bsc#1215078)
+  added debhelper-fix-perl-version-requirement.patch
+
+- update to 13.11.5:
+  * Update Portuguese translation (Américo Monteiro)
+    (Closes: #1028159)
+  * Update on German translation of pages (Closes: #1028564)
+  * Fix minor typo in DEB_BUILD_OPTIONS warning ("and but not" -> "but not")
+  * AddonAPI.pm: Correct method name in error message.
+    Thanks to wferi@Github
+  * dh_missing: Update link to PROGRAMMING.md.gz
+  * cmake.pm: set -DBUILD_TESTING=OFF for nocheck builds
+  * autoscripts/postinst-init-tmpfiles: do not output to /dev/null to not hide error messages
+  * cmake.pm, meson.pm: Set DEB_PYTHON_INSTALL_LAYOUT=deb if not already set
+    (Closes: #1043136)
+  * buildsystems: Give XDG_RUNTIME_DIR spec-compliant u=rwx,og-rwx permissions
+  * meson.pm: Disable Python byte-compilation if the Meson version is new enough
+    (Closes: #1042398)
+
dfc
+- Update project and download url
+
-- Initial rpm release (version 3.0.1).
-
diff-pdf
+- Pre-create diff-pdf.1 with help2man to work around GTK+ DISPLAY
+  errors (boo#1180471)
+
digikam
+- Update to 8.1.0:
+  https://www.digikam.org/news/2023-07-09-8.1.0_release_announcement/
+- Drop patch, merged upstream:
+  * 0001-fix-broken-compilation-with-Exiv2-0.28-missing-heade.patch
+
+- Add patch:
+  * 0001-fix-broken-compilation-with-Exiv2-0.28-missing-heade.patch
+
+- Add the sonnet build dependency (boo#1210689)
+
+- Explicitly disable buildtime detected CPU features as a workaround
+  for kde#465548 (boo#1210569)
+
+- Update to 8.0.0:
+  https://www.digikam.org/news/2023-04-16-8.0.0_release_announcement/
+- Drop patch, merged upstream:
+  * 0001-fix-compile-DNG-SDK-with-GCC13.patch
+
+- Add upstream change:
+  * 0001-fix-compile-DNG-SDK-with-GCC13.patch
+
+- Update to 7.10.0:
+  * https://www.digikam.org/news/2023-03-13-7.10.0_release_announcement/
+- Drop patch, no longer needed:
+  * 0001-Revert-Exiv2-is-now-released-with-exported-targets-u.patch
+
direnv
+- update to 2.32.3:
+  * fix: stat the already open rc file rather than another path based one on it (#1044)
+  * fix: remove deprecated io/ioutil uses (#1042)
+  * fix: spelling fixes (#1041)
+  * fix: appease Go 1.19 gofmt (#1040)
+  * fix: stdlib: use_guix: Switch to guix shell. (#1045)
+  * fix: pass BASH_PATH to make, matches the nixpkgs derivation (#1006)
+  * fix: stdlib/layout_python: exclude patchlevel from $python_version (#1033)
+  * fix: incorrect escape sequences during Loads under git-bash (Windows) (#1085)
+  * fix: skip some tests for IBM Z mainframe's z/OS operating system (#1094)
+  * doc: add Windows installation with winget (#1096)
+  * doc: link 12factor webpage for more clarity (#1095)
+  * website: add Plausible analytics
+
distrobox
+- Update to version 1.5.0.2:
+  * Fix typo in instructions for setting podman-host path
+  * Fix user initialization for ubuntu 23.04
+  * Compatibility: add openEULER and Linux Mint containers
+  * Fix docker minimum version to 19.03.15.
+  * Better container detection in host-exec
+  * fix host file sync when unsharing network
+- Changes from version 1.5.0.1:
+  * Fix bashism in assemble.
+  * Revert to using distrobox-enter for upgrade.
+  * Fix bug in init_readlink with relative paths in init.
+  * Improve dry-run output to show a flag for each line in enter/create.
+
+- Update to version 1.5.0:
+  * additional-packages flag in create, to directly add packages during init
+  * NVidia GPU Support for containers: distrobox will attempt to share host's drivers with the container
+  * New distrobox-assemble command lets you declare your distroboxes-as-code, in an easy config file
+  * Now, removing a distrobox will un-export apps and binaries exported by it
+  * Init is now more flexible in how it adds packages, allowing for greater compatibility
+  * Init now supports systemd containers using --additional-packages systemd during creation
+  * General reliability improvements, lots of bug fixes and QoL
+
+- Remove container_image from .conf, obsoleted by
+  container_image_default
+- use official distrobox:latest container instead of vanilla
+  tumbleweed to speedup start times, still call it tumbleweed
+  because it is
+
docker-buildx
+- Update to version 0.11.2:
+  * vendor: github.com/moby/buildkit
+    v0.12.1-0.20230717122532-faa0cc7da353
+  * vendor: github.com/tonistiigi/fsutil
+    v0.0.0-20230629203738-36ef4d8c0dbb
+  * vendor: github.com/xeipuuv/gojsonpointer
+    v0.0.0-20190905194746-02993c407bfb
+  * tests: set a dedicated buildx config dir for each worker
+  * ci: run docker-container tests in parallel
+  * tests: share single docker between docker-container backends
+  * vendor: update buildkit to master@2d91ddcceedc
+  * k8s: fix missing kubeconfig check from endpoint
+  * build: mark result handle build as internal
+  * util/imagetools: remove unused Resolver.ImageConfig
+  * hack(generated-files): bump golang image to bookworm
+  * update go to 1.20.6
+  * hack: force go version to 1.20.5
+  * vendor: github.com/docker/docker@24.0 36e9e79
+
+- fix wrong version output by using the git tag as the commit hash
+- Update to version 0.11.1:
+  * Revert "bake: fix incorrect dockerfile resolution against
+    cwd:// context"
+  * vendor: update tonistiigi/vt100 to master@f9a4f7ef6531
+  * build: fix host-gateway handling
+  * docs: update generated content
+  * vendor: update cli-docs-tool to 0.6.0
+  * test: build details output
+  * build: missing newline when printing build details on error
+  * dockerfile: update docker to 24.0.2
+  * controller: include CgroupParent in build.Options
+  * bake: ignore profiles in compose definitions
+  * chore: make docs
+  * docs: set experimental annotation
+  * builder: skip name validation for docker context
+  * bake: fix incorrect dockerfile resolution against cwd://
+    context
+
+- Move /usr/lib/docker and /usr/lib/docker/cli-plugins to the main docker
+  package, where it belongs.
+- Bump Go requirement to 1.20 to match upstream.
+
+- Update to version 0.11.0:
+  * dockerutil: cache feature collection
+  * check history api support once
+  * avoid extra client for history API detection
+  * vendor: github.com/docker/cli v24.0.2
+  * vendor: github.com/docker/docker v24.0.2
+  * bake(cli): allow passing in-stream using command.Cli
+  * debug-shell(cli): allow passing in-stream using command.Cli
+  * vendor: update buildkit to master@67a08623b95a
+  * build(cli): allow passing in-stream using command.Cli
+  * docs: monitor: mention about long form flag
+  * invoke: Allow JSON array for long form flags
+  * Fix a couple `--invoke` entrypoint interaction bugs
+  * Update docs with result from `make docs` command.
+  * build: display build details link
+  * build: fix quiet mode
+  * vendor: github.com/stretchr/testify v1.8.4
+  * vendor: github.com/compose-spec/compose-go v1.14.0
+  * bake: fix potential context entitlements escape
+  * tests: refactor cmd helpers to allow configuring cwd, etc
+  * tests: add bake test for remote subdir context
+  * tests: add bake test for remote cmd context override
+  * bake: fix BAKE_CMD_CONTEXT relative path resolution
+  * tests: add basic remote bake context test
+  * git: update gitutil test utilities
+  * test: tmpdir can be a test helper
+  * vendor: github.com/Masterminds/semver/v3 v3.2.1
+  * build: clarify NewResultHandle comment
+  * inspect: display builder features
+  * docs: update CONTRIBUTING.md with specific test notes
+  * build: docker exporter should instead use oci with containerd
+  * build: clear exports for secondary solve request
+  * build: cleanup res if returned in basic build
+  * Fix typo in commands/build.go and
+    docs/reference/buildx_build.md
+  * build: rename ResultContext to ResultHandle
+  * build: move main solve request into main gateway call
+  * driver: update history api check
+  * driver: add context to Features interface
+  * driver: cache features
+  * driver: check history capability
+  * logutil: print error from WithError if found
+  * vendor: update buildkit to master@c36941f4a10e
+  * ci: make release and bin-image depend on test
+  * docs: update CONTRIBUTING.md to run tests
+  * make: test-unit and test-integration targets
+  * ci: cache integration tests base and build in dedicated step
+  * test: opt to avoid building the integration tests image
+  * test: use trap to remove cache volume
+  * test: type integration not needed
+  * ci: send test reports to codecov
+  * ci: merge test workflow to build one
+  * monitor: add long help for commands
+  * build: update outline fallback image
+  * build: tidy up print func
+  * build: fix writing correct image ID with -q
+  * remote: allow docker exporter on remote driver
+  * update xx to 1.2.1
+  * driver(docker-container): fix incorrect path when writing certs
+  * build: fix missing "docker" driver name in build progress
+  * vendor: update buildkit to master@212ab16a39b1
+  * go.mod: update k8s deps to v0.26.2 (remove "replace" rule)
+  * cmd/buildx: non-functional
+    k8s.io/client-go/plugin/pkg/client/auth/openstack
+  * vendor: github.com/docker/cli v24.0.1
+  * vendor: github.com/docker/docker v24.0.1
+  * Fix AWS Authentication when mixing static creds and IAM profile
+  * vendor: use docker/distribution instead of
+    distribution/distribution
+  * vendor: github.com/docker/cli v24.0.0
+  * vendor: github.com/docker/docker v24.0.0
+  * vendor: github.com/spf13/cobra v1.7.0
+  * vendor: github.com/opencontainers/runc v1.1.7
+  * vendor: github.com/klauspost/compress v1.16.3
+  * vendor: github.com/moby/term v0.5.0
+  * docs: add info for on-error and debug-shell values for invoke
+  * docs: fixup typo in buildkit console output
+  * bake: merge attest entries
+  * ci: add integration tests
+  * test: add basic integration tests
+  * vendor: update buildkit to master@31c870e82a48
+  * Update bake-reference.md
+  * imagetools(create): set correct media type when combining
+    manifests
+  * vendor: github.com/docker/distribution v2.8.2
+  * progress: make printer ready only after pausing logrus
+  * controller: move path resolution into controller package
+  * docs: add matrix docs for bake
+  * github: don't auto-add kind/bug labels
+  * docs: refactor bake file reference
+  * docs: add initial guide about debugging monitor mode
+  * debug: evaluate all refs to allow multi-platform debugging
+  * driver: update BuildKit version constraint for docker driver
+  * vendor: github.com/docker/docker v23.0.6
+  * controller: avoid "context canceled" error on cleanup
+  * controller: default to using local controller
+  * bake: support compose additional contexts
+  * bake: support compose inline dockerfile
+  * kubernetes driver: add support for proxy-url
+  * bake: copy remote context contents to root
+  * bake: reorganize input creation together
+  * debug: secondary client build should not reuse solve opt ref
+  * monitor: improve error messages
+  * docker: fix connection leak on features check
+  * container-driver: avoid hanging on container panic
+  * Support for passing through raw buildkit policies
+  * monitor: extend monitor interface from controller
+  * build(deps): Bump peter-evans/create-pull-request from 5.0.0 to
+    5.0.1
+  * monitor: use shlex
+  * monitor: Move commands to a separated package
+  * docs: add serviceaccount driver-opt for k8s driver
+  * kubernetes driver: add serviceaccount opt
+  * controller: print result outside of controller
+  * controller: don't write metadata file in controller
+  * bump go.mod to 1.20
+  * builder: extra init error handling
+  * ci: fix bin-image job
+  * build: null values support with bake
+  * build: fix JSON formatting for --print
+  * fix: changed attest type from Map to List
+  * chore: format with prettier
+  * build: added attest field
+  * build: sort bake fields alphabetically
+  * lint: add empty line between console and json code blocks
+  * build: fix links and formatting
+  * build: move bake under the build section
+  * build: customizing builds section
+  * build: add bake section
+  * debug: display build warnings after each build
+  * vendor: update to compose-go 1.13.4
+  * bake: use default filenames from compose-go
+  * controller: replace logrus status messages with progress messages
+  * controller: refactor progress api
+  * build: refactor out common build command components
+  * controller: refactor status message conversion to pb package
+  * build: use gateway's solve context to allow cancelling
+    getResultAt
+  * build(deps): Bump docker/bake-action from 2 to 3
+  * controller: only capture the result when invoked through a
+    controller
+  * monitor: update exec failure message when no args are passed
+  * build: avoid resolution of dockerfile if context is remote
+  * remove unused fields from ResultContext
+  * remove ResultContextError
+  * Fix monitor to be aware of Inspect API and invokations from
+    errors
+  * Add flags and subcommand
+  * Enable to restore build options from the server
+  * Enable to create container from error
+  * Allow passing ResultContext from server to the client through
+    grpcerror
+  * build: support for saving local state by build ref
+  * build: avoid file resolution of dockerfile urls
+  * bake: ensure remote files behind ssh expose agent
+  * bake: update ReadRemoteFiles to use buildkit api
+  * vendor: update buildkit to master@333ee9158128
+  * cli: add completion to list builder names
+  * build: add completion to list context folders
+  * bake: add completion to list targets
+  * cli: set default completion
+  * driver: update BuildKit version constraint for docker driver
+  * build(deps): Bump peter-evans/create-pull-request from 4.2.4 to
+    5.0.0
+  * bake: fix map type checking to detect matrix property set to
+    list
+  * bake: add replace func to stdlib
+  * chore: sort bake stdlib map
+  * docs: prune links in README toc, add external reference
+  * ci: check repo origin on push tag event
+  * controller: Extract nested CommonOptions on controller API
+  * bake: forward default ssh agent for remote bake file
+  * bake: use build.IsRemoteURL
+  * build: use buildkit's gitutil package to detect remote files
+  * bake: additional validation for matrixes
+  * docs: update ls command output sample
+  * build(deps): Bump github.com/opencontainers/runc from 1.1.4 to
+    1.1.5
+  * driver: resolve BuildKit version for docker driver
+  * bake: add additional tests for matrix behavior
+  * vendor: update buildkit to master@8b7bcb900d3c
+  * build: replace removed buildkit BUILDINFO field
+  * build: fixup resolvePaths for remote context path
+  * chore: fix issue template
+  * remote: avoid tls error if both key and cert are not set
+  * bake: generate implicit groups for matrixes
+  * bake: add matrix to target block
+  * bake: allow overriding name property
+  * bake: allow interception to create derived contexts
+  * build(deps): Bump peter-evans/create-pull-request from 4.2.3 to
+    4.2.4
+  * bake: move SOURCE_DATE_EPOCH parsing to overrides
+  * k8s: corev1.Handler has been replaced by corev1.ProbeHandler
+  * vendor: bump k8s to v0.25.4
+  * build: move SOURCE_DATE_EPOCH parsing into option generation
+  * k8s: generate node name if not provided
+  * version: add "v" prefix to version for tagging convention
+    consistency
+  * build: strip credentials from remote url on collecting Git
+    provenance info
+  * monitor: Enable to exec into the container
+  * monitor: resolve oci layout path in client
+  * monitor: resolve paths arguments in client
+  * docs: guides moved to docs website
+  * controller: use os.Executable() for getting the exceutable path
+  * ci: update docs-upstream workflow
+  * docs: do not generate ref for internal serve command
+  * build: makes git dirty check opt-in
+  * chore: github issue template
+  * controller: handle attestation options across api
+  * controller: move image id file writing to client
+  * controller: return solve response through api
+  * controller: strongly type the controller api
+  * build(deps): Bump golang.org/x/net from 0.5.0 to 0.7.0
+  * Dockerfile: align frontend version
+  * fix lint issue
+  * fix cannot set environment variables in parallel tests
+  * remove deprecated golangci-lint linters
+  * update golangci-lint to v1.51.1
+  * update to go 1.20
+  * Add env var to disable default attestations
+  * docs: added --platform=local example
+  * build: print instance being used
+  * vendor: update buildkit
+  * Remove git warning: buildx/1633
+  * monitor: fix typo in help message
+  * imagetools: process com.docker.reference.* annotations
+  * controller: set absolute path of server binary before execution
+  * inspect: display labels and gc policies
+  * builder: add worker gc policies and labels
+  * controller: use unique files per buildx version
+  * controller: use grpc with contexts for improved timeouts
+  * controller: exit cleanly on SIGTERM
+  * controller: add more informative server exit messages
+  * build: don't kill remote controller after build
+  * vendor: github.com/docker/cli v23.0.0
+  * vendor: github.com/docker/docker v23.0.0
+  * vendor: golang.org/x/oauth2 v0.1.0
+  * vendor: golang.org/x/net v0.5.0
+  * vendor: golang.org/x/term v0.4.0
+  * vendor: golang.org/x/text v0.6.0
+  * vendor: golang.org/x/sys v0.4.0
+  * vendor: github.com/google/certificate-transparency-go v1.1.4
+  * vendor: github.com/containerd/containerd v1.6.16
+  * build: check reachable git commits
+  * gitutil: override the locale to ensure consistent output
+  * bake: avoid nesting error diagnostics
+  * bake: avoid early-exit for resolution failures
+  * ci: remove releases-json workflow
+  * github: update .github/releases.json
+  * build: add docs for boolean attestation flags
+  * builder: fix docker context not validated
+  * update github.com/compose-spec/compose-go to v1.9.0
+  * lint: ban fmt.Errorf in preference of errors.Errorf
+  * lint: enable gosec
+  * bake: fix loop references
+  * hack: move syntax directive to top of generated-files
+  * controller: move controllers out of commands into separate
+    package
+  * ci: fix pr branch name in releases-json workflow
+  * ci: add workflow_dispatch in releases-json workflow
+  * ci: update buildx and buildkit to latest
+  * ci: fix docs-upstream workflow
+  * build: better message output for git provenance
+  * build: silently fail if git remote not found
+  * github: update .github/releases.json
+  * ci: generate releases.json on release event
+  * build: fix multi-node merge to read descriptor from result
+  * bake: SOURCE_DATE_EPOCH: fix `panic: assignment to entry in nil
+    map`
+  * build: fix preferred platform not taken account
+  * vendor: update buildkit to v0.11.2
+  * go.mod: bump to Go 1.19
+  * Enable to run build and invoke in background
+  * build: set remote origin url
+  * imagetools: silence intoto warnings
+  * rm: do not check for context builders when removing inactive
+  * ci: update buildkit release version in build pipeline
+  * docs: add note about minimum docker version
+  * build: mark capabilities request as internal
+  * vendor: github.com/moby/buildkit v0.11.1
+  * ci: update buildx release version in build pipeline
+  * docs: add reference for new attest family of flags
+  * docs: fix broken link in buildx_bake CLI reference
+  * ci: fix typo in docs-release workflow
+  * build: error when using docker exporter and attestations
+  * build: avoid compatability error when attestations disabled
+  * docs: small tweak to opentelemetry
+  * inspect: lazily load attestation data
+  * inspect: move attestation loading to struct methods
+  * build: create error group per opt
+  * build: reorder error group funcs
+  * build: use copy for BuildWithResultHandler loop vars
+  * fix the directory of the buildx binary
+  * github: update CI to buildkit v0.11
+  * docs: update with new inspect output
+  * inspect: change additional spdxs to not have duplicates
+  * inspect: provide access to multiple spdx documents
+  * inspect: parse sbom and provenance into json structs
+  * inspect: break after first matching attestation
+  * go.mod: update cli-docs-tool v0.5.1 and re-generate docs
+  * docs: update anchor links
+  * vendor: update buildkit to v0.11.0-rc4
+  * imagetools inspect: handle provenance and sbom
+  * e2e: use native k3s installation script
+  * docs: update oci layout with tag resolution
+  * imagetools inspect: missing annotations key
+  * Propagate SOURCE_DATE_EPOCH from the client env
+  * build: refactor reference parsing for image layouts
+
+- Update to version 0.10.5:
+  * vendor: update buildkit to v0.11@348e79dfed17
+  * docs: refactor bake file reference
+
+- Update to version 0.10.4:
+  * build: strip credentials from remote url on collecting Git
+    provenance info
+  * build: makes git dirty check opt-in
+  * docs: added --platform=local example
+  * Add env var to disable default attestations
+
+- Update to version 0.10.3:
+  * ci: update buildx and buildkit to latest
+  * Remove git warning: buildx/1633
+  * imagetools: process com.docker.reference.* annotations
+  * bake: avoid nesting error diagnostics
+  * build: check reachable git commits
+  * gitutil: override the locale to ensure consistent output
+  * bake: avoid early-exit for resolution failures
+  * build: add docs for boolean attestation flags
+  * builder: fix docker context not validated
+  * bake: fix loop references
+
dpic
+- update to 2023.02.1:
+  * More precise obtuse-angle arcs.
+  * Minor addition to the manual.
+  * Non-LaTeX error-handling cleanup.
+  * Line thickness recovery parameter enabled.
+  * Redundant code dating from pascal conversion removed.
+  * Robustness fixes.
+  * Improved robustness for fuzzed input.
+  * Added colored svg sprintf text and % appended to selected outputs.
+  * Shift operation bugfix.
+  * Improved error messaging; additional distribution examples.
+
-- license update: BSD-2-Clause and CC-BY-3.0
-  dpicdoc.pdf is CC-BY-3.0 licensed according to dpic/README
-
drawing
+- update to 1.0.2:
+  * fix the default value of the text background option (as
+    reported by #521 and #559)
+  * fix a scenario where saving without transparency would
+    consistently fail
+  * automatically reload the picture after saving
+  * mitigate initial state of the "filters" tool if "blur" is
+    selected
+  * change the keyboard shortcuts to switch tabs
+  * remove from the highlighter the (ineffective) UI to change
+    the active cairo operator
+  * change the UI of the selection tools to improve readability
+    of various items
+  * fix typos in the user help manual
+  * change the label of the "toggle the preview" menu item
+  * update several translations
+
dssim
+- update to 3.2.3:
+  * 25% faster
+  * WASM compatibility
+  * use more accurate pooling algorithm
+  * rewrite in Rust
+  * Chroma channels are compared at full resolution.
+  * This increases accuracy on images with chroma subsampling.
+  * All scaling is done in linear-light premultiplied-alpha color
+    space, which further increases accuracy.
+  * Safe and reliable code. No more dodgy pointer manipulatio n
+  * Fixed handling of PNG files with invalid chunks
+  * Fixed handling of color channels smaller than 8 pixels
+
dtb-aarch64
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
dub
+- Update to 1.33.0
+  * Add collection of c sources and headers to dub by @cschlote in #2544
+  * update version to v1.32.0-beta.1 by @ibuclaw in #2609
+  * Don't depend on the whole of Vibe.d for the test_registry by @Geod24 in #2612
+  * Upgrade dependencies by @Geod24 in #2613
+  * Make all static library exports contribute to dlls on Windows by @rikkimax in #2614
+  * Revert "Make all static library exports contribute to dlls on Windows" by @Geod24 in #2616
+  * PackageManager: Store packages hierarchically, by version by @Geod24 in #2610
+  * add pr_info GitHub actions run by @WebFreak001 in #2586
+  * try to fix pr_info permissions problem by @WebFreak001 in #2621
+  * fix pr_info_post file paths by @WebFreak001 in #2622
+  * update version to v1.32.0-rc.1 by @ibuclaw in #2625
+  * merge stable by @ibuclaw in #2628
+  * update version to v1.32.1-beta.1 by @ibuclaw in #2631
+  * update version to v1.32.1 by @ibuclaw in #2634
+
+- Update to 1.32.1
+  * Implement --color=auto|always|never, fix #2410 by @WebFreak001
+    in #2552
+  * update version to v1.31.0-beta.1 by @ibuclaw in #2555
+  * Remove GeneratorSettings.direct as it is never set by @Geod24 in #2559
+  * Fix various DDOC warnings by @Geod24 in #2558
+  * Don't assume the cache path is relative to CWD by @Geod24 in #2557
+  * replace std.variant with std.sumtype by @WebFreak001 in #2550
+  * add markdown documentation generator to gen_man.d by @WebFreak001
+    in #2563
+  * update version to v1.31.0-rc.1 by @ibuclaw in #2565
+  * Fix typo in subpackage license warning by @zyedidia in #2576
+  * merge stable by @ibuclaw in #2578
+  * fix man page generator by @WebFreak001 in #2571
+  * fix typo(s) by @WebFreak001 in #2564
+  * Add betterC support - fixes #1636 by @etcimon in #2581
+  * merge stable by @ibuclaw in #2591
+  * Add OpenBSD package to README.md by @ibara in #2592
+  * Fix #2574: Suggest alternative spelling when a command is mistyped by
+    @elvodqa in #2593
+  * improve warning messages, especially with ~branch by @WebFreak001 in #2585
+  * reintroduce dmd-latest to CI runner by @WebFreak001 in #2594
+  * merge stable by @ibuclaw in #2595
+  * make build names much smaller by @WebFreak001 in #2589
+  * Make getDUBExePath returns a NativePath by @Geod24 in #2604
+
eaglemode
+- Replace BuildRequire on xorg-x11-devel by pkgconfig(...)
+
emacs-vm
+- Update to latest launchpad trunk version.
+  Delete obsolete patches:
+  * U_rev-1313.patch
+  * U_Require-vm-reply.el-from-vm-compose-mail.patch
+- Fix vcard parser to handle broken vcards better
+  vcard-Make-vcard-parser-more-robust-to-invalid-vcards.patch
+- Limit %install_info and %install_info_delete macros to Leap/SLE.
+
-- Cleanup BuildRequires.
-
emacs-w3m
+- Update to version 1.4.632+546+gf8819bca:
+  * Silence the byte-compiler on Emacs 30
+  * ; sb-sankei.el (shimbun-sankei-login): Fix the way to parse forms
+  * Silence the byte compiler
+  * Silence warnings when compiling w3m.el individually ([emacs-w3m:13914])
+  * ; Fix last change in aclocal.m4
+  * Support Emacs 30
+  * Update ChangeLog
+  * Fix w3m-puny-encode1 failure on Emacs 29
+  * * w3m.el (w3m-unsafe-url-warning): New face
+
-- Drop mule-ucs-xemacs dependency, too (bnc#771421)
-
endless-sky
+- Update to 0.9.16.1:
+  Breaking changes:
+  * Revert the changes to the accompany objective on mission npcs
+    made in the last release.
+- Changes in 0.9.16.0:
+  Breaking changes:
+  * The accompany objective on mission npcs no longer implicitly
+    sets the save objective. Plugin missions that had "accompany"
+    but not "save" should be changed to include "save" if the
+    intention of the mission is that the npcs live.
+  Bug fixes:
+  * Typo fixes.
+  * The Firestorm Battery outfit now has a proper plural name.
+  * The Mule's description has been updated to reflect its new
+    category.
+  * Corrected the name of the passenger in "FW Pug 4."
+  * Added a firing sound to the Ka'het Annihilator Turret, as it
+    was missing one.
+  * Fixed an incorrect planet text replacement in "FW Refinery 1."
+  * Prevented a Wanderer job from offering with an impossible
+    deadline.
+  * Replaced some small numbers that were written as digits with
+    words.
+  * Shortened Greenview's planet description to fit the UI.
+  * The Archon missions will now refresh once on old saves so that
+    the new missions are used.
+  * The Syndicate ships that attack New Tibet in the FW campaign
+    will now be properly hostile to your mission escorts.
+  * Hard set the npc name in a Scar's Legion mission description to
+    point to the correct npc to kill.
+  * Fixed a Remnant rescue job that had an npc location that should
+    not have been allowed.
+  * Cleaned up the audio on some sound files that had audible
+    clicking.
+  * Remnant cargo that Korath ships in the Ember Waste carry is now
+    more fitting to the lore of their situation.
+  * Fixed the object sprites and scaling in the Ssil Vida event.
+  * The jump range of systems affected by the Ssil Vida activation
+    are now reset when Ssil Vida is deactivated in order to avoid
+    a bug in pathfinding. This change will be reverted in the future
+    once the pathfinding is improved.
+  * Changed a Remnant bounty mission that had an unconstrained npc
+    with a jump drive to spawn one without a jump drive as to stop
+    the ship from escaping the Ember Waste.
+  * Added a fallback mission for people who were in the middle of
+    a section of the FW campaign that was changed.
+  * The load panel now only lists .txt files from the save folder
+    instead of listing every file there.
+  * Traveling between systems no longer assumes that hyperdrives
+    are always cheaper to use than jump drives.
+  * Fixed an error where attempting to launch with a fighter as
+    your flagship under certain circumstances could cause you
+    to launch with no ship at all.
+  * Mission npcs that become disabled by corrosion damage will
+    now properly have the disable objective set.
+  * Disallowed planet labels from jumping around at different
+    zoom levels for a better viewing experience.
+  * Fixed a longstanding bug where npcs could get stuck thinking
+    they need fuel after traveling through a wormhole.
+  * Fixed a bug where fighters would sometimes fail to reparent to
+    a carrier that had space for them when recalled.
+  Game content:
+  * The last mission to give jump drives to the Unfettered is now
+    a repeating job instead of a spaceport mission.
+  * Added H2H weapons to some Hai ships and increased the base
+    crew stats of the Unfettered.
+  * Slightly reworked the atomic and ion flare effects.
+  * Recategorized the Hai Centipede as a space liner.
+  * Changed the landscape images of Mainsail and Inmost Blue to
+    better fit their planet descriptions.
+  * Recategorized the Saryd Traveler as a utility ship.
+  User interface:
+  * Clicking on a planet card on the left side of the map now
+    selects that planet as a destination on your travel plan.
+  Under the hood:
+  * Fixed a link in the README to point to the proper location.
+  * Made a few small code improvements that were found by
+    various compilers and linters.
+  * Added new PR labels to the contributing guidelines file.
+  * Improved the printing of game data when using the command
+    line options.
+  * Added checks and warnings to overlapping derived condition
+    provider ranges.
+  * Added the std:: prefix to two calls to std::move.
+- Run spec-cleaner
+- Rebase fix-data-path.patch and rename to
+  endless-sky-fix-data-path.patch
+- Add BuildRequires libuuid-devel and pkgconfig
+- Drop endless-sky-rpmlintrc, was needed for openSUSE 13.1
+- Fix scons rpmlint warning
+- Use CXXFLAGS Wno-error=dangling-reference not for openSUSE Leap,
+  it is unknown for openSUSE Leap
+
+- Add 8235.patch: upstream PR 8235 to fix build using GCC 13.
+
feedbackd
+- Add 109.patch: Fix build with glib-2.76.x
+
+- Update to version 0.1.0:
+  * Make LED class more flexible. This will allow e.g. hw based
+    implementations.
+  * Trigger module load via udev. This avoids shipping another conf
+    file.
+- Changes from version 0.0.3:
+  * spec: Separate system and application events
+  * theme: add screen-shot event
+  * Build and doc fixes
+  * Update gmobile to 0.0.1
+
+- Update to version 0.0.2:
+  * Support theme merging
+  * Support user themes (`theme` gsetting)
+  * Add theme validator
+
filebench
+- Update to version 1.4.9.1+git.20200220:
+  * Fix issue #138
+  * check fs_readonly flag in fileset_alloc_file
+  * Update procflow.c
+  * wifcontinued
+  * Fix filebench build on FreeBSD
+  * fix off-by-one error in shm_bitmap
+  * Removing obsolute attributes from oltp.f workload
+  * Fixing netsfs.f workload
+  * Perform complete random variable initialization
+- Drop no longer needed:
+  * make-dofile-global.patch
+
flac
+- Fix Buffer Overflow vulnerability in function bitwriter_grow_
+  (CVE-2020-22219, bsc#1214615):
+  0001-fix-potential-memleak.patch
+  0002-Add-and-use-_nofree-variants-of-safe_realloc-functio.patch
+  0003-Leave-metadata-items-untouched-if-resize-function-fa.patch
+  0004-Do-not-memset-when-allocation-fails.patch
+  0005-Move-entropy-partitioning-result-allocation-so-it-ca.patch
+  0006-Don-t-overwrite-bad-state-with-seek-error.patch
+
-- Update to final upstream release 1.3.0
-  * No user-visible changes
-- More robust make install call
-
flacon
+- Update to 11.2.0:
+  * The "convert" button on the toolbar can trigger two actions:
+    Convert - Converts all tracks (previous behavior)
+    Convert selected - Converts only selected tracks
+
+- Update to 11.1.0:
+  * Fix: In some situations, the program did not check whether the sox program was installed.
+
+- Update to 11.0.0:
+  * If you try to close the program while the conversion is in progress, the program will ask for confirmation
+  * Added a menu item to delete the source files for successfully converted disks
+  * Small fixes to the algorithm for creating per track CUE files
+  * Improved diagnostics of erroneous situations:
+  * Error if tracks overwrite files (taking into account the template)
+  * Error if there are tracks with the same track number and creating files in the same directory. The pattern doesn't matter
+  * Warning if any disks use the same CUE file
+  * Warning if any disks use the same audio file
+  * Fix: The program show an error when the source files are located on slow network drives
+  * Fix: The program show an error on WV files larger than 2 gigabytes
+  * Minor fixes
+  * Translations updated
+
fldigi
+- update to 4.1.27:
+  * restore missing <PAUSE> function
+  * fix and simplify navtex timing recovery logic
+  * add TEN_TEN field to log.adif file
+  * add CTRL-P as pause/break equivalent keystroke
+  * FSQ: improved s/n and squelch processing
+  . faster acting squelch open/close
+  . modified s/n evaluator
+  * improved s/n and squelch processing
+    + squelch opens and closes faster
+    + better s/n estimator
+  * EQSL submission: always submit last dated log entry independent
+    of sort order
+  * wfonly fix: segmentation fault during startup, NULL control
+  * enable https queries in callook.info
+  * Miscellaneous gcc cleanup
+  * allow user to specify which avatar image to use for ifkp/thor
+    transmission
+    + recommend files be located in default <fldigi_files>/avatar/ folder
+    + file format may be gif, jpeg or png
+    + order of default file use:
+    . <configured file name>.png [PNG, jpg, JPG, jpeg, JPEG, gif]
+    . <operator call>.png
+    . <station call>.png
+    + trailing callsign modifiers will be removed from the file
+    name i.e. AE5ZA/QRP is reduced to AE5ZA
+    + different avatar can be used for IFKP and THOR
+    + configuration items are clickable images on both IFKP and THOR
+    configuration tabs.
+    + image files no longer restricted to 59x74 format.
+  * Set contest start nbr XMLRPC
+    + add set contest start number xmlrpc method, update counter
+    and current contest number
+
+- update to 4.1.26:
+  * Audio Monitor
+  * musl file conflict
+  * Add documentation for Cloudlog part
+  * Add button for testing the API key
+  * cloud logging
+  * window icon tranparency
+  * fonts
+  * FC LEAVE
+
+- Update to version 4.1.25
+- Update to version 4.1.24
+  * CTY.dat: create separate configuration tab
+  * transfer changes in flrig cwio speed to tx wpm vice rx wpm
+  * update FreqControl for compatability with fltk-1.4
+  * Improved reliability of freq control from fldigi when using
+    N3FJP for rig control
+  * Greek po file update: Haris Andrianos <sv1grb@...>
+  * Polish po file update: Roman Bagiński <sp4jeu@...>
+  * allow user selectable vumeter scale
+    + original audio level scale
+    + wsjtx emulation
+  * add right click to FSQ QTC/QTH buttons to access edit controls
+  * replicate the QTH control on the FSQ config panel
+  * Rx audio gain parameter corrected
+  * Tx audio fixed, fixed at last ring buffer too small for some
+    modem types
+  * expand mode state to index both by-mode and by-band
+  * correct rtty squelch estimation for zero signal, zero noise
+  * Add Audio Filter bandwidth lines to waterfall display
+  * change CAT keying to allow up to 100 WPM on K4.
+  * stub out audio alert and rx monitor functions if Portaudio
+    library not present
+  * Made Frequency Control behavior consistent across flapps
+  * Fixed County combo box crash to desktop
+  * Fixed 30 meter CW shortcut in frequencies2.txt
+  * Fixed grid locator spec in pskreporter query
+  * Fixed crash-to-desktop upon Activity (pskreporter) query.
+
flux
+- Update to version 0.193.0, see:
+  https://github.com/influxdata/flux/releases/
+- Drop 0001-fix-compile-error-with-Rust-1.64-5273.patch: upstreamed
+- fluxc removed upstream
+
fossil
+- fossil 2.22:
+  * Multiple enhancements to the /timeline webpage
+  * Administrators can select to skip sending notifications about
+    new forum posts.
+  * If the value N is negative in "--context N" or "-c N" to the
+    various diff commands, then treat it as infinite and show the
+    complete file content.
+  * Add support for the trigram tokenizer for FTS5 search to enable
+    searching in Chinese.
+  * Comment lines (starting with a '#') are now supported inside
+    versioned settings.
+  * Default permissions for anonymous users in new repositories is
+    changed to "hz".
+  * The fossil status command now detects when a file used to be a
+    symlink and has been replaced by a regular file. (It
+    previously checked for the inverse case only.)
+  * The empty-dirs setting now reuses the same parser as the *-glob
+    settings instead of its prior idiosyncratic parser, allowing
+    quoted whitespace in patterns.
+  * Enhancements to the /reports webpage
+
+- fossil 2.21:
+  * Add user password reset feature
+  * Add the fossil repack command
+  * Add the ability to put text descriptions on ticket report
+    formats.
+  * Multiple UI updates
+  * Passwords for remembered remote repositories are now stored as
+    irreversible hashes rather than obscured clear-text, for
+    improved security.
+  * Add the "nossl" and "nocompress" options to CGI.
+  * Update search infrastructure from FTS4 to FTS5.
+  * Writes to the database are disabled by default if the HTTP
+    request does not come from the same origin. This enhancement
+    is a defense in depth measure only; it does not address any
+    known vulnerabilities.
+  * Improvements to automatic detection and mitigation of attacks
+    from malicious robots.
+
frr
+- Apply upstream fix for NULL pointer dereference due to processing
+  of malformed requests with no attributes in bgp_nlri_parse_flowspec
+  (CVE-2023-41909,bsc#1215065,https://github.com/FRRouting/frr/pull/13222/commits/cfd04dcb3e689754a72507d086ba3b9709fc5ed8).
+  [+ 0012-bgpd-Limit-flowspec-to-no-attribute-means-a-implicit.patch]
+
+- Removed protobuf-c BuildRequires (source package name) breaking
+  build-system setup with libprotobuf-c-devel 1.3.2 updates.
+- Apply upstream fix for bgpd: Don't read initial byte of the ORF
+  header in an ahead-of-stream situation (CVE-2023-41360,
+  bsc#1214739,https://github.com/FRRouting/frr/pull/14245)
+  [+ 0008-bgpd-Don-t-read-the-first-byte-of-ORF-header-if-we-a.patch]
+- Apply upstream fix for bgpd: Do not process NLRIs if the attribute
+  length is zero (CVE-2023-41358,bsc#1214735,
+  https://github.com/FRRouting/frr/pull/14260)
+  [+ 0009-bgpd-Do-not-process-NLRIs-if-the-attribute-length-is.patch]
+- Apply upstream fix bgpd: Use treat-as-withdraw for tunnel encapsulation
+  attribute instead of session reset (CVE-2023-38802,bsc#1213284,
+  https://github.com/FRRouting/frr/pull/14290)
+  [+ 0010-bgpd-Use-treat-as-withdraw-for-tunnel-encapsulation-.patch]
+- Apply upstream fix babeld: avoid infinite loops (CVE-2023-3748,bsc#1213434,
+  gh#FRRouting/frr#11808,https://github.com/FRRouting/frr/pull/12952)
+  [+ 0011-babeld-fix-11808-to-avoid-infinite-loops.patch]
+
fsarchiver
+- Update to 0.8.7:
+  * Implement support for option "uuid=" for vfat
+  * Update list of btrfs supported features
+  * Add support for the "nrext64" feature on XFS
+  * Do not error out on deleted files when option -A is used
+  * Handle termination by signal in exec_command()
+  * Add support for the "orphan_file" feature in EXT4
+  * Do not try to save xattrs if not supported by the filesystem
+
fvwm2
+- Add patch threadlocking.patch
+  * Fix for lock recusion in handle_all_expose() to handle if
+    libX11 1.8.1 and above enables X display locks unconditionnaly
+
fwts
+- Update to version 23.07.00:
+  * lib: fwts_version.h - update to V23.07.00
+  * debian: update changelog
+  * debian: fix lintian errors and warnings
+  * debian: fix debuild fail for the not installed files
+  * debian: update compat level and standards version
+  * ACPICA: Update to version 20230628
+  * fwts_acpica: Remove unused variable "context"
+  * acpi/wmi: Fix bug when counting WMI methods
+  * acpi/wmi: Check if the mandatory block query method exists
+  * acpi/wmi: Add WMI GUID for the dell-wmi-ddv driver
+  * Increase number of max semaphores to fix OOM crashes on some systems
+  * lib: fwts_acpi_object_eval: sync up the AML exceptions from ACPICA
+  * uefi: esrt: update the LastAttemptStatus values to UEFI spec 2.10
+  * acpi: mpam: fix build fail on bionic
+  * fwts-test: sync up with test with resource specific data
+  * acpi: mpam: test with resource specific data for interconnect location type
+  * fwts-test: sync up with adding the mpam tests
+  * acpi: mpam: add test for ACPI MPAM table
+  * fwts-test: sync up aest modify the dumping raw data
+  * acpi: aest: modify the dumping raw data without noisy info
+  * lib: fwts_dump_data: add library function for dumping all raw data with prefix
+  * lib: fwts_dump_data: add function for simply dump raw data
+  * auto-packager: mkpackage.sh: remove the control hook
+  * lib: make the return types consistent
+  * debian: control: modify newer dkms dependency
+  * debian: control: update uploader
+  * lib: fwts_oops: fix the WARN_ON warnings in kernel not found
+  * cppcheck: fix the cppcheck source link error
+  * fwts-test: sync up the removing ARM specific for ebbr
+  * lib: framework: remvoe ARM specific for ebbr
+
fx
+- Update to version 24.1.0
+  * move cursor to view when jumping around
+  * add flag: -h, --help
+
galera-4
+- Update to 26.4.14:
+  - memory leak in the gcs gcomm backend fixed (tp_ object deleted
+    in GCommConn destructor)
+  - protonet.backend option deprecated since it only supports one
+    option, asio, and the option will be removed in future release.
+    Related, protonet.version is also deprecated
+  - deprecation message for socket.ssl_compression as SSL
+    compression cannot be enabled and the option will be removed in
+    future releases
+  - library could parse incorrect parameters as long as it had a
+    "good" prefix, i.e. evs.*, so fix prevents setting of invalid
+    option values
+  - parsing of ISO8601 durations previously accepted invalid
+    values, now fixed
+  - in addition to ISO8601 format, parsing durations now supports
+    real number representation
+
gcc12
+- Add gcc12-aarch64-bsc1214052.patch to fix -fstack-protector issues
+  with variable length stack allocations on aarch64.
+  Fixes CVE-2023-4039.  [bsc#1214052]
+
gcc7
+- Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
+  with variable length stack allocations on aarch64.
+  Fixes CVE-2023-4039.  [bsc#1214052]
+- Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
+- Add gcc7-lra-elim.patch to fix internal compiler error when forming
+  paired loads and stores on aarch64.
+
+- Disable multilib and go on riscv64
+- libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
+  build with current binutils
+
+- Backport _multibuild auto-generation.  Remove redundant
+  .changes files.
+
+- Add _multibuild to define 2nd spec file as additional flavor.
+  Eliminates the need for source package links in OBS.
+
+- Add gcc7-pr89124.patch to fix KASAN kernel compile.  [bsc#1205145]
+
+- Add gcc7-pr72764.patch to fix ICE with C++17 code as reported
+  in [bsc#1204505]
+
+- Add gcc7-libsanitizer-cherry-pick-9cf13067cb5088626ba7-from-u.patch
+  and gcc7-libgo-don-t-include-linux-fs.h-when-building-gen-sys.patch
+  in order to support glibc 2.36.
+- Enable format_spec_file otherwise one gets huge diff after
+  running change_spec.
+- Remove fixed sys/mount.h.
+
+- Add patch from upstream to fix altivec.h redefining bool in C++
+  which makes bool unusable (boo#1195517):
+  * gcc7-pr78263.patch
+
+- Add gcc7-ada-Target_Name.patch to adjust gnats idea of the
+  target, fixing the build of gprbuild.  [bsc#1196861]
+
+- Remove include-fixed/sys/rseq.h to fix build on openSUSE:Factory.
+- Avoid duplicate license in cross packages.
+
-- - Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch
-  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch
-  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch
-  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch
-  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch
-  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch
-  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch
-  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch
-  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch
-  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch
-  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch
-  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch
-  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch
-  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch
-  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch
-  gcc7-pfe-0016-Backport-AArch64-PR92424-Fix-fpatchable-function-ent.patch
-  gcc7-pfe-0017-Backport-Fix-patchable-function-entry-on-arc.patch
-  gcc7-pfe-0018-Backport-Add-patch_area_size-and-patch_area_entry-to.patch
-  gcc7-pfe-0019-Backport-testsuite-Adjust-patchable_function-tests-f.patch
-  gcc7-pfe-0020-Backport-Use-the-section-flag-o-for-__patchable_func.patch
-  gcc7-pfe-0021-Backport-varasm-Fix-up-__patchable_function_entries-.patch
-  gcc7-pfe-0022-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch
-  gcc7-pfe-0023-Fix-unwinding-issues-when-pfe-is-enabled.patch
+- Add gcc7-pfe-0001-Backport-Add-entry-for-patchable_function_entry.patch,
+  gcc7-pfe-0002-Backport-Skip-fpatchable-function-entry-tests-for-nv.patch,
+  gcc7-pfe-0003-Backport-Error-out-on-nvptx-for-fpatchable-function-.patch,
+  gcc7-pfe-0004-Backport-Adapt-scan-assembler-times-for-alpha.patch,
+  gcc7-pfe-0005-Backport-patchable_function_entry-decl.c-Use-3-NOPs-.patch,
+  gcc7-pfe-0006-Backport-IBM-Z-Use-the-dedicated-NOP-instructions-fo.patch,
+  gcc7-pfe-0007-Backport-Add-regex-to-search-for-uppercase-NOP-instr.patch,
+  gcc7-pfe-0008-Backport-ICE-segmentation-fault-with-patchable_funct.patch,
+  gcc7-pfe-0009-Backport-patchable_function_entry-decl.c-Pass-mcpu-g.patch,
+  gcc7-pfe-0010-Backport-patchable_function_entry-decl.c-Do-not-run-.patch,
+  gcc7-pfe-0011-Backport-patchable_function_entry-decl.c-Add-fno-pie.patch,
+  gcc7-pfe-0012-Backport-PR-c-89946-ICE-in-assemble_start_function-a.patch,
+  gcc7-pfe-0013-Backport-targhooks.c-default_print_patchable_functio.patch,
+  gcc7-pfe-0014-Backport-Align-__patchable_function_entries-to-POINT.patch,
+  gcc7-pfe-0015-Backport-Fix-PR-93242-patchable-function-entry-broke.patch,
+  gcc7-pfe-0016-Backport-Fix-patchable-function-entry-on-arc.patch,
+  gcc7-pfe-0017-Backport-Add-patch_area_size-and-patch_area_entry-to.patch,
+  gcc7-pfe-0018-Backport-testsuite-Adjust-patchable_function-tests-f.patch,
+  gcc7-pfe-0019-Backport-Use-the-section-flag-o-for-__patchable_func.patch,
+  gcc7-pfe-0020-Backport-varasm-Fix-up-__patchable_function_entries-.patch,
+  gcc7-pfe-0021-Backport-rs6000-Avoid-fpatchable-function-entry-regr.patch,
+  and gcc7-pfe-0022-Fix-unwinding-issues-when-pfe-is-enabled.patch
gcdemu
+- Update to version 3.2.6:
+  * If no AppIndicator3 is available try to load
+    AyatanaAppIndicator3.
+
gcompris-qt
+- Update to bugfix release 3.3:
+  + adds translations for 2 more languages: Arabic and Esperanto.
+  + bug fixes on multiple activities "Path encoding",
+    "Letter in word", "Ballcatch" and "Piano composition".
+  + improvements of keyboard handling (shortcuts, focus...).
+  + contains new graphics and improvements on "Photo hunter".
+
+- Update to bugfix release 3.2
+
gcompris-qt-voices
+- Update to version 3.3~20230606 for gcompris-qt 3.3
+
+- Update to version 3.2~20230329 for gcompris-qt 3.2
+
gede
+- New upstream release 2.19.1
+  * Added support for remote debugging over serial port
+
geolite2legacy
+- Update to version 0+git20210326.05733c4:
+  * cleanup
+  * conditional ipaddr only for python < 3.3
+  * Use correct docker image name on README
+  * fix ASN
+  * add python3 compatibility using built-in module ipaddress
+  * use custom comment in country file
+  * geolite2legacy: pep8
+  * geoname2fips: added tipical filenames to help
+  * geoname2fips: some country names changed after 20200505
+  * geoname2fips: fixed Vlaams-Brabant spelling
+  * Dockerfile to run the converter inside Docker container
+  * Use realpath to determine fips file location
+  * Automatically determine output file name
+- remove patches fixed in upstream
+  * 0001-Automatically-determine-output-file-name.patch
+  * 0001-Use-realpath-to-determine-fips-file-location.patch
+
+- require python3-ipaddr
+
geos
+- Disable testuite on i586
+
+- Add geos-add-missing-include.patch: Add missing #include <cstdint>
+
+- Update to version 3.11.2:
+  * GEOSIntersection: Fix FE_INVALID exception on intersection of disjoint geometries (GH-791, Joris Van den Bossche & Dan Baston)
+  * Fix incorrect result from Envelope::disjoint (GH-791, Dan Baston)
+  * Fix handling of odd cases in PolygonHoleJoiner (JTS-946, Paul Ramsey, Martin Davis)
+  * Support gcc-13 (GH-743, Sergei Trofimovich)
+  * Disallow Inf envelopes in Quadtree, avoid inf loop (Paul Ramsey)
+  * GEOSUnaryUnion: Fix crash on collection containing empty point (GH-830, Dan Baston)
+  * GEOSSTRtree_iterate: Do not return removed items (GH-833, Dan Baston)
+  * IndexedFacetDistance: Fix crash with Inf coordinates (GH-821, Dan Baston)
+  * HausdorffDistance: Fix crash on collection containing empty point (GH-840, Dan Baston)
+  * MaximumInscribedCircle: Fix infinite loop with non-finite coordinates (GH-843, Dan Baston)
+  * DistanceOp: Fix crash on collection containing empty point (GH-842, Dan Baston)
+  * Guard against non-finite distances in Buffer/OffsetCurve (GH-661, Paul Ramsey)
+
-  - OffsetCurve
+  OffsetCurve
gettext-runtime
+- Add _multibuild to define additional spec files as additional
+  flavors.
+  Eliminates the need for source package links in OBS.
+
+- update keyring for the last version update
+
+- Update to Version 0.21.1
+  * Runtime behaviour:
+  - On AIX, locale names with a script or with an uppercase language are now
+    supported.
+    For example, sr_Cyrl_RS.UTF-8 is treated like sr_RS.UTF-8@cyrillic, and
+    EN_US.UTF-8 is treated like en_US.UTF-8.
+  * The base Unicode standard is now updated to 14.0.0.
+  * Portability:
+  - Building on macOS 11/arm64 is now supported.
+  - Building on Linux/powerpc64le with glibc ≥ 2.35 is now supported.
+
+- Added patch:
+  * gettext-0.21-jdk17.patch
+    + Build with java source and target levels 1.8
+    + Allows building with JDK17
+    + Fixes build in Factory
+
+- Remove libcroco from BuildRequires: it is now bundled internally.
+
+- fixup libtextstyle autofoo with adding
+  use-acinit-for-libtextstyle.patch
+
+- Add multiple new features (bsc#1165138)
+- Add patches:
+  * 0001-msgcat-Add-feature-to-use-the-newest-po-file.patch
+  * 0002-msgcat-Merge-headers-when-use-first.patch
+- Reintroduce autoreconf call
+
+- Update to 0.21:
+  * Programming languages support:
+  - Shell:
+    o xgettext now recognizes and ignores 'env' invocations and environment
+    variable assignments in front of commands.
+  - Java:
+    o xgettext now recognizes format strings in the Formatter syntax.  They
+    are marked as 'java-printf-format' in POT and PO files.
+    o xgettext now recognizes text blocks as string literals.
+  - JavaScript:
+    xgettext parses JSX expressions more reliably.
+  - Ruby:
+    o xgettext now supports Ruby.
+    o 'msgfmt -c' now verifies the syntax of translations of Ruby format
+    strings.
+  * Improvements for translators:
+  - When msgfmt writes a MO file, it now does so in such a way that processes
+    that are currently using an older copy of the MO file will not crash.
+  * Libtextstyle:
+  - Added support for emitting hyperlinks.
+  - New API for doing formatted output.
+  - The example programs support the NO_COLOR environment variable.
+
giada
+- remove 001-Fix-build-with-fmt-9-GCC-12.patch (now upstream)
+- update to 0.25.0
+  * Ability to change audio and MIDI engines on the fly — no need to restart
+    Giada anymore when the audio and/or MIDI devices change. No need to restart
+    also when changing several properties in the Configuration Window;
+  * Add new "Clear" button next to all MIDI learning widgets to easily clear
+    the MIDI binding (#486);
+  * Set default resampler quality to "Linear" (the fastest one);
+  * Update FLTK to latest commit available;
+  * Update JUCE to version 7.0.5;
+  * Fix Velocity parameter not being usable in Action Editor;
+  * Fix MIDI Channel parameter not being usable in MIDI input configuration;
+  * Code refactoring and other architectural improvements.
+
+- Update patchset:
+  * 001-Fix-build-with-fmt-9-GCC-12.patch
+  * rename 001-cstdint.patch to 002-fix-include-cstdint.patch
+- Switch to tar_scm with disabled mode
+- Update to 0.24.0
+  * Revamped MIDI sync Clock support
+  * MIDI engine refactoring, featuring multi-threading support
+  * UI: Resizable vu-meters
+  * UI: New global MIDI activity leds
+  * More core classes and functions refactoring
+  * More robust persistence mechanism for project and configuration files
+  * Add new tests suites for MidiEvent and ChannelFactory
+  * Set C++ version to C++20
+  * Update FLTK to latest commit available
+
+- add 001-cstdint.patch to fix TW build (gcc13)
+- remove tarball from package sources (generated at buildtime)
+
girara
+- update to 0.3.9
+  * Switch to json-glib
+  * Add support for non-ASCII keys
+
git-cliff
+- Replace obsoleted `disabled` option with `manual`
+
+- Update to version 1.2.0:
+  * Update clap and clap extras to v4
+  * Make the fields of Signature public
+  * Add a custom configuration file for the repository
+  * Support placing configuration inside pyproject.toml
+  * Generate SBOM/provenance for the Docker image
+  * Support using regex group values
+  * [breaking] Nested environment config overrides
+  * Set max of limit_commits to the number of commits
+  * Set the node cache dependency path
+  * Use the correct argument in release script
+
+- Update to version 1.1.2:
+  * Do not skip all tags when skip_tags is empty (#136)
+  * Allow saving context to a file (#138)
+  * Derive the tag order from commits instead of timestamp (#139)
+  * Use timestamp for deriving the tag order (#139)
+
+- Update to version 1.1.1:
+  * Relevant change: Update README.md about the NPM package
+  * Fix type casting in base NPM package
+  * Rename the package on Windows
+  * Disable liquid parsing in README.md by using raw blocks
+  * Support for generating changelog for multiple git repositories
+  * Publish binaries for more platforms/architectures
+
+- Update to version 1.0.0:
+  * Bug Fixes
+  - Fix test fixture failures
+  * Documentation
+  - Fix GitHub badges in README.md
+  * Features
+  - [breaking] Replace --date-order by --topo-order
+  - Allow running with --prepend and --output
+  - [breaking] Use current time for --tag argument
+  - Include completions and mangen in binary releases
+  - Publish Debian package via release workflow
+  * Miscellaneous Tasks
+  - Run all test fixtures
+  - Remove deprecated set-output usage
+  - Update actions/checkout to v3
+  - Comment out custom commit preprocessor
+  * Refactor
+  - Apply clippy suggestions
+  * Styling
+  - Update README.md about the styling of footer field
+
gitui
+- Replace obsoleted `disabled` option with `manual`
+
+- Update to version 0.23.0
+  - Breaking Change
+  * focus_XYZ key bindings are merged into the move_XYZ set, so only one way to bind arrow-like keys from now on
+  - Added
+  * allow reset (soft,mixed,hard) from commit log
+  * support reword of commit from log
+  * fuzzy find branch
+  * list changes in commit message inside external editor
+  * allow detaching HEAD and checking out specific commit from log view
+  * add no-verify option on commits to not run hooks
+  * allow fetch on status tab
+  * allow copy file path on revision files and status tree
+  * print message of where log will be written if -l is set
+  * show remote branches in log
+  - Fixes
+  * fixed side effect of crossterm 0.26 on windows that caused double input of all keys
+  * commit msg history ordered the wrong way
+  * improve help documentation for amend cmd
+  * lag issue when showing files tab
+  * fix key binding shown in bottom bar for stash_open
+  * --bugreport does not require param
+  * edit-file command shown on commits msg
+  * crash on branches popup in small terminal
+  * edit command duplication
+  * syntax errors in key_bindings.ron will be logged
+  * Fix UI freeze when copying with xclip installed on Linux
+  * Fix UI freeze when copying with wl-copy installed on Linux
+  * commit hooks report "command not found" on Windows with wsl2 installed
+  * crashes on entering submodules
+  * fix race issue: revlog messages sometimes appear empty
+  * default to tick-based updates
+  * add support for options handling in log and stashes views
+  - Changed
+  * minimum supported rust version bumped to 1.65 (thank you time crate)
+
+- Set worker disk size to 4GB to fix "No space left on device" on pp64.
+
+- Update vendored dependencies
+- Use zstd compression for tarballs.
+
+- Remove gitui-v0.22.1.obscpio file. Forgot to delete
+
gnu-cobol
+- Move libcob-devel files to gnucobol.lang because libcob.h can not be found
+  (boo#1209438)
+
goaccess
+- Update to 1.7.2:
+  * Added a color-coding scheme to HTTP status codes.
+  * Added '--external-assets' command line option to output external
+    JS+CSS files. Great when used with Content Security Policy (CSP).
+  * Ensure there's a fallback for 'Windows' if it appears on the user-agent.
+  * Ensure we construct the WebSocket URL in a way that supports multiple
+    use cases when used along '--ws-url' and '--port'.
+  * Fixed a segfault due to a null pointer exception on FreeBSD.
+  * Fixed build with '--disable-nls'.
+  * Fixed invalid read (heap-buffer-overflow) when parsing an XFF spec via JSON.
+  * Fixed segfault when parsing a specific XFF specifier.
+
+- Update to 1.7.1:
+  * Added 'inlang' for easy localization (i18n) updates.
+  * Added nanosecond parsing option via the '%n' specifier.
+    Great for parsing 'Traefik' JSON logs duration field.
+  * Changed Docker workflow to build a docker image on different
+    architectures {'arm64' & 'amd64'}.
+  * Fixed issue with '--unknowns-as-crawlers' where it did not
+    process them as such.
+
godot
+- Require the mbedtls-devel version to be lower than 3
+
grim
+- Update to 1.4.1:
+  * render: print error message when image alloc fails
+  * write_jpg: fix printf format specifier
+  * Fail when more than one arguments are passed in
+- Drop 0001-write_jpg-fix-printf-format-specifier.patch
+
gstreamer-plugins-bad
+- Add patch from upstream to fix a heap overwrite in PGS subtitle
+  overlay decoder which might trigger a crash or remote code
+  execution (bsc#1213126, CVE-2023-37329):
+  * 0001-dvdspu-Make-sure-enough-data-is-allocated-for-the.patch
+
hexyl
+- Update to version 0.13.0
+  * Support both little and big Endian dumps using --endianness={little,big}
+  * Breaking: Changed the meaning of the short flag -C to be consistent with hexdump -C.
+    Previously, this would hide the character panel, but now -C shows the character panel,
+    in case it has been previously (e.g. in an alias) disabled with --no-characters
+
himalaya
+- Update to 0.8.4:
+  * Fixed windows releases due to cargo deps typo.
+
+- Update to 0.8.3:
+  * Fix windows releases due to coredump crate compilation error.
+  * Fix macos releases due to macos 12 System Integrity Protection.
+
+- Update to 0.8.2:
+  Changed:
+  * Made the code async using the tokio async runtime.
+  * On Linux, made the kernel keyring the default one (the one based on keyutils).
+  Fixed:
+  * Fixed the way folder aliases are resolved. In some case, aliases were
+    resolved CLI side and lib side, which led to alias errors sourcehut#95.
+
+- Update to 0.8.1:
+  Added:
+  * Implemented OAuth 2.0 refresh token flow for IMAP and SMTP,
+    which means that access tokens are now automatically refreshed
+    and is transparent for users.
+  * Added imap-oauth2-redirect-host and smtp-oauth2-redirect-host
+    options to customize the redirect server host name (default: localhost).
+  * Added imap-oauth2-redirect-port and smtp-oauth2-redirect-port
+    options to customize the redirect server port (default: 9999).
+  * Added email-listing-datetime-fmt to customize envelopes datetime
+    format. See format spec here.
+  * Added email-listing-local-datetime to transform envelopes datetime's
+    timezone to the user's local one. For example, if the user's local
+    is set to UTC, the envelope date 2023-06-15T09:00:00+02:00
+    becomes 2023-06-15T07:00:00-00:00.
+  Fixed:
+  * Fixed missing < and > around Message-ID and In-Reply-To headers.
+
+- Update to 0.8.0:
+  Added:
+  * Added keyring support, which means Himalaya can now use your system's global keyring to get/set sensitive data like passwords or tokens.
+  * Added required IMAP option imap-auth and SMTP option smtp-auth. Possible values: passwd, oauth2.
+  * Added OAuth 2.0 support for IMAP and SMTP.
+  * Added passwords and OAuth 2.0 configuration via the wizard.
+  * Added email-sending-save-copy option to control whenever a copy of any sent email should be saved in the sent folder defined in folder-aliases.
+  * Imported id mapper from the lib, which means that the id mapping is now done by the CLI.
+  * Added BackendConfig to AccountConfig::backend to match sender implementation.
+  * Added support for pipeline commands, which means commands can be either a single command (string) or piped commands (list of strings). It applies for:
+    + email-writing-verify-cmd
+    + email-writing-decrypt-cmd
+    + email-writing-sign-cmd
+    + email-writing-encrypt-cmd
+  Changed:
+  * Changed release archive extensions from .tar.gz to .tgz.
+  * Moved wizard module into domains (config, account, backend…).
+  * [BREAKING] Changed the way secrets are managed. A secret is a sensitive data like passwords or tokens. There is 3 possible ways to declare a secret in the config file:
+    + { raw = <secret> } for the raw secret as string (unsafe, not recommanded),
+    + { cmd = <secret-cmd> } for command that exposes the secret,
+    + { keyring = <secret-entry> } for entry in your system's global keyring that contains the secret.
+    This applies for:
+    + imap-passwd
+    + imap-oauth2-client-secret
+    + imap-oauth2-access-token
+    + imap-oauth2-refresh-token
+    + smtp-passwd
+    + smtp-oauth2-client-secret
+    + smtp-oauth2-access-token
+    + smtp-oauth2-refresh-token
+  Fixed:
+  * Fixed Windows releases corrupted archives.
+  Removed
+  * [BREAKING] Removed -s|--sanitize option. It is done by default now, except if the -t|--mime-type html is set.
+  * [BREAKING] Removed native-tls support, rustls-tls is now the only TLS provider available. Removed in consequence native-tls, rustls-tls and rustls-native-certs cargo features.
+
+- Update to 0.7.3:
+  * Fixed Windows releases (due to typo in the github action script).
+  * Fixed unit tests.
+
+- Update to 0.7.2:
+  Added:
+  * Added create and delete folder commands [sourcehut#54].
+  * Added generated completions and man pages to releases
+    [sourcehut#43].
+  * Added new account config option sync-folders-strategy which allows
+    to choose a folders synchronization strategy [sourcehut#59]:
+    + sync-folders-strategy = "all": synchronize all existing folders
+    for the current account
+    + sync-folders-strategy.include = ["folder1", "folder2", …]:
+    synchronize only the given folders for the current account
+    + sync-folders-strategy.exclude = ["folder1", "folder2", …]:
+    synchronizes all folders except the given ones for the current
+    account
+  * Also added new account sync arguments that override the account
+    config option:
+    + -A|--all-folders: include all folders to the synchronization.
+    + -F|--include-folder: include given folders to the
+    synchronization. They can be repeated -F folder1 folder2 or -F folder1 -F folder2.
+    + -x|--exclude-folder: exclude given folders from the
+    synchronization. They can be repeated -x folder1 folder2 or -x folder1 -F folder2.
+  * Added cargo features native-tls (default), rustls-tls and
+    rustls-native-certs.
+  Changed:
+  * Made global options truly global, which means they can be used
+    everywhere (not only before commands but also after) [sourcehut#60].
+  * Replaced reply all -a argument with -A because it conflicted
+    with the global option -a|--account.
+  * Replaced himalaya-lib by pimalaya-email.
+  * Renamed feature vendored to native-tls-vendored.
+  * Removed the develop branch, all the development is now done on the
+    master branch.
+  Fixed:
+  * Fixed config deserialization issue with email-hooks and email-reading-format.
+  * Fixed flags case sensitivity.
+
+- Update to 0.7.1:
+  Added:
+  * Added command folders expunge that deletes all emails marked for
+    deletion.
+  Changed:
+  * Changed the location of the documentation.
+  Fixed:
+  * Fixed broken links in README.md.
+  Removed:
+  * Removed the maildir-backend cargo feature, it is now included by
+    default.
+  * Removed issues section on GitHub, now issues need to be opened by
+    sending an email at ~soywod/pimalaya@todo.sr.ht.
+
+- Update to 0.7.0:
+  Added:
+  * Added offline support with the account sync command to synchronize
+    a backend to a local Maildir backend [#342].
+  * Added the flag --disable-cache to not use the local Maildir backend.
+  * Added the email composer (from its own repository) [#341].
+  * Added Musl builds to releases [#356].
+  * Added himalaya man command to generate man page [#419].
+  Changed:
+  * Made commands read, attachments, flags, copy, move,
+    delete accept multiple ids.
+  * Flipped arguments ids and folder for commands copy and move
+    in order the folder not to be considered as an id.
+  Fixed:
+  * Fixed missing folder aliases [#430].
+  Removed:
+  * Removed the -a|--attachment argument from write, reply and
+    forward commands. Instead you can attach documents directly from
+    the template using the syntax <#part filename=/path/to/you/document.ext>.
+  * Removed the -e|--encrypt flag from write, reply and forward
+    commands. Instead you can encrypt and sign parts directly from the
+    template using the syntax <#part type=text/plain encrypt=command
+    sign=command>Hello!<#/part>.
+  * Removed the -l|--log-level option, use instead the RUST_LOG
+    environment variable (see the wiki)
+
hoard
+- Update to 1.4.2:
+  * Fix lifetime longevity issue with theming password prompts. #279
+
+- Update to 1.4.1:
+  * List available namespaces when creating a new command
+  * Move from tui to ratatui
+  * Fix a bunch of pipelines issues
+
+- Update to 1.4.0:
+  * Add chatGPT integration
+  * cleanup code and make clippy happy
+
+- Update to 1.3.3:
+  * Make clippy happy
+  * Clean up some code
+
+- bsc#1210354 (CVE-2023-26964) Update to 1.3.2:
+  * Fix sec vulnerabilities from out of date dependency #279
+
+- Update to 1.3.1:
+  * Fix bug, where hoard pick would not properly replace named
+    parameterized commands
+  * Tab highlight now also uses customizable color from config file
+  * Added update checker on startup, to notify the user about a
+    new version
+
hotspot
+- Replace 0001-Prevent-running-hotspot-as-root.patch with
+  upstream change (boo#1209206, CVE-2023-28144):
+  * 0001-Opt-in-via-CMake-to-allow-privilege-escalation.patch
+
+- Update to 1.4.1:
+  * improved disassembly view with a godbolt-like source code
+    annotation
+  * the self cost columns for tracepoints are now hidden by default
+  * more flexible window layouting with KDDockWidgets
+  * you can export and import data from hotspot in a custom
+    format that is efficient to load and self-contained
+  * analysis data can be grouped by thread, process or CPU
+  * demangling for the D programming language
+  * a new frequency page that shows how often certain events got
+    measured, which can also indicate the CPU frequency scaling
+    when cycles are measured
+- Drop patch, merged upstream:
+  * 0001-CMake-Don-t-assume-KDE_INSTALL_-variables-are-relati.patch
+- Add patch to prevent running hotspot as root (boo#1208808)
+  * 0001-Prevent-running-hotspot-as-root.patch
+
hw-probe
+- update to version 1.6
+  * In this release we have properly tested and fixed support for almost all *BSD systems,
+    expanded support for more Linux systems, implemented probing of HP Smart Array
+    and improved decorating of possibly significant data in collected logs.
+  * all changes are described on https://github.com/linuxhw/hw-probe/blob/master/NEWS.md#hw-probe-16
+
hydrogen
+* Update to version 1.2.1
+  * Remove hydrogen-Fix-beat-and-bar-calculation-in-pattern-mode.patch
+  now upstream
+  * Update patch release-version.patch
+  * Update French translation
+  * Bugfixes
+  - Fix reopening of last used Playlist. In addition, in case the
+    PlaylistDialog was opened at the end of the last session - when
+    "Reopen last used playlist" is checked in the Preferences - the
+    dialog will be reopened too at the same position.
+  - Fix spurious marking of opened songs as modified.
+  - Fix MIDI (output) feedback for metronome toggling and pan
+    setting.
+  - Fix superfluous MIDI event - Action bindings. An incoming MIDI
+    event can be mapped to an Action only once.
+  - Fix tool tips of MIDI-learnable widgets. All bounded MIDI events
+    will be shown.
+  - Fix MIDI note output for channel 16 (previously only channel
+    1-15 were accessible in the InstrumentEditor).
+  - Fix spurious tempo changes to 120bpm when switching songs or
+    between pattern and song mode (#1779 and #1785)
+  - Support "START", "CONTINUE", and "STOP" type System Realtime
+    MIDI messages in PortMidi and CoreMidi.
+  - Fix MIDI action binding to incoming MMC_DEFERRED_PLAY event.
+  - Fix missing MIDI driver restart when adjusting corresponding
+    parameters in Preferences.
+  - Fix MIDI Machine Control (MMC) event type handling on Windows
+    (#1773)
+  - Fix loading of legacy drumkits. All layers but the first one
+    were dropped during drumkit upgrade (#1759)
+  - Fix MIDI input handling with "Discard MIDI messages after action
+    has been triggered" checked. Incoming NOTEON message were
+    dropped without triggering a sound (#1751)
+  - Fix beat and bar calculation in pattern mode (#1741)
+  - Fix compilation in GCC with -Werror=format-security (#1739)
+  - Explicit usage of Python3 in stats.py script
+  - Fix build against Musl (nekopsykose)
+  - Omit git commit hash in displayed version of release builds
+
+- Add upstream patch:
+  hydrogen-Fix-beat-and-bar-calculation-in-pattern-mode.patch
+- Update to version 1.2.0
+  * General behavior
+  - Remembering paths in all export/import/save/open dialogs.
+  - Introducing keyboard shortcut for the Open Pattern dialog.
+  - Allow for opening more than one Pattern at once.
+  - All available audio drivers can now be chosen via CLI.
+  - Implement missing EFFECT_LEVEL_RELATIVE MIDI action
+  - If the Timeline is activated, the tempo set using the BPM
+    widget, BeatCounter, Tap Tempo, or MIDI/OSC commands is used left
+    of the first tempo marker.
+  - The tempo provided by an external JACK timebase master
+    overwrites all internal tempo settings.
+  - The BPM widget switches to read-only mode and displays the
+    current playback speed when the Timeline is activated.
+  - Activation of the Timeline is now stored in each individual
+    .h2song file.
+  - Autosave files will be hidden. The interval they are stored with
+    as well whether there is an autosave at all can be set via the
+    Preferences. Hydrogen will inform the user whether there are
+    unsaved changes to recover taken from the autosave file.
+  - Hydrogen is now able to recover changes applied to a new and
+    empty song in case they are discarded or the session end
+    untimely (using autosave files)
+  - Multiple actions can be assigned to a single MIDI event.
+  - The virtual keyboard is now decoupled from the "Hear New Notes"
+    button in the Pattern Editor and can be used to play back notes in
+    song mode with playback rolling too.
+  - Mutable warning dialogs are shown when saving/exporting a
+    drumkit containing samples of mismatching license and when
+    saving/exporting a drumkit or song containing a copyleft license
+    or one requiring an attribution.
+  - Drumkit properties dialog does now feature a table listing all
+    contained samples and associated licenses.
+  - All actions accessible via right-clicking in the SoundLibrary do
+    affect the stack drumkits and not the instrument list of the
+    current song.
+  - All actions accessible via the Drumkits tab of the main menu do
+    affect the loaded drumkit using the current song's custom
+    instrument and component list.
+  * Interface
+  - Improved scalability (most PNG images were replaced by SVGs,
+    hardcoded PNG labels are now directly drawn by Qt, and spin boxes,
+    buttons, and combo boxes are now based on native Qt widgets)
+  - Improved internationalization (all labels are translatable now
+    and support UTF-8)
+  - Improved accessibility (widgets were increased to fill available
+    space, preference option to (de- and) increase font size)
+  - All colors can be altered via the preferences
+  - Input widgets (rotary, fader, combo box, spin box, button) do
+    support both mouse and keyboard input (e.g. setting numerical values)
+  - Input widgets are faintly highlighted when hovered and more
+    strongly highlighted when clicked (focuses). Only the focused
+    widget can receive keyboard input
+  - MIDI-learnable widgets now show their corresponding MIDI action
+    and it's binding in the tooltip
+  - It's now possible to jump to the beginning of the currently
+    playing pattern by clicking its position on the ruler in the
+    pattern editor.
+  - The length of patterns can now be changed while transport is
+    rolling.
+  * PreferencesDialog > Appearance tab overhaul
+  - Drop previous font options in favor for three different
+    levels of font (without exposing their point sizes)
+  - Ability to decrease or increase the overall font size
+  - All settings in the Appearance tab - except the overall layout
+    and the scaling policy - take effect immediately (no restart
+    required anymore)
+  - Drop the "fixed" coloring methods and rename "steps" to
+    "Custom".
+  - Via a colored button the particular line color can now be
+    adjusted using a QColorDialog
+  - Custom color tab to alter all colors in the GUI (big thanks to
+    the Muse4 team for the original code).
+  - All options set in the Appearance tab can be imported and
+    exported into and shared via dedicated .h2theme files.
+  - Overhauled MIDI Table
+  - Per effect or layer setting are now done in dedicated spin
+    boxes instead of providing individual actions for each.
+  - Only spin boxes for parameters required for a particular
+    action are shown.
+  - Rows can be removed by unsetting both the Event and Action
+    combo box.
+  - Clicking the widget showing the status messages does now open a
+    dropdown menu displaying the last 100 messages.
+  * Audio processing
+  - Set CoreAudio (macOS) buffer size to control latency
+  - New fast exponential ADSR envelope processing
+  * InstrumentEditor UX improvements:
+  - rework start/end/loop frame slider selection and motion.
+  - rework velocity/pan envelope editing
+  * SongEditor UX improvements:
+  - Tags can now be inserted at all possible columns
+  - Hovering a Tag displays its content
+  - Changed behavior of the Tempo Marker dialog: When clicking an
+    existing Tempo Marker it can be moved, edited, or
+    deleted. Clicking a column with no Tempo Marker present allows
+    to create a new one at an arbitrary location.
+  - Timeline is deactivated automatically when switching to Pattern
+    Mode or a JACK timebase master is present
+  - The tempo used left of the first tempo marker is painted in a
+    darker color.
+  - The currently used Tempo Marker gets highlighted.
+  - Tags have been moved into Timeline (next to the Tempo Markers)
+    in order to make room to accommodate the cursor in the ruler to
+    highlight the current position
+  - Tags can be inserted by left-clicking the bottom area of the
+    Timeline (above the ruler).
+  - Clicking the ruler is now always enabled and automatically
+    switches transport into Song Mode.
+  - Full-size playhead
+  - The icons in the pattern list indicating whether a pattern is
+    playing in stacked pattern mode are now colored and can have four
+    different states: on, off, off next (pattern is played till the
+    end and then turned off), and on next (pattern is played as soon
+    as transport is looped again)
+  - In song mode the pattern editor can be locked meaning that
+    always the bottom-most pattern of the current column the
+    playhead resides in as well as all other playing notes are
+    shown. Pattern selection is done automatically when moving into
+    a different column.
+  * PatternEditor UX tweaks:
+  - Relocating transport by clicking the ruler is now supported
+    (like in the SongEditor) and automatically switches transport
+    into Pattern Mode.
+  - Full-size playhead
+  - The ruler was decoupled from the currently selected pattern. It
+    always has the size of the largest playing pattern and always
+    shows the transport position using a playhead. Whether or not the
+    current pattern is played back is indicated by a full-height
+    cursor.
+  - All note properties except of the note key can now be altered in
+    both the drum pattern editor and the piano roll editor by
+    right-clicking and dragging a note.
+  - All notes of the currently playing patterns will be hinted in
+    stacked pattern mode, when selecting a virtual pattern, or in
+    case the pattern editor is locked in song mode. Even those notes
+    exceeding the length of the current pattern are shown.
+  * OSC API
+  - Add command /Hydrogen/LOAD_DRUMKIT
+  - Add command /Hydrogen/UPGRADE_DRUMKIT
+  - Add command /Hydrogen/VALIDATE_DRUMKIT
+  - Add command /Hydrogen/EXTRACT_DRUMKIT
+  - Add command /Hydrogen/BPM
+  - /Hydrogen/STRIP_SOLO_TOGGLE/X and /Hydrogen/STRIP_MUTE_TOGGLE/X
+    can now be called without any argument too
+  * H2CLI
+  - Add `--upgrade` option to upgrade a drumkit
+  - Add `--check` option to validate a drumkit
+  - Add `--extract` option to extract the content of a drumkit
+  - Drumkit supplied using `-k` option can now be either the name of
+    an install kit or an absolute path to a kit (does not have to be
+    located in the Hydrogen's drumkit folder).
+  * Bugfixes
+  - fix dithering of SongEditor when viewing the playback track
+    and resizing the application or for very small size (#1379).
+  - fix rewinding to beginning of pattern in pattern mode with no
+    pattern inserted in SongEditor (#932)
+  - fix display of tags and tempo marker while loading a song
+    (introduced in 1.1.0) (#1393)
+  - default MIDI driver is now picked with the system's capabilities
+    in mind
+  - remove unwanted samples at the end of the exported song (to
+    .wav) (#946)
+  - fix undefined tempo before first tempo marker (#416)
+  - fix Song export to keep writing till all notes and FX have faded
+    out
+  - notes at first ticks in pattern were missed when relocation
+    transport using the position ruler
+  - fix playhead glitches when adding toggling patterns at the end
+    of the song after transport was loop at least once
+  - deactivating loop mode result stopping transport at the end of
+    the song even if transport was already looped at least once
+  - relocation of the playhead use JACK is now also support in case
+    transport is not rolling
+  - Hydrogen is now able to handle multiple drumkits featuring the
+    same name in the SoundLibrary. The drumkit's absolute path will be
+    used as unique handler from now on.
+  - Mixing instruments from different drumkit in one Song works
+    again
+  - Hydrogen shows a now a warning dialog when exporting/saving date
+    to read-only folders
+  - fix text overflow in Director
+  * Crash reporting
+  - Fatal errors will now show a GUI report including details to report
+    and potential hints about the cause
+
i3status-rust
+- Update to version 0.31.9:
+  * Add missing default net_cellular icon progression in the "none" icon set.
+  * Removed unused default icons in the "none" icon set.
+  * Defer icon lookup until formatting (see #1774)
+
+- Update to version 0.31.8:
+  * v0.31.8
+  * update NEWS.md
+  * update inotify code not to use deprecated fns
+  * update deps (fixes build on latest nightly)
+  * switch to upstream git zbus
+  * use is_some_and(..) instead of map_or(false, ..)
+  * build(deps): bump openssl from 0.10.54 to 0.10.55
+  * update README
+  * Temporarily switch to a fork of zbus
+  * v0.30.7
+
+- Update to version 0.31.8:
+  * Music block now functions properly when a player name contains -.
+
+- Update to version 0.31.7:
+  * Maildir: Support glob expansions in inboxes (for example, this now works: inboxes = ["~/Maildir/account1/*"]).
+  * Battery(sysfs): Handle the case when charge rate is lower than current power usage.
+  * Keyboard layout: Add support for keyboard layout variant to setxkbmap driver.
+  * Blocks that make web requests will now do 3 retries before displaying an error.
+  * Blocks can now recover from "Failed to render full text" errors.
+
+- Update to version 0.31.6:
+  * Support custom separators in rotating text. Example: format = " $title.str(max_w:30, rot_interval:0.2, rot_separator:' - ') |".
+  * Battery(sysfs): calculate battery level based on {charge,energy}_{now,full} instead of kernel-provided capacity (see #1906).
+  * Text formatting now operates on graphemes instead of "chars". This means that symbols like "a̐" are now processed correctly.
+
+- Update to version 0.31.5:
+  * Net: do not consider IPs with scope host or lower.
+  * Net: Define an "active" interface as an interface with 1) state UP or 2) state UNKNOWN but has an IP. Previously only part 1) was considered.
+  * Net: add inactive_format.
+
+- Update to version 0.31.4:
+  * Update Cargo.lock.
+
+- Update to version 0.31.3:
+  * Kdeconnect: Add connectivity report (cell network)
+  * Add vertical option for bar formatting (▁ ▂ ▃ ▄ ▅ ▆ ▇)
+
+- Update to version 0.31.2:
+  * Vpn: add mullvad driver.
+  * Don't require block = "..." to be the first field.
+  * Battery: automatically recover from some errors.
+  * Sound: automatically reconnect to pulseaudio server when connection fails.
+
+- Update to version 0.31.1:
+  * Update material-nf icon set for Nerd Fonts v3.
+  * Temperature: the icon now reflects the max temperature (material-nf icon set only).
+
+- Update to version 0.31.0:
+  * Sound: mappings_use_regex now defaults to true.
+  * block = "..." is now required to be the first field of block configs. However, an error in a block's config will not break the entire bar.
+  * Battery: added charging_format config option.
+  * Net: fix missing_format option.
+  * Backlight: fix "calibright config error".
+  * The default release profile no longer strips the binary.
+  * Added release-debug-info profile.
+
+- Update to version 0.30.7:
+  * update crossbeam-channel (0.5.7 is yanked)
+  * update NEWS.md
+  * formatting: try to fix rounding in .eng() (#1858)
+  * update NEWS.md
+  * docs: fix some manpages by disabling texmath extension
+  * docs: rearrange sound docs to match other blocks
+  * update NEWS.md
+  * sound: add active_port_mappings, hide active_port when not available
+  * custom: set child's stdin to null
+  * move some docs from readme to blocks.rs
+
+- Update to version 0.30.7
+- Added:
+  * Backlight: Add regex device name matching, and display/control more than one monitor with the same block.
+  * Backlight: Add missing_format option.
+  * Sound: add mappings_use_regex option which makes the block treat mappings as regexps. Defaults to false.
+  * Sound: add $active_port placeholder and active_port_mappings option.
+- Changed
+  * Kdeconnect: do not fail if notifications are not available.
+  * Fix a panic when formatting a number as tebibytes.
+  * Custom: set command stdin to null. This prevents custom commands from stealing click events.
+  * Fix some rounding errors in .eng formatter.
+
+- Update to version 0.30.6
+- Added:
+  * New block: vpn: Shows the current connection status for VPN networks. Currently only nordvpn is supported (#1725).
+  * Padding character of eng formatter is now configurable. For example, $volume.eng(pad_with:0) will render as 05% instead of  5%.
+  * Bluetooth: added battery_state config option which allows to customize block's color in relation to device battery level (#1836).
+  * Bluetooth: added $battery_icon placeholder (#1837).
+  * Time: Right click on the block to reverse cycle between timezones (#1839).
+- Changed
+  * TNet: the WiFi icon now reflects the signal strength (material-nf icon set only).
+  * TApt: now works on systems with non-English locales (#1843).
+  * TNotify: support latest SwayNotificationCenter version.
+
+- Update to version 0.30.5
+- Added:
+  * New block amd_gpu: display the stats of your AMD GPU.
+  * Battery: filter battery selection by model (#1808).
+  * External_ip: allow forcing legacy (v4) IP (#1801).
+- Changed
+  * Backlight: improve ddcci interactions (#1770).
+  * Battery: fix the default device for UPower driver.
+  * Custom: support shell expansions in watch_files.
+  * Custom_dbus: fix default format.
+  * merge_with_next block option now works with non-native separators, and also fix color of separators.
+  * Hueshift: step now actually maxes at 500 (#1827)
+  * Fix --help page.
+  * config,theme,icons: do not look for files relative to the CWD
+
+- Update to version 0.30.4
+- Added:
+  * Time: timezone can now be set to a list of values. Click on the block to cycle between timezones.
+- Fixed:
+  * Net: prefer the default device when multiple devices match the regex.
+  * Cpu: fix panic on systems which do not report CPU frequency.
+  * Bluetooth: change block color based on battery level.
+  * Memory: consider ZFS arc cache as available memory.
+  * Backlight: reconnect after monitor sleeps.
+  * Nvidia GPU: display unavailable stats as zeros instead of failing.
+  * Bluetooth: correctly display battery level even if it is not available instantly.
+  * Net: get SSID from NL80211_BSS_INFORMATION_ELEMENTS (makes SSID available on Linux kernel 5.19 and newer).
+  * Backlight: fallback to sysfs on systems which don't use systemd-logind.
+  * Do not require config file to have a .toml extension.
+
+- Update to version 0.30.3:
+  * v0.30.3
+  * make pomodoro usable again
+  * Update NEWS.md
+  * Update NEWS.md
+  * readme: list all possible `button` values
+  * setting a click handler without action disables default action
+  * net: do not panic if ip addr has wrong length
+  * Fix typos (#1738)
+  * music: fix typo for 'play' and 'preferred' (#1754)
+  * net: select first available local ip
+
+- Update to 0.30.3
+  * New service_status block: monitor the state of a (systemd) service.
+  * New tea_timer block: a simple timer.
+  * When blocks error they no longer take down the entire bar. Instead, they now enter error mode: "X" will be shown and on left click the full error message will be shown in the bar.
+  * apt block has new ignore_phased_updates option. (#1717)
+  * battery now supports empty_threshold to specify below which percentage the battery is considered empty, and empty_format to use a custom format when the battery is empty.
+  * battery now supports not_charging_format config option. (#1685)
+  * custom_dbus block can now be used more than once in your config.
+  * custom block has new config option persistent which runs a command in the background and updates the block text for each received output line.
+  * focused_window block now supports most wlroots-based compositors.
+  * music block now supports controlling and displaying the volume for individual players (#1722)
+  * music block now has interface_name_exclude and improved playerctld support (#1710)
+  * net block now supports regex for device (#1601)
+  * notify block now has support for SwayNotificationCenter via driver = "swaync" (#1662)
+  * weather block now supports using met.no as an info source (#1577)
+  * More blocks now support format option (custom, custom_dbus, hueshift, maildir, notmuch, pomodoro, time, uptime)
+  * Some blocks now have debug logs which can be enabled like so: RUST_LOG=block=debug i3status-rs where "block" is the block name.
+  * Default click actions for blocks can now be remapped (#1686)
+
ibus-typing-booster
+- Update to 2.23.4
+- Support msymbol 'S-C-Return' as a commit to preedit key
+  (Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/457).
+  Needed by hi-itrans.mim, hi-optitransv2.mim, kn-optitransv2.mim,
+  mr-gamabhana.mim, sa-itrans.mim, sa-vedic-itrans.mim
+- Remove useless m4/{Makefile.am,as-version.m4}
+- Update emoji annotations from CLDR
+- Update UnicodeData.txt to current Unicode 15.1.0 draft
+  (https://www.unicode.org/Public/draft/UCD/ucd/UnicodeData.txt)
+- Update emoji data files for current Unicode 15.1 DRAFT
+  (https://www.unicode.org/Public/draft/UCD/ucd/emoji/emoji-data.txt
+  https://www.unicode.org/Public/draft/UCD/ucd/emoji/emoji-variation-sequences.txt)
+
+- Update to 2.23.3
+- Translation update from Weblate (tr 100%)
+
+- Include inscript2 input methods only for suse_version < 1550
+  i.e. do not include it on Tumbleed anymore. Because Tumbleweed
+  has m17n-db-1.8.2 which has the inscript2 input methods already.
+
+- Update to 2.23.2
+- Move self._gsettings.connect('changed', self.on_gsettings_value_changed)
+  in __init__() *after* defining self._set_get_functions
+  (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/454)
+  (Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2171140)
+- Translation update from Weblate (ar 100%)
+- Update emoji annotations from CLDR
+
+- Update to 2.23.1
+- Translation update from Weblate (pl 100%)
+- Adapt some test cases to changes in enchant
+
+- Update to 2.23.0
+- Translation update from Weblate (de 100%, ka 100%, nl 100%, sv 100%, uk 100%)
+- configure.ac: add a warning about not using /usr/local as the prefix
+  (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/444)
+- Add an option to convert language specific digits to ASCII
+  (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/445)
+- Strip entered autosettings value for boolean values
+- Update emoji annotations from CLDR
+
+- Update to 2.22.5
+- Remove `xml:lang="en"` from the screenshots in appdata.xml
+  (See: https://github.com/ximion/appstream/issues/494)
+- Improve regexp for parsing description out of of .mim files
+  (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/440)
+- Setup tool: scale input method icons correctly
+  (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/441)
+- Update emoji annotations from CLDR
+- Get version information of m17n-db
+  (Needed for test cases depending on the version of m17n-db)
+- Skip m17n_translit test cases when m17n-db is too old
+
+- Update to 2.22.4
+- Return empty program_name and window_title in get_active_window_xprop()
+  when xprop results are unexpected
+  (Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2175009)
+- Update emoji annotations from CLDR
+
+- Update to 2.22.3
+- Apply workaround for committing multiline strings only for '^gtk3-im:(firefox|thunderbird)', i.e. not on Wayland
+  (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/438)
+
+- Update to 2.22.2
+- Translation update from Weblate (ka 100%, sw 99.5%)
+
+- Update to 2.22.1
+- Translation update from Weblate (sv 100%)
+- Fix input of '_' and emoji lookup using '_' for the French BÉPO layout
+  and the German neo2 layout
+  (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/432)
+
+- Update to 2.22.0
+- Translation update from Weblate (de 100%, ja 37.8%, nl 100%, pl 100%, tr 100%, uk 100%)
+- Changing the order of dictionaries and input methods by keybinding
+  should not be permanent when autosettings for dictionaries or
+  keybindings are applied
+- Add a GUI in the setup tool for the autosettings
+  (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/423)
+  (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/328)
+- Update emoji annotations from CLDR
+
+- Update to 2.21.4
+- Memoize instances of the Dictionary class
+  (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/425)
+
+- Update to 2.21.3
+- Update emoji annotations from CLDR
+- Translation update from Weblate (ka 100%)
+
+- Update to 2.21.2
+- Autoselect extremely likely candidates:
+  Allow only adding of accents, never removing accents
+  (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/420)
+
influxdb
+- Version 1.11.1.
+  * Many bugfixes: https://dl.influxdata.com/platform/nightlies/master-1.x/CHANGELOG.md
+
+- Version 1.11.0.
+  * Many bugfixes: https://dl.influxdata.com/platform/nightlies/master-1.x/CHANGELOG.md
+
installation-images:openSUSE
+- merge gh#openSUSE/installation-images#655
+- add mt to rescue system (bsc#1188998)
+- add cpio-mt to spec file
+- cifs kernel modules have a new location (bsc#1214329)
+- 16.59.0
+
+- merge gh#openSUSE/installation-images#651
+- Drop dependency on Leap-Micro-release-dvd for LeapMicro
+  (bsc#1214688)
+- 16.58.7
+
ispc
+- Add ispc-add-cstdint-include.patch to fix compilation with GCC 13.
+
jacktrip
+- Update to version 1.10.0
+  * Use Device Authorization Flow by @dhing1024 in #1037
+  * Improvements and Fixes for Device Flow Code by @dhing1024 in #1039
+  * More Informative Loading Message by @dhing1024 in #1041
+  * Cleanup Audio When Switching to Classic Mode by @dhing1024 in #1042
+  * Optimize PLC regulator performance by using double instead of long double by @mikedickey in #1043
+  * Optimized performance of virtual studio volume meters by @mikedickey in #1044
+  * Detect Feedback Loops by @dhing1024 in #1035
+  * Optionally Disable Feedback Detection by @dhing1024 in #1049
+  * Fixing connected view errors by @nwang92 in #1057
+  * Improve FFT Performance by @dhing1024 in #1055
+  * Fixed issue with RTAudio scanning interfaces several times at startup by @mikedickey in #1063
+  * Add audio interface blacklist to exclude Realtek ASIO driver by @mikedickey in #1066
+  * Add timestamps to debug window by @psiborg112 in #1068
+  * Updating new FeedbackDetection setting to be enabled by default by @mikedickey in #1073
+  * Fixing bug with "Change Device Settings" dialog being empty by @mikedickey in #1072
+- Provide separate source for Simple-FFT library (https://github.com/jacktrip/jacktrip/issues/1079)
+
+- Update to version 1.9.0
+  * Fix openssl v3 compatibility failures with Linux static build by @mikedickey in #1005
+  * Show error message when single studio limit is reached by @nwang92 in #1008
+  * Fixing Play Test Tone button on Linux by @mikedickey in #1010
+  * Remove yes/no at first open by @mattahorton in #1009
+  * Moving faust-generated code out of header files by @mikedickey in #1011
+  * Enable Local Monitoring of Inputs by @dhing1024 in #1014
+  * Output Volume Meters Include Monitor by @dhing1024 in #1017
+  * Changing "All Devices" for non-ASIO category to be "High Latency" by @mikedickey in #1020
+  * GHA: add an option to wait for static Qt build by @dyfer in #1023
+  * Feature/adding icons to connected view by @nwang92 in #1022
+  * Updating some tooltips, sliders and positioning for connected interface by @mikedickey in #1024
+  * Hide classic mode link after first launch by @mattahorton in #1025
+  * Monitor Controls from API by @dhing1024 in #1026
+  * Refresh devices when opening the popup by @nwang92 in #1012
+
+- Update to version 1.8.1
+  * Add tooltips to audio settings to explain "input device" and "output device"
+  * Allow IP check to work with IPv6 only
+  * make buffer size and sample rate settable for Pipewire
+  * Fixes for Special Characters in Device Names
+  * Adding a simple link to create your first studio to VS login page
+  * Fixing QML error on undefined boolean
+  * AudioSettings should show the currently selected device
+  * Save Output Channels Settings
+
+- Update to version 1.8.0
+  * Replace icons from unknown sources
+  * Replace share/invite icon
+  * Parse command line for GUI
+  * Select and Configure Input Channels
+  * Replace QVector in meter code
+  * Move inputMixMode into AudioInterface.h
+  * Fix Output Device Selection Bug
+  * Bugfix Refresh Button & Device Combo State
+  * Fix crash when using JACK
+  * Change text on button when deeplinked
+  * Select Output Channels
+  * Minor Fix for Refresh Button on Settings Page
+  * Improve Sign In For First Time Users
+  * Only check IP address if loading standard GUI
+
+- Update to version 1.7.1
+  * Correcting the year
+  * Add QuickControls2 dependency to Meson and Qmake, and enable ahead-of-time compilation of QMLs
+  * Make Video Button Available to Non-Admins
+  * Use random bind port to avoid client collision
+  * Attempt to fix a couple of memory leaks
+  * Reorganize Audio Setup and Settings Screens
+  * Bugfix/plcBigFPP
+  * Bugfix Manage Button Crashes App in Browse View
+  * Remove beta1 name
+  * Add refresh button back to settings
+
-- fix build with gcc 4.7
-
-- initial version (1.0.5+2)
-
java-11-openjdk
+- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
+  release fixing a regression in July 2023 CPU)
+  * Changes:
+    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
+    field size)
+    + JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1
+
+- Added patch:
+  * reproducible-javadoc-timestamp.patch
+    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
+    generation more reproducible
+
java-17-openjdk
+- Update to upstream tag jdk-17.0.8.1+1 (August 2023 emergency
+  release fixing a regression in July 2023 CPU)
+  * Changes:
+    + JDK-8313765: Invalid CEN header (invalid zip64 extra data
+    field size)
+    + JDK-8314677: Bump update version for OpenJDK: jdk-17.0.8.1
+
+- Added patch:
+  * reproducible-javadoc-timestamp.patch
+    + use SOURCE_DATE_EPOCH in javadoc and make the javadoc
+    generation more reproducible
+
jimtcl
+- Fix build on armv7l
+- Fix the conflict in versioned library package content
+
+- added patch exclude_mtime_aiostat_test_on_32bit.patch to exclude mtime test on 32bit platforms
+
+- Update to version 0.82
+  * Bugs fixed:
+    + dict - under some circumstances it was possible to add duplicate keys to a dict
+    + file delete - -force and -- were handled incorrectly
+    + aio: ssl - fix eof detection with openssl3
+    + getref and setref - now accept fully qualified references
+    + unset - don’t return a result with -nocomplain
+    + Garbage collection - sometimes GC was overly zealous
+    + regexp - builtin regexp fix for end of word check
+    + dict with - now correctly returns the script result
+    + Unicode ranges are closed intervals. This affected the character class of the end character of each range.
+  * Features and improvements added:
+    + aio gets - improve behaviour for non-blocking streams
+    + aio TIP 603 - implement stat of an open file handle
+    + aio socket pty - filename is now available
+    + Included sqlite updated to version 3.38.0
+    + redis extension - enable TCP_KEEPALIVE, add support for -type and -async
+    + try - add support for trap
+    + oo constructor is now more flexible (possible incompatibility with 0.81)
+    + socket - add support for -async
+    + Updated linenoise now has support for word forward, word backward
+    + Updated Unicode to 14.0.0
+    + file normalize - now supported on Windows
+    + aio copyto - performance improvement for large copies
+    + Memory allocator is now replaceable
+    + info frame is now more Tcl compatible (incompatibility with 0.81)
+    + New timerate command for improved benchmarking - largely compatible with TIP 527
+    + vwait - add support for -signal for improved handling of signals in the event loop
+    + clock millis and clock micros - now use monotonic time if possible (not affected by system time changes)
+    + ensemble and namespace ensemble simplify creation of ensemble commands
+  * Possible incompatibilities in version 0.82
+    + New approach to oo constructor means some existing code may need to be altered
+    + info frame now returns a dict rather than a list and can access non-proc frames. stacktrace will continue to work and should be preferred when retrieving a live stack trace
+    + New ABI version means that compiled extensions will need to be rebuilt to work with this version
+- excluded ssl test from running inside build environment
+
kaffeine
+- Kaffeine is unmaintained upstream but still has users. Switch to
+  a git snapshot. Notable changes:
+  * Drop kdelirc profile
+  * Don't invoke XScreenSaverSuspend on Wayland (kde#460970)
+  * Add desktop file name to solid actions
+  * Fix activating existing window
+  * src/scanfile.dvb: update to latest database
+
kdump
+- update calibrate values, newly added SLE15-SP6 values
+
+- upgrade to version 1.9.6
+  * use newer /sys/kernel/fadump/ instead of /sys/kernel/fadump_
+  * use kexec -a which falls back to kexec_load(2) automatically
+  * update s390 udev rules
+  * drop systemd device timeout generator
+
+- upgrade to version 1.9.5
+  * SELinux: temporary hack for bsc#1213721
+
+- upgrade to version 1.9.4
+  * fix FADUMP initramfs when not created by mkdumprd
+  * FADUMP: let dracut de-duplicate initrd by preserving modification times
+  * mkdumprd: only regenerate FADUMP initrds when needed
+  * mkdumprd: exit when destination not writable (transactional updates)
+  * mkdumprd: don't call update-bootloader
+
+- upgrade to version 1.9.3
+  * fix calibrate
+  * update kdump(7) manpage
+  * turn missing ssh, lftp or host key into a fatal error
+  * depend on openssh-clients not openssh
+- refreshed calibrate values
+
+- upgrade to version 1.9.2
+  * adapt kdumptool to work with YaST
+  * wait for SMTP server to become reachable
+
+- upgrade to version 1.9.1
+  * reimplement e-mail notifications
+
+- upgrade to version 1.9
+  * complete rewrite of kdump-save and parts of initrd generation
+  * mounts are now entirely handled by dracut
+  * deprecated: split dumps (saving to more than one targets at once)
+  * deprecated: KDUMPTOOL_FLAGS option removed; original XENALLDOMAINS is now
+    the default, disable with MAKEDUMPFILE_OPTIONS=-X
+  * deprecated: notification e-mails
+  * deprecated: copying of the kernel image (KDUMP_COPY_KERNEL)
+  * FTP and SFTP are now handled by lftp, added to the spec file as Recommends:
+  * SSH and SFTP now support passwords provided in the URL
+  * fixed KDUMP_SSH_HOST_KEY, now needs to include the key type
+  * new KDUMP_DUMPFORMAT=raw, will save an unmodified /proc/vmcore
+  * the output directory name is now YYYY-MM-DD-HH-MM, i.e. the separator between
+    HH and MM changed
+  * unified default KDUMP_SAVEDIR across config, code and man to /var/crash
+  * ping is now used to detect network is up; disable with KDUMP_NET_TIMEOUT=0
+  * all the yes/no options changed to true/false; yes/no/1/0 still accepted
+  * put the kdump initrd in /var/lib/kdump/initrd
+  * use default kernel symlink (/boot/vmlinuz) instead of kernel autodetection
+  * KDUMP_KERNELVER can specify an absolute path to a kernel image
+  * improved mkdumprd detection of changed settings
+  * removed all of kdumptool except the calibrate subcommand
+  * cleaned up dependencies (ssh now only Recommended)
+
+- bumped version update to v1.0.3
+
+- Honor the KDUMP_VERBOSE setting in kdump-save
+- fix distro prefix for ALP
+- add calibrate values for ALP (copied from TW)
+
+- add calibrate values for Leap 15.5
+
-- run kdump.service only after kdump-early.service (bsc#1196335)
+- Run kdump.service only after kdump-early.service is done
+  (boo#1196335)
+- fixed calibrate build on s390
+- minor fixes
+
+  * print the qemu messages and trackrss log during calibrate
-
-- maintain the spec file in git
-- print the qemu messages and trackrss log during calibrate
-- calibrate: properly kill the tail process
+- remove build dependency for wicked
+- fix package summary in the spec file
+
+- maintain the spec file in git
-
-- fix broken URL in manpage (bsc#1187312)
-- pull from new upstream SLE-15-SP5 branch
-- copy SLE-15-SP4 calibration data for SLE-15-SP5
+- update to kdump-1.0.2+git20:
+  * Use inst_binary to install kdump-save
+
+- disable build on arm 32bit (bsc#1203888)
+
+- mkdumprd: replace mkinitrd with native dracut (bsc#1202443)
+
+- fix network-related dracut options handling for fadump case
+- drop the elevator=deadline kernel option (bsc#1193211)
+- fix broken URL in manpage (bsc#1187312)
-- remount target filesystem r/w for fadump (bsc1197125)
-- stop reloading FADump on CPU hot-add event (jsc#IBM-768)
-- mkdumprd: add option to run dracut in debug mode
+
+- remount filesystem r/w for fadump (bsc#1197125)
+- stop reloading FADump on CPU hot-add event
+- add support for Zstandard compression algorithm
kernel-64kb
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-azure
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- enable TPM in azure (bsc#1214760)
+- commit 4d71c02
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-debug
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-default
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-docs
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-kvmsmall
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-obs-build
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-obs-qa
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-rt
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- rt: Add helper script to refresh RT configs based on the parent
+  (SLE Realtime Extension).
+- commit 2e18a53
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-rt_debug
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- rt: Add helper script to refresh RT configs based on the parent
+  (SLE Realtime Extension).
+- commit 2e18a53
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-source
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-source-azure
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- enable TPM in azure (bsc#1214760)
+- commit 4d71c02
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-source-rt
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- rt: Add helper script to refresh RT configs based on the parent
+  (SLE Realtime Extension).
+- commit 2e18a53
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-syms
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-syms-azure
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- enable TPM in azure (bsc#1214760)
+- commit 4d71c02
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-syms-rt
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- rt: Add helper script to refresh RT configs based on the parent
+  (SLE Realtime Extension).
+- commit 2e18a53
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kernel-zfcpdump
+- Update References
+  patches.suse/Bluetooth-L2CAP-Fix-use-after-free-in-l2cap_sock_rea.patch
+  (git-fixes bsc#1214233 CVE-2023-40283).
+- commit 63a801c
+
+- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
+- commit ac82be8
+
+- Refresh sorted section
+- commit a6fbcee
+
+- netfilter: nf_tables: use correct lock to protect gc_list
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with abort path
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: GC transaction race with netns dismantle
+  (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix GC transaction races with netns and
+  netlink event exit path (CVE-2023-4563 bsc#1214727).
+- netfilter: nf_tables: fix kdoc warnings after gc rework
+  (CVE-2023-4563 bsc#1214727).
+- refresh
+  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
+- kabi: hide changes in struct nft_set (CVE-2023-4563
+  bsc#1214727).
+- netfilter: nf_tables: GC transaction API to avoid race with
+  control plane (CVE-2023-4563 bsc#1214727).
+- commit cfed41c
+
+- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
+- commit 47ff352
+
+- "drm/vmwgfx: Remove rcu locks from user resources" (bsc#1203329 CVE-2022-40133 bsc#1203330 CVE-2022-38457)
+  This patch also fixes two CVEs. Update the References tag accordingly.
+- commit 552e790
+
+- s390/ipl: add missing secure/has_secure file to ipl type
+  'unknown' (bsc#1214976).
+- commit 33974e8
+
+- cpufreq: Fix the race condition while updating the
+  transition_task of policy (git-fixes).
+- rpmsg: glink: Add check for kstrdup (git-fixes).
+- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
+- leds: trigger: tty: Do not use LED_ON/OFF constants, use
+  led_blink_set_oneshot instead (git-fixes).
+- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
+  false (git-fixes).
+- leds: multicolor: Use rounded division when calculating color
+  components (git-fixes).
+- leds: pwm: Fix error code in led_pwm_create_fwnode()
+  (git-fixes).
+- docs: printk-formats: Fix hex printing of signed values
+  (git-fixes).
+- commit 1c98d58
+
+- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
+- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
+  fixes).
+- commit 4be7d48
+
+- USB: core: Fix oversight in SuperSpeed initialization
+  (bsc#1213123 CVE-2023-37453).
+- commit 6b6c148
+
+- blacklist.conf: Not a fix, relatively high risk of performance regression
+- commit fd04425
+
+- USB: core: Fix race by not overwriting udev->descriptor in
+  hub_port_init() (bsc#1213123 CVE-2023-37453).
+- commit a1f446d
+
+- USB: core: Unite old scheme and new scheme descriptor reads
+  (bsc#1213123 CVE-2023-37453).
+- commit 9f60ef1
+
+- Refresh
+  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
+- Refresh
+  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
+- commit 452e63f
+
+- scsi: RDMA/srp: Fix residual handling (git-fixes)
+- commit 429e77b
+
+- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
+- commit c7f667b
+
+- RDMA/siw: Correct wrong debug message (git-fixes)
+- commit 3732fc1
+
+- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
+- commit 9281d22
+
+- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
+- commit 1b277c9
+
+- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
+- commit e55bab1
+
+- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
+- commit 0e5f5fb
+
+- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
+- commit fee7fe7
+
+- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
+- commit 988bb43
+
+- RDMA/hns: Fix port active speed (git-fixes)
+- commit f1ca0f2
+
+- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
+- commit dd0f3ab
+
+- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
+- commit e8addea
+
+- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
+- commit c2623e0
+
+- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
+- commit c6f50a4
+
+- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
+- commit 632a598
+
+- RDMA/umem: Set iova in ODP flow (git-fixes)
+- commit ec8b3f4
+
+- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
+- commit 1ff5e5f
+
+- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
+- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
+- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
+- commit 643257d
+
+- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
+  (git-fixes).
+- dmaengine: idxd: Modify the dependence of attribute
+  pasid_enabled (git-fixes).
+- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
+  reg write (git-fixes).
+- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
+  recalc_rate (git-fixes).
+- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
+  (git-fixes).
+- mtd: rawnand: fsmc: handle clk prepare error in
+  fsmc_nand_resume() (git-fixes).
+- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in
+  oob write (git-fixes).
+- mtd: rawnand: brcmnand: Fix crash during the panic_write
+  (git-fixes).
+- mtd: rawnand: brcmnand: Fix potential false time out warning
+  (git-fixes).
+- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
+- HID: wacom: remove the battery when the EKR is off (git-fixes).
+- HID: logitech-dj: Fix error handling in
+  logi_dj_recv_switch_to_dj_mode() (git-fixes).
+- HID: multitouch: Correct devm device reference for hidinput
+  input_dev name (git-fixes).
+- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
+- media: i2c: ccs: Check rules is non-NULL (git-fixes).
+- media: ov2680: Fix regulators being left enabled on
+  ov2680_power_on() errors (git-fixes).
+- media: ov2680: Fix ov2680_set_fmt() which ==
+  V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
+- media: ov2680: Add ov2680_fill_format() helper function
+  (git-fixes).
+- media: ov2680: Don't take the lock for try_fmt calls
+  (git-fixes).
+- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
+- media: ov2680: Fix vflip / hflip set functions (git-fixes).
+- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
+- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
+  (git-fixes).
+- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking
+  interrupts (git-fixes).
+- media: venus: hfi_venus: Only consider sys_idle_indicator on V1
+  (git-fixes).
+- media: go7007: Remove redundant if statement (git-fixes).
+- media: rkvdec: increase max supported height for H.264
+  (git-fixes).
+- media: cx24120: Add retval check for cx24120_message_send()
+  (git-fixes).
+- media: dvb-usb: m920x: Fix a potential memory leak in
+  m920x_i2c_xfer() (git-fixes).
+- media: dib7000p: Fix potential division by zero (git-fixes).
+- drivers: usb: smsusb: fix error handling code in
+  smsusb_init_device (git-fixes).
+- media: v4l2-core: Fix a potential resource leak in
+  v4l2_fwnode_parse_link() (git-fixes).
+- media: i2c: tvp5150: check return value of devm_kasprintf()
+  (git-fixes).
+- media: ad5820: Drop unsupported ad5823 from i2c_ and
+  of_device_id tables (git-fixes).
+- fbdev: Update fbdev source file paths (git-fixes).
+- amba: bus: fix refcount leak (git-fixes).
+- dma-buf/sync_file: Fix docs syntax (git-fixes).
+- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
+  (git-fixes).
+- driver core: test_async: fix an error code (git-fixes).
+- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
+- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
+- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
+- serial: sc16is7xx: fix bug when first setting GPIO direction
+  (git-fixes).
+- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
+- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
+  (git-fixes).
+- serial: sprd: Fix DMA buffer leak issue (git-fixes).
+- serial: sprd: Assign sprd_port after initialized to avoid
+  wrong access (git-fixes).
+- usb: typec: tcpm: set initial svdm version based on pd revision
+  (git-fixes).
+- usb: dwc3: meson-g12a: do post init to fix broken usb after
+  resumption (git-fixes).
+- USB: gadget: f_mass_storage: Fix unused variable warning
+  (git-fixes).
+- usb: phy: mxs: fix getting wrong state with
+  mxs_phy_is_otg_host() (git-fixes).
+- usb: chipidea: imx: improve logic if samsung,picophy-* parameter
+  is 0 (git-fixes).
+- platform/x86: dell-sysman: Fix reference leak (git-fixes).
+- commit 729e789
+
+- target: compare and write backend driver sense handling
+  (bsc#1177719 bsc#1213026).
+- Refresh patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch.
+- commit a2ae103
+
+- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
+- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
+- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
+- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
+- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
+- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
+- Drivers: hv: Don't remap addresses that are above shared_gpa_boundary (bsc#1206453).
+- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
+- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
+- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
+- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
+- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
+- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
+- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
+- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
+- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
+- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
+- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
+- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
+- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
+- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
+- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
+- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
+- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
+- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
+- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
+- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
+- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
+- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
+- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
+- define more Hyper-V related constants (bsc#1206453).
+- commit 7dd2c1c
+
+- libbpf: Fix btf_dump's packed struct determination (bsc#1211220
+  jsc#PED-3924).
+- libbpf: Fix single-line struct definition output in btf_dump
+  (bsc#1211220 jsc#PED-3924).
+- commit 7a046db
+
+- blacklist.conf: add git-fix to skip
+- commit 47580cb
+
+- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
+- commit d711707
+
+- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220
+  jsc#PED-3924).
+- selftests/bpf: Test btf dump for struct with padding only fields
+  (bsc#1211220 jsc#PED-3924).
+- bpftool: Print newline before '}' for struct with padding only
+  fields (bsc#1211220 jsc#PED-3924).
+- commit 93aeeb8
+
+- drm/msm/dpu: fix the irq index in
+  dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
+- drm/mediatek: Remove freeing not dynamic allocated memory
+  (git-fixes).
+- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty()
+  (git-fixes).
+- drm/amd/display: Do not set drr on pipe commit (git-fixes).
+- drm/bridge: anx7625: Use common macros for HDCP capabilities
+  (git-fixes).
+- drm/bridge: anx7625: Use common macros for DP power sequencing
+  commands (git-fixes).
+- drm/mxsfb: Disable overlay plane in
+  mxsfb_plane_overlay_atomic_disable() (git-fixes).
+- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
+  (git-fixes).
+- commit cc8e0cf
+
+- bus: ti-sysc: Fix cast to enum warning (git-fixes).
+- commit 586e58b
+
+- Add cherry-picked if to fbdev patch
+- commit 32815f6
+
+- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360
+  15-eu0xxx (git-fixes).
+- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable
+  mute LED (git-fixes).
+- commit 2c05a9a
+
+- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
+- commit 3ba2db1
+
+- PCI: microchip: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: meson: Remove cast between incompatible function type
+  (git-fixes).
+- PCI: microchip: Correct the DED and SEC interrupt bit offsets
+  (git-fixes).
+- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
+- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
+- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
+- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
+- pinctrl: cherryview: fix address_space_handler() argument
+  (git-fixes).
+- pinctrl: mcp23s08: check return value of devm_kasprintf()
+  (git-fixes).
+- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
+- ipmi:ssif: Fix a memory leak when scanning for an adapter
+  (git-fixes).
+- ipmi:ssif: Add check for kstrdup (git-fixes).
+- firmware: meson_sm: fix to avoid potential NULL pointer
+  dereference (git-fixes).
+- firmware: cs_dsp: Fix new control name check (git-fixes).
+- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
+  (git-fixes).
+- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources()
+  only for non-root bus (git-fixes).
+- PCI: acpiphp: Reassign resources on bridge if necessary
+  (git-fixes).
+- commit 10e5d93
+
+- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
+- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
+- dt-bindings: clocks: imx8mp: make sai4 a dummy clock
+  (git-fixes).
+- dt-bindings: clock: xlnx,versal-clk: drop select:false
+  (git-fixes).
+- dt-bindings: crypto: ti,sa2ul: make power-domains conditional
+  (git-fixes).
+- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
+- drm/msm/mdp5: Don't leak some plane state (git-fixes).
+- drm/msm: Update dev core dump to not print backwards
+  (git-fixes).
+- drm/etnaviv: fix dumping of active MMU context (git-fixes).
+- drm/amd/pm: fix variable dereferenced issue in
+  amdgpu_device_attr_create() (git-fixes).
+- drm/mediatek: Fix potential memory leak if vmap() fail
+  (git-fixes).
+- drm/mediatek: Fix dereference before null check (git-fixes).
+- drm/panel: simple: Add missing connector type and pixel format
+  for AUO T215HVN01 (git-fixes).
+- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
+- drm/armada: Fix off-by-one error in
+  armada_overlay_get_property() (git-fixes).
+- drm/atomic-helper: Update reference to
+  drm_crtc_force_disable_all() (git-fixes).
+- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
+  (git-fixes).
+- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
+- fbdev: Fix sys_imageblit() for arbitrary image widths
+  (git-fixes).
+- fbdev: Improve performance of sys_imageblit() (git-fixes).
+- commit a3652b5
+
+- docs: kernel-parameters: Refer to the correct bitmap function
+  (git-fixes).
+- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
+- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
+  (git-fixes).
+- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
+  (git-fixes).
+- clk: qcom: camcc-sc7180: fix async resume during probe
+  (git-fixes).
+- clk: imx: pll14xx: dynamically configure PLL for
+  393216000/361267200Hz (git-fixes).
+- clk: imx: composite-8m: fix clock pauses when set_rate would
+  be a no-op (git-fixes).
+- clk: imx8mp: fix sai4 clock (git-fixes).
+- clk: sunxi-ng: Modify mismatched function name (git-fixes).
+- drivers: clk: keystone: Fix parameter judgment in
+  _of_pll_clk_init() (git-fixes).
+- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
+- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
+  (git-fixes).
+- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
+- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
+- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
+- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
+  (git-fixes).
+- drm/amdgpu: avoid integer overflow warning in
+  amdgpu_device_resize_fb_bar() (git-fixes).
+- drm/bridge: anx7625: Drop device lock before
+  drm_helper_hpd_irq_event() (git-fixes).
+- drm: adv7511: Fix low refresh rate register for ADV7533/5
+  (git-fixes).
+- drm/ast: Fix DRAM init on AST2200 (git-fixes).
+- backlight/lv5207lp: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/gpio_backlight: Compare against struct fb_info.device
+  (git-fixes).
+- backlight/bd6107: Compare against struct fb_info.device
+  (git-fixes).
+- drm/bridge: tc358764: Fix debug print parameter order
+  (git-fixes).
+- audit: fix possible soft lockup in __audit_inode_child()
+  (git-fixes).
+- ALSA: ymfpci: Fix the missing snd_card_free() call at probe
+  error (git-fixes).
+- drm/amd/display: check TG is non-null before checking if enabled
+  (git-fixes).
+- drm/amd/display: do not wait for mpc idle if tg is disabled
+  (git-fixes).
+- commit 08c4f7b
+
+- Kbuild: add -Wno-shift-negative-value where -Wextra is used
+  (bsc#1214756).
+- commit 8140064
+
+- rpm/mkspec-dtb: support for nested subdirs
+  Commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories") moved the dts to nested subdirs, add a support for
+  that. That is, generate a %dir entry in %files for them.
+- commit 6484eda
+
+- Update patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+  Apply following fixup from Michal Suchánek:
+  Don't reorder lockdown reason.
+- commit 9382b89
+
+- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
+- commit 616c360
+
+- wifi: mwifiex: Fix missed return in oob checks failed path
+  (git-fixes).
+- commit 9baf357
+
+- nilfs2: fix WARNING in mark_buffer_dirty due to discarded
+  buffer reuse (git-fixes).
+- lib/test_meminit: allocate pages up to order MAX_ORDER
+  (git-fixes).
+- HWPOISON: offline support: fix spelling in Documentation/ABI/
+  (git-fixes).
+- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
+- wifi: ath9k: protect WMI command response buffer replacement
+  with a lock (git-fixes).
+- wifi: ath9k: fix races between ath9k_wmi_cmd and
+  ath9k_wmi_ctrl_rx (git-fixes).
+- wifi: mwifiex: avoid possible NULL skb pointer dereference
+  (git-fixes).
+- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
+- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color
+  attribute (git-fixes).
+- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
+  (git-fixes).
+- Bluetooth: btusb: Do not call kfree_skb() under
+  spin_lock_irqsave() (git-fixes).
+- Bluetooth: Fix potential use-after-free when clear keys
+  (git-fixes).
+- Bluetooth: Remove unused declaration amp_read_loc_info()
+  (git-fixes).
+- Bluetooth: nokia: fix value check in
+  nokia_bluetooth_serdev_probe() (git-fixes).
+- wifi: mwifiex: fix error recovery in PCIE buffer descriptor
+  management (git-fixes).
+- wifi: mt76: mt7915: fix power-limits while chan_switch
+  (git-fixes).
+- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
+  (git-fixes).
+- wifi: mt76: mt7921: do not support one stream on secondary
+  antenna only (git-fixes).
+- wifi: mwifiex: Fix OOB and integer underflow when rx packets
+  (git-fixes).
+- wifi: rtw89: debug: Fix error handling in
+  rtw89_debug_priv_btc_manual_set() (git-fixes).
+- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow
+  errors also in case of OOM (git-fixes).
+- hwrng: iproc-rng200 - Implement suspend and resume calls
+  (git-fixes).
+- crypto: caam - fix unchecked return value error (git-fixes).
+- crypto: stm32 - Properly handle pm_runtime_get failing
+  (git-fixes).
+- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
+- hwrng: nomadik - keep clock enabled while hwrng is registered
+  (git-fixes).
+- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
+  (git-fixes).
+- spi: tegra20-sflash: fix to check return value of
+  platform_get_irq() in tegra_sflash_probe() (git-fixes).
+- regmap: rbtree: Use alloc_flags for memory allocations
+  (git-fixes).
+- commit 243ba95
+
+- blacklist.conf: add git-fix that breaks kabi
+- commit 29743c2
+
+- scsi: qedf: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: qedi: Fix firmware halt over suspend and resume
+  (git-fixes).
+- scsi: snic: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix possible memory leak if device_add() fails
+  (git-fixes).
+- scsi: core: Fix legacy /proc parsing buffer overflow
+  (git-fixes).
+- scsi: 53c700: Check that command slot is not NULL (git-fixes).
+- scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
+  (git-fixes).
+- scsi: scsi_debug: Remove dead code (git-fixes).
+- scsi: 3w-xxxx: Add error handling for initialization failure
+  in tw_probe() (git-fixes).
+- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
+- commit f37057a
+
+- docs/process/howto: Replace C89 with C11 (bsc#1214756).
+- commit 8393e27
+
+- Kbuild: move to -std=gnu11 (bsc#1214756).
+- commit ef844c1
+
+- blacklist.conf: kABI
+- commit 382e160
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit 6289fe5
+
+- netfilter: nf_tables: deactivate catchall elements in next
+  generation (bsc#1214729 CVE-2023-4569).
+- commit ab071f2
+
+- Update metadata
+- commit afac039
+
+- netfs: fix parameter of cleanup() (bsc#1214743).
+- netfs: Fix lockdep warning from taking sb_writers whilst
+  holding  mmap_lock (bsc#1214742).
+- commit bb32ecc
+
+- selftests/futex: Order calls to futex_lock_pi (git-fixes).
+- selftests/resctrl: Close perf value read fd on errors
+  (git-fixes).
+- selftests/resctrl: Unmount resctrl FS if child fails to run
+  benchmark (git-fixes).
+- selftests/resctrl: Don't leak buffer in fill_cache()
+  (git-fixes).
+- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
+- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints
+  table (git-fixes).
+- selftests/harness: Actually report SKIP for signal tests
+  (git-fixes).
+- pstore/ram: Check start of empty przs during init (git-fixes).
+- commit ad35b22
+
+- Move upstreamed powerpc patches into sorted section
+- commit 3a27181
+
+- Move upstreamed HID patch into sorted section
+- commit 85ada69
+
+- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
+- commit 411ade7
+
+- intel/e1000:fix repeated words in comments (jsc#PED-5738).
+- commit 36d3f87
+
+- intel: remove unused macros (jsc#PED-5738).
+- commit 8c0592a
+
+- e1000: Fix typos in comments (jsc#PED-5738).
+- commit b74464e
+
+- e1000: switch to napi_build_skb() (jsc#PED-5738).
+- commit 8f3d353
+
+- e1000: switch to napi_consume_skb() (jsc#PED-5738).
+- commit b269f24
+
+- tracing: Fix memleak due to race between current_tracer and
+  trace (git-fixes).
+- commit cd1e0a8
+
+- tracing: Fix cpu buffers unavailable due to 'record_disabled'
+  missed (git-fixes).
+- commit 8e87d30
+
+- ring-buffer: Do not swap cpu_buffer during resize process
+  (git-fixes).
+- commit e5ec19f
+
+- xfs: fix sb write verify for lazysbcount (bsc#1214661).
+- commit 29e65a8
+
+- cpufreq: intel_pstate: Adjust balance_performance EPP for
+  Sapphire Rapids (bsc#1214659).
+- commit c3cfee9
+
+- cpufreq: intel_pstate: Enable HWP IO boost for all servers
+  (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
+- commit bd6042f
+
+- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems
+  with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927
+  jsc#PED-4929).
+- commit 0340dfe
+
+- cpufreq: intel_pstate: hybrid: Use known scaling factor for
+  P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 91615ae
+
+- cpufreq: intel_pstate: Read all MSRs on the target CPU
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 639f9f6
+
+- cpufreq: intel_pstate: hybrid: Rework HWP calibration
+  (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- Update
+  patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch
+  (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
+- commit 689587b
+
+- Use the cherry-picked id for an AMDGPU patch and resort
+- commit 07365e7
+
+- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
+- Refresh
+  patches.suse/tty-serial-fsl_lpuart-add-earlycon-for-imx8ulp-platf.patch.
+- commit f34a3a2
+
+- selftests: forwarding: tc_actions: Use ncat instead of nc
+  (git-fixes).
+- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller
+  Hub) (git-fixes).
+- thunderbolt: Read retimer NVM authentication status prior
+  tb_retimer_set_inbound_sbtx() (git-fixes).
+- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+  (git-fixes).
+- usb: chipidea: imx: don't request QoS for imx8ulp (git-fixes).
+- usb: gadget: u_serial: Avoid spinlock recursion in
+  __gs_console_push (git-fixes).
+- pcmcia: rsrc_nonstatic: Fix memory leak in
+  nonstatic_release_resource_db() (git-fixes).
+- PCI: tegra194: Fix possible array out of bounds access
+  (git-fixes).
+- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
+  (git-fixes).
+- tty: serial: fsl_lpuart: make rx_watermark configurable for
+  different platforms (git-fixes).
+- selftests: forwarding: tc_actions: cleanup temporary files
+  when test is aborted (git-fixes).
+- usb: dwc3: Fix typos in gadget.c (git-fixes).
+- commit 5394953
+
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- commit d60a005
+
+- i2c: designware: Handle invalid SMBus block data response
+  length value (git-fixes).
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
+- media: v4l2-mem2mem: add lock to protect parameter num_rdy
+  (git-fixes).
+- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB
+  related warnings (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
+- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+  (git-fixes).
+- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
+  (git-fixes).
+- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech
+  G915 TKL Keyboard (git-fixes).
+- PCI: s390: Fix use-after-free of PCI resources with per-function
+  hotplug (git-fixes).
+- drm/amd/display: phase3 mst hdcp for multiple displays
+  (git-fixes).
+- drm/amd/display: save restore hdcp state when display is
+  unplugged from mst hub (git-fixes).
+- iio: adc: stx104: Implement and utilize register structures
+  (git-fixes).
+- iio: adc: stx104: Utilize iomap interface (git-fixes).
+- ARM: dts: imx6sll: fixup of operating points (git-fixes).
+- commit e2faa35
+
+- pinctrl: amd: Mask wake bits on probe again (git-fixes).
+- pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts
+  on probe" (git-fixes).
+- commit 15b9551
+
+- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
+  (git-fixes).
+- commit 5e59635
+
+- clk: Fix slab-out-of-bounds error in devm_clk_release()
+  (git-fixes).
+- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
+  (git-fixes).
+- pinctrl: renesas: rza2: Add lock around
+  pinctrl_generic{{add,remove}_group,{add,remove}_function}
+  (git-fixes).
+- drm/vmwgfx: Fix shader stage validation (git-fixes).
+- dma-buf/sw_sync: Avoid recursive lock during fence signal
+  (git-fixes).
+- commit 7c5f1b7
+
+- batman-adv: Hold rtnl lock during MTU update via netlink
+  (git-fixes).
+- commit 8468886
+
+- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
+- batman-adv: Fix TT global entry leak when client roamed back
+  (git-fixes).
+- batman-adv: Do not get eth header before
+  batadv_check_management_packet (git-fixes).
+- batman-adv: Don't increase MTU when set by user (git-fixes).
+- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
+- commit d59057e
+
+- drm/amd/display: disable RCO for DCN314 (git-fixes).
+- commit 5dc74f0
+
+- drm/qxl: fix UAF on handle creation (git-fixes).
+- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
+- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
+  (git-fixes).
+- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+  (git-fixes).
+- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU
+  v13.0.4/11 (git-fixes).
+- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
+- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
+- drm/amd/display: Skip DPP DTO update if root clock is gated
+  (git-fixes).
+- drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+  (git-fixes).
+- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+  (git-fixes).
+- drm/amdgpu: install stub fence into potential unused fence
+  pointers (git-fixes).
+- drm/amdgpu: fix memory leak in mes self test (git-fixes).
+- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
+- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+  (git-fixes).
+- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
+- drm/stm: ltdc: fix late dereference check (git-fixes).
+- drm/amd/display: Implement workaround for writing to
+  OTG_PIXEL_RATE_DIV register (git-fixes).
+- commit 162942a
+
+- Move sorted nouveau patch into sorted section
+- commit 5cfebfc
+
+- smb: client: fix null auth (git-fixes).
+- commit f89a725
+
+- Update tags in
+  patches.suse/md-raid5-Improve-performance-for-sequential-IO.patch.
+- commit 5c3390a
+
+- powerpc/rtas: block error injection when locked down
+  (bsc#1023051).
+  Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
+- powerpc/rtas: enture rtas_call is called with MMU enabled
+  (bsc#1023051).
+- commit e7f7145
+
+- Input: cyttsp4_core - change del_timer_sync() to
+  timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
+- commit 2dfd188
+
+- Refresh patches.suse/powerpc-rtas-Keep-MSR-RI-set-when-calling-RTAS.patch.
+- commit 0cbb740
+
+- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
+  It caused mysterious problem wrt NVMe.
+  Better to drop and blacklist for now.
+- commit 2257ff2
+
+- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
+- commit af67897
+
+- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
+- commit eb5704d
+
+- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
+- commit 8b5290e
+
+- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
+  (git-fixes).
+- scsi: storvsc: Limit max_sectors for virtual Fibre Channel
+  devices (git-fixes).
+- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
+- scsi: storvsc: Always set no_report_opcodes (git-fixes).
+- commit aace9fd
+
+- old-flavors: Drop 2.6 kernels.
+  2.6 based kernels are EOL, upgrading from them is no longer suported.
+- commit 7bb5087
+
+- kunit: make kunit_test_timeout compatible with comment
+  (git-fixes).
+- commit e060c5b
+
+- blacklist.conf: kABI
+- commit 2db68b2
+
+- blacklist.conf: kABI
+- commit b9b490f
+
+- blacklist.conf: specific to Clang
+- commit 0d88df7
+
+- blacklist.conf: not used in our build process
+- commit 5705a43
+
+- blacklist.conf: designed to break kABI but relevant only on big endian
+- commit 3477f1d
+
+- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk()
+  test (git-fixes).
+- commit 0595e9f
+
+- blacklist.conf: cleanup
+- commit 8d51620
+
+- blacklist.conf: We do not use that tool
+- commit f8ec126
+
+- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx
+  (git-fixes).
+- commit d96f965
+
+- kabi: Allow extra bugsints (bsc#1213927).
+- commit fc75ce0
+
+- Refresh patches.suse/x86-srso-add-ibpb.patch.
+  CPU_IBPB_ENTRY is always on so adjust code accordingly.
+- commit 0ed13bd
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-NULL-pointer-dereference-in.patch
+  (bsc#1200431 bsc#1214451 CVE-2023-4459).
+  Added CVE reference.
+- commit 13a12f4
+
+- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
+  (bsc#1213601 CVE-2023-3863).
+- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
+  CVE-2023-3863).
+- nfc: llcp: nullify llcp_sock->dev on connect() error paths
+  (bsc#1213601 CVE-2023-3863).
+- commit 0932a11
+
+- kabi/severities: Ignore newly added SRSO mitigation functions
+- commit 4452f05
+
+- s390/zcrypt: fix reply buffer calculations for CCA replies
+  (bsc#1213949).
+- commit 26e242b
+
+- tty: fix hang on tty device with no_room set (git-fixes).
+- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
+- commit 22b52a9
+
+- tty: n_gsm: fix the UAF caused by race condition in
+  gsm_cleanup_mux (git-fixes).
+- tty: serial: fsl_lpuart: Clear the error flags by writing 1
+  for lpuart32 platforms (git-fixes).
+- commit 2bc2940
+
+- x86/static_call: Fix __static_call_fixup() (git-fixes).
+- commit 57d4f01
+
+- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
+- commit c2d3421
+
+- x86/srso: Explain the untraining sequences a bit more (git-fixes).
+- commit f62146e
+
+- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
+- commit 7f39f56
+
+- x86/cpu: Cleanup the untrain mess (git-fixes).
+- commit 13632c3
+
+- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
+- commit 522332f
+
+- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
+- commit d5ea86a
+
+- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
+- commit 847a96f
+
+- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
+  CVE-2023-3772).
+- commit 9e44d01
+
+- x86/cpu: Rename original retbleed methods (git-fixes).
+- commit 81c5e75
+
+- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
+- commit fa0b815
+
+- objtool/x86: Fix SRSO mess (git-fixes).
+- commit 8bf5635
+
+- x86/alternative: Make custom return thunk unconditional (git-fixes).
+- commit a446ea5
+
+- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
+- commit 06974c4
+
+- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
+- commit 086adb4
+
+- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with  retpolines and IBT (git-fixes).
+- commit 9392b3c
+
+- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
+- commit 99556d6
+
+- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
+- commit af52734
+
+- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
+- commit 43e1da9
+
+- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
+- commit 7af6810
+
+- powerpc/rtas_flash: allow user copy to flash block cache objects
+  (bsc#1194869).
+- commit 0fccbf5
+
+- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+  (git-fixes).
+- i2c: hisi: Only handle the interrupt of the driver's transfer
+  (git-fixes).
+- i2c: designware: Correct length byte validation logic
+  (git-fixes).
+- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
+- commit 5738f62
+
+- supported.conf: fix typos for -!optional markers
+- commit a15b83f
+
+- drm/i915/sdvo: fix panel_type initialization (git-fixes).
+- commit af00eea
+
+- ALSA: hda/realtek - Remodified 3k pull low procedure
+  (git-fixes).
+- ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+  (git-fixes).
+- ASoC: lower "no backend DAIs enabled for ... Port" log severity
+  (git-fixes).
+- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
+- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
+- ALSA: hda/realtek: Switch Dell Oasis models to use SPI
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
+- ALSA: usb-audio: Add support for Mythware XA001AU capture and
+  playback interfaces (git-fixes).
+- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+  (git-fixes).
+- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
+- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+  (git-fixes).
+- bus: ti-sysc: Flush posted write on enable before reset
+  (git-fixes).
+- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+  (git-fixes).
+- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
+- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
+- selftests: mirror_gre_changes: Tighten up the TTL test match
+  (git-fixes).
+- net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+  (git-fixes).
+- drm/panel: simple: Fix AUO G121EAN01 panel timings according
+  to the docs (git-fixes).
+- commit a48515a
+
+- Update config files. Drop the dpt_i2o kernel module.
+  For: jsc#PED-4579, CVE-2023-2007
+- commit f332a85
+
+- mkspec: Allow unsupported KMPs (bsc#1214386)
+- commit 55d8b82
+
+- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
+- ceph: defer stopping mdsc delayed_work (bsc#1214392).
+- commit 722c601
+
+- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380).
+  gcc7 on SLE 15 does not support this while later gcc does.
+- commit 5b41c27
+
+- s390/purgatory: disable branch profiling (git-fixes
+  bsc#1214372).
+- commit 28f91ce
+
+- scsi: zfcp: Defer fc_rport blocking until after ADISC response
+  (git-fixes bsc#1214371).
+- commit 5ac3747
+
+- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
+- commit 3711e45
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit d1f96fc
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit f1bebb1
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit 77019ff
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit 8edb1c8
+
+- powerpc/kexec: Fix build failure from uninitialised variable
+  (bsc#1212091 ltc#199106).
+- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
+- Refresh patches.suse/powerpc-Take-in-account-addition-CPU-node-when-build.patch
+- Refresh patches.suse/powerpc-kexec_file-fix-implicit-decl-error.patch
+- commit c8f4ed0
+
+- Update
+  patches.suse/net-vmxnet3-fix-possible-use-after-free-bugs-in-vmxn.patch
+  (bsc#1200431 bsc#1214350 CVE-2023-4387).
+  Added CVE reference.
+- commit 8897012
+
+- module: avoid allocation if module is already present and ready
+  (bsc#1213921).
+- commit a42ca12
+
+- module: move check_modinfo() early to early_mod_check()
+  (bsc#1213921).
+- commit b97680b
+
+- module: move early sanity checks into a helper (bsc#1213921).
+- commit d4f0452
+
+- Update config files.
+  run_oldconfig.sh
+- CONFIG_NVME_VERBOSE_ERRORS=y          gone with a82baa8083b
+- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13   gone with 7e152d55123
+- commit 7a11d4b
+
+- module: extract patient module check into helper (bsc#1213921).
+- commit de545b1
+
+- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
+- commit 63c2b4e
+
+- net: mana: Fix MANA VF unload when hardware is unresponsive
+  (git-fixes).
+- iavf: fix potential races for FDIR filters (git-fixes).
+- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
+- qed: Fix scheduling in a tasklet while getting stats
+  (git-fixes).
+- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
+  (git-fixes).
+- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
+- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
+- ice: Fix max_rate check while configuring TX rate limits
+  (git-fixes).
+- commit 66cd4bc
+
+- powerpc/iommu: Fix iommu_table_in_use for a small default DMA
+  window case (bsc#1212091 ltc#199106).
+- powerpc/kernel/iommu: Add new iommu_table_in_use() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/iommu: don't set failed sg dma_address to
+  DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
+- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091
+  ltc#199106).
+- commit 63fd00c
+
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- commit efc7084
+
+- drm/amd/display: Retain phantom plane/stream if validation fails
+  (git-fixes).
+- Refresh
+  patches.suse/drm-amd-display-filter-out-invalid-bits-in-pipe_fuse.patch.
+- commit 7b85ac2
+
+- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
+- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
+  (git-fixes).
+- drm/amd/pm: avoid unintentional shutdown due to temperature
+  momentary fluctuation (git-fixes).
+- drm/amd/pm: expose swctf threshold setting for legacy powerplay
+  (git-fixes).
+- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
+- drm/amd/pm/smu7: move variables to where they are used
+  (git-fixes).
+- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory
+  clock settings (git-fixes).
+- drm/amd/display: trigger timing sync only if TG is running
+  (git-fixes).
+- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
+  (git-fixes).
+- drm/amd/display: Disable phantom OTG after enable for plane
+  disable (git-fixes).
+- drm/amd/display: Use update plane and stream routine for DCN32x
+  (git-fixes).
+- commit d699896
+
+- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
+- drm/nouveau/gr: enable memory loads on helper invocation on
+  all channels (git-fixes).
+- commit 8a7a168
+
+- kernel-binary: Common dependencies cleanup
+  Common dependencies are copied to a subpackage, there is no need for
+  copying defines or build dependencies there.
+- commit 254b03c
+
+- kernel-binary: Drop code for kerntypes support
+  Kerntypes was a SUSE-specific feature dropped before SLE 12.
+- commit 2c37773
+
+- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
+- commit 4628976
+
+- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
+  (git-fixes).
+- commit 9c04620
+
+- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR
+  add/remove of memory (bsc#1212091 ltc#199106).
+- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV
+  device (bsc#1212091 ltc#199106).
+- pseries/iommu/ddw: Fix kdump to work in absence of
+  ibm,dma-window (bsc#1214297 ltc#197503).
+- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters
+  (bsc#1212091 ltc#199106).
+- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
+- powerpc/pseries: Add __init attribute to eligible functions
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: Do not try direct mapping with persistent
+  memory and one window (bsc#1212091 ltc#199106).
+- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Add of_node_put() before break
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is
+  present (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Check if the default window in use
+  before removing it (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091
+  ltc#199106).
+- powerpc/pseries/iommu: Rename "direct window" to "dma window"
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Make use of DDW for indirect mapping
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Find existing DDW with given property
+  name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Update remove_dma_window() to accept
+  property name (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Reorganize iommu_table_setparms*()
+  with new helper (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_property_create() and refactor
+  enable_ddw() (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerps-pseries-dma-Add-support-for-2M-IOMMU-page-si.patch
+- powerpc/pseries/iommu: Allow DDW windows starting at 0x00
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add ddw_list_new_entry() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper
+  (bsc#1212091 ltc#199106).
+- powerpc/pseries/iommu: Replace hard-coded page shift
+  (bsc#1212091 ltc#199106).
+  Refresh patches.suse/powerpc-iommu-Limit-number-of-TCEs-to-512-for-H_STUF.patch
+- commit 4f11eef
+
+- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059
+  git-fixes).
+- commit f722e3b
+
+- bnx2x: fix page fault following EEH recovery (bsc#1214299).
+- commit f8a9432
+
+- target_core_rbd: fix leak and reduce kmalloc calls
+  (bsc#1212873).
+- target_core_rbd: fix rbd_img_request.snap_id assignment
+  (bsc#1212857).
+- target_core_rbd: remove snapshot existence validation code
+  (bsc#1212857).
+- file: reinstate f_pos locking optimization for regular files
+  (bsc#1213759).
+- commit 0469dd9
+
+- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
+- commit 3d175df
+
+- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
+- commit d9c79ec
+
+- blacklist.conf: add drivers/net/ethernet/renesas/ drivers
+- commit 0c8d3f5
+
+- sfc: fix crash when reading stats while NIC is resetting
+  (git-fixes).
+- commit 61c7a4c
+
+- ice: Fix crash by keep old cfg when update TCs more than queues
+  (git-fixes).
+- commit 4e80ce2
+
+- powerpc/pseries: Honour current SMT state when DLPAR onlining
+  CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462
+  ltc#200161 ltc#200588).
+  Update config files.
+- powerpc/pseries: Initialise CPU hotplug callbacks earlier
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Allow enabling partial SMT states via sysfs
+  (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Remove topology_smt_supported() (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Store the current/max number of threads (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285
+  bsc#1205462 ltc#200161 ltc#200588).
+- commit 8bd8972
+
+- sched/psi: use kernfs polling functions for PSI trigger polling
+  (bsc#1209799).
+- commit 4477665
+
+- md/raid0: Fix performance regression for large sequential writes
+  (bsc#1213916).
+- md/raid0: Factor out helper for mapping and submitting a bio
+  (bsc#1213916).
+- commit d85264e
+
+- drm/nouveau/disp: fix use-after-free in error handling of
+  nouveau_connector_create (bsc#1214073).
+- commit 4e5fad7
+
+- ceph: don't check for quotas on MDS stray dirs (bsc#1214238).
+- commit dcb3418
+
+- iommu/dma: Fix incorrect error return on iommu deferred attach
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit c7a880f
+
+- iommu/dma: return error code from iommu_dma_map_sg()
+  (git-fixes).
+- Refresh patches.suse/iommu-dma-Fix-arch_sync_dma-for-map.patch.
+- Refresh
+  patches.suse/iommu-dma-check-config_swiotlb-more-broadly.
+- commit 5d989c6
+
+- iommu/amd: Fix pci device refcount leak in ppr_notifier()
+  (git-fixes).
+- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and
+  ivrs_acpihid options (git-fixes).
+- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
+- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
+  (git-fixes).
+- iommu/rockchip: fix permission bits in page table entries v2
+  (git-fixes).
+- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
+- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
+- iommu/sun50i: Fix flush size (git-fixes).
+- iommu/sun50i: Fix R/W permission check (git-fixes).
+- iommu/sun50i: Consider all fault sources for reset (git-fixes).
+- iommu/sun50i: Fix reset release (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in
+  dmar_dev_scope_init() (git-fixes).
+- iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
+  (git-fixes).
+- iommu/vt-d: Set SRE bit only when hardware has SRS cap
+  (git-fixes).
+- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
+  entries (git-fixes).
+- iommu/vt-d: Clean up si_domain in the init_dmars() error path
+  (git-fixes).
+- iommu/iova: Fix module config properly (git-fixes).
+- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
+- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT
+  device to identity (git-fixes).
+- iommu/vt-d: Check correct capability for sagaw determination
+  (git-fixes).
+- iommu/vt-d: Correctly calculate sagaw value of IOMMU
+  (git-fixes).
+- iommu/vt-d: Fix kdump kernels boot failure with scalable mode
+  (git-fixes).
+- iommu/amd: use full 64-bit value in build_completion_wait()
+  (git-fixes).
+- iommu/amd: Fix compile warning in init code (git-fixes).
+- iommu/amd: Add PCI segment support for ivrs_ commands
+  (git-fixes).
+- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up
+  to 35bit (git-fixes).
+- iommu/dma: Fix iova map result check bug (git-fixes).
+- iommu/arm-smmu-v3: check return value after calling
+  platform_get_resource() (git-fixes).
+- iommu/arm-smmu: fix possible null-ptr-deref in
+  arm_smmu_device_probe() (git-fixes).
+- iommu/vt-d: Add RPLS to quirk list to skip TE disabling
+  (git-fixes).
+- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
+- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
+- commit b73aa3b
+
+- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
+- iommu/amd: Do not identity map v2 capable device when snp is
+  enabled (git-fixes).
+- iommu/s390: Fix duplicate domain attachments (git-fixes).
+- iommu/mediatek: Validate number of phandles associated with
+  "mediatek,larbs" (git-fixes).
+- iommu/mediatek: Add error path for loop of mm_dts_parse
+  (git-fixes).
+- iommu/mediatek: Use component_match_add (git-fixes).
+- iommu/mediatek: Add platform_device_put for recovering the
+  device refcnt (git-fixes).
+- iommu/mediatek: Check return value after calling
+  platform_get_resource() (git-fixes).
+- commit 7224acf
+
+- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
+  support (bsc#1212423).
+- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
+  callback (bsc#1212423).
+- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
+  callback (bsc#1212423).
+- commit c0cd652
+
+- nvme-rdma: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- nvme-tcp: fix potential unbalanced freeze & unfreeze
+  (bsc#1208902).
+- commit 2d8bf94
+
+- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
+- commit 64aa9ec
+
+- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
+- commit b1259cb
+
+- blacklist.conf: Blacklist useless doc patch
+- commit be8f79d
+
+- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
+- commit edd5557
+
+- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
+- commit ae6500e
+
+- iio: cros_ec: Fix the allocation size for cros_ec_command
+  (git-fixes).
+- iio: adc: ina2xx: avoid NULL pointer dereference on OF device
+  match (git-fixes).
+- usb: dwc3: Properly handle processing of pending events
+  (git-fixes).
+- usb-storage: alauda: Fix uninit-value in alauda_check_media()
+  (git-fixes).
+- usb: common: usb-conn-gpio: Prevent bailing out if initial
+  role is none (git-fixes).
+- usb: typec: altmodes/displayport: Signal hpd when configuring
+  pin assignment (git-fixes).
+- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
+- commit d86b205
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit b3532ef
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit e6eb926
+
+- Refresh
+  patches.suse/powerpc-pseries-vas-Hold-mmap_mutex-after-mmap-lock-.patch.
+- commit 60482d4
+
+- netfilter: KABI workaround for CVE-2023-3610 bsc#1213580
+  (git-fixes).
+- commit ecae123
+
+- netfilter: nf_tables: fix chain binding transaction logic
+  (bsc#1213580 CVE-2023-3610).
+- commit 12da4f7
+
+- drm/amd: Disable S/G for APUs when 64GB or more host memory
+  (git-fixes).
+- drm/amdgpu: add S/G display parameter (git-fixes).
+- commit 5f61fab
+
+- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
+- commit d154fc5
+
+- drm/amd/display: Ensure that planes are in the same order
+  (git-fixes).
+- drm/amdgpu: add vram reservation based on
+  vram_usagebyfirmware_v2_2 (git-fixes).
+- commit f3e97e4
+
+- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for
+  pfe1100 (git-fixes).
+- nilfs2: fix use-after-free of nilfs_root in dirtying inodes
+  via iput (git-fixes).
+- drm/amd/display: check attr flag before set cursor degamma on
+  DCN3+ (git-fixes).
+- drm/shmem-helper: Reset vma->vm_ops before calling
+  dma_buf_mmap() (git-fixes).
+- drm/rockchip: Don't spam logs in atomic check (git-fixes).
+- drm/nouveau/disp: Revert a NULL check inside
+  nouveau_connector_get_modes (git-fixes).
+- arm64: dts: imx8mn-var-som: add missing pull-up for onboard
+  PHY reset pinmux (git-fixes).
+- soundwire: fix enumeration completion (git-fixes).
+- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
+  (git-fixes).
+- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
+  (git-fixes).
+- selftests/rseq: check if libc rseq support is registered
+  (git-fixes).
+- soundwire: bus: pm_runtime_request_resume on peripheral
+  attachment (git-fixes).
+- commit 1f8ce0d
+
+- net/sched: cls_route: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_fw: No longer copy tcf_result on update to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- net/sched: cls_u32: No longer copy tcf_result on update  to
+  avoid use-after-free (bsc#1214149 CVE-2023-4128).
+- commit 9904c3b
+
+- ceph: never send metrics if disable_send_metrics is set
+  (bsc#1214180).
+- commit 32f3ae7
+
+- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
+  (git-fixes).
+- selftests: forwarding: tc_flower: Relax success criterion
+  (git-fixes).
+- selftests: forwarding: ethtool_extended_state: Skip when using
+  veth pairs (git-fixes).
+- selftests: forwarding: ethtool: Skip when using veth pairs
+  (git-fixes).
+- selftests: forwarding: Add a helper to skip test when using
+  veth pairs (git-fixes).
+- selftests: forwarding: Switch off timeout (git-fixes).
+- selftests: forwarding: Skip test when no interfaces are
+  specified (git-fixes).
+- net: phy: at803x: remove set/get wol callbacks for AR8032
+  (git-fixes).
+- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
+  (git-fixes).
+- dmaengine: mcf-edma: Fix a potential un-allocated memory access
+  (git-fixes).
+- commit b70a6bf
+
+- blacklist.conf: Blacklist useless doc fix
+- commit 685dbed
+
+- exfat: check if filename entries exceeds max filename length
+  (bsc#1214120 CVE-2023-4273).
+- commit b7e68de
+
+- x86/srso: Fix return thunks in generated code (git-fixes).
+- commit b4d125e
+
+- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
+- Refresh
+  patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
+- Refresh
+  patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
+- Refresh
+  patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
+- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
+  Sort latest set of security vulnerabilities according to upstream order.
+- commit 4a12398
+
+- tracing/histograms: Return an error if we fail to add histogram
+  to hist_vars list (git-fixes).
+- commit d08da8a
+
+- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
+  Deleted:
+  patches.suse/wifi-cfg80211-fix-locking-in-regulatory-disconnect.patch
+  patches.suse/wifi-cfg80211-fix-locking-in-sched-scan-stop-work.patch
+- commit f824698
+
+- netfilter: nf_tables: disallow rule addition to bound chain
+  via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
+- commit c0bb265
+
+- cxgb4: fix use after free bugs caused by circular dependency
+  problem (bsc#1213970 CVE-2023-4133).
+- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
+- timers: Add shutdown mechanism to the internal functions
+  (bsc#1213970).
+- timers: Split [try_to_]del_timer[_sync]() to prepare for
+  shutdown mode (bsc#1213970).
+- timers: Silently ignore timers with a NULL function
+  (bsc#1213970).
+- timers: Rename del_timer() to timer_delete() (bsc#1213970).
+- timers: Rename del_timer_sync() to timer_delete_sync()
+  (bsc#1213970).
+- timers: Use del_timer_sync() even on UP (bsc#1213970).
+- timers: Update kernel-doc for various functions (bsc#1213970).
+- timers: Replace BUG_ON()s (bsc#1213970).
+- clocksource/drivers/sp804: Do not use timer namespace for
+  timer_shutdown() function (bsc#1213970).
+- clocksource/drivers/arm_arch_timer: Do not use timer namespace
+  for timer_shutdown() function (bsc#1213970).
+- ARM: spear: Do not use timer namespace for timer_shutdown()
+  function (bsc#1213970).
+- commit 0322b50
+
+- xen/netback: Fix buffer overrun triggered by unusual packet
+  (CVE-2023-34319, XSA-432, bsc#1213546).
+- commit 6591b03
+
+- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
+- commit 2837d15
+
+- jffs2: correct logic when creating a hole in jffs2_write_begin
+  (git-fixes).
+- commit f413344
+
+- mmc: moxart: read scr register without changing byte order
+  (git-fixes).
+- commit 12e8704
+
+- cifs: update internal module version number for cifs.ko
+  (bsc#1193629).
+- commit ade2a6e
+
+- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
+- commit 2f90082
+
+- cifs: add missing return value check for cifs_sb_tlink
+  (bsc#1193629).
+- commit a08c7b4
+
+- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth
+  request (bsc#1193629).
+- commit 1b17674
+
+- cifs: allow dumping keys for directories too (bsc#1193629).
+- commit e7fda39
+
+- cifs: fix mid leak during reconnection after timeout threshold
+  (git-fixes).
+- commit 30d4c82
+
+- cifs: is_network_name_deleted should return a bool
+  (bsc#1193629).
+- commit 85c6bb9
+
+- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
+- commit 37f3408
+
+- cifs: if deferred close is disabled then close files immediately
+  (git-fixes).
+- commit 1cd51c4
+
+- SMB3: Do not send lease break acknowledgment if all file
+  handles have been closed (git-fixes).
+- commit 68ee604
+
+- fprobe: add unlock to match a succeeded
+  ftrace_test_recursion_trylock (git-fixes).
+- commit adbdcc7
+
+- fprobe: Release rethook after the ftrace_ops is unregistered
+  (git-fixes).
+- commit 3548d7c
+
+- net: tun_chr_open(): set sk_uid from current_fsuid()
+  (CVE-2023-4194 bsc#1214019).
+- commit b6c8070
+
+- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
+  bsc#1214019).
+- commit d59e993
+
+- tracing/probes: Fix to avoid double count of the string length
+  on the array (git-fixes).
+- commit 24b5022
+
+- blacklist.conf: add tracing patches implementing new functionality
+- commit 1e7f3cf
+
+- tracing/probes: Fix to record 0-length data_loc in
+  fetch_store_string*() if fails (git-fixes).
+- commit c96ae0e
+
+- Revert "tracing: Add "(fault)" name injection to kernel probes"
+  (git-fixes).
+- commit 658fc31
+
+- bpf: Disable preemption in bpf_event_output (git-fixes).
+- commit 21194b8
+
+- tracing: Fix warning in trace_buffered_event_disable()
+  (git-fixes).
+- commit 9a84de4
+
+- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
+- commit 9c2f42a
+
+- tracing/probes: Fix to update dynamic data counter if fetcharg
+  uses it (git-fixes).
+- commit a5e8186
+
+- tracing/probes: Fix not to count error code to total length
+  (git-fixes).
+- commit 1fa72f4
+
+- tracing: Fix memory leak of iter->temp when reading trace_pipe
+  (git-fixes).
+- commit 6f343ba
+
+- tracing/histograms: Add histograms to hist_vars if they have
+  referenced variables (git-fixes).
+- commit 17940e8
+
+- ftrace: Fix possible warning on checking all pages used in
+  ftrace_process_locs() (git-fixes).
+- commit 825cbd9
+
+- ring-buffer: Fix deadloop issue on reading trace_pipe
+  (git-fixes).
+- commit fc2b8fe
+
+- tracing: Fix null pointer dereference in tracing_err_log_open()
+  (git-fixes).
+- commit 498fa96
+
+- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
+- commit 3b7c83a
+
+- nfsd: Remove incorrect check in nfsd4_validate_stateid
+  (git-fixes).
+- commit 2cc1911
+
+- blacklist.conf: add a cleanup
+- commit 976e622
+
+- drm/i915: Fix premature release of request's reusable memory
+  (git-fixes).
+- commit a19a4b2
+
+- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
+  (git-fixes).
+- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
+  (git-fixes).
+- mtd: rawnand: rockchip: fix oobfree offset and description
+  (git-fixes).
+- mtd: rawnand: omap_elm: Fix incorrect type in assignment
+  (git-fixes).
+- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
+- drm/ttm: check null pointer before accessing when swapping
+  (git-fixes).
+- commit 6d64757
+
+- exfat: release s_lock before calling dir_emit() (bsc#1214000).
+- exfat: fix unexpected EOF while reading dir (bsc#1214000).
+- exfat_iterate(): don't open-code file_inode(file) (bsc#1214000).
+- commit 00dff49
+
+- blacklist.conf: Add 3b8abb323953 mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
+- commit 3ae175c
+
+- blacklist.conf: Add 9ec272c586b0 watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails
+- commit ff37424
+
+- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
+- commit f38b73b
+
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946 bsc#1214404).
+- netfs: Fix missing xas_retry() calls in xarray iteration
+  (bsc#1213946).
+- commit e7bc55c
+
+- wifi: cfg80211: Fix return value in scan logic (git-fixes).
+- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of
+  MT7615D (DBDC) (git-fixes).
+- USB: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
+- firmware: arm_scmi: Drop OF node reference in the transport
+  channel setup (git-fixes).
+- USB: gadget: Fix the memory leak in raw_gadget driver
+  (git-fixes).
+- USB: quirks: add quirk for Focusrite Scarlett (git-fixes).
+- usb: ohci-at91: Fix the unhandle interrupt when resume
+  (git-fixes).
+- USB: serial: simple: sort driver entries (git-fixes).
+- USB: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
+- USB: serial: option: add Quectel EC200A module support
+  (git-fixes).
+- USB: serial: option: support Quectel EM060K_128 (git-fixes).
+- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
+- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during
+  runtime suspend (git-fixes).
+- gpio: mvebu: fix irq domain leak (git-fixes).
+- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
+- gpio: tps68470: Make tps68470_gpio_output() always set the
+  initial value (git-fixes).
+- drm/ttm: never consider pinned BOs for eviction&swap
+  (git-fixes).
+- i2c: nomadik: Remove a useless call in the remove function
+  (git-fixes).
+- pwm: meson: fix handling of period/duty if greater than UINT_MAX
+  (git-fixes).
+- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
+- i2c: nomadik: Remove unnecessary goto label (git-fixes).
+- i2c: Improve size determinations (git-fixes).
+- i2c: Delete error messages for failed memory allocations
+  (git-fixes).
+- PCI: rockchip: Remove writes to unused registers (git-fixes).
+- PCI/ASPM: Avoid link retraining race (git-fixes).
+- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
+- PCI/ASPM: Return 0 or -ETIMEDOUT from  pcie_retrain_link()
+  (git-fixes).
+- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
+  (git-fixes).
+- ACPI: processor: perflib: Avoid updating frequency QoS
+  unnecessarily (git-fixes).
+- ACPI: processor: perflib: Use the "no limit" frequency QoS
+  (git-fixes).
+- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
+- phy: qcom-snps: Use dev_err_probe() to simplify code
+  (git-fixes).
+- pwm: meson: Simplify duplicated per-channel tracking
+  (git-fixes).
+- commit f6445d7
+
+- Input: exc3000 - properly stop timer on shutdown (git-fixes).
+- commit 0eb1518
+
+- powerpc/security: Fix Speculation_Store_Bypass reporting on
+  Power10 (bsc#1188885 ltc#193722 git-fixes).
+- commit 298c13e
+
+- blacklist.conf: Add 3d2af77e31ad blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()
+- commit 84acea1
+
+- blacklist.conf: Add 6f363f5aa845 cgroup: Do not corrupt task iteration when rebinding subsystem
+- commit 71728c0
+
+- scsi: core: Improve warning message in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_device_block()
+  (bsc#1209284).
+- scsi: core: Don't wait for quiesce in scsi_stop_queue()
+  (bsc#1209284).
+- scsi: core: Merge scsi_internal_device_block() and
+  device_block() (bsc#1209284).
+- scsi: sg: Increase number of devices (bsc#1210048).
+- scsi: bsg: Increase number of devices (bsc#1210048).
+- commit 8f3e780
+
+- Created new preempt kernel flavor
+  Configs are cloned from the respective $arch/default configs. All
+  changed configs appart from CONFIG_PREEMPT->y are a result of
+  dependencies, namely many lock/unlock primitives are no longer
+  inlined in the preempt kernel. TREE_RCU has been also changed to
+  PREEMPT_RCU which is the default implementation for PREEMPT kernel.
-- commit f994874
+- commit ba6a3b0
kexec-tools
+- update to 2.0.27:
+  * ppc64: add --reuse-cmdline parameter support
+  * kexec: make -a the default
+  * x86: add devicetree support
+  * ppc64: document elf-ppc64 options and --dt-no-old-root
+  * LoongArch: kdump: set up kernel image segment
+  * arm64: zboot support
+
+- Disable Xen support in ALP
+
+- Pull kexec-bootloader from perl-Bootloader, bump version so that
+  perl-Bootloader can obsolete kexec-tools containing kexec-bootloader
+  (bsc#1211082).
+
+- Update kexec-tools-SYS_getrandom.patch to fix build errors on
+  old x86_64 distributions
+
+- kexec-bootloader: Add -a argument to load using kexec_load_file() when available (boo#1202820).
+
+- update to 2.0.26:
+  * m68k: pass rng seed via BI_RNG_SEED
+  * workflow: update to checkout@v3
+  * LoongArch: Remove redundant cmdline parameters when using --reuse-cmdline option
+  * LoongArch: Add purgatory framework code
+  * LoongArch: PE format image loading support
+  * LoongArch: Add kexec/kdump support
+  * config: Add LoongArch architecture support in config.guess and config.sub files
+  * ppc64: remove rma_top limit
+- refresh kexec-tools-riscv64.patch.
+
+- Replace transitional %usrmerged macro with regular version check (boo#1206798)
+
+- add kexec-tools-riscv64.patch
+
+- update to 2.0.25:
+  * kexec-tools: Remove duplicate ultoa() definitions and redefine it
+  * i386: pass rng seed via setup_data
+  * kexec-tools: mips: Pass initrd parameter via cmdline
+  * arm64/crashdump-arm64: increase CRASH_MAX_MEMORY_RANGES to 32k
+
+- update to 2.0.24:
+  * arm64: fix static data relocations in machine_apply_elf_rel()
+  * kexec/elf: assign one to align if sh_addralign equals zero
+  * arm64/crashdump-arm64: explicit type conversion to suppress compiler warning
+  * arm64/kexec-arm64: add support for R_AARCH64_MOVW_UABS_G* rela
+  * arm64/kexec-arm64: use enum to organize the reloc type
+  * arm64/kexec-arm64: add support for R_AARCH64_LDST128_ABS_LO12_NC rela
+  * kexec-tools: fix leak FILE pointer.
+  * purgatory: do not enable vectorization automatically for purgatory compiling
+  * kexec-tools: Determine if the image is lzma commpressed
+  * util_lib/elf_info: harden parsing of printk buffer
+  * github: run apt-get update before installing packages
+  * kexec-xen: Allow xen_kexec_exec() to return in case of Live Update
+  * kexec-tools: print error if kexec_file_load fails
+  * kexec-tools: mips: Concatenate --reuse-cmdline and --append
+  * kexec-tools: mips: Add some debug info
+  * arm64: fix PAGE_OFFSET calc for flipped mm
+  * arm64: read VA_BITS from kcore for 52-bits VA kernel
+  * arm64/crashdump: unify routine to get page_offset
+  * arm64: make phys_offset signed
+  * s390: add support for --reuse-cmdline
+  * use slurp_proc_file() in get_command_line()
+  * add slurp_proc_file()
+  * s390: use KEXEC_ALL_OPTIONS
+  * s390: add variable command line size
+  * arm64: support more than one crash kernel regions
+  * s390: handle R_390_PLT32DBL reloc entries in machine_apply_elf_rel()
+  * arm64/crashdump: deduce paddr of _text based on kernel code size
+- drop kexec-tools-print-error-if-kexec_file_load-fails.patch,
+  kexec-tools-remove-duplicate-ramdisk-definition.patch (upstream)
+- add homepage url
+- add gpg validation
+
+- Bump version to 2.0.21
+- Drop patches from upstream git:
+  * kexec-tools-video-capability.patch
+
+- kexec-tools-remove-duplicate-ramdisk-definition.patch:
+  Remove duplicate definition of ramdisk (fix ppc build).
+
+- Bump version to 2.0.21
+- Drop patches from upstream git:
+  * kexec-tools-add-variant-helper-functions.patch
+  * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch
+  * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch
+  * kexec-tools-build-multiboot2-for-i386.patch
+  * kexec-tools-fix-kexec_file_load-error-handling.patch
+  * kexec-tools-reset-getopt-before-falling-back-to-legacy.patch
+  * kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch
+  * kexec-tools-Remove-duplicated-variable-declarations.patch
+
-- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606,
-  bsc#1174508)
-  This patch was introduced to address bsc#694863; it enabled kexec
+- prepare usrmerge (boo#1029961)
+
+- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606)
+  This patch was introduced to address bug#694863, it enabled kexec
-  for HVM domUs. This host feature removes the requirement to
+  for HVM domUs. This host feature removed the requirement to
-  With Xen 4.13 cpuid faulting became the default, which affects
-  the approach used in this patch to detect the domU type. As a
-  result, invoking kexec in dom0 failed.
+  With Xen 4.13 cpuid faulting became the default, which affected the
+  approach used in this patch to detect the domU type. As a result
+  invoking kexec in dom0 failed.
+
+- Make kexec-bootloader work without 'which' package (boo#1172501)
+
+- kexec-tools-Remove-duplicated-variable-declarations.patch:
+  Remove duplicated variable declarations (boo#1160399).
keybase-client
+- Update the Image dependency to address CVE-2023-29408 /
+  bsc#1213928. This is done via the new update-image-tiff.patch.
+
+- Upgrade to version 6.2.2
+  * No change log provided
+
+- Limit parallel test execution as that seems to cause failing
+  builds on OBS that don't occur locally.
+
+- Integrate KBFS packages previously build via own source package
+  * Upstream integrated these into the same source.
+  * Also includes adding kbfs-related patches
+    ensure-mount-dir-exists.patch and
+    ensure-service-stop-unmounts-filesystem.patch.
+- Upgrade Go version used for compilation to 1.19.
+- Use Systemd unit file from upstream source.
+- Replace deprecated tar_scm source service by obs_scm.
+- Drop the no longer required go_nostrip macro.
+- Drop unnessecary use of gofilelist macro.
+
klee
+- Update to version 3.0+20230611:
+  * Rewrote has_permission in the POSIX runtime.
+  * SpecialFunctionHandler: use std::array for handlerInfo
+  * fix ktest-randgen: use after free
+  * Fixed a format specifier pointed to by a compiler warning.
+  * Build and push Docker image as part of a release
+  * Use recommended LLVM 13 as part of the Docker image
+  * ktest-gen: remove unused function
+  * Further improve KDAlloc memory usage with infinite quarantine
+  * test/Feature/StackTraceOutput.c: relative checks, clang-format
+  * re-enable StackTraceOutput.c test
+  * make BatchingSearcher more readable
+  * fix BatchingSearcher's disabled time budget
+  * also check for default CHECK directive in ArrayOpt Tests
+  * CMake: use check_c_source_compiles() for FSTATAT_PATH_ACCEPTS_NULL
+  * config.h: include FSTATAT_PATH_ACCEPTS_NULL
+  * doxygen.cfg.in: DOXYGEN_OUTPUT_DIR
+  * and much more
+- remove
+  * 0001-gcc13-include-cstint-for-int-_t.patch (in upstream)
+
+- Update to version 2.3+20230326:
+  * tests: add some missing headers
+  * fix unused variables warning
+  * Remove model_version from the POSIX runtime, as we have never used it.
+  * tests: add some
+  * stats: add some
+  * remove obsolete header
+  * Run KDAlloc/rusage unittest a few times to allow for swapfile interference
+  * Added more test cases for --entry-point. EntryPointMissing is currently expected to fail.
+  * STP: add option to switch SAT solver: --stp-sat-solver and set default to CryptoMinisat
+  * Change `llvm_map_components_to_libnames` to `llvm_config` CMake function
+  * use C++17
+  * Require minimal version of CMake 3.16 for KLEE
+  * Remove hard to understand and debug pcregrep test
+  * klee-stats: improve error message for missing tabulate package
+  * Handle fail of KLEE gracefully
+  * Explicitly check if 32bit support is enabled for testing
+- remove
+  * 0001-cmake-implement-USE_MAP-to-support-single-LLVM-libra.patch
+    It's in upstream in a different form.
+
+- Update to version 2.3+20230320:
+  * ConstantArrayExprVisitor: Fix detection of multiple array indices
+  * ConstantArrayExprVisitor: Deduplicate `visitConcat` and `visitRead`
+  * llvm14 support
+  * Update KDAlloc unittests
+  * Don't fail `KleeStats.c` test if it takes 1s or longer
+  * Disable `const_array_opt1` for ubsan as well
+  * Fix uninitialised memory access while reading last path entry
+  * Fix building of runtime library and klee-replay
+  * Add support to disable memsan instrumentation; update UB/Asan suppression
+  * [MemSan] Mark memory objects modified by syscalls as initialised
+  * Fix compiler warning with newer compilers
+  * Use bitcode library paths via config generation instead of `-D` flags
+  * [cmake] Use LLVM's CMake functionality only
+  * Fixed a bug in KLEE libc's implementation of strcmp: according to the C standard, characters should be compared as unsigned chars.
+  * Add some system tests for KDAlloc
+  * Integrate KDAlloc into KLEE
+  * Have the STP coverage build also provide Z3, so that the crosscheck solver can also be tested
+  * Add a few simple solver tests
+  * create klee-last as a relative link
+  * Fix integer overflow
+  * Add an extra check to test/Runtime/FreeStanding/memcpy_chk_err.c ensuring that a call to __memcpy_chk is emitted
+  * fix output check in test const_arr_opt1
+  * add missing FileCheck command to test
+  * Fixed some leaks in klee-replay
+  * fix FileCheck cmd of VarArgByVal test
+- remove (upstream):
+  * 0001-Module-InstructionOperandTypeCheckPass-Fix-Wbitwise-.patch
+  * 0001-llvm14-Add-LLVM-14-to-lit.cfg.patch
+  * 0002-llvm14-TargetRegistry.h-was-moved-from-Support-to-MC.patch
+  * 0003-llvm14-PointerType-getElementType-was-deprecated.patch
+- add
+  * 0001-cmake-implement-USE_MAP-to-support-single-LLVM-libra.patch
+  * 0001-gcc13-include-cstint-for-int-_t.patch
+
kokkos
+- Update to new upstream release 4.1.00:
+  see https://github.com/kokkos/kokkos/blob/4.1.00/CHANGELOG.md
+- Use a tarball as Source0 instead of an URL.
+
+- Update to new upstream release 4.0.01:
+  see https://github.com/kokkos/kokkos/blob/62d2b6c879b74b6ae7bd06eb3e5e80139c4708e6/CHANGELOG.md
+- Use Ninja for building the project.
+
+- Update to new upstream release 4.0.00:
+  see https://github.com/kokkos/kokkos/blob/master/CHANGELOG.md#400-2023-02-21
+- Increase memory limits for build to avoid OpenMP tests running
+  out of memory
+- Add kokkos-do-not-use-env-as-interpreter.patch to fix rpmlint
+  complaint about `env` being used as interpreter
+
krb5
+- Avoid KDC spoofing vulnerability, enable verify_ap_req_nofail in
+  krb5.conf; (jsc#PED-6213);
+
kristall
+- Update to kristall 0.4
+  * Basic Emoji rendering support using OpenMoji
+  * Changed: Improved favourites: Adds grouping and custom names
+  * Adds support for text/kristall-theme mime to preview/install
+    kristall themes via the browser surface
+  * Adds Ctrl-F search function
+  * Adds Mouse middle now opens links in new tabs
+  * Adds Ctrl + mouse left opens links in new tabs
+  * Adds Mouse middle now closes tabs when clicking them
+  * Adds improved settings system with folder-based approach
+  * Adds colored icons to dark/light theme so it has improved
+    contrast
+  * Adds new action: “View/Show document source” will display the
+    raw data of the document in a small separate window
+  * Change: Document styles are now saved as files which are
+    exchangeable
+  * Change: Makes TLS editor columns sortable
+  * Adds single-session mode so opening links will open them in the
+    currently focused window instead of a new instance every time.
+  * Adds the option to open multiple kristall windows in one
+    session.
+  * Adds --new-window command line option to open urls into a new
+    kristall window instead of opening them as a new tab
+  * Adds --isolated command line option to start a separated
+    instance of kristall
+  * Adds possibility to open favourites with enter key in addition
+    to double clicking.
+  * Adds possibility to open history entries with enter key in
+    addition to double clicking.
+  * Fix: Gophermap icons map now respect the background color
+- Drop kristall-qmake5.patch
+
kupfer
+- Update to version v322
+  * Update translations
+  * Add support mate-dictionary in dictionary plugin
+  * Fix Firefox and Thunderbird database connection
+  * Add support for file://<local-hostname>/ URLs
+  * Add Firefox tags plugin
+  * Fix Thunderbird plugin
+  * Add libvirt plugin - manage libvirt domains
+  * Add zeal plugin - quick search in zeal docsets
+  * Fix window plugin - don't break on Wayland, fix switching workspace
+  * Fix segfault on Wayland and newer version of libwnck
+
leftwm
+- Replace obsoleted `disabled` option with `manual` in service file.
+
+- Update to version 0.4.2:
+  * prepare 0.4.2 release (#1089)
+  * Add Optional Behavior Settings for FocusNextTag and
+    FocusPreviousTag (#1086)
+  * feat(leftwm-check): Add a check for other binaries to
+    leftwm-check so that packagers can ensure all current binaries
+    are installed. (#1077)
+  * update deps and fix builderror with `git_version` macro (#1075)
+  * fix basic_lemonbar template.liquid (#1080)
+  * fix - when window gets detroyed, find the last focused (#1055)
+  * on entering fullscreen, save order. On exit, restore. (#1052)
+  * docs(themes/basic_eww): correct writing and improve formatting
+    (#1076)
+  * Make configuration errors more visible (#1072)
+  * Simplify async tests with `tokio::test` (#1069)
+- Added _service file
+
lha
+- Update to version 1.14.1~git.20230329:
+  * Update lharc.c (#38)
+  * Update header.c
+  * lha-test20: test-tmp-stdout must be in utf8, even on non-utf8 systems.
+  * Fix lha-test20 to count errors correctly.
+  * Fix test20 to be timezone independent
+  * Change spaces to tab.
+  * fix #31
+
-- Added patch for obscure buffer overflow.
-
libabigail
-- Do not BuildRequires libebl-devel for Leap 15.4
+- Update to release 2.3
+  * Added an option to ignore SONAME differences in libraries
+  * abicompat: support reading CTF and abixml
+  * symtab: add support for CRC values from __kcrctab
+  * dwarf-reader: Support DW_OP_GNU_variable_value
+  * Support binaries with empty symbol table
+  * Better support an ELF symbol alias that designates several
+    functions
+  * Add support for BTF
+
+- Update to release 2.0
+  * New symbol table reader component.
+  * Correctness of type canonicalization.
+  * Support for DWARF 5.
+  * abidw now emits ABIXML files in a new format, dubbed version
+    2.0.
+  * abipkgdiff should now properly show binary files that were
+    either added to or removed from packages. It also stops
+    erasing the working directory used for binary comparison
+    before it's done using their content.
+  * abidiff: Data members are no longer qualified in diff
+    reports. The --dump-diff-tree option now works in the leaf
+    reporting mode.
libansilove
+- Update to 1.4.1
+  * Sync embedded Spleen 8x16 version to Spleen 2.0.0 (this swap arrows at positions 1A and 1B)
+- Update to 1.4.0
+  * Add font data for Spleen 8x16, it now has full CP437 support
+
libcaca
-- More overflow prevention of multiplying large ints
-  [bsc#1182731, CVE-2021-3410, libcaca-bsc1182731-prevent-overflow.patch]
+- add patch [libcaca-autoconf-2.69.patch]
+  * Don't force autoconf to be at version 2.71
+
+- Upgrade to 0.99.beta20
+  * IPv6 support in cacaserver
+  * fixed a bug from 2004 that caused PDF documentation generation to fail
+  * memory allocation functions are now more robust
+  * numerous fixes for memory leaks and invalid memory accesses:
+  * CVE-2021-30498
+  * CVE-2021-30499
+  * CVE-2021-3410
+  * CVE-2018-20546
+  * CVE-2018-20547
+  * CVE-2018-20545
+  * CVE-2018-20548
+  * CVE-2018-20549
+- Dropped upstream fixed patches
+  * libcaca-bsc1182731-prevent-overflow.patch
+  * libcaca-variable-type.patch
+  * Bug1120502-add_cast_to_prevent_overflow.patch
-- If an image has a size of 0x0, when exporting, no data is written
-  and space is allocated for the header only, not taking into
-  account that sprintf appends a NUL byte.
+- The problem is due to the fact that the images in the POC have
+  a size of 0x0 and thus, when exporting, no data is written for
+  the image bits.
+  However, space is allocated for the header only, not taking
+  into account that sprintf appends a NUL byte.
+- More overflow prevention of multiplying large ints
+  [bsc#1182731, CVE-2021-3410, libcaca-bsc1182731-prevent-overflow.patch]
+
libkrun
+- Update to version 1.4.10:
+  * Bump version to v1.4.10
+  * Update kvm-ioctls to 0.12.0
+  * init: Fix parsing of Env in JSON
+- Drop new-kvm-ioctl.patch, merged upstream.
+
+- Update to version 1.4.9:
+  * Remove unnecessary casts
+  * init: do a case-insensitive check for JSON fields
+  * Fix kernel command line for non-TEE targets
+  * snp: measure regions rqequired by FW and PSP
+  * snp: refactor code to add_region
+  * cargo: Update to sev 1.0.0
+  * Add CODEOWNERS file
+  * examples: Add snp-config-noattest TEE config
+  * vmm/tee: Merge amd-sev and amd-snp modules
+  * vmm/resources: kbs_types behind tee flag
+  * tee: Make TeeConfig required
+  * vmm: Remove aarch64 config on amdsev function
+  * vmm/linux/tee: Add amd-snp module
+  * vmm/linux: Introduce tee module for TEE-specificities
+  * amdsev: Replace manual ioctls for sev library APIs
+  * cargo: Point "sev" to upstream git repo
+
+- Update to version 1.4.8:
+  * Bump version to v1.4.8
+  * macos: fix mapped volumes initialization
+  * Bump version to v1.4.6
+  * sev: fix a new clippy error
+  * fs: fix new clippy issue in descriptor_utils
+  * macos: init: register rosetta in binfmt_misc
+  * macos: map Rosetta directory if present
+  * macos: implement the ioctl Rosetta needs
+- add new-kvm-ioctl.patch
+
+- add proper split-provides
+- add cargo_audit
+
+- Update to version 1.4.6:
+  * Bump version to v1.4.6
+  * fs/macos: Fix some clippy warnings
+  * hvf: write reg on sysreg trap
+  * Bump version to v1.4.5
+  * sev: Don't use a static initrd size
+  * sev: Update to the final KBS attestation protocol
+  * vsock: Fix signal logic in Muxer
+  * examples/Makefile: Remove launch-tee binary on make clean
+
+- Switch to a "proper library" packaging layout. Downstreams (namely,
+  crun) are now able to cope with this. So do it, and get rid of a lot
+  of RPM lint warnings and errors!
+- Make it easier to turn on/off building the SEV-enabled library
+  * Patches dropped:
+  not-set-soname-as-it-is-plugin.patch
+
libkrunfw
+- Update to v3.8.1:
+  * Calculate SNP launch measurement too
+  * Update to latest stable kernel (6.0.6)
+- Changes from 3.8.0:
+  * Automatically shift to build_on_krunvm.sh
+  * macos: Don't use SONAME on macOS
+  * Upgrade embedded kernel to 6.0.2
+- Changes from 3.7.0:
+  * Unify bundle generation scripts
+  * Rebase kernel on v5.15.71
+
+- add split-provides for libkrunfw-sev-devel
+
+- Switch to a "proper library" packaging layout. Downstreams (like
+  libkrun itself and crun) are now able to cope with this. So do it,
+  and get rid of a lot of RPM lint warnings and errors!
+- Make it easier to enable/disable building the SEV-enabled libraries
+- Add some tools into the SEV build & packages
+  * Patches dropped:
+  dont-set-soname-as-it-is-plugin-for-us.patch
+
libnvme
+- Update to version 1.4+29.ga3cf0a:
+  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
+  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
+
libopenraw
+- Update to version 0.3.7 and remove incorporated patch:
+  03f8270d6bb255ca6618505e83169ab9d95ccef1.patch
+- Fix build using %prep from Gentoo and autoconf
+- Upstream changes:
+  * Bug fixes:
+    Fix a crash when rendering Leica M Monochron DNG files.
+    Preserve the raw data photometric interpretation when
+    decompressing raw data.
+    Properly decode uncompressed big endian 16 bit raw data from
+    Pentax PEF. Issue #2. Including PENTAX *ist DS. #2
+    Added missing MPL-2.0 license to tarball. #15
+    Fix build issue with Rust 1.70.
+    Fix offline Rust build from tarball.
+    Fix a missing include with gcc 13. Issue #12.
+  * New features:
+    The Rust crates are vendored for the tarball. Note: resulting
+    tarball is bigger.
+  * Camera support:
+    [ a * denote that static WB coefficients have been included, unless DNG ]
+    Added Leica M11 Monochrom, Q3.
+    [ a * denote that static WB coefficients have been included, unless DNG ]
+    Added coefficients for Canon R8* and R50*.
+    Added coefficients for Panasonic S5M2*.
+    Added Panasonic GF8*.
+    Added Sony ZV-E1*, ILME-FX30*.
+  * Other:
+    Updated Exif tags.
+
+- Add 03f8270d6bb255ca6618505e83169ab9d95ccef1.patch: Include
+  stdint.h where needed. This fixes an issue building with gcc 13.
+
+- Update to version 0.3.4:
+  * Added Canon R8 and R50.
+  * Added Panasonic G95D* and S5M2.
+  * Added Canon 200D Mk II*, EOS R6 MKII*, EOS R7* and EOS R10*.
+  * Added DJI Mini 3 Pro / FC-3582 (DNG).
+  * Added Fujifilm X-H2*, X-H2S*, X-T5*, S6000fd*, SL1000* and HS50EXR*.
+  * Added Hasselblad L2D-20c / DJI Mavic 3 Cine (DNG).
+  * Added Olympus C5060WZ*, SP570UZ* and E-P7*.
+  * Added OM Systems OM-5*.
+  * Added Panasonic FZ38*, FZ300*, FZ70, FZ72*, G6*, G70*, G81*, G90*, GM1S*,
+    GX7 Mk3*, GX85*, LF1*, TZ71*, TZ81*, TZ90*, TZ96*, TZ101*, ZS40*/TZ60*/TZ61*.
+  * Added Sony 7RM5*.
+  * Added Leica D-LUX 6*.
+  * Added Nikon Z 30*.
+  * Added Epson RD-1X*.
+  * Added Leica DIGILUX3*.
+  * Added Nikon D1H*, D7500*, D850* and P7800*.
+  * Added Olympus E30*, E420*, E450*, E520*, E600* and E-P5*.
+  * Added Pentax K2000* and K-m* (PEF).
+  * Ensure that RawFile::init() is never called twice.
+    This would cause crashes if it was called concurrently.
+  * Properly detect compressed data for Panasonic.
+  * Fix the linkage of the mp4parse library with libtool.
+  * Fixed the demo/ccfa to output properly the byte stream.
+  * Fixed BitIterator code to peek past the number of bits for Olympus decoding.
+  * Fixed decompression of packed Olympus ORF files.
+  * Fixed over reported size of Panasonic compressed Raw data.
+
-- Run make check
-- Do not use gcc -ansi flag
-- Ensure all C files include "config.h"
-
-- Build C++ code with -fvisibility-inlines-hidden shrinks
-  the exported symbol table from 1844 to 1476 entries.
-
liboqs
+- use gcc12 to build, as aarch64 code uses primitives not understood
+  by gcc7. bsc#1215751
+
libosmo-abis
+- Update to release 1.4.1
+  * trau_sync: Add the V.110 sync pattern
+  * trau_sync: add Ericsson RBS GPRS TRAU synchronization pattern
+    (16 & 64kbps)
+  * Add missing functions to send HDLC/RAW data
+
libqxmpp
+- remove baselibs, not sure if we need 32bit libs anymore.
+
+- Update to 1.5.3
+  * MAM: Fix task is never finished when none of the messages is
+    encrypted but e2ee is enabled
+  * SaslDigestMd5: Fix undefined behaviour with Qt 6 when parsing
+    empty property at the end of the input
+  * CarbonManagerV2: Fix enable IQ sending
+  * Fix various OMEMO issues and update to libomemo-c 0.5
+  * Add CMake option to manually specify Qt major version
+  * Readd old PubSubIq and PubSubItem after justified complaints
+
+- Update to 1.5.2
+  * Fix undefined behaviour in OmemoManager and FileSharingManager
+  * STUN: Fix nonce attribute is not padded
+  Changes in 1.5.1:
+  * Fix build with clang (usage of auto in template argument)
+  Changes in 1.5.0:
+  * New QXmppTask/Promise for asynchronous APIs
+  * Packet sending result reporting (sent, stream management acks)
+  * IQ response recognition and mapping to requests via QXmppTask
+  * Add QXmppTask-based APIs to most of the managers
+  * Implement XEP-0060: Publish-Subscribe (nearly complete)
+  * Implement XEP-0118: User Tune
+  * Implement XEP-0080: User Location
+  * Rewrite MIX items with new PubSubItem
+  * Add specified data forms parsing utilities
+  * Implement XEP-0384: OMEMO Encryption
+  * Implement XEP-0434: Trust Messages (TM)
+  * Implement XEP-0450: Automatic Trust Management (ATM)
+  * Implement XEP-0420: Stanza Content Encryption
+  * Add new Message Carbons manager capable of end-to-end
+    encryption
+  * Adapt QXmppClient to support end-to-end-encryptions
+  * Implement XEP-0446: File metadata element
+  * Implement XEP-0300: Use of Cryptographic Hash Functions
+    in XMPP
+  * Implement XEP-0264: Jingle Content Thumbnails
+  * Implement XEP-0447: Stateless file sharing
+  * Implement XEP-0448: Encryption for stateless file sharing
+  * Add new HTTP File Upload Manager for slot requesting
+    and uploading
+  * Implement stanza parsing for modern audio-video calls
+  * Implement XEP-0444: Message Reactions
+  * Add QXmppNonza as base for stanzas and nonzas
+  * RosterManager: Add subscription request signal with
+    full presence
+  * library now major version 4
+
libstrophe
+- Update to 0.12.3:
+  * Improve TCP-connection establishment (#221)
+  * Handle case where the server doesn't provide the bind feature (#224)
+  * Fix configure script for non-bash shells (#218)
+  * Parse JID's according to RFC7622 (#219)
+  * Fix potential memory leak in internal DNS resolver (#219)
+  * Fix potential memory leaks in xmpp_conn_set_cafile() and xmpp_conn_set_capath() (#219)
+  * Internal improvements (#219)
+
libvirt
+- Update to libvirt 9.7.0 (jsc#PED-3279)
+  - Many incremental improvements and bug fixes, see
+    https://libvirt.org/news.html#v9-7-0-2023-09-01
+- spec: Unconditionally enable modular daemons (jsc#PED-6303)
+- spec: Disable ESX hypervisor driver in ALP-based products
+- spec: Disable glusterfs storage backend in ALP-based products
+
+- spec: Disable Apparmor support in ALP-based products
+- spec: Disable interface driver in ALP-based products
+- spec: Disable sanlock plugin in ALP-based products
+- spec: Disable numad support in ALP-based products
+
+- spec: Disable Xen driver in ALP-based products
+
+- Add upstream commit 3d2f3fb72b to fix max file limits in systemd
+  services
+
+- Update to libvirt 9.6.0
+  - Many incremental improvements and bug fixes, see
+    https://libvirt.org/news.html#v9-6-0-2023-08-01
+  - jsc#PED-3725
+- spec: Remove logic handling package upgrade from old libvirtd
+- spec: Remove obsolete Groups tag
+- spec: Integrate upstream spec file changes that split the
+  libvirt-daemon package, allowing more modular, customized
+  installations
+- spec: New subpackages libvirt-daemon-common, libvirt-daemon-lock,
+  libvirt-daemon-log, libvirt-daemon-proxy, and
+  libvirt-daemon-plugin-lockd
+- spec: Renamed subpackage libvirt-lock-sanlock to
+  libvirt-daemon-plugin-sanlock
+
libwacom
+- update to 2.8.0 (bsc#1214390):
+  * data: Add "Wacom One pen tablet"
+  * data: add Wacom One 12 & Wacom One 13
+  * data: Add support for the Samsung Chromebook Plus v2
+  * data: Add support for Nuvision Solo 10 Draw
+  * data: add ELAN 2C1B and 2D55 (Asus ZenBook Pro Duo UX482EG)
+  * data: create a stylus group for the generic-no-eraser pen
+  * data: create a generic-with-eraser group for the default
+    stylus
+  * data: include another device name for the Huion H950P
+  * libwacom 2.8.0
+  * data: add XP Pen Deco mini7
+- update keyring with keys from https://github.com/whot.gpg
+
+- update to 2.7.0:
+  * Added support for XP-Pen Deco MW (#548)
+  * Add support for Lenovo Ideapad Duet 5i
+  * Add support for HP Spectre x360 14
+  * data: make XP-Pen Deco Pro MW layout generic
+  * data: Add XP-Pen Deco Pro SW
+  * Format python files with Python black
+  * tools: add list-local-devices as builddir tool
+  * data: narrow down the Huion H950p to include a name match
+  * tools: list the kernel name together with the event node
+  * Add ID 04f3:23b9 for HP Envy x360 ar0xxx (#550)
+  * Add Wacom HID 52D3 (Lenovo Yoga 7 14ARB7)
+  * Update to follow auto-generated standard
+  * Add Wacom HID 52D5 (Lenovo Yoga 7 14ARB7) (#549)
+  * Support for xp-pen deco pro mw (#552)
+
+- update to libwacom-2.6.0:
+  * Add Ugee M708 v1 tablet
+  * Add tablet definition for Wacom HID 52FA Pen (#536)
+  * Added support for XP-Pen Deco01 v2
+  * tools/clean_svg: don't modify the dict while iterating
+  * data: add the sysinfo to the wacom.example file
+  * CI: update some actions to newer versions
+  * CI: bump an action to the current version
+  * README: note that we support tablets other than Wacom's
+    too
+  * CI: bump to use latest Ubuntu LTS
+  * Add tablet definition for Huion Kamvas 13
+  * tests: fix failure if system doesn't use systemd
+
libwebp
+- Add 0001-Fix-OOB-write-in-BuildHuffmanTable.patch
+  Add 0001-Fix-invalid-incremental-decoding-check.patch:
+  [boo#1215231] [CVE-2023-4863]
+
libxml2
+  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
+    buffer overflow
+  - Added file libxml2-CVE-2023-39615.patch
+
+- Security update:
lightdm
+- Split bash-completion to separate sub-package
+
lime
+- Update to 5.2.73 (no changelog)
+
+- Update to version 5.2.49 (no changelog).
+- Add set_current_version.patch.
+
+- Add add-cstdint.patch.
+
+- Update to version 5.2.30 (no changelog).
+
linphone
+- Update to 5.2.75 (no changelog). This fixes boo#1212956.
+- Add set_current_version.patch.
+
+- Update to version 5.2.50:
+  * Fix bug related to conference created with ICE DTLS SRTP encrypted call
+  * Rework tone manager:
+  - Remove reason field from LinphoneToneDescription
+  - Store tones by ID
+  - choose tone based on the reason when a call ends
+  * Do not override lime capability when enabling lime
+  * Do not allow to add dependency of an account to itself
+  * Allow to enable or disable tone indications from the core settings
+  * Fixed Content-Disposition (and others) headers issue in multiparts
+  * Update chat room flags in DB when calling insertChatRoom
+  * Fix an issue where on-hold music is played erroneously through a call that has been resumed
+  * Send invitations to the list of participants to invite and not to all invitees
+
linphoneqt
+- Update to version 5.0.16:
+  * Fix Section date timezone in chat
+  * Use custom font for chat compose area
+  * Fix Speaking border display
+  * Replace double click on avatar by a simple click for copying address into the SmartSearchBar
+  * Update SDK to 5.2.60 (Active Speaker fix)
+- Update to version 5.0.15:
+  * Fix using only username in URI handlers
+  * Fix Portait thumbnails
+  * Fix Chat flickering on load
+  * Update SDK to 5.2.50
+- Update to version 5.0.14:
+  * Show file extension image instead of thumbnails if image's size factor is too low/high
+  * Update SDK to 5.2.35 (ZLib vulnerability)
+- Update to version 5.0.13:
+  * Fix Update SDK to 5.2.35 (ZLib vulnerability)
+  * Fix Crash and display of local conferences
+  * Show display name for local accounts
+  * Update SDK to 5.2.32
+- Update to version 5.0.12:
+  * Fix Some case of unwanted settings folders creation
+  * Replace black thumbnails that contains transparency by white color
+  * Update SDK to 5.2.28
+- Update to version 5.0.11:
+  * Fix Crash on ending call in conference
+  * Deactivate action buttons and menus if chat room has been left
+  * Remove duplicated nat policies
+  * Save Stun/Turn proxy configuration
+  * Switch off camera at startup
+  * Update SDK to 5.2.25
+- Update to version 5.0.10:
+  * Crash when editing contacts from chat
+  * Remove blank page when opening calls window and add a waiting step while connecting to call
+  * Fix Crash when editing contacts from chat
+  * Remove FFMPEG from dependencies as it is no more needed
+- Update to version 5.0.9:
+  * Fix Display hidden scrollbars
+  * Fix Display hidden error icon on messages
+  * Update SDK to 5.2.19 (fix crash)
+- Update to version 5.0.8:
+  * Fix Qt 5.12 compatibility on recordings
+- Update to version 5.0.7:
+  * Hide the active speaker from the mini views
+  * Display recordings list from the burger menu
+  * Update SDK to 5.2.15
+- Update to version 5.0.6:
+  * Fix URI Handlers to a conference
+
lite-xl
+- Update to version 2.1.1+git20230805.3979730:
+  * ci(release): use lite-xl org (#1571)
+  * Make `DocView` aware of scrollbars sizes (#1177)
+  * Updated README.md as per PR comittee meeting #8.
+  * Updating the *Installing prebuild* section in README.md (#1548)
+  * Use proper timeouts for coroutines that don't need to wait (#1467)
+  * Normalize stroke before adding keybind (#1334)
+  * feat(src/renderer): unify fontgroup baseline (#1560)
+  * Fixed things for when a thread requests a redraw. (#1570)
+  * Documentation for core.command (#1564)
+  * docs(system): fix missing parameter for system.path_compare (#1566)
+  * Documentation for core.common (#1510)
+  * Updated extension for mac. (#1563)
+
+- Update to version 2.1.1+git20230710.76f23a2:
+  * feat(src/renderer): stream fonts with SDL_RWops on all platforms (#1555)
+  * Return state when tokenizing plaintext syntaxes
+  * style(src/renderer): use FreeType header names (#1554)
+  * Allow setting custom glyphset size (#1542)
+  * Skip checking `files` if no filename was provided to `syntax.get`
+  * Fix #1538 log scrolls automatically (the real PR) (#1546)
+  * comment typo in object.lua (#1541)
+  * Windows Installer Path Modification (#1536)
+  * Attach command buffer to Renderer Window (#1472)
+  * Increase number of loadable glyphsets (#1524)
+  * Add top tab margins (#1479)
+  * Show cursor at the start of the next line when selecting full lines (#761)
+  * Make `Doc:sanitize_position` return a more appropriate `col` (#1469)
+  * Revert "core syntax: strip the path from filename on syntax.get (#1168)" (#1322)
+  * Change AppID (#1187)
+  * When logging don't use `core.status_view` if not yet initialized
+  * Mark `linewrapping` `open_files` table as weak
+  * Add mouse grab (#1501)
+  * Close lua state when exiting on a runtime error (#1487)
+  * Move lineguide below blinking cursor, fixes #1488 (#1511)
+  * fix(renderer): fix memory leak when freeing glyphsets
+  * docs(system): make all parameters for set_window_hit_test optional
+  * detectindent: fix wrong detection reported by Adam (#1500)
+  * Allowed for overrides of toolbar items, so plugins can add things if they want to with different fonts. (#1157)
+  * Restore horizontal scroll position after scale change (#494)
+  * feat(bootstrap): return error string from C searcher
+  * fix(rencache): fix compiler warning for printing size_t
+  * Fixing linewrapping bug to do with wordwrapping.
+  * Added in double-clicking on emptyview and tab bar. (#1478)
+  * ci(build): update action dependencies
+  * fix(process): check for HANDLE_INVALID (#1475)
+  * Make `system.path_compare` more digit-aware (#1474)
+  * StatusView compat fix with older Lua runtimes
+  * Process API improvements (again) (#1370)
+  * Build releases with Ubuntu 18.04 container (#1460)
+  * Merge carets after `doc:move-to-{previous,next}-char` (#1462)
+  * refactor(plugin_api): move the header into include/ (#1440)
+  * Show error message in crash message box (#1461)
+  * Cross compiling improvements + macOS universal binary (#1458)
+  * upgrade header files to Lua 5.4 (#1436)
+  * Fix for api_require wrong macro && conditions (#1465)
+  * feat: add statusview item to show selections (#1445)
+  * #1393 followup (#1463)
+  * Make `system.path_compare` more case-aware (#1457)
+  * Update api_require to expose more symbols (#1437)
+  * Optimizing MSYS2 CI (#1435)
+  * fix(CI): bump dependency versions (#1434)
+  * fix: fix differing stacktrace on stdout and file (#1404)
+  * Add View dragging (#1402)
+  * fix(windows-utf8-patch): fix os.getenv() not supporting UTF-8 output (#1397)
+  * Fix invalid EXEFILE and EXEDIR on Windows (#1396)
+  * Added in support for foreground and background events. (#1395)
+  * add autocompletion to multicursor (#1394)
+  * fix cursors positions when deleting multiple selections (#1393)
+  * Added in explicit touchscreen keyboard support. (#1389)
+  * Allow `tokenizer` to pause and resume in the middle of a line (#1444)
+  * Disable `trimwhitespace` and `drawwhitespace` via their configs (#1446)
+  * Limit `core.threads` without a timeout to run 30 times per second
+  * Made things clearer, as per jgm's suggestion.
+  * Made coroutines make more sense, and fixed a bug. (#1381)
+  * Don't calculate widths per-uft8-char when not needed (#1409)
+  * Asynchronous process reaping (#1412)
+  * Aggregate `SDL_Surface`s and their scale in `RenSurface` (#1429)
+  * Make `TreeView` follow the current tab (#1411)
+  * Use clipping functions provided by SDL (#1426)
+  * Improve text width calculation precision (#1408)
+  * refactor(main): move SetProcessDPIAware to manifests (#1413)
+  * Split `Command` struct into different structs for each command type (#1407)
+  * Add manifest on Windows (#1405)
+  * Use correct view for scrolling to `find-replace:repeat-find` results (#1400)
+  * Added in ability to specify prefix via env variable. (#1388)
+  * fix incorrect x_offset if opened docs have different tab sizes (#1383)
+  * Fixed up some post 5.1/jit Symbols (#1385)
+  * Make tab scrolling more flexible (#1384)
+  * Correct the inverted tabs scrolling
+  * Make mouse scrollwheel hovering tabs scroll the tab bar (#1314)
+  * Allow groups to be used in end delimiter patterns in tokenizer (#1317)
+  * Improve `DocView:get_visible_line_range` precision (#1382)
+  * plugins scale: also rescale style.expanded_scrollbar_size (#1380)
+  * NagView: properly rescale on scale change (#1379)
+  * Restore in-selection replace as discussed in #1331 (#1368)
+  * Improved plugins config table handling (#1356)
+  * Make mod-version follow semver (#1036)
+  * fix: exec() error not returned to parent (#1363)
+  * Context menu fixes and keyboard navigation (#1338)
+  * Replace globally when replacing from selection (#1331)
+  * feat: add option to only draw whitespace if it is within selection (#1312)
+  * Abstracted open_doc out to allow for more easy overriding. (#1344)
+  * Getting rid of annoying forward slash on windows. (#1345)
+  * gh workflow: fix path to macOS arm64 cross file
+  * ci: fix msys build now requiring ca-certificates (#1348)
+  * pass RenWindow by argument (#1321)
+  * Add "Open with Lite XL" to windows' context menu (#1333)
+  * Added missing header declaration.
+  * plugin api: allow usage on multiple source files (#1335)
+  * Added in Config Postload (#1336)
+  * Avoid drawing hidden text in `DocView:draw_line_text` (#1298)
+  * remove static libgcc from meson (#1290)
+  * Updated dummy method signature to match prototypes.
+  * Make empty groups in `regex.gmatch` return their offset (#1325)
+  * Use `table.move` to implement `common.splice` (#1324)
+  * language_md: add nix code block highlighting (#1323)
+  * Create Renderer Only When It Doesn't Exist (#1315)
+  * replace uses of SDL_Window with RenWindow (#1319)
+  * Reorganize resources/ + wasm target (#1244)
+  * packaging: use master branch for plugin addons
+  * fix: center title and version in emptyview (#1311)
+  * defer lua error until after cleanup (#1310)
+  * plugin api: added missing luaL_typeerror (#1313)
+  * Packaging Scripts: updated widgets install location
+  * `linewrapping`: Disable horizontal scrolling when enabled (#1309)
+  * Handle readlink errors (#1292)
+  * Make `dirwatch` sorting compatible with what `file_bisect` expects (#1300)
+  * Don't set a value twice (#1306)
+  * Fix a memory leak (#1305)
+  * Make api_require's nodes const (#1296)
+  * do not allow users to create an empty font group (#1303)
+  * Allow command buffer to be expanded (#1297)
+
+- Removing extra package "Suggests" for items which can be managed by
+  lite-xl-plugin-manager (lpm).
+
+- Going back to commit from last release timeframe, more current ones
+  exhibit high CPU usage and poor UI rendering speed
+
+- Updating doc to live in packages subdir
+- Updating licenses.md location
+
lmms
+- Disable wine vst due to libwine.so.1 being removed in wine version
+  8.3 see https://bugs.winehq.org/show_bug.cgi?id=54635 and
+  https://github.com/LMMS/lmms/issues/6672
+
mako
+- Update to 1.8.9:
+  * A new `makoctl history` command to display history
+  * An action name can be passed to `makoctl invoke`
+  * `makoctl list` now includes desktop-entry and urgency
+
mapserver
+- update to 8.0.1
+  * PROJ_DATA set through config option: take into account
+    possibility of multiple paths separated by ; on Windows or : on
+    Unix
+  * Resolve a bunch of memory leaks, integer overflows, nullptr
+    dereferences, double-frees.
+  * Allow NULL shapes to be returned in WFS GetFeature requests
+  * Ensure POINT blocks do not contain too many points
+  * https://www.mapserver.org/development/changelog/changelog-8-0.html
+
mariadb
-- Update to 10.6.14:
-    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
-    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
-  * fixes for the following security vulnerabilities:
-    10.6.14: none
+- update the list of the skipped tests for s390x, fix bsc#1215255
-- Update to 10.6.13:
-    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
-    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
-  * fixes for the following security vulnerabilities:
-    10.6.13: CVE-2022-47015 (bsc#1207404)
+- Update to 10.11.5:
+    https://mariadb.com/kb/en/mariadb-10-11-5-release-notes/
+    https://mariadb.com/kb/en/mariadb-10-11-5-changelog/
+    https://mariadb.com/kb/en/mariadb-10-11-4-release-notes/
+    https://mariadb.com/kb/en/mariadb-10-11-4-changelog/
+  * fixes for the following security vulnerabilities:
+    10.11.5: none
+    10.11.4: none
+- Issues that aren't affecting this package:
+  * CVE-2021-46669
+  * CVE-2022-27376 (bsc#1198628)
+  * CVE-2022-27377 (bsc#1198603)
+  * CVE-2022-27378 (bsc#1198604)
+  * CVE-2022-27379 (bsc#1198605)
+  * CVE-2022-27380 (bsc#1198606)
+  * CVE-2022-27381 (bsc#1198607)
+  * CVE-2022-27382 (bsc#1198609)
+  * CVE-2022-27383 (bsc#1198610)
+  * CVE-2022-27384 (bsc#1198611)
+  * CVE-2022-27386 (bsc#1198612)
+  * CVE-2022-27387 (bsc#1198613)
+  * CVE-2022-27444 (bsc#1198634)
+  * CVE-2022-27445 (bsc#1198629)
+  * CVE-2022-27446 (bsc#1198630)
+  * CVE-2022-27447 (bsc#1198631)
+  * CVE-2022-27448 (bsc#1198632)
+  * CVE-2022-27449 (bsc#1198633)
+  * CVE-2022-27451 (bsc#1198639)
+  * CVE-2022-27452 (bsc#1198640)
+  * CVE-2022-27455 (bsc#1198638)
+  * CVE-2022-27456 (bsc#1198635)
+  * CVE-2022-27457 (bsc#1198636)
+  * CVE-2022-27458 (bsc#1198637)
+  * CVE-2022-32088 (bsc#1201168)
+  * CVE-2022-32087 (bsc#1201167)
+  * CVE-2022-32086 (bsc#1201166)
+  * CVE-2022-32085 (bsc#1201165)
+  * CVE-2022-32083 (bsc#1201163)
+  * CVE-2022-21427
+  * bsc#1199928
+  * bsc#1195076
+  * jsc#SLE-22245
+
+- Skip test on s390x to fix build on ALP, bsc#1211859
-- Update to 10.6.12:
-    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
-    https://mariadb.com/kb/en/library/mariadb-10612-changelog
-    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
-    https://mariadb.com/kb/en/library/mariadb-10611-changelog
+- Refresh gcc13-fix.patch
+- Update to 10.11.3:
+  * release notes and changelog:
+    https://mariadb.com/kb/en/mariadb-10-11-3-release-notes/
+    https://mariadb.com/kb/en/mariadb-10-11-3-changelog/
-    10.6.12: none
-    10.6.11: none
+    10.11.3: CVE-2022-47015 (bsc#1207404)
+
+- Cherry-pick upstream changes (gcc13-fix.patch) for GCC 13.
+
+- Update to 10.11.2:
+  * release notes and changelog:
+    https://mariadb.com/kb/en/changes-improvements-in-mariadb-1011/
+    https://mariadb.com/kb/en/mariadb-10-11-2-release-notes/
+    https://mariadb.com/kb/en/mariadb-10-11-2-changelog/
+    https://mariadb.com/kb/en/mariadb-10-11-1-release-notes/
+    https://mariadb.com/kb/en/mariadb-10-11-1-changelog/
+    https://mariadb.com/kb/en/mariadb-10-11-0-release-notes/
+    https://mariadb.com/kb/en/mariadb-10-11-0-changelog/
+- Refresh mariadb-10.2.4-logrotate.patch
+
+- Update to 10.10.3:
+    https://mariadb.com/kb/en/mariadb-10-10-3-release-notes/
+    https://mariadb.com/kb/en/mariadb-10-10-3-changelog/
+
-- Update to 10.6.10:
-    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
-    https://mariadb.com/kb/en/library/mariadb-10610-changelog
+- Update to 10.10.2:
+  * release notes and changelog:
+    https://mariadb.com/kb/en/changes-improvements-in-mariadb-1010/
+    https://mariadb.com/kb/en/mariadb-10-10-2-release-notes/
+    https://mariadb.com/kb/en/mariadb-10-10-2-changelog/
+    https://mariadb.com/kb/en/mariadb-10101-release-notes/
+    https://mariadb.com/kb/en/mariadb-10101-changelog/
+    https://mariadb.com/kb/en/mariadb-10100-release-notes/
+  * fixes for the following security vulnerabilities:
+    10.10.2: none
+
+- Update to 10.9.4:
+  * release notes and changelog:
+    https://mariadb.com/kb/en/library/mariadb-1094-release-notes
+    https://mariadb.com/kb/en/library/mariadb-1094-changelog
-    10.6.10: none
+    10.9.4: none
+
+- Update to 10.9.3:
+  * release notes and changelog:
+    https://mariadb.com/kb/en/library/mariadb-1093-release-notes
+    https://mariadb.com/kb/en/library/mariadb-1093-changelog
-- Update to 10.6.9:
+- Update to 10.9.2:
+  * changes and improvements in MariaDB 10.9:
+    https://mariadb.com/kb/en/changes-improvements-in-mariadb-109/
-    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
-    https://mariadb.com/kb/en/library/mariadb-1069-changelog
+    https://mariadb.com/kb/en/library/mariadb-1092-release-notes
+    https://mariadb.com/kb/en/library/mariadb-1092-changelog
+    https://mariadb.com/kb/en/library/mariadb-1091-release-notes
+    https://mariadb.com/kb/en/library/mariadb-1091-changelog
+    https://mariadb.com/kb/en/library/mariadb-1090-release-notes
+    https://mariadb.com/kb/en/library/mariadb-1090-changelog
-    10.6.9: CVE-2022-32082 (bsc#1201162)
+    10.9.2: CVE-2022-32082 (bsc#1201162)
+- Update list of skipped tests
+
+- Respect socket setting in mysql-systemd-helper
+- Fix my_print_defaults call in mysql-system-helper
+
+- use the better collation as default
+  * DDEFAULT_COLLATION=utf8mb4_unicode_520_ci
+
+  * suse_skipped_tests.list
-- Update to 10.6.8 (bsc#1199928):
+- Update to 10.8.3:
-    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
-    https://mariadb.com/kb/en/library/mariadb-1068-changelog
-  * fixes for the following security vulnerabilities:
-    10.6.8:  CVE-2021-46669
-    CVE-2022-27376 (bsc#1198628)
-    CVE-2022-27377 (bsc#1198603)
-    CVE-2022-27378 (bsc#1198604)
-    CVE-2022-27379 (bsc#1198605)
-    CVE-2022-27380 (bsc#1198606)
-    CVE-2022-27381 (bsc#1198607)
-    CVE-2022-27382 (bsc#1198609)
-    CVE-2022-27383 (bsc#1198610)
-    CVE-2022-27384 (bsc#1198611)
-    CVE-2022-27386 (bsc#1198612)
-    CVE-2022-27387 (bsc#1198613)
-    CVE-2022-27444 (bsc#1198634)
-    CVE-2022-27445 (bsc#1198629)
-    CVE-2022-27446 (bsc#1198630)
-    CVE-2022-27447 (bsc#1198631)
-    CVE-2022-27448 (bsc#1198632)
-    CVE-2022-27449 (bsc#1198633)
-    CVE-2022-27451 (bsc#1198639)
-    CVE-2022-27452 (bsc#1198640)
-    CVE-2022-27455 (bsc#1198638)
-    CVE-2022-27456 (bsc#1198635)
-    CVE-2022-27457 (bsc#1198636)
-    CVE-2022-27458 (bsc#1198637)
-    CVE-2022-32088 (bsc#1201168)
-    CVE-2022-32087 (bsc#1201167)
-    CVE-2022-32086 (bsc#1201166)
-    CVE-2022-32085 (bsc#1201165)
-    CVE-2022-32083 (bsc#1201163)
-- Update list of skipped tests
-- The following issue is not affecting this package:
-  * CVE-2022-21427
+    https://mariadb.com/kb/en/library/mariadb-1083-release-notes
+    https://mariadb.com/kb/en/library/mariadb-1083-changelog
+    https://mariadb.com/kb/en/library/mariadb-1082-release-notes
+    https://mariadb.com/kb/en/library/mariadb-1082-changelog
+    https://mariadb.com/kb/en/library/mariadb-1081-release-notes
+    https://mariadb.com/kb/en/library/mariadb-1081-changelog
+    https://mariadb.com/kb/en/library/mariadb-1080-release-notes
+    https://mariadb.com/kb/en/library/mariadb-1080-changelog
+- Remove upstreamed patch:
+  * bsc1194828.patch
-- Build mariadb-galera on SLE (jsc#SLE-22245)
-- Add dependency on galera-4 for mariadb-galera
-- Remove old constraints for mariadb-galera
+- Do not include mariadb-galera files in the main package when
+  %{with galera} is false
-- Update to 10.6.7 (bsc#1196016):
+- Update to 10.7.3 (bsc#1196016):
-    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
-    https://mariadb.com/kb/en/library/mariadb-1067-changelog
-    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
-    https://mariadb.com/kb/en/library/mariadb-1066-changelog
+    https://mariadb.com/kb/en/library/mariadb-1073-release-notes
+    https://mariadb.com/kb/en/library/mariadb-1073-changelog
+    https://mariadb.com/kb/en/library/mariadb-1072-release-notes
+    https://mariadb.com/kb/en/library/mariadb-1072-changelog
+    https://mariadb.com/kb/en/library/mariadb-1071-release-notes
+    https://mariadb.com/kb/en/library/mariadb-1071-changelog
+    https://mariadb.com/kb/en/library/mariadb-1070-release-notes
+    https://mariadb.com/kb/en/library/mariadb-1070-changelog
-    10.6.7: CVE-2021-46665
+    10.7.3: CVE-2021-46665
-    10.6.6: CVE-2022-24052
+    10.7.2: CVE-2022-24052
-- Skip failing tests for s390x, fixes bsc#1195076
-  * suse_skipped_tests.list
+    10.7.1: none
+    10.7.0: none
+- Update list of skipped tests
+- Add bsc1194828.patch to fix build with GCC12, fixes bsc#1194828
+- Build mariadb-galera on SLE
+- Add dependency on galera-4 for mariadb-galera
+- Remove old constraints for mariadb-galera
+
mcfly
+- Update to 0.8.1:
+  * Fix use of MCFLY_DISABLE_MENU
+  * Support Fish private mode support
+  * Always set MCFLY_HISTORY in zsh to support subshells
+  * Allow linking mcfly with system-provided sqlite with
+    sqlite-bundled feature flag
+  * And allow sourcing in zsh more than once
+  * Reduce size by removing unnecessary/unused regex features
+  * Add per-directory history
+
+- Update to 0.8.0:
+  * Add forward-compatibility check for database schema
+  * Add MCFLY_DISABLE_RUN_COMMAND option to disable command running
+  * Add customizable prompt with MCFLY_PROMPT
+  * Replace termion with crossterm
+  * Allow ENV variables to be set to FALSE
+
mediastreamer2
+- Add BuildRequires:  Mesa-libGL-devel
+  * fix build on tumbleweed
+
+- Update to 5.2.73 (no changelog)
+- Rebase fix-build-ffmpeg5.patch
+
+- Update to 5.2.49 (no changelog).
+- Add set_current_version.patch.
+
+- Update to 5.2.30 (no changelog)
+
mhvtl
+- Besides lots of bug fixes, the main visible change is the
+  addition of the mhvtl_kernel_mod_build script, which uses
+  a tarball of the modules sources in /lib/firmware/mhvtl_kernel.tgz
+  to build the kernel module. This adds a new script, new
+  firmware file, and a new man page.
+- Details about the update to version 1.71_release+903.d3ec98550dc3:
+  * Fix issue with DEFINE_SEMAPHORE in kernel module
+  * only call fflush() while in debug mode.
+  * Add used, but undeclared variable fg into vtltape::processMessageQ() function
+  * vtltape: Clean up after media mount failure
+  * Make send_msg_and_log() a macro - so the logging reads more logical
+  * test_lbp.sh : Fix misleading comments in script
+  * Move 'test_lbp.sh' into scripts directory
+  * Improve usability of test_lbp.sh
+  * gitignore: mhvtl_kernel.tgz is built at build time. Add to ignore
+  * mhvtl.spec: Bump version to 1.7-1
+  * Vagrant: Update the vagrant OS versions
+  * Pre-package mhvtk.ko source into the binary distribution.
+  * Expecting an unsigned 32bit int but cast as a signed 32bit int
+  * Remove duplication of application encryption structure
+  * Log information of AKAD/UKAD being sent from application
+  * Error logging macro - include line number in error log
+  * Make raspberryPi malloc() issue work-around a compile time depend on
+    ARM CPU type
+  * work around raspberryPi (32bit) malloc crash
+  * Initialise 'barcode' to NULL
+  * Cleanup 32bit vs 64bit compile warnings regarding variable sizes
+  * Rename struct 'encryption' to 'app_encryption_state'
+  * Remove dead getCommand() prototype
+  * mhvtl.ko: Bump mhvtl.ko version
+  * mhvtl.ko: Migrate printk() to pr_* calls
+  * Improve error message if kernel-devel is not installed
+  * SSC default emulation: Completing LTO-8 media support
+  * Set selinux ACL on systemd startup scripts
+  * Kernel build: remove blank line at end of script
+  * Fix kernel issue with queuecommand_lck
+  * mhvtl.ko: Change initator id from 15 to -1
+  * Change minimum clock size to 1 byte to prevent data loss when
+    writing files to tape devices that are on the block size boundaries
+  * vagrant mount doesn't like hard symlinks - use soft symlink instead
+  * Ultrium: Add support for Extended Inquiry Data VPD page
+  * Add support for INQUIRY_DATA_HAS_CHANGED
+  * SPC Inquiry: Dump SCSI Inquiry VPD pages
+  * Improve hex_dump() to print any ascii chars.
+  * add_lu() Clean up code to use fprintf() instead of write()
+  * Close the gap where lu is not ready to accept commands
+- This update also removes the need for patch (removed), since
+  it's fixed upstream:
+  * mhvtl-fix-queuecomand-args.patch
+
minio-client
+- Update to version 20230801T233057Z:
+  * update deps to latest packages and update CREDITS (#4649)
+  * add TTFB as part of 'mc admin trace' in pretty form (#4648)
+  * Do not allow registration of play cluster (#4647)
+
+- Update to version 20230721T204427Z:
+  * Enabled option to show node and bucket metrics (#4632)
+  * admin-info: Include delete markers count (#4642)
+  * fix replicate update to check for older role ARN (#4640)
+  * properly report bandwidth if not configured (#4641)
+  * fix: remove count flag and show the byteRate for support top
+    net (#4639)
+  * fix: Enable byHost filtering by supplying server host list
+    (#4637)
+
+- Update to version 20230718T210538Z:
+  * fix: with --purge flag ignore path validation errors (#4636)
+  * Support mc top net (#4626)
+  * Fixing misleading usage help for mc anonymous set-json (#4621)
+  * run gofumpt -extra on all source files (#4634)
+  * Ensure `--airgap` is available on all support commands (#4633)
+  * Added `endpoint` and `version` attributes to KMS details
+    (#4591)
+  * Rename mc replicate diff as mc replicate backlog  (#4568)
+  * allow purge to happen on quorum lost objects (#4629)
+
+- Update to version 20230711T233044Z:
+  * This release contains a security fix in the Golang `net/http`
+    standard library - it is built with Go 1.19.11.
+  * add update UBI image to 8.8 (#4625)
+
+- Update to version 20230707T052551Z:
+  * Enhance user info output with authentication info (#4613)
+  * admin replicate update: rename --sync flag to --mode (#4623)
+  * fix: miss count for 'mc support top drive' (#4624)
+  * support site perf replication (#4608)
+
+- Update to version 20230628T215417Z:
+  * Upgrade madmin-go/v3 to 3.0.4 (#4618)
+  * Fix issues related to 'mc admin svcacct list --json' cmd
+    (#4619)
+  * improve user messaging in 'support perf' and 'mc rm --dry-run'
+    (#4617)
+  * fix: allow cluster bucket export to export single bucket
+    (#4614)
+  * Improve consistency in mc cmds (#4609)
+  * Update minio dependencies (#4610)
+
+- Update to version 20230619T193119Z:
+  * Add response details for policy attach/detach cmd (#4602)
+
+- Update to version 20230615T150826Z:
+  * resync status: show current status (#4604)
+  * Bump github.com/lestrrat-go/jwx from 1.2.25 to 1.2.26 (#4601)
+  * Improve output readability for `mc stat` command (#4597)
+  * Fix unconfigured IDP output in `idp info` command (#4600)
+  * Set theme color for `mc admin user svcacct set` output (#4599)
+  * remove unnecessary newline and contextualize the success
+    (#4598)
+  * fix: copy progress crash (#4596)
+
+- Update to version 20230606T134856Z:
+  * add ftp trace support (#4590)
+  * print in tabular form for callhome status (#4588)
+
+- Update to version 20230530T224138Z:
+  * Implement '--expiry' flag for 'mc admin user svcacct add &
+    edit' (#4570)
+  * Make mc ping useful for startup checks (#4584)
+  * fix proxy not being used to test connectivity (#4583)
+
+- Update to version 20230526T233154Z:
+  * Corrected message to align with other messages (#4577)
+  * List expiration dates for 'mc admin user svcacct list' command
+    (#4576)
+  * Add updatedAt for ilm-rule-ls (#4579)
+  * fix: limit manual GC to bigger objects (#4581)
+  * Show groups with their policy details while listing users
+    (#4578)
+  * Move `mc admin idp` to `mc idp` (#4574)
+  * Add sorting order to top drive command (#4575)
+
+- Update to version 20230518T165900Z:
+  * Deprecate older idp commands (#4572)
+  * Add name and description for service accounts (#4569)
+  * bug: panic on nil pointer dereference for "mc admin heal" when
+    disk i… (#4571)
+  * Load Subnet proxy and API key from the env if found (#4557)
+  * randomly generate AK and SK on mc client (#4565)
+  * info: Correctly show pool config with offline node(s) (#4567)
+  * Support setting subnet url via env var in dev mode (#4564)
+- BuildRequire go1.19
+
+- Update to version 20230504T181016Z:
+  * mirror: Fix removal of FS target without a trailing slash
+    (#4560)
+  * Remove tags for object versions (#4563)
+  * mirror: Honor --fake for target bucket removal (#4561)
+  * Ensure perf results file has an extension (#4551)
+  * info: Show nodes in initializing state (#4556)
+  * allow aliases to be `/` at the end and handle such cases
+    (#4554)
+  * Consistent subcommand naming for list and remove with shortname
+    (#4548)
+  * Fix dry run message crash (#4546)
+  * doc: Update mc admin doc (#4529)
+  * build: support loong64 (#4549)
+
+- Update to version 20230412T022151Z:
+  * Remove diskInfo structure in heal report (#4545)
+  * heal: Fix summary ETA with multiple disks healing in one set
+    (#4543)
+  * update minio-go/v7 -> v7.0.52 (#4544)
+  * stat: fix printing bucket usage info (#4542)
+  * fix: remove replace directive merged incorrectly
+  * perf: Add --noclear flag to avoid doing cleanup (#4473)
+  * Add trace for ilm call type (#4538)
+  * do not crash on zero values (#4536)
+  * Add metadata and tags to mc find (#4531)
+  * Add flag to `admin replicate update` to toggle synchronous
+    replication (#4514)
+  * Improve errInvalidAlias (#4532)
+  * Dont send blank perf report to SUBNET (#4533)
+  * print RestoreInfo to check status of restored objects (#4534)
+
+- Update to version 20230406T165110Z:
+  * Add errors for deprecated commands (#4498)
+  * Add trace options for batch key rotation (#4507)
+  * Upgrade madmin-go to 2.0.18 (#4535)
+  * fix: redact secretKey from printed on screen (#4526)
+
+- Update to version 20230323T200304Z:
+  * stat: Fix output when stat a prefix which has other prefixes
+    (#4501)
+  * honor context cancellation on long-running lists (#4519)
+  * Revert query parameter `src` while diag upload to SUBNET
+    (#4516)
+  * cp: Descriptive error about why unable to locate the source
+    (#4517)
+  * add Expiration: info if present for sts/svc accounts (#4515)
+
+- Update to version 20230320T171753Z:
+  * Incl. rules with NewerNoncurrentVersions > 0 (#4505)
+  * Add `batch cancel` command (#4506)
+  * Fix decommission status crash (#4510)
+  * update functional tests for admin_users with 'policy commands'
+    (#4508)
+  * heal: Summary output based on disks utilization (#4474)
+  * Restructure adding and removing policies from users and groups
+    (#4428)
+  * rm: --dry-run with --versions to print versions modtime (#4495)
+  * fix: ldap commands don't accept config name (#4499)
+  * fix: windows stat command (#4503)
+  * Added query parameter `src` while diag upload to SUBNET (#4504)
+  * replicate ls: fix panic (#4497)
+  * replicate status - drop stale ARNs from stats (#4494)
+  * Allow `support proxy set|remove` without registration (#4488)
+  * Skip subnet config get while `--airgap` mode of license
+    register (#4479)
+  * upgrade dependencies and move to go1.20.x (#4490)
+
+- Update to version 20230228T001259Z:
+  * tier-add:  --force flag to ignore in use check (#4481)
+  * subnet: Avoid general hard timeout for requests (#4478)
+  * inspect: Avoid memory usage in subnet upload (#4477)
+  * Print custom info in trace (#4476)
+
+- Update to version 20230216T192011Z:
+  * support unix-pipes with bigger buffers for performance (#4472)
+  * add more debugging tools to 'mc' container (#4475)
+  * Update madmin-go library (#4471)
+  * fix: do not print empty logs on screen (#4470)
+  * Implement 'mc admin user sts info' command (#4377)
+  * Remove `mc admin bucket remote bandwidth` command and introduce (#4430)
+  * Added code to print the copy resume information (#4454)
+  * mc rm: disallow --purge with flags other than --force (#4467)
+  * Fix parsing --response-duration in trace command (#4466)
+  * remove replace flag for go-ieproxy to allow go install
+  * update to newer libraries (#4464)
+  * mc admin user list --json output doesn't include user groups (#4433) (#4463)
+  * locks: Use timestamp when elapsed is zero (#4462)
+  * Improve `replicate ls` output (#4460)
+  * Fix replicate add/update cmds to allow prefix in rule (#4459)
+
+- Update to version 20230128T202938Z:
+  * Use --api-key flag on register when provided (#4458)
+  * fix: hide duration flag its not useful for users (#4457)
+  * Add support for restoring SSE-C encrypted objects (#4456)
+  * use humanize.IBytes instead of humanize.Bytes (#4455)
+  * cleanup mc to use 'go' errs to be 'e' (#4450)
+  * Corrected the logic for calculating the expiration no of days (#4451)
+  * Corrected output for command `mc admin info` (#4448)
+  * Support --airgap in unregister command (#4441)
+  * Add support of giving a comment to service accounts (#4438)
+  * Improve message when profile upload fails (#4443)
+  * Simplify/speedup container image publishing script (#4442)
+
+- Update to version 20230111T031416Z:
+  * Add confirm flag to `mc admin update --yes` (#4439)
+  * Renew license online if license file not passed (#4429)
+  * Rename admin replicate subcommands (#4383)
+  * support concurrent uploads for 'mc pipe' (#4435)
+  * rb: avoid throwing error for force delete of prefix (#4436)
+  * Upload inspect data to SUBNET (#4420)
+  * trace: Add bootstrap tracing type (#4416)
+  * Allow mirror to continue syncing after an object fails to sync (#4427)
+
+- Update to version 20221224T152138Z:
+  * trace: Add input and output filters options (#4353)
+  * upgrade UBI image to 8.7 (#4425)
+  * avoid converting API types to local forms in 'mc' (#4424)
+  * Change formatting of `mc stat` (#4397)
+  * Change `mc replicate add|update` to integrate create remote targets (#4403)
+  * admin-trace: Fix support for tracing scanner calls (#4417)
+  * fix: Correctly print svc accounts list (#4422)
+  * fix: replicate remove show partial operations if any (#4418)
+  * reorganize ILM tier commands (#4385)
+  * Print 'Cancel upon user request' when the global context is cancelled (#4406)
+  * fix: improve the information on retention config (#4411)
+  * show endpoint in the replication status (#4412)
+  * heal: Reword new disks healing summary (#4413)
+  * fix: IDP enable/disable command (#4410)
+  * Upgrade golang.org/x/net (#4405)
+
moe
+- GNU moe 1.13:
+  * 'moerc' has been renamed to 'moe.conf', it is read form
+    $XDG_CONFIG_HOME/moe.conf instead of $HOME/.moerc.
+    (XDG_CONFIG_HOME defaults to $HOME/.config).
+  * Multiple user interface fixes
+  * Speed improvements,including start-up improvements
+  * Some commands recognize additional inputsand options
+  * Now accepts the escape sequences '\uhhhh' and '\Uhhhhhhhh'
+    (universal-character-name) to either search or insert in the
+    buffer the corresponding ISO 10646 character coded in UTF-8.
+  * Now accepts the escape sequence '\dddd' (decimal code 'ddd')
+    like GNU sed to either search or insert in the buffer the
+    corresponding ISO-8859-15 character.
+  * Recursive load now ignores file names with extensions
+    ".lzma", ".pnm", ".tiff", ".zst", ".tzst".
+
-- update to 1.3
-
monero
+- Add upstream fixbuild.patch to build with gcc-13
+
+- Update to version 0.18.2.2:
+  * cryptonote core/protocol: don't drop peers for soft offenses
+  * Fixed deadlock and crash when syncing with full dataset on Windows
+  * build: prepare v0.18.2.2
+  * wallet2: fix infinite loop in fake out selection
+  * p2p: do not log to global when re-blocking a subnet
+  * p2p: avoid spam blocking ipv4 addresses in a blocked subnet
+  * build: prepare v0.18.2.1
+  * Add a size limit for tx_extra in tx pool
+  * verRctNonSemanticsSimpleCached: fix fragility
+  * device: Add ledger Stax device id to device detection
+  * workflows: update dependencies to fix warnings
+
+- Update to version 0.18.2.0:
+  * build: prepare v0.18.2.0
+  * depends: bump openssl to 1.1.1t
+  * blockchain-stats: print any remaining data at end of loop
+  * p2p: add plowsof seed nodes
+  * p2p: remove offline seed nodes
+  * depends: bump hidapi/libusb
+  * Demote large pages warning to `mdebug`
+  * RandomX: print VM allocation warnings only once
+  * Cache successful `verRctNonSemanticsSimple` calls
+  * common: add missing includes
+  * Refactored rx-slow-hash.c
+  * workflows: set a public DNS when doing tests
+  * DNSResolver: fix not handling hostnames without dot characters [release]
+  * p2p: fix exclusive node DNS resolution for certain hosts [release]
+  * workflows: build gitian on tag
+  * Fix static builds for Ubuntu 22.04
+  * p2p: fix back ping to discover healthy peers to connect to
+  * workflows: ubuntu 18.04 is deprecated
+  * Fix dandelion++ fluff/stem bug with local txes
+  * wallet2: fix create view-only wallet from existing wallet
+  * wallet_api: take priority into account when estimating fee
+  * workflows: ubuntu 18.04 is deprecated
+  * epee: dont shrink slice when storing to binary [release]
+
monitoring-plugins
+- Add attach_disconnected flag for usr.lib.nagios.plugins.check_procs
+  and usr.lib.nagios.plugins.check_procs.sle15 apparmor profiles to
+  permit /proc/PID/exe access; (bsc#1209194)
+
mosquitto
+- update to 2.0.15:
+  * Deleting the group configured as the anonymous group in the Dynamic Security
+    plugin, would leave a dangling pointer that could lead to a single crash.
+    This is considered a minor issue - only administrative users should have
+    access to dynsec, the impact on availability is one-off, and there is no
+    associated loss of data. It is now forbidden to delete the group configured
+    as the anonymous group.
+  * Fix memory leak when a plugin modifies the topic of a message in
+    MOSQ_EVT_MESSAGE.
+  * Fix bridge `restart_timeout` not being honoured.
+  * Fix potential memory leaks if a plugin modifies the message in the
+    MOSQ_EVT_MESSAGE event.
+  * Fix unused flags in CONNECT command being forced to be 0, which is not
+    required for MQTT v3.1. Closes #2522.
+  * Improve documentation of `persistent_client_expiration` option.
+    Closes #2404.
+  * Add clients to session expiry check list when restarting and reloading from
+  persistence. Closes #2546.
+  * Fix bridges not sending failure notification messages to the local broker if
+    the remote bridge connection fails. Closes #2467. Closes #1488.
+  * Fix some PUBLISH messages not being counted in $SYS stats. Closes #2448.
+  * Fix incorrect return code being sent in DISCONNECT when a client session is
+    taken over. Closes #2607.
+  * Fix confusing "out of memory" error when a client is kicked in the dynamic
+    security plugin. Closes #2525.
+  * Fix confusing error message when dynamic security config file was a
+    directory. Closes #2520.
+  * Fix bridge queued messages not being persisted when local_cleansession is
+    set to false and cleansession is set to true. Closes #2604.
+  * Dynamic security: Fix modifyClient and modifyGroup commands to not modify
+    the client/group if a new group/client being added is not valid.
+  * Dynamic security: Fix the plugin being able to be loaded twice. Currently
+    only a single plugin can interact with a unique $CONTROL topic. Using
+    multiple instances of the plugin would produce duplicate entries in the
+    config file. Closes #2601. Closes #2470.
+  * Fix case where expired messages were causing queued messages not to be
+    delivered. Closes #2609.
+  * Fix websockets not passing on the X-Forwarded-For header.
+  * Fix use of `MOSQ_OPT_TLS_ENGINE` being unable to be used due to the openssl
+    ctx not being initialised until starting to connect. Closes #2537.
+  * Fix incorrect use of SSL_connect. Closes #2594.
+  * Don't set SIGPIPE to ignore, use MSG_NOSIGNAL instead. Closes #2564.
+  * Add documentation of struct mosquitto_message to header. Closes #2561.
+  * Fix documentation omission around mosquitto_reinitialise. Closes #2489.
+  * Fix use of MOSQ_OPT_SSL_CTX when used in conjunction with
+    MOSQ_OPT_SSL_CTX_DEFAULTS. Closes #2463.
+  * Fix failure to close thread in some situations. Closes #2545.
+  * Fix mosquitto_pub incorrectly reusing topic aliases when reconnecting.
+  * Fix `-o` not working in `mosquitto_ctrl`, and typo in related documentation.
+
+- Update to version 2.0.14
+  Broker:
+  * Fix bridge not respecting receive-maximum when reconnecting
+    with MQTT v5.
+  Client library:
+  * Fix mosquitto_topic_matches_sub2() not using the length
+    parameters.
+  * Fix incorrect subscribe_callback in mosquittopp.h.
+
+- Update to version 2.0.13
+  Broker:
+  * Fix `max_keepalive` option not being able to be set to 0.
+  * Fix LWT messages not being delivered if `per_listener_settings`
+    was set to true.
+  * Various fixes around inflight quota management.
+  * Fix problem parsing config files with Windows line endings.
+  * Don't send retained messages when a shared subscription is made
+  * Fix client id not showing in log on failed connections, where
+    possible.
+  * Fix broker sending duplicate CONNACK on failed MQTT v5
+    reauthentication.
+  * Fix mosquitto_plugin.h not including mosquitto_broker.h.
+  Client library:
+  * Initialise sockpairR/W to invalid in `mosquitto_reinitialise()`
+    to avoid closing invalid sockets in `mosquitto_destroy()` on
+    error.
+  Clients:
+  - Fix date format in mosquitto_sub output.
+
+- Added hardening to systemd service(s) (bsc#1181400). Modified:
+  * mosquitto.service
+
+- Update to version 2.0.12
+  * Includes security fixes for
+    CVE-2021-34434 (bsc#1190048) and CVE-2020-13849 (bsc#1190101)
+  Security :
+  * An MQTT v5 client connecting with a large number of
+    user-property properties could cause excessive CPU usage,
+    leading to a loss of performance and possible denial of
+    service. This has been fixed.
+  * Fix `max_keepalive` not applying to MQTT v3.1.1 and v3.1
+    connections.  These clients are now rejected if their keepalive
+    value exceeds max_keepalive. This option allows CVE-2020-13849,
+    which is for the MQTT v3.1.1 protocol itself rather than an
+    implementation, to be addressed.
+  * Using certain listener related configuration options e.g.
+    `cafile`, that apply to the default listener without defining
+    any listener would cause a remotely accessible listener to be
+    opened that was not confined to the local machine but did have
+    anonymous access enabled, contrary to the documentation.
+    This has been fixed. Closes #2283.
+  * CVE-2021-34434: If a plugin had granted ACL subscription access
+    to a durable/non-clean-session client, then removed that
+    access,the client would keep its existing subscription. This
+    has been fixed.
+  * Incoming QoS 2 messages that had not completed the QoS flow
+    were not being checked for ACL access when a clean
+    session=False client was reconnecting.  This has been fixed.
+  Broker:
+  * Fix possible out of bounds memory reads when reading a
+    corrupt/crafted configuration file. Unless your configuration
+    file is writable by untrusted users this is not a risk.
+  * Fix `max_connections` option not being correctly counted.
+  * Fix TLS certificates and TLS-PSK not being able to be
+    configured at the same time.
+  * Disable TLS v1.3 when using TLS-PSK, because it isn't correctly
+    configured.
+  * Fix `max_keepalive` not applying to MQTT v3.1.1 and v3.1
+    connections.  These clients are now rejected if their keepalive
+    value exceeds max_keepalive.
+  * Fix broker not quiting if e.g. the `password_file` is specified
+    as a directory. Closes #2241.
+  * Fix listener mount_point not being removed on outgoing messages.
+  * Strict protocol compliance fixes, plus test suite.
+  * Fix $share subscriptions not being recovered for durable
+    clients that reconnect.
+  * Update plugin configuration documentation. Closes #2286.
+  Client library:
+  * If a client uses TLS-PSK then force the default cipher list to
+    use "PSK" ciphers only. This means that a client connecting to
+    a broker configured with x509 certificates only will now fail.
+    Prior to this, the client would connect successfully without#
+    verifying certificates, because they were not configured.
+  * Disable TLS v1.3 when using TLS-PSK, because it isn't correctly
+    configured.
+  * Threaded mode is deconfigured when the mosquitto_loop_start()
+    thread ends, which allows mosquitto_loop_start() to be called
+    again.
+  * Fix MOSQ_OPT_SSL_CTX not being able to be set to NULL.
+  * Fix reconnecting failing when MOSQ_OPT_TLS_USE_OS_CERTS was in
+    use, but none of capath, cafile, psk, nor MOSQ_OPT_SSL_CTX were
+    set, and MOSQ_OPT_SSL_CTX_WITH_DEFAULTS was set to the default
+    value of true.
+  Apps:
+  * Fix `mosquitto_ctrl dynsec setDefaultACLAccess` command not
+    working.
+  Clients:
+  * Document TLS certificate behaviour when using `-p 8883`.
+  Build:
+  * Fix installation using WITH_TLS=no. Closes #2281.
+  * Fix builds with libressl 3.4.0. Closes #2198.
+  * Remove some unnecessary code guards related to libressl.
+  * Fix printf format build warning on MIPS. Closes #2271.
+
+- Update to version 2.0.11
+  Security:
+  * If a MQTT v5 client connects with a crafted CONNECT packet a
+    memory leak will occur. This has been fixed.
+  Broker:
+  * Fix possible crash having just upgraded from 1.6 if
+    `per_listener_settings true` is set, and a SIGHUP is sent to
+    the broker before a client has reconnected to the broker.
+  * Fix bridge not reconnectng if the first reconnection attempt
+    fails.
+  * Improve QoS 0 outgoing packet queueing.
+  * Fix QoS 0 messages not being queued when `queue_qos0_messages`
+    was enabled.
+  Clients:
+  * If sending mosquitto_sub output to a pipe, mosquitto_sub will
+    now detect that the pipe has closed and disconnect.
+  * Fix `mosquitto_pub -l` quitting if a message publication is
+    attempted when the broker is temporarily unavailable.
+- Remove not longer needed patch:
+  * fix-undefined-symbols-in-plugins.patch (fixed upstream)
+
mpop
+- update to 1.4.18:
+  * No significant changes.
+
-- update to version 1.0.9
-  - Security fix:
-  - APOP authentication is vulnerable to man-in-the-middle
-    attacks.  See CVE-2007-1558. Such attacks might lead to
-    password disclosure.  Therefore, mpop does not use APOP
-    automatically without TLS anymore.  Additionally, mpop's
-    checks on the APOP challenge were too lax in previous
-    versions, making attacks easier than necessary. This has been
-    fixed.
-  - Security improvements:
-  - NTLM authentication is considered insecure because it is
-    undocumented. It is therefore not used automatically without
-    TLS anymore.
-  - TLS requires tls_trust_file or a disabled tls_certcheck now,
-    so that it is not silently vulnerable to man-in-the-middle
-    attacks.
-
mpv-mpris
+- Update to 1.0
+  * rename album fields to match MusicBrainz internal names
+    gh#hoyon/mpv-mpris#81
+  * Fix string leaks in property change handler
+    gh#hoyon/mpv-mpris#84
+  * Makefile: Allow to append CFLAGS / LDFLAGS from environment.
+    gh#hoyon/mpv-mpris#87
+  * Do not use the default GMainContext
+    gh#hoyon/mpv-mpris#88
+
msitools
-- Update to version 101:
+- Update to version 0.102:
+  + Minimal UI support
+  + Support DefaultVersion and CompanionFile in File element
+  + Handle AllowDowngrades and AllowSameVersionUpgrades in
+    MajorUpgrade
+  + Default Win64 to true on 64-bit arch
+  + Support all CustomAction Execute types properly
+  + Add sys.BUILDARCH preprocessor variable
+  + Strip scheduling condition nodes
+  + Add IniFile support
+  + Remove default UI actions from
+    AdminUISequence/InstallUISequence
+  + Add support for ProgressText element
+  + Various build fixes
+  + Updated translations.
+
+- Update to version 0.101:
ncdu
+- Update to 1.18.1
+  - 1.18.1
+    Fix build on non-Linux platforms
+  - 1.18
+  - Fix ‘dark-bg’ color scheme to actually have a dark background
+  - Backport configuration file support from 2.x
+  - Backport many new CLI options from 2.x
+  - Negation of existing flags: –no-si, –no-confirm-quit, –no-follow-symlinks, –include-caches, –include-kernfs
+  - –[no-]extended in addition to -e
+  - –one-file-system and –cross-file-system in addition to -x
+  - –slow-ui-updates, –fast-ui-updates in addition to -q
+  - Column visibility options: –(show|hide)-(hidden|itemcount|mtime|graph|percent)
+  - Sorting: –sort, –[no-]group-directories-first
+  - Feature selection: –(enable|disable)-(shell|delete|refresh)
+  - Deletion confirmation: –[no-]confirm-delete
+  - Hidden file visibility: –show-hidden, –hide-hidden
+  - Size display: –apparent-size, –disk-usage
+  - 1.17
+  - Add ‘dark-bg’ color scheme and use that by default
+  - Use natural sort order when sorting by file name
+  - Improve compatibility with C89 environments
+  - Fix wrong assumption about errno not being set by realloc()
+
-- moved from Packman/Extra to utilities on build.o.o
-
neko
+- Require the mbedtls-devel version to be lower than 3.0.0
+
neofetch
+- Spec cleanup and really apply 2342.patch.
+
+- Add 2342.patch to smoothen the Tumbleweed logo
+
neovim-gtk
+- Update vendored dependencies
+- Use cargo macros
+
+- Automatic update of vendored dependencies
+
netdata
+- Update to v1.39.1 (go.d.plugin 0.53.0)
+  See https://github.com/netdata/netdata/releases/tag/v1.39.1
+  and https://github.com/netdata/go.d.plugin/releases/tag/v0.53.0
+
+- Update to v1.39.0 (go.d.plugin 0.52.2)
+  Changes:
+  https://github.com/netdata/netdata/releases/tag/v1.39.0
+  https://github.com/netdata/go.d.plugin/releases/tag/v0.52.0
+  https://github.com/netdata/go.d.plugin/releases/tag/v0.52.1
+  https://github.com/netdata/go.d.plugin/releases/tag/v0.52.2
+  Note: Future package versions will be split, with each collector
+  plugin getting its own package.
+  See also https://blog.netdata.cloud/split-plugin-packages/
+  On openSUSE, when using ZYpp-based package management, dependency
+  resolution should cause these split-off packages to be installed
+  automatically when upgrading from older versions, such that
+  existing configurations should not be negatively affected by this
+  change. For new installs, they will be soft dependencies, and
+  only selected automatically when installation of recommended
+  packages is requested.
+- Refresh netdata-logrotate-su.patch
+
+- Update go.d.plugin to 0.51.4
+  See https://github.com/netdata/go.d.plugin/releases/tag/v0.51.4
+
+- Update to v1.38.1 (go.d.plugin 0.51.0)
+  See https://github.com/netdata/netdata/releases/tag/v1.38.0
+  and https://github.com/netdata/netdata/releases/tag/v1.38.1
+
netperfmeter
+- Update to version 1.9.4:
+  * Bugfix release
+
newsboat
+- Update to version 2.32:
+  Added:
+  * contrib: a filter to remove Substack's "Subscribe now" prompts
+    from the posts (NunoSempere)
+  * contrib: an image pager which can spot all the images in a
+    post and display them with either `feh` or `kitty`'s `icat`
+    (whyrgola)
+  * Tags in OPML export. This is implemented as a new option,
+    `--export-to-opml2`, because the output format is OPML version
+    2.0 rather than the 1.0 that `--export-to-opml` produces.
+    We intend to make OPML 2.0 the default in some future major
+    release of Newsboat (#871) (Gwyneth Morgan)
+  Changed:
+  * Enclosures are only enqueued if their MIME type looks like
+    a podcast or is empty. This prevents Newsboat from e.g.
+    enqueueing images from Mastodon feeds (#2367) (Dennis van der
+    Schagt)
+  * Asciidoctor is a truly optional dependency now. `make all`
+    still builds docs, but at least one can `make newsboat`
+    and such without installing Asciidoctor (#2353) (Alexander
+    Batischev)
+  * Newlines are now removed from the author's name (#2434)
+    (blankie)
+  * If the same URL is used in `<a>` and/or `<img>`/`<iframe>`,
+    it's marked as "image" or "iframe" rather than simply a
+    "link" (#2432) (blankie)
+  * `goto-title` operation now searches for the titles *as you
+    see them*, i.e. if a feed doesn't have a title and Newsboat
+    displays its URL instead, `goto-feed` will use that URL rather
+    than the (empty) title (#2451) (blankie)
+  * Updated translations: Dutch (Dennis van der Schagt), German
+    (Lysander Trischler), Italian (Mauro Scomparin), Polish
+    (Carno), Russian and Ukrainian (Alexander Batischev), Swedish
+    (Dennis Öberg), Turkish (Emir SARI)
+  * Updated vendored library expected-lite to 0.6.3
+  * Bumped minimum supported Rust version to 1.66.1
+- Removed newsboat-gcc12.patch due to upstream fix (#2056)
+
+- Update to 2.31:
+  Added:
+  * Operations for scrolling by half a page (`halfpageup`, `halfpagedown`) (#36)
+  * If `--log-level` is specified but `--log-file` isn't, write the log to a file
+    named after the template `newsboat_%Y-%m-%d_%H.%M.%S.log`, i.e. use the
+    current date and time
+  * _contrib/move_url.py_ for moving feeds in Newsboat's database while keeping
+    articles
+  Changed:
+  * Updated translations: Dutch, German, Italian, Polish, Russian and Ukrainian,
+    Spanish and Turkish
+  * Bumped minimum supported Rust version to 1.64.0
+  Fixed:
+  * Inability to exit search mode when `quit` is bound to `BACKSPACE` (#2336)
+
+- Update to 2.30.1:
+  * fixed build failure with curl 7.87. (#2297)
+- Includes 2.30:
+  Added:
+  * In config, long lines can now be broken into multiple ones with.
+    When parsing the config, Newsboat would remove the backslash and
+    append the following line to the current one. Be careful when indenting
+    the lines that follow the backslash, as the indentation will be included
+    in the concatenated string; this can change the meaning of some commands,
+    e.g. if the indentation ends up inside a regex (#2212) (Simon Farre)
+  * article-feed operation, to go to the feed of the currently selected
+    article. This can come in handy in query feeds (phire)
+  * New placeholder for browser, %T, which is replaced by the title
+    of the selected feed or item (#2224) (Aneesh)
+  * Miniflux: fail on startup if credentials are wrong (#2220) (Dennis
+    van der Schagt)
+  * Miniflux: support for API token authentication, which is available
+    since Miniflux 2.0.21 and is the preferred authentication method
+    : https://miniflux.app/docs/api.html#authentication
+    See miniflux-token, miniflux-tokeneval, and miniflux-tokenfile settings (#2122)
+  Changed:
+  * Bumped minimum supported Rust version to 1.62.0
+  * When cleanup-on-quit is disabled and the cache contains unreachable
+    feeds, print their number, and write their URLs to error-log (#1548) (Maximilian Winkler)
+  * If an item contains enclosure(s) but doesn't specify their type(s),
+    pick the last one (as Newsboat only displays a single enclosure
+    per item). This won't always do the right thing, e.g. it could
+    pick cover art instead of the podcast, but sometimes it will, so
+    it's still better than nothing (#2050) (Dennis van der Schagt)
+  * Updated translations: Dutch (Dennis van der Schagt), German (Lysander
+    Trischler), Italian (Mauro Scomparin), Polish (Carno), Russian
+    (Alexander Batischev), Turkish (Emir SARI), Ukrainian (Alexander Batischev)
+  * Updated vendored library Catch2 to 2.13.10
+  Fixed:
+  * Atom: if an item doesn't specify the atom:author, use the field
+    from the contained atom:source; if that's not specified either,
+    use atom:author of the feed itself. This is dictated by RFC 4287
+    §4.2.1 (#2256) (Lysander Trischler)
+  Security:
+  * Remove transitive dependency on the vulnerable time 0.1 crate:
+    CVE-2020-26235 https://osv.dev/vulnerability/RUSTSEC-2020-0071
+    (#2288) (Alexander Batischev, thanks to the prod from critkitten)
+
nvme-cli
+- Update to version 2.4+25.g367eb9:
+  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
+
oidentd
+- Replaced patch oidentd-3.0.0-configure_zstd.patch with
+  oidentd-3.1.0-configure_zstd.patch to fix compilation on 15.4
+
+- Update to version 3.1.0
+  * Allow using masquerading without IPv6 support on Linux.
+  * Remove `-S` (`--nosyslog`) from systemd unit files.
+  * Warn about missing logs if forking with NOSYSLOG set.
+
+- Add patch oidentd-3.0.0-configure_zstd.patch to fix compilation under <= SP15.4
+
+- Add patch to fix compilation under <= SP15.4
+
+- Update to version 3.0.0
+  * Fail on non-zero EUID if NEED_ROOT is set.
+  * Drop support for very old FreeBSD versions.
+  * Drop NAT support for DragonFly BSD.
+  * Drop NAT support for FreeBSD.
+  * Create separate kernel module for DragonFly BSD.
+  * Remove '--forward-last' flag (renamed to '--masquerade-first').
+  * Remove libudb support (deprecated).
+  * Remove '\e' escape sequence for strings in configuration files (deprecated).
+  * Remove support for legacy kernels (deprecated).
+  * Remove Linux MASQFILE support (deprecated).
+  * Remove Linux IPCONNTRACK support (deprecated).
+  * Update default configuration file to hide root connections.
+  * Compile with ENABLE_DEBUGGING by default.
+
onefetch
+- Update to 2.18.1:
+  * don't fail when computing diff on partial clones (#1093)
+  * fetch banner info from github (#1094)
+
+- Update to 2.18.0:
+  * add new info line called "Churn" which displays the files with
+    the most modifications (commits) (#1071)
+  * add Hlsl support (#1082)
+  * performance: optimize case where repo has a commit-graph for
+    massive performance gains (#1081)
+  * docs: add a cmd.exe version of the cd snippet (#1048)
+  * refacto: use the builder pattern to instantiate the Info struct (#1047)
+  * improve bot regex (#1086)
+
+- Update to 2.17.1:
+  * Improve code coverage of src/info/mod.rs #1011
+  * Improve code coverage of src/ui/mod.rs #1012
+  * Added fish git repository greeter script to wiki #1021
+  * upgrade gitoxide to v0.44 and incorporate #1023 #1024
+
+- Update to 2.17.0:
+  Features:
+  * Disable line wrap #983
+  * Add Pascal support #989
+  * Add Coldfusion support #971
+  * Remove github token from url field #996
+  Chore:
+  * Changed Hashbang #979
+  * Prevent conflicts in wiki action 39fe441
+  * Fix typos #992
+  * Group CLI options in sections #995
+  * replace --show-logo with --no-art #1002
+  * Set snapshot language to plain text #1003
+  * Better error message when human_time panics #1010
+
+- Update to 2.16.0:
+  Features:
+  * Add GLSL language support #490 #824
+  Bug fixes:
+  * Fix Markdown / Jupyter markup not getting counted #937
+  * upgrade gix to 0.36.1 to avoid breakage. #965
+
openSUSE-release-tools
+- Update to version 20230822.4be49e9:
+  * add Leap 15.6 publish_distro config
+
+- Update to version 20230815.03a7aaa:
+  * version_calculate: chdir to the osclib dir
+
+- Update to version 20230811.65a86bd:
+  * publish_distro config for Leap Micro 5.5
+
+- Update to version 20230810.166affb:
+  * factory-package-news: walk through every directory in the iso image
+
+- Update to version 20230809.3232664:
+  * factory-package-news: use a nicer name for the forcestr function
+
+- Update to version 20230804.9200c9e:
+  * factory-package-news: support newer python3 rpm bindings
+
+- Update to version 20230801.82c067d:
+  * Don't specify flavors for Leap 15.4 appliances
+
+- Update to version 20230731.178896c:
+  * Add LeapMicro 5.5 pipelines
+
+- Update to version 20230729.e576376:
+  * added 15 SP5 QR
+
+- Update to version 20230726.2a0b30a:
+  * gocd: Run BCI RepoPublisher at 9:23 daily
+  * gocd: Add missing directory to BCI RepoPublisher pipeline
+
+- Update to version 20230725.2253789:
+  * project-installcheck.py: Don't include ignored errors in rebuildpacs.yaml
+
+- Update to version 20230721.2396b32:
+  * docs/staging: remove obsolete references
+  * Add backup server URL and update source map
+
+- Update to version 20230721.2d37d5b:
+  * gocd: enable Leap 15.6 checkers
+  * Revert temporary fixups, these are working now
+  * Add a simple smoke test launching all scripts with --help
+  * Require typing_extensions on SLE & Leap
+  * Fallback import Literal & TypedDict from typing_extension
+
+- Update to version 20230721.3301485:
+  * Add BCI repo publishing bot
+
+- Update to version 20230721.5bc933b:
+  * gocd: fix image names for Dolomite
+
+- Update to version 20230718.15a1347:
+  * stagingapi: fix execution with OSC 1.x
+
+- Update to version 20230718.1252857:
+  * gocd: rename alp micro to Dolomite
+
+- Update to version 20230711.3bf8fdf:
+  * Fix review_mode being set from a str and not from the enum
+
+- Update to version 20230710.395857d:
+  * Remove unused variable
+  * Convert namedtuples into a typed NamedTuples
+  * Raise a concrete exception type, not the generic exception base class
+  * ReviewBot: convert REVIEW_CHOICES into an enum
+  * Add some type hints
+
+- Update to version 20230710.b1b5536:
+  * Update SLE Micro to 5.5
+
+- Update to version 20230704.bb6afc9:
+  * Update checkers,stagings and target pipelines for SLE15 (SP5 -> SP6)
+
+- Update to version 20230629.009689f:
+  * gocd/rabbit-openqa.py: Ignore projects without a staging setup
+
+- Update to version 20230629.3b612be:
+  * Cleanups for accepting scm-staging bot submissions
+
+- Update to version 20230627.8b1c308:
+  * check_source: fix condition checking for <scmsync> for git packaging
+
+- Update to version 20230627.8db5f62:
+  * Don't decline SRs from non-devel project for scmsync packages from the bot
+  * Add type hints to action_ methods of ReviewBot
+
+- Update to version 20230622.459489f:
+  * gocd: Add Leap 15.5 to the Vagrant publisher
+
+- Update to version 20230621.d0aaa85:
+  * dist: Add python3-requests
+
+- Update to version 20230619.f8254e9:
+  * Add prefix for agama so botmaster notifies openQA about builds
+
+- Update to version 20230619.bd7d620:
+  * skippkg-finder.py: Handle empty configuration values properly
+
+- Update to version 20230616.d798b51:
+  * Switch to Leap 15.5
+
+- Update to version 20230615.97267e1:
+  * docker_publisher.py: Add armv7l to 15.4
+
+- Update to version 20230615.59e3288:
+  * dist: Pick osc from repo built against published Tumbleweed
+
+- Update to version 20230615.82c9054:
+  * docker_publisher.py: Set 15.5 as latest
+
+- Update to version 20230613.f09ff89:
+  * project-installcheck.py: Honour installcheck-ignore-conflicts config
+  * project-installcheck.py: target_packages is a dict, not a list
+  * project-installcheck.py: Move some code out of a with block
+
+- Update to version 20230606.7297d89:
+  * also monitor the SUSE:ALP repositories
+
+- Update to version 20230606.893b74f:
+  * Schedule Leap15.5 updates tests
+
+- Update to version 20230605.f39ef8f:
+  * Move factory-package-news-web.py script to gunicorn
+
+- Update to version 20230605.bf97015:
+  * fixed pipe line name
+  * added ALP.Target group to the list
+  * dist: fix rpm scriptlets call to systemd_postun
+  * Add ALP Micro image release
+
+- Update to version 20230602.41b6a00:
+  * dist: fix rpm scriptlets call to systemd_postun
+
+- Update to version 20230525.002c3c0:
+  * Add Leap 15.5 to access metrics
+
+- Update to version 20230523.bb5a644:
+  * Drop redundant `unique_product_flavor`
+  * Do not drop the database on every run
+  * Fixes
+  * Refactor 'unique_product' object
+  * Fix merging and syntax errors
+  * Write points with flavor tag
+  * Parse flavor type to cached data
+  * Aggregate unique flavor access data
+
+- Update to version 20230512.422701c:
+  * devel-project: limit request has review state only
+
+- Update to version 20230420.372c67d:
+  * staging-installcheck.py: Detect some edge cases in check_required_by
+
+- Update to version 20230419.c0f2057:
+  * Filter out access logs with error code
+
+- Update to version 20230418.aebe39c:
+  * Publish kiwi-templates-Minimal-s390x for SLE15
+
+- Update to version 20230411.8639ce3:
+  * repo2fileprovides.py: Support file deps in boolean dependencies
+
+- Update to version 20230411.f596472:
+  * docker_publisher.py: Add 15.5, remove 15.3
+
+- Update to version 20230411.7f92b23:
+  * Fix the OBS CI workflow (#2950)
+
+- Update to version 20230411.363c84c:
+  * dist: Package osrt-repo2fileprovides
+
+- Update to version 20230411.816d0eb:
+  * cleanup_rings.py: Add snobol4 to whitelist
+
+- Update to version 20230406.c548870:
+  * Add repo2fileprovides.py
+
+- Update to version 20230329.af36a03:
+  * osclib: Skip debuginfo, debugsource and src rpms in fileinfo_ext_all
+  * Remove try/catch around code which must not fail
+  * Rewrite core algorithm of cleanup_rings.py
+  * cleanup_rings.py: Fix links handling
+
+- Update to version 20230324.4a241c4:
+  * Allow cleanup_rings without locking the stagings
+  * cleanup_rings.py: Expand whitelist
+  * cleanup_rings.py: Look at all enabled images
+
+- Update to version 20230323.0d10247:
+  * Handle deletion of packages with _multibuild (#2943)
+
+- Update to version 20230315.982c565:
+  * pkglistgen: handle published repos using sha512 nistead of sha256
+
+- Update to version 20230314.143a171:
+  * skippkg-finder: add conditionals support for the product ftp-tree
+
+- Update to version 20230309.7eca6b9:
+  * Drop flavors in Leap155 appliances
+
+- Update to version 20230309.8252602:
+  * add eruby generated pkglistgen.opensuse.gocd.yaml
+  * remove pkglistgen for leap16 completely
+  * Comment out skippkgfinder for now
+  * Initial Leap 16.0 pkglistgen
+
+- Update to version 20230309.846b7c0:
+  * dashboard: leap: fix openQA IDs
+
+- Update to version 20230303.db6249f:
+  * gocd: add Micro and Bedrock packagelistgenerator call
+
+- Update to version 20230303.e6dbbae:
+  * Create new pipeline to deploy sle-prjmgr-tools scripts
+
+- Update to version 20230303.08e0489:
+  * Switch testing from Leap 15.3 to openSUSE Leap 15.4
+
+- Update to version 20230303.85a08f7:
+  * Fix handling of preinstall images
+
+- Update to version 20230302.a0cb736:
+  * Port from mock to unittest.mock
+
+- Update to version 20230210.1cf4e6b:
+  * leapmicro: fix the wrong Leap Micro version in RelPkgs pipeline
+
+- Update to version 20230209.cdbe773:
+  * Update totestmanager.gocd.yaml.erb
+  * Add LeapMicro 5.4 pipelines
+
+- Update to version 20230202.cbaa2d4:
+  * Release the multibuild container itself, that will cover all flavors
+
+- Update to version 20230202.d737b9f:
+  * Tag the previous image in the cleanup script
+  * Add cleanup script running at night on botmaster
+
+- Update to version 20230131.9980d01:
+  * Remove trailing whitespace in gocd/sp.target.gocd.yaml
+  * Port over more uses of Request.get_creator()
+
+- Update to version 20230130.8e810cc:
+  * More gocd errors in the new SLE pipelines
+  * Fix gocd config ident - listing a stage as a job
+  * gocd: Add parametrized pipeline for automatic release
+  * gocd: Add parallel stage for totest release
+
+- Update to version 20230129.a7da0b8:
+  * Don't schedule Leap 15.3 tests in O3
+
+- Update to version 20230125.2b3c045:
+  * Allow specifying a devel project that has "Factory" in its name
+
+- Update to version 20230125.2c0e252:
+  * Add explicit deprecation warning
+
+- Update to version 20230125.be71541:
+  * Handle special DVD+Image BUILD values in SLE Micro Staging jobs
+
+- Update to version 20230125.61fdf0f:
+  * accept_command: cleanup redundant ports_prjs assignment
+
+- Update to version 20230125.394f8ee:
+  * use request.creator rather than request.get_creator() which is deprecated
+  * Use old function to pass tests
+  * Restore old xpathsearch for fullhistory searches
+  * Use the 15.4 container
+  * Fixes for osc-1.x
+
+- Update to version 20230125.29aed3c:
+  * Make REGEX_LINE backwards compatible
+  * Fix regex for access logs parsing
+
+- Update to version 20230125.4d5b976:
+  * Switch to 15.4, 15.3 has been deleted
+
+- Update to version 20230124.c53e264:
+  * gocd/rabbit-openqa.py: Always include flavor, name and machine in the check
+
openafs
+- update to official openafs-1.8.10
+- remove obsolete patches:
+  * 7a3ad3bc.diff
+  * b885159.diff
+  * f6fbb85.diff
+  * 4cf7a9a.diff
+
+- remove obsolete macro-call %{stop_on_removal} from spec-file
+
+- apply upstream-patches for kernel 6.3:
+  * f6fbb85.diff
+  * 7a3ad3bc.diff
+
+- apply patch from upstream for kernel 6.2:
+  * b885159.diff
+- change BuildArch for subpackage kernel-source to noarch
+
+- update to offical openafs-1.8.9
+  * all changes as openafs-1.8.9pre2
+  * fix possible DoS attack
+
+- update to openafs-1.8.9pre2
+  * Support mainline kernels up to 6.0
+  * Support for building with more recent compilers
+  * some bugfixes, more see RELNOTES
+- remove obsolete patches:
+  * 79f03c2.diff
+
+- update to openafs-1.8.9pre1
+- remove obsolete patches:
+  * 05b722d.diff
+  * cc8edf7.diff
+  * 6348262.diff
+- apply patch for kernel 6.0:
+  * 79f03c2.diff
+
+- update to current of upstream-branch openafs-stable-1_8_x
+- apply patches for 15.9:
+  * 05b722d.diff 6348262.diff cc8edf7.diff
+- remove patches now in openafs-stable-1_8_x
+  * fix_gcc_12_linux_5.18.diff
+
+- apply patches adressing:
+  * Linux-5.17 and 5.18, gcc-11 and 12: fix_gcc_12_linux_5.18.diff
+- remove patches from previous commit:
+  * a714e86.diff and 449d1fa.diff
+  * gcc-11.diff
+
+- apply patches marked for upcoming release:
+  * kernel 5.17: a714e86.diff and 449d1fa.diff
+  * gcc-11: gcc-11.diff
+
+- do not create client-package without KMP
+
+- remove patch dir_layout.patch
+  this can be done via environment-variables
+- replace openafs-1.8.x.ncurses6.patch with patch 4cf7a9a.diff.
+  4cf7a9a.diff is coming from upstream and will be incorporated at some point.
+
+- Update to new upstream release 1.8.8.1
+  * Support mainline kernels 5.14, 5.15 and 5.16
+- remove local patch linux-kmp.patch:
+  * it supported mainline kernels only up to 5.15
+
openbox
+- Add openbox-3.6.1-glib-2.76.patch. Fixes random crashes with glib >= 2.76.
+  See https://bugs.gentoo.org/901777.
+
-- add openbox-3.5.0-moveresize.patch to fix crash on unexpected
-  NET_WM_MOVERESIZE_CANCEL messages bio#5460
-
openfortivpn
+- Update to version 1.20.5
+  * revert previous fix from 1.20.4, make it optional.
+- Update to version 1.20.4
+  * fix "Peer refused to agree to his IP address" message.
+- Update to version 1.20.3
+  * minor change in a warning message.
+  * documentation improvement.
+  * minor changes in build and test files.
+- Update to version 1.20.2
+  * fix regression: do attempt to apply duplicate routes, log
+    INFO instead of WARN.
+  * minor changes in log messages.
+- Update patch:
+  * harden_openfortivpn@.service.patch
+
+- Update to versoin 1.20.1
+  * Bugfix release.
+- Update to versoin 1.20.0
+  * Discard invalid empty HDLC frame at end of buffer.
+  * Prepend "SVPNCOOKIE=" to the given cookie if missing.
+
openhantek
+- update to 3.3.3:
+  * fix #376 "vector's iterator dereference out of range"
+  * due to low issue activity remove the automatic stale workflow
+  * fix #374 start / stop roll mode sampling (almost) immediately
+  * split 'samplerateChanged' event handler; remove useless
+    'this->'
+  * update translations
+  * Fixes #363, refs #365. Splitted
+    HorizontalDock::timebaseChanged event handler from doing
+    operations on dsoControl and dsoWidget in the same callback.
+    Now there two callback and each uses the Widget it operates
+    on. [875a8dc]
+  * Add support for YiXingDianZiKeJi YX-DSO (MSDO)
+  * show error message when screenshot or export file write fails
+  * MSDO calibration file update from real device.
+  * Add support for YiXingDianZiKeJi YX-DSO (MSDO)
+  * change dB suffix with "Ok" or "Apply"
+  * more cleanup
+  * i18n for dB suffix "V", "u", "m"; silence more warnings
+  * fix mac build
+  * rearrange GH runner steps
+  * move "Demo Mode" button to dialog button box at the window
+    bottom
+  * fix build versioning
+
openocd
+- OpenOCD-0.12 requires a TCL jim version newer than the 0.75 which
+  15.4 provides, so bump that version limit.
+
+- Version 0.12.0
+  The list of changes is massive, see
+  https://sourceforge.net/p/openocd/code/ci/master/tree/NEWS-0.12.0
+  for details.
+
-- Use libusb-compat instead of libusb0
-
-- Update to openOCD 0.8 instead of git
-- Build with external jimtcl only for factory, use included
-  jimtcl for openSUSE 13.1 and older
-- make it build with included jimtcl, so it builds for
-  openSUSE 12.3 and 13.1
-
openpgl
+- Update to version 0.4.1:
+  * Fixing bug introduced in 0.4.0 when using
+    ApplySingleLobeHenyeyGreensteinProduct() for VMM-based
+    representations
+
openvswitch3
+- Fix CVE-2023-3153 [bsc#1212125], VUL-0: CVE-2023-3153: openvswitch,openvswitch3: service monitor MAC flow is not rate limited
+- Added patch,
+    CVE-2023-3152.patch
+
opi
+- Version 3.5.0
+- Expand releasever for local repo names
+- Make resilio comment shorter
+- Add option to skip plugins
+- Update repo URL for MEGASync
+
+- Version 3.4.0
+- Add unofficial Teams-for-linux client
+- Improve non interactive tests
+- Strip test module name
+- chore: fix indentation
+- docs: add config options, update opi help page
+
ortp
+- Update to 5.2.73 (no changelog)
+
+- Update to 5.2.49 (no changelog)
+
+- Update to 5.2.30 (no changelog)
+- Add set_current_version.patch
+
osdlyrics
+- Update version to 0.5.14
+  * Fix Chinese encodings
+  * Fix proxy-password config
+  * Fix sources in the default search
+
+- update to 0.5.13:
+  * Second attempt on inferring the artist from the title when
+    the former is invalid.
+
osmo-e1d
+- Update to release 0.5.0
+  * Support for e1-tracer hardware
+
osmo-iuh
+- Update to release 1.4.0
+  * No changelog was provided
+
osv-scanner
+- Update to version 1.3.6:
+  * Prepare for v1.3.6 Release (#447)
+  * Adjusting GitHub actions (#446)
+  * chore(deps): update dependency jekyll-feed to v0.17.0 (#438)
+  * go.mod: upgrade to golang.org/x/vuln@v1.0.0 (#443)
+  * Fix PURLToPackage function and move it (#439)
+  * Update README.md (#440)
+  * chore(deps): update dependency jekyll-feed to v0.17.0 (#422)
+  * chore(deps): update workflows (#429)
+  * fix(deps): update osv-scanner minor (#430)
+  * update govulncheck integration (#431)
+
+- Update to version 1.3.5:
+  * Add more ignores now that debian PURLs are parsed correctly
+    (#428)
+  * Adds changelog for v1.3.5 (#427)
+  * chore(deps): update alpine docker tag to v3.18 (#382)
+  * test: ensure fixtures directory isn't already a git repository
+    (#426)
+  * chore: ignore `.idea` directory (#425)
+  * Add withdrawn and fix time serialization to conform to the
+    schema. (#424)
+  * test: make `models` tests their own package (#423)
+  * Updated to reflect cvss scores being added to output table.
+    (#419)
+  * chore(deps): update workflows (#421)
+  * chore(deps): update alpine:3.17 docker digest to e95676d (#413)
+  * Add option to include severity in table output (#409)
+  * Update the model to better match schema and add YAML tags.
+    (#417)
+  * chore(deps): update golang:alpine docker digest to fd9d9d7
+    (#405)
+  * chore(deps): update workflows (#406)
+  * fix(deps): update osv-scanner minor (#415)
+  * Fixing broken github page (#412)
+  * Link checker (#408)
+  * fix(deps): update osv-scanner minor (#407)
+  * refactor: enable `goimports` linter (#404)
+  * Update the model to match the latest version of the OSV schema
+    (#403)
+
+- Update to version 1.3.4:
+  * Prepare for 1.3.4 release. (#401)
+  * chore(deps): update workflows (#393)
+  * fix(deps): update osv-scanner minor (#392)
+  * Fix version printer to use app stdout and stderr (#395)
+  * OSV user agent (#390)
+
+- Update to version 1.3.3:
+  * Add new line and fix test to avoid having to change version
+    twice (#387)
+  * 1.3.3 Release (#385)
+  * Use upload draft assets option (#384)
+  * chore(deps): update golang:alpine docker digest to ee2f23f
+    (#380)
+  * chore(deps): update slsa-framework/slsa-github-generator action
+    to v1.6.0 (#383)
+  * fix(deps): update osv-scanner minor (#381)
+  * Remove --hash from version in requirements.txt (#379)
+  * Small formatting changes (#377)
+  * chore(deps): bump github.com/cloudflare/circl from 1.1.0 to
+    1.3.3 (#378)
+  * add unit tests for results.go (#368)
+  * Improve exit docs and add No vulns found to output (#373)
+  * Update exit docs (#375)
+  * chore(deps): update github/codeql-action action to v2.3.3
+    (#372)
+  * chore(deps): update golang:alpine docker digest to 913de96
+    (#305)
+  * fix: handle cyclical `-r`s in `requirements.txt` (#366)
+  * fix: don't panic on empty  files (#367)
+  * fix(deps): update osv-scanner minor (#327)
+  * Update spdx to 0.5.0 (#365)
+  * Update pkg/osv to allow overriding the http client / transport.
+    (#357)
+  * chore(deps): update github/codeql-action action to v2.3.2
+    (#363)
+  * Enable osvVulnerabilityAlerts (#362)
+
+- Update to version 1.3.2:
+  * Fix sbom scanning code (#360)
+  * 1.3.2 Release (#359)
+  * Refactor reporter to interfaces (#345)
+  * Update all minor dependencies without spdx (#358)
+  * chore(deps): update workflows (#334)
+  * Better SBOM documentation and error message (#349)
+  * Move a specific regex to static variable (#346)
+  * chore(deps): update dependency jekyll-feed to v0.17.0 (#328)
+  * chore(deps): bump nokogiri from 1.14.1 to 1.14.3 in /docs
+    (#338)
+  * chore(deps): bump commonmarker from 0.23.8 to 0.23.9 in /docs
+    (#337)
+  * SBOM parsing improvements. (#339)
+  * Make the reporter public (#341)
+  * Set `skip-pkg-cache: true` for golangci-lint (#340)
+  * Support PNPM v6+ Lockfile (#325)
+  * chore(deps): update alpine:3.17 docker digest to 124c7d2 (#326)
+  * Call analysis note fixed.  (#331)
+  * Add configs to ignore test vulnerabilities (#329)
+
+- Update to version 1.3.1:
+  * Release 1.3.1 changelog (#321)
+  * chore(deps): update ossf/scorecard-action action to v2.1.3
+    (#322)
+  * Add nil check to CycloneDX enumeration (#320)
+
+- Update to version 1.3.0:
+  * Update changelog and version for v1.3.0 (#316)
+  * chore(deps): update workflows (#314)
+  * fix(deps): update osv-scanner minor (#313)
+  * Update workflows to compositing, so that goreleaser workflow
+    can run them. (#315)
+  * Fix workflow (#311)
+  * Fix some issues with the model. (#312)
+  * Improve the OSV models to allow for 3rd party use of the
+    library. (#310)
+  * Adds concurrency to hydration requests (#304)
+  * Make `IgnoredVulns` also ignore aliases (#300)
+  * fix(deps): update osv-scanner minor (#306)
+  * chore(deps): update actions/setup-go action to v4 (#308)
+  * chore(deps): update workflows (#307)
+  * Run tests before release (#301)
+  * chore(deps): bump activesupport from 7.0.4.2 to 7.0.4.3 in
+    /docs (#302)
+  * Pin lint action (#299)
+  * fix(deps): update osv-scanner minor (#288)
+  * fix: support Pipenv develop packages without versions. (#297)
+  * Set version in source code (#295)
+  * Prevent `.gitignore` files from interfering with tests (#292)
+  * fix: trim leading zeros off when comparing numerical components
+    in Maven versions (better) (#285)
+  * fix: avoid infinite loops parsing Maven poms with syntax errors
+    (#294)
+  * Check if PURL is valid before adding it to queries (#291)
+  * Renovate bot ignore vulns package (#289)
+  * chore(deps): update workflows (#287)
+  * fix: trim leading zeros off when comparing numerical components
+    in Maven versions (#279)
+  * Adding call graph info back in (#284)
+  * Update Colors for Accessibility (#278)
+  * Removed call graph analysis for now. (#282)
+  * Remove "working doc" concept (#275)
+  * feat: improved error message when pom dependency version not
+    found (#253)
+  * Add tags and point people to slsa-verifier (#265)
+  * ci: harden permissions (#269)
+  * Run on merge queue (#272)
+  * fix: properly handle comparing zero versions in Maven (#267)
+  * chore: add `.editorconfig` file (#266)
+  * fix(deps): update osv-scanner minor (#270)
+  * Renovate bot use ignorePaths instead for fixtures (#264)
+  * test: update case with new advisory (#268)
+  * fix: deduplicate packages that appear multiple times in
+    `Pipenv.lock` files (#261)
+  * feat: support `-r` flag in `requirements.txt` files (#260)
+  * chore(deps): update workflows (#242)
+  * fix: avoid panic when parsing `file:` dependencies in `pnpm`
+    lockfiles (#259)
+  * More specific cyclone dx parsing (#258)
+  * Parse nested CycloneDX components correctly (#251)
+  * fix: support yarn locks with quoted properties (#250)
+  * Update renovate.json (#248)
+  * fix(deps): update golang.org/x/exp digest to c95f2b4 (#241)
+  * govulncheck integration (#198)
+  * Create draft release first in goreleaser (#236)
+  * Adding additional installation instructions (#235)
+
+- Update to version 1.2.0:
+  * Changelog update for v1.2.0 (#233)
+  * Moving Working Docs to Current (#234)
+  * Update the output docs, make logo a lot bigger, make page slightly wider (#226)
+  * Upgrade to yaml v3 (#231)
+  * ParseAs for dpkg-status (#229)
+  * Update analytics for documentation. (#230)
+  * chore(deps): update docker/setup-buildx-action digest to f03ac48 (#223)
+  * fix(deps): update osv-scanner minor (#225)
+  * chore(deps): bump golang.org/x/net from 0.2.0 to 0.7.0 (#222)
+  * chore(deps): update dependency http_parser.rb to "~> 0.8.0" (#224)
+  * fix: ensure that vulnerability results are ordered deterministically (#220)
+  * test: ensure case names match function under test (#228)
+  * Nits  - APK installed optimizations (#227)
+  * Support for DPKG (Debian) parser (#168)
+  * feat: support `dependencyManagement` in Maven poms (#221)
+  * Google analytics added. (#215)
+  * Console formatting changes
+  * Documentation Style Improvements (#211)
+  * fixed broken link (#210)
+  * Documentation moved to github page.
+  * Minor changes for gitignore parsing (#208)
+  * Improve gitignore parsing (#206)
+  * fix(deps): update osv-scanner minor (#205)
+  * chore(deps): update github/codeql-action action to v2.2.4 (#204)
+  * Move instructions to Usage (#197)
+  * Make scanner respect .gitignore files (#191)
+  * feat: support specifying what parser to use in `--lockfile` (#94)
+  * fix: add missing toml tags to struct (and update linter) (#190)
+  * fix(deps): update golang.org/x/exp digest to 98cc5a0 (#188)
+  * fix(osv-query): omit SourceInfo from JSON marshaling (#185)
+  * test: remove nonsense case and correct names (#187)
+  * Update readme usage section (#171)
+  * chore(deps): update docker/login-action action to v2 (#148)
+  * fix(deps): update osv-scanner minor (#147)
+  * Support SPDX 2.3 (#178)
+  * chore(deps): update workflows (#172)
+  * feat: Render output as a markdown table for use in github comments (#156)
+  * APK: fix test function (#180)
+  * Log number of packages scanned from SBOMs. (#179)
+  * Make OSV api public (#167)
+  * Add experimental comment (#173)
+  * fix: exit with generic non-zero code when there is a general error (#161)
+  * fix: reuse app-level writer and err writers in `VersionPrinter` (#166)
+  * chore(deps): update github/codeql-action action to v2.1.39 (#159)
+  * test: add cases for `semantic.MustParse` (#160)
+  * feat: create `--format` flag (#158)
+  * golangci checks in github action, and fixes initial linter issues (#149)
+  * test: add case for `--version` flag (#162)
+  * chore: remove duplicated generators (#157)
+  * - add conan.lock to the list (#59)
+  * Fix endpoint typo (#152)
+  * feat: add `semantic` package (#92)
+  * Adding re-try for getting a Vuln for the given ID (#141)
+  * chore(deps): update github/codeql-action action to v2.1.38 (#146)
+  * chore: adjust comment to match type name (#143)
+  * Mention Pipfile.lock support in changelog. (#140)
+  * Fix link to GitHub issues (#139)
+
paho-mqtt-c
+- update to 1.3.12:
+  * service release
+  * https://github.com/eclipse/paho.mqtt.c/milestone/19?closed=1
+
pam-test
+- Update to version 0.0+git.20191111:
+  * Add license information so it can be safely reused
+
pam_wrapper
+- Fix building with cmocka >= 1.1.6
+  * Added pam_wrapper-fix-cmocka-1.1.6+-support.patch
+
papirus-folders
+- update to 1.12.1:
+  * Added Adwaita color
+
patterns-sway
+- Remove require on mako:
+  See https://github.com/openSUSE/openSUSEway/issues/103
+
patterns-xfce
+- Restore previously removed gnome-packagekit as it is needed so that
+  openQA does not fail graphical update test (poo#124364). This is
+  also useful in preparation for offline updates method planned at some
+  point in the future.
+
pcfclock
+- BuildRequire %kernel_module_package_buildreqs (boo#1205149)
+
-- renamed modprobe config to /etc/modprobe.d/50-pcfclock.conf
-  (required by new module-init-tools).
-
perl-App-perlbrew
+- updated to 0.97
+  see /usr/share/doc/packages/perl-App-perlbrew/Changes
+  0.97
+  - Released at 2023-05-12T22:33:42+0900
+  - Thanks to our contributors: Elvin Aslanov, Graham Knop, Shoichi Kaji, Tomasz Konojacki, brian greenfield
+  - The documentation of `clone-module` and `list-modules` are improved.
+  - No longer depends on Pod::Parser. Github PR #760
+  - Bugfix for csh users: Github PR #770
+
perl-Bootloader
-- merge gh#openSUSE/perl-bootloader#152
+- drop obsolete perl-Bootloader-YAML subpackage
+
+- merge gh#openSUSE/perl-bootloader#158
+- skip warning about unsupported options when in compat mode
+- 1.8
+
+- merge gh#openSUSE/perl-bootloader#156
+- bootloader_entry script can have an optional 'force-default'
+  argument (bsc#1215064)
+- 1.7
+
+- merge gh#openSUSE/perl-bootloader#154
+- move kexec-bootloader from kexec-tools to perl-Bootloader
+- 1.6
+
+- merge gh#openSUSE/perl-bootloader#153
+- check whether grub2-install supports --suse-force-signed option
+- 1.5
+
+- merge gh#openSUSE/perl-bootloader#151
+- default-settings: support non-x86 architectures
+- add man pages for all commands
+- 1.4
+
+- merge gh#openSUSE/perl-bootloader#149
-- check whether grub2-install supports --suse-force-signed option
-- 0.944
+- 1.3
-- merge gh#openSUSE/perl-bootloader#147
+- merge gh#openSUSE/perl-bootloader#148
-- 0.943
+- 1.2
+
+- no not install kexec-bootloader
+- 1.1
+
+- merge gh#openSUSE/perl-bootloader#144
+- add default-settings script
+- add new kexec-bootloader
+- add --default-settings option (bsc#1211082)
+
+- merge gh#openSUSE/perl-bootloader#143
+- adjust Makefile for usrmerge and legacy package split
+- move obs spec file to git repo
+- split off old perl code to perl-Bootloader-legacy package
+- remove legacy part completely
+- 1.0
+- move binaries from /sbin to /usr/sbin (boo#1191088)
+- remove /boot/boot.readme while at it so we stay out of there
+
+- Moved logrotate files from user specific directory /etc/logrotate.d
+  to vendor specific directory /usr/etc/logrotate.d.
+
perl-CPAN-Perl-Releases
+- updated to 5.20230720
+  see /usr/share/doc/packages/perl-CPAN-Perl-Releases/Changes
+
+- updated to 5.20230703
+  see /usr/share/doc/packages/perl-CPAN-Perl-Releases/Changes
+
+- updated to 5.20230423
+  see /usr/share/doc/packages/perl-CPAN-Perl-Releases/Changes
+
+- updated to 5.20230416
+  see /usr/share/doc/packages/perl-CPAN-Perl-Releases/Changes
+
+- updated to 5.20230320
+  see /usr/share/doc/packages/perl-CPAN-Perl-Releases/Changes
+
+- updated to 5.20230220
+  see /usr/share/doc/packages/perl-CPAN-Perl-Releases/Changes
+
perl-Future-IO
+- updated to 0.14
+  see /usr/share/doc/packages/perl-Future-IO/Changes
+  0.14    2023-04-25
+    [CHANGES]
+  * Moved `Test::Future::IO::Impl` into its own distribution, so that
+    downstream packages don't have to runtime-depend on `Test2`
+
+- updated to 0.13
+  see /usr/share/doc/packages/perl-Future-IO/Changes
+  0.13    2023-02-19
+    [CHANGES]
+  * Swap all unit tests from `Test::More` to `Test2::V0`
+  * Reomved test-time dependency on `Test::Identity`
+    [BUGFIXES]
+  * t/30system.t should check that the impl actually provides a
+    `->waitpid` method before using it
+  * Insert a hacky "sleep 1" into the connect tests on MSWin32 in case
+    that helps fix the test failures
+
+- updated to 0.12
+  see /usr/share/doc/packages/perl-Future-IO/Changes
+  0.12    2023-01-31
+    [CHANGES]
+  * Added `Future::IO::System`, containing a system()-like and a
+    qx()-like method
+  * Added `->sysread_until_eof` method
+  * Update to perl v5.14 `package NAME VERSION` syntax
+  * Use `await` notation in method minisynopsis lines
+    [BUGFIXES]
+  * Need to work harder to set LocalAddr during socket tests
+
perl-Graphics-Toolkit-Color
+- updated to 1.53
+  see /usr/share/doc/packages/perl-Graphics-Toolkit-Color/Changes
+  1.53     2023-08-11    lichtkind
+  - ------
+  * = maintenance
+  * ? more doc fixes to new API
+  * ! fix rounding error under -Duselongdouble
+  1.52    2023-08-11    lichtkind
+  - ------
+  * = maintenance + third phase toward 2.0
+  * + added gradient method with new API
+  * ? more doc fixes to new API
+  * & more tests
+  1.51    2023-08-10    lichtkind
+  - ------
+  * = a few documentation fixes
+  1.50    2023-08-09    lichtkind
+  - ------
+  * = first + second phase of of 2.0 rewrite
+  * + add CMY, CMYK and HSV support
+  * + new universal getter method: values
+  * + new modifier method: set, blend
+  * ~ enhanced and strictened modifier method: add
+  * \ deprecate all other numeric getter: rgb, red, green, blue, rgb_hex,
+    rgb_hash, hsl, hue, saturation, lightnss, hsl_hash
+  * \ till 2.0 will be also deprecated: rgb_gradient_to, hsl_gradient_to,
+    gradient_to, distance_to, blend_with
+  * & new getter API
+  * & keep complex names like 'SVG:green' to be returned by getter: ->name
+  * ? rewritten large part of documentation
+
+- updated to 1.09
+  see /usr/share/doc/packages/perl-Graphics-Toolkit-Color/Changes
+  1.09    2023-07-17    lichtkind
+  - ------
+  * = maintenance release
+  * ? ever more POD fixes
+  * ? new method chapter split
+  * ? POD in HSL constructor
+  * & enhance some tests and new ones
+  * / split and rearrange value libs with tests
+
perl-IO-Async
+- add missing build requires Test2::V0
+
perl-Sys-Virt
+- Update to 9.7.0
+  - Add all new APIs and constants in libvirt 9.7.0
+  - jsc#PED-3279
+
+- Drop downstream-only suse-set-migration-constraints.patch
+
pgbackrest
+- update to version 2.47
+  * Bug Fixes:
+    + Preserve block incremental info in manifest during delta backup
+    + Fix block incremental file names in verify command
+    + Fix spurious automatic delta backup on backup from standby
+    + Skip recovery.signal for PostgreSQL >= 12 when recovery type=none
+    + Fix unique label generation for diff/incr backup
+    + Fix time-based archive expiration when no backups are expired
+  * Improvements:
+    + Improve performance of SFTP storage driver
+    + Add timezone offset to info command date/time output
+    + Centralize error handling for unsupported features
+  * Documentation Improvements:
+    + Clarify preference to install from packages in the user guide
+
+- update to version 2.46
+  * Features:
+    + Block incremental backup. (Reviewed by John Morris, Stephen Frost, Stefan Fercot.)
+    + SFTP support for repository storage. (Contributed by Reid Thompson. Reviewed by Stephen Frost, David Steele.)
+    + PostgreSQL 16 support. (Reviewed by Stefan Fercot.)
+  * Improvements:
+    + Allow page header checks to be skipped. (Reviewed by David Christensen. Suggested by David Christensen.)
+    + Avoid chown() on recovery files during restore. (Reviewed by Stefan Fercot, Marcelo Henrique Neppel. Suggested by Marcelo Henrique Neppel.)
+    + Add error retry detail for HTTP retries.
+  * Documentation Improvements:
+    + Add warning about using recovery type=none. (Reviewed by Stefan Fercot.)
+    + Add note about running stanza-create on already-created repositories.
+
+- update to version 2.45
+  + Bug Fix: Skip writing recovery.signal by default for restores of offline backups.
+  + Features: Block incremental backup (BETA)
+  + Improvements: Keep only one all-default group index.
+  + Documentation improvements
+
photoqt
+- Update to 3.3:
+  * add: all new shortcuts engine
+  * add: floating element to show location of current image on map
+  * add: map explorer to show all images in current folder with
+    location data on interactive map
+  * add: reset button to restore initial stage of main image
+  * add: setting to switch to moving the image by mouse wheel
+    instead of using it for shortcuts
+  * add: shortcut actions to move image left/right/up/down
+  * add: shortcut actions to got to edges of current image
+  * add: setting to adjust autohide of mouse cursor
+  * add: allow wheel left/right movement as mouse gestures for
+    shortcut
+  * add: allow selection of OpenGL backend in settings
+  * add: option to load PDF documents with QtPDF instead of poppler
+  * add: animate arrows and add small click animation on startup
+  * improve: unify look and feel of various elements throughout
+    application
+  * improve: startup default to mixed setup (integrated and
+    popped out) as default option
+  * improve: support any image format as icon for context menu
+    entry
+  * improve: listening to global mouse movements, fixes
+    overloading event system
+  * improve: don't show context menu entry to add location to
+    favorites without pugixml available
+  * improve: Escape key in file dialog with files selected
+    only removes selection
+  * improve: installing pychromecast with cmake is now
+    opt-in option
+  * improve: crash prevention when scanning for chromecast
+    devices with pychromecast
+  * fix: finding/linking against (optional) mpv source files
+  * fix: proper url encoding for favorite locations
+  * fix: compilation with Exiv 0.28.0
+- Changes in 3.2:
+  * add: advanced sorting by dates stored in exif meta data
+  * add: more options for highlighting thumbnails in thumbnail bar
+  * add: option to disable thumbnail tooltips
+  * add: file dialog: looping thumbnails of images inside subfolders
+  * add: file dialog: select files and folders, add file operations
+    using global clipboard (incl. shortcuts)
+  * add: file dialog: thumbnails are by default shown scaled and
+    cropped to fit
+  * add: file dialog: typing a string finds next matching file
+  * improve: more aggressive freeing of memory when resetting PhotoQt
+  * improve: validation check also checks directories
+  * improve: detect mouse leaving application window and hide
+    elements (main menu, meta data, etc.)
+  * improve: reliability of loading and displaying image resolution
+  * improve: trash handling on Linux following freedesktop.org
+    standard
+  * improve: enable MPV support by default, prefer MPV over
+    QtMultimedia by default
+  * improve: Exiv2: managing BMFF support
+  * improve: file dialog: folder follows main image folder when image
+    opened from command line
+  * improve: file dialog: do not select first entry by default after
+    new folder has been loaded
+  * improve: file dialog: elide long filenames in the middle
+  * improve: file dialog: when mouse cursor leaves fileview reset
+    current index
+  * improve: find and link to 'Concurrent' module
+  * fix: handling of Escape key
+  * fix: execution of external shortcuts
+  * fix: caching thumbnails of images inside archives
+  * fix: correctly removing old animated images from model
+    (freeing up memory)
+  * fix: double click on image no longer triggers background action
+  * fix: window manager titles in wallpaper element were
+    unclickable
+- Add BuildRequires libQt5PlatformHeaders-devel
+
+- update to 3.1:
+  * add: 'scale and crop' preview images in file dialog
+  * add: 'scale and crop' thumbnails to fill thumbnail square
+  * add: option to blur elements in background
+  * add: option to reset session when hiding to system tray
+  * add: option to always load images at actual scale (incl.
+    shortcut to toggle setting)
+  * add: option to automatically hide status info and/or window
+    buttons if not needed
+  * add: enable BMFF meta format in Exiv2 if available and enabled
+  * improve: handling of mouse wheel
+  * improve: uniform context menus
+  * improve: managing external shortcuts
+  * improve: managing custom context menu entries
+  * improve: file count in file dialog when folder icon is very
+    light
+  * improve: make splitview handle in file dialog stand out more
+  * improve: breadcrumbs dropdown folder list
+  * improve: file dialog layout when window is small
+  * improve: specify better default Windows font
+  * fix: sorting of files/folders in file dialog
+  * fix: visual glitches in file dialog
+  * fix: specifying font sizes throughout interface
+- Changed source URL
+
phpPgAdmin
+- Also remove subpackage apache when uninstalling the main package.
+
-- update to 5.0.4
-  - Released: 22th March 2012
-  - Bug fixes.
-  * Fix #3468882 "UPDATE single row with varchar key: empty where
-    clause", reported by "Dirk Kraemer"
-  * Fix XSS in function.php, reported by Mateusz Goik
-  * Fix bug where renaming a tablespace was leading to an error
-  * Fix a bug where clicking to "Show all schemas" on schema
-    privilege page leads back to the latest tab used in database level
-  * Fix a bug when executing a query from the history
-  * Fix bad confirmation message when droping an autovacuum table setup
-  * Fix bug #3429633 '"Back" link from "Browse" leads to error'
-  * Fix a PHP warning when Slony conf parameters are not set
-  * Show cancel/kill actions in process page only if role is a superuser
-  * Some more small code cleanup and fixes.
-- fix for bnc#754694 (CVE-2012-1600)
-  * https://bugzilla.novell.com/show_bug.cgi?id=754694
-
picom
+- Update to version 10.2
+  Fixes:
+  * Window border not being considered when calculating its mask
+    gh#yshui/picom#950
+
+- Update to version 10.1
+  Fixes:
+  * A GL texture leak, related to
+    gh#yshui/picom#892
+  * A crash when shadow radius is set to 0
+    gh#yshui/picom#927
+  * An undefined symbol error
+    gh#yshui/picom#932
+
+- Update to version 10
+  * picom now needs libEGL to build
+  Notable changes:
+  * experimental-backends is now the default. Everything should
+    keep working, except the --glx-fshader-win option. The old
+    window shader support has been replaced by --window-shader-fd.
+    This new shader support has a different interface, so you have
+    to adapt your existing shaders.
+    gh#yshui/picom#875
+  * legacy-backends option has been added so you can go back to the
+    old backends, which will eventually be removed.
+  * picom.desktop is installed to /etc/xdg/autostart/.
+    picom should autostart now.
+    gh#yshui/picom#791
+  * Shadows and blur now match the shape of the window.
+    This includes windows using the XShape extension, and windows
+    with rounded corners.
+    gh#yshui/picom#882
+  * New option: --transparent-clipping-exclude, for excluding
+    windows that doesn't play well with transparent-clipping,
+    such as screenshot tool windows.
+    gh#yshui/picom#663
+    gh#yshui/picom#738
+  * New backend: egl. It should behave exactly the same as the glx
+    backend. Give it a try!
+    gh#yshui/picom#878
+  Other changes:
+  * --help messages have been refactored, leading to clearer code.
+    gh#yshui/picom#877
+  * picom tries to detect and act on GPU resets. But because of the
+    limitation of the X server, this ended up not being very
+    useful.
+
pijul
-- Update upstream version 1.0.0-beta.2:
+- Update to upstream version 1.0.0-beta.5.
+- This version uses hyper 0.14.26 and h2 0.3.19, preventing CVE-2023-26964
+  (bsc#1210361).
+
+- Update to upstream version 1.0.0-beta.4.
+- This version uses hyper 0.14.24, which prevents CVE-2022-31394
+  (bsc#1208559).
+
+- Update to upstream version 1.0.0-beta.2:
poco
+- Update to version 1.12.4
+  * Fix SocketReactor - 100 % CPU usage on single-core system
+- Update to version 1.12.3
+  * Poco::format receives empty Vector<Any>
+  * v1.12.0 and v1.12.1 Poco::Any compile problem
+  * DateTimeFormatter creates invalid ISO8601 string
+  * bindImplLOB zero size (or NULL) HY104 "Invalid precision value"
+  * Poco 1.12.2 - Building DataMySQL still fails (issue #3689)
+  * Fix optional JSON support for MySQL
+  * Poco::Util::Application VxWorks main is incorrect
+  * Fixed converting/correcting pre-gregorian dates (#3723).
+  * aix system NumberFormatter.cpp build error
+  * SocketImpl::available()
+
poedit
+- Poedit 3.3.2:
+  * Added support for WebExtension JSON files.
+  * Fixed failure to extract from source code and malformed Plural-Forms
+    warning.
+  * Minor UI fixes.
+
+- Poedit 3.3.1: Fixed catalog losing source language information on update
+  or similar manipulation.
+
+- Poedit 3.3:
+  * Added support for JSON translation files.
+  * Added support for Flutter ARB translation files.
+  * Added support for XLIFF 2.1.
+  * Added ability to replace source text with another translation.
+
poezio
+- Update to 0.14:
+  Configuration changes:
+  * ADDED: `mam_sync`, `mam_sync_limit`.
+  * ADDED: `autocolor_tab_names`.
+  * CHANGED: `ca_cert_path` is commented out. Poezio will attempt to guess
+    common CA bundle paths. The option can be used to overwrite this behaviour.
+  * REMOVED: `force_remote_bookmarks`.
+  * REMOVED: options related to activity, mood, gaming, tune:
+    `enable_user_activity`, `enable_user_mood`, `enable_user_gaming`,
+    `enable_user_tune`, `display_activity_notifications`,
+    `display_mood_notifications`, `display_gaming_notifications`,
+    `display_tune_notifications`.
+  * REMOVED: `deterministic_muc_colors`.
+  Changes:
+  * DEPRECATION: /leave is deprecated. Use /part or /close instead.
+  * REMOVED: rich presence (activity, mood, gaming, tune) from poezio, alongside
+    with configuration options and commands: /activity, /mood,
+    and /gaming. These are moved to the new user_extras plugin.
+  * REMOVED: non-deterministic nick colors in MUC.
+  * REMOVED: XEP-0319 support removed for privacy and performance.
+  * REMOVED: Support for pypy3 with the removal of poopt.py
+  * ADDED: New /request_voice command for moderated rooms
+  * ADDED: /join: support using an XMPP URI (xmpp:...?join)
+  * ADDED: /destroy_room: new optional reason and altroom arguments
+  * ADDED: Newlines now considered as word separator in input manipulation (#3411)
+  * ADDED: Colored tab names or number using Consistent Color Generation behind
+    `autocolor_tab_names` (thanks jonas!)
+  * Stop highlighting on MUC history messages just because they're delayed
+  * Stop displaying the traceback in debug log when /xhtml fails
+  * Ensure launch.sh can be use outside the repository (Thanks kaliko)
+  * Detect `/set option = value` pattern and do as it `/set option value` was
+    called. (#3517)
+  * Newlines taken into account on completion (#3385)
+  * Allow resizing certificate confirmation window (#3371)
+  * Make theming more configurable around nicks
+  * Log MUC <destroy/> payload in the information buffer
+  * impromptu: wait for room subject before configuring and inviting
+  * Impromptu: rooms now have pronouceable short names
+  * impromptu: ensure a room is empty before joining
+  * impromptu: now uses mediated invites
+  * Fetch from MAM by default when use_log is False.
+  * xhtml: Add a new line after a blockquote
+  Bug fixes:
+  * Ensure bookmark is present before removing it in /close.
+  * Ensure bookmarks are saved correctly on method config change, and on /close.
+  * Ensure nick is added to bookmark when specified
+  * Do not crash on bookmark without a nickname (Thanks Ge0rG)
+  * Ensure the correct tab is bookmarked on /bookmark and /join
+  * /bookmark: treat empty nick as no nick to avoid failing on empty resource
+  * Fix closing a tab not in bookmarks
+  * Disco barejid instead of domains on sent carbons. Follow-up of 5e40437.
+  * Only use JID internally when handling affiliations. Add nick if present.  (#3536)
+  * /last_activity: prevent traceback
+  * Fix bad error handling when checking bookmarks storage
+  * `/join / password` works again
+  * Report available presence in tabs correctly
+  * /display_correction: now reports the correct time for private messages (#3532)
+  * Fix composing indicators not showing (#3527)
+  * Fix pasting text in data forms and bookmarkstab (#3519)
+  * Fix /me logging (#3432)
+  * Retrieve nick colors from the correct section
+  * Do not scroll right by default in dataforms/bookmark text
+  * Hack around the time limit for topic messages
+  * Ensure MUC-PM logging filenames are generated as expected (Thanks Ge0rG, southerntofu)
+  * Fix poezio displaying many times the same participant in the user list.
+  * Fix default dataform field handling (#3554)
+  * Fix MUCListTab not joining selected MUCs (#3553)
+  * Fix /color completion (Thanks eijebong)
+  * /info: Don't display comma before status message if not available
+  Plugins:
+  * ADDED: untrackme plugin. based on remove_get_trackers.
+  * ADDED: user_extras plugin. /activity, /mood and /gaming moved from core.
+  * ADDED: sticker plugin.
+  * DEPRECATED: remove_get_trackers
+  * REMOVED: /irc_login from the irc plugin.
+  * Reorder: Prevent GapTabs from being serialized and ignore when serialized as
+    they're recreated automatically.
+  * Code: prevent traceback when not enough arguments
+  * Link: Add support for aesgcm, gemini and gopher URIs
+  * Contact: iterate all data forms (Thanks Ge0rG)
+  * Fix plugins (embed, lastlog, otr, quote, time_marker) to use poezio.ui.types
+  * Disco: Added error handling
+  * IRC: Fix the plugin to work with the various refactors, and use
+    irc.jabberfr.org as a default gateway
+  API:
+  * BREAKING: E2EEPlugin.decrypt's `tab` parameter is now of type
+    Optional[ChatTab] instead of ChatTab.
+  * BREAKING: E2EEPlugin.supported_tab_types is now required
+  * BREAKING: decrypt method is now async
+  * E2EEPlugin decrypts encrypted messages even when they have no body.
+  * E2EEPlugin lets through already encrypted messages without giving them
+    to the user lib (poezio-omemo, for example).
+  * Correctly pass realjid to decrypt call for MUC messages
+  * /<encryption_name>_fingerprint command is added. Plugins can implement
+    `get_fingerprints` and `format_fingerprint` for it to return a (formatted)
+    value.
+  Under the hood:
+  * Moved development from 'master' to 'main' branch
+  * Lots of type hints added (decorators, multiuserchat, shlex, common, muctab,
+    etc.) fixing many bugs
+  * Lots of event handlers and calls are now async in poezio. Many callbacks removed.
+  * Lots of refactoring
+  * Performance improvements:
+  - Trim all messages by 24 bytes on 64-bit systems
+  - Reduce log parsing by a lot
+  * No more safeJID calls. (#3457)
+  * Rework some features to use slixmpp's API instead of custom poezio code
+    (i.e., muc's set_subject, set_role, set_affiliation, destroy_room,
+    cancel_config, set_room_config, and most events)
+  * Split commands from Core
+  * Require typing_extensions package for python
+  * Require setuptools package explicitly because of pkg_resources' import
+  * Replace asyncio.ensure_future with asyncio.create_task
+- Update URL from http://poezio.eu/en/ to https://poez.io/en/
+
+- Install upstream desktop file with logo to fix build on Leap
+
+- update to 0.13.1:
+  - Contacts won’t be seen playing games or music when they actually stop doing
+    so.
+  - /leave now toggles off the autojoin flag instead of removing the bookmark.
+  - Only add auotjoin on new bookmarks for synchronise_open_rooms on /join
+  - /affiliation displays things in the info win instead of directly in the room,
+    and additionally displays which room it refers to.
+  - List the correct required versions for package maintainers.
+  - Fix the AppStream manifest to get Flathub to accept it.
+  - Add a warning when the terminal doesn’t support 256color mode.
+  - Display our own nick properly in messages received from MAM.
+  - Only send an unavailable presence on closing a room if we are joined.
+  - Don’t display the current date for history messages received today.
+  - Fix marquee and dice plugin to use newer Last Message Correction format.
+  - Bookmarks tab properly displays bookmarks method (local/remote) and allows
+    to switch between them again.
+  - Updated manpages and added manpages built from the doc in the setup process.
+    Packagers need to run setup.py build_man to have them built.
+
+- add python3-pyasn1-modules as run-time dependency (fixes bnc#1167427)
+- bump to 0.12.1 (fixes bnc#1167427)
+  - Fix compatibility with the Python 3.5 in debian stable
+  - Require Python 3.5, to add support for Python 3.7, use proper async
+    functions, use typing, italics formatting, FIXME
+  - Added support for XEP-0392 (Consistent Color Generation)
+  - Added support for XEP-0153 (vCard-Based Avatars) and XEP-0084 (User
+    Avatar) in the roster tab
+  - Added support for XEP-0363 (HTTP File Upload) for easy file transfer,
+    in the upload plugin with /upload
+  - Added support for XEP-0066 (Out of Band Data) for Conversations
+    compatibility when sharing images, in the embed plugin with /embed
+  - Removed support for XEP-0296 (Best Practices for Resource Locking),
+    to use all features available no matter what our contact’s current
+    clients support
+  - Check for usable Unicode support on start
+  - Generate a device id on first start, and use it for our resource
+  - Display the public key hash instead of the certificate’s
+  - Handle carbons properly for private messages in rooms
+  - /bookmarks can now be used to rename tabs as you want
+  - Remove unexpected command completion based on command prefix
+  - Add an irssi theme
+  - Add a code plugin, which requires pygments
+  - Fix resource duplication on reconnect
+  - Misc fixes and improvements
+
poke
+- Update to 3.2:
+  * Fix value returned by the libpoke function pk_load
+  * Fix a very annoying regression that resulted in a segfault when
+    doing l-value maps of struct values having anonymous fields
+
+- Update to 3.1:
+  * Bug fixes:
+    + Fix recognition of token 0[bB] in the lexer.
+    + Do not validate and check _print* functions within struct types
+    as if they were methods.  As functions, they can have any
+    signature as they are no special in any way.
+    + Do not emit an empty table for computed fiels in the output of
+    .info type if the type has no computed fields.
+    + Use tar-ustar in AM_INIT_AUTOMAKE.  The usage older algorithms in
+    tar was causing problems when creating poke tarballs with long
+    path names.
+    + std.pk now provides utility functions to parse and compare poke
+    versions. This is for example to be used by poke pickles in
+    order to require a particular minimum version of the program.
+    + poked now recognizes the short option -S.
+    + poked now creates its socket with umask 0077, and it uses a more
+    suitable default socket path that includes the PID of the process
+    running the daemon.
+    + The Poke compiler now emits proper parse errors when problems are
+    found in asm templates.
+    + poke will no longer abort execution in case it finds a fatal
+    error in the lexer, such as memory exhaustion.
+    + Casts from arrays to arrays now use the right bounder.
+    + Constant folding of offset multiplication by an offset with zero
+    unit is now fixed.
+
polkit-default-privs
+- Update to version 13.2+20230914.23d7b7c:
+  * backport systemd v254 actions for SLE-15-SP6 (bsc#1215346)
+
priv_wrapper
+- Actually apply priv_wrapper-fix-cmocka-1.1.6+-support.patch (use
+  autosetup instead of setup).
+
+- Fix building with cmocka >= 1.1.6
+  * Added priv_wrapper-fix-cmocka-1.1.6+-support.patch
+
pspp
+- Update to 1.6.2
+  * Previously, numeric variables defaulted to "scale" measurement
+    level.  Now, the default is "unknown", with a better guess chosen
+    based on heuristics the first time the data is read.
+  * Bug fixes.
+- Update to 1.6.1
+  * The SET command now supports LEADZERO for controlling output of a
+    leading zero in F, COMMA, and DOT format.
+  * Bug fixes and translation updates.
+- Update to 1.6.0
+  * In the Kruskal-Wallis test, a misleading result could occur
+    if the lower bound specified by the user was in fact higher
+    than the upper bound specified.  This has been fixed.
+  * The DEFINE, MATRIX, MCONVERT, and MATRIX DATA commands are now
+    implemented.
+  * An error in the displayed signficance of oneway anova
+    contrasts tests has been corrected.
+  * Added Drag-N-Drop in output view.
+  * The Explore GUI dialog supports the "Plots" subdialog. Boxplots,
+    Q-Q Plots and Spreadlevel plots are now also available via the GUI.
+  * The graphical user interface for importing spreadsheets has been
+    improved.
+    The new interface provides the user with a preview of the data to
+    be imported and interactive methods to select the desired ranges.
+  * The user manual, in its Info and HTML versions, now includes
+    graphical output examples and screenshots.
+  * New command SHOW SYSTEM to easily print system information useful
+    in bug reports.
+  * Output improvements:
+  - New drivers for output to TeX source files and to PNG files.
+  - Table output styles may now be set with the new option
+  - -table-look and the new SET TLOOK command.
+  - New driver option "trim" to remove empty space from PDF,
+    PostScript, SVG, and PNG output files.
+  - The PDF output driver now adds an outline to allow PDF viewers
+    to display as a "table of contents" for the file.
+  - The HTML output driver has a new option "bare".
+  * New features in pspp-output:
+  - New --table-look and --nth-commands options.
+  - New get-table-look and convert-table-look commands.
+
pvirsh
+- version 2.2:
+  * again some lint fixes
+  * remove unwanted shebang
+  * various typo fixes
+  * bug fixes
+  * add requires on python3-curses
+
pythia
+- Update to version 8.310:
+  * Production of quarkonia is now available via the simple
+    timelike shower, see Onia Showers for details.
+  * Added a new feature that allows producing user-defined
+    resonances in hadronic rescattering. Newly added particles can
+    be produced as resonances if they set varWidth = on.
+  * A number of changes have been made to the heavy ion machinery.
+  * Included possibility to sample intermediate photon virtuality
+    also for externally provided events using built-in photon flux
+    for protons.
+  * Included possibility to generate DIS events with a
+    (anti-)neutrino beam.
+  * The TopRecoilHook, formerly available separately, has now been
+    integrated into the SimpleTimeShower.
+  * Introduced a new use plugin system, see Plugins for details.
+  * The arguments to the setSigmaPtr method are now shared
+    pointers. Additionally, addSigmaPtr has been introduced with
+    the previous behaviour of setSigmaPtr, and the new setSigmaPtr
+    overrides all previously added pointers.
+  * A similar change has been made for the setResonancePtr method
+    with the addition of the addResonancePtr method.
+  * The new Logger class now handles printing such as
+    initialization information and diagnostic messages. For more
+    information about this class, see the Logging page.
+  * The new BeamSetup class has been introduced to handle the beam
+    configuration, including initializing and changing beam
+    identities, kinematics and parton distributions.
+  * Modified interface to LHAPDF6 to allow for multi-threading.
+  * Updated the Python interface to use pybind11 version 2.10.4
+    which is compatible with Python 3.11.
+  * Fix for the Python interface working with gcc13.
+  * Fixed a bug in the Python interface which prevented main162.py
+    from running correctly when passing a custom function for
+    initialization.
+  * Updated the Lambda_b0 lifetime to c*tau = 0.44 mm. The value
+    was rounded to two significant digits since PDG and HFLAV do
+    not quite agree to three digits.
+  * Included several small fixes in response to running an LLVM
+    static code analysis.
+  * Fixed out-of-range access when calling Hist::getYMin and
+    Hist::getYMax for a histogram that has not been booked.
+  * Fixed BeamRemnants:unresolvedHadron option that was broken and
+    had no effect since 8.307.
+  * Removed use of simple-template-ids in SusyLesHouches.h to make
+    compliant with C++20.
+  * Fixed dipole sorting behaviour in ColourReconnection which
+    resulted in an ordering that depended on the current memory
+    state of the program.
+  * Changed the default for Parallelism:balanceLoad to on and
+    updated the documentation. This ensures each thread will
+    always generate the same number of events.
+  * Added the += notation for settings vectors, as well as the
+    include = fileName directive, which allows for additional
+    settings files to be directly read in.
+  * Fixed a bug in the bookkeeping the number of hadrons in the
+    string fragmentation.
+- Major rebase of pythia-remove-rpaths.patch for updated version.
+
+- Update to version 8.307:
+  * Extensions to the hadronic cross sections and beam types used
+    for hadronic rescattering and cascades in the atmosphere.
+  * Improvements for hidden valley scenarios.
+  * A new framework for parallelisation (in addition to the
+    existing openMP option).
+  * A number of other technical improvements and bug fixes (full
+    list here: https://pythia.org/history/index.html).
+- Minor rebase of patches to apply cleanly, without fuzz.
+
+- Drop HepMC2 dependency and build without hepmc2 support; largely
+  superseded by HepMC(3) and this change allows Leap 15.x builds
+  to proceed without HepMC2-HepMC conflicts.
+- Add BuildRequires: fastjet-plugin-siscone-devel which is needed
+  for one of the tests (test number 111).
+
+- Update to version 8.306:
+  * Fixed the incorrect scale being set when applying the POWHEG
+    veto, i.e. main31.cc. Note that the number of emissions is
+    correct in 8.303, but is incorrect in 8.304 and 8.305.
+  * Fixed repeated initialization causing an ever expanding
+    physics pointer list in the main Pythia class.
+  * Fixed issue for HepMC output from Vincia, which would
+    previously issue warnings about inconsistent mother/daughter
+    relationships.
+  * Removed assert statements from Angantyr.
+  * Shortened Pythia constructor header.
+- Rebase pythia-honour-env-cxxflags.patch and
+  pythia-makefile-destdir-support.patch to apply cleanly.
+- Major rebase of pythia-remove-rpaths.patch for updated version.
+- Drop patch not required any more:
+  * pythia-disable-example23-req-MixMax_h.patch: Examples can now
+    be disabled by passing options to the run script.
+- Change BuildRequires to pkgconfig based ones wherever
+  appropriate.
+- More examples need linking against gmp explicitly: add fixes for
+  all necessary examples to patch pythia-example71-link-gmp.patch
+  and rename it to pythia-examples-link-gmp.patch.
+- Build with Rivet and HepMC(3) support: add HepMC-devel,
+  pkgconfig(rivet) BuildRequires.
+- Update URL and source URL in keeping with upstream.
+- Minor improvements to package summaries.
+- Run spec-cleaner for minor cleanups.
+
python-CairoSVG
+- Add CVE-2023-27586.patch to Don't allow fetching external files
+  unless explicitly asked for.
+  (gh#Kozea/CairoSVG@12d31c653c02, bsc#1209538)
+
+- Update to version 2.5.2
+  * Fix marker path scale
+
+- Update to version 2.5.1 (bsc#1180648, CVE-2021-21236):
+  * Security fix: When processing SVG files, CairoSVG was using two
+    regular expressions which are vulnerable to Regular Expression
+    Denial of Service (REDoS). If an attacker provided a malicious
+    SVG, it could make CairoSVG get stuck processing the file for a
+    very long time.
+  * Fix marker positions for unclosed paths
+  * Follow hint when only output_width or output_height is set
+  * Handle opacity on raster images
+  * Don’t crash when use tags reference unknown tags
+  * Take care of the next letter when A/a is replaced by l
+  * Fix misalignment in node.vertices
+- Updates for version 2.5.0.
+  * Drop support of Python 3.5, add support of Python 3.9.
+  * Add EPS export
+  * Add background-color, negate-colors, and invert-images options
+  * Improve support for font weights
+  * Fix opacity of patterns and gradients
+  * Support auto-start-reverse value for orient
+  * Draw images contained in defs
+  * Add Exif transposition support
+  * Handle dominant-baseline
+  * Support transform-origin
+- Add _service file to fetch required submodule.
+
-- Initial version (0.5) for openSUSE.
-
python-GitPython
+- Add CVE-2023-41040.patch to fix directory traversal attack
+  vulnerability gh#gitpython-developers/GitPython#1644
+  bsc#1214810
+
python-azure-core
+- Add patch reqs.patch to update the typing-extensions version
+  requirement to match spec file in setup.py. (bsc#1213529)
+
python-bugzilla
+- Fix API Key leak (bsc#1215718)
+- Add:
+  * 188-fix-api-key-leak.diff
+
python-geographiclib
+- Use sle15_python_module_pythons
+- Fix link to LICENSE.txt
+
python-pybtex
+- do not require python-six
+- added patches
+  fix https://bitbucket.org/pybtex-devs/pybtex/commits/6afabe217af95995d595de493cf9bc5120f85ca7
+  + python-pybtex-no-six.patch
+
-- update to version 0.16
-  - BibTeX .bib and .bst parsers were completely rewritten; they
-    are now much faster and more BibTeX-compatible
-  - syntax errors and undefined strings in .bib files now result in
-    warnings instead of errors, like in BibTeX
-  - unused entries in .bib files are now skipped, like in BibTeX
-  - the case of entry keys is now preserved (in previous versions
-    they were converted to lowercase)
-  - pythonic style engine now supports sorting
-  - pythonic style engine: fixed nested optional() blocks
-  - fixed parsing of some names with a Last part but no von part
-  - fixed processing of brace-level-one "special characters" in
-    purify$ BibTeX built-in function
-  - added proper error messages on encoding errors in .bib files
-  - the default encoding is now UTF-8 on all platforms
-  - pybtex-convert now preserves the order of entries in BibTeX and
-    BibTeXML files
-  - fixed first_of behavior when non-empty child is followed by a
-    child that has a missing field
-  - fixed crossref lookups when key is not lower case
-  - completed unsrt and plain python styles: they now contain all
-    entry types
-  - added doctree backend for rendering into a tree of docutils
-    nodes
-  - added support for non-string backends
-
python-tesserocr
+- Fix build: Add libcurl dependency
+
python-tomlkit
+- Update to version 0.8.0:
+  - Drop support for Python<3.6.
+  - Comply with TOML v1.0.0.
+  - And many bug fixes
+
+- Update to version 0.7.0
+  * Added support for sorting keys when dumping raw
+    dictionaries by passing sort_keys=True to dumps() (#103).
+  * Keys are not longer sorted by default when dumping a raw
+    dictionary but the original order will be preserved (#103).
+  * Fixed compliance with the 1.0.0rc1 TOML specification (#102).
+
+- update to version 0.6.0
+  * Added support for heterogeneous arrays
+
python-yq
+- It seems that tomlkit > 0.8.0 is not needed after all
+  (jsc#PED-5095).
+
+- update to 3.2.2:
+  * Allow XML documents to be streamed with –xml-item-depth
+
+- Update to 3.2.1:
+  * Use tomlkit instead of toml
+  * Add security policy
+  * Documentation and release infrastructure improvements
+
+- update to 3.1.1:
+  * Handle TOML datetimes. Fixes #160
+  * Test and documentation improvements
+
+- Update to 3.1.0:
+    Use configurable output grammar, compatible with YAML 1.1
+- Update to 3.0.2:
+  - Expand merge keys (https://yaml.org/type/merge.html). This is
+    a YAML 1.1 specific behavior, but will be accommodated in yq
+    due to its widespread use and low likelihood of accidental
+    invocation.
+- Update to 3.0.1:
+  - yq now uses the YAML 1.2 grammar when parsing and rendering
+    YAML documents. This means bare literals like “on”, “no”,
+    and “12:34:56” are interpreted as strings. (Fix interrupted
+    release)
+- Removed upstreamed e37a7981b505aa0fd60d062ca81fd7b23715233e.patch
+
+- Update to 2.14.0
+  * Support binary and set tags.
+- Add e37a7981b505aa0fd60d062ca81fd7b23715233e.patch
+  Fix expected output of a test case
+
+- Update to 2.13.0
+  * Improve YAML loading performance by using CSafeLoader where available
+  * Fix tests
+- Drop upstream merged skip-broken-test.py
+
+- Update to 2.12.0
+  * Add TOML support and the tomlq CLI utility to access it
+  * Drop Python 2.7 support
+  * Parse correctly when empty string is passed as jq_filter
+  * Better handling of jq_filter and files arguments
+- Add skip-broken-test.py
+
+- Update to 2.10.1
+  * Add support for xmltodict force_list definition for xq CLI (#95)
+  * Support explicit doc markers (#93)
+  * Ensure proper ordering of help messages (#90)
+- Drop already merged pyaml53.patch
+
qemu
-- Fix bsc#1213414, bsc#1207205, bsc#1212968, bsc#1179993,
-  bsc#1181740, bsc#1213001
-  * vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
-  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)
-  * 9pfs: prevent opening special files (CVE-2023-2861)
+- Fix bsc#1215311:
+  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
+
+- Fix the build for SLE/Leap:
+  * [openSUSE][RPM] Make the package buildable on SLE/Leap 15.x
+
+- Fix bsc#1211000:
+  * [openSUSE] block: Add a thread-pool version of fstat (bsc#1211000)
+  * [openSUSE] block: Convert qmp_query_block() to coroutine_fn (bsc#1211000)
+  * [openSUSE] block: Don't query all block devices at hmp_nbd_server_start (bsc#1211000)
+  * [openSUSE] block: Convert qmp_query_named_block_nodes to coroutine (bsc#1211000)
+  * [openSUSE] block: Convert bdrv_block_device_info into co_wrapper (bsc#1211000)
+  * [openSUSE] block: Convert bdrv_query_block_graph_info to coroutine (bsc#1211000)
+  * [openSUSE] block: Temporarily mark bdrv_co_get_allocated_file_size as mixed (bsc#1211000)
+  * [openSUSE] block: Allow the wrapper script to see functions declared in qapi.h (bsc#1211000)
+  * [openSUSE] block: Remove unnecessary variable in bdrv_block_device_info (bsc#1211000)
+  * [openSUSE] block: Remove bdrv_query_block_node_info (bsc#1211000)
+- Fix bsc#1213210:
+  * target/s390x: Fix the "ignored match" case in VSTRS (bsc#1213210)
+
+- Update to version 8.1.0. Full list of changes are available at:
+  https://wiki.qemu.org/ChangeLog/8.1
+  Highlights:
+  * VFIO: improved live migration support, no longer an experimental feature
+  * GTK GUI now supports multi-touch events
+  * ARM, PowerPC, and RISC-V can now use AES acceleration on host processor
+  * PCIe: new QMP commands to inject CXL General Media events, DRAM
+    events and Memory Module events
+  * ARM: KVM VMs on a host which supports MTE (the Memory Tagging Extension)
+    can now use MTE in the guest
+  * ARM: emulation support for bpim2u (Banana Pi BPI-M2 Ultra) board and
+    neoverse-v1 (Cortex Neoverse-V1) CPU
+  * ARM: new architectural feature support for: FEAT_PAN3 (SCTLR_ELx.EPAN),
+    FEAT_LSE2 (Large System Extensions v2), and experimental support for
+    FEAT_RME (Realm Management Extensions)
+  * Hexagon: new instruction support for v68/v73 scalar, and v68/v69 HVX
+  * Hexagon: gdbstub support for HVX
+  * MIPS: emulation support for Ingenic XBurstR1/XBurstR2 CPUs, and MXU
+    instructions
+  * PowerPC: TCG SMT support, allowing pseries and powernv to run with up
+    to 8 threads per core
+  * PowerPC: emulation support for Power9 DD2.2 CPU model, and perf
+    sampling support for POWER CPUs
+  * RISC-V: ISA extension support for BF16/Zfa, and disassembly support
+    for Zcm*/Z*inx/XVentanaCondOps/Xthead
+  * RISC-V: CPU emulation support for Veyron V1
+  * RISC-V: numerous KVM/emulation fixes and enhancements
+  * s390: instruction emulation fixes for LDER, LCBB, LOCFHR, MXDB, MXDBR,
+    EPSW, MDEB, MDEBR, MVCRL, LRA, CKSM, CLM, ICM, MC, STIDP, EXECUTE, and
+    CLGEBR(A)
+  * SPARC: updated target/sparc to use tcg_gen_lookup_and_goto_ptr() for
+    improved performance
+  * Tricore: emulation support for TC37x CPU that supports ISA v1.6.2
+    instructions
+  * Tricore: instruction emulation of POPCNT.W, LHA, CRC32L.W, CRC32.B,
+    SHUFFLE, SYSCALL, and DISABLE
+  * x86: CPU model support for GraniteRapids
+  * and lots more...
+- This also (automatically) fixes:
+  * bsc#1212850 (CVE-2023-3354)
+  * bsc#1213001 (CVE-2023-3255)
+  * bsc#1213925 (CVE-2023-3180)
+  * bsc#1213414 (CVE-2023-3301)
+  * bsc#1207205 (CVE-2023-0330)
+  * bsc#1212968 (CVE-2023-2861)
+  * bsc#1179993, bsc#1181740, bsc#1211697
+
+- perl-Text-Markdown is not available in all distros and for all
+  arch-es. Use discount instead
+- Patches added:
+  * [openSUSE][spec] Use discount instead of perl-Text-Markdown
+
+- Update to version 8.0.4:
+  * Official changelog not released on the mailing list yet
+  * Security issues fixed:
+  - bsc#1212850 (CVE-2023-3354)
+  - bsc#1213001 (CVE-2023-3255)
+  - bsc#1213925 (CVE-2023-3180)
+  - bsc#1207205 (CVE-2023-0330)
+
+- Fix bsc#1179993, bsc#1181740, bsc#1213001
+- Patches added:
-  * [openSUSE][OBS] Refine the OBS workflow for 15-SP5
-- Fix bsc#1211000
-- Patches added:
-  * Run fstat asynchronously inside coroutines (bsc#1211000)
-  * Allow bdrv_get_allocated_file_size to run in bdrv context (bsc#1211000)
-  * Convert query-named-block-nodes to coroutine (bsc#1211000)
-  * Convert query-block/info_block to coroutine (bsc#1211000)
-  * block: Convert bdrv_get_allocated_file_size() to co_wrapper (bsc#1211000)
-  * block-coroutine-wrapper.py: support also basic return types (bsc#1211000)
-  * [openSUSE][RPM] Backport some spec-file improvements from Factory
+- Update to version 8.0.3:
+  * See full log: https://lists.nongnu.org/archive/html/qemu-stable/2023-07/msg00086.html
+  * Security issues fixed:
+  - 9pfs: prevent opening special files (CVE-2023-2861)
+  - vhost-vdpa (CVE-2023-3301)
+  * Use the official xkb name for Arabic layout, not the
+    legacy synonym (bsc#1212966)
+  * [openSUSE][RPM] Update to version 8.0.3
+
+- Patches added (first one is relevant for boo#1197298 and bsc#1212768):
+  * [openSUSE][RPM] Use --preserve-argv0 in qemu-linux-user (#32)
+  * [openSUSE][RPM] Split qemu-tools package (#31)
+
+- Update to version 8.0.2:
+  * Stability, security and bug fixes
+- Patch added:
+  * [openSUSE][RPM] Update to version 8.0.2
+
+- Patch added:
+  [openSUSE][RPM] Fix deps for virtiofsd and improve spec files
-- Fix bsc#bsc#1211697
+- Update the _constraints file:
+  * the qemu-testsuite package does not exist any longer, but some
+    of the tests are done in the qemu package (so "transfer" some of
+    the constraints to that one)
+  - some of the builds are failing with OOM, happening while the RPM
+    is actually put together, at the end of the process. Try to give
+    them more RAM
+
+- Patch added:
+  [openSUSE][RPM] spec: require virtiofsd, now that it is a sep package (#27)
+
+- Update to version 8.0.0 (https://wiki.qemu.org/ChangeLog/8.0)
+  * Removed features: https://qemu-project.gitlab.io/qemu/about/removed-features.html
+  * Deprecated features: https://qemu-project.gitlab.io/qemu/about/deprecated.html
+  * Some notable changes:
+  - ARM:
+  - New emulated CPU types:
+  - Cortex-A55 CPU
+  - Cortex-R52 CPU
+  - x86
+  - Add support for Xen guests under KVM with Linux v5.12+
+  - New CPU model "SapphireRapids"
+  - VFIO
+  - Experimental migration support has been updated to the v2 VFIO migration protocol
+  - virtio
+  - virtio-mem now fully supports combining preallocation with migration
+  - vDPA
+  - Support live migration of vhost-vdpa net devices without CVQ, with no need of x-svq
+  - virtiofs
+  - The old C virtiofsd has been removed, use the new Rust implementation instead.
-  smbios: sanitize type from external type before checking have_fields_bitmap (bsc#1211697)
-  hw/smbios: fix field corruption in type 4 table (bsc#1211697)
-  linux-user: fill out task state in /proc/self/stat
-  test-vmstate: fix bad GTree usage, use-after-free
-  qemu/osdep: Switch position of "extern" and "G_NORETURN"
+  [openSUSE][RPM] Try to avoid recommending too many packages (bsc#1205680)
+  [openSUSE][RPM] Move documentation to a subpackage and fix qemu-headless (bsc#1209629)
+  roms: add back edk2-basetools target
+  async: Suppress GCC13 false positive in aio_bh_poll()
+  [openSUSE][OBS] Limit the workflow runs to the factory branch (#25)
+  [openSUSE][RPM] Spec file adjustments for 8.0.0
-- Switch the packaging workflow to git, like the one we have in place
-  already for Factory.
-  * Patches no longer present as patch files, but applied as commits:
+- (Radical!) Change of packaging workflow. Now pretty much everything
+  happens via git, and interacting with https://github.com/openSUSE/qemu.git.
+  See README.PACKAGING for details
+  * Patches added:
+  linux-user: Add pidfd_open(), pidfd_send_signal() and pidfd_getfd() syscalls
+  linux-user: fill out task state in /proc/self/stat
+  linux-user: Emulate CLONE_PIDFD flag in clone()
+  * Patches transformed in git commits:
+  acpi-cpuhp-fix-guest-visible-maximum-acc.patch
+  qemu-osdep-Switch-position-of-extern-and.patch
+  test-vmstate-fix-bad-GTree-usage-use-aft.patch
+- Enable again LTO for x86_64 target (boo#1133281).
+
+- Further fixes for bsc#1209546
+  * Patches added:
+  test-vmstate-fix-bad-GTree-usage-use-aft.patch
+
+- Fix bsc#1209546
+  * Patches added:
+  qemu-osdep-Switch-position-of-extern-and.patch
+
+- Backport the "acpi: cpuhp: fix guest-visible maximum access size
+  to the legacy reg block" patch, as it makes developing and
+  testing OVMF/EDK2 easier
+  acpi-cpuhp-fix-guest-visible-maximum-acc.patch
+- Disable -Werror as it is very sensitive when one
+  updates a new compiler. -Werror is fine for upstream development,
+  but not when it comes to stability of a package build.
+
qgis
+- Add python numpy requirement bsc#1215339 (was bsc#1203696)
+
qmmp
+- Update to version 2.1.4:
+  * Add projectM 4.0 support (experimental).
+  * Rebuild skin cache if missing
+  * Fix removing of the current playing file in the file operations
+    plugin.
+  * Fix crash on streams in the lyrics plugin.
+  * Fix issues with tabbar in the simple ui plugin.
+  * Fix issues with visualisation windows on application startup.
+
+- Update to version 2.1.3:
+  * Fix latest cURL API support.
+  * Fix crash in the ladspa plugin (Linearithmik).
+  * Fix memory leak in the wavpack plugin.
+  * Fix ADTS header detection in the aac plugin.
+  * Fix error handling in the ffmpeg plugin.
+  * Fix text scroller geometry in the skinned plugin.
+  * Hide empty plugin categories.
+  * Update translations.
+
qpwgraph
+- Update to version 0.5.1:
+  * Fix segfault on initialisation that was affecting Qt5 builds.
+
+- Update to version 0.5.0:
+  * Completely refactored the internal PipeWire node registry
+    logic, just to have unique node names, as seen fit to purpose
+    to solve an old undefined behaviour to positioning and Patchbay
+    persistence of multiple nodes with the very same and exact
+    name.
+  * Fix the main PipeWire registry thread-safety, into a two-level
+    critical section, hopefully preventing the race-conditions that
+    are the suspected cause to some rare crashes.
+
+- Update to version 0.4.5:
+  * Split non-physical terminal device nodes for monitor and
+    control ports, adding the suffix "[Monitor]" and/or "[Control]"
+    resp. to the node name.
+  * Fix the dimming of new connections when Patchbay/Edit mode is
+    on and Patchbay/Auto Pin is off.
+
+- Update to version 0.4.4 (changes since 0.4.2):
+  * Split devices for capture/monitor and playback ports.
+
+- Update to version 0.4.2:
+  * Soft incremental bounds constraints now imposed to all new and
+    old nodes positioning.
+  * Attempt to auto-start minimised to system-tray icon, if
+    enabled, when restoring a desktop session (eg. after logout,
+    shutdown or restart).
+
+- Update to version 0.4.1 (changes since 0.3.9):
+  * Node names now have the "media.name" property as a bracketed
+    suffix; when given and applicable.
+  * Node icons now reflecting their proper application/theme icons
+    or else, a bland and generic default taken from the
+    "client.api" property (eg. "pw", "jack" or "pulse").
+  * Introducing touch pinch-gesture for zooming.
+  * Attempt to make port labels as short as possible.
+  * Fix a possible crash when several PW objects (nodes and ports)
+    are created and destroyed in fast succession.
+
qtodotxt
+- Fix a crash with Python >= 3.10.
+
qtox
+- Drop build time to fix reproducible builds (boo#1047218)
+
r128gain
+- Update to version 1.0.7
+  * feat: warn if input is not a directory in recursive mode.
+  * refactor: reduce get_r128_loudness complexity.
+  * fix: mypy pre-commit hook error.
+  * fix: workaround ffmpeg ebur128 filter early stop with concat.
+  * fix: improve ffmpeg ebur128 output parsing.
+  * fix: wrong replaygain sample peak calculation for non standard
+    sample rates.
+  * fix: don't map ffmpeg filter output.
+  * feat: make progress output persistant.
+  * feat: log filter script
+- Update to version 1.0.6
+  * no functional changes
+- Update to version 1.0.5
+  * no functional changes
+
rawtherapee
+- Backport patch to fix build with gcc13 on aarch64:
+  * 6670.patch
+
+- Update to 5.9
+- The Spot Removal tool (Detail tab) was added, for removing dust specks and small objects.
+- The Color Appearance & Lighting tool (Advanced tab), formerly known as CIECAM02, now includes CAM16.
+  By taking into account the conditions of the photographed scene and the conditions under which the image is viewed, it allows you to adjust the image in a way which matches human color perception.
+- The Local Adjustments tool (Local tab) was added, for performing a wide range of operations on an area of the image determined by its geometry or color.
+- The Wavelet Levels tool (Advanced tab) received various improvements.
+- The White Balance tool (Color tab) received a new automatic white balance method named "temperature correlation" (the old one was renamed to "RGB grey").
+- The Film Negative tool (Color tab) received various improvements including support for non-raw files.
+- The Preprocess White Balance tool (Raw tab) was added, allowing you to specify whether channels should be balanced automatically or whether the white balance values recorded by the camera should be used instead.
+- A new Perspective Correction tool (Transform tab) was added which includes an automated perspective correction feature.
+- The Main Histogram was improved with new modes: waveform, vectorscope and RGB parade.
+- Improvements to the Inspect feature (File Browser tab).
+- New dual-demosaicing methods in the Demosaicing tool (Raw tab).
+- The Haze Removal tool (Detail tab) received a saturation adjuster.
+- The RawTherapee theme was improved, including changes to make it easier to see which tools are enabled.
+- The Navigator (Editor tab) can now be resized.
+- The Resize tool (Transform tab) now allows to resize by the long or short edge.
+- The Crop tool (Transform tab) received a "centered square" crop guide, useful when the resulting non-square image will also be used on social media which crop to a square format.
+- The Pixel Shift demosaicing method (Raw tab) now allows using an average of all frames for regions with motion.
+- Added or improved support for cameras, raw formats and color profiles:
+  Canon EOS 100D / Rebel SL1 / Kiss X7, Canon EOS 1DX Mark III, Canon EOS 2000D / Rebel T7 / Kiss X90,
+  Canon EOS 400D DIGITAL, Canon EOS 5D Mark II, Canon EOS 5D Mark IV (DCP), Canon EOS 90D (DCP),
+  Canon EOS M6 Mark II (DCP), Canon EOS R (DCP), Canon EOS R3, R7 and R10, Canon EOS R5 (DCP), Canon EOS R6 (DCP),
+  Canon EOS RP, Canon EOS-1D Mark III, Canon EOS-1Ds, Canon EOS-1Ds Mark II, Canon PowerShot G1 X Mark II (DCP),
+  Canon PowerShot G9 X Mark II, Canon PowerShot S120 (DCP), Canon PowerShot SX50 HS, Canon PowerShot SX70 HS, DJI FC3170,
+  FUJIFILM X-A5 (DCP), FUJIFILM X-E4, FUJIFILM X-H1 (DCP), FUJIFILM X-PRO2, FUJIFILM X-PRO3 (DCP), FUJIFILM X-S10,
+  FUJIFILM X-T1, FUJIFILM X-T100, FUJIFILM X-T2, FUJIFILM X-T3 (DCP), FUJIFILM X-T30, FUJIFILM X-T4, FUJIFILM X100V,
+  Fujifilm GFX 100, Fujifilm GFX100S though lossy compression and alternative crop modes (e.g. 4:3) are not supported yet,
+  Fujifilm X-A20, Fujifilm X-T4, HASSELBLAD NEX-7 (Lunar), Hasselblad L1D-20c (DJI Mavic 2 Pro),
+  Improved support for the Canon CR3 raw format, added support for compressed files, affects Canon EOS M50, R, R5, R6 and 1D X Mark III, etc.,
+  LEICA C-LUX, LEICA CAM-DC25, LEICA D-LUX 7, LEICA M8, LEICA V-LUX 5, Leica SL2-S, NIKON COOLPIX P1000, NIKON D500 (DCP), NIKON D5300 (DCP),
+  NIKON D610 (DCP), NIKON D7100 (DCP), NIKON D7500 (DCP), NIKON D800 (DCP), NIKON D850 (DCP), NIKON Z 6 (DCP), NIKON Z 7 (DCP), Nikon 1 J4,
+  Nikon COOLPIX P950, Nikon D2Hs, Nikon D2Xs, Nikon D300s, Nikon D3500, Nikon D5100, Nikon D6, Nikon D70s, Nikon D780, Nikon D810A, Nikon Z 5,
+  Nikon Z 50 (DCP), Nikon Z 6II, Nikon Z 7II, Nikon Z fc, OLYMPUS E-M10 Mark IV, OLYMPUS E-M1 Mark III, OLYMPUS E-M1X, OLYMPUS E-M5 Mark II (DCP),
+  OLYMPUS E-M5 Mark III, OLYMPUS E-PL10, OLYMPUS E-PL9, OLYMPUS Stylus 1, OLYMPUS Stylus 1s, OLYMPUS TG-6, PENTAX K-50 (DCP), PENTAX K10D,
+  Panasonic DC-FZ1000M2, Panasonic DC-FZ80, Panasonic DC-FZ81, Panasonic DC-FZ82, Panasonic DC-FZ83, Panasonic DC-G100, Panasonic DC-G110,
+  Panasonic DC-G90, Panasonic DC-G95, Panasonic DC-G99, Panasonic DC-S1H, Panasonic DC-S5 (DCP), Panasonic DC-TZ95, Panasonic DC-ZS80,
+  Panasonic DMC-TZ80, Panasonic DMC-TZ85, Panasonic DMC-ZS60, RICOH PENTAX K-1 Mark II, RICOH PENTAX K-3 Mark III, SONY ILCE-9 (DCP),
+  SONY NEX-7, Samsung Galaxy S7, Sigma fp, Sony DCZV1B, Sony DSC-HX95, Sony DSC-HX99, Sony DSC-RX0, Sony DSC-RX0M2, Sony DSC-RX100,
+  Sony DSC-RX100M5A, Sony DSC-RX100M6, Sony DSC-RX100M7, Sony DSC-RX10M2, Sony DSC-RX10M3, Sony DSC-RX10M4, Sony DSC-RX1R, Sony ILCE-1,
+  Sony ILCE-6100, Sony ILCE-6400 (DCP), Sony ILCE-6600 (DCP), Sony ILCE-7C, Sony ILCE-7M3, Sony ILCE-7M4, Sony ILCE-7RM4 (DCP),
+  Sony ILCE-7SM3, Sony ILCE-9M2, Sony NEX-F3, Sony SLT-A99V
+- Removed patches (fix-glibc_234-build.patch and fix-segfault-on-exit.patch) as the changes are already integrated.
+
raylib
+- Update to 4.5.0:
+  * NEW Improved ANGLE support on Desktop platforms: Support for OpenGL ES 2.0 on Desktop platforms (Windows,
+    Linux, macOS) has been reviewed by @wtnbgo GitHub user. Now raylib can be compiled on desktop for OpenGL
+    ES 2.0 and linked against ANGLE. This small addition open the door to building raylib for all ANGLE
+    supported backends: Direct3D 11, Vulkan and Metal. Please note that this new feature is still experimental
+    and requires further testing!
+  * NEW Camera module: A brand new implementation from scratch for rcamera module, contributed by @Crydsch
+    GitHub user! New camera system is simpler, more flexible, more granular and more extendable. Specific camera
+    math transformations (movement/rotation) have been moved to individual functions, exposing them to users if
+    required. Global state has been removed from the module and standalone usage has been greatly improved; now
+    rcamera.h single-file header-only library can be used externally, independently of raylib. A new
+    UpdateCameraPro() function has been added to address input-dependency of UpdateCamera(), now advance users
+    have full control over camera inputs and movement/rotation speeds!
+  * NEW Support for M3D models and M3D/GLTF animations: 3d models animations support has been a limited aspect of
+    raylib for long time, some versions ago IQM animations were supported but raylib 4.5 also adds support for
+    the brand new M3D file format, including animations and the long expected support for GLTF animations! The
+    new M3D file format is simple, portable, feature complete, extensible and open source. It also provides a
+    complete set of tools to export/visualize M3D models from/to Blender! Now raylib supports up to 3 model
+    file-formats with animations: IQM, GLTF and M3D.
+  * NEW Support QOA audio format (import/export): Just a couple of months ago the new QOA file format was
+    published, a very simple, portable and open source quite-ok-audio file format. raylib already supports it,
+    added to raudio module and including audio loading from file, loading from memory, streaming from file,
+    streaming from memory and exporting to QOA audio format. Because simplicity really matters to raylib!
+  * NEW Module for compressed textures loading: rl_gputex, a portable single-file header-only small library to
+    load compressed texture file-formats (DDS, PKM, KTX, PVR, ASTC). Provided functionality is not new to raylib
+    but it was part of the raylib rtextures module, now it has been moved into a separate self-contained library,
+    improving portability. Note that this module is only intended to load compressed data from files, ready to be
+    uploaded to GPU, no compression/decompression functionality is provided. This change is a first step towards
+    a better modularization of raylib library.
+  * Reviewed rlgl module for automatic limits checking: Again, rlgl has been reviewed to simplify usage. Now
+    users do not need to worry about reaching the internal render-batch limits when they send their triangles to
+    draw 2d/3d, rlgl manages it automatically! This change allows a great simplification for other modules like
+    rshapes, rtextures and rmodels that do not need to worry about bufffer overflows and can just define as many
+    vertex as desired!
+  * Reviewed rshapes module to minimize the rlgl dependency: Now rshapes 2d shapes drawing functions only depend
+    on 6 low-level functions: rlBegin(), rlEnd(), rlVertex3f(), rlTexCoord2f(), rlNormal3f(), rlSetTexture().
+    With only those pseudo-OpenGl 1.1 minimal functionality, everything can be drawn! This improvement converts
+    rshapes module in a self-contained, portable shapes-drawing library that can be used independently of raylib,
+    as far as entry points for those 6 functions are provided by the user. It even allows to be used for software
+    rendering, with the proper backend!
+  * Added data structures validation functions: Multiple functions have been added by @RobLoach GitHub user to
+    ease the validation of raylib data structures: IsImageReady(), IsTextureReady(), IsSoundReady()... Now users
+    have a simple mechanism to make sure data has been correctly loaded, instead of checking internal structure
+    values by themselfs.
+
rdiff-backup
+- Require python3-PyYAML, python3-pylibacl, python3-xattr
+  (the latter two were Recommends only; all are runtime dependencies).
+
+- update to 2.2.4:
+  * Only very small code and documentation fixes, hopefully
+    really the last fix release of the stable branch 2.2, before
+    the development effort for v2.4 starts.
+
+- update to 2.2.3:
+  * Only small code and documentation fixes and additions,
+    probably the last fix release of the stable branch 2.2,
+    before the development effort for v2.4 starts.
+  * That's embarrassing but the last version still had a glitch
+    and the sdist package `rdiff-backup-2.2.2.tar.gz` didn't
+    contain the pre-rendered man-pages which some packagers
+    requested.
+
redis7
+- Fix CVE-2023-41053, SORT_RO may bypass ACL configuration,
+  (bsc#1215094)
+  * CVE-2023-41053.patch
+
rednotebook
+- Update to version 2.29.6
+  * Restore all keyboard shorts (#690, Jendrik Seipp).
+  2.29.5
+  * Fix: Don't try to print WebKit2 version on Windows (#686, Jendrik Seipp).
+  2.29.4
+  * Accept arbitrary WebKit2 version. Use 4.1 if available (#681, Jendrik Seipp).
+  2.29.3
+  * Make all menu items translatable (Jendrik Seipp).
+  * Packaging: install translation files under /share/locale again (#666, Jendrik Seipp).
+  2.29
+  * Document alternatives for changing the GTK theme on Windows (Ankur A Sharma, #494).
+  * Fix en_GB translations (Jendrik Seipp, #659).
+  2.28.1
+  * Require setuptools for Debian package (Jendrik Seipp).
+  2.28
+  * Remove code that uses the deprecated distutils module (Jendrik Seipp, #655, #656).
+  * Fix checking for newer versions (Jendrik Seipp).
+  * Gracefully handle unsupported locale settings (Jendrik Seipp, #613).
+  2.27.2
+  * Fix passing command line arguments (Jendrik Seipp).
+  * Update translation files (Jendrik Seipp).
+  2.27
+  * Upgrade to GTK 3.24 on Windows (Jendrik Seipp).
+  * Use external preview on Windows since embedding the preview is
+    impossible with newer GTK versions (Jendrik Seipp).
+  * Use GtkApplication class and only allow running one RedNotebook instance
+    at a time (Jendrik Seipp).
+  * Add support for GtkSourceView 4 (Jendrik Seipp).
+  * Raise minimum Python version to 3.6 (Jendrik Seipp).
+  * Add more languages to Windows installer (Jendrik Seipp).
+  2.26
+  * Fix issue #632 by skipping obsolete Python function (Jendrik Seipp).
+  * Fix: only try to load CEF Python on Windows (Jendrik Seipp).
+  * Update Turkish translation (sabriunal).
+  2.25
+  * Use icon names instead of GTK stock icons to support newer GTK versions (Jendrik Seipp).
+  * Handle several GTK deprecation warnings (Jendrik Seipp).
+  2.24
+  * Revert to plain naming scheme for data files since reverse DNS naming causes
+    problems (#611, Phil Wyett).
+  2.23
+  * Check that a newly written month file is valid before deleting the old month file.
+  * Rename "autostart" file. Please reenable autostart option in preferences if you
+    want RedNotebook to run on system startup.
+  * Fix Python crash on program start (#583, Max Krummenacher).
+  * Prevent save failures on network and cloud drives (#593, Robert Little).
+  * Add script for importing entries (#571, Cary Gravel).
+  * Revamp packaging for Debian (#599, #600, Phil Wyett).
+  * Fix continuous integration tests.
+
renderdoc
+- Update to version 1.28
+  * Improved capture writing process for larger captures especially
+  on Vulkan & D3D12 to improve the time taken to write a capture to disk.
+  * Added a 'soft memory limit' capture option to reduce the chance
+  of out-of-memory errors during capture, currently implemented
+  only for Vulkan due to Linux and Android being platforms prone to OOM.
+  * Tweaked the display of checkboxes with RenderDoc's style to
+  display with an X, for the sake of the low contrast dark theme
+  where checkbox fills were not as clear as the normal light theme.
+  * Add support for glCopyImageSubData on GLES copying from
+  uncompressed to compressed textures.
+  * Add support for several vulkan extensions:
+  - VK_EXT_provoking_vertex
+  - VK_EXT_attachment_feedback_loop_dynamic_state
+  - VK_EXT_image_2d_view_of_3d
+
+- Update to version 1.27
+  * Security fixes:
+  - CVE-2023-33863: renderdoc: integer overflow to heap-based buffer overflow
+  - CVE-2023-33864: renderdoc: integer underflow to heap-based buffer overflow
+  - CVE-2023-33865: renderdoc: symlink vulnerability in /tmp/RenderDoc
+  * D3D12: Add support for new SDK 1.610.1:
+  * New state functionality
+  * New sampler creation parameters and PSO chunks
+  * New barrier API
+  * All: Show explicit dropdown arrow for tool buttons with menus.
+  * All: Report Windows 11 separately in analytics.
+  * Vulkan & D3D12: Optimisations to capture time overhead and GPU Syncs.
+  * D3D11: Disable query for undocumented internal D3D interface in composition API.
+
+- Update to version 1.26
+  * OpenGL: Pixel history is now supported on OpenGL.
+  * Vulkan: Improve the heuristic for when to use a GPU readback for
+    reading mapped memory over CPU reads.
+  * D3D12: Enable that same heuristic that was accidentally disabled in
+    a previous release.
+  * D3D12: DXIL handling refactored once again, to more closely clone
+    LLVM's codebase and be more reliable at editing/patching.
+
+- Update to version 1.25
+  * All: nvidia counters can now be obtained via the performance counter
+    viewer. This requires the manual installation of the nvidia SDK
+    obtained separately.
+  * Python: The bindings now report not-equal instead of throwing an
+    exception when comparing between incompatible types.
+  * Android: Change listing of Android packages for new Android version
+    that requires different parameters.
+  * D3D12: Resource usage depends less on root signatures and more on
+    shader reflection, which should reduce false positives of resources
+    being reported as used on events when they are bound but unused.
+  * Vulkan: Display depth resolve textures in texture viewer thumbnails.
+  * Vulkan: Add support for several extensions:
+  - VK_EXT_rasterization_order_attachment_access
+  - VK_EXT_acquire_drm_display
+  - VK_EXT_surface_maintenance1
+  - VK_EXT_swapchain_maintenance1
+  - VK_EXT_border_color_swizzle
+  - VK_EXT_non_seamless_cube_map
+  - VK_EXT_depth_clamp_zero_one
+  - VK_EXT_image_view_min_lod
+
resolv_wrapper
+- Fix building with cmocka >= 1.1.6
+  * Added resolv_wrapper-fix-cmocka-1.1.6+-support.patch
+
resource-agents
+- Fileystem resource fails due to sed command (bsc#1213083)
+  Add upstream patch:
+  0001-Filesystem-list_mounts-fix-mount-command-output-pars.patch
+
restic
+- Add missing vendor.tar.gz
+
+- Update to version 0.16.0
+  A very long list of improvements for all the details see
+  https://github.com/restic/restic/releases/tag/v0.16.0
+
+- Update to version 0.15.2
+  * Update golang.org/x/net to address CVE-2022-41723
+  * Sanitize filenames printed by backup during processing
+  * Make dump interpret --host and --path correctly
+  * Correct number of blocks reported in mount point
+  * Minimize risk of spurious filesystem loops with mount
+  * Add release binaries for riscv64 architecture on Linux
+  * Upgrade Minio to version 7.0.49
+
robin-map
+- Update to version 1.2.1: Fix missing project version increment in CMake.
+- Changes of version 1.2.0:
+  * Fix a rare but critical bug which only occurs when a very long collision
+    chain (> 32 767) occurs due to a poor hash function
+    (gh#Tessil/robin-map#52).
+  * Replace deprecated std::aligned_storage since C++23 by alignas
+  (gh#Tessil/robin-map#61).
+  * Raise DIST_FROM_IDEAL_BUCKET_LIMIT to 8192.
+  * Clear and shrink the moved hash table in the move operator to be coherent
+    with the move constructor.
+  * When using C++17, std::launder the reinterpreted pointer from
+    std::aligned_storage to adapt to the change of object model introduced in
+    P0137R1. Fix potential but very unlikely undefined behaviour.
+  * When exceptions are disabled, only print the error message when
+    defined(TSL_DEBUG) instead of !defined(NDEBUG).
+  * Check that bucket_count doesn't exceed max_bucket_count() after the
+    constructor initialization.
+
rofi-calc
+- Update to 2.2.0:
+  * qcalc spawning behavior change
+  * Add --automatic-save-to-history option
+  * Fix memory leak from #66
+
roundcubemail
+- update to 1.6.3 (bsc#1215433)
+  * Fix bug where installto.sh/update.sh scripts were removing some
+    essential options from the config file (#9051)
+  * Update jQuery-UI to version 1.13.2 (#9041)
+  * Fix regression that broke use_secure_urls feature (#9052)
+  * Fix potential PHP fatal error when opening a message with
+    message/rfc822 part (#8953)
+  * Fix bug where a duplicate <title> tag in HTML email could cause some
+    parts being cut off (#9029)
+  * Fix bug where a list of folders could have been sorted
+    incorrectly (#9057)
+  * Fix regression where LDAP addressbook 'filter' option was
+    ignored (#9061)
+  * Fix wrong order of a multi-folder search result when sorting by
+    size (#9065)
+  * Fix so install/update scripts do not require PEAR (#9037)
+  * Fix regression where some mail parts could have been decoded
+    incorrectly, or not at all (#9096)
+  * Fix handling of an error case in Cyrus IMAP BINARY FETCH, fallback to
+    non-binary FETCH (#9097)
+  * Fix PHP8 deprecation warning in the reconnect plugin (#9083)
+  * Fix "Show source" on mobile with x_frame_options = deny (#9084)
+  * Fix various PHP warnings (#9098)
+  * Fix deprecated use of ldap_connect() in password's ldap_simple driver (#9060)
+  * Fix cross-site scripting (XSS) vulnerability in handling of linkrefs
+    in plain text messages
+
+- update to 1.6.2
+  * Add Uyghur localization
+  * Fix regression in OAuth request URI caused by use of REQUEST_URI
+    instead of SCRIPT_NAME as a default (#8878)
+  * Fix bug where false attachment reminder was displayed on HTML mail
+    with inline images (#8885)
+  * Fix bug where a non-ASCII character in app.js could cause error in
+    javascript engine (#8894)
+  * Fix JWT decoding with url safe base64 schema (#8890)
+  * Fix bug where .wav instead of .mp3 file was used for the new mail
+    notification in Firefox (#8895)
+  * Fix PHP8 warning (#8891)
+  * Fix support for Windows-31J charset (#8869)
+  * Fix so LDAP VLV option is disabled by default as documented (#8833)
+  * Fix so an email address with name is supported as input to the
+    managesieve notify :from parameter (#8918)
+  * Fix Help plugin menu (#8898)
+  * Fix invalid onclick handler on the logo image when using non-array
+    skin_logo setting (#8933)
+  * Fix duplicate recipients in "To" and "Cc" on reply (#8912)
+  * Fix bug where it wasn't possible to scroll lists by clicking middle
+    mouse button (#8942)
+  * Fix bug where label text in a single-input dialog could be partially
+    invisible in some locales (#8905)
+  * Fix bug where LDAP (fulltext) search didn't work without 'search_fields'
+    in config (#8874)
+  * Fix extra leading newlines in plain text converted from HTML (#8973)
+  * Fix so recipients with a domain ending with .s are allowed (#8854)
+  * Fix so vCard output does not contain non-standard/redundant TYPE=OTHER
+    and TYPE=INTERNET (#8838)
+  * Fix QR code images for contacts with non-ASCII characters (#9001)
+  * Fix PHP8 warnings when using list_flags and list_cols properties by plugins (#8998)
+  * Fix bug where subfolders could loose subscription on parent folder rename (#8892)
+  * Fix connecting to LDAP using an URI with ldapi:// scheme (#8990)
+  * Fix insecure shell command params handling in cmd_learn driver of markasjunk plugin (#9005)
+  * Fix bug where some mail headers didn't work in cmd_learn driver of markasjunk plugin (#9005)
+  * Fix PHP fatal error when importing vcf file using PHP 8.2 (#9025)
+  * Fix so output of log_date_format with microseconds contains time in
+    server time zone, not UTC
+
rsign2
+- Update to 0.6.3
+  * support passwordless secret keys
+  * dependencies updated
+- Bump minimum Rust version to 1.64
+
rtl8812au
+- Update to version 5.13.6+git20230722.b5f4e6e
+  * Update wifi_regd.c
+  * support for kernel 6.4.4 due to a backport from kernel 6.5
+  * update docs
+  * support for kernel 6.5
+  * revert ping fixes
+  * fix delay that showed with ping
+
+- Update to version 5.13.6+git20230511.765d4e4
+  * TP-Link - T4UHP_US VID/PID problem
+  * Update supported-device-IDs
+  * Update usb_intf.c
+  * Add support for 2357:0122 (TP-LINK Archer T4UHP)
+  * fix this driver collide with 88x2bu due ID 7392:b822. That
+    card has a 8822B chip not 8821.
+  * kernel 6.3 support
+  * major updates to various components
+  * makefile Secure Boot support
+  * remove some dated docs
+  * upgrade installation and removal scripts
+  * support kernel 6.1
+- Drop patch already included in this version:
+  * fix_api_changes_kernel_6.1.patch
+
+- Add patch to build with Tumbleweed kernels 6.1.x:
+  * fix_api_changes_kernel_6.1.patch
+- The "kernel-source" package is removed from the BuildRequires
+  list. The much smaller "kernel-default-devel" is sufficient.
+
rubygem-rails-html-sanitizer
+- Fixing typos in CVEs corrected by prior submission
+
+- Add patch 0002_CVE-2022-23517_CVE-2022-23518_CVE-2022-23519_CVE-2022-23520.patch
+  This patch fixes 4 different CVEs:
+  * CVE-2022-23517 (bsc#1206433)
+  * CVE-2022-23518 (bsc#1206434)
+  * CVE-2022-23519 (bsc#1206435)
+  * CVE-2022-23520 (bsc#1206436)
+  In order to have the
+  0002_CVE-2022-23517_CVE-2022-23518_CVE-2022-23519_CVE-2022-23520.patch
+  working smoothly I monkey patched loofah API and crass rubygem code into
+  rails-html-sanitizer.
+
rust
+- Update to version 1.72.0 - for details see the rust1.72 package
+
rust1
-- Update to version 1.71.1
-- bsc#1213817 - CVE-2023-38497 - Cargo does not respect the umask
-  when extracting dependencies
-
-Version 1.71.0 (2023-07-13)
+- bsc#1214689 - CVE-2023-40030 - fix minor non-exploited issue in cargo
+  build timings that may allow xss from dependencies.
+  Version 1.72.0 (2023-08-24)
-- [Stabilize `raw-dylib`, `link_ordinal`, `import_name_type` and `-Cdlltool`.](https://github.com/rust-lang/rust/pull/109677/)
-- [Uplift `clippy::{drop,forget}_{ref,copy}` lints.](https://github.com/rust-lang/rust/pull/109732/)
-- [Type inference is more conservative around constrained vars.](https://github.com/rust-lang/rust/pull/110100/)
-- [Use fulfillment to check `Drop` impl compatibility](https://github.com/rust-lang/rust/pull/110577/)
+- [Replace const eval limit by a lint and add an exponential backoff warning](https://github.com/rust-lang/rust/pull/103877/)
+- [expand: Change how `#![cfg(FALSE)]` behaves on crate root](https://github.com/rust-lang/rust/pull/110141/)
+- [Stabilize inline asm for LoongArch64](https://github.com/rust-lang/rust/pull/111235/)
+- [Uplift `clippy::undropped_manually_drops` lint](https://github.com/rust-lang/rust/pull/111530/)
+- [Uplift `clippy::invalid_utf8_in_unchecked` lint](https://github.com/rust-lang/rust/pull/111543/)
+- [Uplift `clippy::cast_ref_to_mut` lint](https://github.com/rust-lang/rust/pull/111567/)
+- [Uplift `clippy::cmp_nan` lint](https://github.com/rust-lang/rust/pull/111818/)
+- [resolve: Remove artificial import ambiguity errors](https://github.com/rust-lang/rust/pull/112086/)
+- [Don't require associated types with Self: Sized bounds in `dyn Trait` objects](https://github.com/rust-lang/rust/pull/112319/)
-- [Evaluate place expression in `PlaceMention`](https://github.com/rust-lang/rust/pull/104844/),
-  making `let _ =` patterns more consistent with respect to the borrow checker.
-- [Add `--print deployment-target` flag for Apple targets.](https://github.com/rust-lang/rust/pull/105354/)
-- [Stabilize `extern "C-unwind"` and friends.](https://github.com/rust-lang/rust/pull/106075/)
-  The existing `extern "C"` etc. may change behavior for cross-language unwinding in a future release.
-- [Update the version of musl used on `*-linux-musl` targets to 1.2.3](https://github.com/rust-lang/rust/pull/107129/),
-  enabling [time64](https://musl.libc.org/time64.html) on 32-bit systems.
-- [Stabilize `debugger_visualizer`](https://github.com/rust-lang/rust/pull/108668/)
-  for embedding metadata like Microsoft's Natvis.
-- [Enable flatten-format-args by default.](https://github.com/rust-lang/rust/pull/109999/)
-- [Make `Self` respect tuple constructor privacy.](https://github.com/rust-lang/rust/pull/111245/)
-- [Improve niche placement by trying two strategies and picking the better result.](https://github.com/rust-lang/rust/pull/108106/)
-- [Use `apple-m1` as the target CPU for `aarch64-apple-darwin`.](https://github.com/rust-lang/rust/pull/109899/)
-- [Add Tier 3 support for the `x86_64h-apple-darwin` target.](https://github.com/rust-lang/rust/pull/108795/)
-- [Promote `loongarch64-unknown-linux-gnu` to Tier 2 with host tools.](https://github.com/rust-lang/rust/pull/110936/)
+- [Remember names of `cfg`-ed out items to mention them in diagnostics](https://github.com/rust-lang/rust/pull/109005/)
+- [Support for native WASM exceptions](https://github.com/rust-lang/rust/pull/111322/)
+- [Add support for NetBSD/aarch64-be (big-endian arm64).](https://github.com/rust-lang/rust/pull/111326/)
+- [Write to stdout if `-` is given as output file](https://github.com/rust-lang/rust/pull/111626/)
+- [Force all native libraries to be statically linked when linking a static binary](https://github.com/rust-lang/rust/pull/111698/)
+- [Add Tier 3 support for `loongarch64-unknown-none*`](https://github.com/rust-lang/rust/pull/112310/)
+- [Prevent `.eh_frame` from being emitted for `-C panic=abort`](https://github.com/rust-lang/rust/pull/112403/)
+- [Support 128-bit enum variant in debuginfo codegen](https://github.com/rust-lang/rust/pull/112474/)
+- [compiler: update solaris/illumos to enable tsan support.](https://github.com/rust-lang/rust/pull/112039/)
-- [Rework handling of recursive panics.](https://github.com/rust-lang/rust/pull/110975/)
-  Additional panics are allowed while unwinding, as long as they are caught before escaping
-  a `Drop` implementation, but panicking within a panic hook is now an immediate abort.
-- [Loosen `From<&[T]> for Box<[T]>` bound to `T: Clone`.](https://github.com/rust-lang/rust/pull/103406/)
-- [Remove unnecessary `T: Send` bound](https://github.com/rust-lang/rust/pull/111134/)
-  in `Error for mpsc::SendError<T>` and `TrySendError<T>`.
-- [Fix docs for `alloc::realloc`](https://github.com/rust-lang/rust/pull/108630/)
-  to match `Layout` requirements that the size must not exceed `isize::MAX`.
-- [Document `const {}` syntax for `std::thread_local`.](https://github.com/rust-lang/rust/pull/110620/)
-  This syntax was stabilized in Rust 1.59, but not previously mentioned in release notes.
+- [Document memory orderings of `thread::{park, unpark}`](https://github.com/rust-lang/rust/pull/99587/)
+- [io: soften ‘at most one write attempt’ requirement in io::Write::write](https://github.com/rust-lang/rust/pull/107200/)
+- [Specify behavior of HashSet::insert](https://github.com/rust-lang/rust/pull/107619/)
+- [Relax implicit `T: Sized` bounds on `BufReader<T>`, `BufWriter<T>` and `LineWriter<T>`](https://github.com/rust-lang/rust/pull/111074/)
+- [Update runtime guarantee for `select_nth_unstable`](https://github.com/rust-lang/rust/pull/111974/)
+- [Return `Ok` on kill if process has already exited](https://github.com/rust-lang/rust/pull/112594/)
+- [Implement PartialOrd for `Vec`s over different allocators](https://github.com/rust-lang/rust/pull/112632/)
+- [Use 128 bits for TypeId hash](https://github.com/rust-lang/rust/pull/109953/)
+- [Don't drain-on-drop in DrainFilter impls of various collections.](https://github.com/rust-lang/rust/pull/104455/)
+- [Make `{Arc,Rc,Weak}::ptr_eq` ignore pointer metadata](https://github.com/rust-lang/rust/pull/106450/)
+  Rustdoc
+-------
+- [Allow whitespace as path separator like double colon](https://github.com/rust-lang/rust/pull/108537/)
+- [Add search result item types after their name](https://github.com/rust-lang/rust/pull/110688/)
+- [Search for slices and arrays by type with `[]`](https://github.com/rust-lang/rust/pull/111958/)
+- [Clean up type unification and "unboxing"](https://github.com/rust-lang/rust/pull/112233/)
-- [`CStr::is_empty`](https://doc.rust-lang.org/stable/std/ffi/struct.CStr.html#method.is_empty)
-- [`BuildHasher::hash_one`](https://doc.rust-lang.org/stable/std/hash/trait.BuildHasher.html#method.hash_one)
-- [`NonZeroI*::is_positive`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.is_positive)
-- [`NonZeroI*::is_negative`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.is_negative)
-- [`NonZeroI*::checked_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.checked_neg)
-- [`NonZeroI*::overflowing_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.overflowing_neg)
-- [`NonZeroI*::saturating_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.saturating_neg)
-- [`NonZeroI*::wrapping_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.wrapping_neg)
-- [`Neg for NonZeroI*`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#impl-Neg-for-NonZeroI32)
-- [`Neg for &NonZeroI*`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#impl-Neg-for-%26NonZeroI32)
-- [`From<[T; N]> for (T...)`](https://doc.rust-lang.org/stable/std/primitive.array.html#impl-From%3C%5BT;+1%5D%3E-for-(T,))
-  (array to N-tuple for N in 1..=12)
-- [`From<(T...)> for [T; N]`](https://doc.rust-lang.org/stable/std/primitive.array.html#impl-From%3C(T,)%3E-for-%5BT;+1%5D)
-  (N-tuple to array for N in 1..=12)
-- [`windows::io::AsHandle for Box<T>`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for-Box%3CT%3E)
-- [`windows::io::AsHandle for Rc<T>`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for-Rc%3CT%3E)
-- [`windows::io::AsHandle for Arc<T>`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for-Arc%3CT%3E)
-- [`windows::io::AsSocket for Box<T>`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for-Box%3CT%3E)
-- [`windows::io::AsSocket for Rc<T>`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for-Rc%3CT%3E)
-- [`windows::io::AsSocket for Arc<T>`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for-Arc%3CT%3E)
+- [`impl<T: Send> Sync for mpsc::Sender<T>`](https://doc.rust-lang.org/stable/std/sync/mpsc/struct.Sender.html#impl-Sync-for-Sender%3CT%3E)
+- [`impl TryFrom<&OsStr> for &str`](https://doc.rust-lang.org/stable/std/primitive.str.html#impl-TryFrom%3C%26'a+OsStr%3E-for-%26'a+str)
+- [`String::leak`](https://doc.rust-lang.org/stable/alloc/string/struct.String.html#method.leak)
-- [`<*const T>::read`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read)
-- [`<*const T>::read_unaligned`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read_unaligned)
-- [`<*mut T>::read`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read-1)
-- [`<*mut T>::read_unaligned`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read_unaligned-1)
-- [`ptr::read`](https://doc.rust-lang.org/stable/std/ptr/fn.read.html)
-- [`ptr::read_unaligned`](https://doc.rust-lang.org/stable/std/ptr/fn.read_unaligned.html)
-- [`<[T]>::split_at`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.split_at)
+- [`CStr::from_bytes_with_nul`](https://doc.rust-lang.org/stable/std/ffi/struct.CStr.html#method.from_bytes_with_nul)
+- [`CStr::to_bytes`](https://doc.rust-lang.org/stable/std/ffi/struct.CStr.html#method.to_bytes)
+- [`CStr::to_bytes_with_nul`](https://doc.rust-lang.org/stable/std/ffi/struct.CStr.html#method.to_bytes_with_nul)
+- [`CStr::to_str`](https://doc.rust-lang.org/stable/std/ffi/struct.CStr.html#method.to_str)
-- [Allow named debuginfo options in `Cargo.toml`.](https://github.com/rust-lang/cargo/pull/11958/)
-- [Add `workspace_default_members` to the output of `cargo metadata`.](https://github.com/rust-lang/cargo/pull/11978/)
-- [`cargo add` now considers `rust-version` when selecting packages.](https://github.com/rust-lang/cargo/pull/12078/)
-- [Automatically inherit workspace fields when running `cargo new`/`cargo init`.](https://github.com/rust-lang/cargo/pull/12069/)
-  Rustdoc
--------
-- [Add a new `rustdoc::unescaped_backticks` lint for broken inline code.](https://github.com/rust-lang/rust/pull/105848/)
-- [Support strikethrough with single tildes.](https://github.com/rust-lang/rust/pull/111152/) (`~~old~~` vs. `~new~`)
-  Misc
-----
+- Enable `-Zdoctest-in-workspace` by default. When running each documentation
+  test, the working directory is set to the root directory of the package the
+  test belongs to.
+  [docs](https://doc.rust-lang.org/nightly/cargo/commands/cargo-test.html#working-directory-of-tests)
+  [#12221](https://github.com/rust-lang/cargo/pull/12221)
+  [#12288](https://github.com/rust-lang/cargo/pull/12288)
+- Add support of the "default" keyword to reset previously set `build.jobs`
+  parallelism back to the default.
+  [#12222](https://github.com/rust-lang/cargo/pull/12222)
-- [Remove structural match from `TypeId`.](https://github.com/rust-lang/rust/pull/103291/)
-  Code that uses a constant `TypeId` in a pattern will potentially be broken.
-  Known cases have already been fixed -- in particular, users of the `log`
-  crate's `kv_unstable` feature should update to `log v0.4.18` or later.
-- [Add a `sysroot` crate to represent the standard library crates.](https://github.com/rust-lang/rust/pull/108865/)
-  This does not affect stable users, but may require adjustment in tools that build their own standard library.
-- [Cargo optimizes its usage under `rustup`.](https://github.com/rust-lang/cargo/pull/11917/) When
-  Cargo detects it will run `rustc` pointing to a rustup proxy, it'll try bypassing the proxy and
-  use the underlying binary directly. There are assumptions around the interaction with rustup and
-  `RUSTUP_TOOLCHAIN`. However, it's not expected to affect normal users.
-- [When querying a package, Cargo tries only the original name, all hyphens, and all underscores to
-  handle misspellings.](https://github.com/rust-lang/cargo/pull/12083/) Previously, Cargo tried each
-  combination of hyphens and underscores, causing excessive requests to crates.io.
-- Cargo now [disallows `RUSTUP_HOME`](https://github.com/rust-lang/cargo/pull/12101/) and
-  [`RUSTUP_TOOLCHAIN`](https://github.com/rust-lang/cargo/pull/12107/) in the `[env]` configuration
-  table. This is considered to be not a use case Cargo would like to support, since it will likely
-  cause problems or lead to confusion.
+- [Alter `Display` for `Ipv6Addr` for IPv4-compatible addresses](https://github.com/rust-lang/rust/pull/112606/)
+- Cargo changed feature name validation check to a hard error. The warning was
+  added in Rust 1.49. These extended characters aren't allowed on crates.io, so
+  this should only impact users of other registries, or people who don't publish
+  to a registry.
+  [#12291](https://github.com/rust-lang/cargo/pull/12291)
sad
+- Update to version 0.4.23:
+  * use python3 uuid
+  * update frozenstr literal
+  * Bump uuid from 1.2.2 to 1.3.1
+  * Bump clap from 4.0.27 to 4.1.14
+  * Bump tokio from 1.23.0 to 1.25.0
+  * Bump which from 4.3.0 to 4.4.0
+  * Bump regex from 1.7.0 to 1.7.1
+  * Bump tokio from 1.22.0 to 1.23.0
+  * Bump async-channel from 1.7.1 to 1.8.0
+  * Bump clap from 4.0.18 to 4.0.27
+  * Bump aho-corasick from 0.7.19 to 0.7.20
+  * Bump tokio from 1.21.2 to 1.22.0
+  * Bump uuid from 1.2.1 to 1.2.2
+  * Bump regex from 1.6.0 to 1.7.0
+  * Bump futures from 0.3.24 to 0.3.25
+  * Bump clap from 4.0.4 to 4.0.18
+  * Bump uuid from 1.1.2 to 1.2.1
+  * update fmt
+  * Bump clap from 3.2.19 to 4.0.4
+  * Bump tokio from 1.20.1 to 1.21.2
+  * Bump aho-corasick from 0.7.18 to 0.7.19
+  * Bump which from 4.2.5 to 4.3.0
+  * Bump clap from 3.2.17 to 3.2.19
+  * Bump futures from 0.3.23 to 0.3.24
+  * Bump futures from 0.3.21 to 0.3.23
+  * Bump clap from 3.2.5 to 3.2.17
+  * Bump async-channel from 1.6.1 to 1.7.1
+  * Bump tokio from 1.19.2 to 1.20.1
+  * Bump regex from 1.5.6 to 1.6.0
+  * Bump tokio from 1.18.2 to 1.19.2
+
sakura
+- update to 3.8.7:
+  * update translations
+  * Fixed bug #2011352: pressing tab causes blinking in taskbar
+
-- update to 3.1.3:
-  * no upstream changelog.
-- Removed sakura-gtk.patch that was merged into upstream.
-
scite
+- Update to version 5.3.7:
+  * Add discover.properties property to enable
+    command.discover.properties which is now disabled by default
+    as a security measure since command.discover.properties may
+    perform any command silently and automatically and can be set
+    in local properties for a shared directory or downloaded
+    project. Bug #2387.
+  * Add ZoomFactor property that may be displayed in status bar.
+  * Remove nimrod.properties file as it has been superseded by
+    nim.properties.
+
+- Update to version 5.3.6:
+  * Fixes a key binding problem on GTK.
+  * Improves support for Bash, Batch, F#, Hollywood, and VB.
+
+- Update to version 5.3.5:
+  * C++: Fix failure to recognize keywords containing upper case.
+  * GDScript: Support % and $ node paths.
+- Add scite-fix-missing-include.patch: Add missing includes.
+
+- Update to version 5.3.3:
+  * Add 0-based byte position properties SelectionStart and
+    SelectionEnd that may help when developing scripts as they
+    correspond to Scintilla arguments.
+  * Fix slow-down with folding on huge documents that occurred with
+    version 4.1.6.
+
scitokens-cpp
+- disable error on deprecated warnings of openssl
+
scummvm
+- Update to 2.7.1
+  * see https://downloads.scummvm.org/frs/scummvm/2.7.1/ReleaseNotes.html for notes
+- fix build on Leap by requiring libieee1284-devel only for tumbleweed
+
+- Build with support for OPL2LPT / OPL3LPT audio devices
+
+- Update to 2.7.0
+  lots of addition and bugfixes, please see https://downloads.scummvm.org/frs/scummvm/2.7.0/ReleaseNotes.html
+
seatd
+- Update to 0.8.0
+  * noop: Return seat0 as the seat name
+  * noop: Additional open flags for `open(2)`
+  * noop: initialize initial_setup
+  * drm: Support drm-subtree drivers on FreeBSD
+  * man: document SEATD_VTBOUND
+  * man: add missing arg in -n syntax
+
+- Update to 0.7.0:
+  * Support for NetBSD and wscons devices
+  * Fix for a polling bug in the logind libseat backend
+  * Removal of SEATD_SOCK and runtime socket path configuration
+  * Removal of SEATD_LOGLEVEL, replaced by a command-line argument
+
sevctl
+- Update to sevctl v0.4.3 (jsc#4981)
+  - Add show commands for identifier and VCEK URL
+  - Improve processor identification
+  - Add 'sevctl measurement build'
+  - Expand coverage for all AMD CPU model numbers
+  - Adjust to use sev VMSA result changes
+  - Add vmsa show command
+  - Implement vmsa update subcommand
+  - Implement vmsa build subcommand
+  - Detect and use host arch's CPU generation
+  - Support HTTP/HTTPS proxies
+- Spec: Upgrade vendored dependencies
+- Spec: Utilize upstream git tags
+
+- BuildRequire rubygem(asciidoctor) instead of %{rubygem
+  asciidoctor}" the %rubygem} macro expands to all ruby versions,
+  wheras we are perfectly fine with getting only one version for
+  asciidoctor into the buildroot.
+
+- Update to v0.3.2 + git commit 255d370
+    dependency: Enable vendored feature for openssl
+    Add show commands for identifier, SNP status and VCEK URL.
+    readme: Add some basic provisioning instructions
+    Update sev library to version 1.1.0
+    ok: Find singular model and family on processor ID
+
shadowsocks-libev
+- Require the mbedtls-devel version to be lower than 3.0.0
+
singular
+- Update to release 4.3.1p3
+  No changelog provided
+- Drop unused latex2html and cmake BuildRequires
+- Drop unnecessary 0001-src-remove-__DATE__-__TIME__.patch,
+  handllded by SOURCE_DATE_EPOCH
+- Drop upstream
+  0001-src-resolve-strict-aliasing-violation-in-ndbm.cc.patch
+
sleuthkit
+- update to 4.12.0
+  * Add Linux LVM support
+  * Logical File System support (a folder structure is parsed by TSK libraries)
+  * Many small fixes
+- update to 4.11.1
+  * C/C++:
+  * Several fixes from @joachimmetz
+  * NTFS Decompression bug fix from @kastonework and @uckelman-sf
+  * Java:
+  * Fixed connection leak when making OS Accounts in bridge
+  * OsAccount updates for instance types and special Windows SIDs
+    Fixed issue with duplicate value in Japanese timeline translation
+- update to 4.11.0
+  * C/C++:
+  * Added checks at various layers to detect encrypted file systems and disks to give more useful error messages.
+  * Added checks to detect file formats that are not supported (such as AD1, ZIP, etc.) to give more useful error messages.
+  * Added tsk_imageinfo tool that detects if an image is supported by TSK and if it is encrypted.
+  * Add numerous bound checks from @joachimmetz
+  * Clarified licenses as pointed out by @joachimmetz
+  * Java:
+  * Updated from Schema 8.6 to 9.1.
+  * Added tables and classes for OS Accounts and Realms (Domains).
+  * Added tables and classes for Host Addresses (IP, MAC, etc.).
+  * Added tables and classes for Analysis Results vs Data Artifacts by adding onto BlackboardArtifacts.
+  * Added tables and classes for Host and Person to make it easier to group data sources.
+  * Added static types for standard artifact types.
+  * Added File Attribute table to allow custom information to be stored for each file.
+  * Made ordering of getting lock and connection consistent.
+  * Made the findFile methods more efficient by using extension (which is indexed).
+- add 0001-build-support-libewf-V3.patch to support the experimental release branch of libewf
+- add sleuthkit-4.12.0_add-missing-include-file.patch
+
slick-greeter-branding-openSUSE
+- Install gschema override with distribution default priority of
+  20
+
slurm
+- Updated to 23.02.4 with the following changes:
+  * Bug Fixes:
+    + Fix main scheduler loop not starting after a failover to backup
+    controller. Avoid slurmctld segfault when specifying
+    `AccountingStorageExternalHost` (bsc#1214983).
+    + Fix sbatch return code when `--wait` is requested on a job array.
+    + Fix collected `GPUUtilization` values for `acct_gather_profile` plugins.
+    + Fix `slurmrestd` handling of job hold/release operations.
+    + Fix step running indefinitely when slurmctld takes more than
+    `MessageTimeout` to respond. Now, `slurmctld` will cancel the step when
+    detected, preventing following steps from getting stuck waiting for
+    resources to be released.
+    + Fix regression to make `job_desc.min_cpus` accurate again in `job_submit`
+    when requesting a job with `--ntasks-per-node`.
+    + Fix handling of `ArrayTaskThrottle` in backfill.
+    + Fix regression in 23.02.2 when checking gres state on `slurmctld`
+    startup  or reconfigure. Gres changes in the configuration were not
+    updated on slurmctld startup. On startup or reconfigure, these messages
+    were present in the log: `"error: Attempt to change gres/gpu Count`".
+    + Fix potential double count of gres when dealing with limits.
+    + Fix `slurmstepd` segfault when `ContainerPath` is not set in `oci.conf`
+    + Fixed an issue where jobs requesting licenses were incorrectly rejected.
+    + `scrontab` - Fix cutting off the final character of quoted variables.
+    + `smail` - Fix issues where e-mails at job completion were not being sent.
+    + `scontrol/slurmctld` - fix comma parsing when updating a reservation's
+    nodes.
+    + Fix `--gpu-bind=single binding` tasks to wrong gpus, leading to some gpus
+    having more tasks than they should and other gpus being unused.
+    + Fix regression in 23.02 that causes slurmstepd to crash when `srun`
+    requests more than `TreeWidth` nodes in a step and uses the pmi2 or
+    pmix plugin.
+    + `job_container/tmpfs` - Fix `%h` and `%n` substitution in `BasePath`
+    where `%h` was substituted as the NodeName instead of the hostname,
+    and %n was substituted as an empty string.
+    + Fix regression where `--cpu-bind=verbose` would override
+    `TaskPluginParam`.
+    + `scancel` - Fix `--clusters/-M` for federations. Only filtered jobs
+    (e.g. `-A`, `-u`, `-p`, etc.) from the specified clusters will be
+    canceled, rather than all jobs in the federation. Specific jobids
+    will still be routed to the origin cluster for cancellation.
+  * Other changes:
+    + Make spank `S_JOB_ARGV` item value hold the requested command `argv`
+    instead of the `srun --bcast` value when `--bcast` requested (only in
+    local context).
+    + `scontrol` - Permit changes to StdErr and StdIn for pending jobs.
+    + `scontrol` - Reset `std`{`err`,`in`,`out`} when set to empty string.
+    + `slurmrestd` - mark environment as a required field for job submission
+    descriptions.
+    + `slurmrestd` - avoid dumping null in OpenAPI schema required fields.
+    + `data_parser/v0.0.39` - avoid rejecting valid `memory_per_node` formatted
+    as dictionary provided with a job description.
+    + `data_parser/v0.0.39` - avoid rejecting valid `memory_per_cpu` formatted
+    as dictionary provided with a job description.
+    + `slurmrestd` - Return HTTP error code 404 when job query fails.
+    + `slurmrestd` - Add return schema to error response to job and license
+    query.
+    + Change the log message warning for rate limited users from debug to
+    verbose.
+    + `cgroup/v2` - Avoid capturing log output for ebpf when constraining
+    devices,
+    as this can lead to inadvertent failure if the log buffer is too small.
+    + Added error message when attempting to use sattach on batch or extern
+    steps.
+    + Reject job `ArrayTaskThrottle` update requests from unprivileged users.
+    + `data_parser/v0.0.39` - populate description fields of property objects
+    in generated OpenAPI specifications where defined.
+    + `slurmstepd` - Avoid segfault caused by `ContainerPath` not being
+    terminated by `/` in `oci.conf`.
+    + `data_parser/v0.0.39` - Change `v0.0.39_job_info` response to tag
+    `exit_code` field as being complex instead of only an unsigned integer.
+- Updated to 23.02.3 with the following changes:
+  * Bug Fixes:
+    + `slurmctld` - Fix backup slurmctld crash when it takes control
+    multiple times.
+    + Fix regression in 23.02.2 that ignored the partition `DefCpuPerGPU`
+    setting on the first pass of scheduling a job requesting
+    `--gpus --ntasks`.
+    + `srun` - fix issue creating regular and interactive steps because
+    environment variables were incorrectly set on non-HetSteps.
+    + Fix dynamic nodes getting stuck in allocated states when reconfiguring.
+    + Fix regression in 23.02.2 that set the `SLURM_NTASKS` environment
+    variable in sbatch jobs from `--ntasks-per-node` when `--ntasks` was not
+    requested.
+    + Fix regression in 23.02 that caused sbatch jobs to set the wrong number
+    of tasks when requesting `--ntasks-per-node` without `--ntasks`, and also
+    requesting one of the following options: `--sockets-per-node`,
+    `--cores-per-socket`, `--threads-per-core` (or `--hint=nomultithread`),
+    or `-B,--extra-node-info`.
+    + Fix double counting suspended job counts on nodes when reconfiguring,
+    which prevented nodes with suspended jobs from being powered down or
+    rebooted once the jobs completed.
+    + Fix backfill not scheduling jobs submitted with `--prefer` and
+    `--constraint` properly.
+    + mpi/pmix - fix regression introduced in 23.02.2 which caused PMIx shmem
+    backed files permissions to be incorrect.
+    + api/submit - fix memory leaks when submission of batch regular jobs
+    or batch HetJobs fails (response data is a return code).
+    + Fix regression in 23.02 leading to error() messages being sent at `INFO`
+    instead of `ERR` in syslog.
+    + Fix `TresUsageIn[Tot|Ave]` calculation for `gres/gpumem` and
+    `gres/gpuutil`.
+    + Fix issue in the gpu plugins where gpu frequencies would only be set if
+    both gpu memory and gpu frequencies were set, while one or the other
+    suffices.
+    + Fix reservations group ACL's not working with the root group.
+    + Fix updating a job with a ReqNodeList greater than the job's node count.
+    + Fix inadvertent permission denied error for `--task-prolog` and
+    `--task-epilog` with filesystems mounted with `root_squash`.
+    + Fix missing detailed cpu and gres information in json/yaml output from
+    `scontrol`, `squeue` and `sinfo`.
+    + Fix regression in 23.02 that causes a failure to allocate job steps that
+    request `--cpus-per-gpu` and gpus with types.
+    + Fix potentially waiting indefinitely for a defunct process to finish,
+    which affects various scripts including `Prolog` and `Epilog`. This could
+    have various symptoms, such as jobs getting stuck in a completing state.
+    + Fix losing list of reservations on job when updating job with list of
+    reservations and restarting the controller.
+    + Fix nodes resuming after down and drain state update requests from
+    clients older than 23.02.
+    + Fix advanced reservation creation/update when an association that should
+    have access to it is composed with partition(s).
+    + Fix job layout calculations with `--ntasks-per-gpu`, especially when
+    `--nodes` has not been explicitly provided.
+    + Fix X11 forwarding for jobs submitted from the slurmctld host.
+    +  When a job requests `--no-kill` and one or more nodes fail during the
+    job, fix subsequent job steps unable to use some of the remaining
+    resources allocated to the job.
+    + Fix shared gres allocation when using `--tres-per-task` with tasks that
+    span multiple sockets.
+    + `auth/jwt` - Fix memory leak.
+  * Other changes:
+    + `openapi/dbv0.0.39/users` - If a default account update failed, resulting
+    in a no-op, the query returned success without any warning. Now a warning
+    is sent back to the client that the default account wasn't modified.
+    + Avoid job write lock when nodes are dynamically added/removed.
+    + `burst_buffer/lua` - allow jobs to get scheduled sooner after
+    `slurm_bb_data_in` completes.
+    + `openapi/v0.0.39` - fix memory leak in `_job_post_het_submit()`.
+    + Avoid possible `slurmctld` segfault caused by race condition with already
+    completed `slurmdbd_conn` connections.
+    + `Slurmdbd.conf` checks included conf files for 0600 permissions
+    + `slurmrestd` - fix regression "oversubscribe" fields were removed from
+    job descriptions and submissions from v0.0.39 end points.
+    + `accounting_storage/mysql` - Query for indiviual QOS correctly when you
+    have more than 10.
+    + Add warning message about ignoring `--tres-per-tasks=license` when used
+    on a step.
+    + `sshare` - Fix command to work when using `priority/basic`.
+    + Avoid loading `cli_filter` plugins outside of `salloc`/`sbatch`/`scron`/
+    `srun`. This fixes a number of missing symbol problems that can manifest
+    for executables linked against libslurm (and not `libslurmfull`).
+    + Allow cloud_reg_addrs to update dynamically registered node's addrs on
+    subsequent registrations.
+    + Revert a change in 22.05.5 that prevented tasks from sharing a core if
+    `--cpus-per-task` > threads per core, but caused incorrect accounting and
+    cpu binding. Instead, `--ntasks-per-core=1` may be requested to prevent
+    tasks from sharing a core.
+    + Correctly send `assoc_mgr` lock to mcs plugin.
+    + Avoid unnecessary `gres/gpumem` and `gres/gpuutil` `TRES` position
+    lookups.
+    + `sacct` - when printing `PLANNED` time, use end time instead of start
+    time for jobs cancelled before they started.
+    + Hold the job with "`(Reservation ... invalid)`" state reason if the
+    reservation is not usable by the job.
+    + `sbatch` - Added new `--export=NIL` option.
+- Removed:
+  * Fix-test-3.13.patch
+  * Fix-test-38.11.patch as both tests changed upstream
+
smatch
+- Update to version 1.73+20230517:
+  * checking_for_null_instead_of_err_ptr: use smatch_kernel_err_ptr.c
+  * kernel_err_ptr: hack around for_each_gpio_desc_with_flag()
+  * scripts/generisize.pl: generisize function names
+  * kernel.unreachable.turn_off: add some kunit stuff
+  * preempt_info: add __bit_spin_unlock()
+  * check_list/err_ptr: register the err_ptr code
+  * debug/units: hook in the __smatch_units() code
+  * validation/sm_err_ptr: make IS_ERR() an inline function
+  * dereference: find more cross function dereferences
+  * err_ptr_deref: re-write the check
+  * kernel_err_ptr: track error pointers in the database
+  * kernel.no_return_funcs: update to the latest linux-next functions
+  * kernel.no_return_funcs: add kunit_do_failed_assertion()
+  * comparison: store modified comparisons
+  * units: move checks to check_ file and hide under the --spammy option
+  * and much more
+
smenu
+- Version 1.3.0
+  * Fixes:
+  * Correction of an error in the calculation of the size of the longest word.
+  * Corrects the calculation of the space taken by the first direct access
+    numbers when it is explicitly specified.
+  * Increase the size of the buffer to store the scancode to prevent it
+    being truncated.
+  * Make decoding the column or row number more robust in command line analysis.
+  * Prevents the introduction of colours outside the range supported by
+    the terminal.
+  * Improvements:
+  * Add the -sb|-sbw|-show_blank_words option to help display all words
+    composed entirely of spaces.
+  * Allow selection intervals to have no start or end number.
+  * In column mode, words can now be aligned left/right or centred.
+  * When numbering is active, unnumbered words are now always filled in with
+    blanks in col/line/tab mode.
+  * The -start_pattern option has been extended so that all words matching
+    the pattern can be searched directly using the Next/previous keys,
+    without having to enter search mode.
+  * The order in which -C/-R elements appear on the command line is now
+    taken into account.
+  * In column mode, columns and/or rows can have their own colour
+    and/or style.
+  Miscellaneous:
+  * Corrections and improvements to the manual.
+  * Removal of dead code.
+  * Addition of an FAQ entry on alignments.
+  * The memory consumption has been reduced.
+  * Removal of files mistakenly left in the package.
+
+Version 1.2.0
+  * Fixes:
+  * Correction of word selections with the mouse in long lines.
+  * Fixed support for the double-click mouse delay setting.
+  * Prevention of spurious commands being sent by the mouse paste function.
+  * Allowed compilation with old glibc versions.
+  * Improvements:
+  * Redesign of the multiple selection mechanism with the possibility to undo.
+  * Improved initialization of mouse tracking modes.
+  * Miscellaneous:
+  * Corrections and improvements to the manual.
+  * Removal of dead code.
+
+- Version 1.1.0
+  * Fixes:
+  * Fix and improve the instant help (?) display.
+  * Fix and improve the substitution code.
+  * Fix and simplify the "End" key management code.
+  * Improvements:
+  * Add mouse support.
+  * Allows to shift the window's content horizontally without moving the cursor.
+  * Small adjustments in UTF-8 symbols and comments.
+  * Improve the documentation.
+  * Miscellaneous:
+  * Various code simplifications.
+
+- Update to 1.0.0:
+  * Fix and improve the content of the integrated help system.
+  * Allow multiple instances of the "-limits" option.
+
+- Version 1.0.0.RC1
+  * Fixes:
+  * Fix configure.ac for autoconf >= 2.70.
+  * Fixed a bug in the bash example in the README.
+  * Synchronization with the commit 9ddac73 of ctxopt on github.
+  * Use the right format to print size_t values (C99).
+  * Add a missing break.
+  * Fix a potential segfault when allocating .ini paths.
+  * Fixed color and attribute parsing.
+  * Fix some tests.
+  * Improvements:
+  * Update to autoconf 2.71.
+  * Added "invisible" style attribute (n).
+  * Prevent smenu from running in the background.
+  * Catch and handle SIGPIPE signal.
+  * Improve the manual.
+  * Miscellaneous:
+  * Various code simplifications.
+  * Removal of some unnecessary parameter.
+  * Removal of unnecessary code.
+  * Fixed typos in the README file.
+
+- Version 0.9.19
+  * Fixes:
+  * Prevent an attempt to free memory that has already been freed.
+  * Prevent memory leaks when requesting help.
+  * Correctly handle the order of invocation of -i/-e options.
+  * Apply a PR from h1z1 with a small correction.
+  * Fix the UTF-8 byte sequence generation from a given UCS-4 codepoint.
+  * Many small fixes.
+  * Improvements:
+  * Improve the documentation.
+  * Improve compatibility with some older compilers.
+  * Added the ability to set a global inactivity timeout.
+  * Improve the reliability of the code.
+  * Miscellaneous:
+  * Removed the generation of the SUSE specific specfile.
+  * Many typos have been corrected.
+  * Various code simplifications.
+
smlnj
+- update to 110.99.4:
+  * MLRISC: Modified the way that zero-extension (ZX) is handled
+    when the source bit width is smaller than the target.
+    Previously, the code assumed that the high bits would be zero,
+    but as demonstrated by issue #272, this is not guaranteed, so
+    we now mask out the high bits.
+  * Added the NativeInt and NativeWord structure aliases to
+    provide a portable way to refer to the native numeric types in signatures.
+  * Reimplementation of the Random structure to use the Mersenne
+    Twister algorithm. There are both 32-bit and 64-bit versions
+    of the generator (which one is included depends on the target platform).
+  * Reworked the code for determining the maximum hash-table size
+    (used in the HashSetFn and HashTableRep modules) so that it
+    does not depend on Int.int and Word.word being the same size (an
+    issue for MLton). Also split that code out into the internal
+    MaxHashTableSize module.
+  * Added support for the end-of-line assertion ("$") and full
+    support for intervals to the Thompson engine in the RegExp library.
+  * fix issue 87: ml-makedepend trashes dependency file on error
+  * fix issue 256: Initial numbers generated by Util/random.sml
+    have unexpected regularities
+  * fix issue 258: Thompson NFA regex engine doesn’t advance stream position when matching
+  * fix issue 260: 64-bit word literals are parsed incorrectly on 32-bit systems
+  * fix issue 264: Fix VectorSlice.all and ArraySlice.all
+  * fix issue 266: config: restore PPC for 10.4 and 10.6
+  * fix issue 272: Calling C function via NLFFI binding may give
+    result outside range of its C return type
+  * fix issue 278: CharBuffer.addSlice does not properly handle starting offsets
+  * fix issue 279: HashSetFn’s calculation of `maxSize can cause
+    Overflow during functor instantiation
+- remove smlnj-kernel-6.x.patch
+  * fixed in upstream: f07eb71cca7c647d28dbaf195f1e61e7e23cfc6f
+
+- update to 110.99.3:
+  * Implemented Basis Library proposal 2021-001 (Add getWindowSz
+    function to Posix.TTY structure).
+  * Implemented Basis Library proposal 2022-001 (Add tau to MATH signature).
+  * Fix for makeml and installml scripts do not like locations with spaces.
+  * Fix for Last branch of case expression omitted by PPAst.ppAst.
+  * Fix for Pretty printing of Absyn in error message does not respect fixity.
+  * Fix for Unable to interrupt execution by using SIGINT.
+  * Fixed some interfaces that did not agree with the SML Basis
+    Library specification. Bugs #318 (IEEEReal.decimal_approx
+    does not match the Basis Library) and #319 (Type of
+    Real.fromDecimal does not match the Basis Library).
+  * Fixed bug #316 (Real.fromManExp does not return expected value if man = 0.0).
+  * Fixed bug #317 (Conversion from string to real does not accept non-finite values).
+  * Fixed bug #314 (IEEEReal.float_class does not match the Basis
+    Library). For some reason, the NAN constructor took an
+    argument in our implementation. This code was probably an
+    early design of the API that was changed in the Basis Library
+    specification, but not in our code.
+  * Fixed bug #313 (Real.fromLargeInt crashes on large integer
+    input). Changed the assembly code for the AMD64 to return
+    infinity when the scaled exponent exceeds the maximum allowed
+    (instead of generating an overflow).
+  * Adding support for generating a SIG_GC signal when there is a garbage collection.
+  * Fixed bug #314 (IEEEReal.setRoundingMode is a no-op on Linux).
+  * Fixed bug #312 (CM.make is unable to handle filenames that
+    contain a backslash). We have changed the semantics of paths
+    given to the functions in the CM structure to be interpreted
+    using the native pathname syntax (instead of CM's generic syntax).
+  * Fixed bug #284 (Compiler bug: Contract: UsageMap on 132). The
+    problem was the the CPSTrans.cpstrans function was generating
+    code for loading spilled parameters in reverse order. In
+    addition to fixing the bug, added some detailed documentation of the code.
+  * Fixed bug #310 (Error when REPL tries to print value of type
+    Posix.FileSys.ST.stat).
+  * Fixed bug #306 (Word8VectorSlice: mapping a subslice produces
+    wrong result or crashes SML/NJ).
+  * Fix a module compilation performance bug by removing packStr
+    and packFct from Elaborator/modules/sigmatch.sml (reducing
+    the size of that file by about 25%), and removing the call of
+    packStr (in function constrStr) in Elaborator/elaborate/elabmod.
+    sml, replacing it with a call to Instantiate.instAbstr.
+    Goodbye at last to packStr!
+  * Fix for MSI installer for SMLNJ 110.99.2 reports as version 0.0.0.0.
+  * Fix for ml-build fails on Windows with error
+  * support for macOS 13 (Ventura)
+- includes 110.99.2:
+  * Fix a benign bug where the size of a floating-point spill
+    record was twice as large as necessary on 64-bit systems.
+  * Split out the Real.toLargeInt implementation into target-word-
+    size versions (the Real64ToIntInf module). For 64-bit targets,
+    the new version uses the bit representation of the real
+    number to compute the result. The 32-bit version is the old code
+    that uses floating-point operations. This change fixes bug #279 (
+    Real.toLargeInt returns zero for anything in range [-512,512]).
+  * In the translation from Absyn to PLambda, there was a
+    function (inlops) that was used to build the primop and type
+    data structures for numeric types. This function was being
+    called for every primitive operator, even though its results
+    only depended on the numeric type. I added a hash table to cache
+    the results indexed numeric kind. This change speeds up the
+    compiler by about 3% (e.g., compiling the compiler went from 58s
+    to 55s on a MacBookPro with a 2.4GHz Intel i9 processor).
+  * support installing and running SML/NJ on macOS 12 (Monterey)
+- includes 110.99.1:
+  * Changed the AMD64 frame layout to include a word to hold the
+    Overflow exception. This value is used by the LLVM backend to
+    generate the exception for checked arithmetic operations.
+  * Some minor restructuring of the logic in the generic installer.
+  * Fixed a bug with how FLINT numeric types were being
+    translated to CPS types. Specifically, types that were smaller
+    than the default integer size (e.g., word8) should have been
+    marked as having a tagged representation.
+  * Fixed a serious performance bug in the implementation of the
+    CharBuffer and MonoBuffer structures. Essentially, if one did
+    not reserve sufficient space for the contents, it could take
+    quadratic time to fill the buffer. We now grow the buffer by a
+    factor of 1.5 of its current size, with an upper bound on the extra growth of 256K.
+  * Fix for bug #280 (110.99 config/install.sh -64 fails on macOS
+    10.15.7). I was unable to reproduce this problem, but after
+    some investigation, it appears that the problem was inconsistent
+    build tools being picked up from the user’s path. To protect
+    against this issue, I made the paths to the ar and ranlib tools absolute.
+  * Added support for running SML/NJ on M1 Macs via the Rosetta2
+    emulator. The change is to identify the arm processor as amd64
+    in the config/_arch-n-opsys script. Note that while the system
+    basically seems to work okay under rosetta, trying to run the
+    makeml command after having compiled the complier caused a crash.
+
-- Update to version 110.69.
-
-- Fix embedded paths.
-
smplayer
+- update to 23.6:
+  * Fix the issue of YouTube playback limited to 720p.
+  * Update mpv and mplayer.
+  * New option in preferences to keep the playback speed for all videos.
+  * Other bug fixes.
+
snd
+- update to 23.5:
+  * s7: various small bugs and optimizations.
+
+- Update to 23.4 (no changelog).
+
+- Update to 23.3 (no changelog).
+
squirrel
+- spec file changes:
+  * drop static library because everything that needs maintenance
+    patch is then vulnerable without rebuild (see bug that was just patched)
+  * drop Group since it was wrong anyway
+  * move runtime library to its won subpackage from executable
+  * switch to cmake
+  * update sover ourselves since upstream doesn't do this and
+    seems to break ABI between versions.
+- c++11.patch: drop C++11 standard in favour of latest
+- sover.patch: patch to update sover on version updates, generated
+  from sover.patch.in during setup
+- squirrel-gcc47.patch: dropped, fixed upstream
+- squirrel-autoconfiscate.patch: dropped, obsolete
+- squirrel-rename_binary.patch: dropped, obsolete
+- squirrel-config.cmake.in: add missing file
+- squirrel.rpmlintrc: ignore EOL warnings in doc files
+
-- Change license to MIT (bnc#730449).
-
ssdp-responder
+- Update to version 2.0
+  Changes
+  Add suport for
+  * -c NAME to override ssdpd UUID cache file.
+  * -d URL to override the UPnP description URL, a single %s is
+    supported to be replaced with the interface address.
+  * -m NAME to override the manufacturer in the default
+    description.xml.
+  * -M URL to override the manufacturerURL in the default
+    description.xml.
+  * -p URL to override the presentationURL in the default
+    description.xml, a single %s is supported.
+  * -P FILE to override the default PID file location default
+    description.xml, a single %s is supported.
+  * -u UUID to use a custom UUID, useful when the built-in micro
+    HTTP server is disabled.
+  * -w to disable built-in micro HTTP server, useful when other,
+    more capable, web servers are available. Make sure to have the
+    alternate web server running on port 1901 to serve the file
+    /description.xml, see also -d URL above, which details the
+    location of the UPnP description URL.
+  * Increased debug messages in ssdp_init(), for troubleshooting.
+  * dropping root privileges after initial setup. The used ssdp
+    is searched for first, with fallback to nobody.
+  * Add support for an initial retry interval at startup, in
+    case ssdpd is started before any interface has been configured.
+    Configurable retry count using -R NUM command line option.
+  * Add support for an IP address monitor using Linux netlink
+    interfaces coming and going at runtime. Meaning, -R NUM is
+    unused on Linux. For this to work, ssdpd must start as root or
+    have CAP_NET_RAW.
+  Fixes
+  * Fix #11: periodic busy loop causing intermittent 100% CPU load.
+  * Fix invalid <UDN>uuid:uuid:...</UDN> in description.xml.
+  * Add Date: and Server: to HTTP header in micro HTTP server.
+  * Add support for HTTP HEAD requests to micro HTTP server.
+  * Handle case when /etc/os-release does not have VERSION_ID fall
+    back to use VERSION_CODENAME.
+  * Don't overwrite CPPFLAGS from the command line.
+  * Portability fix to utimensat() replacement function.
+
sshpass
+- update to 1.10:
+  * Remove sig unsafe functions from signal handler (Ticket #22).
+  * Allow -e to explicitly specify the environment variable to
+    use
+  * Unset the variable specified with -e before calling
+    subprogram
+  * Change the logic for setting a controlling TTY. Fixes
+    compatibility issues with OpenSolaris and MSYS/Cygwin.
+
starship
+- Update to version 1.16.0:
+  * Features:
+  - pwsh: Support vi command mode indicator.
+  - shlvl: add repeat_offset for repeated symbol.
+  - update the nushell init file and make it valid module
+    and overlay.
+  * Bug Fixes:
+  - bash: Clear out completed jobs before counting NUM_JOBS.
+  - rprompt: remove lprompt modules from $all again.
+  * Performance Improvements:
+  - git_status: query git stash count via gitoxide.
+
+- Update to version 1.15.0:
+  * Features:
+  - Add Solidity Module.
+  - add typechange to git_status module.
+  - aws: support aws sso with automatic authentication refresh.
+  - azure: subscription name aliases.
+  - gcloud: add detect_env_vars option.
+  - git_metrics: add option to ignore submodules.
+  - golang: adding mod_version variable.
+  - nodejs: Add expected_version variable.
+  * Bug Fixes:
+  - config: Make print-config not panic without a config.
+  - ensure nested style variables are processed during formatting.
+  - presets: Added ($style) to format in module 'sudo'
+    in Bracketed Segments Preset.
+  - style: ensure nested style variables are processed during
+    formatting.
+  - update of presets and default configuration to reflect
+    changes in Nerd Fonts 3.0.
+
+- Update to version 1.14.2:
+  * git_commit: resolve panic on 32-bit targets.
+
+- Update to version 1.14.1:
+  * Features:
+  - aws: add support for source_profile.
+  - aws: Adds support for AWS_CREDENTIAL_EXPIRATION
+    environment variable.
+  - custom: add option to check if pwd is in a repo.
+  - fossil: detection of Fossil check-outs in subdirectories.
+  * Bug Fixes:
+  - gradle: add support for unstable Gradle versions.
+  - init: avoid cygpath for starship binary path.
+  - java: wrong version number when using Android Studio JDK.
+  - preset: add output-flag to avoid encoding issues.
+  - pulumi: Fix formatting on pulumi module when using version.
+
+- Update to version 1.13.1:
+  * Features:
+  - config: Adds support for --profile <custom profile name>.
+  - env_var: Add support for env_var.VAR in format.
+  - fennel: add fennel module.
+  - add pijul_channel module.
+  - fossil_branch: add fossil_branch module.
+  - gradle: add gradle module.
+  - hg_branch: Add support for mercurial topics and find hg
+    root dir.
+  - java: Add .sdkmanrc for Java.
+  - logger: delete old logs & avoid more dup logs.
+  * Bug Fixes:
+  - 'to to' -> 'to'.
+  - container: reduce docker, podman and systemd confusion.
+  - fish: enable transient prompt when in vi mode.
+  - git_commit: fix potential test failure.
+  - Improve regex for extracting gradle package version from
+    gradle.properties.
+  - let-env warning when using nushell.
+  - nodejs: apply style even if node version is unavailable
+  - package: Improve regex for extracting gradle version
+    from gradle.properties.
+
stl-thumb
+- Update vendor dependencies to fix CVE bnc#1212008
+
+- Switch to cargo-packaging
+
stp
+- Update to version 2.3.3+20220915:
+  * Fix compilation error on libstdc++-7-dev
+  * disable SQLITE when building cms
+  * Fix so user flags are respected
+  * Convert ordered collections to faster unordered collections.
+  * copy on write to reduce the number of malloc/free
+  * Cleanup the dependency building code
+  * Small changes to make core simplification algorithms faster.
+  * Improve again on the performance of QF_BV benchmark problems.
+  * Handle an extra case in unconstrained variable elimination.
+  * Improve again on the performance of QF_BV benchmark problems.
+  * Fix test cases so that they work when stp has pure variable removal disabled.
+  * Tune the parameters to improve performance on QF_BV benchmark problems
+  * Adding REQUIRE for Perl
+  * Remove some mentions of the CVC format from our documentation.
+  * Remove mention of CVC from front readme.
+  * Update codeql-analysis.yml
+  * fix #128
+  * Clarrify as discussed in #4, that the bitvector library is also licensed under the artistic licence.
+  * move cvc_to_c utility out of unit testing into tools.
+  * remove tests which are not currently being used
+  * Update main.cpp
+  * Adds an extra simplification rule. fix #381.
+  * Fix #383. Makes bvxnor 2-arity only.
+  * oops. Fix inadvertent checkin
+  * Write through unapplied simplfications. Previously this was unsound  if unconstrained variable elimination (UVE) was disabled. UVE wrote through unapplied simplifications so masked the problem.
+  * rename tests which aren't really unit tests.
+  * Improve testing. The intention of these is that the combination of simplifications reduces them to true or false before reaching the SAT solver.
+  * Enable some generated tests that weren't previously enabled
+  * remove old test generators. FuzzSMT is much better than these
+  * Add failing instance
+  * Update codeql-analysis.yml
+  * Fix testing failures. Lit 15 is trying to run the test suites which I think is causing a CI failure.
+  * Remove disabled CVC test file. In some configurations it seems to be run resulting in a spurious test failure
+  * Cleanup memory leak on shutdown.
+  * Add the dissertation which also describes parts of STP
+  * silence some compiler warnings
+  * Fixing up some of the tools
+  * Update index.rst
+  * Rewrite Dockerfile
+  * fix #363
+  * Correcting command line argument for '--max_time'
+- add 0001-gcc-13-include-cstdint-for-int-_t.patch
+
stunnel
-- Update to 5.62: [jsc#SLE-20679]
+- Enable crypto-policies support: [bsc#1211301]
+  * The system's crypto-policies are the best source to determine
+    which cipher suites to accept in TLS. OpenSSL supports the
+    PROFILE=SYSTEM setting to use those policies. Change stunnel
+    to default to the system settings.
+  * Add patches:
+  - stunnel-5.69-system-ciphers.patch
+  - stunnel-5.69-default-tls-version.patch
+
+- Enable bash completion support
+
+- Update to 5.70:
+  - Security bugfixes
+  * OpenSSL DLLs updated to version 3.0.9.
+  * OpenSSL FIPS Provider updated to version 3.0.8.
+  - Bugfixes
+  * Fixed TLS socket EOF handling with OpenSSL 3.x. This bug caused major interoperability issues between stunnel built with OpenSSL 3.x and Microsoft's Schannel Security Support Provider (SSP).
+  * Fixed reading certificate chains from PKCS#12 files.
+  - Features
+  * Added configurable delay for the "retry" option.
+
+- Fix build on SLE12:
+  - add macro make_build
+
+- update to 5.69:
+  * Improved logging performance with the "output" option.
+  * Improved file read performance on the WIN32 platform.
+  * DH and kDHEPSK ciphersuites removed from FIPS defaults.
+  * Set the LimitNOFILE ulimit in stunnel.service to allow
+  * for up to 10,000 concurrent clients.
+  * Fixed the "CApath" option on the WIN32 platform by
+  * applying https://github.com/openssl/openssl/pull/20312.
+  * Fixed stunnel.spec used for building rpm packages.
+  * Fixed tests on some OSes and architectures by merging
+
+- Update to 5.68:
+  * Security bugfixes
+  - OpenSSL DLLs updated to version 3.0.8.
+  * New features
+  - Added the new 'CAengine' service-level option
+    to load a trusted CA certificate from an engine.
+  - Added requesting client certificates in server
+    mode with 'CApath' besides 'CAfile'.
+  * Bugfixes
+  - Fixed EWOULDBLOCK errors in protocol negotiation.
+  - Fixed handling TLS errors in protocol negotiation.
+  - Prevented following fatal TLS alerts with TCP resets.
+  - Improved OpenSSL initialization on WIN32.
+  - Improved testing suite stability.
+  - Improved file read performance.
+  - Improved logging performance.
+
+- Update to 5.67
+  * New features
+  - Provided a logging callback to custom engines.
+  * Bugfixes
+  - Fixed "make cert" with OpenSSL older than 3.0.
+  - Fixed the code and the documentation to use conscious
+    language for SNI servers (thx to Clemens Lang).
+
+- update to 5.66:
+  * Fixed building on machines without pkg-config.
+  * Added the missing "environ" declaration for BSD-based operating systems.
+  * Fixed the passphrase dialog with OpenSSL 3.0.
+- package license
+- remove non-systemd case from spec file
+
+- Update to 5.65:
+  * Security bugfixes
+  - OpenSSL DLLs updated to version 3.0.5.
+  * Bugfixes
+  - Fixed handling globally enabled FIPS.
+  - Fixed openssl.cnf processing in WIN32 GUI.
+  - Fixed a number of compiler warnings.
+  - Fixed tests on older versions of OpenSSL.
+
+- adding missing bug, CVE and fate references:
+  * CVE-2015-3644 [bsc#931517], one of previous version updates
+    (https://bugzilla.suse.com/show_bug.cgi?id=931517#c0)
+  * [bsc#990797], see stunnel.service.in
+  * [bsc#862294], README.SUSE not shipped
+  * CVE-2013-1762 [bsc#807440], one of previous version updates
+    (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1762)
+  * [bsc#776756] and [bsc#775262] not applicable (openssl versions)
+  * [fate#307180], adding to 11sp1
+  * [fate#311400], updating to new version
+  * [fate#314256], updating to new version
+
+- update to 5.64:
+  * Security bugfixes
+  - OpenSSL DLLs updated to version 3.0.3.
+  * New features
+  - Updated the pkcs11 engine for Windows.
+  * Bugfixes
+  - Removed the SERVICE_INTERACTIVE_PROCESS flag in
+    "stunnel -install".
+
+- update to 5.63:
+  * Security bugfixes
+  - OpenSSL DLLs updated to version 3.0.2.
+  * New features
+  - Updated stunnel.spec to support bash completion
+  * Bugfixes
+  - Fixed possible PRNG initialization crash (thx to Gleydson Soares).
+
+- Update to 5.62:
-- Remove patch upstream stunnel-CVE-2021-20230.patch
-- Security fix: [bsc#1177580, bsc#1182529, CVE-2021-20230]
-  * "redirect" option does not properly handle "verifyChain = yes"
-- Add stunnel-CVE-2021-20230.patch
-
suse-module-tools
+- Update to version 15.6.2:
+  * Revert "weak-modules2: only use kernel version under /run/regenerate-initrd"
+    (bsc#1214877)
+
-    (bsc#1201066)
+    (bsc#1201066, bsc#1213428)
swaybg
+- update to 1.2.0:
+  * man: fix background color input format
+  * Use shm_open instead of mkstemp for anon files
+  * Check wl_display_roundtrip return value
+  * readme: drop mention of xdg-shell requirement
+  * build: stop using join_paths
+  * build: stop using sh for scdoc
+  * Replace xdg_output with wl_output v4
+  * Optimize solid color with single-pixel-buffer-v1
+
swayidle
+- Update to 1.8.0:
+  * bash-completion: localize variables
+  * Fix segfault when no arg is given and no config file exists
+  * Add support for ext-idle-notify-v1
+  * Fix printf using size_t lineno variable
+- Remove e81d40fca7533f73319e76e42fa9694b21cc9e6e.patch
+
swaylock
+- Fix version information: drop "v" prefix.
+
swipl
+- Make rpmlint slightly less unhappy with us.
+
+- Update to 9.0.4:
+  - again a way too detailed changelog is available at
+    https://www.swi-prolog.org/ChangeLog?branch=stable&from=8.4.3&to=9.0.4
+- Skip failing test swipl:transaction (gh#SWI-Prolog/swipl-devel#1139)
+
+- Update to 8.4.3:
+  Changelog is not easily available. The best I was able to find is
+  https://swi-prolog.discourse.group/t/ann-swi-prolog-8-4-3-stable/5541
+- Removed obsolete patches:
+  - pkgconfig.patch
+  - swipl-ppc64.patch
+
+- Cleanup the SPEC file.
+
-- extend swipl-ppc64 patch to cover ppc64le as well
-- modified patches:
-  * swipl-ppc64.patch
-
-- update license to new format
-
-- fix jpl build on powerpc64 (swipl-ppc64.patch)
-
-- build require java-devel >= 1.6.0
-
swww
+- Replace obsoleted `disabled` option with `manual`
+
+- Update to version 0.8.1:
+  * fix sending images in quick succession
+  * remember to set exclusive zone to -1
+  * remove condvar from wallpaper
+  * overhaul transition waiting mechanism
+  * nuke gif processing pipeline
+  * load cache on `swww init`
+  * add a `none` transition
+  * fix clear exiting daemon
+  * Version 0.8.0
+  * update CHANGELOG and man-pages
+  * fix rebase error
+  * spell check example scripts
+  * fix fade transition
+  * fix failing test
+  * update changelog and todo
+  * stop using signals hack to wake main thread
+  * cache only tries loading gifs from correct version
+  * fix deadlock when resizing monitor
+  * put Arc<SlotPool> in wallpaper struct
+  * name threads for better errors
+  * Rework syncing animations between monitors
+  * bump dependencies - new rust version
+  * reimplement cache with a different strategy
+  * fix scaling images
+  * fix deadlock on `clear` with on-going animation
+  * update documentation
+  * reimplement syncing animations
+  * fix wrong transmute
+  * rename utils::communication -> utils::ipc
+  * use Box instead of Vec in all communication types
+  * better values for step when falling back to simple
+  * fix animation preventing transition to begin
+  * change serde for rkyv for serialization
+  * compress animation frames in a pipeline
+  * only lock what is necessary
+  * Rename daemon's modules and structs for clarity
+  * Sending RGB instead of RGBA images
+  * nuke cache
+  * syncronizing with condvars
+  * fix canvas pool not being ready
+  * fix crash when changing scale factor
+  * rename modules and fix cache import
+  * animations working
+  * transitions working
+  * begin implementation - working for static images
+  * add to docs
+  * add doc for --invert-y
+  * fix invert_y for percentage values
+  * impl invert_y flag
+  * fix spelling
+  * feat: add option to resize image to fit screen instead of cropping
+  * fix: don't skew images padded from odd widths
+  * fix
+  * add doc
+  * readd `simple` and rename to `fade`
+  * cargo fmt && cargo clippy
+  * re add fallback
+  * impl beziers for simple
+
+- Update vendored dependencies. Resolves CVE and bsc#1212009.
+
+- Update to version 0.7.3:
+  * Log error instead of returning
+  * Send status update to systemd when daemon has initialized
+  * split outputs with ,
+  * bump dependencies
+  * start animation right after finishing transition
+  * better spread of different bytes
+  * create benchmarks for compression functions
+  * update dependencies
+  * stop-gag zip_eq panic on slices of unequal size
+  * check if cache dir is actually a dir
+  * use std::thread::scope for gif frames
+  * wait until all gif's frames are ready
+  * `--transition-step` with `simple` saner default
+  * fix: Missing `/` when using `$HOME/.cache/swww`
+
+- Build and package man pages
+- Add cargo version requirement
+
+- Fix specfile.
+- Fix installation of swww-daemon.
+
+- Update to version 0.7.2:
+  * prepare 0.7.2 release
+  * update dependencies
+  * man-pages (#84)
+  * Sync animations (#82)
+  * update changelog
+  * ignore integration_tests by default
+  * cache the images to reload them on startup (#80)
+  * prepare 0.7.1 release
+  * update dependencies
+  * cargo clippy and style
+  * update CHANGELOG.md
+  * fix integration_tests calling incorrect daemon bin
+  * add ability to use screen cords instead of percentages in `--transition-pos` (#71)
+  * typo: pipw -> pipe
+  * fix reading image from stdin (don't cannonicalize)
+  * document `--no_resize` and `--fill_color` args
+  * fix `swww` query not returning correct image
+  * change the version in Cargo.toml
+
+- Update to version 0.7.0
+  * update changelog
+  * nuke `fix_zsh_completion.sh`
+  * bump dependencies
+  * inline printed variables where possible
+  * use `with_guessed_format` to detect image type
+  * [utils/comp_decomp] handle scale factor reduction
+  * new transition: wave (#66)
+  * [client] use scaling when sending images
+
+- Update to version 0.6.0+git18:
+  * fix panic on gif with identical frames
+  * implement --no-resize for animated gifs
+  * implement --no-resize option
+  * fix insane problem introduced by 29e2683
+  * change default transition step value
+  * implement reading image from stdin
+
syncthing
+- Update to 1.24.0
+  * Bugfixes:
+    [#8965]: v1.23.6 introduces untrusted sharing regression
+  * Enhancements:
+    [#5175]: Record more performance metrics
+    [#7456]: Announce IPv6 ULA
+    [#7973]: Restore versions file filter should be case insensitive
+    [#8767]: Check interface for FlagRunning
+  * Other issues:
+    [#9021]: panic: bug: ClusterConfig called on closed or nonexistent connection
+    [#9034]: Build with Go 1.21 out of the box
+
systemd-presets-branding-openSUSE
+- enable the various libvirt modular daemons (boo#1212195)
+
+- fix drkonqi entry, should end with .service
+
+- enable autostart of drkonqi (bsc#1203493).
+
sysuser-tools
+- Remove all systemd requires, not supported on SLE15 [bsc#1214140]
+
+- Version 3.2
+- update sysusers_requires to request sysuser-shadow 3.2
+- Use TAB consistently for indention in sysusers2shadow.sh
+- This pkg needs to follow behavior which is described in sysusers.d(5).
+  Always create a system group of the same name as the system user,
+  even if the user already exists. (bsc#1205161, bsc#1207778, bsc#1213240)
+
+- Add "quilt setup" friendly hint to %sysusers_requires usage
+  It is not required to have sysuser-tools installed when working
+  with a pkg source which uses sysuser-tools at build time.
+
+- Use append so if a pre file already exists it isn't overridden
+
+- invoke bash for bash scripts (bsc#1195391)
+
tclx
+- Update to version 8.6.2
+  * filter rresvport if not present
+
-- fixed file list
-
tdom
+- Update to 0.9.3
+  * Added the options
+  - billionLaughsAttackProtectionMaximumAmplification and
+  - billionLaughsAttackProtectionActivationThreshold to dom parse
+    and the by the xml::parser/expat command created parser
+    commands.
+  * Schema command methods validate, validatefile and
+    validatechannel enhanced with options to control external
+    entity resolving.
+  * Added option -forest to dom parse.
+  * Added commands tdom::fsnewNode and tdom::fsinsertNode.
+
-- New package: tdom
-- A XML/DOM/XPath/XSLT Implementation for Tcl, based on expat.
-- Patched to use the libexpat instead of included copy.
-
terminus
+- Update to version 2.3.1:
+  * Added support for gnome shell 44
+  * Allow to reorder tabs
+  * Added support for links
+  * Removed debug prints
+  * Added macros support
+  * Show 30 characters in tabs
+  * Fixed several leaks
+
texstudio
+- Update to version 4.5.2
+  * bugfix release
+
+- Update to version 4.5.1
+  * Provide online template repository
+  * change preview target in IDEFIX menu (#2760)
+  * use QtMultimedia instead of phonon to show movies in pdf (non-default)
+  * regex in search panel is syntax checked and marked if wrong
+  * latex menu for horizontal spacing (#2687)
+  * config dialog with resizable splitter (#2707)
+  * insert inline math mode as $$ (#2719)
+  * add editor action “Move all (others) to other view” (#2713)
+  * show macro name in completer list (#2679)
+  * show macro trigger and shortcut in configuration window (#2635)
+  * fix wrong side panel title when changing grid size in config (#2743)
+  * preview/clear preview now use position of context menu as reference (#2794)
+  * add a Package Tab to the QuickStart Wizard (#2831)
+  * Editor option ‘Show Only Monospaced Fonts’ is now persistent (#788)
+  * fix size of config dialog on low res screens (#995)
+  * add script command loadManagedMenu, s. new section “Menu Definitions” in the manual (#2816)
+  * switch to pointer cursor over bookmark column of editors (#2220)
+  * add shadow option for rectangular magnifier in pdf viewer config (#2885)
+  * in split view mode add editor to split view where current editor is (#2838)
+
thermald
+- update to 2.5.3:
+  * Support for Meteor Lake
+
+- update to 2.5.2:
+  * Support Alder Lake N
+  * Support ITMT version 2, which is used in some Raptor Lake
+    systems
+
tinc
+- Removed PrivateDevices setting and allow access to /dev/net/tun for the
+  service. Updated harden_tinc@.service.patch (also harden_tinc.service.patch
+  to keep it in sync, even thought nothing really happens in there)
+  (bsc#1181400)
+
tinyproxy
+- Ship COPYING file
+
+- Add 0001-prevent-junk-from-showing-up-in-error-page-in-invali.patch
+  [CVE-2022-40468] [boo#1203553]
+
+- Move tinyproxy program to /usr/bin.
+
+- Update to release 1.11.1
+  * New fnmatch based filtertype
+- Drop tinyproxy-conf.patch, no rationale for why those changes
+  are there [boo#1200028].
+
+- Update to release 1.11
+  * Support for multiple bind directives.
+
+- Do not suppress errors from groupadd/useradd
+
+- update to 1.10.0:
+  * Configuration file has moved from /etc/tinyproxy.conf to
+    /etc/tinyproxy/tinyproxy.conf.
+  * Add support for basic HTTP authentication
+  * Add socks upstream support
+  * Log to stdout if no logfile is specified
+  * Activate reverse proxy by default
+  * Support bind with transparent mode
+  * Allow multiple listen statements in the configuration
+  * Fix CVE-2017-11747: Create PID file before dropping privileges.
+  * Fix CVE-2012-3505: algorithmic complexity DoS in hashmap
+  * Bugfixes
+  * BB#110: fix algorithmic complexity DoS in hashmap
+  * BB#106: fix CONNECT requests with IPv6 literal addresses as host
+  * BB#116: fix invalid free for GET requests to ipv6 literal address
+  * BB#115: Drop supplementary groups
+  * BB#109: Fix crash (infinite loop) when writing to log file fails
+  * BB#74: Create log and pid files after we drop privs
+  * BB#83: Use output of id instead of $USER
+
-- Add 110-seeding.diff, 110-headerlimit.diff to address
-  CVE-2012-3505 (bnc#776506)
-- Refresh tinyproxy-conf.patch to be in -p1 format rather than -p0
-
-- fix init script
-  * TINYPROXY_CFG=/etc/tinyproxy.conf
-  * create PID DIR
-- fix logrotate script
-  * compress, dateext .....
-- add user, group tinyproxy
-- add conf patch
-- add missing logdir
-- add missing rc_link
-- fix pre/post
-
-- spec-cleaner
-- fix build for suse_version 1110
-  * define missing _initdir macro
-
-- Update to 1.8.3 version
-  changed source format to bz2
-  * Fix upstream proxy support
-  * Fix FilterURLs with transparent proxy support
-  * Fix bug in ACL netmask generation
-
-- added /etc/init.d/tinyproxy
-- added tinyproxy logrotate
-
-- Initial package
-
tio
+- Update to 2.6:
+  * Remove warning when using pattern option
+  * Add --log-append option
+  * Fix line termination for response wait feature
+
tkimg
+- Update to version 1.4.14
+  * Added support for reading RAW images with 32-bit integer and
+    64-bit double pixel values.
+  * Fixed compilation of libpng for ARM Neon.
+    Obsoletes fix-aarch64-neon.patch .
+  * Updated external libraries: JPEG 9e, PNG 1.6.38, TIFF 4.4.0,
+    ZLIB 1.2.13.
+
+- Replace BuildRequire on xorg-x11-devel by pkgconfig(...)
+
-- Disabled parallel make.
-
-- Fixed a typo in tcl.m4 that broke configure with bash 3.1.
-
translate-shell
+- Update to version 0.9.7.1:
+  * Bing Translator: fixed engine support.
+  * Apertium Translator: (partly) fixed engine support.
+  * REPL: supported setting sl and tl by :set.
+
transmission
+- Fix transmission-daemon missing /var/lib/transmission
+
+- Update to version 4.0.3:
+  + Fix 4.0.2 higher CPU load while downloading (a regression).
+  + Fix 4.0.0 bug where the torrentGet RPC method returned wrong
+    trackerStats.tier values.
+  + Fix 4.0.0 HTTP announce behavior with bind-address-ipv*
+    settings.
+  + Fix 4.0.0 bug in code that detects the computer's IPv6 support.
+  + Silenced 4.0.0 minor log warnings for cross_seed_entry and uid
+    entries in torrent files.
+  + When adding a duplicate torrent via the RPC API, the return
+    value now matches Transmission 3's return value.
+  + Fix use of metainfo display-name as a fallback name.
+  + Updated torrent Peer ID generation to happen once per session,
+    even for public torrents.
+  + GTK client:
+  - Fix 4.0.0 preferences dialog being too large for small
+    displays.
+  - Fix 4.0.0 regression of percents, speeds, sizes, etc, not
+    being i18nized properly.
+  + Daemon: Set the log level sooner at startup to ensure events
+    aren't missed.
+  + Fix 4.0.0 bug in the display of how much of a torrent has been
+    downloaded.
+  + Documentation improvements.
+- Drop merged-upstream patch:
+  9fc0e4ff6186e3aee3d3350e9f1b062aa6e161fe.patch
+
+- Add 9fc0e4ff6186e3aee3d3350e9f1b062aa6e161fe.patch: Fix:
+  disable-deprecated by default for end users (needed due to new
+  deprecation in gtkmm).
+
+- Update to 4.0.2:
+  + Highlights:
+  - Fixed 4.0.1 bug where some torrents thought they were
+    magnet links.
+  - Fixed 4.0.0 bug where download speed limits were ignored for
+    uTP peers.
+  - Fixed 4.0.0 bug using announce-list when creating
+    single-tracker private torrents.
+  + All platforms:
+  - Restored support for path.utf-8 keys in torrent info dictionaries.
+  - Fixed value of TR_TIME_LOCALTIME environment variable in
+    torrent scripts.
+  - Limited in-kernel file copying to 2 GiB blocks at a time to avoid
+    potential issues with CIFS mounts.
+  - Simplified filename info in log messages.
+  - Fixed std::clamp() assertion failures.
+  - Fixed small error calculating protocol overhead when receiving
+    peer messages.
+  - Fixed incorrect escaping of non-BMP characters when
+    generating JSON.
+  - Fixed 4.0.0 crash when receiving malformed piece data from peers.
+  - Fixed 4.0.0 potential crash when downloading from webseeds.
+  - Improved handling of the leechers param in trackers'
+    announce responses.
+  - Fixed 4.0.0 regression that stopped increasing the download
+    priority of files' first and last pieces. These pieces are
+    important for making incomplete files previewable / playable
+    while still being downloaded.
+  - Fixed display of IPv6 tracker URLs.
+  - Fixed code that could stop being interested in peers that
+    have pieces we want to download.
+  - Improved sanity checking of magnet links added via RPC.
+  - Fixed a misleading error message when Transmission is unable to
+    write to the incomplete-dir.
+  - Worked around an older libdht bug that could provide
+    invalid peer info.
+  - Restored RPC torrentGet.wanted return value
+    to match 3.00 behavior.
+  + QT client:
+  - Ensured that "Open File" opens the torrent's folder for
+    multi-file torrents.
+  - Fixed 4.0.0 bug that prevented batch-adding trackers to
+    multiple torrents at once.
+  - Fixed per-torrent ratio display in main window.
+  + GTK client:
+  - Fixed 4.0.0 ignoring -m/--minimized command line option.
+  - Fixed assertion failure in the progress display when creating
+    a new torrent.
+  + Web client:
+  - Fixed minor UI bugs, e.g. layout and control alignment.
+  - Fixed 4.0.0 bug that that failed to save alternate speed begin/end
+    settings changes.
+  - Improved colors in both light & dark mode.
+  + Daemon:
+  - Made the "unrecognized argument" error message more readable.
+  + transmission-remote:
+  - Fixed a spurious error message when adding magnet links.
+
+- Update to version 4.0.1:
+  + Issues fixed:
+  - Poor speed and some checksums being incorrectly marked as
+    failed in somes torrents.
+  - Beachballing / jank.
+  - Blocklists using more memory than necessary.
+  - Failure to migrate magnet links from Transmission 3.
+  - Many other fixes.
+- Changes from version 4.0.0:
+  + Added many performance improvements, and numerous bugfixes.
+  + The entire codebase has been migrated from C to C++.
+  + The remote control GUIs (transmission-qt and transmission-web)
+    now use the RPC API "table" mode, resulting in smaller payloads
+    / less bandwidth use.
+  + Added support for GTK 4, and both Qt5 and Qt6.
+  + The GTK client has been ported to gtkmm.
+  + New Features:
+  - Support for using BitTorrent v2 and hybrid torrents.
+  - Users can now set "default" trackers that can be used to
+    announce all public torrents.
+  - Newly-added seeds can start immediately and verify pieces on
+    demand now.
+  - Added an option to omit potentially-identifying information
+    (e.g. User-Agent and date created) when creating new
+    torrents.
+  - The Web client has been rewritten and now supports mobile
+    use.
+  - When creating new torrents, users can now specify the piece
+    size.
+  - IPv6 blocklists are now supported.
+  - Dozens of other new features.
+  + Fix small scrape/announce packet size that could trip SYN flood
+    detection on some systems.
+  + Remove the 1024 open files limit previously required by how
+    libcurl was used.
+  + Add configurable anti-brute force settings.
+  + Fetch metadata of stopped magnets.
+  + Stop logging excessive error messages after they repeat too
+    many times.
+  + The web client has been given a major overhaul.
+  + User-visible highlights include:
+  - Mobile is now fully supported.
+  - Added fullscreen support on mobile.
+  - Better support for dark mode.
+  - Added mime icons to the torrent list.
+  - Improved theme consistency across the app.
+- Port build system from Autotools to CMake: replace libtool build
+  requirement with cmake and ninja; replace Autotool macros with
+  CMake's.
+- Add explicit build requirement on CMake modules: Qt5Gui,
+  Qt5LinguistTools, Qt5Network, Qt5Svg, and Qt5Widgets.
+- Drop libqt5-linguist-devel, now that its CMake module is being
+  used instead.
+- Use our own libdeflate as build requirement instead of the
+  bundled one.
+- Replace openssl-devel with the more reliable pkgconfig(openssl).
+- Replace intltool build requirement with gettext-tools.
+- Replace glib-2.0 and gtk+-3.0 with giomm-2.68, glibmm-2.68, and
+  gtkmm-4.0 pkgconfig modules following code base switch from C to
+  C++.
+- Drop libappindicator3-devel build requirement. AppIndicator is no
+  longer supported.
+- Drop fdupes build requirement/macro. There isn't duplicate files
+  anymore.
+- Drop no longer needed %desktop_database_post and
+  %icon_theme_cache_post macros targeted at pre-Leap openSUSE/SUSE
+  releases.
+- Drop no longer needed patches:
+  transmission-hybrid-torrent-length.patch, and
+  transmission-3.00-openssl-3.patch.
+- Refresh harden_transmission-daemon.service.patch patch with
+  Quilt.
+- Drop transmission-qt.desktop source file favoring the one
+  provided by upstream.
+- Add transmission.rpmlintrc file to filter the "file-not-in-%lang"
+  warning, since we are excluding the English translations from the
+  lang sub-packages and packaging them in the common sub-package
+  instead.
+
trivy
+- Update to version 0.44.1:
+  * fix(report): return severity colors in table format (#4969)
+  * build: maximize available disk space for release (#4937)
+  * test(cli): Fix assertion helptext (#4966)
+  * chore(deps): Bump defsec to v0.91.1 (#4965)
+  * test: validate CycloneDX with the JSON schema (#4956)
+  * fix(server): add licenses to the Result message (#4955)
+  * fix(aws): resolve endpoint if endpoint is passed (#4925)
+  * fix(sbom): move licenses to `name` field in Cyclonedx format (#4941)
+  * add only uniq deps in dependsOn (#4943)
+  * use testify instead of gotest.tools (#4946)
+  * fix(nodejs): do not detect lock file in node_modules as an app (#4949)
+  * bump go-dep-parser (#4936)
+  * chore(deps): bump github.com/openvex/go-vex from 0.2.0 to 0.2.1 (#4914)
+  * chore(deps): bump helm/kind-action from 1.7.0 to 1.8.0 (#4909)
+  * chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore (#4912)
+  * test(aws): move part of unit tests to integration (#4884)
+  * docs(cli): update help string for file and dir skipping (#4872)
+  * chore(deps): bump sigstore/cosign-installer (#4910)
+  * chore(deps): bump github.com/sosedoff/gitkit from 0.3.0 to 0.4.0 (#4916)
+  * chore(deps): bump k8s.io/api from 0.27.3 to 0.27.4 (#4918)
+  * chore(deps): bump github.com/secure-systems-lab/go-securesystemslib (#4919)
+  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/sts (#4913)
+  * chore(deps): bump github.com/magefile/mage from 1.14.0 to 1.15.0 (#4915)
+  * docs: update the discussion template (#4928)
+
+- Update to version 0.44.0:
+  * feat(repo): support local repositories (#4890)
+  * bump go-dep-parser (#4893)
+  * fix(misconf): add missing fields to proto (#4861)
+  * fix: remove trivy-db package replacement (#4877)
+  * chore(test): bump the integration test timeout to 15m (#4880)
+  * chore(deps): Update defsec to v0.91.0 (#4886)
+  * chore: update CODEOWNERS (#4871)
+  * feat(vuln): support vulnerability status (#4867)
+  * feat(misconf): Support custom URLs for policy bundle (#4834)
+  * refactor: replace with sortable packages (#4858)
+  * docs: correct license scanning sample command (#4855)
+  * fix(report): close the file (#4842)
+  * feat(nodejs): add support for include-dev-deps flag for yarn (#4812)
+  * feat(misconf): Add support for independently enabling libraries (#4070)
+  * feat(secret): add secret config file for cache calculation (#4837)
+  * Fix a link in gitlab-ci.md (#4850)
+  * fix(flag): use globalstar to skip directories (#4854)
+  * chore(deps): bump github.com/docker/docker from v23.0.5+incompatible to v23.0.7-0.20230714215826-f00e7af96042+incompatible (#4849)
+  * fix(license): using common way for splitting licenses (#4434)
+  * fix(containerd): Use img platform in exporter instead of strict host platform (#4477)
+  * remove govulndb (#4783)
+  * fix(java): inherit licenses from parents (#4817)
+  * refactor: add allowed values for CLI flags (#4800)
+  * add example regex to allow rules (#4827)
+  * feat(misconf): Support custom data for rego policies for cloud (#4745)
+  * docs: correcting the trivy k8s tutorial (#4815)
+  * feat(cli): add --tf-exclude-downloaded-modules flag (#4810)
+  * fix(sbom): cyclonedx recommendations should include fixed versions for each package (#4794)
+  * feat(misconf): enable --policy flag to accept directory and files both (#4777)
+  * feat(python): add license fields (#4722)
+  * fix: support trivy k8s-version on k8s sub-command (#4786)
+
+- Update to version 0.43.1:
+  * chore(deps): Update defsec to v0.90.3 (#4793)
+  * chore(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 (#4752)
+  * chore(deps): bump alpine from 3.18.0 to 3.18.2 (#4748)
+  * chore(deps): bump github.com/alicebob/miniredis/v2 from 2.30.3 to 2.30.4 (#4758)
+  * docs(image): fix the comment on the soft/hard link (#4740)
+  * check Type when filling pkgs in vulns (#4776)
+  * feat: add support of linux/ppc64le and linux/s390x architectures for Install.sh script (#4770)
+  * chore(deps): bump modernc.org/sqlite from 1.20.3 to 1.23.1 (#4756)
+  * fix(rocky): add architectures support for advisories (#4691)
+  * chore(deps): bump github.com/opencontainers/image-spec (#4751)
+  * chore(deps): bump github.com/package-url/packageurl-go (#4754)
+  * chore(deps): bump golang.org/x/sync from 0.2.0 to 0.3.0 (#4750)
+  * chore(deps): bump github.com/tetratelabs/wazero from 1.2.0 to 1.2.1 (#4755)
+  * chore(deps): bump github.com/testcontainers/testcontainers-go (#4759)
+  * fix: documentation about reseting trivy image (#4733)
+  * fix(suse): Add openSUSE Leap 15.5 eol date as well (#4744)
+  * fix: update Amazon Linux 1 EOL (#4761)
+- drop eol-dates.patch (all upstream)
+
+- Update to version 0.43.0:
+  * chore(deps): Update defsec to v0.90.1 (#4739)
+  * feat(nodejs): support yarn workspaces (#4664)
+  * feat(cli): add include-dev-deps flag (#4700)
+  * fix(image): pass the secret scanner option to scan the img config (#4735)
+  * fix: scan job pod it not found on k8s-1.27.x (#4729)
+  * feat(docker): add support for mTLS authentication when connecting to registry (#4649)
+  * chore(deps): Update defsec to v0.90.0 (#4723)
+  * fix: skip scanning the gpg-pubkey package (#4720)
+  * Fix http registry oci pull (#4701)
+  * feat(misconf): Support skipping services (#4686)
+  * docs: fix supported modes for pubspec.lock files (#4713)
+  * fix(misconf): disable the terraform plan analyzer for other scanners (#4714)
+  * clarifying a dir path is required for custom policies (#4716)
+  * chore: update alpine base images (#4715)
+  * fix last-history-created (#4697)
+  * feat: kbom and cyclonedx v1.5 spec support (#4708)
+  * docs: add information about Aqua (#4590)
+  * fix: k8s escape resource filename on windows os (#4693)
+  * ci: ignore merge queue branches (#4696)
+  * chore(deps): bump actions/checkout from 2.4.0 to 3.5.3 (#4695)
+  * chore(deps): bump aquaproj/aqua-installer from 2.1.1 to 2.1.2 (#4694)
+  * feat: cyclondx sbom custom property support (#4688)
+  * ci: do not trigger tests in main (#4692)
+  * add SUSE Linux Enterprise Server 15 SP5 and update SP4 eol date (#4690)
+  * use group field for jar in cyclonedx (#4674)
+  * feat(java): capture licenses from pom.xml (#4681)
+  * feat(helm): make sessionAffinity configurable (#4623)
+  * fix: Show the correct URL of the secret scanning (#4682)
+  * document expected file pattern definition format (#4654)
+  * fix: format arg error (#4642)
+  * feat(k8s): cyclonedx kbom support (#4557)
+  * fix(nodejs): remove unused fields for the pnpm lockfile (#4630)
+  * fix(vm): update ext4-filesystem parser for parse multi block extents (#4616)
+  * ci: update build IDs (#4641)
+  * fix(debian): update EOL for Debian 12 (#4647)
+  * chore(deps): bump go-containerregistry (#4639)
+  * chore: unnecessary use of fmt.Sprintf (S1039) (#4637)
+  * fix(db): change argument order in Exists query for JavaDB (#4595)
+  * feat(aws): Add support to see successes in results (#4427)
+  * chore(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 (#4613)
+  * ci: do not trigger tests in main (#4614)
+  * chore(deps): bump sigstore/cosign-installer (#4609)
+  * chore(deps): bump CycloneDX/gh-gomod-generate-sbom from 1 to 2 (#4608)
+  * ci: bypass the required status checks (#4611)
+  * ci: support merge queue (#3652)
+  * ci: matrix build for testing (#4587)
+  * feat: trivy k8s private registry support (#4567)
+  * docs: add general coverage page (#3859)
+  * chore: create SECURITY.md (#4601)
+
+- add eol-dates.patch to list SLE/Leap 15.5
+
+- add NOTICE to doc
+
+- Update to version 0.42.1:
+  * ci: remove 32bit packages (#4585)
+  * fix(misconf): deduplicate misconf results (#4588)
+  * fix(vm): support sector size of 4096 (#4564)
+  * fix(misconf): terraform relative paths (#4571)
+  * fix(purl): skip unsupported library type (#4577)
+  * fix(terraform): recursively detect all Root Modules (#4457)
+  * fix(vm): support post analyzer for vm command (#4544)
+  * fix(nodejs): change the type of the devDependencies field (#4560)
+  * fix(sbom): export empty dependencies in CycloneDX (#4568)
+  * refactor: add composite fs for post-analyzers (#4556)
+  * chore(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 (#4554)
+  * chore(deps): bump helm/kind-action from 1.5.0 to 1.7.0 (#4526)
+  * chore(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (#4528)
+  * chore(deps): bump github.com/alicebob/miniredis/v2 from 2.30.2 to 2.30.3 (#4529)
+  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#4536)
+  * chore(deps): bump github.com/tetratelabs/wazero from 1.0.0 to 1.2.0 (#4549)
+  * chore(deps): bump github.com/spf13/cast from 1.5.0 to 1.5.1 (#4532)
+  * chore(deps): bump github.com/testcontainers/testcontainers-go (#4537)
+  * chore(deps): bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#4530)
+  * chore(deps): bump github.com/aws/aws-sdk-go-v2/config (#4534)
+  * chore(deps): bump github.com/sigstore/rekor from 1.2.0 to 1.2.1 (#4533)
+  * chore(deps): bump alpine from 3.17.3 to 3.18.0 (#4525)
+  * feat: add SBOM analyzer (#4210)
+  * fix(sbom): update logic for work with files in spdx format (#4513)
+  * feat: azure workload identity support (#4489)
+  * feat(ubuntu): add eol date for 18.04 ESM (#4524)
+  * fix(misconf): Update required extensions for terraformplan (#4523)
+  * refactor(cyclonedx): add intermediate representation (#4490)
+  * fix(misconf): Remove debug print while scanning (#4521)
+  * fix(java): remove duplicates of jar libs (#4515)
+  * fix(java): fix overwriting project props in pom.xml (#4498)
+  * docs: Update compilation instructions (#4512)
+  * fix(nodejs): update logic for parsing pnpm lock files (#4502)
+  * fix(secret): remove aws-account-id rule (#4494)
+  * feat(oci): add support for referencing an input image by digest (#4470)
+  * chore(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 (#4338)
+  * docs: fixed the format (#4503)
+  * fix(java): add support of * for exclusions for pom.xml files (#4501)
+  * feat: adding issue template for documentation (#4453)
+  * docs: switch glad to ghsa for Go (#4493)
+  * chore(deps): Update defsec to v0.89.0 (#4474)
+  * feat(misconf): Add terraformplan support (#4342)
+  * feat(debian): add digests for dpkg (#4445)
+  * chore(deps): bump github.com/sigstore/rekor from 1.1.1 to 1.2.0 (#4478)
+  * feat(k8s): exclude node scanning by node labels (#4459)
+  * docs: add info about multi-line mode for regexp from custom secret rules (#4159)
+  * feat(cli): convert JSON reports into a different format (#4452)
+  * feat(image): add logic to guess base layer for docker-cis scan (#4344)
+  * fix(cyclonedx): set original names for packages (#4306)
+  * feat: group subcommands (#4449)
+  * feat(cli): add retry to cache operations (#4189)
+  * fix(vuln): report architecture for `apk` packages (#4247)
+  * refactor: enable cases where return values are not needed in pipeline (#4443)
+  * fix(image): resolve scan deadlock when error occurs in slow mode (#4336)
+  * docs(misconf): Update docs for kubernetes file patterns (#4435)
+  * test: k8s integration tests (#4423)
+  * feat(redhat): add package digest for rpm (#4410)
+  * feat(misconf): Add `--reset-policy-bundle` for policy bundle (#4167)
+  * fix: typo (#4431)
+  * add user instruction to imgconf (#4429)
+  * fix(k8s): add image sources (#4411)
+  * docs(scanning): Add versioning banner (#4415)
+  * feat(cli): add mage command to update golden integration test files (#4380)
+  * feat: node-collector custom namespace support (#4407)
+  * chore(deps): bump owenrumney/go-sarif from v2.1.3 to v2.2.0 (#4378)
+  * refactor(sbom): use multiline json for spdx-json format (#4404)
+  * fix(ubuntu): add EOL date for Ubuntu 23.04 (#4347)
+  * refactor: code-optimization (#4214)
+  * feat(image): Add image-src flag to specify which runtime(s) to use (#4047)
+  * test: skip wrong update of test golden files (#4379)
+  * refactor: don't return error for package.json without version/name (#4377)
+  * docs: cmd  error (#4376)
+  * test(cli): add test for config file and env combination (#2666)
+  * fix(report): set a correct file location for license scan output (#4326)
+  * ci: rpm repository for all versions and aarch64 (#4077)
+  * chore(alpine): Update Alpine to 3.18 (#4351)
+  * fix(alpine): add EOL date for Alpine 3.18 (#4308)
+  * chore(deps): bump github.com/docker/distribution (#4337)
+  * feat: allow root break for mapfs (#4094)
+  * docs(misconf): Remove examples.md (#4256)
+  * fix(ubuntu): update eol dates for Ubuntu (#4258)
+  * feat(alpine): add digests for apk packages (#4168)
+  * chore: add discussion templates (#4190)
+  * fix(terraform): Support tfvars (#4123)
+  * chore: separate docs:generate (#4242)
+  * chore(deps): bump github.com/aws/aws-sdk-go-v2/config (#4246)
+  * refactor: define vulnerability scanner interfaces (#4117)
+  * feat: unified k8s scan resources (#4188)
+  * chore(deps): Update defsec to v0.88.1 (#4178)
+  * chore(deps): bump github.com/alicebob/miniredis/v2 from 2.30.1 to 2.30.2 (#4141)
+  * chore: trivy bin ignore (#4212)
+  * feat(image): enforce image platform (#4083)
+  * chore(deps): bump github.com/owenrumney/go-sarif/v2 from 2.1.2 to 2.1.3 (#4143)
+  * chore(deps): bump github.com/docker/docker (#4144)
+  * chore(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.1 to 2.0.2 (#4146)
+  * chore(deps): bump aquaproj/aqua-installer from 2.0.2 to 2.1.1 (#4140)
+  * fix(ubuntu): fix version selection logic for ubuntu esm (#4171)
+  * chore(deps): bump github.com/samber/lo from 1.37.0 to 1.38.1 (#4147)
+  * chore(deps): bump github.com/hashicorp/go-getter from 1.7.0 to 1.7.1 (#4145)
+  * chore(deps): bump sigstore/cosign-installer from 3.0.1 to 3.0.3 (#4138)
+  * chore(deps): bump github.com/testcontainers/testcontainers-go (#4150)
+  * chore: install.sh support for windows (#4155)
+  * chore(deps): bump github.com/sigstore/rekor from 1.1.0 to 1.1.1 (#4166)
+  * chore(deps): bump golang.org/x/crypto from 0.7.0 to 0.8.0 (#4149)
+  * docs: moving skipping files out of others (#4154)
+
+- actually create a PIE binary
+
+- Update to version 0.41.0:
+  * fix(spdx): add workaround for no src packages (#4118)
+  * test(golang): rename broken go.mod (#4129)
+  * feat(sbom): add supplier field (#4122)
+  * test(misconf): skip downloading of policies for tests #4126
+  * refactor: use debug message for post-analyze errors (#4037)
+  * feat(sbom): add VEX support (#4053)
+  * feat(sbom): add primary package purpose field for SPDX (#4119)
+  * fix(k8s): fix quiet flag (#4120)
+  * fix(python): parse of pip extras (#4103)
+  * feat(java): use full path for nested jars (#3992)
+  * feat(license): add new flag for classifier confidence level (#4073)
+  * feat: config and fs compliance support (#4097)
+  * chore(deps): bump sigstore/cosign-installer from 2.8.1 to 3.0.1 (#3952)
+  * feat(spdx): add support for SPDX 2.3 (#4058)
+  * fix: k8s all-namespaces support (#4096)
+  * perf(misconf): replace with post-analyzers (#4090)
+  * fix(helm): update networking API version detection (#4106)
+  * feat(image): custom docker host option (#3599)
+  * style: debug flag is incorrect and needs extra - (#4087)
+  * docs(vuln): Document inline vulnerability filtering comments (#4024)
+  * feat(fs): customize error callback during fs walk (#4038)
+  * fix(ubuntu): skip copyright files from subfolders (#4076)
+  * docs: restructure scanners (#3977)
+  * fix: fix `file does not exist` error for post-analyzers (#4061)
+
+- Update to version 0.40.0:
+  * feat(flag): Support globstar for `--skip-files` and `--skip-directories` (#4026)
+  * chore(deps): bump actions/stale from 7 to 8 (#3955)
+  * fix: return insecure option to download javadb (#4064)
+  * fix(nodejs): don't stop parsing when unsupported yarn.lock protocols are found (#4052)
+  * ci: add gpg signing for RPM packages (#4056)
+  * fix(k8s): current context title (#4055)
+  * fix(k8s): quit support on k8s progress bar (#4021)
+  * chore: add a note about Dockerfile.canary (#4050)
+  * ci: fix path to canary binaries (#4045)
+  * fix(vuln): report architecture for debian packages (#4032)
+  * feat: add support for Chainguard's commercial distro (#3641)
+  * ci: bump goreleaser for Github Action from 1.4.1 to 1.16.2 (#3979)
+  * fix(vuln): fix error message for remote scanners (#4031)
+  * feat(report): add image metadata to SARIF (#4020)
+  * docs: fix broken cache link on Installation page (#3999)
+  * fix: lock downloading policies and database (#4017)
+  * fix: avoid concurrent access to the global map (#4014)
+  * feat(rust): add Cargo.lock v3 support (#4012)
+  * feat: auth support oci download server subcommand (#4008)
+  * chore(deps): bump github.com/docker/docker (#4009)
+  * chore: install.sh support for armv7 (#3985)
+  * chore(deps): bump github.com/Azure/go-autorest/autorest/adal (#3961)
+
+- Update to version 0.39.1:
+  * fix(rust): fix panic when 'dependencies' field is not used in cargo.toml (#3997)
+  * fix(sbom): fix infinite loop for cyclonedx (#3998)
+  * chore(deps): bump helm/chart-testing-action from 2.3.1 to 2.4.0 (#3954)
+  * fix: use warning for errors from enrichment files for post-analyzers (#3972)
+  * chore(deps): bump github.com/docker/docker (#3963)
+  * fix(helm): added annotation to psp configurable from values (#3893)
+  * chore(deps): bump github.com/go-git/go-git/v5 from 5.5.2 to 5.6.1 (#3962)
+  * fix(secret): update built-in rule `tests`  (#3855)
+  * chore(deps): bump github.com/alicebob/miniredis/v2 from 2.23.0 to 2.30.1 (#3957)
+  * test: rewrite scripts in Go (#3968)
+  * docs(cli): Improve glob documentation (#3945)
+  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/sts (#3959)
+  * ci: check CLI references (#3967)
+  * chore(deps): bump alpine from 3.17.2 to 3.17.3 (#3951)
+  * chore(deps): bump github.com/aws/aws-sdk-go from 1.44.212 to 1.44.234 (#3956)
+  * chore(deps): bump github.com/moby/buildkit from 0.11.4 to 0.11.5 (#3958)
+  * chore(deps): bump actions/setup-go from 3 to 4 (#3953)
+  * chore(deps): bump actions/cache from 3.2.6 to 3.3.1 (#3950)
+  * chore(deps): bump github.com/containerd/containerd from 1.6.19 to 1.7.0 (#3965)
+  * chore(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.0 (#3964)
+
+- Update to version 0.39.0:
+  * docs(cli): added makefile and go file to create docs (#3930)
+  * chore: Revert "ci: add gpg signing for RPM packages (#3612)" (#3946)
+  * chore: ignore gpg key (#3943)
+  * feat(cyclonedx): support dependency graph (#3177)
+  * chore(deps): Bump defsec to v0.85.0 (#3940)
+  * feat(rust): remove dev deps and find direct deps for Cargo.lock (#3919)
+  * feat(server): redis with public TLS certs support (#3783)
+  * feat(flag): Add glob support to `--skip-dirs` and `--skip-files`  (#3866)
+  * chore: replace make with mage (#3932)
+  * fix(sbom): add checksum to files (#3888)
+  * chore(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 (#3928)
+  * chore: remove unused mount volumes (#3927)
+  * feat: add auth support for downloading OCI artifacts (#3915)
+  * refactor(purl): use epoch in qualifier (#3913)
+  * chore(deps): bump github.com/in-toto/in-toto-golang from 0.5.0 to 0.7.0 (#3727)
+  * feat(image): add registry options (#3906)
+  * feat(rust): dependency tree and line numbers support for cargo lock file (#3746)
+  * chore(deps): bump google.golang.org/protobuf from 1.29.0 to 1.29.1 (#3905)
+  * feat(php): add support for location, licenses and graph for composer.lock files (#3873)
+  * chore(deps): updates wazero to 1.0.0 (#3904)
+  * feat(image): discover SBOM in OCI referrers (#3768)
+  * docs: change cache-dir key in config file (#3897)
+  * fix(sbom): use release and epoch for SPDX package version (#3896)
+  * ci: add gpg signing for RPM packages (#3612)
+  * docs: Update incorrect comment for skip-update flag (#3878)
+  * refactor(misconf): simplify policy filesystem (#3875)
+  * feat(nodejs): parse package.json alongside yarn.lock (#3757)
+  * fix(spdx): add PkgDownloadLocation field (#3879)
+  * fix(report): try to guess direct deps for dependency tree (#3852)
+  * chore(amazon): update EOL (#3876)
+  * fix(nodejs): improvement logic for package-lock.json v2-v3 (#3877)
+  * feat(amazon): add al2023 support (#3854)
+  * chore(deps): bump github.com/cheggaaa/pb/v3 from 3.1.0 to 3.1.2 (#3736)
+  * docs(misconf): Add information about selectors (#3703)
+  * docs(cli): update CLI docs with cobra (#3815)
+  * feat: k8s parallel processing (#3693)
+  * docs: add DefectDojo in the Security Management section (#3871)
+  * chore(deps): updates wazero to 1.0.0-rc.2 (#3853)
+  * refactor: add pipeline (#3868)
+  * feat(cli): add javadb metadata to version info (#3835)
+  * chore(deps): Move compliance types to defsec (#3842)
+  * feat(sbom): add support for CycloneDX JSON Attestation of the correct specification (#3849)
+  * feat: add node toleration option (#3823)
+  * fix: allow mapfs to open dirs (#3867)
+  * fix(report): update uri only for os class targets (#3846)
+  * feat(nodejs): Add v3 npm lock file support (#3826)
+  * feat(nodejs): parse package.json files alongside package-lock.json (#2916)
+  * docs(misconf): Fix links to built in policies (#3841)
+
+- Update to version 0.38.3:
+  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2
+    from 1.86.1 to 1.89.1
+  * fix(java): skip empty files for jar post analyzer
+  * fix(docker): build healthcheck command for line without
+    /bin/sh prefix
+  * refactor(license): use goyacc for license parser (#3824)
+  * chore(deps): bump github.com/docker/docker from
+    23.0.0-rc.1+incompatible to 23.0.1+incompatible
+  * fix: populate timeout context to node-collector
+  * fix: exclude node collector scanning (#3771)
+  * fix: display correct flag in error message when skipping
+    java db update #3808
+  * fix: disable jar analyzer for scanners other than vuln (#3810)
+  * fix(sbom): fix incompliant license format for spdx (#3335)
+  * fix(java): the project props take precedence over the
+    parent's props (#3320)
+  * docs: add canary build info to README.md (#3799)
+  * docs: adding link to gh token generation (#3784)
+  * docs: changing docs in accordance with #3460 (#3787)
+
+- Update to version 0.38.2:
+  * chore(deps): bump github.com/moby/buildkit from 0.11.0 to 0.11.4 (#3789)
+  * chore(deps): bump actions/add-to-project from 0.4.0 to 0.4.1 (#3724)
+  * fix(license): disable jar analyzer for licence scan only (#3780)
+  * bump trivy-issue-action to v0.0.0; skip `pkg` dir (#3781)
+  * fix: skip checking dirs for required post-analyzers (#3773)
+  * docs: add information about plugin format (#3749)
+  * fix(sbom): add trivy version to spdx creators tool field (#3756)
+
+- Update to version 0.38.1:
+  * feat(misconf): Add support to show policy bundle version (#3743)
+  * fix(python): fix error with optional dependencies in pyproject.toml (#3741)
+  * chore(deps): bump github.com/aws/aws-sdk-go from 1.44.210 to 1.44.212 (#3740)
+  * add id for package.json files (#3750)
+  * chore(deps): bump github.com/containerd/containerd from 1.6.18 to 1.6.19 (#3738)
+  * chore(deps): bump actions/cache from 3.2.4 to 3.2.6 (#3725)
+  * chore(deps): bump github.com/google/go-containerregistry (#3731)
+  * chore(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7 (#3732)
+  * chore(deps): bump alpine from 3.17.1 to 3.17.2 (#3723)
+
+- Update to version 0.38.0:
+  * fix(cli): pass integer to exit-on-eol (#3716)
+  * feat: add kubernetes pss compliance (#3498)
+  * feat: Adding --module-dir and --enable-modules (#3677)
+  * feat: add special IDs for filtering secrets (#3702)
+  * chore(deps): Update defsec (#3713)
+  * docs(misconf): Add guide on input schema (#3692)
+  * feat(go): support dependency graph and show only direct dependencies in the tree (#3691)
+  * feat: docker multi credential support (#3631)
+  * feat: summarize vulnerabilities in compliance reports (#3651)
+  * feat(python): parse pyproject.toml alongside poetry.lock (#3695)
+  * feat(python): add dependency tree for poetry lock file (#3665)
+  * fix(cyclonedx): incompliant affect ref (#3679)
+  * chore(helm): update skip-db-update environment variable (#3657)
+  * fix(spdx): change CreationInfo timestamp format RFC3336Nano to RFC3336 (#3675)
+  * fix(sbom): export empty dependencies in CycloneDX (#3664)
+  * docs: java-db air-gap doc tweaks (#3561)
+  * feat(go): license support (#3683)
+  * feat(ruby): add dependency tree/location support for Gemfile.lock (#3669)
+  * fix(k8s): k8s label size (#3678)
+  * fix(cyclondx): fix array empty value, null to [] (#3676)
+  * refactor: rewrite gomod analyzer as post-analyzer (#3674)
+  * feat: config outdated-api result filtered by k8s version (#3578)
+  * fix: Update to Alpine 3.17.2 (#3655)
+  * feat: add support for virtual files (#3654)
+  * feat: add post-analyzers (#3640)
+  * chore(deps): updates wazero to 1.0.0-pre.9 (#3653)
+  * chore(deps): bump github.com/go-openapi/runtime from 0.24.2 to 0.25.0 (#3528)
+  * chore(deps): bump github.com/containerd/containerd from 1.6.15 to 1.6.18 (#3633)
+  * feat(python): add dependency locations for Pipfile.lock (#3614)
+  * chore(deps): bump golang.org/x/net from 0.5.0 to 0.7.0 (#3648)
+  * fix(java): fix groupID selection by ArtifactID for jar files. (#3644)
+  * chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.63.1 to 1.85.0 (#3607)
+  * fix(aws): Adding a fix for update-cache flag that is not applied on AWS scans. (#3619)
+  * feat(cli): add command completion (#3061)
+  * docs(misconf): update dockerfile link (#3627)
+  * feat(flag): add exit-on-eosl option (#3423)
+  * chore(deps): bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.2 (#3533)
+  * fix(cli): make java db repository configurable (#3595)
+  * chore: bump trivy-kubernetes (#3613)
+
tryton
+- Version 6.0.28 - Bugfix Release
+
trytond
+- Version 6.0.35 - Bugfix Release
+
trytond_account
+- Version 6.0.18 - Bugfix Release
+
trytond_account_invoice
+- Version 6.0.13 - Bugfix Release
+
trytond_stock
+- Version 6.0.21 - Bugfix Release
+
+- Version 6.0.20 - Bugfix Release
+
+- Version 6.0.19 - Bugfix Release
+
trytond_stock_lot
+- Version 6.0.1 - Bugfix Release
+
ttynvt
+* Update to version 0.16
+  - Add overall access lock
+  - Optionally add delay during close
+  - Optionally disable telnet processing
+  - Add test server and client
+  - Log to stderr instead of stdout
+  - Optionally be quiet
+  - Various minor bug fixes
+  - Various cleanups
+  * Update to version 0.15
+  Bugfixes:
+  - Clear pollin flag when input buffer is flushed
+  - Correct termios2 baud rate calculation
+  - Fix potentially incorrect speed check
+  - Handle CRTSCTS properly
+  Other:
+  - Support for software flow control
+  - Add support for termios2 ioctls
+
tupitube
+- Fix build with newer rubies, that removed File:exists method
+
uacme
+- update to 1.7.4:
+  * uacme: Validate token from ACME server.
+  * minor documentation changes including copyright year
+
+- Update to version 1.7.3
+  * ualpn.c: fix build with mbedtls 2.x …
+  * LibreSSL > 3.5.0 has ASN1_TIME_diff()
+  * Enable --must-staple support with LibreSSL > 3.5.0 …
+  * Add Unix philosophy link to README.md
+  * Compatibility wth LibreSSL
+
+- Update to version 1.7.2
+  * uacme: exponential backoff for status polling instead
+    of constant 5s delay (reduces load on server)
+  * uacme: new -r option to allow specifying revocation code
+  * uacme: fix silent failure in nsupdate.sh
+    closes https://github.com/ndilieto/uacme/issues/45
+  * uacme: replace 'echo' with 'printf' in uacme.sh
+    closes https://github.com/ndilieto/uacme/issues/48
+  * uacme: fix -Wsign-compare warning
+  * compatibility with mbedTLS v3.2
+  * compatibility with LibreSSL (with some limitations)
+    see https://github.com/ndilieto/uacme/commit/32546c7c
+  * embed ax_check_compile_flag.m4 from autoconf-archive as
+    requested in https://github.com/ndilieto/uacme/pull/57
+  * minor documentation changes including copyright year
+- Removed libev-devel from BuildRequires which causes conflict in
+  Tumbleweed.
+- Added uacme-fix-incorrect-return-types.patch to be able to build
+  in Tumbleweed (original patch is at
+  https://github.com/socketry/nio4r/pull/276).
+
+- Update to version 1.7.1
+  * uacme: fix issue when running from inaccessible directory
+  * ualpn: use default user group when -u <user> is specified
+- Update to version 1.7.0
+  * uacme: alternate chain selection by certificate fingerprint
+  * print copyright with version
+  * ualpn: print copyright with version
+  * add notice with version on startup
+  * reject duplicate options where appropriate
+  * make ualpn.sh always outputs to stderr
+  * fix compilation warning
+- Update to version 1.6
+  * uacme: add support for RFC8555 External Account Binding
+  * fix use after free in surrogate strcasestr function
+  * make nsupdate.sh accept quoted TXT challenge values
+  * minor cosmetic changes to log messages
+- Rebased suse-www-path.patch
+
udpspeeder
+- update to 20230206.0:
+  * Fix bug in https://github.com/wangyu-/UDPspeeder/issues/290.
+
ugrep
+- update to 4.2.0:
+  * text user inerface improvements
+  * improve recursive search performance
+  * improve compatibility with GNU grep
+  * improve detection of special devices to avoid searching them
+
+- update to 4.1.0:
+  * fix -Z fuzzy matching when character deletions are solely
+    specified with a minus sign
+  * fix --pager when a regex syntax error occurs
+  * update --pager to use $PAGER
+  * update --ignore-files for compliance with git and ag gitignore
+    rules
+  * update -Q TUI ctrl-S and ctrl-W to jump to context group
+    separators when context options -ABC are specified
+  * update -o for GNU grep compatibility with "empty-matching"
+    patterns
+  * update POSIX [[:space:]] and \s to exclude newline \n matching
+  * improve performance: faster -c and line matching
+  * improve performance: faster "empty-matching" pattern search
+
upsm
+- Drop binutils-gold dependency as the package is obsolete.
+
upx
+- Update to release 4.1
+  * ELF: handle shared libraries with more than 2 PT_LOAD segments
+
v4l2loopback
-- Fix string format vulnerability (bsc#1202156, CVE-2022-2652,
-  v4l2loopback-explicit-format-CVE-2022-2652.patch).
+- Update to version 0.12.7:
+  * Add explicit format specifier to printf() invocations
+    (bsc#1202156, CVE-2022-2652).
+  * REMAKE_INITRD is deprecated in dkms 3
+  * event: install event (un)subscribe hook
+  * Don't fail if allocating 0-sized buffers
+  * Other minor fixes
+- Refresh v4l2loopback-include_header.patch.
+
+- Fix modprobe.d location for 15.3 and earlier (bsc#1196275, jsc#SLE-20639)
vifm
+- Update to 0.13:
+  * Faster file-system navigation with new searching/filtering
+    submodule
+  * More interactive :compare
+  * Mouse supports and TUI improvements
+  * %N macro has been adjusted to fix integration with image preview
+    of Kitty v0.27+.
+  * Lots of fixes related to search and various combinations of'
+    hlsearch', 'incsearch' in different modes.
+
virtualbox
+- Fix problems wiith 6.5 kernels and shared folders. boo#1215463.
+  Fix build errors for Leap 15.4, 15.5, and 15.6 due to gso.h not found.
+
+- An additional fix was needed to handle flexible arrays in kernel 6.5+.
+  A fix was made for breakage of kernels 6.4.10+ boo#1212761 and boo#1214391.
+  Note that the change in 6.4 missed an internal include that is present
+  in kernel 6.5.
+
+- Fix build for kernel 6.5
+  Add file "fixes_for_6.5.patch"
+  Reworked patches for various Leap versions:
+    Added file "fixes_for_leap.patch"
+    Deleted file "fixes_for_leap15.2.patch"
+    Deleted file "fixes_for_leap15.3.patch"
+    Deleted file "fixes_for_leap15.4.patch"
+    Deleted file "fixes_for_leap15.5.patch"
+
+-  VirtualBox 7.0.10 (released July 18 2023)
+  This is a maintenance release. The following items were fixed and/or added:
+    OCI: Introduced general improvements
+    VMM: Fixed a bug while walking page tables while executing nested VMs causing flooding of the release log as a consequence (Intel hosts only, bug #21551)
+    GUI: Added general improvements
+    TPM: Fixed a crash when a VM has a TPM version 1.2 configured (bug #21622)
+    3D: Initial support for OpenGL 4.1
+    3D: Fixed various graphics issues with Windows 11 guests (bugs #21136, #21515)
+    Guest Control/VBoxManage: Fixed parameter "--ignore-orphaned-processes"
+    Guest Control/VBoxManage: Fixed behavior of how handling argument 0 for a started guest process works: One can now explicitly specify it with the newly added option "--arg0". This will effectively restore the behavior of former VirtualBox versions
+    Audio: Also use the PulseAudio backend when pipewire-pulse is running instead of falling back to ALSA (bug #21575)
+    NAT: Adjusted UDP proxy timeout from 18-21 to 21-24 range to respect intended 20 second timeout (bug #21560)
+    Linux Host: Added initial support for Indirect Branch Tracking (bug #21435)
+    Linux Host: Added initial support for kernel 6.5 (NOTE: Guest Additions do not support kernel 6.5 yet)
+    Linux Host and Guest: Improved condition check when kernel modules need to be signed
+    Linux Host and Guest: Added initial support for RHEL 8.8 (bug #21692), 8.9 (bug #21690) and 9.3 (bugs #21598 and #21671) kernels
+    Linux Guest Additions: Fixed issue when kernel modules were rebuilt on each boot when guest system has no X11 installed
+    Linux Guest Additions: Added initial support for kernel 6.4
+    Linux Guest Additions: Fixed issue when vboxvideo module reloading caused kernel panic in some guests (bug #21740)
+    Linux Guest Additions: Introduced general improvements in the installer area
+    Windows Guest Additions: Introduced general improvements in graphics drivers area
+    removed "fixes_for_kernel_6.4.patch" as this is fixed upstream
+    Fix issue with kernel on newer CPU (boo#1212209)
+
+- Fix builds on kernel 6.4 (boo#1212761)
+  bash ./virtualbox-patch-source.sh VirtualBox-7.0.10.tar.bz2
+  tar xjf VirtualBox-7.0.10.tar.bz2
+  cd VirtualBox-7.0.10
+  mkdir patches
+  mkpatch
+  cd ..
+  osc status
+  osc add VirtualBox-7.0.10-patched.tar.bz2
+  osc status
+  cd -File "fixes_for_kernel_6.4.patch" added.
+
+- Turn build of VBoxSDL back on
+  Files "fix_sdl_build.patch" and "fixes_for_leap15.4.patch" are added.
+  This update addresses boo#1211941.
+
+- update python311.patch: remove changes that only work on
+  Tumbleweed
+
+- Patch python311.patch fails on Leap 15.4 and Leap 15.5. Change spec file so thqt it is only
+  applied for Tumbleweed.
+
+- update python311.patch to also detect vboxpython module with python 3.11
+
+- Update fix_7.0.6_locking_problems.patch for Vagrent/virtualbox startup problems boo#1209727
+
watchexec
+- Security fix: CVE-2023-26964, bsc#1210368
+  * Latest vendored dependency h2 is 0.3.19
+- Update to version 1.22.3:
+  * release: watchexec-cli v1.22.3 (#590)
+  * release: watchexec-filterer-ignore v1.2.1 (#589)
+  * release: ignore-files v1.3.0 (#588)
+  * Fix warnings (#586)
+  * Add recent PRs to changelogs (#587)
+  * Try to fix windows tests (#585)
+  * Update completions/manpage (#584)
+  * Update deps (#583)
+  * Fix adding globs to the IgnoreFilter (#581)
+  * fix bosion tests (#582)
+
+- Update to version 1.22.2:
+  * release: watchexec-cli v1.22.2 (#560)
+  * Normalise paths to unix on windows for filtering only (#558)
+  * Disable signals on windows (#559)
+  * Build manpage just before packaging (#557)
+  * Fix tests-pass job (#556)
+  * Update manpage (#555)
+  * Fix dist-manifest gen (#554)
+  * Switch away from set-output (#553)
+  * release: watchexec-cli v1.22.1 (#551)
+  * release: watchexec v2.3.0 (#550)
+
+- Update to version 1.22.1:
+  * Fix --restart and --stop-timeout (#544, #548)
+  * Fix process group not always being killed on restart (#274, #549)
+
+- Update to version 1.22.0:
+  * release: watchexec-cli v1.22.0 (#538)
+  * release: watchexec-filterer-globset v1.2.0 (#537)
+  * release: watchexec-filterer-ignore v1.2.0 (#536)
+  * release: watchexec v2.2.0 (#535)
+  * release: ignore-files v1.2.0 (#534)
+  * release: watchexec-events v1.0.0 (#533)
+  * release: watchexec-signals v1.0.0 (#532)
+  * Set new crates to zero for release (#531)
+  * Fix and adjust docs (#530)
+  * Rename --manpage to --manual (#529)
+
+- Update to version 1.21.1:
+  * release: watchexec-cli v1.21.1 (#499)
+  * release: watchexec v2.1.1 (#498)
+  * Exit explicitly when we're PID 1 (#497)
+  * Reset process sigmask for Rust 1.66 (#494)
+  * Bump tokio from 1.23.1 to 1.24.2 (#491)
+  * Avoid looping in demo (#486)
+  * Add #449 to lib changelog (#481)
+  * Lock CI for msrv checks (#482)
+  * Update git-config requirement from 0.14.0 to 0.15.0 in /crates/ignore-files (#480)
+
wayshot
+- Readd accidentally removed vendored deps.
+
+- Replace obsoleted `disabled` option with `manual`
+
+- Update to version 1.3.0:
+  * [refactor] use libwayshot for shm
+  * [docs] Update documentation
+  * [feat] Qoi image format supported
+  * [feat] Multi-output transform handling
+  * [docs] Remove known bugs section
+  * [fix] debug and stdout flags should conflict
+  * [deps] Update dependencies
+  * [Feat] Multi-output composited screenshots
+  * [feat] Record output geometry transforms
+  * [update] Reduce number of roundtrips in get_all_outputs
+  * [feat] Add nix flake
+  * [chore] Update xdg-desktop-portal-wlr submodule
+  * [fix] Incorrect docs dir
+  * [feature] Split backend into libwayshot
+  * [feature] Custom XDPW implementation using wayshot
+  * [update] Upgrade to wayland-rs 0.30.0
+  * [docs] Update readme to accomodate https://github.com/waycrate/wayshot/pull/35
+  * [feature] Parse slurp's default geometry output format
+  * [deps] Remove unused dependency
+  * [feature] added 10-bit back buffer support
+  * [contrib/pkgbuild/bin] Remove man pages
+  * [contrib/pkgbuild/bin] bump version
+
+- Update vendored dependencies to fix CVE bnc#1212010
+
webkit2gtk3
+- Expand lang sub-package in spec file unconditionally to handle
+  previous name change from WebKit2GTK-lang to WebKitGTK-lang. This
+  change affected the automatic generated Requires tag on
+  WebKit2GTK-%{_apiver}, then getting out of sync of what's being
+  required and what's being provided. Now, any sub-package that was
+  providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver}
+  instead (boo#1214835, boo#1214640, boo#1214093).
+- Require libwaylandclient0 >= 1.20. 15.4 originally had 1.19.0,
+  but webkitgtk uses a function added in 1.20.0, so we need to
+  ensure that the wayland update is pulled in (bsc#1215072).
+
-- Update to version 2.40.5 (boo#1213905 boo#1213379 boo#1213581):
+- Update to version 2.40.5 (boo#1213905 boo#1213379 boo#1213581
+  boo#1215230):
-    CVE-2023-38594, CVE-2023-38595, CVE-2023-38597,,
-    CVE-2023-38599,, CVE-2023-38600, CVE-2023-38611.
+    CVE-2023-38594, CVE-2023-38595, CVE-2023-38597,
+    CVE-2023-38599,, CVE-2023-38600, CVE-2023-38611,
+    CVE-2023-40397.
-    CVE-2023-37450.
+    CVE-2023-37450, CVE-2023-28198, CVE-2023-32370.
wike
+- Update to version 2.0.1:
+  * Bug fixes.
+  * Small UI tweaks.
+  * Updated translations.
+
+- Update to version 2.0.0:
+  * Migration to GTK4 + Libadwaita.
+  * The search input is now always visible. It also includes an
+    indication of the selected language and a button that gives
+    access to the search settings.
+  * Type to search. Just start typing to find articles.
+  * New side panel that provides access to the article table of
+    contents, languages, bookmarks and history. It can be used in
+    floating or pinned mode.
+  * Bookmarks with multiple lists.
+  * New view menu that allows you to change the theme, zoom,
+    typography and more.
+  * Content view now defaults to system font.
+  * Responsive design. The user interface now adapts to small
+    screens, like phones.
+  * Improved status pages (new tab, article not found...).
+  * Use of flag icons to help identify languages. This can be
+    turned off.
+  * New printing option. This also allows export articles using the
+    "Print to PDF" option.
+  * New app icon.
+  * Updated translations.
+
+- Update to version 1.8.3:
+  * Added shortcut for Random Article.
+  * Small UI tweaks.
+  * Bumped to GNOME runtime 43 and WebKit 4.1.
+  * Updated translations.
+
wimlib
+- update to 1.14.1:
+  * fuse3 support
+  * wimupdate now supports the --ref option for updating delta WIM
+  * better default behavior when converting to and from solid
+    archives: wimoptimize --solid, and wimoptimize --compress=LZX
+
wireshark
+- Wireshark 3.6.16:
+  * CVE-2023-4512: CBOR dissector crash (bsc#1214561).
+  * CVE-2023-4511: BT SDP dissector infinite loop (bsc#1214560).
+  * CVE-2023-4513: BT SDP dissector memory leak (bsc#1214562).
+  * CVE-2023-2906: CP2179 dissector crash (bsc#1214652).
+- Further features, bug fixes and updated protocol support as listed in:
+  https://www.wireshark.org/docs/relnotes/wireshark-3.6.16.html
+
wp-cli
+- Update to version 2.8.1
+  * Define WP_CLI_ROOT if needed
+  * Extract Requests out of Composer
+- Update to version 2.8.0
+  * Ignore Requests deprecations in error handling for now
+  * Fallback to hardcoded folder when WPINC not defined
+  * Conditionally adapt to Core Requests library
+  * Add bootstrap step to extract default CA certificate
+  * Use wp_cache_flush_runtime if supported.
+  * Extract cacert from Phar for cURL
+  * Fix some PHP 8.2 depreciation notices in behat tests
+  * Upgrade WP-CLI to Requests v2
+  * Added "wp cli alias is-group" subcommand.
+  * Use -R instead of -r for fallback pager command
+  * Fix autocompletion notice with PHP 8.2
+  * fix PHP Deprecation for 8.1
+  * Add composer phpcbf
+  * Use WP_CLI_FORCE_USER_LOGIN=1 to force --user=<login>
+  * Fix --skip-themes for themes with block patterns
+  * Fix deprecation notice triggered in WpOrgApi class in PHP 8.1
+  * Improve support for cases with empty --path provided to wp-cli commands
+  * PHP 8.2: explicitly declare CompositeCommand::$longdesc to fix deprecation warning
+  * Detect Object Cache Pro
+  * Ensure WP_CLI_ROOT is defined before accessing it
+
wxEDID
+- Update to v0.0.29
+  Changed:
+  * BED: dynamic name: displays only MFC and product ID (removed
+    prod. year and week)
+  * VDB::SVD: append "[Native]" if native resolution flag is set.
+  Fixed:
+  * (BUG::regression) EDID_cl::getVidDesc(): missing space between
+    aspect ratio and screen resolution: incorrect SVD description
+    in text output mode (Save_As_Text).
+  * Using global strings where possible: cheaper, faster.
+    xxx::getGrpName() -> global EDID_cl::gp_name
+    wxEDID_Frame::SaveRep_SubGrps(), WriteField(),
+    GetFullGroupName() -> wxEDID_Frame::sval
+    EDID_cl::getStrUint() -> EDID_cl::tmps2
+
+- Update to v0.0.28
+  Changed:
+  * Change: Default colors for all controls:
+    allows to work with different window themes:
+    wxWidgets 3.0.x: not working for wxAUI windows, wxTreeCtrl
+    and wxGrid
+    wxWidgets 3.2.x: not working for wxGrid
+  Added:
+  * Automatic selection of BED block after the EDID file is
+    loaded/imported.
+  * BDD: display image size as dynamic block name.
+  * BED: display MFC code, year, week, prod ID as dynamic block
+    name.
+  * DTD and VDB::SVD: use screen resolution as dynamic block name.
+  * MND: display monitor name as dynamic block name.
+  * STI: use screen resolution as dynamic block name or set
+    "not used" if both bytes are 0x1.
+  * VID: display input type as dynamic block name.
+  * config option: blk_dynamic_names.
+  * edi_grp_cl::getGrpName(): support for dynamic block names.
+  Fixed:
+  * DTD panel: sct_pixclk control: value range should be
+    0..65535 (655.35MHz), not 0..655350
+  * DTD panel: sct_vsoffs, sct_vswidth controls: value range
+    should be 0..63, not 0..1023
+
+- Update to v0.0.27
+  Changed
+  * ExportEDID_hex(): do not append wxEDID version and the source
+    file name at the end of output file: this causes errors when
+    the file needs to be imported back (unless ignoring errors is
+    enabled).
+  * VFPD: Video Format Preference Data Block is now root group for
+    array of SVRs
+  * CEA-EXT::VFPD:SVR: added vmap: CEA_vidm_map, same as for SVD:
+    this allows to show meaning of SVR values when the EDID
+    structure is saved as text.
+  * wxEDID_Frame::OpenEDID(), ImportEDID_hex(): always try to
+    Reparse() faulty EDID structure when "Ignore EDID errors" is
+    enabled. wxEDID_Frame::Reparse() is now returning fault even
+    when ignoring errors is enabled.
+  Added
+  * wxEDID_Frame::SaveRep_SubGrps(): decoding of VFPD:SVR values.
+  Fixed
+  * The checksum values showed in BLockData grid for EDID.BASE.BED
+    or EDID.CEA.CHD were not refreshed after
+    AssembleEDID/Save/Export. To refresh those cells, it was
+    necessary to Reparse() the EDID buffer. Now the checksums are
+    automatically updated in wxEDID_Frame::AssembleEDID_main(),
+    invoked from wxEDID_Frame::SaveEDID(), ExportEDID_hex(),
+    SaveReport() and evt_assemble_edid().
+  * (BUG::leak) wxEDID_Frame::ImportEDID_hex(): memory leak
+    possible when the hex->bin conversion fails.
+  * (BUG::wxWidgets3.x ::wxAUI) AUI managed panel gets refreshed
+    even when it's invisible, what can cause horrible flickering
+    during window resizing. wxEDID_Frame::evt_ntbook_page():
+    disable the EvtHandler in AUI Manager when the panel is
+    invisible.
+  * (BUG: Regression in v0.0.23) The functions EDID_cl::MfcId(),
+    ProdSN(), ProdWk(), ProdYr() were not updated to work with
+    local data buffers: the respective fields in EDID.BASE.BED
+    could not be changed.
+  * wxEDID_Frame::SaveRep_SubGrps(): Video Data Block: VIC values
+    were not really decoded, so for SVD values > 127 the
+    desriptions were incorrect.
+  * (BUG::old::mislooked) wxEDID_Frame::SaveRep_SubGrps() uses
+    value descriptions from vmap_t->vname_map_t, but reserved
+    values were not included in some cases -> incorrect (shifted)
+    descriptions in the output file. Now all the reserved values
+    are included with value description set to NULL.
+    edi_grp_cl::create_selector() ignores values with NULL name
+    ptr. wxEDID_Frame::SaveRep_SubGrps() prints "<reserved>"
+    for NULL name ptr.
+
xemacs
+- Add xemacs-21.5.34-fix2038.patch to fix buffers after year 2038
+
+- Drop canna support: canna has not been maintained for a long time
+  and sec issues are not being addressed (bsc#1199280).
+
xemacs-packages
+- tramp.texi: Try to avoid old macros nor know by modern texinfo
+
+- Drop canna support: canna has not been maintained for a long time
+  and sec issues are not being addressed (bsc#1199280).
+
-- update packages to latest xemacs versions:
-  * cc-mode 1.57 -> 1.60: small fixes, check
-    http://cc-mode.sourceforge.net for detailed changelog
-  * edit-utils 2.47 -> 2.49: add list-register
-  * prog-modes 2.27 -> 2.28: update go-mode to 14989
-  * tramp 1.40 (2.0.56) -> 1.41 (2.2.7-pre): major update,
-    details see ChangeLog.upstream
-  * ediff 1.81 -> 1.82, pcl-cvs 1.70 -> 1.71:
-  fix tramp compilation
-
-- update packages to latest xemacs versions:
-  * edit-utils 2.46 -> 2.47: support behavior in user-colors
-
xmrig
+- Update to version 6.20.0:
+  * v6.20.0
+  * v6.20.0-dev
+  * Zephyr solo mining: fix for blocks with transactions
+  * Zephyr coin support
+  * KawPow: fixed data race when building programs
+  * Code cleanup.
+  * Disallow direct use of HwlocCpuInfo class.
+  * Code cleanup.
+  * Fixed compatibility with hwloc 1.11.
+  * Added new CMake options ARM_V8 and ARM_V7.
+  * Added new ARM CPU names.
+  * v6.19.4-dev
+  * Add API rebind polling
+  * fix(cuda): receive CUDA loader error on linux too.
+  * Add x86 to README
+
+- Update to version 6.19.3:
+  * v6.19.3
+  * Update CHANGELOG.md
+  * Updated example scripts
+  * Fixed `jccErratum` list
+  * RandomX: fixed undefined behavior
+  * RandomX: optimized program generation
+  * Tweaked auto-tuning for Intel CPUs
+  * #3245 Improved algorithm negotiation for donation rounds by sending extra information about current mining job.
+  * v6.19.3-dev
+
+- Update to version 6.19.2:
+  * v6.19.2
+  * Update CHANGELOG.md
+  * Sync with changes from proxy
+  * Improve .cmd files when run by shortcuts on another drive
+  * Code style cleanup.
+  * DaemonClient: new X-Hash-Difficulty HTTP header optimization
+  * Fixed parsing of TX_EXTRA_MERGE_MINING_TAG
+  * v6.19.2-dev
+
+- Update to version 6.19.1:
+  * v6.19.1
+  * Update CHANGELOG.md
+  * Fix build with gcc 13
+  * Resolved deprecated methods warnings with OpenSSL 3.0.
+  * Fix: `--randomx-wrmsr=-1` worked only on Intel
+  * Fix for 32-bit clang 15
+  * Fixed DnsUvBackend storage cleanup.
+  * Revert changes to fix MSVC build.
+  * Cleanup.
+  * Fix warning.
+  * Partially resolved deprecated methods warnings in OpenSSL 3.0.
+  * v6.19.1-dev
+
+- Update to version 6.19.0:
+  * v6.19.0
+  * Update scripts/build.*.sh.
+  * v6.19.0-dev (new config options added).
+  * Update CHANGELOG.md
+  * Solo mining: added job timeout (default is 15 seconds)
+  * Update hwloc for MSVC builds to 2.9.0.
+  * Update CHANGELOG.md
+  * Update to latest sse2neon.h.
+  * Fixed broken RandomX light mode mining
+  * #3185 Fixed macOS DMI reader.
+  * Show IP address for failed connections
+  * DragonflyBSD compilation fixes
+  * Added ifdefs for DragonflyBSD
+  * Bump the minimum CMake version in other places too.
+  * Update cmake required version to 3.1
+  * Improved Zen 3 MSR mod
+  * MSVC build: enabled parallel compilation
+  * #2869
+  * Update to latest sse2neon.h from github:DLTcollab/sse2neon
+  * v6.18.2-dev
+
xplr
+- Replace obsoleted `disabled` option with `manual`
+
+- Update vendored dependencies.
+- Always update vendored deps in _service.
+- Add signature xplr-0.21.3.tar.gz.asc
+
+- Update to version 0.21.3:
+  * Fixed "Illegal format character q" error seen on non GNU (including macOS and BSD) systems
+  * Fixed a UI issue causing lower priority styles being fully ignored
+  * Press f1 to see the global help menu from any mode, without leaving the mode.
+  * Current mode help menu will be displayed on top of the global help menu.
+  * Added hook: on_selection_change.
+  * Documentation improvements.
+
+- Disable update of vendored deps
+
+- Update to version 0.21.2:
+  * Added CustomLayout, a new custom panel type to allow nesting other layouts inside a static or dynamic
+    layout. This will allow switching between different layouts dynamically, without having to switch modes.
+  * $LS_COLORS will have lesser priority than xplr.config.node_types.*.style.
+  * Now, there's no default color set in xplr.config.node_types.*.style, so xplr will default to $LS_COLORS.
+  * xplr -m now uses jf to render and pass messages. This allows for a more flexible template syntax.
+  * xplr will now ask before delete.
+  * For copy, move or symlink operations, xplr will ask what to do if a file with the same name exists.
+  * CLI help menu improvements
+  * Several fixes and improvements in documentation
+
+- Update to version 0.21.1:
+  * SelectAll and ToggleSelectAll (i.e. ctrl-a) in a new directory
+    will extend, instead of replace, the existing selected paths.
+  * Fixed a UI bug causing random characters to turn bold.
+
+- Update vendored dependencies.
+- Use zstd compression for vendored deps.
+
xsimd
+- update to 11.1.0:
+  * Introduce XSIMD_DEFAULT_ARCH to force default architecture
+    (if any)
+  * Remove C++ requirement on xsimd::exp10 scalar implementation
+  * Improve and test documentation
+  * Provide a generic reducer
+  * Fix ``find_package(xsimd)`` for xtl enabled xsimd, reloaded
+  * Cleanup benchmark code
+  * Provide avx512f implementation of FMA and variant
+  * Hexadecimal floating points are not a C++11 feature
+  * back to slow implementation of exp10 on Windows
+  * Changed bitwise_cast API
+  * Provide generic signed /unsigned type conversion
+  * Fixed sde location
+  * Feature/incr decr
+  * Cleanup documentation
+
yara
+- update to 4.3.2:
+  * BUGFIX: assertion triggered with certain hex patterns when
+    scanning arbitrary files
+
+- update to 4.3.1:
+  * BUGFIX: Functions `import_rva` and `import_delayed_rva` are
+    now case-insensitive (#1904)
+  * BUGFIX: Fix heap-related issue in `dotnet` module on Windows
+    (#1902)
+  * BUGFIX: Fix heap corruption with certain rules that have very
+    long string sets (67cccf0)
+
+- Build AVX2 enabled hwcaps library for x86_64-v3
+
+- update to 4.3.0:
+  * Added a not operator for bytes in hex strings. Example: {01 ~02 03} (#1676).
+  * for statement can iterate over sets of literal strings (e.g. for any s in ("a", "b"): (pe.imphash() == s)) (#1787).
+    of statement can be used with at (e.g. any of them at 0) (#1790).
+  * Added the --print-xor-key (-X in short form) command-line option that prints the XOR key for xored strings (#1745).
+  * Implement the --skip-larger command-line option in Windows (#1678).
+  * Add parsing of .NET user types from .NET metadata stream in "dotnet" module (#1605).
+  * Improve certificate parsing and validation in "pe" module (#1623).
+  * Improve error reporting on certain edge cases (#1709, #1722).
+  * BUGFIX: Fix multiple memory alignment issues causing crashes in non-x86 platforms (#1724).
+  * BUGFIX: Fix implementation of math.serial_correlation(#1771).
+  * BUGFIX: Fix infinite recursion in dotnet module (#1794).
+  * BUGFIX: Fix SIGFPE when dividing INT64_MIN by -1 (c2557fc).
+  * BUGFIX: Fix several endianess issues (#1884, #1874, #1855).
+- removed fix-test-magic.patch as was merged into upstream
+
+- backport upstream fixes for file magic tests: fix-test-magic.patch
+
zd1211-firmware
+- Fix build on Leap which does not have %_firmwaredir
+
+- use %_firmwaredir
+
zynaddsubfx
+- Add fix-missing-include.patch: Add missing #include <cstdint>
+  exposed by gcc 13.
+
+- Compensate for fltk's lack of pkgconfig file.Fixes Leap:15.5 build
+
+- Update to 3.0.6
+  * Enhances watchpoint system for waveform views
+  * Add anti-alias mode to add synth oscillator interpolation
+  * Add 14 bit NRPN support for automations
+  * Add Tanh, Cubic, and square distortions with additional shaping
+    params
+  * Add filter parameter smoothing
+  * Add filter optional LPF to LFO
+  * Add repeatable envelopes
+  * Add LFO fade in
+  * Add moog ladder filter
+  * Add comb filter
+  * Add BPM sync
+  * Add latched key mode
+  * Re-enable classic MIDI learn
+  * Increase envelope time parameter resolution
+  * Fix excessively loud volume bug in Part XML loader
+  * Fix crash with gcc 10.x.x within file manager
+  * Fix crash in erroneous patch load
+  * Fix padsynth memory leak
+  * Fix weird note-to-note portamento switches
+  * Reduce fftw resolution from 64bit to 32bit
+  * Remove Cxxtest dependency
+  * Fix other bugs
+- Subpackage for bash completions
+- Rebased zynaddsubfx-buildflags.patch
+- Drop upstream fixed zynaddsubfx-DPF.patch
+