<updates>
  <update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>17</id>
    <title>Recommended update for cockpit</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1723732838" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220551" id="1220551" title="Cockpit -&gt; Account does not update the coloum &quot;last active&quot;" type="bugzilla" />
    </references>
    <description>This update for cockpit fixes the following issues:

- Support for watching lastlog2 and wtpmdb. (bsc#1220551)

</description>
    <pkglist>
      <collection>
        <package name="cockpit" epoch="0" version="309" release="6.1" arch="src" src="src/cockpit-309-6.1.src.rpm">
          <filename>cockpit-309-6.1.src.rpm</filename>
        </package>
        <package name="cockpit" epoch="0" version="309" release="6.1" arch="x86_64" src="x86_64/cockpit-309-6.1.x86_64.rpm">
          <filename>cockpit-309-6.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-bridge" epoch="0" version="309" release="6.1" arch="x86_64" src="x86_64/cockpit-bridge-309-6.1.x86_64.rpm">
          <filename>cockpit-bridge-309-6.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-bridge-debuginfo" epoch="0" version="309" release="6.1" arch="x86_64" src="x86_64/cockpit-bridge-debuginfo-309-6.1.x86_64.rpm">
          <filename>cockpit-bridge-debuginfo-309-6.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-debuginfo" epoch="0" version="309" release="6.1" arch="x86_64" src="x86_64/cockpit-debuginfo-309-6.1.x86_64.rpm">
          <filename>cockpit-debuginfo-309-6.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-debugsource" epoch="0" version="309" release="6.1" arch="x86_64" src="x86_64/cockpit-debugsource-309-6.1.x86_64.rpm">
          <filename>cockpit-debugsource-309-6.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-networkmanager" epoch="0" version="309" release="6.1" arch="noarch" src="noarch/cockpit-networkmanager-309-6.1.noarch.rpm">
          <filename>cockpit-networkmanager-309-6.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-selinux" epoch="0" version="309" release="6.1" arch="noarch" src="noarch/cockpit-selinux-309-6.1.noarch.rpm">
          <filename>cockpit-selinux-309-6.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-storaged" epoch="0" version="309" release="6.1" arch="noarch" src="noarch/cockpit-storaged-309-6.1.noarch.rpm">
          <filename>cockpit-storaged-309-6.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-system" epoch="0" version="309" release="6.1" arch="noarch" src="noarch/cockpit-system-309-6.1.noarch.rpm">
          <filename>cockpit-system-309-6.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-ws" epoch="0" version="309" release="6.1" arch="x86_64" src="x86_64/cockpit-ws-309-6.1.x86_64.rpm">
          <filename>cockpit-ws-309-6.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-ws-debuginfo" epoch="0" version="309" release="6.1" arch="x86_64" src="x86_64/cockpit-ws-debuginfo-309-6.1.x86_64.rpm">
          <filename>cockpit-ws-debuginfo-309-6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>18</id>
    <title>Security update for nghttp2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1724154426" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221399" id="1221399" title="VUL-0: CVE-2024-28182: nghttp2: HTTP/2 CONTINUATION frames can be utilized for DoS attacks" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28182" id="CVE-2024-28182" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28182" type="cve" />
    </references>
    <description>This update for nghttp2 fixes the following issues:

- CVE-2024-28182: Fixed denial of service via http/2 continuation frames (bsc#1221399)
</description>
    <pkglist>
      <collection>
        <package name="libnghttp2-14" epoch="0" version="1.52.0" release="5.1" arch="x86_64" src="x86_64/libnghttp2-14-1.52.0-5.1.x86_64.rpm">
          <filename>libnghttp2-14-1.52.0-5.1.x86_64.rpm</filename>
        </package>
        <package name="libnghttp2-14-debuginfo" epoch="0" version="1.52.0" release="5.1" arch="x86_64" src="x86_64/libnghttp2-14-debuginfo-1.52.0-5.1.x86_64.rpm">
          <filename>libnghttp2-14-debuginfo-1.52.0-5.1.x86_64.rpm</filename>
        </package>
        <package name="nghttp2" epoch="0" version="1.52.0" release="5.1" arch="src" src="src/nghttp2-1.52.0-5.1.src.rpm">
          <filename>nghttp2-1.52.0-5.1.src.rpm</filename>
        </package>
        <package name="nghttp2-debugsource" epoch="0" version="1.52.0" release="5.1" arch="x86_64" src="x86_64/nghttp2-debugsource-1.52.0-5.1.x86_64.rpm">
          <filename>nghttp2-debugsource-1.52.0-5.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>117</id>
    <title>Security update for util-linux</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1733488669" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218609" id="1218609" title="chcpu man page needs clarification for zVM guests" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220117" id="1220117" title="L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221831" id="1221831" title="VUL-0: CVE-2024-28085: util-linux: improper neutralization of escape sequences in wall" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223605" id="1223605" title="lscpu not showing Model Name for arm vendor" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225598" id="1225598" title="SLES 15 SP6 - KVM : &quot;lscpu -e&quot; command hangs in the guest console (util-linux)" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28085" id="CVE-2024-28085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28085" type="cve" />
    </references>
    <description>This update for util-linux fixes the following issues:

Security issue fixed:

-  CVE-2024-28085: Properly neutralize escape sequences in wall to avoid potential account takeover. (bsc#1221831)

Non-security issues fixed:
 
- Fix hang of lscpu -e (bsc#1225598)
- lscpu: Add more ARM cores (bsc#1223605)
- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609)
- Processes not cleaned up after failed SSH session are using up 100% CPU (bsc#1220117)
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/libblkid1-2.39.3-3.1.x86_64.rpm">
          <filename>libblkid1-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1-debuginfo" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/libblkid1-debuginfo-2.39.3-3.1.x86_64.rpm">
          <filename>libblkid1-debuginfo-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/libfdisk1-2.39.3-3.1.x86_64.rpm">
          <filename>libfdisk1-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1-debuginfo" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/libfdisk1-debuginfo-2.39.3-3.1.x86_64.rpm">
          <filename>libfdisk1-debuginfo-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/libmount1-2.39.3-3.1.x86_64.rpm">
          <filename>libmount1-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1-debuginfo" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/libmount1-debuginfo-2.39.3-3.1.x86_64.rpm">
          <filename>libmount1-debuginfo-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/libsmartcols1-2.39.3-3.1.x86_64.rpm">
          <filename>libsmartcols1-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1-debuginfo" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/libsmartcols1-debuginfo-2.39.3-3.1.x86_64.rpm">
          <filename>libsmartcols1-debuginfo-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/libuuid1-2.39.3-3.1.x86_64.rpm">
          <filename>libuuid1-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1-debuginfo" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/libuuid1-debuginfo-2.39.3-3.1.x86_64.rpm">
          <filename>libuuid1-debuginfo-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.39.3" release="3.1" arch="src" src="src/util-linux-2.39.3-3.1.src.rpm">
          <filename>util-linux-2.39.3-3.1.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/util-linux-2.39.3-3.1.x86_64.rpm">
          <filename>util-linux-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-debuginfo" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/util-linux-debuginfo-2.39.3-3.1.x86_64.rpm">
          <filename>util-linux-debuginfo-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-debugsource" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/util-linux-debugsource-2.39.3-3.1.x86_64.rpm">
          <filename>util-linux-debugsource-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.39.3" release="3.1" arch="src" src="src/util-linux-systemd-2.39.3-3.1.src.rpm">
          <filename>util-linux-systemd-2.39.3-3.1.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/util-linux-systemd-2.39.3-3.1.x86_64.rpm">
          <filename>util-linux-systemd-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd-debuginfo" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/util-linux-systemd-debuginfo-2.39.3-3.1.x86_64.rpm">
          <filename>util-linux-systemd-debuginfo-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd-debugsource" epoch="0" version="2.39.3" release="3.1" arch="x86_64" src="x86_64/util-linux-systemd-debugsource-2.39.3-3.1.x86_64.rpm">
          <filename>util-linux-systemd-debugsource-2.39.3-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>2</id>
    <title>Recommended update for cloud-init</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1719580656" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219680" id="1219680" title="cloud-init: rename devices below VLAN fails again/on SLES 15 SP5 [ref:_00D1igLOd._500Tr50d6g:ref]" type="bugzilla" />
    </references>
    <description>This update for cloud-init fixes the following issue:

- skip renames if the device is already present (bsc#1219680)
</description>
    <pkglist>
      <collection>
        <package name="cloud-init" epoch="0" version="23.3" release="7.1" arch="src" src="src/cloud-init-23.3-7.1.src.rpm">
          <filename>cloud-init-23.3-7.1.src.rpm</filename>
        </package>
        <package name="cloud-init" epoch="0" version="23.3" release="7.1" arch="x86_64" src="x86_64/cloud-init-23.3-7.1.x86_64.rpm">
          <filename>cloud-init-23.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="cloud-init-config-suse" epoch="0" version="23.3" release="7.1" arch="x86_64" src="x86_64/cloud-init-config-suse-23.3-7.1.x86_64.rpm">
          <filename>cloud-init-config-suse-23.3-7.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>39</id>
    <title>Recommended update for salt</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1725960395" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211649" id="1211649" title="Salt-ssh environment: ssh-minion-action-executor stuck" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211888" id="1211888" title="Ansible playbook directory tab only search for .yml files" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216063" id="1216063" title="salt-master is killed by oom killer -  PTF request for bug 1202180 for SUSE Manager / SUMA Retail 4.3.8" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219001" id="1219001" title="Openscap schedule via webUI is pending and fails after long time" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222684" id="1222684" title="L3: Supportability of a custom salt tagged as bug on  GitHub (firewalld prune rich-rules)" type="bugzilla" />
    </references>
    <description>This update for salt fixes the following issues:

- Fix rich rule comparison in firewalld module (bsc#1222684)
- test_vultrpy: adjust test expectation to prevent failure after Debian 10 EOL
- Make auth.pam more robust with Salt Bundle and fix tests
- Fix performance of user.list_groups with many remote groups
- Fix "status.diskusage" function and exclude some tests for Salt Bundle
- Skip certain tests if necessary for some OSes and set flaky ones
- Add a timer to delete old env post update for venv-minion
- Several fixes for tests to avoid errors and failures in some OSes
- Speed up salt.matcher.confirm_top by using __context__
- Do not call the async wrapper calls with the separate thread
- Prevent OOM with high amount of batch async calls (bsc#1216063)
- Add missing contextvars dependency in salt.version
- Skip tests for unsupported algorithm on old OpenSSL version
- Remove redundant `_file_find` call to the master
- Prevent possible exception in tornado.concurrent.Future._set_done
- Make reactor engine less blocking the EventPublisher
- Make salt-master self recoverable on killing EventPublisher
- Improve broken events catching and reporting
- Make logging calls lighter
- Remove unused import causing delays on starting salt-master
- Mark python3-CherryPy as recommended package for the testsuite
- Make "man" a recommended package instead of required
- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml" files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3006.0" release="6.8" arch="x86_64" src="x86_64/python3-salt-3006.0-6.8.x86_64.rpm">
          <filename>python3-salt-3006.0-6.8.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="6.8" arch="src" src="src/salt-3006.0-6.8.src.rpm">
          <filename>salt-3006.0-6.8.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="6.8" arch="x86_64" src="x86_64/salt-3006.0-6.8.x86_64.rpm">
          <filename>salt-3006.0-6.8.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-master" epoch="0" version="3006.0" release="6.8" arch="x86_64" src="x86_64/salt-master-3006.0-6.8.x86_64.rpm">
          <filename>salt-master-3006.0-6.8.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="6.8" arch="x86_64" src="x86_64/salt-minion-3006.0-6.8.x86_64.rpm">
          <filename>salt-minion-3006.0-6.8.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="6.8" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-6.8.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-6.8.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>29</id>
    <title>Recommended update for gcc13</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1725446495" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1188441" id="1188441" title="GCC requires 11GB of memory for building libecpint for s390x in comparison to 3.3GB on x86" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220724" id="1220724" title="Packages pulling gcc14 (like emacs-x11 and emacs-nox) break clang" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221239" id="1221239" title="Backport of GCC bug 111731" type="bugzilla" />
    </references>
    <description>This update for gcc13 fixes the following issues:

- Update to GCC 13.3 release

- Removed Fiji support from the GCN offload compiler as that is requiring
  Code Object version 3 which is no longer supported by llvm18.
- Avoid combine spending too much compile-time and memory doing nothing
  on s390x.  [bsc#1188441]
- Make requirement to lld version specific to avoid requiring the
  meta-package.
- Fix unwinding for JIT code.  [bsc#1221239] 
- Revert libgccjit dependency change.  [bsc#1220724]
</description>
    <pkglist>
      <collection>
        <package name="gcc13" epoch="0" version="13.3.0+git8781" release="1.1" arch="src" src="src/gcc13-13.3.0+git8781-1.1.src.rpm">
          <filename>gcc13-13.3.0+git8781-1.1.src.rpm</filename>
        </package>
        <package name="gcc13-debugsource" epoch="0" version="13.3.0+git8781" release="1.1" arch="x86_64" src="x86_64/gcc13-debugsource-13.3.0+git8781-1.1.x86_64.rpm">
          <filename>gcc13-debugsource-13.3.0+git8781-1.1.x86_64.rpm</filename>
        </package>
        <package name="libatomic1" epoch="0" version="13.3.0+git8781" release="1.1" arch="x86_64" src="x86_64/libatomic1-13.3.0+git8781-1.1.x86_64.rpm">
          <filename>libatomic1-13.3.0+git8781-1.1.x86_64.rpm</filename>
        </package>
        <package name="libatomic1-debuginfo" epoch="0" version="13.3.0+git8781" release="1.1" arch="x86_64" src="x86_64/libatomic1-debuginfo-13.3.0+git8781-1.1.x86_64.rpm">
          <filename>libatomic1-debuginfo-13.3.0+git8781-1.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.3.0+git8781" release="1.1" arch="x86_64" src="x86_64/libgcc_s1-13.3.0+git8781-1.1.x86_64.rpm">
          <filename>libgcc_s1-13.3.0+git8781-1.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1-debuginfo" epoch="0" version="13.3.0+git8781" release="1.1" arch="x86_64" src="x86_64/libgcc_s1-debuginfo-13.3.0+git8781-1.1.x86_64.rpm">
          <filename>libgcc_s1-debuginfo-13.3.0+git8781-1.1.x86_64.rpm</filename>
        </package>
        <package name="libgomp1" epoch="0" version="13.3.0+git8781" release="1.1" arch="x86_64" src="x86_64/libgomp1-13.3.0+git8781-1.1.x86_64.rpm">
          <filename>libgomp1-13.3.0+git8781-1.1.x86_64.rpm</filename>
        </package>
        <package name="libgomp1-debuginfo" epoch="0" version="13.3.0+git8781" release="1.1" arch="x86_64" src="x86_64/libgomp1-debuginfo-13.3.0+git8781-1.1.x86_64.rpm">
          <filename>libgomp1-debuginfo-13.3.0+git8781-1.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.3.0+git8781" release="1.1" arch="x86_64" src="x86_64/libstdc++6-13.3.0+git8781-1.1.x86_64.rpm">
          <filename>libstdc++6-13.3.0+git8781-1.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6-debuginfo" epoch="0" version="13.3.0+git8781" release="1.1" arch="x86_64" src="x86_64/libstdc++6-debuginfo-13.3.0+git8781-1.1.x86_64.rpm">
          <filename>libstdc++6-debuginfo-13.3.0+git8781-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>7</id>
    <title>Security update for less</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1721041451" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222849" id="1222849" title="VUL-0: CVE-2024-32487: less: mishandling of \n character in paths when LESSOPEN is set leads to OS command execution" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32487" id="CVE-2024-32487" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32487" type="cve" />
    </references>
    <description>This update for less fixes the following issues:

- CVE-2024-32487: Fix a bug where mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)
</description>
    <pkglist>
      <collection>
        <package name="less" epoch="0" version="633" release="3.1" arch="src" src="src/less-633-3.1.src.rpm">
          <filename>less-633-3.1.src.rpm</filename>
        </package>
        <package name="less" epoch="0" version="633" release="3.1" arch="x86_64" src="x86_64/less-633-3.1.x86_64.rpm">
          <filename>less-633-3.1.x86_64.rpm</filename>
        </package>
        <package name="less-debuginfo" epoch="0" version="633" release="3.1" arch="x86_64" src="x86_64/less-debuginfo-633-3.1.x86_64.rpm">
          <filename>less-debuginfo-633-3.1.x86_64.rpm</filename>
        </package>
        <package name="less-debugsource" epoch="0" version="633" release="3.1" arch="x86_64" src="x86_64/less-debugsource-633-3.1.x86_64.rpm">
          <filename>less-debugsource-633-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>14</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1723234974" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1012628" id="1012628" title="Continuous stable update tracker for Tumbleweed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1141539" id="1141539" title="kernel backtrace while working with DASDs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181674" id="1181674" title="SLES 15 SP2 - HST:STC950:Fleetwood:LPAR is not accessible during LPM and migration hung" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1186716" id="1186716" title="[NetApp SLES15 SP6 Bug]: NVMe/TCP host attempts to reconnect despite connect failure with DNR set" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187716" id="1187716" title="lparstat displays the wrong partition name" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193599" id="1193599" title="intel_dp_detect [i915]] *ERROR* LSPCON init failed on port D" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195775" id="1195775" title="apparmor fails to build with 5.16.7" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204562" id="1204562" title="L3-Question: Improve visibility of created and bound - but not connected nor listening - TCP ports" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207948" id="1207948" title="Lenovo T14s Gen3 AMD resume from hibernation ends in kernel panic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208593" id="1208593" title="overlayfs causes strange AVCs after recent SELinux policy change" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209657" id="1209657" title="VUL-0: CVE-2023-0160: kernel-source,kernel-source-azure,kernel-source-rt: possibility of deadlock in libbpf function sock_hash_delete_elem()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209834" id="1209834" title="An upgrade from SLES 15 sp3 to SLES 15 sp4 on ppc64le machines provoked a sudden loss of paths to LUN-s." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213573" id="1213573" title="PVT:1050:NXGZIP: LPM of lpar got failed with error HSCLA2CF in 19th loops" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214852" id="1214852" title="install to FCoE hangs instead of rebooting: BUG: kernel NULL pointer dereference, address: 0000000000000102" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215199" id="1215199" title="[trackerbug] 6.4 powerpc base kernel fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215587" id="1215587" title="Partner-L3: SLES 15 SP4 QLogic Driver Causes NIC Failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216196" id="1216196" title="[Build I.67.4] openQA test fails in journal_check: &quot;qgroup reserved space leaked&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216358" id="1216358" title="kernel: Use-after-Free bug in hci_remove_adv_monitor" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216702" id="1216702" title="VUL-0: CVE-2023-47233: kernel: Use after Free bug in brcmf_cfg80211_detach" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217169" id="1217169" title="VUL-0: CVE-2023-52655: kernel: malicious USB device impersonating an aqc111 device can make the kernel overstep a buffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217384" id="1217384" title="VUL-0: CVE-2023-6238: kernel-source,kernel-source-azure,kernel-source-rt: nvme: memory corruption via unprivileged user passthrough" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217408" id="1217408" title="VFS: file-max limit 2409228 reached - server becomes unresponsive - need core analyzed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217481" id="1217481" title="s390/dasd: protect device queue against concurrent access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217489" id="1217489" title="[SLES-15-SP6-beta1] [btrfs] iozone throughput drops in write/rewrite tests by about 12% (reference: SLES-15-SP5 GM)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217750" id="1217750" title="Nonfunctional brightness keys on Lenovo Slim 7 16&quot; AMD" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217912" id="1217912" title="L3: Soft lockups in nfsd while nfsserver.service is stopped" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217959" id="1217959" title="iLAB:Emulex;Abort timeouts, multipath hang during I/O after update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218205" id="1218205" title="modprobe wireguard broken on ppc64le" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218336" id="1218336" title="VUL-0: CVE-2023-7042: kernel-source,kernel-source-azure,kernel-source-rt: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218442" id="1218442" title="[SLES-15-SP6-beta2][xfs] NFS v3/v4 fio random write 4k block size got 10%-33% decline VS 15SP5 GM+MU" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218447" id="1218447" title="VUL-0: CVE-2023-6531: kernel: GC's deletion of an SKB races with unix_stream_read_generic()  leading to UAF" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218562" id="1218562" title="VUL-0: CVE-2023-6270: kernel: use-after-free vulnerability in ATA over Ethernet (AoE) driver" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218730" id="1218730" title="VUL-0: CVE-2023-51780: kernel: use-after-free in net/atm/ioctl.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218779" id="1218779" title="NVIDIA - Grace: Backport coresight: etm4x: Migrate ACPI AMBA devices to platform driver" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218820" id="1218820" title="L3-Question: vmware esxi8 uefi secure boot blacklist: Problem with revocation key (-74)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218917" id="1218917" title="VUL-0: CVE-2024-0639: kernel: potential deadlock on &amp;net-&gt;sctp.addr_wq_lock leading to DOS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219104" id="1219104" title="VUL-0: CVE-2024-23848: kernel: use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219170" id="1219170" title="VUL-0: CVE-2024-22099: kernel: NULL pointer dereference vulnerability allows buffers overflow in /net/bluetooth/rfcomm/core.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219224" id="1219224" title="OCFS2 writes delay on large volumes - slow la window lookup from global_bitmap" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219451" id="1219451" title="SLES 15 SP6 Beta2 - qeth device recovery fails frequently during reboot" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219478" id="1219478" title="Fix for: KVM: arm64: Always invalidate TLB for stage-2 permission faults" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219485" id="1219485" title="SLES 15 SP6 Beta2 - qeth device triggers recovery right after first activation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219596" id="1219596" title="dm-raid/md/raid: regression related to dm-raid456 IO concurrent with reshape" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219623" id="1219623" title="VUL-0: CVE-2024-24861: kernel-source,kernel-source-azure,kernel-source-rt: overflow due to race condition in media/xc4000 device driver in xc4000 xc4000_get_frequency() function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219633" id="1219633" title="L3-Question: kernel workqueue and soft lockups for extended periods with NFS involved in backtraces" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219832" id="1219832" title="VUL-0: CVE-2024-25741: kernel: possible denial of service in printer_write in drivers/usb/gadget/function/f_printer.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219834" id="1219834" title="VUL-0: CVE-2024-25739: kernel: potential denial of service in create_empty_lvol in drivers/mtd/ubi/vtbl.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219847" id="1219847" title="Request to truncate file on NFS results in file not truncated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219953" id="1219953" title="SLE15-SP6 locking and clocksource backports and fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220021" id="1220021" title="Update Broadcom Emulex lpfc driver for SLES15 SP6 to 14.2.0.17 and 14.4.0.0" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220045" id="1220045" title="SLES15 SP6: P10: 6.4.0-150600.4-default: Test data symbol perf test failed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220120" id="1220120" title="SLES15 SP6 [6.4.0-150600.5-default] FS/BTRFS: generic/175 test with 64k bs fails with WARNING: CPU: 1 PID: 95307 at ../fs/btrfs/extent-tree.c:1494" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220138" id="1220138" title="VUL-0: CVE-2023-52435: kernel: mss overflow in skb_segment()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220148" id="1220148" title="VUL-0: CVE-2023-52434: kernel-source,kernel-source-azure,kernel-source-rt: kernel: smb: client: fix potential OOBs in smb2_parse_contexts()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220328" id="1220328" title="VUL-0: CVE-2023-52463: kernel: efivarfs: force RO when remounting if SetVariable is not supported" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220342" id="1220342" title="VUL-0: CVE-2024-26601: kernel-source,kernel-source-azure,kernel-source-rt: ext4: buddy bitmap corruption via fast commit replay" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220427" id="1220427" title="VUL-0: CVE-2023-52472: kernel: crypto: rsa - add a check for allocation failure due to mpi_alloc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220428" id="1220428" title="VUL-0: CVE-2023-52458: kernel-source,kernel-source-azure,kernel-source-rt: block: add check that partition length needs to be aligned with block size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220430" id="1220430" title="VUL-0: CVE-2023-52473: kernel: thermal: core: Fix NULL pointer dereference in zone registration error path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220569" id="1220569" title="No mouse pointer in noVNC when installing latest Tumbleweed using BVCP" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220587" id="1220587" title="Nvidia Grace: Backport ACPI TRBE device support" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220738" id="1220738" title="VUL-0: CVE-2023-52483: kernel: mctp: route lookups without holding RCU read-side lock can lead to use-after-free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220783" id="1220783" title="synth uevent: /devices/vio: failed to send uevent - ref:_00D1igLOd._500Tr56lz5:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220915" id="1220915" title="VUL-0: CVE-2023-52503: kernel: tee: amdtee: fix use-after-free vulnerability in amdtee_close_session" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220942" id="1220942" title="VUL-0: CVE-2024-26615: kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221044" id="1221044" title="VUL-0: CVE-2023-52591: kernel: reiserfs: potential filesystem corruption on directory rename" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221057" id="1221057" title="VUL-0: CVE-2024-26623: kernel: pds_core: Prevent race issues involving the adminq" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221086" id="1221086" title="VUL-0: CVE-2024-26625: kernel: llc: call sock_orphan() at release time" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221293" id="1221293" title="VUL-0: CVE-2024-26614: kernel: tcp: make sure init the accept_queue's spinlocks once" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221303" id="1221303" title="VUL-0: CVE-2024-26611: kernel: xsk: fix usage of multi-buffer BPF helpers for ZC XDP" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221504" id="1221504" title="bluetooth errors on every kernel starting" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221612" id="1221612" title="VUL-0: CVE-2023-52616: kernel: crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221615" id="1221615" title="VUL-0: CVE-2023-52618: kernel: block/rnbd-srv: Check for unlikely string overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221635" id="1221635" title="VUL-0: CVE-2024-26632: kernel: block: Fix iterating over an empty bio with bio_for_each_folio_all" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221645" id="1221645" title="SLES15 SP6 - [P10] - LPAR crashes and hangs on running ksefltest powerpc/mce/inject-ra-err with parameter &quot;percpu_alloc=page&quot; enabled" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221647" id="1221647" title="VUL-0: CVE-2024-26633: kernel: ip6_tunnel: NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() reads uninitialized memory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221649" id="1221649" title="VUL-0: CVE-2024-26638: kernel: nbd: uninitialized struct msghdr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221654" id="1221654" title="VUL-0: CVE-2024-26641: kernel: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221656" id="1221656" title="VUL-0: CVE-2024-26635: kernel: llc: drop support for ETH_P_TR_802_2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221659" id="1221659" title="VUL-0: CVE-2024-26636: kernel: llc: make llc_ui_sendmsg() more robust against bonding changes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221765" id="1221765" title="Fix uncore frequency file string" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221777" id="1221777" title="Update Broadcom Emulex lpfc driver for SLES15 SP6 to 14.4.0.1" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221783" id="1221783" title="s390/vtime: fix average steal time calculation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221816" id="1221816" title="qla2xxx: update driver to 10.02.09.200-k" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221829" id="1221829" title="VUL-0: CVE-2024-26643: kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221830" id="1221830" title="VUL-0: CVE-2024-26642: kernel: netfilter: nf_tables: disallow anonymous set with timeout flag" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221858" id="1221858" title="[NetApp SLES15 SP6 Bug]: Timeouts leading to controller resets seen on nvme tls connections" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221958" id="1221958" title="Checksum errors on SCTP traffic through IPVS  [ref:_00D1igLOd._500Tr7dsRC:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222011" id="1222011" title="[Regression] SLES15SP6:[6.4.0-150600.9] LPAR reboot crashes the kernel after PCI injection (everest/1060_023/shinner)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222015" id="1222015" title="L3: TSC clocksource spuriously declared invalid in 12+ socket Sapphire Rapids systems" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222080" id="1222080" title="VUL-0: CVE-2023-52622: kernel: ext4: avoid online resizing failures due to oversized flex bg" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222173" id="1222173" title="Check root_domain::overload value before update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222241" id="1222241" title="[Bug Fix/Enhancement] Extend size of the MCE Records pool" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222264" id="1222264" title="VUL-0: CVE-2023-52631: kernel: fs/ntfs3: Fix an NULL dereference bug" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222273" id="1222273" title="VUL-0: CVE-2024-26657: kernel: drm/sched: fix null-ptr-deref in init entity" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222294" id="1222294" title="VUL-0: CVE-2023-52635: kernel: PM / devfreq: Synchronize devfreq_monitor_[start/stop]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222301" id="1222301" title="VUL-0: CVE-2023-52640: kernel: fs/ntfs3: Fix oob in ntfs_listxattr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222303" id="1222303" title="VUL-0: CVE-2023-52641: kernel: fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222304" id="1222304" title="VUL-0: CVE-2024-26654: kernel: ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222307" id="1222307" title="VUL-0: CVE-2024-26656: kernel: drm/amdgpu: fix use-after-free bug" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222326" id="1222326" title="VUL-0: CVE-2024-26663: kernel: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222328" id="1222328" title="VUL-0: CVE-2024-26665: kernel: tunnels: fix out of bounds access when building IPv6 PMTU error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222357" id="1222357" title="VUL-0: CVE-2024-26671: kernel: blk-mq: fix IO hang from sbitmap wakeup race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222366" id="1222366" title="page_owner fixups for page_owner_stacks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222368" id="1222368" title="VUL-0: CVE-2024-26673: kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222371" id="1222371" title="VUL-0: CVE-2024-26731: kernel: bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222378" id="1222378" title="VUL-0: CVE-2024-26674: kernel: x86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222380" id="1222380" title="VUL-0: CVE-2024-26676: kernel: af_unix: Call kfree_skb() for dead unix_(sk)-&gt;oob_skb in GC" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222385" id="1222385" title="VUL-0: CVE-2024-26679: kernel: inet: read sk-&gt;sk_family once in inet_recv_error()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222422" id="1222422" title="VUL-0: CVE-2024-26704: kernel: ext4: fix double-free of blocks due to wrong extents moved_len" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222426" id="1222426" title="VUL-0: CVE-2024-26794: kernel: btrfs: fix race between ordered extent completion and fiemap" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222428" id="1222428" title="VUL-0: CVE-2024-26793: kernel: gtp: fix use-after-free and null-ptr-deref in gtp_newlink()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222437" id="1222437" title="VUL-0: CVE-2024-26685: kernel: nilfs2: fix potential bug in end_buffer_async_write" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222438" id="1222438" title="VUL-0: CVE-2024-26734: kernel: devlink: fix possible use-after-free and memory leaks in devlink_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222445" id="1222445" title="VUL-0: CVE-2024-26684: kernel: net: stmmac: xgmac: fix handling of DPP safety error for DMA channels" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222459" id="1222459" title="fstests btrfs/303 fails on btrfs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222463" id="1222463" title="VUL-0: CVE-2024-26691: kernel: KVM: arm64: Fix circular locking dependency" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222464" id="1222464" title="VUL-0: CVE-2024-26692: kernel: smb: Fix regression in writes when non-standard maximum write size negotiated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222489" id="1222489" title="VUL-0: CVE-2024-26714: kernel: interconnect: qcom: sc8180x: hang of the platform" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222522" id="1222522" title="mm: memcg: use larger batches for proactive reclaim" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222525" id="1222525" title="mm: memcg: don't periodically flush stats when memcg is disabled" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222532" id="1222532" title="VUL-0: CVE-2024-26726: kernel: btrfs: don't drop extent_map for free space inode on write error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222557" id="1222557" title="VUL-0: CVE-2024-26737: kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222559" id="1222559" title="VUL-0: CVE-2024-26739: kernel: net/sched: act_mirred: don't override retval if we already lost the skb" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222563" id="1222563" title="VUL-0: CVE-2024-26740: kernel: net/sched: act_mirred: use the backlog for mirred ingress" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222585" id="1222585" title="VUL-0: CVE-2024-26733: kernel: arp: Prevent overflow in arp_req_get()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222588" id="1222588" title="VUL-0: CVE-2024-26780: kernel: af_unix: Fix task hung while purging oob_skb in GC." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222596" id="1222596" title="VUL-0: CVE-2024-26760: kernel: scsi: target: pscsi: Fix bio_put() for error case" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222606" id="1222606" title="ceph: stop copying to iter at EOF on sync reads" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222608" id="1222608" title="VUL-0: CVE-2024-26742: kernel: scsi: smartpqi: Fix disable_managed_interrupts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222613" id="1222613" title="VUL-0: CVE-2024-26772: kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222615" id="1222615" title="VUL-0: CVE-2024-26783: kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222617" id="1222617" title="VUL-0: CVE-2024-26750: kernel: kernel: af_unix: ask hung in __unix_gc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222618" id="1222618" title="VUL-0: CVE-2024-26773: kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222619" id="1222619" title="VUL-0: CVE-2023-52880: kernel: tty/n_gsm: 0day with exploit dropped on Github" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222622" id="1222622" title="VUL-0: CVE-2024-26774: kernel: ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222624" id="1222624" title="VUL-0: CVE-2024-26816: kernel: startup_xen address leaked in user readable /sys/kernel/notes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222627" id="1222627" title="VUL-0: CVE-2024-26775: kernel: aoe: avoid potential deadlock at set_capacity" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222630" id="1222630" title="VUL-0: CVE-2024-26805: kernel: netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222635" id="1222635" title="VUL-0: CVE-2024-26815: kernel: net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222654" id="1222654" title="NVIDIA vGPU v16.2 failed to be installed on SLE15SP6 RC1 due to compilation errors" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222721" id="1222721" title="VUL-0: CVE-2024-26764: kernel: fs/aio: WARNING in kiocb_set_cancel_fn" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222727" id="1222727" title="VUL-0: CVE-2024-26769: kernel: nvmet-fc: deadlock on delete association path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222768" id="1222768" title="[FIPS 140-3][Kernel] Zeroisation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222769" id="1222769" title="[FIPS 140-3][Kernel] Declaration of implementations." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222771" id="1222771" title="[FIPS 140-3][Kernel] Implementation topics" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222775" id="1222775" title="[FIPS 140-3][Kernel]  value exponent enforcement." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222777" id="1222777" title="[FIPS 140-3][Kernel] explicit message digest computation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222779" id="1222779" title="VUL-0: CVE-2024-26785: kernel: iommufd: Fix protection fault in iommufd_test_syz_conv_iova" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222780" id="1222780" title="VUL-0: CVE-2024-26786: kernel: iommufd: Fix iopt_access_list_id overwrite bug" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222782" id="1222782" title="[FIPS 140-3][Kernel] nbits value check requirements" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222793" id="1222793" title="VUL-0: CVE-2024-26791: kernel: btrfs: dev-replace: properly validate device names" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222799" id="1222799" title="VUL-0: CVE-2024-26802: kernel: stmmac: Clear variable when destroying workqueue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222801" id="1222801" title="VUL-0: CVE-2024-26807: kernel: spi: cadence-qspi: fix pointer reference in runtime PM hooks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222809" id="1222809" title="VUL-0: CVE-2024-26813: kernel: vfio/platform: NULL pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222810" id="1222810" title="VUL-0: CVE-2024-26814: kernel: vfio/fsl-mc: Block calling interrupt handler without trigger" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222893" id="1222893" title="WARNING: at ../kernel/trace/ring_buffer.c:1544 rb_check_pages.isra [ref:_00D1igLOd._500Tr8mhUI:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222968" id="1222968" title="VUL-0: CVE-2024-26836: kernel: platform/x86: think-lmi: wrong password opcode for workstations" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223007" id="1223007" title="VUL-0: CVE-2024-26832: kernel: mm: zswap: fix missing folio cleanup in writeback race path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223010" id="1223010" title="VUL-0: CVE-2024-26826: kernel: mptcp: fix data re-injection from stale subflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223011" id="1223011" title="VUL-0: CVE-2024-26822: kernel: smb: client: set correct id, uid and cruid for multiuser automounts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223015" id="1223015" title="VUL-0: CVE-2024-26844: kernel: block: WARNING in _copy_from_iter" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223016" id="1223016" title="VUL-0: CVE-2024-26898: kernel: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223018" id="1223018" title="VUL-0: CVE-2024-26845: kernel: scsi: target: core: uncompleted abort leaving the kernel leaving a never-ending task" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223020" id="1223020" title="VUL-0: CVE-2024-26858: kernel: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223021" id="1223021" title="VUL-0: CVE-2024-26863: kernel: hsr: Fix uninit-value access in hsr_get_node()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223023" id="1223023" title="VUL-0: CVE-2024-26846: kernel: nvme-fc: prevent double free in module exit path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223024" id="1223024" title="VUL-0: CVE-2024-26866: kernel: spi: lpspi: Avoid potential use-after-free in probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223033" id="1223033" title="VUL-0: CVE-2023-52645: kernel: pmdomain: mediatek: fix race conditions with genpd" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223034" id="1223034" title="VUL-0: CVE-2024-26882: kernel: net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223035" id="1223035" title="VUL-0: CVE-2024-26883: kernel: bpf: Fix stackmap overflow check on 32-bit arches" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223038" id="1223038" title="VUL-0: CVE-2024-26868: kernel: nfs: fix panic when nfs4_ff_layout_prepare_ds() fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223039" id="1223039" title="VUL-0: CVE-2024-26854: kernel: ice: fix uninitialized dplls mutex usage" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223041" id="1223041" title="VUL-0: CVE-2024-26881: kernel: net: hns3: fix kernel crash when 1588 is received on HIP08 devices" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223045" id="1223045" title="VUL-0: CVE-2024-26899: kernel: block: fix deadlock between bd_link_disk_holder and partition scan" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223046" id="1223046" title="VUL-0: CVE-2024-26900: kernel: md: fix kmemleak of rdev-&gt;serial" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223051" id="1223051" title="VUL-0: CVE-2024-26855: kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223052" id="1223052" title="VUL-0: CVE-2024-26856: kernel: net: sparx5: Fix use after free inside sparx5_del_mact_entry" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223058" id="1223058" title="VUL-0: CVE-2024-26857: kernel: geneve: make sure to pull inner header in geneve_rx()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223060" id="1223060" title="VUL-0: CVE-2024-26878: kernel: quota: Fix potential NULL pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223061" id="1223061" title="VUL-0: CVE-2024-26853: kernel: igc: invalid free in" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223062" id="1223062" title="VUL-0: CVE-2024-26865: kernel: rds: tcp: Fix use-after-free of net in reqsk_timer_handler()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223076" id="1223076" title="VUL-0: CVE-2024-26861: kernel: wireguard: receive: annotate data-race around receiving_counter.counter" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223077" id="1223077" title="VUL-0: CVE-2024-26860: kernel: dm-integrity: fix a memory leak when rechecking the data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223084" id="1223084" title="VUL-0: CVE-2024-26828: kernel: cifs: underflow in parse_server_interfaces()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223111" id="1223111" title="VUL-0: CVE-2024-26862: kernel: packet: data-races in ignore_outgoing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223113" id="1223113" title="VUL-0: CVE-2024-26870: kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223138" id="1223138" title="VUL-0: CVE-2024-26921: kernel: inet: inet_defrag: prevent sk release while still in use" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223143" id="1223143" title="VUL-0: CVE-2024-26909: kernel: soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223187" id="1223187" title="VUL-0: CVE-2024-26903: kernel: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223189" id="1223189" title="VUL-0: CVE-2024-26884: kernel: bpf: hashtab overflow check on 32-bit arches" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223190" id="1223190" title="VUL-0: CVE-2024-26885: kernel: bpf: DEVMAP_HASH overflow check on 32-bit arches" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223191" id="1223191" title="powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223198" id="1223198" title="VUL-0: CVE-2024-26901: kernel: information leak vulnerability in do_sys_name_to_handle()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223202" id="1223202" title="VUL-0: CVE-2024-26906: kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223265" id="1223265" title="[TRACKER] CONFIG_SENSORS_XGENE is not enable for Ampere platforms" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223285" id="1223285" title="fstests generic/742 got deadlock on btrfs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223315" id="1223315" title="VUL-0: CVE-2024-26922: kernel: drm/amdgpu: validate the parameters of bo mapping operations more clearly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223338" id="1223338" title="SEV test is failed in AMD Turin Processor" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223369" id="1223369" title="ISST-LTE : P10:eralp52:Call traces and EEH errors are seen while dlpar add of Shasta adapter" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223380" id="1223380" title="L3: PANIC: &quot;Kernel panic - not syncing: NMI: Not continuing&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223384" id="1223384" title="VUL-0: CVE-2024-26923: kernel: af_unix: fix garbage collector racing against connect()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223390" id="1223390" title="VUL-0: CVE-2024-26925: kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223439" id="1223439" title="Backport gpio: tegra186: Fix tegra186_gpio_is_accessible() check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223462" id="1223462" title="since 6.7.9-1-default sound has stopped working" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223532" id="1223532" title="VUL-0: CVE-2024-26928: kernel: smb: client: fix potential UAF in cifs_debug_files_proc_show()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223539" id="1223539" title="[PATCH] livepatch: Fix missing newline character in  klp_resolve_symbols()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223570" id="1223570" title="ISST-RWS:- SLES15.6 fadump Hangs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223575" id="1223575" title="[Marvell 15.6 Bug] SLE15-SP6 Public Beta: Server hit kernel panic after running IO on NVMe dm devices" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223590" id="1223590" title="s390/ism: Properly fix receive message buffer allocation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223591" id="1223591" title="block: fix q-&gt;blkg_list corruption during disk rebind" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223592" id="1223592" title="s390/zcrypt: fix reference counting on zcrypt card objects" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223593" id="1223593" title="s390/vdso: drop '-fPIC' from LDFLAGS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223625" id="1223625" title="VUL-0: CVE-2024-21823: kernel: Intel DSA/IAA adapter security issues memory corruption/hangs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223626" id="1223626" title="VUL-0: CVE-2024-26930: kernel: scsi: qla2xxx: double free of the ha-&gt;vp_map pointer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223627" id="1223627" title="VUL-0: CVE-2024-26931: kernel: scsi: qla2xxx: NULL pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223629" id="1223629" title="VUL-0: CVE-2024-26978: kernel: serial: max310x: fix NULL pointer dereference in I2C instantiation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223631" id="1223631" title="VUL-0: CVE-2024-26977: kernel: pci_iounmap(): Fix MMIO mapping leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223632" id="1223632" title="VUL-0: CVE-2024-26975: kernel: powercap: intel_rapl: Fix a NULL pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223633" id="1223633" title="VUL-0: CVE-2024-26984: kernel: nouveau: fix instmem race condition around ptr stores" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223634" id="1223634" title="VUL-0: CVE-2024-26982: kernel: Squashfs: check the inode number is not the invalid value of zero" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223637" id="1223637" title="VUL-0: CVE-2024-26983: kernel: bootconfig: use memblock_free_late to free xbc memory to buddy" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223638" id="1223638" title="VUL-0: CVE-2024-26974: kernel: crypto: qat - resolve race condition during AER recovery" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223641" id="1223641" title="VUL-0: CVE-2024-26973: kernel: fat: fix uninitialized field in nostale filehandles" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223642" id="1223642" title="VUL-0: CVE-2024-26968: kernel: clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223643" id="1223643" title="VUL-0: CVE-2024-26972: kernel: ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223644" id="1223644" title="VUL-0: CVE-2024-26970: kernel: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223645" id="1223645" title="VUL-0: CVE-2024-26969: kernel: clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223646" id="1223646" title="VUL-0: CVE-2024-26966: kernel: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223648" id="1223648" title="VUL-0: CVE-2024-26965: kernel: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223649" id="1223649" title="VUL-0: CVE-2024-26932: kernel: usb: typec: tcpm: double-free issue in tcpm_port_unregister_pd()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223650" id="1223650" title="VUL-0: CVE-2024-26964: kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223651" id="1223651" title="VUL-0: CVE-2024-26963: kernel: usb: dwc3-am62: fix module unload/reload behavior" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223652" id="1223652" title="VUL-0: CVE-2024-26961: kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223653" id="1223653" title="VUL-0: CVE-2024-26958: kernel: nfs: fix UAF in direct writes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223654" id="1223654" title="VUL-0: CVE-2024-26962: kernel: dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223655" id="1223655" title="VUL-0: CVE-2024-26960: kernel: mm: swap: fix race between free_swap_and_cache() and swapoff()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223657" id="1223657" title="VUL-0: CVE-2024-26955: kernel: nilfs2: prevent kernel bug at submit_bh_wbc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223660" id="1223660" title="VUL-0: CVE-2024-26951: kernel: wireguard: netlink: check for dangling peer via is_dead instead of empty list" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223661" id="1223661" title="VUL-0: CVE-2024-26950: kernel: wireguard: netlink: access device through ctx instead of peer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223663" id="1223663" title="VUL-0: CVE-2024-26956: kernel: nilfs2: fix failure to detect DAT corruption in btree and direct mappings" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223664" id="1223664" title="VUL-0: CVE-2024-26948: kernel: drm/amd/display: Add a dc_state NULL check in dc_state_release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223665" id="1223665" title="VUL-0: CVE-2024-26949: kernel: drm/amdgpu/pm: Fix NULL pointer dereference when get power limit" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223666" id="1223666" title="VUL-0: CVE-2024-26957: kernel: s390/zcrypt: fix reference counting on zcrypt card objects" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223667" id="1223667" title="VUL-0: CVE-2024-26959: kernel: Bluetooth: btnxpuart: Fix btnxpuart_close" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223668" id="1223668" title="VUL-0: CVE-2024-26981: kernel: nilfs2: fix OOB in nilfs_set_de_type" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223669" id="1223669" title="VUL-0: CVE-2024-26946: kernel: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223670" id="1223670" title="VUL-0: CVE-2024-26933: kernel: USB: core: deadlock in port &quot;disable&quot; sysfs attribute" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223671" id="1223671" title="VUL-0: CVE-2024-26934: kernel: USB: core: deadlock in usb_deauthorize_interface()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223675" id="1223675" title="VUL-0: CVE-2024-26935: kernel: scsi: core: WARNING in proc_register" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223677" id="1223677" title="VUL-0: CVE-2024-26937: kernel: drm/i915/gt: BUG in intel_engine_pm.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223678" id="1223678" title="VUL-0: CVE-2024-26938: kernel: drm/i915/bios: oops in intel_bios_encoder_supports_dp_dual_mode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223679" id="1223679" title="VUL-0: CVE-2024-26939: kernel: drm/i915/vma: UAF on destroy against retire race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223686" id="1223686" title="VUL-0: CVE-2023-52652: kernel: NTB: possible mempry leak in ntb_register_device()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223692" id="1223692" title="VUL-0: CVE-2024-26992: kernel: KVM: x86/pmu: Disable support for adaptive PEBS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223693" id="1223693" title="VUL-0: CVE-2024-26993: kernel: fs: sysfs: fix reference leak in sysfs_break_active_protection()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223695" id="1223695" title="VUL-0: CVE-2024-26991: kernel: KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223696" id="1223696" title="VUL-0: CVE-2024-26995: kernel: usb: typec: tcpm: correct the PDO counting in pd_set" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223698" id="1223698" title="VUL-0: CVE-2024-27001: kernel: comedi: vmk80xx: fix incomplete endpoint checking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223699" id="1223699" title="VUL-0: CVE-2024-27009: kernel: s390/cio: fix race condition during online processing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223705" id="1223705" title="VUL-0: CVE-2024-27389: kernel: pstore: inode: only d_invalidate() is needed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223709" id="1223709" title="VUL-0: CVE-2024-27391: kernel: wifi: wilc1000: do not realloc workqueue everytime an interface is added" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223711" id="1223711" title="VUL-0: CVE-2024-27040: kernel: drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223712" id="1223712" title="VUL-0: CVE-2023-52653: kernel: SUNRPC: memleak in gss_import_v2_context" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223714" id="1223714" title="VUL-0: CVE-2024-27041: kernel: drm/amd/display: fix NULL checks for adev-&gt;dm.dc in amdgpu_dm_fini()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223715" id="1223715" title="VUL-0: CVE-2024-26929: kernel: scsi: qla2xxx: double free of fcport" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223717" id="1223717" title="VUL-0: CVE-2024-27037: kernel: clk: zynq: Prevent null pointer dereference caused by kmalloc failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223718" id="1223718" title="VUL-0: CVE-2024-26940: kernel: drm/vmwgfx: crash when reading /sys/kernel/debug/dri/0/mob_ttm" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223723" id="1223723" title="VUL-0: CVE-2024-27044: kernel: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223725" id="1223725" title="VUL-0: CVE-2024-27060: kernel: thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223728" id="1223728" title="VUL-0: CVE-2024-26986: kernel: drm/amdkfd: Fix memory leak in create_process failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223731" id="1223731" title="VUL-0: CVE-2024-26944: kernel: btrfs: zoned: use-after-free in do_zone_finish()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223732" id="1223732" title="VUL-0: CVE-2024-26945: kernel: crypto: iaa: divide-by-0 in rebalance_wq_table()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223734" id="1223734" title="VUL-0: CVE-2024-27071: kernel: backlight: hx8357: Fix potential NULL pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223735" id="1223735" title="VUL-0: CVE-2024-27014: kernel: net/mlx5e: Prevent deadlock while disabling aRFS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223737" id="1223737" title="VUL-0: CVE-2024-27053: kernel: wifi: wilc1000: fix RCU usage in connect path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223738" id="1223738" title="VUL-0: CVE-2024-27059: kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223739" id="1223739" title="VUL-0: CVE-2024-27067: kernel: xen/evtchn: avoid WARN() when unbinding an event channel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223740" id="1223740" title="VUL-0: CVE-2024-27064: kernel: netfilter: nf_tables: Fix a memory leak in nf_tables_updchain" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223741" id="1223741" title="VUL-0: CVE-2024-26997: kernel: usb: dwc2: host: Fix dereference issue in DDMA completion flow." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223744" id="1223744" title="VUL-0: CVE-2024-27388: kernel: SUNRPC: fix some memleaks in gssx_dec_option_array" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223745" id="1223745" title="VUL-0: CVE-2024-27013: kernel: tun: limit printing rate when illegal packet received by tun dev" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223747" id="1223747" title="VUL-0: CVE-2024-26988: kernel: init/main.c: potential static_command_line memory overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223748" id="1223748" title="VUL-0: CVE-2024-26989: kernel: arm64: hibernate: level3 translation fault in swsusp_save()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223749" id="1223749" title="VUL-0: CVE-2024-26990: kernel: KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223750" id="1223750" title="VUL-0: CVE-2024-26994: kernel: speakup: crash on very long word" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223752" id="1223752" title="VUL-0: CVE-2024-26996: kernel: usb: gadget: f_ncm: UAF ncm object at re-bind after usb ep transport error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223754" id="1223754" title="VUL-0: CVE-2024-26999: kernel: serial/pmac_zilog: flawed mitigation for rx irq flood" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223756" id="1223756" title="VUL-0: CVE-2022-48669: kernel: powerpc/pseries: Fix potential memleak in papr_get_attr()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223757" id="1223757" title="VUL-0: CVE-2024-27000: kernel: serial: mxs-auart: WARNING in uart_handle_cts_change" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223759" id="1223759" title="VUL-0: CVE-2024-27002: kernel: clk: mediatek: deadlock in mt8183-mfgcfg" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223760" id="1223760" title="VUL-0: CVE-2024-27048: kernel: wifi: brcm80211: handle pmk_op allocation failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223761" id="1223761" title="VUL-0: CVE-2024-27003: kernel: clk: Get runtime PM before walking tree for clk_summary" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223762" id="1223762" title="VUL-0: CVE-2024-27004: kernel: clk: deadlock in clk PM" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223764" id="1223764" title="VUL-0: CVE-2023-52647: kernel: media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223765" id="1223765" title="VUL-0: CVE-2023-52648: kernel: drm/vmwgfx: Unmap the surface before resetting it on a plane state" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223768" id="1223768" title="VUL-0: CVE-2023-52649: kernel: drm/vkms: Avoid reading beyond LUT array" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223769" id="1223769" title="VUL-0: CVE-2024-27051: kernel: cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223770" id="1223770" title="VUL-0: CVE-2023-52650: kernel: drm/tegra: dsi: Add missing check for of_find_device_by_node" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223774" id="1223774" title="VUL-0: CVE-2024-27022: kernel: fork: defer linking file vma until vma is fully initialized" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223776" id="1223776" title="VUL-0: CVE-2024-27023: kernel: md: fix missing release of 'active_io' for flush" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223778" id="1223778" title="VUL-0: CVE-2024-27025: kernel: nbd: null check for nla_nest_start" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223779" id="1223779" title="VUL-0: CVE-2024-27076: kernel: media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223780" id="1223780" title="VUL-0: CVE-2024-27077: kernel: media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223781" id="1223781" title="VUL-0: CVE-2024-27078: kernel: media: v4l2-tpg: fix some memleaks in tpg_alloc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223782" id="1223782" title="VUL-0: CVE-2024-27080: kernel: btrfs: fix race when detecting delalloc ranges during fiemap" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223787" id="1223787" title="VUL-0: CVE-2024-27027: kernel: dpll: fix dpll_xa_ref_*_del() for multiple registrations" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223788" id="1223788" title="VUL-0: CVE-2024-27028: kernel: spi: spi-mt65xx: fix NULL pointer access in interrupt handler" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223789" id="1223789" title="VUL-0: CVE-2024-27029: kernel: drm/amdgpu: fix mmhub client id out-of-bounds access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223790" id="1223790" title="VUL-0: CVE-2024-27030: kernel: octeontx2-af: use separate handlers for interrupts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223802" id="1223802" title="VUL-0: CVE-2024-27008: kernel: drm: nv04: Fix out of bounds access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223804" id="1223804" title="VUL-0: CVE-2024-27012: kernel: netfilter: nf_tables: restore set elements when delete set fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223805" id="1223805" title="VUL-0: CVE-2024-27031: kernel: NFS: deadlock in nfs_netfs_issue_read" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223806" id="1223806" title="VUL-0: CVE-2024-27015: kernel: netfilter: flowtable: incorrect pppoe tuple" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223807" id="1223807" title="VUL-0: CVE-2024-27016: kernel: netfilter: flowtable: validate pppoe header" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223808" id="1223808" title="VUL-0: CVE-2024-27068: kernel: thermal/drivers/mediatek/lvts_thermal: Fix a memory leak in an error handling path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223810" id="1223810" title="VUL-0: CVE-2024-27036: kernel: cifs: writeback data corruption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223813" id="1223813" title="VUL-0: CVE-2024-27019: kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223815" id="1223815" title="VUL-0: CVE-2024-27020: kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223816" id="1223816" title="VUL-0: CVE-2024-27038: kernel: clk: clk_core_get NULL dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223819" id="1223819" title="VUL-0: CVE-2024-27054: kernel: s390/dasd: fix double module refcount decrement" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223821" id="1223821" title="VUL-0: CVE-2024-27039: kernel: clk: hisilicon: hi3559a: erroneous devm_kfree()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223822" id="1223822" title="VUL-0: CVE-2024-27056: kernel: wifi: iwlwifi: mvm: ensure offloading TID queue exists" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223823" id="1223823" title="VUL-0: CVE-2024-27042: kernel: drm/amdgpu: potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223824" id="1223824" title="VUL-0: CVE-2024-27043: kernel: media: media: dvbdev: use-after-free in different places" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223826" id="1223826" title="VUL-0: CVE-2024-27045: kernel: drm/amd/display: potential buffer overflow in 'dp_dsc_clock_en_read()'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223827" id="1223827" title="VUL-0: CVE-2024-27046: kernel: nfp: flower: NULL pointer dereference with acti_netdevs allocation failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223828" id="1223828" title="VUL-0: CVE-2024-27047: kernel: net: phy: NULL pointer 0 in phy_get_internal_delay" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223829" id="1223829" title="VUL-0: CVE-2024-27052: kernel: wifi: rtl8xxxu: use-after-free when the driver is stopped" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223831" id="1223831" title="VUL-0: CVE-2024-27057: kernel: ASoC: SOF: ipc4-pcm: Workaround for crashed firmware on system suspend" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223834" id="1223834" title="VUL-0: CVE-2024-27062: kernel: nouveau: lock the client object tree." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223836" id="1223836" title="VUL-0: CVE-2024-27065: kernel: netfilter: nf_tables: do not compare internal table flags on updates" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223837" id="1223837" title="VUL-0: CVE-2024-27072: kernel: media: usbtv: Remove useless locks in usbtv_video_free()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223838" id="1223838" title="Nonfunctional brightness keys on Apple Macbook 5.1 (mcp79,nouveau)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223842" id="1223842" title="VUL-0: CVE-2024-27075: kernel: media: dvb-frontends: avoid stack overflow warnings with clang" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223843" id="1223843" title="VUL-0: CVE-2024-27073: kernel: media: ttpci: fix two memleaks in budget_av_attach" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223844" id="1223844" title="VUL-0: CVE-2024-27074: kernel: media: go7007: fix a memleak in go7007_load_encoder" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223847" id="1223847" title="VUL-0: CVE-2024-26919: kernel: usb: ulpi: Fix debugfs directory leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223863" id="1223863" title="L3: Process accessing NFS enters Uninterruptible sleep state" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223869" id="1223869" title="s390/cio: Ensure the copied buf is NUL terminated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223870" id="1223870" title="s390/vdso: Add CFI for RA register to asm macro vdso_func" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223871" id="1223871" title="s390/mm: Fix clearing storage keys for huge pages" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223872" id="1223872" title="s390/mm: Fix storage key clearing for guest huge pages" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223874" id="1223874" title="s390/qeth: Fix kernel panic after setting hsuid" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223944" id="1223944" title="virtio: treat alloc_dax() -EOPNOTSUPP failure as non-fatal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223945" id="1223945" title="fuse: fix root lookup with nonzero generation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223946" id="1223946" title="fuse: don't unhash root" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223991" id="1223991" title="PVT:1060:XM:Splitter:SUSE:Traffic is not resuming over another path when Fatal errors been injected in one path till the threshold." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224049" id="1224049" title="[NetApp SLES15 SP6 Bug]: Long I/O outages seen occasionally during heavy I/O on NVMe/TCP TLS connections" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224076" id="1224076" title="VUL-0: CVE-2024-27393: kernel: xen: Memory leak due to missing cleanup function (XSA-457)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224096" id="1224096" title="VUL-0: CVE-2024-27396: kernel: net: gtp: Fix Use-After-Free in gtp_dellink" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224098" id="1224098" title="VUL-0: CVE-2024-27395: kernel: net: openvswitch: Fix Use-After-Free in ovs_ct_exit" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224099" id="1224099" title="VUL-0: CVE-2023-52654: kernel: io_uring/af_unix: disable sending io_uring over sockets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224137" id="1224137" title="IDPF needs a longer watchdog timeout" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224166" id="1224166" title="autofs restart and stuck perl script" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224174" id="1224174" title="VUL-0: CVE-2024-27398: kernel: Bluetooth: fix use-after-free bugs caused by sco_sock_timeout" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224177" id="1224177" title="VUL-0: CVE-2024-27399: kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224180" id="1224180" title="VUL-0: CVE-2024-27400: kernel: drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224181" id="1224181" title="VUL-0: CVE-2024-27401: kernel: firewire: nosy: ensure user_length is taken into account when fetching packet contents" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224187" id="1224187" title="VUL-0: CVE-2023-52656: kernel: io_uring: drop any code related to SCM_RIGHTS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224331" id="1224331" title="Nvidia Grace: Fix double allocation in swiotlb_alloc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224348" id="1224348" title="SLES 15 SP6 - kernel: s390/cpum_cf: make crypto counters upward compatible" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224414" id="1224414" title="VUL-0: CVE-2024-27402: kernel: phonet/pep: fix racy skb_queue_empty() use" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224422" id="1224422" title="VUL-0: CVE-2024-27404: kernel: mptcp: fix data races on remote_id" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224423" id="1224423" title="VUL-0: CVE-2024-27405: kernel: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224429" id="1224429" title="VUL-0: CVE-2024-27407: kernel: fs/ntfs3: Fixed overflow check in mi_enum_attr()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224430" id="1224430" title="VUL-0: CVE-2024-27408: kernel: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224432" id="1224432" title="VUL-0: CVE-2024-27410: kernel: wifi: nl80211: reject iftype change with mesh ID change" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224433" id="1224433" title="VUL-0: CVE-2024-27411: kernel: drm/nouveau: keep DMA buffers required for suspend/resume" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224437" id="1224437" title="VUL-0: CVE-2024-27412: kernel: power: supply: bq27xxx-i2c: Do not free non existing IRQ" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224438" id="1224438" title="VUL-0: CVE-2024-27413: kernel: efi/capsule-loader: fix incorrect allocation size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224439" id="1224439" title="VUL-0: CVE-2024-27414: kernel: rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224442" id="1224442" title="VUL-0: CVE-2023-52659: kernel: x86/mm: ensure input to pfn_to_kaddr() is treated as a 64-bit type" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224443" id="1224443" title="VUL-0: CVE-2023-52660: kernel: media: rkisp1: fix IRQ handling due to shared interrupts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224445" id="1224445" title="VUL-0: CVE-2023-52661: kernel: drm/tegra: rgb: fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224449" id="1224449" title="VUL-0: CVE-2023-52662: kernel: drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224477" id="1224477" title="VUL-0: CVE-2024-35921: kernel: media: mediatek: vcodec: Fix oops when HEVC init fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224479" id="1224479" title="VUL-0: CVE-2024-35915: kernel: nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224480" id="1224480" title="VUL-0: CVE-2024-35916: kernel: dma-buf: Fix NULL pointer dereference in sanitycheck()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224481" id="1224481" title="VUL-0: CVE-2024-35917: kernel: s390/bpf: Fix bpf_plt pointer arithmetic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224482" id="1224482" title="VUL-0: CVE-2024-35914: kernel: nfsd: Fix error cleanup path in nfsd_rename()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224486" id="1224486" title="VUL-0: CVE-2024-35911: kernel: ice: fix memory corruption bug with suspend and rebuild" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224487" id="1224487" title="VUL-0: CVE-2024-35912: kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224488" id="1224488" title="VUL-0: CVE-2024-35905: kernel: bpf: Protect against int overflow for stack access size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224490" id="1224490" title="VUL-0: CVE-2024-35908: kernel: tls: get psock ref after taking rxlock to avoid leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224491" id="1224491" title="VUL-0: CVE-2024-35909: kernel: net: wwan: t7xx: Split 64bit accesses to fix alignment issues" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224492" id="1224492" title="VUL-0: CVE-2024-35907: kernel: mlxbf_gige: call request_irq() after NAPI initialized" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224493" id="1224493" title="VUL-0: CVE-2024-35903: kernel: x86/bpf: Fix IP after emitting call depth accounting" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224494" id="1224494" title="VUL-0: CVE-2024-35904: kernel: selinux: avoid dereference of garbage after mount failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224495" id="1224495" title="VUL-0: CVE-2024-35901: kernel: net: mana: Fix Rx DMA datasize and skb_over_panic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224497" id="1224497" title="VUL-0: CVE-2024-35900: kernel: netfilter: nf_tables: reject new basechain after table flag update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224498" id="1224498" title="VUL-0: CVE-2024-35898: kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224499" id="1224499" title="VUL-0: CVE-2024-35899: kernel: netfilter: nf_tables: flush pending destroy work before exit_net release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224500" id="1224500" title="VUL-0: CVE-2024-35837: kernel: net: mvpp2: clear BM pool before initialization" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224501" id="1224501" title="VUL-0: CVE-2023-52687: kernel: crypto: safexcel - Add error handling for dma_map_sg() calls" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224502" id="1224502" title="VUL-0: CVE-2024-35852: kernel: mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224504" id="1224504" title="VUL-0: CVE-2023-52675: kernel: powerpc/imc-pmu: Add a null pointer check in update_events_in_group()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224505" id="1224505" title="VUL-0: CVE-2023-52681: kernel: efivarfs: Free s_fs_info on unmount" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224506" id="1224506" title="VUL-0: CVE-2023-52695: kernel: drm/amd/display: Check writeback connectors in create_validate_stream_for_sink" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224507" id="1224507" title="VUL-0: CVE-2024-35800: kernel: efi: fix panic in kdump kernel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224508" id="1224508" title="VUL-0: CVE-2023-52679: kernel: of: Fix double free in of_parse_phandle_with_args_map" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224509" id="1224509" title="VUL-0: CVE-2024-35851: kernel: Bluetooth: qca: fix NULL-deref on non-serdev suspend" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224511" id="1224511" title="VUL-0: CVE-2024-35895: kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224512" id="1224512" title="VUL-0: CVE-2024-35893: kernel: net/sched: act_skbmod: prevent kernel-infoleak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224513" id="1224513" title="VUL-0: CVE-2024-35891: kernel: net: phy: micrel: Fix potential null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224515" id="1224515" title="VUL-0: CVE-2024-35892: kernel: net/sched: fix lockdep splat in qdisc_tree_reduce_backlog()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224516" id="1224516" title="VUL-0: CVE-2024-35890: kernel: gro: fix ownership transfer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224517" id="1224517" title="VUL-0: CVE-2024-35889: kernel: idpf: fix kernel panic on unknown packet types" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224519" id="1224519" title="VUL-0: CVE-2024-35885: kernel: mlxbf_gige: stop interface during shutdown" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224520" id="1224520" title="VUL-0: CVE-2024-35884: kernel: udp: do not accept non-tunnel GSO skbs landing in a tunnel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224521" id="1224521" title="VUL-0: CVE-2024-35883: kernel: spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxx_spi_probe" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224523" id="1224523" title="VUL-0: CVE-2024-35880: kernel: io_uring/kbuf: hold io_buffer_list reference over mmap" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224524" id="1224524" title="VUL-0: CVE-2024-35879: kernel: of: dynamic: Synchronize of_changeset_destroy() with the devlink removals" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224525" id="1224525" title="VUL-0: CVE-2024-35877: kernel: x86/mm/pat: fix VM_PAT handling in COW mappings" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224526" id="1224526" title="VUL-0: CVE-2024-35937: kernel: wifi: cfg80211: check A-MSDU format more carefully" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224530" id="1224530" title="VUL-0: CVE-2024-35872: kernel: mm/secretmem: fix GUP-fast succeeding on secretmem folios" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224531" id="1224531" title="VUL-0: CVE-2024-35860: kernel: bpf: support deferring bpf_link dealloc to after RCU grace period" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224534" id="1224534" title="PVT:1060:XM:Splitter:SUSE:Traffic is not resuming over another path after threshold reached upon switch injections on one path." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224537" id="1224537" title="VUL-0: CVE-2024-35940: kernel: pstore/zone: Add a null pointer check to the psz_kmsg_read" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224539" id="1224539" title="VUL-0: CVE-2024-36005: kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224540" id="1224540" title="VUL-0: CVE-2024-36008: kernel: ipv4: check for NULL idev in ip_route_use_hint()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224541" id="1224541" title="VUL-0: CVE-2024-36006: kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224542" id="1224542" title="VUL-0: CVE-2024-36009: kernel: ax25: Fix netdev refcount issue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224543" id="1224543" title="VUL-0: CVE-2024-36007: kernel: mlxsw: spectrum_acl_tcam: Fix warning during rehash" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224544" id="1224544" title="VUL-0: CVE-2024-36003: kernel: ice: fix LAG and VF lock dependency in ice_reset_vf()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224545" id="1224545" title="VUL-0: CVE-2024-36004: kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224546" id="1224546" title="VUL-0: CVE-2024-36002: kernel: dpll: fix dpll_pin_on_pin_register() for multiple parent pins" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224549" id="1224549" title="VUL-0: CVE-2024-35998: kernel: smb3: fix lock ordering potential deadlock in cifs_sync_mid_result" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224550" id="1224550" title="VUL-0: CVE-2024-35999: kernel: smb3: missing lock when picking channel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224552" id="1224552" title="VUL-0: CVE-2024-35997: kernel: HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224553" id="1224553" title="VUL-0: CVE-2024-35991: kernel: dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224555" id="1224555" title="VUL-0: CVE-2024-35992: kernel: phy: marvell: a3700-comphy: Fix out of bounds read" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224557" id="1224557" title="VUL-0: CVE-2024-35995: kernel: ACPI: CPPC: Use access_width over bit_width for system memory accesses" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224558" id="1224558" title="VUL-0: CVE-2024-35989: kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224559" id="1224559" title="VUL-0: CVE-2024-35990: kernel: dma: xilinx_dpdma: Fix locking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224562" id="1224562" title="VUL-0: CVE-2024-35986: kernel: phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224565" id="1224565" title="VUL-0: CVE-2024-35981: kernel: virtio_net: Do not send RSS key if it is not supported" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224566" id="1224566" title="VUL-0: CVE-2024-35982: kernel: batman-adv: Avoid infinite loop trying to resize local TT" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224567" id="1224567" title="VUL-0: CVE-2024-35984: kernel: i2c: smbus: fix NULL function pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224568" id="1224568" title="VUL-0: CVE-2024-35977: kernel: platform/chrome: cros_ec_uart: properly fix race condition" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224569" id="1224569" title="VUL-0: CVE-2024-35975: kernel: octeontx2-pf: Fix transmit scheduler resource leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224571" id="1224571" title="VUL-0: CVE-2024-35978: kernel: Bluetooth: Fix memory leak in hci_req_sync_complete()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224572" id="1224572" title="VUL-0: CVE-2024-35979: kernel: raid1: fix use-after-free for original bio in raid1_write_request()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224573" id="1224573" title="VUL-0: CVE-2024-35974: kernel: block: fix q-&gt;blkg_list corruption during disk rebind" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224575" id="1224575" title="VUL-0: CVE-2024-35976: kernel: xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224576" id="1224576" title="VUL-0: CVE-2024-35966: kernel: Bluetooth: RFCOMM: Fix not validating setsockopt user input" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224577" id="1224577" title="VUL-0: CVE-2024-35972: kernel: bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224578" id="1224578" title="VUL-0: CVE-2024-35971: kernel: net: ks8851: Handle softirqs at the end of IRQ thread to fix hang" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224579" id="1224579" title="VUL-0: CVE-2024-35965: kernel: Bluetooth: L2CAP: Fix not validating setsockopt user input" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224580" id="1224580" title="VUL-0: CVE-2024-35969: kernel: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224581" id="1224581" title="VUL-0: CVE-2024-35964: kernel: Bluetooth: ISO: Fix not validating setsockopt user input" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224582" id="1224582" title="VUL-0: CVE-2024-35963: kernel: Bluetooth: hci_sock: Fix not validating setsockopt user input" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224583" id="1224583" title="VUL-0: CVE-2024-35962: kernel: netfilter: complete validation of user input" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224584" id="1224584" title="VUL-0: CVE-2024-35970: kernel: af_unix: Clear stale u-&gt;oob_skb." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224585" id="1224585" title="VUL-0: CVE-2024-35961: kernel: net/mlx5: Register devlink first under devlink lock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224586" id="1224586" title="VUL-0: CVE-2024-35973: kernel: geneve: fix header validation in geneve[6]_xmit_skb" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224587" id="1224587" title="VUL-0: CVE-2024-35967: kernel: Bluetooth: SCO: Fix not validating setsockopt user input" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224588" id="1224588" title="VUL-0: CVE-2024-35960: kernel: net/mlx5: Properly link new fs rules into the tree" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224589" id="1224589" title="VUL-0: CVE-2024-35942: kernel: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224592" id="1224592" title="VUL-0: CVE-2024-35811: kernel: wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224596" id="1224596" title="VUL-0: CVE-2023-52697: kernel: ASoC: Intel: sof_sdw_rt_sdca_jack_common: ctx-&gt;headset_codec_dev = NULL" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224598" id="1224598" title="VUL-0: CVE-2023-52694: kernel: drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224600" id="1224600" title="VUL-0: CVE-2024-35850: kernel: Bluetooth: qca: fix NULL-deref on non-serdev setup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224601" id="1224601" title="VUL-0: CVE-2023-52696: kernel: powerpc/powernv: Add a null pointer check in opal_powercap_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224602" id="1224602" title="VUL-0: CVE-2024-35814: kernel: swiotlb: Fix double-allocation of slots due to broken alignment handling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224603" id="1224603" title="VUL-0: CVE-2023-52667: kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224604" id="1224604" title="VUL-0: CVE-2024-35853: kernel: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224605" id="1224605" title="VUL-0: CVE-2024-35835: kernel: net/mlx5e: fix a double-free in arfs_create_groups" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224606" id="1224606" title="VUL-0: CVE-2024-35827: kernel: io_uring/net: fix overflow check in io_recvmsg_mshot_prep()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224607" id="1224607" title="VUL-0: CVE-2023-52691: kernel: drm/amd/pm: fix a double-free in si_dpm_init" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224608" id="1224608" title="VUL-0: CVE-2023-52680: kernel: ALSA: scarlett2: Add missing error checks to *_ctl_get()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224609" id="1224609" title="VUL-0: CVE-2024-35824: kernel: misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224611" id="1224611" title="VUL-0: CVE-2023-52690: kernel: powerpc/powernv: Add a null pointer check to scom_debug_init_one()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224612" id="1224612" title="VUL-0: CVE-2024-35848: kernel: eeprom: at24: fix memory corruption race condition" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224613" id="1224613" title="VUL-0: CVE-2024-35838: kernel: wifi: mac80211: fix potential sta-link leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224614" id="1224614" title="VUL-0: CVE-2023-52672: kernel: pipe: wakeup wr_wait after setting max_usage" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224615" id="1224615" title="VUL-0: CVE-2024-35796: kernel: net: ll_temac: platform_get_resource replaced by wrong function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224617" id="1224617" title="VUL-0: CVE-2023-52678: kernel: drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224618" id="1224618" title="VUL-0: CVE-2024-35813: kernel: mmc: core: Avoid negative index with array access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224619" id="1224619" title="VUL-0: CVE-2024-35857: kernel: icmp: prevent possible NULL dereferences from icmp_build_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224620" id="1224620" title="VUL-0: CVE-2024-35834: kernel: xsk: recycle buffer in case Rx queue was full" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224621" id="1224621" title="VUL-0: CVE-2023-52698: kernel: calipso: fix memory leak in netlbl_calipso_add_pass()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224622" id="1224622" title="VUL-0: CVE-2024-35828: kernel: wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224623" id="1224623" title="VUL-0: CVE-2024-35808: kernel: md/dm-raid: don't call md_reap_sync_thread() directly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224624" id="1224624" title="VUL-0: REJECTED: CVE-2024-35812: kernel: usb: cdc-wdm: close race between read and workqueue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224626" id="1224626" title="VUL-0: CVE-2024-35810: kernel: drm/vmwgfx: Fix the lifetime of the bo cursor memory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224627" id="1224627" title="VUL-0: CVE-2023-52683: kernel: ACPI: LPIT: Avoid u32 multiplication overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224628" id="1224628" title="VUL-0: CVE-2023-52692: kernel: ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224629" id="1224629" title="VUL-0: CVE-2024-35821: kernel: ubifs: Set page uptodate in the correct place" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224630" id="1224630" title="VUL-0: CVE-2023-52663: kernel: ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224632" id="1224632" title="VUL-0: CVE-2024-35833: kernel: dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224633" id="1224633" title="VUL-0: CVE-2024-35836: kernel: dpll: fix pin dump crash for rebound module" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224634" id="1224634" title="VUL-0: CVE-2024-35795: kernel: drm/amdgpu: fix deadlock while reading mqd from debugfs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224636" id="1224636" title="VUL-0: CVE-2024-35854: kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224637" id="1224637" title="VUL-0: CVE-2023-52669: kernel: crypto: s390/aes - Fix buffer overread in CTR mode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224638" id="1224638" title="VUL-0: CVE-2024-35804: kernel: KVM: x86: Mark target gfn of emulated atomic instruction as dirty" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224639" id="1224639" title="VUL-0: CVE-2024-35945: kernel: net: phy: phy_device: Prevent nullptr exceptions on ISR" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224640" id="1224640" title="VUL-0: CVE-2024-35933: kernel: Bluetooth: btintel: Fix null ptr deref in btintel_read_version" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224641" id="1224641" title="VUL-0: CVE-2024-35934: kernel: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224643" id="1224643" title="VUL-0: CVE-2024-35938: kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224644" id="1224644" title="VUL-0: CVE-2024-35936: kernel: btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224645" id="1224645" title="VUL-0: CVE-2024-35935: kernel: btrfs: send: handle path ref underflow in header iterate_inode_ref()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224646" id="1224646" title="VUL-0: CVE-2024-35946: kernel: wifi: rtw89: fix null pointer access when abort scan" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224647" id="1224647" title="VUL-0: CVE-2024-35947: kernel: dyndbg: fix old BUG_ON in &gt;control parser" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224648" id="1224648" title="VUL-0: CVE-2024-35944: kernel: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224649" id="1224649" title="VUL-0: CVE-2024-35943: kernel: pmdomain: ti: Add a null pointer check to the omap_prm_domain_init" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224650" id="1224650" title="VUL-0: CVE-2024-35932: kernel: drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224651" id="1224651" title="VUL-0: CVE-2024-35930: kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224652" id="1224652" title="VUL-0: CVE-2024-35931: kernel: drm/amdgpu: Skip do PCI error slot reset during RAS recovery" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224653" id="1224653" title="VUL-0: CVE-2024-35928: kernel: drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224654" id="1224654" title="VUL-0: CVE-2024-35927: kernel: drm: Check output polling initialized before disabling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224655" id="1224655" title="VUL-0: CVE-2024-35926: kernel: crypto: iaa - Fix async_disable descriptor leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224657" id="1224657" title="VUL-0: CVE-2024-35924: kernel: usb: typec: ucsi: Limit read size on v1.2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224659" id="1224659" title="VUL-0: CVE-2023-52699: kernel: sysv: don't call sb_bread() with pointers_lock held" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224660" id="1224660" title="VUL-0: CVE-2024-35922: kernel: fbmon: prevent division by zero in fb_videomode_from_videomode()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224661" id="1224661" title="VUL-0: CVE-2024-35925: kernel: block: prevent division by zero in blk_rq_stat_sum()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224662" id="1224662" title="VUL-0: CVE-2024-35896: kernel: netfilter: validate user input for expected length" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224663" id="1224663" title="VUL-0: CVE-2024-35887: kernel: ax25: fix use-after-free bugs caused by ax25_ds_del_timer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224664" id="1224664" title="VUL-0: CVE-2024-35867: kernel: smb: client: fix potential UAF in cifs_stats_proc_show()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224665" id="1224665" title="VUL-0: CVE-2024-35875: kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224666" id="1224666" title="VUL-0: CVE-2024-35959: kernel: net/mlx5e: Fix mlx5e_priv_init() cleanup flow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224667" id="1224667" title="VUL-0: CVE-2024-35866: kernel: smb: client: fix potential UAF in cifs_dump_full_key()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224668" id="1224668" title="VUL-0: CVE-2024-35865: kernel: smb: client: fix potential UAF in smb2_is_valid_oplock_break()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224670" id="1224670" title="VUL-0: CVE-2024-35886: kernel: ipv6: Fix infinite recursion in fib6_dump_done()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224671" id="1224671" title="VUL-0: CVE-2024-35878: kernel: of: module: prevent NULL pointer dereference in vsnprintf()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224672" id="1224672" title="VUL-0: CVE-2024-35870: kernel: smb: client: fix UAF in smb2_reconnect_server()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224673" id="1224673" title="VUL-0: CVE-2024-35957: kernel: iommu/vt-d: Fix WARN_ON in iommu probe path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224674" id="1224674" title="VUL-0: CVE-2024-35956: kernel: btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224675" id="1224675" title="VUL-0: CVE-2024-35954: kernel: scsi: sg: Avoid sg device teardown race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224676" id="1224676" title="VUL-0: CVE-2024-35955: kernel: kprobes: Fix possible use-after-free issue on kprobe registration" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224677" id="1224677" title="VUL-0: CVE-2024-35958: kernel: net: ena: Fix incorrect descriptor free behavior" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224678" id="1224678" title="VUL-0: CVE-2024-35868: kernel: smb: client: fix potential UAF in cifs_stats_proc_write()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224679" id="1224679" title="VUL-0: CVE-2024-35869: kernel: smb: client: guarantee refcounted children from parent session" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224680" id="1224680" title="VUL-0: CVE-2024-35830: kernel: media: tc358743: register v4l2 async device only after successful setup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224681" id="1224681" title="VUL-0: CVE-2024-35825: kernel: usb: gadget: ncm: Fix handling of zero block length packets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224682" id="1224682" title="VUL-0: CVE-2023-52686: kernel: powerpc/powernv: Add a null pointer check in opal_event_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224683" id="1224683" title="VUL-0: CVE-2024-35819: kernel: soc: fsl: qbman: Use raw spinlock for cgr_lock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224685" id="1224685" title="VUL-0: CVE-2024-35815: kernel: fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224686" id="1224686" title="VUL-0: CVE-2023-52693: kernel: ACPI: video: check for error while searching for backlight device parent" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224687" id="1224687" title="VUL-0: CVE-2024-35841: kernel: net: tls, fix WARNIING in __sk_msg_free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224688" id="1224688" title="VUL-0: CVE-2024-35842: kernel: ASoC: mediatek: sof-common: Add NULL check for normal_link string" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224692" id="1224692" title="VUL-0: CVE-2024-35823: kernel: vt: fix unicode buffer corruption when deleting characters" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224696" id="1224696" title="VUL-0: CVE-2023-52670: kernel: rpmsg: virtio: Free driver_override when rpmsg_remove()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224697" id="1224697" title="VUL-0: CVE-2024-35847: kernel: irqchip/gic-v3-its: Prevent double free on error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224698" id="1224698" title="VUL-0: CVE-2024-35831: kernel: io_uring: Fix release of pinned pages when __io_uaddr_map fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224699" id="1224699" title="VUL-0: CVE-2024-35806: kernel: soc: fsl: qbman: Always disable interrupts when taking cgr_lock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224701" id="1224701" title="VUL-0: CVE-2024-35951: kernel: drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224703" id="1224703" title="VUL-0: CVE-2024-35950: kernel: drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224704" id="1224704" title="VUL-0: CVE-2024-35953: kernel: accel/ivpu: Fix deadlock in context_xa" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224705" id="1224705" title="VUL-0: CVE-2024-35952: kernel: drm/ast: Fix soft lockup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224706" id="1224706" title="VUL-0: CVE-2024-35794: kernel: dm-raid: really frozen sync_thread during suspend" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224707" id="1224707" title="VUL-0: CVE-2024-35829: kernel: drm/lima: fix a memleak in lima_heap_alloc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224709" id="1224709" title="VUL-0: CVE-2024-35788: kernel: drm/amd/display: Fix bounds check for dcn35 DcfClocks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224710" id="1224710" title="VUL-0: CVE-2024-27434: kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224712" id="1224712" title="VUL-0: CVE-2024-35790: kernel: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224714" id="1224714" title="VUL-0: CVE-2024-35786: kernel: drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224716" id="1224716" title="VUL-0: CVE-2024-27432: kernel: net: ethernet: mtk_eth_soc: fix PPE hanging issue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224717" id="1224717" title="VUL-0: CVE-2024-27435: kernel: nvme: fix reconnection fail due to reserved tag allocation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224718" id="1224718" title="VUL-0: CVE-2024-27431: kernel: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224719" id="1224719" title="VUL-0: CVE-2023-52658: kernel: Revert &quot;net/mlx5: Block entering switchdev mode with ns inconsistency&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224720" id="1224720" title="VUL-0: CVE-2024-27418: kernel: net: mctp: take ownership of skb in mctp_local_output" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224721" id="1224721" title="VUL-0: CVE-2024-27417: kernel: ipv6: fix potential &quot;struct net&quot; leak in inet6_rtm_getaddr()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224722" id="1224722" title="VUL-0: CVE-2023-52657: kernel: Revert &quot;drm/amd/pm: resolve reboot exception for si oland&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224723" id="1224723" title="VUL-0: CVE-2024-27416: kernel: Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224725" id="1224725" title="VUL-0: CVE-2024-35791: kernel: KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224727" id="1224727" title="VUL-0: CVE-2023-52674: kernel: ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224729" id="1224729" title="VUL-0: CVE-2023-52671: kernel: drm/amd/display: Fix hang/underflow when transitioning to ODM4:1" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224730" id="1224730" title="VUL-0: CVE-2023-52676: kernel: bpf: Guard stack limits against 32bit overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224731" id="1224731" title="VUL-0: CVE-2024-35845: kernel: wifi: iwlwifi: dbg-tlv: ensure NUL termination" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224732" id="1224732" title="VUL-0: CVE-2024-35801: kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224733" id="1224733" title="VUL-0: CVE-2024-35849: kernel: btrfs: fix information leak in btrfs_ioctl_logical_to_ino()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224735" id="1224735" title="VUL-0: CVE-2024-35807: kernel: ext4: fix corruption during on-line resize" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224736" id="1224736" title="VUL-0: CVE-2024-35817: kernel: drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224738" id="1224738" title="VUL-0: CVE-2024-35809: kernel: PCI/PM: Drain runtime-idle callbacks before driver removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224739" id="1224739" title="VUL-0: CVE-2024-35822: kernel: usb: udc: remove warning when queue disabled ep" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224740" id="1224740" title="VUL-0: CVE-2024-35799: kernel: drm/amd/display: Prevent crash when disable stream" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224741" id="1224741" title="VUL-0: CVE-2023-52673: kernel: drm/amd/display: Fix a debugfs null pointer error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224742" id="1224742" title="VUL-0: CVE-2024-35803: kernel: x86/efistub: Call mixed mode boot services on the firmware's stack" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224743" id="1224743" title="VUL-0: CVE-2024-35805: kernel: dm snapshot: fix lockup in dm_exception_table_exit" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224747" id="1224747" title="VUL-0: CVE-2023-52664: kernel: net: atlantic: eliminate double free in error handling logic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224749" id="1224749" title="VUL-0: CVE-2024-35789: kernel: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224751" id="1224751" title="VUL-0: CVE-2024-35843: kernel: iommu/vt-d: Use device rbtree in iopf reporting path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224759" id="1224759" title="VUL-0: CVE-2024-27419: kernel: netrom: Fix data-races around sysctl_net_busy_read" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224763" id="1224763" title="VUL-0: CVE-2024-35863: kernel: smb: client: fix potential UAF in is_valid_oplock_break()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224764" id="1224764" title="VUL-0: CVE-2024-35862: kernel: smb: client: fix potential UAF in smb2_is_network_name_deleted()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224765" id="1224765" title="VUL-0: CVE-2024-35864: kernel: smb: client: fix potential UAF in smb2_is_valid_lease_break()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224766" id="1224766" title="VUL-0: CVE-2024-35861: kernel: smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224767" id="1224767" title="iommu/vt-d: Allocate DMAR fault interrupts locally" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224790" id="1224790" title="KVM: s390: Check kvm pointer when testing KVM_CAP_S390_HPAGE_1M" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224792" id="1224792" title="s390/bpf: Emit a barrier for BPF_FETCH instructions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224793" id="1224793" title="s390/cio: fix tracepoint subchannel type field" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224803" id="1224803" title="VUL-0: CVE-2024-27436: kernel: ALSA: usb-audio: Stop parsing channels bits when all channels are found." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224804" id="1224804" title="VUL-0: CVE-2024-35784: kernel: btrfs: fix deadlock with fiemap and extent locking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224866" id="1224866" title="ceph: redirty page before returning AOP_WRITEPAGE_ACTIVATE" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224928" id="1224928" title="VUL-0: CVE-2023-52840: kernel: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224930" id="1224930" title="VUL-0: CVE-2023-52796: kernel: ipvlan: add ipvlan_route_v6_outbound() helper" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224932" id="1224932" title="VUL-0: CVE-2023-52856: kernel: drm/bridge: lt8912b: Fix crash on bridge detach" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224933" id="1224933" title="VUL-0: CVE-2023-52780: kernel: net: mvneta: fix calls to page_pool_get_stats" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224935" id="1224935" title="VUL-0: CVE-2023-52837: kernel: nbd: fix uaf in nbd_open" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224936" id="1224936" title="VUL-0: CVE-2023-52860: kernel: drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224937" id="1224937" title="VUL-0: CVE-2023-52870: kernel: clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224939" id="1224939" title="VUL-0: CVE-2023-52786: kernel: ext4: fix racy may inline data check in dio write" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224941" id="1224941" title="VUL-0: CVE-2023-52861: kernel: drm: bridge: it66121: Fix invalid connector dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224944" id="1224944" title="VUL-0: CVE-2023-52877: kernel: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224946" id="1224946" title="VUL-0: CVE-2023-52784: kernel: bonding: stop the device in bond_setup_by_slave()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224947" id="1224947" title="VUL-0: CVE-2023-52798: kernel: wifi: ath11k: fix dfs radar event locking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224949" id="1224949" title="VUL-0: CVE-2023-52849: kernel: cxl/mem: Fix shutdown order" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224951" id="1224951" title="VUL-0: CVE-2023-52843: kernel: llc: verify mac len before reading mac header" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224988" id="1224988" title="VUL-0: CVE-2023-52853: kernel: hid: cp2112: Fix duplicate workqueue initialization" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224989" id="1224989" title="VUL-0: CVE-2023-52772: kernel: af_unix: fix use-after-free in unix_stream_read_actor()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224992" id="1224992" title="VUL-0: CVE-2023-52777: kernel: wifi: ath11k: fix gtk offload status event locking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224998" id="1224998" title="VUL-0: CVE-2023-52767: kernel: tls: fix NULL deref on tls_sw_splice_eof() with empty record" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225000" id="1225000" title="VUL-0: CVE-2023-52878: kernel: can: dev: can_put_echo_skb(): don't crash kernel if can_priv:echo_skb is accessed out of bounds" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225001" id="1225001" title="VUL-0: CVE-2023-52769: kernel: wifi: ath12k: fix htt mlo-offset event locking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225004" id="1225004" title="VUL-0: CVE-2023-52768: kernel: wifi: wilc1000: use vmm_table as array in wilc struct" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225006" id="1225006" title="VUL-0: CVE-2023-52801: kernel: iommufd: Fix missing update of domains_itree after splitting iopt_area" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225007" id="1225007" title="VUL-0: CVE-2023-52771: kernel: cxl/port: Fix delete_endpoint() vs parent unregistration race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225008" id="1225008" title="VUL-0: CVE-2023-52803: kernel: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225009" id="1225009" title="VUL-0: CVE-2023-52867: kernel: drm/radeon: possible buffer overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225014" id="1225014" title="VUL-0: CVE-2023-52850: kernel: media: hantro: Check whether reset op is defined before use" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225015" id="1225015" title="VUL-0: CVE-2023-52862: kernel: drm/amd/display: Fix null pointer dereference in error message" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225022" id="1225022" title="VUL-0: CVE-2023-52821: kernel: drm/panel: fix a possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225025" id="1225025" title="VUL-0: CVE-2023-52842: kernel: virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225028" id="1225028" title="VUL-0: CVE-2023-52794: kernel: thermal: intel: powerclamp: fix mismatch in get function for max_idle" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225029" id="1225029" title="VUL-0: CVE-2023-52765: kernel: mfd: qcom-spmi-pmic: Fix revid implementation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225031" id="1225031" title="VUL-0: CVE-2023-52838: kernel: fbdev: imsttfb: fix a resource leak in probe" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225036" id="1225036" title="VUL-0: CVE-2023-52876: kernel: clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225041" id="1225041" title="VUL-0: CVE-2023-52773: kernel: drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225044" id="1225044" title="VUL-0: CVE-2023-52868: kernel: thermal: core: prevent potential string overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225049" id="1225049" title="VUL-0: CVE-2023-52874: kernel: x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225050" id="1225050" title="VUL-0: CVE-2023-52869: kernel: pstore/platform: Add check for kstrdup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225053" id="1225053" title="sched/topology: Optimize topology_span_sane()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225076" id="1225076" title="VUL-0: CVE-2023-52825: kernel: drm/amdkfd: Fix a race condition of vram buffer unref in svm code" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225077" id="1225077" title="VUL-0: CVE-2023-52826: kernel: drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225078" id="1225078" title="VUL-0: CVE-2023-52827: kernel: wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225081" id="1225081" title="VUL-0: CVE-2023-52829: kernel: wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225085" id="1225085" title="VUL-0: CVE-2023-52795: kernel: vhost-vdpa: fix use after free in vhost_vdpa_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225086" id="1225086" title="VUL-0: CVE-2023-52865: kernel: clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225088" id="1225088" title="VUL-0: CVE-2023-52775: kernel: net/smc: avoid data corruption caused by decline" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225090" id="1225090" title="VUL-0: CVE-2023-52776: kernel: wifi: ath12k: fix dfs-radar and temperature event locking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225092" id="1225092" title="VUL-0: CVE-2023-52781: kernel: usb: config: fix iteration issue in 'usb_get_bos_descriptor()'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225096" id="1225096" title="VUL-0: CVE-2023-52875: kernel: clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225097" id="1225097" title="VUL-0: CVE-2023-52807: kernel: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225098" id="1225098" title="VUL-0: CVE-2023-52846: kernel: hsr: Prevent use after free in prp_create_tagged_frame()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225101" id="1225101" title="VUL-0: CVE-2023-52879: kernel: tracing: Have trace_event_file have ref counters" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225103" id="1225103" title="VUL-0: CVE-2023-52782: kernel: net/mlx5e: Track xmit submission to PTP WQ after populating metadata map" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225104" id="1225104" title="VUL-0: CVE-2023-52783: kernel: net: wangxun: fix kernel panic due to null pointer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225105" id="1225105" title="VUL-0: CVE-2023-52787: kernel: blk-mq: make sure active queue usage is held for bio_integrity_prep()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225106" id="1225106" title="VUL-0: CVE-2023-52788: kernel: i915/perf: Fix NULL deref bugs with drm_dbg() calls" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225108" id="1225108" title="VUL-0: CVE-2023-52791: kernel: i2c: core: Run atomic i2c xfer when !preemptible" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225120" id="1225120" title="VUL-0: CVE-2023-52866: kernel: HID: uclogic: Fix user-memory-access bug in uclogic_params_ugee_v2_init_event_hooks()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225132" id="1225132" title="VUL-0: CVE-2023-52864: kernel: platform/x86: wmi: Fix opening of char device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225133" id="1225133" title="s390/cpacf: Split and rework cpacf query functions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225134" id="1225134" title="s390/ipl: Fix incorrect initialization of nvme dump block" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225136" id="1225136" title="s390/ipl: Fix incorrect initialization of len fields in nvme reipl  block" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225172" id="1225172" title="[TRACKERBUG] SLE15-SP6 backports for cifs.ko" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225180" id="1225180" title="VUL-0: CVE-2023-52789: kernel: tty: vcc: Add check for kstrdup() in vcc_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225272" id="1225272" title="soft lockup on non-responding NFS server after blocking NFS port [ref:_00D1igLOd._500TrA9Uu1:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225300" id="1225300" title="[MI300A] Bug Fix in AMD Address translation support for MI300A" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225391" id="1225391" title="VUL-0: CVE-2021-47432: kernel: lib/generic-radix-tree.c: Don't overflow in peek()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225472" id="1225472" title="VUL-0: CVE-2023-52799: kernel: jfs: fix array-index-out-of-bounds in dbFindLeaf" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225475" id="1225475" title="VUL-0: CVE-2023-52735: kernel: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225476" id="1225476" title="VUL-0: CVE-2023-52749: kernel: spi: Fix null dereference on suspend" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225477" id="1225477" title="VUL-0: CVE-2023-52792: kernel: cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225478" id="1225478" title="VUL-0: CVE-2023-52753: kernel: drm/amd/display: Avoid NULL dereference of timing generator" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225485" id="1225485" title="VUL-0: CVE-2023-52750: kernel: arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225489" id="1225489" title="VUL-0: CVE-2023-52751: kernel: smb: client: fix use-after-free in smb2_query_info_compound()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225490" id="1225490" title="VUL-0: CVE-2023-52754: kernel: media: imon: fix access to invalid resource for the second interface" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225502" id="1225502" title="VUL-0: CVE-2024-36012: kernel: Bluetooth: msft: fix slab-use-after-free in msft_do_close()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225527" id="1225527" title="VUL-0: CVE-2023-52813: kernel: crypto: pcrypt - fix hungtask for PADATA_RESET" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225529" id="1225529" title="VUL-0: CVE-2023-52816: kernel: drm/amdkfd: fix shift out-of-bounds issue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225530" id="1225530" title="VUL-0: CVE-2023-52818: kernel: drm/amd: fix UBSAN array-index-out-of-bounds for SMU7" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225532" id="1225532" title="VUL-0: CVE-2023-52819: kernel: drm/amd: fix UBSAN array-index-out-of-bounds for Polaris and Tonga" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225534" id="1225534" title="VUL-0: CVE-2023-52871: kernel: soc: qcom: llcc: handle a second device without data corruption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225548" id="1225548" title="VUL-0: CVE-2023-52757: kernel: smb: client: fix potential deadlock when releasing mids" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225550" id="1225550" title="VUL-0: CVE-2023-52804: kernel: fs/jfs: Add validity check for db_maxag and db_agpref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225553" id="1225553" title="VUL-0: CVE-2023-52805: kernel: jfs: fix array-index-out-of-bounds in diAlloc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225554" id="1225554" title="VUL-0: CVE-2023-52806: kernel: ALSA: hda: Fix possible null-ptr-deref when assigning a stream" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225555" id="1225555" title="VUL-0: CVE-2023-52808: kernel: scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225556" id="1225556" title="VUL-0: CVE-2023-52809: kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225557" id="1225557" title="VUL-0: CVE-2023-52810: kernel: fs/jfs: Add check for negative db_l2nbperpage" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225559" id="1225559" title="VUL-0: CVE-2023-52811: kernel: scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225560" id="1225560" title="VUL-0: CVE-2023-52759: kernel: gfs2: ignore negated quota changes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225564" id="1225564" title="VUL-0: CVE-2023-52812: kernel: drm/amd: check num of link levels when update pcie param" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225565" id="1225565" title="VUL-0: CVE-2023-52814: kernel: drm/amdgpu: Fix potential null pointer derefernce" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225566" id="1225566" title="VUL-0: CVE-2023-52858: kernel: clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225568" id="1225568" title="VUL-0: CVE-2023-52815: kernel: drm/amdgpu/vkms: fix a possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225569" id="1225569" title="VUL-0: CVE-2023-52817: kernel: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225570" id="1225570" title="VUL-0: CVE-2023-52763: kernel: i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225571" id="1225571" title="VUL-0: CVE-2023-52764: kernel: media: gspca: cpia1: shift-out-of-bounds in set_flicker" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225572" id="1225572" title="VUL-0: CVE-2023-52774: kernel: s390/dasd: protect device queue against concurrent access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225573" id="1225573" title="VUL-0: CVE-2023-52762: kernel: virtio-blk: fix implicit overflow on virtio_max_dma_size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225577" id="1225577" title="VUL-0: CVE-2023-52832: kernel: wifi: mac80211: don't return unset power in ieee80211_get_tx_power()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225578" id="1225578" title="VUL-0: CVE-2024-36013: kernel: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225579" id="1225579" title="VUL-0: CVE-2024-36011: kernel: Bluetooth: HCI: Fix potential null-ptr-deref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225580" id="1225580" title="[PATCH] workqueue: Implement system-wide nr_active enforcement for  unbound workqueues" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225581" id="1225581" title="VUL-0: CVE-2023-52857: kernel: drm/mediatek: Fix coverity issue with unintentional integer overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225583" id="1225583" title="VUL-0: CVE-2023-52855: kernel: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225584" id="1225584" title="VUL-0: CVE-2023-52854: kernel: padata: Fix refcnt handling in padata_free_shell()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225585" id="1225585" title="VUL-0: CVE-2023-52845: kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225586" id="1225586" title="VUL-0: CVE-2023-52863: kernel: hwmon: (axi-fan-control) Fix possible NULL pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225587" id="1225587" title="VUL-0: CVE-2023-52851: kernel: IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225588" id="1225588" title="VUL-0: CVE-2023-52847: kernel: media: bttv: fix use after free error due to btv-&gt;timeout timer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225589" id="1225589" title="VUL-0: CVE-2023-52873: kernel: clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225590" id="1225590" title="VUL-0: CVE-2023-52844: kernel: media: vidtv: psi: Add check for kstrdup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225591" id="1225591" title="VUL-0: CVE-2023-52872: kernel: tty: n_gsm: fix race condition in status line change on dead connections" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225592" id="1225592" title="VUL-0: CVE-2023-52841: kernel: media: vidtv: mux: Add check and kfree for kstrdup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225593" id="1225593" title="VUL-0: CVE-2024-36014: kernel: drm/arm/malidp: fix a possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225594" id="1225594" title="VUL-0: CVE-2024-36010: kernel: igb: Fix string truncation warnings in igb_set_fw_version" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225595" id="1225595" title="VUL-0: CVE-2023-52833: kernel: Bluetooth: btusb: add date-&gt;evt_skb is NULL check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225599" id="1225599" title="VUL-0: CVE-2023-52834: kernel: atl1c: work around the DMA RX overflow issue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225600" id="1225600" title="VUL-0: CVE-2023-38417: kernel-firmware: Improper input validation for some Intel(R) PROSet/Wireless WiFi software before version 23.20" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225601" id="1225601" title="VUL-0: CVE-2023-47210: kernel-firmware: Improper input validation for some Intel(R) PROSet/Wireless WiFi software for linux before version 23.20" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225602" id="1225602" title="VUL-0: CVE-2023-52835: kernel: perf/core: bail out early if the request AUX area is out of bound" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225605" id="1225605" title="blk-cgroup: fix list corruption from resetting io stat" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225607" id="1225607" title="[PATCH] printk: console flushing fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225609" id="1225609" title="VUL-0: CVE-2023-52836: kernel: locking/ww_mutex/test: fix potential workqueue corruption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225610" id="1225610" title="prctl: generalize PR_SET_MDWE support check to be per-arch" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225611" id="1225611" title="VUL-0: CVE-2023-52881: kernel: tcp: do not accept ACK of bytes we never sent" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225616" id="1225616" title="printk: Update @console_may_schedule in console_trylock_spinning()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225618" id="1225618" title="printk: Let no_printk() use _printk()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225640" id="1225640" title="VUL-0: CVE-2024-36015: kernel: ppdev: Add an error check in register_device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225642" id="1225642" title="VUL-0: CVE-2024-36016: kernel: tty: n_gsm: fix possible out-of-bounds in gsm0_receive()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225681" id="1225681" title="VUL-0: CVE-2024-36017: kernel: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225692" id="1225692" title="VUL-0: CVE-2023-52882: kernel: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225694" id="1225694" title="VUL-0: CVE-2024-36018: kernel: nouveau/uvmm: fix addr/range calcs for remap operations" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225695" id="1225695" title="VUL-0: CVE-2024-36019: kernel: regmap: maple: Fix cache corruption in regcache_maple_drop()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225696" id="1225696" title="A new warning on SLE15-SP6 KOTD (WARNING: CPU: 0 PID: 1087 at ../arch/x86/include/asm/kvm-x86-pmu-ops.h:15 kvm_pmu_ops_update+0x24e/0x2a0 [kvm])" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225698" id="1225698" title="VUL-0: CVE-2024-36020: kernel: i40e: fix vf may be used uninitialized in this function warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225699" id="1225699" title="VUL-0: CVE-2024-36021: kernel: net: hns3: fix kernel crash when devlink reload during pf initialization" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225702" id="1225702" title="VUL-0: CVE-2024-36024: kernel: drm/amd/display: Disable idle reallow as part of command/gpint execution" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225704" id="1225704" title="VUL-0: CVE-2024-36025: kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225705" id="1225705" title="VUL-0: CVE-2024-36026: kernel: drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225708" id="1225708" title="VUL-0: CVE-2024-36029: kernel: mmc: sdhci-msm: pervent access to suspended controller" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225710" id="1225710" title="VUL-0: CVE-2024-36891: kernel: maple_tree: fix mas_empty_area_rev() null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225711" id="1225711" title="VUL-0: CVE-2024-36901: kernel: ipv6: prevent NULL dereference in ip6_output()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225712" id="1225712" title="VUL-0: CVE-2024-36030: kernel: octeontx2-af: fix the double free in rvu_npc_freemem()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225714" id="1225714" title="VUL-0: CVE-2024-36890: kernel: mm/slab: make __free(kfree) accept error pointers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225715" id="1225715" title="VUL-0: CVE-2024-36906: kernel: ARM: 9381/1: kasan: clear stale stack poison" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225717" id="1225717" title="VUL-0: CVE-2024-36910: kernel: uio_hv_generic: Don't free decrypted memory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225719" id="1225719" title="VUL-0: CVE-2024-36902: kernel: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225720" id="1225720" title="VUL-0: CVE-2024-36032: kernel: Bluetooth: qca: fix info leak when fetching fw build id" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225722" id="1225722" title="VUL-0: CVE-2024-36880: kernel: Bluetooth: qca: add missing firmware sanity checks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225723" id="1225723" title="VUL-0: CVE-2024-36882: kernel: mm: use memalloc_nofs_save() in page_cache_ra_order()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225726" id="1225726" title="VUL-0: CVE-2024-36900: kernel: net: hns3: fix kernel crash when devlink reload during initialization" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225728" id="1225728" title="VUL-0: CVE-2024-36885: kernel: drm/nouveau/firmware: fix SG_DEBUG error with nvkm_firmware_ctor()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225731" id="1225731" title="VUL-0: CVE-2024-36887: kernel: e1000e: change usleep_range to udelay in PHY mdic access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225732" id="1225732" title="VUL-0: CVE-2024-36904: kernel: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225734" id="1225734" title="VUL-0: CVE-2024-36896: kernel: USB: core: Fix access violation during port device removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225735" id="1225735" title="VUL-0: CVE-2024-36897: kernel: drm/amd/display: Atom Integrated System Info v2_2 for DCN35" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225736" id="1225736" title="VUL-0: CVE-2024-36898: kernel: gpiolib: cdev: fix uninitialised kfifo" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225737" id="1225737" title="VUL-0: CVE-2024-36899: kernel: gpiolib: cdev: Fix use after free in lineinfo_changed_notify" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225741" id="1225741" title="VUL-0: CVE-2024-36903: kernel: ipv6: Fix potential uninit-value access in __ip6_make_skb()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225744" id="1225744" title="VUL-0: CVE-2024-36909: kernel: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225745" id="1225745" title="VUL-0: CVE-2024-36911: kernel: hv_netvsc: Don't free decrypted memory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225746" id="1225746" title="VUL-0: CVE-2024-36889: kernel: mptcp: ensure snd_nxt is properly initialized on connect" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225747" id="1225747" title="VUL-0: CVE-2024-36931: kernel: s390/cio: Ensure the copied buf is NUL terminated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225748" id="1225748" title="VUL-0: CVE-2024-36893: kernel: usb: typec: tcpm: Check for port partner validity before consuming it" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225749" id="1225749" title="VUL-0: CVE-2024-36894: kernel: usb: gadget: f_fs: fix race between aio_cancel() and AIO request complete" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225750" id="1225750" title="VUL-0: CVE-2024-36895: kernel: usb: gadget: uvc: use correct buffer size when parsing configfs lists" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225752" id="1225752" title="VUL-0: CVE-2024-36912: kernel: Drivers: hv: vmbus: track decrypted status in vmbus_gpadl" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225753" id="1225753" title="VUL-0: CVE-2024-36913: kernel: Drivers: hv: vmbus: leak pages if set_memory_encrypted() fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225756" id="1225756" title="Backport BPF control flow graph and precision backtrack fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225757" id="1225757" title="VUL-0: CVE-2024-36914: kernel: drm/amd/display: skip on writeback when it's not applicable" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225758" id="1225758" title="VUL-0: CVE-2024-36915: kernel: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225759" id="1225759" title="VUL-0: CVE-2024-36916: kernel: blk-iocost: avoid out of bounds shift" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225760" id="1225760" title="VUL-0: CVE-2024-36934: kernel: bna: ensure the copied buf is NUL terminated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225761" id="1225761" title="VUL-0: CVE-2024-36938: kernel: bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225762" id="1225762" title="VUL-0: CVE-2024-36957: kernel: octeontx2-af: avoid off-by-one read from userspace" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225763" id="1225763" title="VUL-0: CVE-2024-36935: kernel: ice: ensure the copied buf is NUL terminated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225765" id="1225765" title="PTF request for backport of BPF control flow graph and precision backtrack fixes — ref:_00D1igLOd._500TrBEVKJ:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225766" id="1225766" title="VUL-0: CVE-2024-36918: kernel: bpf: check bloom filter map value size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225767" id="1225767" title="VUL-0: CVE-2024-36919: kernel: scsi: bnx2fc: remove spin_lock_bh while releasing resources after upload" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225769" id="1225769" title="VUL-0: CVE-2024-36921: kernel: wifi: iwlwifi: mvm: guard against invalid STA ID on removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225770" id="1225770" title="VUL-0: CVE-2024-36917: kernel: block: fix overflow in blk_ioctl_discard()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225773" id="1225773" title="VUL-0: CVE-2024-36936: kernel: efi/unaccepted: touch soft lockup during memory accept" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225775" id="1225775" title="VUL-0: CVE-2024-36928: kernel: s390/qeth: fix kernel panic after setting hsuid" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225805" id="1225805" title="VUL-0: CVE-2024-36922: kernel: wifi: iwlwifi: read txq-&gt;read_ptr under lock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225810" id="1225810" title="VUL-0: CVE-2024-36955: kernel: ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225815" id="1225815" title="VUL-0: CVE-2024-36923: kernel: fs/9p: fix uninitialized values during inode evict" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225820" id="1225820" title="VUL-0: CVE-2024-36924: kernel: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225823" id="1225823" title="VUL-0: CVE-2024-36945: kernel: net/smc: fix neighbour and rtable leak in smc_ib_find_route()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225827" id="1225827" title="VUL-0: CVE-2024-36962: kernel: net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225829" id="1225829" title="VUL-0: CVE-2024-36926: kernel: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225830" id="1225830" title="VUL-0: CVE-2024-36930: kernel: spi: fix null pointer dereference within spi_sync" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225834" id="1225834" title="VUL-0: CVE-2024-36937: kernel: xdp: use flags field to disambiguate broadcast redirect" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225835" id="1225835" title="VUL-0: CVE-2024-36941: kernel: wifi: nl80211: don't free NULL coalescing rule" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225839" id="1225839" title="VUL-0: CVE-2024-36959: kernel: pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225840" id="1225840" title="VUL-0: CVE-2024-36940: kernel: pinctrl: core: delete incorrect free in pinctrl_enable()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225842" id="1225842" title="Update Broadcom Emulex lpfc driver to 14.4.0.2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225843" id="1225843" title="VUL-0: CVE-2024-36942: kernel: Bluetooth: qca: fix firmware check error path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225847" id="1225847" title="VUL-0: CVE-2024-36944: kernel: reapply &quot;drm/qxl: simplify qxl_fence_wait&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225851" id="1225851" title="VUL-0: CVE-2024-36946: kernel: phonet: fix rtm_phonet_notify() skb allocation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225856" id="1225856" title="VUL-0: CVE-2024-36947: kernel: qibfs: fix dentry leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225866" id="1225866" title="VUL-0: CVE-2024-36964: kernel: fs/9p: only translate RWX permissions for plain 9P2000" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225872" id="1225872" title="VUL-0: CVE-2024-36960: kernel: drm/vmwgfx: fix invalid reads in fence signaled events" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225894" id="1225894" title="VUL-0: CVE-2024-36949: kernel: amd/amdkfd: sync all devices to wait all processes being evicted" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225895" id="1225895" title="VUL-0: CVE-2024-36950: kernel: firewire: ohci: mask bus reset interrupts between ISR and bottom half" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225896" id="1225896" title="VUL-0: CVE-2024-36951: kernel: drm/amdkfd: range check cp bad op exception interrupts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225898" id="1225898" title="VUL-0: CVE-2024-36952: kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225903" id="1225903" title="bpf: backport of iterator and callback handling fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225945" id="1225945" title="Missing patches for btrfs in 15 SP6 kernel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226022" id="1226022" title="L3: Backport of cephfs client fix addressing hangs [ref:_00D1igLOd._500TrBZugw:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226131" id="1226131" title="VUL-0: CVE-2024-36967: kernel: KEYS: trusted: Fix memory leak in tpm2_key_encode()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226145" id="1226145" title="VUL-0: CVE-2024-36971: kernel: fix __dst_negative_advice() race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226149" id="1226149" title="VUL-0: CVE-2024-36965: kernel: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226155" id="1226155" title="VUL-0: CVE-2024-36969: kernel: drm/amd/display: Fix division by zero in setup_dsc_config" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226158" id="1226158" title="SLE-15SP6: Kernel oops during boot on Intel Xeon" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226163" id="1226163" title="VUL-0: CVE-2024-36972: kernel: af_unix: update unix_sk(sk)-&gt;oob_skb under sk_receive_queue lock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226202" id="1226202" title="Request to backport kernel changes to support EC2 Graviton4 instance" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226211" id="1226211" title="kernel-obs-build missing network modules for Docker build" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226212" id="1226212" title="kernel-obs-build doesn't find &quot;iso9660&quot; when building containers with podman" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226213" id="1226213" title="[INTEL 15SP6 BUG][VROC] mdadm detects dm-device as partition" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226226" id="1226226" title="Backport request for commit b6a1f9a, &quot;avoid infinite loop in pnfs_update_layout&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226457" id="1226457" title="VUL-0: CVE-2024-36973: kernel: misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226502" id="1226502" title="Backport arm64 write combining support optimization to SLES 15" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226503" id="1226503" title="SLES15SP6: kernel tasks hang while using errinject and drmgr(NVME/Denali/P10)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226513" id="1226513" title="VUL-0: CVE-2024-36977: kernel: usb: dwc3: Wait unconditionally after issuing EndXfer command" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226514" id="1226514" title="VUL-0: CVE-2024-36978: kernel: net: sched: sch_multiq: fix possible OOB write in multiq_tune()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226519" id="1226519" title="VUL-0: CVE-2024-36974: kernel: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226520" id="1226520" title="VUL-0: CVE-2024-36975: kernel: KEYS: trusted: Do not use WARN when encode fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226582" id="1226582" title="VUL-0: CVE-2024-38540: kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226587" id="1226587" title="VUL-0: CVE-2024-38541: kernel: of: module: add buffer overflow check in of_modalias()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226588" id="1226588" title="cachefiles: remove requests from xarray during flushing requests" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226592" id="1226592" title="VUL-0: CVE-2024-38615: kernel: cpufreq: exit() callback is optional" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226593" id="1226593" title="VUL-0: CVE-2024-38546: kernel: drm: vc4: Fix possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226594" id="1226594" title="VUL-0: CVE-2024-38543: kernel: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226595" id="1226595" title="VUL-0: CVE-2024-38545: kernel: RDMA/hns: Fix UAF for cq async event" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226597" id="1226597" title="VUL-0: CVE-2024-38544: kernel: RDMA/rxe: fix seg fault in rxe_comp_queue_pkt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226607" id="1226607" title="VUL-0: CVE-2024-38555: kernel: net/mlx5: Discard command completions in internal error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226608" id="1226608" title="VUL-0: CVE-2024-38539: kernel: RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226610" id="1226610" title="VUL-0: CVE-2024-38580: kernel: epoll: be better about file lifetimes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226612" id="1226612" title="VUL-0: CVE-2024-38575: kernel: wifi: brcmfmac: pcie: handle randbuf allocation failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226613" id="1226613" title="VUL-0: CVE-2024-38602: kernel: ax25: Fix reference count leak issues of ax25_dev" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226630" id="1226630" title="VUL-0: CVE-2023-52883: kernel: drm/amdgpu: Fix possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226632" id="1226632" title="VUL-0: CVE-2024-38547: kernel: media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226633" id="1226633" title="VUL-0: CVE-2024-38550: kernel: ASoC: kirkwood: Fix potential NULL dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226634" id="1226634" title="VUL-0: CVE-2024-38578: kernel: ecryptfs: fix buffer size for tag 66 packet" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226637" id="1226637" title="VUL-0: CVE-2024-38579: kernel: crypto: bcm - fix pointer arithmetic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226657" id="1226657" title="VUL-0: CVE-2024-38581: kernel: drm/amdgpu/mes: fix use-after-free issue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226658" id="1226658" title="VUL-0: CVE-2024-38582: kernel: nilfs2: fix potential hang in nilfs_detach_log_writer()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226734" id="1226734" title="VUL-0: CVE-2024-38594: kernel: net: stmmac: move the EST lock to struct stmmac_priv" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226735" id="1226735" title="VUL-0: CVE-2024-38549: kernel: drm/mediatek: Add 0 size check to mtk_drm_gem_obj" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226737" id="1226737" title="VUL-0: CVE-2024-38571: kernel: thermal/drivers/tsens: Fix null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226738" id="1226738" title="VUL-0: CVE-2024-38591: kernel: RDMA/hns: Fix deadlock on SRQ async events." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226739" id="1226739" title="VUL-0: CVE-2024-38573: kernel: cppc_cpufreq: Fix possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226740" id="1226740" title="VUL-0: CVE-2024-38605: kernel: ALSA: core: Fix NULL module pointer assignment at card init" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226741" id="1226741" title="VUL-0: CVE-2024-38595: kernel: net/mlx5: fix peer devlink set for SF representor devlink port" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226742" id="1226742" title="VUL-0: CVE-2024-38554: kernel: ax25: Fix reference count leak issue of net_device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226744" id="1226744" title="VUL-0: CVE-2024-38553: kernel: net: fec: remove .ndo_poll_controller to avoid deadlocks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226746" id="1226746" title="VUL-0: CVE-2024-38608: kernel: net/mlx5e: fix netif state handling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226747" id="1226747" title="VUL-0: CVE-2024-38565: kernel: wifi: ar5523: enable proper endpoint verification" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226749" id="1226749" title="VUL-0: CVE-2024-38597: kernel: eth: sungem: remove .ndo_poll_controller to avoid deadlocks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226750" id="1226750" title="VUL-0: CVE-2024-38586: kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226754" id="1226754" title="VUL-0: CVE-2024-38618: kernel: ALSA: timer: Set lower bound of start tick time" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226757" id="1226757" title="VUL-0: CVE-2024-38598: kernel: md: fix resync softlockup when bitmap size is less than array size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226758" id="1226758" title="VUL-0: CVE-2024-38610: kernel: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226760" id="1226760" title="VUL-0: CVE-2024-38611: kernel: media: i2c: et8ek8: don't strip remove function when driver is builtin" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226761" id="1226761" title="VUL-0: CVE-2024-38551: kernel: ASoC: mediatek: assign dummy when codec not specified for a DAI link" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226764" id="1226764" title="VUL-0: CVE-2023-52884: kernel: Input: cyapa - add missing input core locking to suspend/resume functions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226767" id="1226767" title="VUL-0: CVE-2024-38552: kernel: drm/amd/display: fix potential index out of bounds in color transformation function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226768" id="1226768" title="VUL-0: CVE-2024-33619: kernel: efi: libstub: only free priv.runtime_map when allocated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226769" id="1226769" title="VUL-0: CVE-2024-38567: kernel: wifi: carl9170: add a proper sanity check for endpoints" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226771" id="1226771" title="VUL-0: CVE-2024-38568: kernel: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226772" id="1226772" title="VUL-0: CVE-2024-38569: kernel: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226774" id="1226774" title="VUL-0: CVE-2024-38556: kernel: net/mlx5: add a timeout to acquire the command queue semaphore" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226775" id="1226775" title="VUL-0: CVE-2024-38570: kernel: gfs2: Fix potential glock use-after-free on unmount" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226776" id="1226776" title="VUL-0: CVE-2024-38572: kernel: wifi: ath12k: fix out-of-bound access of qmi_invoke_handler()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226777" id="1226777" title="VUL-0: CVE-2024-38583: kernel: nilfs2: fix use-after-free of timer for log writer thread" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226780" id="1226780" title="VUL-0: CVE-2024-38587: kernel: speakup: Fix sizeof() vs ARRAY_SIZE() bug" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226781" id="1226781" title="VUL-0: CVE-2024-38557: kernel: net/mlx5: reload only IB representors upon lag disable/enable" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226783" id="1226783" title="VUL-0: CVE-2024-38558: kernel: net: openvswitch: fix overwriting ct original tuple for ICMPv6" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226785" id="1226785" title="VUL-0: CVE-2024-38559: kernel: scsi: qedf: ensure the copied buf is NUL terminated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226786" id="1226786" title="VUL-0: CVE-2024-38560: kernel: scsi: bfa: ensure the copied buf is NUL terminated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226788" id="1226788" title="VUL-0: CVE-2024-38562: kernel: wifi: nl80211: avoid address calculations via out of bounds array indexing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226789" id="1226789" title="VUL-0: CVE-2024-38564: kernel: bpf: add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226790" id="1226790" title="VUL-0: CVE-2024-38566: kernel: bpf: fix verifier assumptions about socket-&gt;sk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226791" id="1226791" title="sched/core: Fix incorrect initialization of the 'burst' parameter in  cpu_max_write()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226796" id="1226796" title="VUL-0: CVE-2024-34777: kernel: dma-mapping: benchmark: fix node id validation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226799" id="1226799" title="VUL-0: CVE-2024-36281: kernel: net/mlx5: use mlx5_ipsec_rx_status_destroy to correctly delete status rules" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226837" id="1226837" title="VUL-0: CVE-2024-38588: kernel: ftrace: Fix possible use-after-free issue in ftrace_location()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226839" id="1226839" title="VUL-0: CVE-2024-38590: kernel: RDMA/hns: Modify the print level of CQE error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226840" id="1226840" title="VUL-0: CVE-2024-36477: kernel: tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226841" id="1226841" title="VUL-0: CVE-2024-36478: kernel: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226842" id="1226842" title="VUL-0: CVE-2024-38603: kernel: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226844" id="1226844" title="VUL-0: CVE-2024-38592: kernel: drm/mediatek: init `ddp_comp` with devm_kcalloc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226848" id="1226848" title="VUL-0: CVE-2024-38599: kernel: jffs2: prevent xattr node from overflowing the eraseblock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226852" id="1226852" title="VUL-0: CVE-2024-38616: kernel: wifi: carl9170: re-fix fortified-memset warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226856" id="1226856" title="VUL-0: CVE-2024-38622: kernel: drm/msm/dpu: Add callback function pointer check before its call" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226857" id="1226857" title="VUL-0: CVE-2024-38627: kernel: stm class: Fix a double free in stm_register_device()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226859" id="1226859" title="VUL-0: CVE-2024-38617: kernel: kunit/fortify: Fix mismatched kvalloc()/vfree() usage" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226861" id="1226861" title="VUL-0: CVE-2024-38619: kernel: usb-storage: alauda: Check whether the media is initialized" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226863" id="1226863" title="VUL-0: CVE-2024-38635: kernel: soundwire: cadence: fix invalid PDI offset" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226864" id="1226864" title="VUL-0: CVE-2024-38600: kernel: ALSA: fix deadlocks with kctl removals at disconnection" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226866" id="1226866" title="VUL-0: CVE-2024-38604: kernel: block: refine the EOF check in blkdev_iomap_begin" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226867" id="1226867" title="VUL-0: CVE-2024-38633: kernel: serial: max3100: Update uart_driver_registered on driver removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226868" id="1226868" title="VUL-0: CVE-2024-38634: kernel: serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226875" id="1226875" title="VUL-0: CVE-2024-37353: kernel: virtio: delete vq in vp_find_vqs_msix() when request_irq() fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226876" id="1226876" title="VUL-0: CVE-2024-38601: kernel: ring-buffer: fix a race between readers and resize checks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226878" id="1226878" title="VUL-0: CVE-2024-38381: kernel: nfc: nci: Fix uninit-value in nci_rx_work" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226879" id="1226879" title="VUL-0: CVE-2024-38636: kernel: f2fs: multidev: fix to recognize valid zero block address" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226883" id="1226883" title="VUL-0: CVE-2024-38659: kernel: enic: validate length of nl attributes in enic_set_vf_port" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226886" id="1226886" title="VUL-0: CVE-2024-38780: kernel: dma-buf/sw-sync: don't enable IRQ from sync_print_obj()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226890" id="1226890" title="VUL-0: CVE-2024-38388: kernel: ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226891" id="1226891" title="VUL-0: CVE-2024-38390: kernel: drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226894" id="1226894" title="VUL-0: CVE-2024-38391: kernel: cxl/region: Fix cxlr_pmem leaks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226895" id="1226895" title="VUL-0: CVE-2024-38621: kernel: media: stk1160: fix bounds checking in stk1160_copy_video()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226905" id="1226905" title="VUL-0: CVE-2024-38629: kernel: dmaengine: idxd: avoid unnecessary destruction of file_ida" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226908" id="1226908" title="VUL-0: CVE-2024-38630: kernel: watchdog: cpu5wdt.c: fix use-after-free bug caused by cpu5wdt_trigger" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226909" id="1226909" title="VUL-0: CVE-2024-39277: kernel: dma-mapping: benchmark: handle NUMA_NO_NODE correctly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226911" id="1226911" title="VUL-0: CVE-2024-38628: kernel: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226915" id="1226915" title="Backport arm64: Update  saved buffers with latest ASPM" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226928" id="1226928" title="Backport arm64: pci: clear Secondary Status errors after enumeration" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226934" id="1226934" title="VUL-0: CVE-2024-39291: kernel: drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226938" id="1226938" title="VUL-0: CVE-2024-38384: kernel: blk-cgroup: fix list corruption from reorder of WRITE -&gt;lqueued" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226939" id="1226939" title="VUL-0: CVE-2024-38663: kernel: blk-cgroup: fix list corruption from resetting io stat" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226941" id="1226941" title="VUL-0: CVE-2024-38664: kernel: drm: zynqmp_dpsub: Always register bridge" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226948" id="1226948" title="VUL-0: CVE-2024-35247: kernel: fpga: region: add owner module and take its refcount" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226949" id="1226949" title="VUL-0: CVE-2024-36479: kernel: fpga: bridge: add owner module and take its refcount" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226950" id="1226950" title="VUL-0: CVE-2024-37021: kernel: fpga: manager: add owner module and take its refcount" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226962" id="1226962" title="TSC clocksource spuriously declared invalid in 12+ socket Sapphire Rapids systems" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226976" id="1226976" title="VUL-0: CVE-2022-48772: kernel: media: lgdt3306a: add a check against null-pointer-def" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226989" id="1226989" title="VUL-0: CVE-2024-39296: kernel: bonding: fix oops during rmmod" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226990" id="1226990" title="VUL-0: CVE-2024-39371: kernel: io_uring: check for non-NULL file pointer in io_file_can_poll()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226992" id="1226992" title="VUL-0: CVE-2024-39469: kernel: nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226993" id="1226993" title="VUL-0: CVE-2024-39276: kernel: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226994" id="1226994" title="VUL-0: CVE-2024-39301: kernel: net/9p: fix uninit-value in p9_client_rpc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226995" id="1226995" title="VUL-0: REJECTED: CVE-2024-39362: kernel: i2c: acpi: Unbind mux adapters before delete" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226996" id="1226996" title="VUL-0: CVE-2024-38661: kernel: s390/ap: Fix crash in AP internal function modify_bitmap()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227066" id="1227066" title="VUL-0: CVE-2024-37078: kernel: nilfs2: fix potential kernel bug due to lack of writeback flag waiting" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227072" id="1227072" title="s390/cpacf: Make use of invalid opcode produce a link error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227085" id="1227085" title="VUL-0: CVE-2024-38385: kernel: genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227089" id="1227089" title="VUL-0: CVE-2024-39466: kernel: thermal/drivers/qcom/lmh: Check for SCM availability at probe" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227090" id="1227090" title="VUL-0: CVE-2024-39463: kernel: 9p: add missing locking around taking dentry fid list" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227096" id="1227096" title="VUL-0: CVE-2024-39471: kernel: drm/amdgpu: add error handle to avoid out-of-bounds" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227101" id="1227101" title="VUL-0: CVE-2024-37354: kernel: btrfs: fix crash on racing fsync and size-extending write into prealloc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227103" id="1227103" title="VUL-0: CVE-2024-39468: kernel: smb: client: fix deadlock in smb2_find_smb_tcon()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227149" id="1227149" title="Bump base code of iwlwifi to 6.9.x (or 6.10.x)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227190" id="1227190" title="Fix iaa_crypto on SLES 15 SP6" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227282" id="1227282" title="[docs][SELinux]: kernel params security=selinux selinux=1 appends selinux behind bpf, leading to broken system in Leap 15.6" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227362" id="1227362" title="L3: SUSE NFS 4.1 client logs &quot;lock reclaim failed&quot; after NFS4ERR_BAD_STATEID from Azure NFS server" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227363" id="1227363" title="PM1743 vroc raid1 install SLE-15-SP6.os into emergency mode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227383" id="1227383" title="VUL-0: kernel: slab-out-of-bounds in hex_dump_to_buffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227432" id="1227432" title="VUL-0: CVE-2024-39472: kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227434" id="1227434" title="VUL-0: CVE-2024-39474: kernel: mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227435" id="1227435" title="VUL-0: CVE-2024-39475: kernel: fbdev: savage: Handle err return when savagefb_check_var failed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227443" id="1227443" title="VUL-0: CVE-2024-39479: kernel: drm/i915/hwmon: Get rid of devm" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227446" id="1227446" title="VUL-0: CVE-2024-39481: kernel: media: mc: Fix graph walk in media_pipeline_start" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227447" id="1227447" title="VUL-0: CVE-2024-39482: kernel: bcache: fix variable length array abuse in btree_iter" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227487" id="1227487" title="powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227573" id="1227573" title="VUL-0: CVE-2024-39487: kernel: bonding: fix out-of-bounds read in bond_option_arp_ip_targets_set()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227626" id="1227626" title="VUL-0: CVE-2024-39490: kernel: ipv6: sr: fix missing sk_buff release in seg6_input_core" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227716" id="1227716" title="VUL-0: CVE-2024-39494: kernel: ima: fix use-after-free on a dentry's dname.name" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227719" id="1227719" title="VUL-0: CVE-2024-39496: kernel: btrfs: zoned: fix use-after-free due to race with dev replace" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227723" id="1227723" title="VUL-0: CVE-2024-39498: kernel: drm/mst: fix NULL pointer dereference at drm_dp_add_payload_part2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227730" id="1227730" title="VUL-0: CVE-2024-39507: kernel: net: hns3: fix kernel crash problem in concurrent scenario" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227736" id="1227736" title="[HPE SLES15SP6] Intel FVL NIC FW flash fails with inbox driver, causing driver not detected" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227755" id="1227755" title="VUL-0: CVE-2024-39502: kernel: ionic: fix use after netif_napi_del()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227757" id="1227757" title="VUL-0: CVE-2024-39504: kernel: netfilter: nft_inner: validate mandatory meta and payload" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227762" id="1227762" title="VUL-0: CVE-2024-40901: kernel: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227763" id="1227763" title="VUL-0: CVE-2024-40906: kernel: net/mlx5: Always stop health timer during driver removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227779" id="1227779" title="VUL-0: CVE-2024-40919: kernel: bnxt_en: adjust logging of firmware messages in case of released token in __hwrm_send()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227780" id="1227780" title="VUL-0: CVE-2024-40931: kernel: mptcp: ensure snd_una is properly initialized on connect" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227783" id="1227783" title="VUL-0: CVE-2024-40908: kernel: bpf: Set run context for rawtp test_run callback" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227786" id="1227786" title="VUL-0: CVE-2024-40923: kernel: vmxnet3: disable rx data ring on dma allocation failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227788" id="1227788" title="VUL-0: CVE-2024-40928: kernel: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227789" id="1227789" title="VUL-0: CVE-2024-40925: kernel: block: fix request.queuelist usage in flush" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227797" id="1227797" title="VUL-0: CVE-2024-40935: kernel: cachefiles: flush all requests after setting CACHEFILES_DEAD" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227800" id="1227800" title="VUL-0: CVE-2024-40940: kernel: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227801" id="1227801" title="VUL-0: CVE-2024-40948: kernel: mm/page_table_check: fix crash on ZONE_DEVICE" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227803" id="1227803" title="VUL-0: CVE-2024-40947: kernel: ima: Avoid blocking in RCU read-side critical section" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227806" id="1227806" title="VUL-0: CVE-2024-40953: kernel: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227813" id="1227813" title="VUL-0: CVE-2024-40960: kernel: ipv6: prevent possible NULL dereference in rt6_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227814" id="1227814" title="VUL-0: CVE-2024-40961: kernel: ipv6: prevent possible NULL deref in fib6_nh_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227836" id="1227836" title="VUL-0: CVE-2024-40937: kernel: gve: clear napi-&gt;skb before dev_kfree_skb_any()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227855" id="1227855" title="VUL-0: CVE-2024-40979: kernel: wifi: ath12k: fix kernel crash during resume" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227862" id="1227862" title="VUL-0: CVE-2024-41006: kernel: netrom: fix a memory leak in nr_heartbeat_expiry()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227866" id="1227866" title="VUL-0: CVE-2024-40998: kernel: ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227886" id="1227886" title="VUL-0: CVE-2024-40966: kernel: tty: add the option to have a tty reject a new ldisc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227899" id="1227899" title="VUL-0: CVE-2024-40970: kernel: Avoid hw_desc array overrun in dw-axi-dmac" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227910" id="1227910" title="VUL-0: CVE-2024-40972: kernel: ext4: do not create EA inode under buffer lock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227913" id="1227913" title="VUL-0: CVE-2024-40999: kernel: net: ena: add validation for completion descriptors consistency" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227926" id="1227926" title="VUL-0: CVE-2024-40975: kernel: platform/x86: x86-android-tablets: Unregister devices in reverse order" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228090" id="1228090" title="Backport arm64: PCI: Extend ACS configurability" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228192" id="1228192" title="libceph: fix race between delayed_work() and ceph_monc_stop()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228193" id="1228193" title="fuse: verify {g,u}id mount options correctly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228211" id="1228211" title="SLES15 SP6 [6.4.0-150600.5-default] FS/XFS: generic/175 test with 64k block size fails with soft lockup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228269" id="1228269" title="Internal microphone not working on Lenovo Thinkpad E16 Gen 2 (Model 21M5)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228289" id="1228289" title="Backport arm64: Enable Nvidia driver for Coresight PMU arch device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228327" id="1228327" title="VUL-0: CVE-2024-41091: kernel: virtio-net: tun: mlx5_core short frame denial of service" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228328" id="1228328" title="VUL-0: CVE-2024-41090: kernel: virtio-net: tap: mlx5_core short frame denial of service" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228403" id="1228403" title="VUL-0: CVE-2024-41017: kernel: jfs: don't walk off the end of ealist" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228405" id="1228405" title="VUL-0: CVE-2024-41013: kernel: xfs: don't walk off the end of a directory data block" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228408" id="1228408" title="VUL-0: CVE-2024-41014: kernel: xfs: add bounds checking to xlog_recover_process_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228417" id="1228417" title="ceph: fix incorrect kmalloc size of pagevec mempool" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36889" id="CVE-2024-36889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36889" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40979" id="CVE-2024-40979" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40979" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38417" id="CVE-2023-38417" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38417" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51780" id="CVE-2023-51780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51780" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36955" id="CVE-2024-36955" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36955" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39473" id="CVE-2024-39473" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39473" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36942" id="CVE-2024-36942" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36942" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36944" id="CVE-2024-36944" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36944" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36949" id="CVE-2024-36949" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36949" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36951" id="CVE-2024-36951" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36951" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39479" id="CVE-2024-39479" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39479" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39475" id="CVE-2024-39475" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39475" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36950" id="CVE-2024-36950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36950" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39481" id="CVE-2024-39481" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39481" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36940" id="CVE-2024-36940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36940" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36959" id="CVE-2024-36959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36959" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36947" id="CVE-2024-36947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36947" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36930" id="CVE-2024-36930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36930" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36922" id="CVE-2024-36922" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36922" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36941" id="CVE-2024-36941" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36941" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52472" id="CVE-2023-52472" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52472" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25741" id="CVE-2024-25741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25741" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52883" id="CVE-2023-52883" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52883" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39463" id="CVE-2024-39463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39463" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38600" id="CVE-2024-38600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38600" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38605" id="CVE-2024-38605" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38605" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52806" id="CVE-2023-52806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52806" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38388" id="CVE-2024-38388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38388" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38618" id="CVE-2024-38618" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38618" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38550" id="CVE-2024-38550" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38550" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38551" id="CVE-2024-38551" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38551" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52833" id="CVE-2023-52833" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52833" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26889" id="CVE-2024-26889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26889" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52866" id="CVE-2023-52866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52866" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52851" id="CVE-2023-52851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52851" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52884" id="CVE-2023-52884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52884" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52840" id="CVE-2023-52840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52840" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36975" id="CVE-2024-36975" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36975" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36967" id="CVE-2024-36967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36967" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38539" id="CVE-2024-38539" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38539" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38545" id="CVE-2024-38545" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38545" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38591" id="CVE-2024-38591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38591" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38590" id="CVE-2024-38590" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38590" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38544" id="CVE-2024-38544" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38544" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52803" id="CVE-2023-52803" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52803" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26676" id="CVE-2024-26676" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26676" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35970" id="CVE-2024-35970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35970" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26750" id="CVE-2024-26750" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26750" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26780" id="CVE-2024-26780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26780" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36972" id="CVE-2024-36972" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36972" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52750" id="CVE-2023-52750" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52750" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52834" id="CVE-2023-52834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52834" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38554" id="CVE-2024-38554" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38554" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38602" id="CVE-2024-38602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38602" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38384" id="CVE-2024-38384" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38384" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38663" id="CVE-2024-38663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38663" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38540" id="CVE-2024-38540" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38540" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52784" id="CVE-2023-52784" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52784" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52878" id="CVE-2023-52878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52878" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52875" id="CVE-2023-52875" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52875" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52870" id="CVE-2023-52870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52870" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52873" id="CVE-2023-52873" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52873" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52865" id="CVE-2023-52865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52865" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52858" id="CVE-2023-52858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52858" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52876" id="CVE-2023-52876" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52876" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38573" id="CVE-2024-38573" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38573" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38615" id="CVE-2024-38615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38615" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38579" id="CVE-2024-38579" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38579" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52813" id="CVE-2023-52813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52813" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52849" id="CVE-2023-52849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52849" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52792" id="CVE-2023-52792" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52792" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38391" id="CVE-2024-38391" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38391" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38780" id="CVE-2024-38780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38780" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34777" id="CVE-2024-34777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34777" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39277" id="CVE-2024-39277" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39277" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38629" id="CVE-2024-38629" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38629" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52819" id="CVE-2023-52819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52819" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52818" id="CVE-2023-52818" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52818" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52812" id="CVE-2023-52812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52812" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52753" id="CVE-2023-52753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52753" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36969" id="CVE-2024-36969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36969" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52862" id="CVE-2023-52862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52862" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38552" id="CVE-2024-38552" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38552" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52773" id="CVE-2023-52773" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52773" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26767" id="CVE-2024-26767" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26767" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52817" id="CVE-2023-52817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52817" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39291" id="CVE-2024-39291" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39291" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52814" id="CVE-2023-52814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52814" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39471" id="CVE-2024-39471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39471" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38581" id="CVE-2024-38581" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38581" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52815" id="CVE-2023-52815" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52815" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52825" id="CVE-2023-52825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52825" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52816" id="CVE-2023-52816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52816" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38548" id="CVE-2024-38548" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38548" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52861" id="CVE-2023-52861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52861" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52856" id="CVE-2023-52856" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52856" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38549" id="CVE-2024-38549" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38549" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52857" id="CVE-2023-52857" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52857" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38592" id="CVE-2024-38592" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38592" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38390" id="CVE-2024-38390" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38390" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38622" id="CVE-2024-38622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38622" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52821" id="CVE-2023-52821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52821" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52826" id="CVE-2023-52826" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52826" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52867" id="CVE-2023-52867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52867" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38546" id="CVE-2024-38546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38546" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36960" id="CVE-2024-36960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36960" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38664" id="CVE-2024-38664" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38664" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39296" id="CVE-2024-39296" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39296" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36887" id="CVE-2024-36887" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36887" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38578" id="CVE-2024-38578" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38578" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33619" id="CVE-2024-33619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33619" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52838" id="CVE-2023-52838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52838" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36964" id="CVE-2024-36964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36964" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52810" id="CVE-2023-52810" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52810" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52804" id="CVE-2023-52804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52804" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38588" id="CVE-2024-38588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38588" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38385" id="CVE-2024-38385" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38385" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52759" id="CVE-2023-52759" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52759" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52853" id="CVE-2023-52853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52853" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52863" id="CVE-2023-52863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52863" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39362" id="CVE-2024-39362" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39362" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52791" id="CVE-2023-52791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52791" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52763" id="CVE-2023-52763" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52763" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" id="CVE-2023-52766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52788" id="CVE-2023-52788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52788" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36010" id="CVE-2024-36010" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36010" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35957" id="CVE-2024-35957" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35957" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52801" id="CVE-2023-52801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52801" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52796" id="CVE-2023-52796" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52796" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38599" id="CVE-2024-38599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38599" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52799" id="CVE-2023-52799" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52799" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52805" id="CVE-2023-52805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52805" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38617" id="CVE-2024-38617" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38617" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47432" id="CVE-2021-47432" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47432" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38543" id="CVE-2024-38543" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38543" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52836" id="CVE-2023-52836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52836" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26758" id="CVE-2024-26758" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26758" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38547" id="CVE-2024-38547" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38547" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52847" id="CVE-2023-52847" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52847" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52764" id="CVE-2023-52764" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52764" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52850" id="CVE-2023-52850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52850" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38611" id="CVE-2024-38611" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38611" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52754" id="CVE-2023-52754" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52754" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48772" id="CVE-2022-48772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48772" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38621" id="CVE-2024-38621" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38621" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52841" id="CVE-2023-52841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52841" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52844" id="CVE-2023-52844" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52844" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52765" id="CVE-2023-52765" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52765" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36973" id="CVE-2024-36973" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36973" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52807" id="CVE-2023-52807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52807" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36962" id="CVE-2024-36962" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36962" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38595" id="CVE-2024-38595" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38595" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52782" id="CVE-2023-52782" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52782" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52780" id="CVE-2023-52780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52780" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52783" id="CVE-2023-52783" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52783" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35896" id="CVE-2024-35896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35896" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35962" id="CVE-2024-35962" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35962" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38381" id="CVE-2024-38381" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38381" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39469" id="CVE-2024-39469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39469" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38582" id="CVE-2024-38582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38582" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38583" id="CVE-2024-38583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38583" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38541" id="CVE-2024-38541" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38541" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52854" id="CVE-2023-52854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52854" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52835" id="CVE-2023-52835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52835" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52864" id="CVE-2023-52864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52864" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36926" id="CVE-2024-36926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36926" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52869" id="CVE-2023-52869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52869" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36965" id="CVE-2024-36965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36965" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38601" id="CVE-2024-38601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38601" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52774" id="CVE-2023-52774" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52774" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52808" id="CVE-2023-52808" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52808" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52811" id="CVE-2023-52811" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52811" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52809" id="CVE-2023-52809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52809" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36952" id="CVE-2024-36952" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36952" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36924" id="CVE-2024-36924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36924" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38634" id="CVE-2024-38634" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38634" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38633" id="CVE-2024-38633" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38633" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52871" id="CVE-2023-52871" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52871" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38635" id="CVE-2024-38635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38635" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38587" id="CVE-2024-38587" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38587" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52749" id="CVE-2023-52749" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52749" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52868" id="CVE-2023-52868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52868" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39466" id="CVE-2024-39466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39466" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38571" id="CVE-2024-38571" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38571" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52794" id="CVE-2023-52794" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52794" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52767" id="CVE-2023-52767" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52767" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36477" id="CVE-2024-36477" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36477" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52879" id="CVE-2023-52879" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52879" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26920" id="CVE-2024-26920" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26920" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52872" id="CVE-2023-52872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52872" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52880" id="CVE-2023-52880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52880" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52789" id="CVE-2023-52789" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52789" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52781" id="CVE-2023-52781" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52781" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36977" id="CVE-2024-36977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36977" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38628" id="CVE-2024-38628" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38628" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38619" id="CVE-2024-38619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38619" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52877" id="CVE-2023-52877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52877" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52795" id="CVE-2023-52795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52795" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52762" id="CVE-2023-52762" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52762" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52842" id="CVE-2023-52842" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52842" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38630" id="CVE-2024-38630" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38630" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38565" id="CVE-2024-38565" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38565" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52798" id="CVE-2023-52798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52798" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52777" id="CVE-2023-52777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52777" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" id="CVE-2023-52800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52776" id="CVE-2023-52776" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52776" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52769" id="CVE-2023-52769" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52769" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38572" id="CVE-2024-38572" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38572" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52827" id="CVE-2023-52827" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52827" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52829" id="CVE-2023-52829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52829" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38575" id="CVE-2024-38575" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38575" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38567" id="CVE-2024-38567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38567" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38616" id="CVE-2024-38616" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38616" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52832" id="CVE-2023-52832" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52832" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38562" id="CVE-2024-38562" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38562" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52768" id="CVE-2023-52768" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52768" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52874" id="CVE-2023-52874" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52874" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52855" id="CVE-2023-52855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52855" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36906" id="CVE-2024-36906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36906" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36011" id="CVE-2024-36011" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36011" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36013" id="CVE-2024-36013" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36013" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36012" id="CVE-2024-36012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36012" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36880" id="CVE-2024-36880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36880" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36032" id="CVE-2024-36032" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36032" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26990" id="CVE-2024-26990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26990" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26992" id="CVE-2024-26992" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26992" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36896" id="CVE-2024-36896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36896" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" id="CVE-2024-35905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36918" id="CVE-2024-36918" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36918" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52882" id="CVE-2023-52882" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52882" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26761" id="CVE-2024-26761" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26761" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36897" id="CVE-2024-36897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36897" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36026" id="CVE-2024-36026" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36026" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36014" id="CVE-2024-36014" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36014" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36885" id="CVE-2024-36885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36885" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36936" id="CVE-2024-36936" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36936" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36898" id="CVE-2024-36898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36898" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36020" id="CVE-2024-36020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36020" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36891" id="CVE-2024-36891" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36891" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36890" id="CVE-2024-36890" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36890" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36029" id="CVE-2024-36029" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36029" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36021" id="CVE-2024-36021" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36021" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26943" id="CVE-2024-26943" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26943" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36018" id="CVE-2024-36018" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36018" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36015" id="CVE-2024-36015" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36015" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36019" id="CVE-2024-36019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36019" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36931" id="CVE-2024-36931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36931" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36928" id="CVE-2024-36928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36928" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36025" id="CVE-2024-36025" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36025" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35814" id="CVE-2024-35814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35814" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36016" id="CVE-2024-36016" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36016" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36894" id="CVE-2024-36894" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36894" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36895" id="CVE-2024-36895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36895" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36893" id="CVE-2024-36893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36893" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36921" id="CVE-2024-36921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36921" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35803" id="CVE-2024-35803" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35803" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35935" id="CVE-2024-35935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35935" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35981" id="CVE-2024-35981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35981" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35804" id="CVE-2024-35804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35804" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35791" id="CVE-2024-35791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35791" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35995" id="CVE-2024-35995" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35995" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27436" id="CVE-2024-27436" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27436" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27057" id="CVE-2024-27057" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27057" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35842" id="CVE-2024-35842" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35842" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35978" id="CVE-2024-35978" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35978" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27398" id="CVE-2024-27398" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27398" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35965" id="CVE-2024-35965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35965" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35966" id="CVE-2024-35966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35966" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35967" id="CVE-2024-35967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35967" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35933" id="CVE-2024-35933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35933" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27416" id="CVE-2024-27416" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27416" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35963" id="CVE-2024-35963" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35963" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27399" id="CVE-2024-27399" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27399" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35850" id="CVE-2024-35850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35850" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35851" id="CVE-2024-35851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35851" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" id="CVE-2024-22099" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22099" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26903" id="CVE-2024-26903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26903" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35997" id="CVE-2024-35997" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35997" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27031" id="CVE-2024-27031" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27031" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26870" id="CVE-2024-26870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26870" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35809" id="CVE-2024-35809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35809" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27388" id="CVE-2024-27388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27388" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26934" id="CVE-2024-26934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26934" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35953" id="CVE-2024-35953" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35953" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26989" id="CVE-2024-26989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26989" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36009" id="CVE-2024-36009" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36009" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35887" id="CVE-2024-35887" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35887" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35982" id="CVE-2024-35982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35982" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35974" id="CVE-2024-35974" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35974" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35972" id="CVE-2024-35972" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35972" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26983" id="CVE-2024-26983" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26983" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35784" id="CVE-2024-35784" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35784" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35849" id="CVE-2024-35849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35849" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26794" id="CVE-2024-26794" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26794" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27080" id="CVE-2024-27080" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27080" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35936" id="CVE-2024-35936" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35936" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27004" id="CVE-2024-27004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27004" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27003" id="CVE-2024-27003" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27003" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27002" id="CVE-2024-27002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27002" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27001" id="CVE-2024-27001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27001" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35794" id="CVE-2024-35794" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35794" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26962" id="CVE-2024-26962" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26962" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35916" id="CVE-2024-35916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35916" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35990" id="CVE-2024-35990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35990" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35833" id="CVE-2024-35833" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35833" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35989" id="CVE-2024-35989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35989" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27027" id="CVE-2024-27027" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27027" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36002" id="CVE-2024-36002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36002" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35836" id="CVE-2024-35836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35836" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35927" id="CVE-2024-35927" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35927" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35928" id="CVE-2024-35928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35928" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35788" id="CVE-2024-35788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35788" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35799" id="CVE-2024-35799" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35799" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35817" id="CVE-2024-35817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35817" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35795" id="CVE-2024-35795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35795" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27029" id="CVE-2024-27029" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27029" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27400" id="CVE-2024-27400" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27400" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26949" id="CVE-2024-26949" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26949" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26922" id="CVE-2024-26922" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26922" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26986" id="CVE-2024-26986" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26986" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35952" id="CVE-2024-35952" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35952" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35950" id="CVE-2024-35950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35950" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26938" id="CVE-2024-26938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26938" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26937" id="CVE-2024-26937" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26937" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35829" id="CVE-2024-35829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35829" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35786" id="CVE-2024-35786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35786" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27411" id="CVE-2024-27411" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27411" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27008" id="CVE-2024-27008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27008" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35951" id="CVE-2024-35951" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35951" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35932" id="CVE-2024-35932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35932" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26940" id="CVE-2024-26940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26940" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35810" id="CVE-2024-35810" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35810" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35947" id="CVE-2024-35947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35947" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27413" id="CVE-2024-27413" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27413" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35800" id="CVE-2024-35800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35800" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26973" id="CVE-2024-26973" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26973" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35922" id="CVE-2024-35922" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35922" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" id="CVE-2024-26764" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26764" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35815" id="CVE-2024-35815" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35815" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35973" id="CVE-2024-35973" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35973" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26857" id="CVE-2024-26857" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26857" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35984" id="CVE-2024-35984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35984" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35911" id="CVE-2024-35911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35911" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26854" id="CVE-2024-26854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26854" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35889" id="CVE-2024-35889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35889" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26853" id="CVE-2024-26853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26853" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26988" id="CVE-2024-26988" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26988" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26786" id="CVE-2024-26786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26786" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35847" id="CVE-2024-35847" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35847" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35955" id="CVE-2024-35955" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35955" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26961" id="CVE-2024-26961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26961" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35808" id="CVE-2024-35808" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35808" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26900" id="CVE-2024-26900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26900" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35830" id="CVE-2024-35830" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35830" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35824" id="CVE-2024-35824" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35824" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35907" id="CVE-2024-35907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35907" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35885" id="CVE-2024-35885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35885" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35813" id="CVE-2024-35813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35813" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35901" id="CVE-2024-35901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35901" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35958" id="CVE-2024-35958" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35958" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27432" id="CVE-2024-27432" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27432" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26881" id="CVE-2024-26881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26881" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26855" id="CVE-2024-26855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26855" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35971" id="CVE-2024-35971" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35971" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35796" id="CVE-2024-35796" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35796" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35960" id="CVE-2024-35960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35960" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35961" id="CVE-2024-35961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35961" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35959" id="CVE-2024-35959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35959" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26858" id="CVE-2024-26858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26858" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35835" id="CVE-2024-35835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35835" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35837" id="CVE-2024-35837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35837" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35891" id="CVE-2024-35891" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35891" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35945" id="CVE-2024-35945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35945" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26856" id="CVE-2024-26856" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26856" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35841" id="CVE-2024-35841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35841" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35909" id="CVE-2024-35909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35909" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35915" id="CVE-2024-35915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35915" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27046" id="CVE-2024-27046" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27046" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26868" id="CVE-2024-26868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26868" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35914" id="CVE-2024-35914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35914" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26984" id="CVE-2024-26984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26984" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27062" id="CVE-2024-27062" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27062" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26846" id="CVE-2024-26846" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26846" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27435" id="CVE-2024-27435" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27435" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27030" id="CVE-2024-27030" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27030" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35975" id="CVE-2024-35975" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35975" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35879" id="CVE-2024-35879" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35879" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35878" id="CVE-2024-35878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35878" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35992" id="CVE-2024-35992" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35992" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35986" id="CVE-2024-35986" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35986" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35977" id="CVE-2024-35977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35977" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27412" id="CVE-2024-27412" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27412" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27389" id="CVE-2024-27389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27389" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35940" id="CVE-2024-35940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35940" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26957" id="CVE-2024-26957" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26957" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26935" id="CVE-2024-26935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26935" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35930" id="CVE-2024-35930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35930" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35954" id="CVE-2024-35954" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35954" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26742" id="CVE-2024-26742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26742" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35904" id="CVE-2024-35904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35904" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27000" id="CVE-2024-27000" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27000" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26999" id="CVE-2024-26999" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26999" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35806" id="CVE-2024-35806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35806" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35819" id="CVE-2024-35819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35819" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26994" id="CVE-2024-26994" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26994" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26866" id="CVE-2024-26866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26866" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35883" id="CVE-2024-35883" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35883" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27028" id="CVE-2024-27028" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27028" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35821" id="CVE-2024-35821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35821" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35812" id="CVE-2024-35812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35812" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26997" id="CVE-2024-26997" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26997" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26963" id="CVE-2024-26963" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26963" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26996" id="CVE-2024-26996" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26996" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27405" id="CVE-2024-27405" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27405" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35825" id="CVE-2024-35825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35825" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35790" id="CVE-2024-35790" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35790" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26995" id="CVE-2024-26995" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26995" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26932" id="CVE-2024-26932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26932" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35924" id="CVE-2024-35924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35924" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35822" id="CVE-2024-35822" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35822" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26964" id="CVE-2024-26964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26964" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35823" id="CVE-2024-35823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35823" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35938" id="CVE-2024-35938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35938" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35811" id="CVE-2024-35811" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35811" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35937" id="CVE-2024-35937" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35937" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35845" id="CVE-2024-35845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35845" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27434" id="CVE-2024-27434" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27434" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35912" id="CVE-2024-35912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35912" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35828" id="CVE-2024-35828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35828" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35789" id="CVE-2024-35789" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35789" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35838" id="CVE-2024-35838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35838" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27410" id="CVE-2024-27410" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27410" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35946" id="CVE-2024-35946" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35946" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26950" id="CVE-2024-26950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26950" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26951" id="CVE-2024-26951" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26951" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26861" id="CVE-2024-26861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26861" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35875" id="CVE-2024-35875" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35875" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35801" id="CVE-2024-35801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35801" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27067" id="CVE-2024-27067" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27067" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26611" id="CVE-2024-26611" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26611" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35834" id="CVE-2024-35834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35834" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52683" id="CVE-2023-52683" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52683" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52693" id="CVE-2023-52693" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52693" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52697" id="CVE-2023-52697" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52697" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52663" id="CVE-2023-52663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52663" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52657" id="CVE-2023-52657" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52657" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52658" id="CVE-2023-52658" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52658" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52653" id="CVE-2023-52653" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52653" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52676" id="CVE-2023-52676" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52676" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52669" id="CVE-2023-52669" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52669" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52687" id="CVE-2023-52687" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52687" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52695" id="CVE-2023-52695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52695" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52673" id="CVE-2023-52673" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52673" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52671" id="CVE-2023-52671" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52671" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52691" id="CVE-2023-52691" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52691" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52678" id="CVE-2023-52678" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52678" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52694" id="CVE-2023-52694" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52694" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52661" id="CVE-2023-52661" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52661" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52662" id="CVE-2023-52662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52662" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52681" id="CVE-2023-52681" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52681" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52660" id="CVE-2023-52660" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52660" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52664" id="CVE-2023-52664" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52664" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52667" id="CVE-2023-52667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52667" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52679" id="CVE-2023-52679" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52679" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52675" id="CVE-2023-52675" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52675" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52686" id="CVE-2023-52686" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52686" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52696" id="CVE-2023-52696" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52696" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52690" id="CVE-2023-52690" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52690" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52670" id="CVE-2023-52670" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52670" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52654" id="CVE-2023-52654" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52654" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52655" id="CVE-2023-52655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52655" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26919" id="CVE-2024-26919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26919" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27393" id="CVE-2024-27393" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27393" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26933" id="CVE-2024-26933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26933" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52616" id="CVE-2023-52616" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52616" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" id="CVE-2024-26739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0639" id="CVE-2024-0639" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0639" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27009" id="CVE-2024-27009" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27009" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26959" id="CVE-2024-26959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26959" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27059" id="CVE-2024-27059" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27059" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27071" id="CVE-2024-27071" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27071" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27038" id="CVE-2024-27038" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27038" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27039" id="CVE-2024-27039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27039" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26970" id="CVE-2024-26970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26970" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26969" id="CVE-2024-26969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26969" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26968" id="CVE-2024-26968" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26968" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26966" id="CVE-2024-26966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26966" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26965" id="CVE-2024-26965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26965" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27037" id="CVE-2024-27037" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27037" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27051" id="CVE-2024-27051" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27051" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26974" id="CVE-2024-26974" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26974" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27040" id="CVE-2024-27040" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27040" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27045" id="CVE-2024-27045" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27045" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27044" id="CVE-2024-27044" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27044" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27041" id="CVE-2024-27041" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27041" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27042" id="CVE-2024-27042" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27042" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27023" id="CVE-2024-27023" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27023" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27075" id="CVE-2024-27075" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27075" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27043" id="CVE-2024-27043" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27043" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27074" id="CVE-2024-27074" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27074" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27076" id="CVE-2024-27076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27076" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27073" id="CVE-2024-27073" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27073" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27072" id="CVE-2024-27072" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27072" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27077" id="CVE-2024-27077" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27077" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27078" id="CVE-2024-27078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27078" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27047" id="CVE-2024-27047" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27047" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26956" id="CVE-2024-26956" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26956" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26955" id="CVE-2024-26955" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26955" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26977" id="CVE-2024-26977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26977" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26975" id="CVE-2024-26975" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26975" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27054" id="CVE-2024-27054" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27054" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26931" id="CVE-2024-26931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26931" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26929" id="CVE-2024-26929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26929" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26930" id="CVE-2024-26930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26930" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27068" id="CVE-2024-27068" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27068" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27060" id="CVE-2024-27060" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27060" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27048" id="CVE-2024-27048" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27048" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27052" id="CVE-2024-27052" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27052" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27391" id="CVE-2024-27391" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27391" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27053" id="CVE-2024-27053" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27053" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52650" id="CVE-2023-52650" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52650" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52649" id="CVE-2023-52649" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52649" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52648" id="CVE-2023-52648" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52648" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52647" id="CVE-2023-52647" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52647" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48669" id="CVE-2022-48669" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48669" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26978" id="CVE-2024-26978" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26978" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26972" id="CVE-2024-26972" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26972" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26981" id="CVE-2024-26981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26981" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26760" id="CVE-2024-26760" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26760" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26802" id="CVE-2024-26802" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26802" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26714" id="CVE-2024-26714" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26714" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26769" id="CVE-2024-26769" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26769" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26793" id="CVE-2024-26793" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26793" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26685" id="CVE-2024-26685" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26685" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26654" id="CVE-2024-26654" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26654" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26656" id="CVE-2024-26656" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26656" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26657" id="CVE-2024-26657" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26657" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41014" id="CVE-2024-41014" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41014" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41013" id="CVE-2024-41013" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41013" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41017" id="CVE-2024-41017" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41017" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40972" id="CVE-2024-40972" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40972" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39276" id="CVE-2024-39276" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39276" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40925" id="CVE-2024-40925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40925" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40998" id="CVE-2024-40998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40998" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41011" id="CVE-2024-41011" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41011" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39494" id="CVE-2024-39494" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39494" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39496" id="CVE-2024-39496" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39496" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41091" id="CVE-2024-41091" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41091" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41090" id="CVE-2024-41090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41090" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40999" id="CVE-2024-40999" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40999" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40966" id="CVE-2024-40966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40966" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40975" id="CVE-2024-40975" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40975" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40970" id="CVE-2024-40970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40970" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40947" id="CVE-2024-40947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40947" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40908" id="CVE-2024-40908" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40908" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40960" id="CVE-2024-40960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40960" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40935" id="CVE-2024-40935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40935" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40961" id="CVE-2024-40961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40961" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39504" id="CVE-2024-39504" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39504" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41006" id="CVE-2024-41006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41006" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40937" id="CVE-2024-40937" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40937" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39507" id="CVE-2024-39507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39507" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40940" id="CVE-2024-40940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40940" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40928" id="CVE-2024-40928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40928" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26944" id="CVE-2024-26944" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26944" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40923" id="CVE-2024-40923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40923" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40931" id="CVE-2024-40931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40931" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40919" id="CVE-2024-40919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40919" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39487" id="CVE-2024-39487" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39487" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35908" id="CVE-2024-35908" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35908" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35899" id="CVE-2024-35899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35899" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35934" id="CVE-2024-35934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35934" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35893" id="CVE-2024-35893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35893" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40901" id="CVE-2024-40901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40901" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39472" id="CVE-2024-39472" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39472" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40953" id="CVE-2024-40953" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40953" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27404" id="CVE-2024-27404" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27404" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27020" id="CVE-2024-27020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27020" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27019" id="CVE-2024-27019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27019" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40948" id="CVE-2024-40948" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40948" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35890" id="CVE-2024-35890" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35890" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36902" id="CVE-2024-36902" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36902" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36946" id="CVE-2024-36946" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36946" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38586" id="CVE-2024-38586" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38586" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39468" id="CVE-2024-39468" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39468" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40906" id="CVE-2024-40906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40906" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27012" id="CVE-2024-27012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27012" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39498" id="CVE-2024-39498" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39498" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39502" id="CVE-2024-39502" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39502" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27016" id="CVE-2024-27016" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27016" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36901" id="CVE-2024-36901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36901" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36004" id="CVE-2024-36004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36004" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27025" id="CVE-2024-27025" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27025" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35853" id="CVE-2024-35853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35853" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35854" id="CVE-2024-35854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35854" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27402" id="CVE-2024-27402" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27402" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52435" id="CVE-2023-52435" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52435" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27065" id="CVE-2024-27065" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27065" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27015" id="CVE-2024-27015" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27015" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27064" id="CVE-2024-27064" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27064" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26663" id="CVE-2024-26663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26663" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47210" id="CVE-2023-47210" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47210" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52775" id="CVE-2023-52775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52775" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38558" id="CVE-2024-38558" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38558" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39490" id="CVE-2024-39490" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39490" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26826" id="CVE-2024-26826" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26826" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26615" id="CVE-2024-26615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26615" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35942" id="CVE-2024-35942" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35942" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26691" id="CVE-2024-26691" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26691" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36909" id="CVE-2024-36909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36909" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36910" id="CVE-2024-36910" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36910" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36911" id="CVE-2024-36911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36911" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36912" id="CVE-2024-36912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36912" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36913" id="CVE-2024-36913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36913" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26665" id="CVE-2024-26665" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26665" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38659" id="CVE-2024-38659" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38659" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52751" id="CVE-2023-52751" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52751" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39482" id="CVE-2024-39482" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39482" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39474" id="CVE-2024-39474" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39474" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26636" id="CVE-2024-26636" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26636" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26635" id="CVE-2024-26635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26635" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38598" id="CVE-2024-38598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38598" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36003" id="CVE-2024-36003" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36003" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38604" id="CVE-2024-38604" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38604" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26641" id="CVE-2024-26641" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26641" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26863" id="CVE-2024-26863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26863" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26633" id="CVE-2024-26633" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26633" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26623" id="CVE-2024-26623" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26623" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26785" id="CVE-2024-26785" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26785" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26734" id="CVE-2024-26734" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26734" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35805" id="CVE-2024-35805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35805" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39371" id="CVE-2024-39371" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39371" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52846" id="CVE-2023-52846" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52846" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38610" id="CVE-2024-38610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38610" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37354" id="CVE-2024-37354" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37354" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36919" id="CVE-2024-36919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36919" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38559" id="CVE-2024-38559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38559" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38570" id="CVE-2024-38570" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38570" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36904" id="CVE-2024-36904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36904" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52881" id="CVE-2023-52881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52881" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37353" id="CVE-2024-37353" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37353" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39301" id="CVE-2024-39301" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39301" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35843" id="CVE-2024-35843" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35843" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37078" id="CVE-2024-37078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37078" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35247" id="CVE-2024-35247" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35247" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36479" id="CVE-2024-36479" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36479" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37021" id="CVE-2024-37021" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37021" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36281" id="CVE-2024-36281" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36281" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38580" id="CVE-2024-38580" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38580" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36478" id="CVE-2024-36478" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36478" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38636" id="CVE-2024-38636" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38636" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38661" id="CVE-2024-38661" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38661" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38564" id="CVE-2024-38564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38564" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38566" id="CVE-2024-38566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38566" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38560" id="CVE-2024-38560" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38560" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36978" id="CVE-2024-36978" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36978" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36917" id="CVE-2024-36917" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36917" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36974" id="CVE-2024-36974" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36974" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38627" id="CVE-2024-38627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38627" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38603" id="CVE-2024-38603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38603" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38553" id="CVE-2024-38553" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38553" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38555" id="CVE-2024-38555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38555" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38556" id="CVE-2024-38556" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38556" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38557" id="CVE-2024-38557" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38557" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38608" id="CVE-2024-38608" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38608" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38597" id="CVE-2024-38597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38597" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38594" id="CVE-2024-38594" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38594" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38569" id="CVE-2024-38569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38569" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38568" id="CVE-2024-38568" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38568" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26814" id="CVE-2024-26814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26814" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26813" id="CVE-2024-26813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26813" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36945" id="CVE-2024-36945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36945" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36923" id="CVE-2024-36923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36923" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36971" id="CVE-2024-36971" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36971" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27414" id="CVE-2024-27414" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27414" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35900" id="CVE-2024-35900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35900" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35886" id="CVE-2024-35886" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35886" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36024" id="CVE-2024-36024" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36024" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36903" id="CVE-2024-36903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36903" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36914" id="CVE-2024-36914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36914" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36899" id="CVE-2024-36899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36899" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35979" id="CVE-2024-35979" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35979" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35807" id="CVE-2024-35807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35807" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52622" id="CVE-2023-52622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52622" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52843" id="CVE-2023-52843" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52843" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35898" id="CVE-2024-35898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35898" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36915" id="CVE-2024-36915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36915" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36017" id="CVE-2024-36017" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36017" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36882" id="CVE-2024-36882" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36882" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36916" id="CVE-2024-36916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36916" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36900" id="CVE-2024-36900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36900" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52787" id="CVE-2023-52787" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52787" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35925" id="CVE-2024-35925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35925" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52837" id="CVE-2023-52837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52837" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52786" id="CVE-2023-52786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52786" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36934" id="CVE-2024-36934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36934" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36935" id="CVE-2024-36935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36935" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36937" id="CVE-2024-36937" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36937" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52672" id="CVE-2023-52672" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52672" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52845" id="CVE-2023-52845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52845" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36005" id="CVE-2024-36005" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36005" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26845" id="CVE-2024-26845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26845" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35892" id="CVE-2024-35892" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35892" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35848" id="CVE-2024-35848" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35848" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35884" id="CVE-2024-35884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35884" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35857" id="CVE-2024-35857" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35857" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52735" id="CVE-2023-52735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52735" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26921" id="CVE-2024-26921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26921" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35956" id="CVE-2024-35956" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35956" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35926" id="CVE-2024-35926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35926" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35976" id="CVE-2024-35976" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35976" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36938" id="CVE-2024-36938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36938" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36008" id="CVE-2024-36008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36008" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35998" id="CVE-2024-35998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35998" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52757" id="CVE-2023-52757" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52757" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27419" id="CVE-2024-27419" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27419" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36957" id="CVE-2024-36957" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36957" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26925" id="CVE-2024-26925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26925" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26625" id="CVE-2024-26625" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26625" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36030" id="CVE-2024-36030" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36030" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52698" id="CVE-2023-52698" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52698" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26822" id="CVE-2024-26822" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26822" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52434" id="CVE-2023-52434" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52434" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26860" id="CVE-2024-26860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26860" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52772" id="CVE-2023-52772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52772" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27431" id="CVE-2024-27431" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27431" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35860" id="CVE-2024-35860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35860" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35964" id="CVE-2024-35964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35964" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" id="CVE-2023-0160" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35895" id="CVE-2024-35895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35895" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26928" id="CVE-2024-26928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26928" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35999" id="CVE-2024-35999" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35999" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35861" id="CVE-2024-35861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35861" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35862" id="CVE-2024-35862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35862" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35863" id="CVE-2024-35863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35863" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35865" id="CVE-2024-35865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35865" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35864" id="CVE-2024-35864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35864" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35867" id="CVE-2024-35867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35867" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35868" id="CVE-2024-35868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35868" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35866" id="CVE-2024-35866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35866" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35869" id="CVE-2024-35869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35869" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35870" id="CVE-2024-35870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35870" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26692" id="CVE-2024-26692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26692" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27036" id="CVE-2024-27036" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27036" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35903" id="CVE-2024-35903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35903" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35931" id="CVE-2024-35931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35931" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35877" id="CVE-2024-35877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35877" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35880" id="CVE-2024-35880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35880" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35831" id="CVE-2024-35831" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35831" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35969" id="CVE-2024-35969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35969" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35852" id="CVE-2024-35852" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35852" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36006" id="CVE-2024-36006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36006" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36007" id="CVE-2024-36007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36007" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35872" id="CVE-2024-35872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35872" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52771" id="CVE-2023-52771" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52771" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35827" id="CVE-2024-35827" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35827" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27408" id="CVE-2024-27408" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27408" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35943" id="CVE-2024-35943" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35943" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35921" id="CVE-2024-35921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35921" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52860" id="CVE-2023-52860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52860" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35991" id="CVE-2024-35991" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35991" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27418" id="CVE-2024-27418" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27418" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27417" id="CVE-2024-27417" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27417" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52656" id="CVE-2023-52656" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52656" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35917" id="CVE-2024-35917" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35917" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52674" id="CVE-2023-52674" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52674" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52680" id="CVE-2023-52680" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52680" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52692" id="CVE-2023-52692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52692" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35944" id="CVE-2024-35944" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35944" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26923" id="CVE-2024-26923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26923" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52659" id="CVE-2023-52659" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52659" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52699" id="CVE-2023-52699" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52699" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21823" id="CVE-2024-21823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21823" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26828" id="CVE-2024-26828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26828" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27395" id="CVE-2024-27395" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27395" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52483" id="CVE-2023-52483" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52483" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27396" id="CVE-2024-27396" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27396" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26632" id="CVE-2024-26632" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26632" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27401" id="CVE-2024-27401" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27401" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26775" id="CVE-2024-26775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26775" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26958" id="CVE-2024-26958" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26958" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26643" id="CVE-2024-26643" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26643" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52618" id="CVE-2023-52618" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52618" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6238" id="CVE-2023-6238" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6238" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26946" id="CVE-2024-26946" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26946" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26945" id="CVE-2024-26945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26945" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26679" id="CVE-2024-26679" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26679" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26791" id="CVE-2024-26791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26791" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52641" id="CVE-2023-52641" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52641" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26939" id="CVE-2024-26939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26939" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26865" id="CVE-2024-26865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26865" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26862" id="CVE-2024-26862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26862" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26673" id="CVE-2024-26673" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26673" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26993" id="CVE-2024-26993" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26993" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26726" id="CVE-2024-26726" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26726" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27013" id="CVE-2024-27013" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27013" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27014" id="CVE-2024-27014" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27014" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26948" id="CVE-2024-26948" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26948" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27056" id="CVE-2024-27056" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27056" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26991" id="CVE-2024-26991" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26991" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26960" id="CVE-2024-26960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26960" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52652" id="CVE-2023-52652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52652" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27022" id="CVE-2024-27022" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27022" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23848" id="CVE-2024-23848" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23848" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26982" id="CVE-2024-26982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26982" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26899" id="CVE-2024-26899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26899" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26878" id="CVE-2024-26878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26878" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26901" id="CVE-2024-26901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26901" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26671" id="CVE-2024-26671" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26671" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26638" id="CVE-2024-26638" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26638" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26772" id="CVE-2024-26772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26772" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26909" id="CVE-2024-26909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26909" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26674" id="CVE-2024-26674" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26674" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26906" id="CVE-2024-26906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26906" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26816" id="CVE-2024-26816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26816" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26832" id="CVE-2024-26832" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26832" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26783" id="CVE-2024-26783" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26783" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52635" id="CVE-2023-52635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52635" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26883" id="CVE-2024-26883" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26883" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26884" id="CVE-2024-26884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26884" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26885" id="CVE-2024-26885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26885" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26882" id="CVE-2024-26882" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26882" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52645" id="CVE-2023-52645" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52645" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26844" id="CVE-2024-26844" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26844" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26836" id="CVE-2024-26836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26836" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26601" id="CVE-2024-26601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26601" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26774" id="CVE-2024-26774" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26774" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26773" id="CVE-2024-26773" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26773" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26815" id="CVE-2024-26815" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26815" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26807" id="CVE-2024-26807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26807" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26737" id="CVE-2024-26737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26737" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26731" id="CVE-2024-26731" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26731" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26805" id="CVE-2024-26805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26805" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26733" id="CVE-2024-26733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26733" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26740" id="CVE-2024-26740" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26740" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26684" id="CVE-2024-26684" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26684" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26704" id="CVE-2024-26704" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26704" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52640" id="CVE-2023-52640" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52640" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52503" id="CVE-2023-52503" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52503" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52631" id="CVE-2023-52631" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52631" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24861" id="CVE-2024-24861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24861" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26642" id="CVE-2024-26642" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26642" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26614" id="CVE-2024-26614" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26614" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52458" id="CVE-2023-52458" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52458" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7042" id="CVE-2023-7042" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7042" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25739" id="CVE-2024-25739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25739" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" id="CVE-2023-6270" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6270" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26898" id="CVE-2024-26898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26898" type="cve" />
      <reference href="https://jira.suse.com/browse/PED-542" id="PED-542" title="https://jira.suse.com/browse/PED-542" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8111" id="PED-8111" title="https://jira.suse.com/browse/PED-8111" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8240" id="PED-8240" title="https://jira.suse.com/browse/PED-8240" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8491" id="PED-8491" title="https://jira.suse.com/browse/PED-8491" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8570" id="PED-8570" title="https://jira.suse.com/browse/PED-8570" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8644" id="PED-8644" title="https://jira.suse.com/browse/PED-8644" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8645" id="PED-8645" title="https://jira.suse.com/browse/PED-8645" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8649" id="PED-8649" title="https://jira.suse.com/browse/PED-8649" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8688" id="PED-8688" title="https://jira.suse.com/browse/PED-8688" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8701" id="PED-8701" title="https://jira.suse.com/browse/PED-8701" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8954" id="PED-8954" title="https://jira.suse.com/browse/PED-8954" type="jira" />
    </references>
    <description>The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
- CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
- CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
- CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
- CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
- CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
- CVE-2024-40998: ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super() (bsc#1227866).
- CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
- CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
- CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
- CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
- CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
- CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
- CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
- CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
- CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
- CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
- CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
- CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
- CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
- CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
- CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
- CVE-2024-40937: gve: Clear napi-&gt;skb before dev_kfree_skb_any() (bsc#1227836).
- CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
- CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
- CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
- CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
- CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
- CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
- CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
- CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
- CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
- CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
- CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
- CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
- CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
- CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
- CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
- CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
- CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
- CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
- CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
- CVE-2024-35890: gro: fix ownership transfer (bsc#1224516).
- CVE-2024-36902: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (bsc#1225719).
- CVE-2024-36946: phonet: fix rtm_phonet_notify() skb allocation (bsc#1225851).
- CVE-2024-38586: r8169: Fix possible ring buffer corruption on fragmented Tx packets (bsc#1226750).
- CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103.
- CVE-2024-40906: net/mlx5: Always stop health timer during driver removal (bsc#1227763).
- CVE-2024-27012: netfilter: nf_tables: restore set elements when delete set fails (bsc#1223804).
- CVE-2024-39498: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2 (bsc#1227723)
- CVE-2024-39502: ionic: fix use after netif_napi_del() (bsc#1227755).
- CVE-2024-27016: netfilter: flowtable: validate pppoe header (bsc#1223807).
- CVE-2024-36901: ipv6: prevent NULL dereference in ip6_output() (bsc#1225711)
- CVE-2024-36004: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (bsc#1224545)
- CVE-2024-27025: nbd: null check for nla_nest_start (bsc#1223778)
- CVE-2024-35853: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (bsc#1224604).
- CVE-2024-35854: Fixed possible use-after-free during rehash (bsc#1224636).
- CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414).
- CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
- CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates (bsc#1223836).
- CVE-2024-27015: netfilter: flowtable: incorrect pppoe tuple (bsc#1223806).
- CVE-2024-27064: netfilter: nf_tables: Fix a memory leak in nf_tables_updchain (bsc#1223740).
- CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326).
- CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601, bsc#1225600).
- CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
- CVE-2024-38558: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (bsc#1226783).
- CVE-2024-39490: ipv6: sr: fix missing sk_buff release in seg6_input_core (bsc#1227626).
- CVE-2024-26826: mptcp: fix data re-injection from stale subflow (bsc#1223010).
- CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
- CVE-2024-35942: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain (bsc#1224589).
- CVE-2024-26691: KVM: arm64: Fix circular locking dependency (bsc#1222463).
- CVE-2024-36909: Drivers: hv: vmbus: Do not free ring buffers that couldn't be re-encrypted (bsc#1225744).
- CVE-2024-36910: uio_hv_generic: Do not free decrypted memory (bsc#1225717).
- CVE-2024-36911: hv_netvsc: Do not free decrypted memory (bsc#1225745).
- CVE-2024-36912: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl (bsc#1225752).
- CVE-2024-36913: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails (bsc#1225753).
- CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328).
- CVE-2024-38659: enic: Validate length of nl attributes in enic_set_vf_port (bsc#1226883).
- CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
- CVE-2024-39482: bcache: fix variable length array abuse in btree_iter (bsc#1227447).
- CVE-2024-39474: mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL (bsc#1227434).
- CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659).
- CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656).
- CVE-2024-38598: md: fix resync softlockup when bitmap size is less than array size (bsc#1226757).
- CVE-2024-36003: ice: fix LAG and VF lock dependency in ice_reset_vf() (bsc#1224544).
- CVE-2024-38604: block: refine the EOF check in blkdev_iomap_begin (bsc#1226866).
- CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654).
- CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021).
- CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647).
- CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
- CVE-2024-26785: iommufd: Fix protection fault in iommufd_test_syz_conv_iova (bsc#1222779).
- CVE-2024-26734: devlink: fix possible use-after-free and memory leaks in devlink_init() (bsc#1222438).
- CVE-2024-35805: dm snapshot: fix lockup in dm_exception_table_exit (bsc#1224743).
- CVE-2024-39371: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990).
- CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
- CVE-2024-38610: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (bsc#1226758).
- CVE-2024-37354: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101).
- CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767).
- CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
- CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775).
- CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
- CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
- CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
- CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994).
- CVE-2024-35843: iommu/vt-d: Use device rbtree in iopf reporting path (bsc#1224751).
- CVE-2024-37078: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066).
- CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
- CVE-2024-36479: fpga: bridge: add owner module and take its refcount (bsc#1226949).
- CVE-2024-37021: fpga: manager: add owner module and take its refcount (bsc#1226950).
- CVE-2024-36281: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (bsc#1226799).
- CVE-2024-38580: epoll: be better about file lifetimes (bsc#1226610).
- CVE-2024-36478: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (bsc#1226841).
- CVE-2024-38636: f2fs: multidev: fix to recognize valid zero block address (bsc#1226879).
- CVE-2024-38661: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996).
- CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (bsc#1226789).
- CVE-2024-38566: bpf: Fix verifier assumptions about socket-&gt;sk (bsc#1226790).
- CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).
- CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
- CVE-2024-36917: block: fix overflow in blk_ioctl_discard() (bsc#1225770).
- CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).
- CVE-2024-38627: stm class: Fix a double free in stm_register_device() (bsc#1226857).
- CVE-2024-38603: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842).
- CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744).
- CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
- CVE-2024-38556: net/mlx5: Add a timeout to acquire the command queue semaphore (bsc#1226774).
- CVE-2024-38557: net/mlx5: Reload only IB representors upon lag disable/enable (bsc#1226781).
- CVE-2024-38608: net/mlx5e: Fix netif state handling (bsc#1226746).
- CVE-2024-38597: eth: sungem: remove .ndo_poll_controller to avoid deadlocks (bsc#1226749).
- CVE-2024-38594: net: stmmac: move the EST lock to struct stmmac_priv (bsc#1226734).
- CVE-2024-38569: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group (bsc#1226772).
- CVE-2024-38568: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (bsc#1226771).
- CVE-2024-26814: vfio/fsl-mc: Block calling interrupt handler without trigger (bsc#1222810).
- CVE-2024-26813: vfio/platform: Create persistent IRQ handlers (bsc#1222809).
- CVE-2024-36945: net/smc: fix neighbour and rtable leak in smc_ib_find_route() (bsc#1225823).
- CVE-2024-36923: fs/9p: fix uninitialized values during inode evict (bsc#1225815).
- CVE-2024-36971: net: fix __dst_negative_advice() race (bsc#1226145).
- CVE-2024-27414: rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (bsc#1224439).
- CVE-2024-35900: netfilter: nf_tables: reject new basechain after table flag update (bsc#1224497).
- CVE-2024-35886: ipv6: Fix infinite recursion in fib6_dump_done() (bsc#1224670).
- CVE-2024-36024: drm/amd/display: Disable idle reallow as part of command/gpint execution (bsc#1225702).
- CVE-2024-36903: ipv6: Fix potential uninit-value access in __ip6_make_skb() (bsc#1225741).
- CVE-2024-36914: drm/amd/display: Skip on writeback when it's not applicable (bsc#1225757).
- CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225737).
- CVE-2024-35979: raid1: fix use-after-free for original bio in raid1_write_request() (bsc#1224572).
- CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
- CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
- CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
- CVE-2024-35898: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (bsc#1224498).
- CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
- CVE-2024-36017: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (bsc#1225681).
- CVE-2024-36882: mm: use memalloc_nofs_save() in page_cache_ra_order() (bsc#1225723).
- CVE-2024-36916: blk-iocost: avoid out of bounds shift (bsc#1225759).
- CVE-2024-36900: net: hns3: fix kernel crash when devlink reload during initialization (bsc#1225726).
- CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
- CVE-2024-35925: block: prevent division by zero in blk_rq_stat_sum() (bsc#1224661).
- CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
- CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
- CVE-2024-36934: bna: ensure the copied buf is NUL terminated (bsc#1225760).
- CVE-2024-36935: ice: ensure the copied buf is NUL terminated (bsc#1225763).
- CVE-2024-36937: xdp: use flags field to disambiguate broadcast redirect (bsc#1225834).
- CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
- CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
- CVE-2024-36005: netfilter: nf_tables: honor table dormant flag from netdev release event path (bsc#1224539).
- CVE-2024-26845: scsi: target: core: Add TMF to tmr_list handling (bsc#1223018).
- CVE-2024-35892: net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() (bsc#1224515).
- CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
- CVE-2024-35884: udp: do not accept non-tunnel GSO skbs landing in a tunnel (bsc#1224520).
- CVE-2024-35857: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619).
- CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2024-35956: Fixed qgroup prealloc rsv leak in subvolume operations (bsc#1224674)
- CVE-2024-35926: crypto: iaa - Fix async_disable descriptor leak (bsc#1224655).
- CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (bsc#1224575).
- CVE-2024-36938: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761).
- CVE-2024-36008: ipv4: check for NULL idev in ip_route_use_hint() (bsc#1224540).
- CVE-2024-35998: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549).
- CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
- CVE-2024-27419: Fixed data-races around sysctl_net_busy_read (bsc#1224759)
- CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762).
- CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
- CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
- CVE-2024-36030: Fixed the double free in rvu_npc_freemem() (bsc#1225712)
- CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (CVE-2023-52698 bsc#1224621)
- CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
- CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts() (bsc#1220148).
- CVE-2024-26860: Fixed a memory leak when rechecking the data (bsc#1223077).
- CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor() (bsc#1224989).
- CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running  XDP program (bsc#1224718).
- CVE-2024-35860: Struct bpf_link and bpf_link_ops kABI workaround (bsc#1224531).
- CVE-2024-35964: Fixed not validating setsockopt user input (bsc#1224581).
- CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
- CVE-2024-35895: Fixed lock inversion deadlock in map delete elem (bsc#1224511).
- CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
- CVE-2024-35999: Fixed missing lock when picking channel (bsc#1224550).
- CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
- CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
- CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
- CVE-2024-35865: Fixed potential UAF in smb2_is_valid_oplock_break() (bsc#1224668).
- CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
- CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
- CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
- CVE-2024-35866: Fixed potential UAF in cifs_dump_full_key()  (bsc#1224667).
- CVE-2024-35869: smb: client: guarantee refcounted children from parent session (bsc#1224679).
- CVE-2024-35870: Fixed UAF in smb2_reconnect_server() (bsc#1224672).
- CVE-2024-26692: Fixed regression in writes when non-standard maximum write  size negotiated (bsc#1222464).
- CVE-2024-27036: Fixed writeback data corruption (bsc#1223810).
- CVE-2024-35903: Fixed IP after emitting call depth accounting (bsc#1224493).
- CVE-2024-35931: Fixed PCI error slot reset during RAS recovery (bsc#1224652).
- CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
- CVE-2024-35880: io_uring/kbuf: hold io_buffer_list reference over mmap (bsc#1224523).
- CVE-2024-35831: io_uring: Fix release of pinned pages when __io_uaddr_map fails (bsc#1224698).
- CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
- CVE-2024-35852: Fixed memory leak when canceling rehash  work (bsc#1224502).
- CVE-2024-36006: Fixed incorrect list API usage  (bsc#1224541).
- CVE-2024-36007: Fixed warning during rehash  (bsc#1224543).
- CVE-2024-35872: Fixed GUP-fast succeeding on secretmem folios  (bsc#1224530).
- CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race  (bsc#1225007).
- CVE-2024-35827: io_uring/net: fix overflow check in io_recvmsg_mshot_prep() (bsc#1224606).
- CVE-2024-27408: Fixed race condition in dmaengine w-edma/eDMA (bsc#1224430).
- CVE-2024-35943: Fixed a null pointer dereference in omap_prm_domain_init (bsc#1224649).
- CVE-2024-35921: Fixed oops when HEVC init fails (bsc#1224477).
- CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
- CVE-2024-35991: Fixed kABI workaround for struct idxd_evl (bsc#1224553).
- CVE-2024-27418: Fixed memory leak in mctp_local_output (bsc#1224720)
- CVE-2024-27417: Fixed potential "struct net" leak in inet6_rtm_getaddr() (bsc#1224721)
- CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
- CVE-2024-35917: Fixed Fix bpf_plt pointer arithmetic (bsc#1224481).
- CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put() (bsc#1224727).
- CVE-2023-52680: Fixed missing error checks to *_ctl_get() (bsc#1224608).
- CVE-2023-52692: Fixed missing error check to  scarlett2_usb_set_config() (bsc#1224628).
- CVE-2024-35944: Fixed memcpy() run-time warning in dg_dispatch_as_host() (bsc#1224648).
- CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
- CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442).
- CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
- CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
- CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2024-27395: Fixed Use-After-Free in ovs_ct_exit (bsc#1224098).
- CVE-2023-52483: mctp: perform route lookups under a RCU read-side lock (bsc#1220738).
- CVE-2024-27396: Fixed Use-After-Free in gtp_dellink (bsc#1224096).
- CVE-2024-26632: Fixed iterating over an empty bio with  bio_for_each_folio_all (bsc#1221635).
- CVE-2024-27401: Fixed user_length taken into account when fetching packet contents (bsc#1224181).
- CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
- CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous  set with timeout (bsc#1221829).
- CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
- CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
- CVE-2024-26946: Fixed copy_from_kernel_nofault() to read from unsafe  address (bsc#1223669).
- CVE-2024-26945: Fixed nr_cpus &amp;lt; nr_iaa case (bsc#1223732).
- CVE-2024-26679: Fixed read sk-&gt;sk_family once in inet_recv_error() (bsc#1222385).
- CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
- CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
- CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
- CVE-2024-26865: rds: tcp: Fix use-after-free of net in reqsk_timer_handler() (bsc#1223062).
- CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
- CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
- CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
- CVE-2024-26726: Fixed invalid drop extent_map for free space inode on write error (bsc#1222532)
- CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
- CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
- CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
- CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
- CVE-2024-26991: Fixed overflow lpage_info when checking  attributes (bsc#1223695).
- CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
- CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
- CVE-2024-27022: Fixed linking file vma until vma is fully initialized  (bsc#1223774).
- CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
- CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
- CVE-2024-26899: Fixed deadlock between bd_link_disk_holder and partition  scan (bsc#1223045).
- CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
- CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
- CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
- CVE-2024-26638: Fixed uninitialize struct msghdr completely (bsc#1221649 CVE-2024-26638).
- CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
- CVE-2024-26909: Fixed drm bridge use-after-free  (bsc#1223143).
- CVE-2024-26674: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (bsc#1222378).
- CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
- CVE-2024-26816: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
- CVE-2024-26832: Fixed missing folio cleanup in writeback race path  (bsc#1223007).
- CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
- CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
- CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
- CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
- CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).
- CVE-2024-26882: Fixed net/ip_tunnel to make sure to pull inner header in ip_tunnel_rcv() (bsc#1223034).
- CVE-2023-52645: Fixed pmdomain/mediatek race conditions with genpd (bsc#1223033).
- CVE-2024-26844: Fixed WARNING in _copy_from_iter (bsc#1223015).
- CVE-2024-26836: Fixed platform/x86/think-lmi password opcode ordering for workstations (bsc#1222968).
- CVE-2024-26601: Fixed ext4 buddy bitmap corruption via fast commit replay (bsc#1220342).
- CVE-2024-26774: Fixed dividing by 0 in mb_update_avg_fragment_size()  when block bitmap corrupt (bsc#1222622).
- CVE-2024-26773: Fixed ext4 block allocation from corrupted group in ext4_mb_try_best_found() (bsc#1222618).
- CVE-2024-26815: Fixed improper TCA_TAPRIO_TC_ENTRY_INDEX check  (bsc#1222635).
- CVE-2024-26807: Fixed spi/cadence-qspi NULL pointer reference in runtime PM hooks (bsc#1222801).
- CVE-2024-26737: Fixed selftests/bpf racing between bpf_timer_cancel_and_free and bpf_timer_cancel (bsc#1222557).
- CVE-2024-26731: Fixed NULL pointer dereference in  sk_psock_verdict_data_ready() (bsc#1222371).
- CVE-2024-26805: Fixed a kernel-infoleak-after-free in __skb_datagram_iter in netlink (bsc#1222630).
- CVE-2024-26733: Fixed an overflow in arp_req_get() in arp (bsc#1222585).
- CVE-2024-26740: Fixed use the backlog for mirred ingress  (bsc#1222563).
- CVE-2024-26684: Fixed net/stmmac/xgmac handling of DPP safety error for DMA channels (bsc#1222445).
- CVE-2024-26704: Fixed a double-free of blocks due to wrong extents moved_len in ext4 (bsc#1222422).
- CVE-2023-52640: Fixed out-of-bounds in ntfs_listxattr (bsc#1222301).
- CVE-2023-52503: Fixed tee/amdtee use-after-free vulnerability in amdtee_close_session (bsc#1220915).
- CVE-2023-52631: Fixed an NULL dereference bug (bsc#1222264  CVE-2023-52631).
- CVE-2024-24861: Fixed an overflow due to race condition in media/xc4000 device driver in xc4000 xc4000_get_frequency() function (bsc#1219623).
- CVE-2024-26642: Fixed the set of anonymous timeout flag in netfilter nf_tables (bsc#1221830).
- CVE-2024-26614: Fixed the initialization of accept_queue's spinlocks (bsc#1221293).
- CVE-2023-52458: Fixed check that partition length needs to be aligned  with block size (bsc#1220428).
- CVE-2023-7042: Fixed a null-pointer-dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (bsc#1218336).
- CVE-2024-25739: Fixed possible crash in create_empty_lvol() in drivers/mtd/ubi/vtbl.c (bsc#1219834).
- CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).

The following non-security bugs were fixed:

- 9p: add missing locking around taking dentry fid list (git-fixes)
- ACPI: CPPC: Fix access width used for PCC registers (git-fixes).
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro (git-fixes).
- ACPI: CPPC: Use access_width over bit_width for system memory accesses (stable-fixes).
- ACPI: EC: Abort address space access upon error (stable-fixes).
- ACPI: EC: Avoid returning AE_OK on errors in address space handler (stable-fixes).
- ACPI: EC: Evaluate orphan _REG under EC device (git-fixes).
- ACPI: EC: Install address space handler at the namespace root (stable-fixes).
- ACPI: Fix Generic Initiator Affinity _OSC bit (git-fixes).
- ACPI: LPSS: Advertise number of chip selects via property (git-fixes).
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC (git-fixes).
- ACPI: bus: Indicate support for _TFP thru _OSC (git-fixes).
- ACPI: bus: Indicate support for the Generic Event Device thru _OSC (git-fixes).
- ACPI: disable -Wstringop-truncation (git-fixes).
- ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (git-fixes).
- ACPI: resource: Add Infinity laptops to irq1_edge_low_force_override (stable-fixes).
- ACPI: resource: Do IRQ override on Lunnen Ground laptops (stable-fixes).
- ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx (stable-fixes).
- ACPI: scan: Do not increase dep_unmet for already met dependencies (git-fixes).
- ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7 (bsc#1217750).
- ACPI: x86: Add PNP_UART1_SKIP quirk for Lenovo Blade2 tablets (stable-fixes).
- ACPI: x86: Force StorageD3Enable on more products (stable-fixes).
- ACPI: x86: Move acpi_quirk_skip_serdev_enumeration() out of CONFIG_X86_ANDROID_TABLETS (stable-fixes).
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (git-fixes).
- ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields() (git-fixes).
- ALSA/hda: intel-dsp-config: Document AVS as dsp_driver option (git-fixes).
- ALSA/hda: intel-dsp-config: reduce log verbosity (git-fixes).
- ALSA: Fix deadlocks with kctl removals at disconnection (stable-fixes).
- ALSA: PCM: Allow resume only for suspended streams (stable-fixes).
- ALSA: aoa: avoid false-positive format truncation warning (git-fixes).
- ALSA: core: Fix NULL module pointer assignment at card init (git-fixes).
- ALSA: core: Remove debugfs at disconnection (git-fixes).
- ALSA: dmaengine: Synchronize dma channel after drop() (stable-fixes).
- ALSA: dmaengine_pcm: terminate dmaengine before synchronize (stable-fixes).
- ALSA: emux: improve patch ioctl data validation (stable-fixes).
- ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block counter (stable-fixes).
- ALSA: hda/conexant: Mute speakers at suspend / shutdown (bsc#1228269).
- ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup (git-fixes).
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown (bsc#1228269).
- ALSA: hda/realtek - Enable audio jacks of Haier Boyue G42 with ALC269VC (stable-fixes).
- ALSA: hda/realtek - Fix inactive headset mic jack (stable-fixes).
- ALSA: hda/realtek - Set GPIO3 to default at S4 state for Thinkpad with ALC1318 (stable-fixes).
- ALSA: hda/realtek - fixed headset Mic not show (stable-fixes).
- ALSA: hda/realtek: Add more codec ID to no shutup pins list (stable-fixes).
- ALSA: hda/realtek: Add quirk for HP SnowWhite laptops (stable-fixes).
- ALSA: hda/realtek: Add quirk for HP Spectre x360 14 eu0000 (stable-fixes).
- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14AHP9 (stable-fixes).
- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ARP8 (stable-fixes).
- ALSA: hda/realtek: Add quirks for ASUS Laptops using CS35L56 (stable-fixes).
- ALSA: hda/realtek: Add quirks for HP Omen models using CS35L41 (stable-fixes).
- ALSA: hda/realtek: Add quirks for Huawei Matebook D14 NBLB-WAX9N (stable-fixes).
- ALSA: hda/realtek: Add quirks for Lenovo 13X (stable-fixes).
- ALSA: hda/realtek: Add quirks for some Clevo laptops (stable-fixes).
- ALSA: hda/realtek: Add sound quirks for Lenovo Legion slim 7 16ARHA7 models (stable-fixes).
- ALSA: hda/realtek: Add support for ASUS Zenbook 2024 HN7306W (stable-fixes).
- ALSA: hda/realtek: Adjust G814JZR to use SPI init for amp (git-fixes).
- ALSA: hda/realtek: Drop doubly quirk entry for 103c:8a2e (git-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP 250 G7 (stable-fixes).
- ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 (stable-fixes).
- ALSA: hda/realtek: Enable headset mic on IdeaPad 330-17IKB 81DM (git-fixes).
- ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (stable-fixes).
- ALSA: hda/realtek: Fix build error without CONFIG_PM (stable-fixes).
- ALSA: hda/realtek: Fix conflicting PCI SSID 17aa:386f for Lenovo Legion models (bsc#1223462).
- ALSA: hda/realtek: Fix conflicting quirk for PCI SSID 17aa:3820 (git-fixes).
- ALSA: hda/realtek: Fix internal speakers for Legion Y9000X 2022 IAH7 (stable-fixes).
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU (stable-fixes).
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (stable-fixes).
- ALSA: hda/realtek: Fix volumn control of ThinkBook 16P Gen4 (git-fixes).
- ALSA: hda/realtek: Fixes for Asus GU605M and GA403U sound (stable-fixes).
- ALSA: hda/realtek: Limit mic boost on N14AP7 (stable-fixes).
- ALSA: hda/realtek: Limit mic boost on VAIO PRO PX (stable-fixes).
- ALSA: hda/realtek: Remove Framework Laptop 16 from quirks (git-fixes).
- ALSA: hda/realtek: Support Lenovo Thinkbook 13x Gen 4 (stable-fixes).
- ALSA: hda/realtek: Support Lenovo Thinkbook 16P Gen 5 (stable-fixes).
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone (git-fixes).
- ALSA: hda/realtek: add quirk for Clevo V5[46]0TU (stable-fixes).
- ALSA: hda/realtek: cs35l41: Fixup remaining asus strix models (git-fixes).
- ALSA: hda/realtek: cs35l41: Support ASUS ROG G634JYR (stable-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for EliteBook 645/665 G11 (stable-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for ProBook 440/460 G11 (stable-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for ProBook 445/465 G11 (stable-fixes).
- ALSA: hda/realtek: fix the hp playback volume issue for LG machines (stable-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx (stable-fixes).
- ALSA: hda/tas2781: Add new quirk for Lenovo Hera2 Laptop (stable-fixes).
- ALSA: hda/tas2781: Add new vendor_id and subsystem_id to support ThinkPad ICE-1 (stable-fixes).
- ALSA: hda/tas2781: add locks to kcontrols (git-fixes).
- ALSA: hda/tas2781: correct the register for pow calibrated data (git-fixes).
- ALSA: hda/tas2781: remove digital gain kcontrol (git-fixes).
- ALSA: hda: Add Intel BMG PCI ID and HDMI codec vid (stable-fixes).
- ALSA: hda: clarify Copyright information (stable-fixes).
- ALSA: hda: cs35l41: Add support for ASUS ROG 2024 Laptops (stable-fixes).
- ALSA: hda: cs35l41: Component should be unbound before deconstruction (git-fixes).
- ALSA: hda: cs35l41: Fix swapped l/r audio channels for Lenovo ThinBook 13x Gen4 (git-fixes).
- ALSA: hda: cs35l41: Ignore errors when configuring IRQs (stable-fixes).
- ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind() (git-fixes).
- ALSA: hda: cs35l41: Remove Speaker ID for Lenovo Legion slim 7 16ARHA7 (git-fixes).
- ALSA: hda: cs35l41: Remove redundant argument to cs35l41_request_firmware_file() (stable-fixes).
- ALSA: hda: cs35l41: Set the max PCM Gain using tuning setting (stable-fixes).
- ALSA: hda: cs35l41: Support HP Omen models without _DSD (stable-fixes).
- ALSA: hda: cs35l41: Support Lenovo 13X laptop without _DSD (stable-fixes).
- ALSA: hda: cs35l41: Support Lenovo Thinkbook 13x Gen 4 (stable-fixes).
- ALSA: hda: cs35l41: Support Lenovo Thinkbook 16P Gen 5 (stable-fixes).
- ALSA: hda: cs35l41: Update DSP1RX5/6 Sources for DSP config (stable-fixes).
- ALSA: hda: cs35l56: Add ACPI device match tables (git-fixes).
- ALSA: hda: cs35l56: Component should be unbound before deconstruction (git-fixes).
- ALSA: hda: cs35l56: Exit cache-only after cs35l56_wait_for_firmware_boot() (stable-fixes).
- ALSA: hda: cs35l56: Fix lifecycle of codec pointer (stable-fixes).
- ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance (git-fixes).
- ALSA: hda: cs35l56: Set the init_done flag before component_add() (git-fixes).
- ALSA: hda: hda_cs_dsp_ctl: Remove notification of driver write (stable-fixes).
- ALSA: hda: intel-dsp-config: harden I2C/I2S codec detection (stable-fixes).
- ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node() (git-fixes).
- ALSA: hda: tas2781: Component should be unbound before deconstruction (git-fixes).
- ALSA: line6: Zero-initialize message buffers (stable-fixes).
- ALSA: pcm_dmaengine: Do not synchronize DMA channel when DMA is paused (git-fixes).
- ALSA: scarlett2: Add Focusrite Clarett 2Pre and 4Pre USB support (stable-fixes).
- ALSA: scarlett2: Add Focusrite Clarett+ 2Pre and 4Pre support (stable-fixes).
- ALSA: scarlett2: Add correct product series name to messages (stable-fixes).
- ALSA: scarlett2: Add missing error check to scarlett2_config_save() (git-fixes).
- ALSA: scarlett2: Add support for Clarett 8Pre USB (stable-fixes).
- ALSA: scarlett2: Default mixer driver to enabled (stable-fixes).
- ALSA: scarlett2: Move USB IDs out from device_info struct (stable-fixes).
- ALSA: seq: Do not clear bank selection at event -&gt; UMP MIDI2 conversion (git-fixes).
- ALSA: seq: Fix incorrect UMP type for system messages (git-fixes).
- ALSA: seq: Fix missing MSB in MIDI2 SPP conversion (git-fixes).
- ALSA: seq: Fix missing bank setup between MIDI1/MIDI2 UMP conversion (git-fixes).
- ALSA: seq: Fix missing channel at encoding RPN/NRPN MIDI2 messages (git-fixes).
- ALSA: seq: Fix yet another spot for system message conversion (git-fixes).
- ALSA: seq: ump: Fix conversion from MIDI2 to MIDI1 UMP messages (git-fixes).
- ALSA: seq: ump: Fix missing System Reset message handling (git-fixes).
- ALSA: seq: ump: Fix swapped song position pointer data (git-fixes).
- ALSA: seq: ump: Skip useless ports for static blocks (git-fixes).
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (git-fixes).
- ALSA: timer: Set lower bound of start tick time (stable-fixes).
- ALSA: ump: Do not accept an invalid UMP protocol number (git-fixes).
- ALSA: ump: Do not clear bank selection after sending a program change (git-fixes).
- ALSA: ump: Do not update FB name for static blocks (git-fixes).
- ALSA: ump: Force 1 Group for MIDI1 FBs (git-fixes).
- ALSA: ump: Set default protocol when not given explicitly (git-fixes).
- ALSA: usb-audio: Add a quirk for Sonix HD USB Camera (stable-fixes).
- ALSA: usb-audio: Add sampling rates support for Mbox3 (stable-fixes).
- ALSA: usb-audio: Fix for sampling rates support for Mbox3 (stable-fixes).
- ALSA: usb-audio: Fix microphone sound on HD webcam (stable-fixes).
- ALSA: usb-audio: Move HD Webcam quirk to the right place (git-fixes).
- ARM: 9381/1: kasan: clear stale stack poison (git-fixes).
- ARM: OMAP2+: fix N810 MMC gpiod table (git-fixes).
- ARM: OMAP2+: fix USB regression on Nokia N8x0 (git-fixes).
- ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init (git-fixes).
- ARM: imx_v6_v7_defconfig: Restore CONFIG_BACKLIGHT_CLASS_DEVICE (git-fixes).
- ARM: prctl: reject PR_SET_MDWE on pre-ARMv6 (stable-fixes).
- ARM: s5pv210: fix pm.c kernel-doc warning (git-fixes).
- ASoC: Intel: Disable route checks for Skylake boards (git-fixes).
- ASoC: Intel: avs: Fix ASRC module initialization (git-fixes).
- ASoC: Intel: avs: Fix potential integer overflow (git-fixes).
- ASoC: Intel: avs: Populate board selection with new I2S entries (stable-fixes).
- ASoC: Intel: avs: Set name of control as in topology (git-fixes).
- ASoC: Intel: avs: Test result of avs_get_module_entry() (git-fixes).
- ASoC: Intel: avs: ssm4567: Do not ignore route checks (git-fixes).
- ASoC: Intel: bytcr_rt5640: Apply Asus T100TA quirk to Asus T100TAM too (git-fixes).
- ASoC: Intel: common: DMI remap for rebranded Intel NUC M15 (LAPRC710) laptops (stable-fixes).
- ASoC: Intel: common: add ACPI matching tables for Arrow Lake (stable-fixes).
- ASoC: Intel: sof-sdw: really remove FOUR_SPEAKER quirk (git-fixes).
- ASoC: Intel: sof_sdw: add JD2 quirk for HP Omen 14 (stable-fixes).
- ASoC: Intel: sof_sdw: add quirk for Dell SKU 0C0F (stable-fixes).
- ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable (git-fixes).
- ASoC: SOF: Intel: add default firmware library path for LNL (git-fixes).
- ASoC: SOF: Intel: hda-dsp: Skip IMR boot on ACE platforms in case of S3 suspend (stable-fixes).
- ASoC: SOF: Intel: hda-pcm: Limit the maximum number of periods by MAX_BDL_ENTRIES (stable-fixes).
- ASoC: SOF: Intel: hda: fix null deref on system suspend entry (git-fixes).
- ASoC: SOF: Intel: lnl: Correct rom_status_reg (git-fixes).
- ASoC: SOF: Intel: mtl: Correct rom_status_reg (git-fixes).
- ASoC: SOF: Intel: mtl: Disable interrupts when firmware boot failed (git-fixes).
- ASoC: SOF: Intel: mtl: Implement firmware boot state check (git-fixes).
- ASoC: SOF: Intel: mtl: call dsp dump when boot retry fails (stable-fixes).
- ASoC: SOF: amd: Optimize quirk for Valve Galileo (stable-fixes).
- ASoC: SOF: imx8m: Fix DSP control regmap retrieval (git-fixes).
- ASoC: SOF: ipc4-pcm: Workaround for crashed firmware on system suspend (stable-fixes).
- ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension (git-fixes).
- ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare (git-fixes).
- ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin format (stable-fixes).
- ASoC: SOF: pcm: Restrict DSP D0i3 during S0ix to IPC3 (stable-fixes).
- ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback (stable-fixes).
- ASoC: TAS2781: Fix tasdev_load_calibrated_data() (git-fixes).
- ASoC: acp: Support microphone from device Acer 315-24p (git-fixes).
- ASoC: amd: Adjust error handling in case of absent codec device (git-fixes).
- ASoC: amd: acp: add a null check for chip_pdev structure (git-fixes).
- ASoC: amd: acp: fix for acp_init function error handling (git-fixes).
- ASoC: amd: acp: remove i2s configuration check in acp_i2s_probe() (git-fixes).
- ASoC: amd: yc: Add Lenovo ThinkBook 21J0 into DMI quirk table (stable-fixes).
- ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA (stable-fixes).
- ASoC: amd: yc: Fix non-functional mic on ASUS M7600RE (stable-fixes).
- ASoC: amd: yc: Fix non-functional mic on Lenovo 21J2 (stable-fixes).
- ASoC: amd: yc: Revert "Fix non-functional mic on Lenovo 21J2" (stable-fixes).
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E16 Gen 2 (bsc#1228269).
- ASoC: codecs: wsa881x: set clk_stop_mode1 flag (git-fixes).
- ASoC: cs35l41: Update DSP1RX5/6 Sources for DSP config (git-fixes).
- ASoC: cs35l56: Accept values greater than 0 as IRQ numbers (git-fixes).
- ASoC: cs35l56: Fix unintended bus access while resetting amp (git-fixes).
- ASoC: cs35l56: Prevent overwriting firmware ASP config (git-fixes).
- ASoC: da7219-aad: fix usage of device_get_named_child_node() (git-fixes).
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it (git-fixes).
- ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value (git-fixes).
- ASoC: kirkwood: Fix potential NULL dereference (git-fixes).
- ASoC: max98088: Check for clk_prepare_enable() error (git-fixes).
- ASoC: mediatek: Assign dummy when codec not specified for a DAI link (git-fixes).
- ASoC: mediatek: mt8192: fix register configuration for tdm (git-fixes).
- ASoC: meson: axg-card: make links nonatomic (git-fixes).
- ASoC: meson: axg-fifo: use FIELD helpers (stable-fixes).
- ASoC: meson: axg-fifo: use threaded irq to check periods (git-fixes).
- ASoC: meson: axg-tdm-interface: manage formatters in trigger (git-fixes).
- ASoC: meson: cards: select SND_DYNAMIC_MINORS (git-fixes).
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw (git-fixes).
- ASoC: q6apm-lpass-dai: close graph on prepare errors (git-fixes).
- ASoC: qcom: Adjust issues in case of DT error in asoc_qcom_lpass_cpu_platform_probe() (git-fixes).
- ASoC: rockchip: i2s-tdm: Fix inaccurate sampling rates (git-fixes).
- ASoC: rockchip: i2s-tdm: Fix trcm mode by setting clock on right mclk (git-fixes).
- ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating (git-fixes).
- ASoC: rt5645: Make LattePanda board DMI match more precise (stable-fixes).
- ASoC: rt5682-sdw: fix locking sequence (git-fixes).
- ASoC: rt711-sdca: fix locking sequence (git-fixes).
- ASoC: rt711-sdw: add missing readable registers (stable-fixes).
- ASoC: rt711-sdw: fix locking sequence (git-fixes).
- ASoC: rt712-sdca-sdw: fix locking sequence (git-fixes).
- ASoC: rt715-sdca: volume step modification (git-fixes).
- ASoC: rt715: add vendor clear control register (git-fixes).
- ASoC: rt722-sdca-sdw: add debounce time for type detection (stable-fixes).
- ASoC: rt722-sdca-sdw: add silence detection register as volatile (stable-fixes).
- ASoC: rt722-sdca-sdw: fix locking sequence (git-fixes).
- ASoC: rt722-sdca: add headset microphone vrefo setting (git-fixes).
- ASoC: rt722-sdca: modify channel number to support 4 channels (git-fixes).
- ASoC: soc-core.c: Skip dummy codec when adding platforms (stable-fixes).
- ASoC: sof: amd: fix for firmware reload failure in Vangogh platform (git-fixes).
- ASoC: tas2552: Add TX path for capturing AUDIO-OUT data (git-fixes).
- ASoC: tas2781: Fix a warning reported by robot kernel test (git-fixes).
- ASoC: tas2781: Fix wrong loading calibrated data sequence (git-fixes).
- ASoC: tas2781: mark dvc_tlv with __maybe_unused (git-fixes).
- ASoC: tegra: Fix DSPK 16-bit playback (git-fixes).
- ASoC: ti: Convert Pandora ASoC to GPIO descriptors (stable-fixes).
- ASoC: ti: davinci-mcasp: Fix race condition during probe (git-fixes).
- ASoC: ti: davinci-mcasp: Set min period size using FIFO config (stable-fixes).
- ASoC: ti: omap-hdmi: Fix too long driver name (stable-fixes).
- ASoC: tlv320adc3xxx: Do not strip remove function when driver is builtin (git-fixes).
- ASoC: topology: Do not assign fields that are already set (stable-fixes).
- ASoC: topology: Fix references to freed memory (stable-fixes).
- ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value (git-fixes).
- ASoC: wm_adsp: Add missing MODULE_DESCRIPTION() (git-fixes).
- ASoC: wm_adsp: Fix missing mutex_lock in wm_adsp_write_ctl() (git-fixes).
- ASoc: tas2781: Enable RCA-based playback without DSP firmware download (git-fixes).
- Bluetooth: Add new quirk for broken read key length on ATS2851 (stable-fixes).
- Bluetooth: Fix TOCTOU in HCI debugfs implementation (git-fixes).
- Bluetooth: Fix memory leak in hci_req_sync_complete() (git-fixes).
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (stable-fixes).
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (git-fixes).
- Bluetooth: HCI: Fix potential null-ptr-deref (git-fixes).
- Bluetooth: ISO: Align broadcast sync_timeout with connection timeout (stable-fixes).
- Bluetooth: ISO: Check socket flag instead of hcon (git-fixes).
- Bluetooth: ISO: Do not reject BT_ISO_QOS if parameters are unset (git-fixes).
- Bluetooth: ISO: Fix BIS cleanup (stable-fixes).
- Bluetooth: Ignore too large handle values in BIG (git-fixes).
- Bluetooth: L2CAP: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ (git-fixes).
- Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() (git-fixes).
- Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (bsc#1221504).
- Bluetooth: RFCOMM: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: Remove usage of the deprecated ida_simple_xx() API (stable-fixes).
- Bluetooth: SCO: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: add quirk for broken address properties (git-fixes).
- Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl (stable-fixes).
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version (stable-fixes).
- Bluetooth: btintel: Fixe build regression (git-fixes).
- Bluetooth: btintel: Refactor btintel_set_ppag() (git-fixes).
- Bluetooth: btnxpuart: Add handling for boot-signature timeout errors (git-fixes).
- Bluetooth: btnxpuart: Enable Power Save feature on startup (stable-fixes).
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (stable-fixes).
- Bluetooth: btusb: Fix triggering coredump implementation for QCA (git-fixes).
- Bluetooth: hci_bcm4377: Fix msgid release (git-fixes).
- Bluetooth: hci_bcm4377: Use correct unit for timeouts (git-fixes).
- Bluetooth: hci_core: Cancel request on command timeout (stable-fixes).
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (stable-fixes).
- Bluetooth: hci_event: Fix sending HCI_OP_READ_ENC_KEY_SIZE (git-fixes).
- Bluetooth: hci_event: Fix setting of unicast qos interval (git-fixes).
- Bluetooth: hci_event: Remove code to removed CONFIG_BT_HS (stable-fixes).
- Bluetooth: hci_event: Set QoS encryption from BIGInfo report (git-fixes).
- Bluetooth: hci_event: set the conn encrypted before conn establishes (stable-fixes).
- Bluetooth: hci_sock: Fix not validating setsockopt user input (git-fixes).
- Bluetooth: hci_sync: Fix not checking error on hci_cmd_sync_cancel_sync (git-fixes).
- Bluetooth: hci_sync: Fix using the same interval and window for Coded PHY (git-fixes).
- Bluetooth: hci_sync: Use QoS to determine which PHY to scan (stable-fixes).
- Bluetooth: l2cap: Do not double set the HCI_CONN_MGMT_CONNECTED bit (git-fixes).
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (git-fixes).
- Bluetooth: mgmt: Fix limited discoverable off timeout (stable-fixes).
- Bluetooth: msft: fix slab-use-after-free in msft_do_close() (git-fixes).
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot (git-fixes).
- Bluetooth: qca: Fix error code in qca_read_fw_build_info() (git-fixes).
- Bluetooth: qca: add missing firmware sanity checks (git-fixes).
- Bluetooth: qca: fix NULL-deref on non-serdev setup (git-fixes).
- Bluetooth: qca: fix NULL-deref on non-serdev suspend (git-fixes).
- Bluetooth: qca: fix NVM configuration parsing (git-fixes).
- Bluetooth: qca: fix device-address endianness (git-fixes).
- Bluetooth: qca: fix firmware check error path (git-fixes).
- Bluetooth: qca: fix info leak when fetching fw build id (git-fixes).
- Bluetooth: qca: set power_ctrl_enabled on NULL returned by gpiod_get_optional() (git-fixes).
- EDAC/synopsys: Fix ECC status and IRQ control race condition (git-fixes).
- Edit "amdkfd: use calloc instead of kzalloc to avoid integer overflow" Reference CVE and bug numbers.
- Enable CONFIG_FIPS_SIGNATURE_SELFTEST (bsc#1222771)
- Enable CONFIG_SCHED_CLUSTER=y on arm64 (jsc#PED-8701).
- Enable new CONFIG_FIPS_SIGNATURE_SELFTEST_ECDSA.
- Enable new CONFIG_FIPS_SIGNATURE_SELFTEST_RSA.
- Fix a potential infinite loop in extract_user_to_sg() (git-fixes).
- Fix build errors due to new UIO_MEM_DMA_COHERENT mess (git-fixes).
- HID: Add quirk for Logitech Casa touchpad (stable-fixes).
- HID: Ignore battery for ELAN touchscreens 2F2C and 4116 (stable-fixes).
- HID: amd_sfh: Handle "no sensors" in PM operations (git-fixes).
- HID: core: remove unnecessary WARN_ON() in implement() (git-fixes).
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (git-fixes).
- HID: input: avoid polling stylus battery on Chromebook Pompom (stable-fixes).
- HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors (git-fixes).
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc (git-fixes).
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() (git-fixes).
- HID: logitech-dj: allow mice to use all types of reports (git-fixes).
- HID: mcp-2221: cancel delayed_work only when CONFIG_IIO is enabled (stable-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcddc device (stable-fixes).
- HID: wacom: Modify pen IDs (git-fixes).
- IB/mlx5: Use __iowrite64_copy() for write combining stores (git-fixes)
- Input: ads7846 - use spi_device_id table (stable-fixes).
- Input: allocate keycode for Display refresh rate toggle (stable-fixes).
- Input: cyapa - add missing input core locking to suspend/resume functions (git-fixes).
- Input: elan_i2c - do not leave interrupt disabled on suspend failure (git-fixes).
- Input: elantech - fix touchpad state on resume for Lenovo N24 (stable-fixes).
- Input: ff-core - prefer struct_size over open coded arithmetic (stable-fixes).
- Input: gpio_keys_polled - suppress deferred probe error for gpio (stable-fixes).
- Input: i8042 - add Ayaneo Kun to i8042 quirk table (stable-fixes).
- Input: ili210x - fix ili251x_read_touch_data() return value (git-fixes).
- Input: imagis - use FIELD_GET where applicable (stable-fixes).
- Input: ims-pcu - fix printf string overflow (git-fixes).
- Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation (git-fixes).
- Input: qt1050 - handle CHIP_ID reading error (git-fixes).
- Input: silead - Always support 10 fingers (stable-fixes).
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails (stable-fixes).
- Input: xpad - add additional HyperX Controller Identifiers (stable-fixes).
- Input: xpad - add support for ASUS ROG RAIKIRI (git-fixes).
- Input: xpad - add support for ASUS ROG RAIKIRI PRO (stable-fixes).
- Input: xpad - add support for Snakebyte GAMEPADs (stable-fixes).
- KEYS: trusted: Do not use WARN when encode fails (git-fixes).
- KEYS: trusted: Fix memory leak in tpm2_key_encode() (git-fixes).
- KVM: SEV-ES: Delegate LBR virtualization to the processor (git-fixes).
- KVM: SEV-ES: Disallow SEV-ES guests when X86_FEATURE_LBRV is absent (git-fixes).
- KVM: SVM: Add support for allowing zero SEV ASIDs (git-fixes).
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region() (git-fixes).
- KVM: SVM: Use unsigned integers when dealing with ASIDs (git-fixes).
- KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (git-fixes).
- KVM: VMX: Disable LBR virtualization if the CPU does not support LBR callstacks (git-fixes).
- KVM: VMX: Report up-to-date exit qualification to userspace (git-fixes).
- KVM: arm64: Use local TLBI on permission relaxation (bsc#1219478).
- KVM: nVMX: Clear EXIT_QUALIFICATION when injecting an EPT Misconfig (git-fixes).
- KVM: s390: Check kvm pointer when testing KVM_CAP_S390_HPAGE_1M (git-fixes bsc#1224790).
- KVM: x86/mmu: Do not force emulation of L2 accesses to non-APIC internal slots (git-fixes).
- KVM: x86/mmu: Move private vs. shared check above slot validity checks (git-fixes).
- KVM: x86/mmu: Restrict KVM_SW_PROTECTED_VM to the TDP MMU (git-fixes).
- KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status (git-fixes).
- KVM: x86/pmu: Allow programming events that match unsupported arch events (git-fixes).
- KVM: x86/pmu: Always treat Fixed counters as available when supported (git-fixes).
- KVM: x86/pmu: Apply "fast" RDPMC only to Intel PMUs (git-fixes).
- KVM: x86/pmu: Disable support for adaptive PEBS (git-fixes).
- KVM: x86/pmu: Disallow "fast" RDPMC for architectural Intel PMUs (git-fixes).
- KVM: x86/pmu: Do not ignore bits 31:30 for RDPMC index on AMD (git-fixes).
- KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms (git-fixes).
- KVM: x86/pmu: Explicitly check NMI from guest to reducee false positives (git-fixes).
- KVM: x86/pmu: Prioritize VMX interception over #GP on RDPMC due to bad index (bsc#1226158).
- KVM: x86/pmu: Prioritize VMX interception over #GP on RDPMC due to bad index (git-fixes).
- KVM: x86/pmu: Set enable bits for GP counters in PERF_GLOBAL_CTRL at "RESET" (git-fixes).
- KVM: x86/pmu: Zero out PMU metadata on AMD if PMU is disabled (git-fixes).
- KVM: x86/xen: fix recursive deadlock in timer injection (git-fixes).
- KVM: x86/xen: improve accuracy of Xen timers (git-fixes).
- KVM: x86/xen: inject vCPU upcall vector when local APIC is enabled (git-fixes).
- KVM: x86/xen: remove WARN_ON_ONCE() with false positives in evtchn delivery (git-fixes).
- KVM: x86: Allow, do not ignore, same-value writes to immutable MSRs (git-fixes).
- KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes (git-fixes).
- KVM: x86: Do not advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID (git-fixes).
- KVM: x86: Fix broken debugregs ABI for 32 bit kernels (git-fixes).
- KVM: x86: Fully re-initialize supported_mce_cap on vendor module load (git-fixes).
- KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper (git-fixes).
- KVM: x86: Mark target gfn of emulated atomic instruction as dirty (git-fixes).
- KVM: x86: Only set APICV_INHIBIT_REASON_ABSENT if APICv is enabled (git-fixes).
- KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel compatible (git-fixes).
- KVM: x86: Update KVM_SW_PROTECTED_VM docs to make it clear they're a WIP (git-fixes).
- KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT (git-fixes).
- NFC: trf7970a: disable all regulators on removal (git-fixes).
- NFS: Fix READ_PLUS when server does not support OP_READ_PLUS (git-fixes).
- NFS: Fix an off by one in root_nfs_cat() (git-fixes).
- NFS: Fix nfs_netfs_issue_read() xarray locking for writeback interrupt (git-fixes).
- NFS: Read unlock folio on nfs_page_create_from_folio() error (git-fixes).
- NFS: abort nfs_atomic_open_v23 if name is too long (bsc#1219847).
- NFS: add atomic_open for NFSv3 to handle O_TRUNC correctly (bsc#1219847).
- NFS: add barriers when testing for NFS_FSDATA_BLOCKED (git-fixes).
- NFS: avoid infinite loop in pnfs_update_layout (bsc#1219633 bsc#1226226).
- NFSD: Convert the callback workqueue to use delayed_work (git-fixes).
- NFSD: Fix checksum mismatches in the duplicate reply cache (git-fixes).
- NFSD: Fix nfsd_clid_class use of __string_len() macro (git-fixes).
- NFSD: Reschedule CB operations when backchannel rpc_clnt is shut down (git-fixes).
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY (git-fixes).
- NFSD: Retransmit callbacks after client reconnects (git-fixes).
- NFSD: change LISTXATTRS cookie encoding to big-endian (git-fixes).
- NFSD: fix LISTXATTRS returning a short list with eof=TRUE (git-fixes).
- NFSD: fix LISTXATTRS returning more bytes than maxcount (git-fixes).
- NFSD: fix nfsd4_listxattr_validate_cookie (git-fixes).
- NFSv4.1 enforce rootpath check in fs_location query (git-fixes).
- NFSv4.1/pnfs: fix NFS with TLS in pnfs (git-fixes).
- NFSv4.2: fix listxattr maximum XDR buffer size (git-fixes).
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (git-fixes).
- NFSv4.x: by default serialize open/close operations (bsc#1223863 bsc#1227362).
- NFSv4: Fixup smatch warning for ambiguous return (git-fixes).
- Octeontx2-af: fix pause frame configuration in GMP mode (git-fixes).
- PCI/AER: Block runtime suspend when handling errors (stable-fixes).
- PCI/ASPM: Update save_state when configuration changes (bsc#1226915)
- PCI/ASPM: Use RMW accessors for changing LNKCTL (git-fixes).
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (git-fixes).
- PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports (stable-fixes).
- PCI/DPC: Use FIELD_GET() (stable-fixes).
- PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3 (git-fixes).
- PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3 (git-fixes).
- PCI/MSI: Fix UAF in msi_capability_init (git-fixes).
- PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports (stable-fixes).
- PCI/PM: Drain runtime-idle callbacks before driver removal (stable-fixes).
- PCI: Clear Secondary Status errors after enumeration (bsc#1226928)
- PCI: Delay after FLR of Solidigm P44 Pro NVMe (stable-fixes).
- PCI: Disable D3cold on Asus B1400 PCI-NVMe bridge (stable-fixes).
- PCI: Do not wait for disconnected devices when resuming (git-fixes).
- PCI: Execute quirk_enable_clear_retrain_link() earlier (stable-fixes).
- PCI: Extend ACS configurability (bsc#1228090).
- PCI: Fix resource double counting on remove &amp; rescan (git-fixes).
- PCI: Fix typos in docs and comments (stable-fixes).
- PCI: Introduce cleanup helpers for device reference counts and locks (stable-fixes).
- PCI: Make link retraining use RMW accessors for changing LNKCTL (git-fixes).
- PCI: Simplify pcie_capability_clear_and_set_word() to ..._clear_word() (stable-fixes).
- PCI: dw-rockchip: Fix initial PERST# GPIO value (git-fixes).
- PCI: dwc: Fix index 0 incorrectly being interpreted as a free ATU slot (git-fixes).
- PCI: dwc: ep: Fix DBI access failure for drivers requiring refclk from host (git-fixes).
- PCI: endpoint: Clean up error handling in vpci_scan_bus() (git-fixes).
- PCI: endpoint: Fix error handling in epf_ntb_epc_cleanup() (git-fixes).
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init() (git-fixes).
- PCI: hv: Fix ring buffer size calculation (git-fixes).
- PCI: keystone: Do not enable BAR 0 for AM654x (git-fixes).
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs() (git-fixes).
- PCI: keystone: Relocate ks_pcie_set/clear_dbi_mode() (git-fixes).
- PCI: qcom-ep: Disable resources unconditionally during PERST# assert (git-fixes).
- PCI: qcom: Add support for sa8775p SoC (git-fixes).
- PCI: qcom: Disable ASPM L0s for sc8280xp, sa8540p and sa8295p (git-fixes).
- PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup() (git-fixes).
- PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id (git-fixes).
- PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (git-fixes).
- PCI: rpaphp: Error out on busy status from get-sensor-state (bsc#1223369 ltc#205888).
- PCI: switchtec: Add support for PCIe Gen5 devices (stable-fixes).
- PCI: switchtec: Use normal comment style (stable-fixes).
- PCI: tegra194: Fix probe path for Endpoint mode (git-fixes).
- PCI: tegra194: Set EP alignment restriction for inbound ATU (git-fixes).
- PCI: vmd: Create domain symlink before pci_bus_add_devices() (bsc#1227363).
- PM / devfreq: Synchronize devfreq_monitor_[start/stop] (stable-fixes).
- PM: s2idle: Make sure CPUs will wakeup directly on resume (git-fixes).
- Port "certs: Add ECDSA signature verification self-test".
- Port "certs: Move RSA self-test data to separate file".
- RAS/AMD/ATL: Fix MI300 bank hash (bsc#1225300).
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation (bsc#1225300).
- RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records() (jsc#PED-7619).
- RAS/AMD/FMPM: Fix build when debugfs is not enabled (jsc#PED-7619).
- RAS/AMD/FMPM: Safely handle saved records of various sizes (jsc#PED-7619).
- RDMA/IPoIB: Fix format truncation compilation errors (git-fixes)
- RDMA/bnxt_re: Fix the max msix vectors macro (git-fixes)
- RDMA/cm: Print the old state when cm_destroy_id gets timeout (git-fixes)
- RDMA/cm: add timeout to cm_destroy_id wait (git-fixes)
- RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw (git-fixes)
- RDMA/hns: Add max_ah and cq moderation capacities in query_device() (git-fixes)
- RDMA/hns: Fix GMV table pagesize (git-fixes)
- RDMA/hns: Fix UAF for cq async event (git-fixes)
- RDMA/hns: Fix deadlock on SRQ async events. (git-fixes)
- RDMA/hns: Fix return value in hns_roce_map_mr_sg (git-fixes)
- RDMA/hns: Modify the print level of CQE error (git-fixes)
- RDMA/hns: Use complete parentheses in macros (git-fixes)
- RDMA/mana_ib: Fix bug in creation of dma regions (git-fixes).
- RDMA/mana_ib: Ignore optional access flags for MRs (git-fixes).
- RDMA/mlx5: Add check for srq max_sge attribute (git-fixes)
- RDMA/mlx5: Adding remote atomic access flag to updatable flags (git-fixes)
- RDMA/mlx5: Change check for cacheable mkeys (git-fixes)
- RDMA/mlx5: Ensure created mkeys always have a populated rb_key (git-fixes)
- RDMA/mlx5: Fix port number for counter query in multi-port configuration (git-fixes)
- RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init (git-fixes)
- RDMA/mlx5: Follow rb_key.ats when creating new mkeys (git-fixes)
- RDMA/mlx5: Remove extra unlock on error path (git-fixes)
- RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent (git-fixes)
- RDMA/restrack: Fix potential invalid address access (git-fixes)
- RDMA/rxe: Allow good work requests to be executed (git-fixes)
- RDMA/rxe: Fix data copy for IB_SEND_INLINE (git-fixes)
- RDMA/rxe: Fix incorrect rxe_put in error path (git-fixes)
- RDMA/rxe: Fix responder length checking for UD request packets (git-fixes)
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (git-fixes)
- RDMA/rxe: Fix the problem "mutex_destroy missing" (git-fixes)
- Reapply "drm/qxl: simplify qxl_fence_wait" (stable-fixes).
- Refresh kabi workaround ath updates (bsc#1227149#)
- Refresh the previous ASoC patch, landed in subsystem tree (bsc#1228269)
- Remove NTFSv3 from configs (bsc#1224429)
- SEV: disable SEV-ES DebugSwap by default (git-fixes).
- SUNRPC: Fix gss_free_in_token_pages() (git-fixes).
- SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (git-fixes).
- SUNRPC: avoid soft lockup when transmitting UDP to reachable server (bsc#1225272).
- SUNRPC: fix a memleak in gss_import_v2_context (git-fixes).
- SUNRPC: fix some memleaks in gssx_dec_option_array (git-fixes).
- SUNRPC: return proper error from gss_wrap_req_priv (git-fixes).
- Temporarily drop KVM patch that caused a regression (bsc#1226158)
- USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k (stable-fixes).
- USB: UAS: return ENODEV when submit urbs fail with device not attached (stable-fixes).
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (git-fixes).
- USB: core: Add hub_get() and hub_put() routines (stable-fixes).
- USB: core: Fix access violation during port device removal (git-fixes).
- USB: core: Fix deadlock in port "disable" sysfs attribute (stable-fixes).
- USB: core: Fix deadlock in usb_deauthorize_interface() (git-fixes).
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (git-fixes).
- USB: serial: add device ID for VeriFone adapter (stable-fixes).
- USB: serial: cp210x: add ID for MGP Instruments PDS100 (stable-fixes).
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (stable-fixes).
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (stable-fixes).
- USB: serial: mos7840: fix crash on resume (git-fixes).
- USB: serial: option: add Fibocom FM135-GL variants (stable-fixes).
- USB: serial: option: add Fibocom FM350-GL (stable-fixes).
- USB: serial: option: add Lonsung U8300/U9300 product (stable-fixes).
- USB: serial: option: add MeiG Smart SLM320 product (stable-fixes).
- USB: serial: option: add Netprisma LCUK54 series modules (stable-fixes).
- USB: serial: option: add Rolling RW101-GL and RW135-GL support (stable-fixes).
- USB: serial: option: add Rolling RW350-GL variants (stable-fixes).
- USB: serial: option: add Telit FN912 rmnet compositions (stable-fixes).
- USB: serial: option: add Telit FN920C04 rmnet compositions (stable-fixes).
- USB: serial: option: add Telit generic core-dump composition (stable-fixes).
- USB: serial: option: add support for Fibocom FM650/FG650 (stable-fixes).
- USB: serial: option: add support for Foxconn T99W651 (stable-fixes).
- USB: serial: option: support Quectel EM060K sub-models (stable-fixes).
- USB: xen-hcd: Traverse host/ when CONFIG_USB_XEN_HCD is selected (git-fixes).
- Update ath11k suspend patches from the latest subsystem tree (bsc#1207948).
- VMCI: Fix an error handling path in vmci_guest_probe_device() (git-fixes).
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (stable-fixes).
- Workaround broken chacha crypto fallback (bsc#1218205).
- X.509: Fix the parser of extended key usage for length (bsc#1218820).
- accel/ivpu: Fix deadlock in context_xa (git-fixes).
- admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET (git-fixes).
- ahci: asm1064: asm1166: do not limit reported ports (git-fixes).
- ahci: asm1064: correct count of reported ports (stable-fixes).
- amd/amdkfd: sync all devices to wait all processes being evicted (stable-fixes).
- amdkfd: use calloc instead of kzalloc to avoid integer overflow (stable-fixes).
- arm64/head: Disable MMU at EL2 before clearing HCR_EL2.E2H (git-fixes).
- arm64/io: Provide a WC friendly __iowriteXX_copy() (bsc#1226502)
- arm64/io: add constant-argument check (bsc#1226502 git-fixes)
- arm64/ptrace: Use saved floating point state type to determine SVE (git-fixes)
- arm64/sve: Lower the maximum allocation for the SVE ptrace regset (git-fixes)
- arm64: Add the arm64.no32bit_el0 command line option (jsc#PED-3184).
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (git-fixes).
- arm64: bpf: fix 32bit unconditional bswap (git-fixes).
- arm64: dts: Fix dtc interrupt_provider warnings (git-fixes)
- arm64: dts: allwinner: Pine H64: correctly remove reg_gmac_3v3 (git-fixes)
- arm64: dts: allwinner: h616: Fix I2C0 pins (git-fixes)
- arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells (git-fixes)
- arm64: dts: freescale: imx8mm-verdin: enable hysteresis on slow input (git-fixes)
- arm64: dts: hi3798cv200: fix the size of GICR (git-fixes)
- arm64: dts: imx8-ss-conn: fix usb lpcg indices (git-fixes)
- arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order (git-fixes)
- arm64: dts: imx8-ss-dma: fix adc lpcg indices (git-fixes)
- arm64: dts: imx8-ss-dma: fix can lpcg indices (git-fixes)
- arm64: dts: imx8-ss-dma: fix spi lpcg indices (git-fixes)
- arm64: dts: imx8-ss-lsio: fix pwm lpcg indices (git-fixes)
- arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc (git-fixes)
- arm64: dts: imx8qm-ss-dma: fix can lpcg indices (git-fixes)
- arm64: dts: imx93-11x11-evk: Remove the 'no-sdio' property (git-fixes)
- arm64: dts: marvell: reorder crypto interrupts on Armada SoCs (git-fixes)
- arm64: dts: microchip: sparx5: fix mdio reg (git-fixes)
- arm64: dts: rockchip: Add enable-strobe-pulldown to emmc phy on ROCK (git-fixes)
- arm64: dts: rockchip: Add enable-strobe-pulldown to emmc phy on ROCK (git-fixes)
- arm64: dts: rockchip: Add mdio and ethernet-phy nodes to (git-fixes)
- arm64: dts: rockchip: Add missing power-domains for rk356x vop_mmu (git-fixes)
- arm64: dts: rockchip: Add pinctrl for UART0 to rk3308-rock-pi-s (git-fixes)
- arm64: dts: rockchip: Add sdmmc related properties on (git-fixes)
- arm64: dts: rockchip: Add sound-dai-cells for RK3368 (git-fixes)
- arm64: dts: rockchip: Drop invalid mic-in-differential on (git-fixes)
- arm64: dts: rockchip: Fix SD NAND and eMMC init on rk3308-rock-pi-s (git-fixes)
- arm64: dts: rockchip: Fix mic-in-differential usage on (git-fixes)
- arm64: dts: rockchip: Fix mic-in-differential usage on rk3566-roc-pc (git-fixes)
- arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 (git-fixes)
- arm64: dts: rockchip: Fix the value of `dlg,jack-det-rate` mismatch (git-fixes)
- arm64: dts: rockchip: Increase VOP clk rate on RK3328 (git-fixes)
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro (git-fixes)
- arm64: dts: rockchip: Rename LED related pinctrl nodes on (git-fixes)
- arm64: dts: rockchip: Update WIFi/BT related nodes on (git-fixes)
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 (git-fixes)
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for (git-fixes)
- arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 (git-fixes)
- arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E (git-fixes)
- arm64: dts: rockchip: fix rk3328 hdmi ports node (git-fixes)
- arm64: dts: rockchip: fix rk3399 hdmi ports node (git-fixes)
- arm64: dts: rockchip: regulator for sd needs to be always on for (git-fixes)
- arm64: dts: rockchip: set PHY address of MT7531 switch to 0x1f (git-fixes)
- arm64: hibernate: Fix level3 translation fault in swsusp_save() (git-fixes).
- arm64: mm: Batch dsb and isb when populating pgtables (jsc#PED-8688).
- arm64: mm: Do not remap pgtables for allocate vs populate (jsc#PED-8688).
- arm64: mm: Do not remap pgtables per-cont(pte|pmd) block (jsc#PED-8688).
- arm64: tegra: Correct Tegra132 I2C alias (git-fixes)
- arm64: tegra: Set the correct PHY mode for MGBE (git-fixes)
- arm_pmu: acpi: Add a representative platform device for TRBE (bsc#1220587)
- arm_pmu: acpi: Refactor arm_spe_acpi_register_device() (bsc#1220587)
- asm-generic: make sparse happy with odd-sized put_unaligned_*() (stable-fixes).
- ata,scsi: libata-core: Do not leak memory for ata_port struct members (git-fixes).
- ata: ahci: Clean up sysfs file on error (git-fixes).
- ata: libata-core: Allow command duration limits detection for ACS-4 drives (git-fixes).
- ata: libata-core: Fix double free on error (git-fixes).
- ata: libata-core: Fix null pointer dereference on error (git-fixes).
- ata: libata-scsi: Fix offsets for the fixed format sense data (git-fixes).
- ata: pata_legacy: make legacy_exit() work again (git-fixes).
- ata: sata_gemini: Check clk_enable() result (stable-fixes).
- ata: sata_mv: Fix PCI device ID table declaration compilation warning (git-fixes).
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit (git-fixes).
- autofs: use wake_up() instead of wake_up_interruptible(() (bsc#1224166).
- auxdisplay: ht16k33: Drop reference after LED registration (git-fixes).
- ax25: Fix netdev refcount issue (git-fixes).
- ax25: Fix refcount imbalance on inbound connections (git-fixes).
- ax25: Fix reference count leak issue of net_device (git-fixes).
- ax25: Fix reference count leak issues of ax25_dev (git-fixes).
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer (git-fixes).
- batman-adv: Avoid infinite loop trying to resize local TT (git-fixes).
- batman-adv: Do not accept TT entries for out-of-spec VIDs (git-fixes).
- batman-adv: bypass empty buckets in batadv_purge_orig_ref() (stable-fixes).
- bitops: add missing prototype check (git-fixes).
- blk-cgroup: fix list corruption from reorder of WRITE -&gt;lqueued (bsc#1225605).
- blk-cgroup: fix list corruption from resetting io stat (bsc#1225605).
- block: Move checking GENHD_FL_NO_PART to bdev_add_partition() (bsc#1226213).
- block: fix q-&gt;blkg_list corruption during disk rebind (bsc#1223591).
- bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX (git-fixes).
- bnx2x: Fix firmware version string character counts (git-fixes).
- bnxt_en: Fix error recovery for RoCE ulp client (git-fixes).
- bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() (git-fixes).
- bnxt_en: Reset PTP tx_avail after possible firmware reset (git-fixes).
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (git-fixes)
- bootconfig: Fix the kerneldoc of _xbc_exit() (git-fixes).
- bootconfig: use memblock_free_late to free xbc memory to buddy (git-fixes).
- bootmem: use kmemleak_free_part_phys in free_bootmem_page (git-fixes).
- bootmem: use kmemleak_free_part_phys in put_page_bootmem (git-fixes).
- bpf, arm64: Fix incorrect runtime stats (git-fixes)
- bpf, arm64: fix bug in BPF_LDX_MEMSX (git-fixes)
- bpf, scripts: Correct GPL license name (git-fixes).
- bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END (git-fixes).
- bpf: check bpf_func_state-&gt;callback_depth when pruning states (bsc#1225903).
- bpf: correct loop detection for iterators convergence (bsc#1225903).
- bpf: exact states comparison for iterator convergence checks (bsc#1225903).
- bpf: extract __check_reg_arg() utility function (bsc#1225903).
- bpf: extract same_callsites() as utility function (bsc#1225903).
- bpf: extract setup_func_entry() utility function (bsc#1225903).
- bpf: fix precision backtracking instruction iteration (bsc#1225756).
- bpf: handle ldimm64 properly in check_cfg() (bsc#1225756).
- bpf: keep track of max number of bpf_loop callback iterations (bsc#1225903).
- bpf: move explored_state() closer to the beginning of verifier.c (bsc#1225903).
- bpf: print full verifier states on infinite loop detection (bsc#1225903).
- bpf: verify callbacks as if they are called unknown number of times (bsc#1225903).
- bpf: widening for callback iterators (bsc#1225903).
- btrfs: add a helper to read the superblock metadata_uuid (git-fixes)
- btrfs: add and use helper to check if block group is used (bsc#1220120).
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (git-fixes)
- btrfs: add new unused block groups to the list of unused block groups (bsc#1220120).
- btrfs: allow to run delayed refs by bytes to be released instead of count (bsc#1220120).
- btrfs: always clear PERTRANS metadata during commit (git-fixes)
- btrfs: always print transaction aborted messages with an error level (git-fixes)
- btrfs: always reserve space for delayed refs when starting transaction (bsc#1220120).
- btrfs: assert correct lock is held at btrfs_select_ref_head() (bsc#1220120).
- btrfs: assert delayed node locked when removing delayed item (git-fixes)
- btrfs: avoid start and commit empty transaction when flushing qgroups (bsc#1220120).
- btrfs: avoid start and commit empty transaction when starting qgroup rescan (bsc#1220120).
- btrfs: avoid starting and committing empty transaction when flushing space (bsc#1220120).
- btrfs: avoid starting new transaction when flushing delayed items and refs (bsc#1220120).
- btrfs: check for BTRFS_FS_ERROR in pending ordered assert (git-fixes)
- btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super (git-fixes)
- btrfs: defrag: avoid unnecessary defrag caused by incorrect extent size (git-fixes)
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args (git-fixes)
- btrfs: do not allow non subvolume root targets for snapshot (git-fixes)
- btrfs: do not arbitrarily slow down delalloc if we're committing (git-fixes)
- btrfs: do not delete unused block group if it may be used soon (bsc#1220120).
- btrfs: do not refill whole delayed refs block reserve when starting transaction (bsc#1220120).
- btrfs: do not start transaction when joining with TRANS_JOIN_NOSTART (git-fixes)
- btrfs: do not steal space from global rsv after a transaction abort (bsc#1220120).
- btrfs: do not warn if discard range is not aligned to sector (git-fixes)
- btrfs: ensure fiemap does not race with writes when FIEMAP_FLAG_SYNC is given (bsc#1223285).
- btrfs: error out when COWing block using a stale transaction (git-fixes)
- btrfs: error out when reallocating block for defrag using a stale transaction (git-fixes)
- btrfs: error when COWing block from a root that is being deleted (git-fixes)
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent() (git-fixes)
- btrfs: fail priority metadata ticket with real fs error (bsc#1220120).
- btrfs: file_remove_privs needs an exclusive lock in direct io write (git-fixes)
- btrfs: fix 64bit compat send ioctl arguments not initializing version member (git-fixes)
- btrfs: fix deadlock with fiemap and extent locking (bsc#1223285).
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (git-fixes)
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send() (git-fixes)
- btrfs: fix lockdep splat and potential deadlock after failure running delayed items (git-fixes)
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent() (git-fixes)
- btrfs: fix off-by-one when checking chunk map includes logical address (git-fixes)
- btrfs: fix race between ordered extent completion and fiemap (bsc#1223285).
- btrfs: fix race when detecting delalloc ranges during fiemap (bsc#1223285).
- btrfs: fix race when refilling delayed refs block reserve (git-fixes)
- btrfs: fix start transaction qgroup rsv double free (git-fixes)
- btrfs: fix stripe length calculation for non-zoned data chunk allocation (bsc#1217489).
- btrfs: fix wrong block_start calculation for btrfs_drop_extent_map_range() (git-fixes)
- btrfs: free qgroup rsv on io failure (git-fixes)
- btrfs: free the allocated memory if btrfs_alloc_page_array() fails (git-fixes)
- btrfs: get rid of label and goto at insert_delayed_ref() (bsc#1220120).
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (git-fixes)
- btrfs: handle errors properly in update_inline_extent_backref() (git-fixes)
- btrfs: initialize key where it's used when running delayed data ref (bsc#1220120).
- btrfs: log message if extent item not found when running delayed extent op (bsc#1220120).
- btrfs: make btrfs_cleanup_fs_roots() static (bsc#1220120).
- btrfs: make btrfs_destroy_delayed_refs() return void (bsc#1220120).
- btrfs: make btrfs_destroy_marked_extents() return void (bsc#1220120).
- btrfs: make btrfs_destroy_pinned_extent() return void (bsc#1220120).
- btrfs: make error messages more clear when getting a chunk map (git-fixes)
- btrfs: make find_first_extent_bit() return a boolean (bsc#1220120).
- btrfs: make find_free_dev_extent() static (bsc#1220120).
- btrfs: make insert_delayed_ref() return a bool instead of an int (bsc#1220120).
- btrfs: merge find_free_dev_extent() and find_free_dev_extent_start() (bsc#1220120).
- btrfs: move btrfs_free_excluded_extents() into block-group.c (bsc#1220120).
- btrfs: open code trivial btrfs_add_excluded_extent() (bsc#1220120).
- btrfs: output extra debug info if we failed to find an inline backref (git-fixes)
- btrfs: pass a space_info argument to btrfs_reserve_metadata_bytes() (bsc#1220120).
- btrfs: prevent transaction block reserve underflow when starting transaction (git-fixes)
- btrfs: print available space across all block groups when dumping space info (bsc#1220120).
- btrfs: print available space for a block group when dumping a space info (bsc#1220120).
- btrfs: print block group super and delalloc bytes when dumping space info (bsc#1220120).
- btrfs: print target number of bytes when dumping free space (bsc#1220120).
- btrfs: qgroup: always free reserved space for extent records (bsc#1216196).
- btrfs: qgroup: convert PREALLOC to PERTRANS after record_root_in_trans (git-fixes)
- btrfs: record delayed inode root in transaction (git-fixes)
- btrfs: reject encoded write if inode has nodatasum flag set (git-fixes)
- btrfs: release path before inode lookup during the ino lookup ioctl (git-fixes)
- btrfs: remove pointless 'ref_root' variable from run_delayed_data_ref() (bsc#1220120).
- btrfs: remove pointless in_tree field from struct btrfs_delayed_ref_node (bsc#1220120).
- btrfs: remove pointless initialization at btrfs_delayed_refs_rsv_release() (bsc#1220120).
- btrfs: remove redundant BUG_ON() from __btrfs_inc_extent_ref() (bsc#1220120).
- btrfs: remove refs_to_add argument from __btrfs_inc_extent_ref() (bsc#1220120).
- btrfs: remove refs_to_drop argument from __btrfs_free_extent() (bsc#1220120).
- btrfs: remove the refcount warning/check at btrfs_put_delayed_ref() (bsc#1220120).
- btrfs: remove unnecessary logic when running new delayed references (bsc#1220120).
- btrfs: remove unnecessary prototype declarations at disk-io.c (bsc#1220120).
- btrfs: remove unused is_head field from struct btrfs_delayed_ref_node (bsc#1220120).
- btrfs: rename add_new_free_space() to btrfs_add_new_free_space() (bsc#1220120).
- btrfs: reorder some members of struct btrfs_delayed_ref_head (bsc#1220120).
- btrfs: reserve space for delayed refs on a per ref basis (bsc#1220120).
- btrfs: reset destination buffer when read_extent_buffer() gets invalid range (git-fixes)
- btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 (git-fixes)
- btrfs: return -EUCLEAN if extent item is missing when searching inline backref (bsc#1220120).
- btrfs: return real error when orphan cleanup fails due to a transaction abort (bsc#1220120).
- btrfs: send: do not issue unnecessary zero writes for trailing hole (bsc#1222459).
- btrfs: send: ensure send_fd is writable (git-fixes)
- btrfs: send: handle path ref underflow in header iterate_inode_ref() (git-fixes)
- btrfs: send: return EOPNOTSUPP on unknown flags (git-fixes)
- btrfs: set page extent mapped after read_folio in relocate_one_page (git-fixes)
- btrfs: simplify check for extent item overrun at lookup_inline_extent_backref() (bsc#1220120).
- btrfs: stop doing excessive space reservation for csum deletion (bsc#1220120).
- btrfs: store the error that turned the fs into error state (bsc#1220120).
- btrfs: sysfs: validate scrub_speed_max value (git-fixes)
- btrfs: tree-checker: fix inline ref size in error messages (git-fixes)
- btrfs: update comment for btrfs_join_transaction_nostart() (bsc#1220120).
- btrfs: update documentation for add_new_free_space() (bsc#1220120).
- btrfs: use a bool to track qgroup record insertion when adding ref head (bsc#1220120).
- btrfs: use a single switch statement when initializing delayed ref head (bsc#1220120).
- btrfs: use a single variable for return value at lookup_inline_extent_backref() (bsc#1220120).
- btrfs: use a single variable for return value at run_delayed_extent_op() (bsc#1220120).
- btrfs: use bool type for delayed ref head fields that are used as booleans (bsc#1220120).
- btrfs: use the correct superblock to compare fsid in btrfs_validate_super (git-fixes)
- btrfs: use u64 for buffer sizes in the tree search ioctls (git-fixes)
- btrfs: zoned: do not skip block groups with 100% zone unusable (bsc#1220120).
- bus: mhi: ep: check the correct variable in mhi_ep_register_controller() (git-fixes).
- bus: mhi: host: allow MHI client drivers to provide the firmware via a pointer (bsc#1227149).
- bytcr_rt5640 : inverse jack detect for Archos 101 cesium (stable-fixes).
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd (git-fixes).
- cachefiles: remove requests from xarray during flushing requests (bsc#1226588).
- can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct (git-fixes).
- can: kvaser_usb: fix return value for hif_usb_send_regout (stable-fixes).
- can: mcp251xfd: fix infinite loop when xmit fails (git-fixes).
- cdrom: rearrange last_media_change check to avoid unintentional overflow (stable-fixes).
- ceph: add ceph_cap_unlink_work to fire check_caps() immediately (bsc#1226022).
- ceph: always check dir caps asynchronously (bsc#1226022).
- ceph: always queue a writeback when revoking the Fb caps (bsc#1226022).
- ceph: break the check delayed cap loop every 5s (bsc#1226022).
- ceph: fix incorrect kmalloc size of pagevec mempool (bsc#1228417).
- ceph: redirty page before returning AOP_WRITEPAGE_ACTIVATE (bsc#1224866).
- ceph: stop copying to iter at EOF on sync reads (bsc#1222606).
- ceph: switch to use cap_delay_lock for the unlink delay list (bsc#1226022).
- certs: Add ECDSA signature verification self-test (bsc#1222777).
- certs: Move RSA self-test data to separate file (bsc#1222777).
- char: tpm: Fix possible memory leak in tpm_bios_measurements_open() (git-fixes).
- checkpatch: really skip LONG_LINE_* when LONG_LINE is ignored (git-fixes).
- cifs: Add a laundromat thread for cached directories (git-fixes, bsc#1225172).
- cifs: Do not use certain unnecessary folio_*() functions (bsc#1225172).
- cifs: account for primary channel in the interface list (bsc#1225172).
- cifs: cifs_chan_is_iface_active should be called with chan_lock held (bsc#1225172).
- cifs: distribute channels across interfaces based on speed (bsc#1225172).
- cifs: do not pass cifs_sb when trying to add channels (bsc#1225172).
- cifs: failure to add channel on iface should bump up weight (git-fixes, bsc#1225172).
- cifs: fix charset issue in reconnection (bsc#1225172).
- cifs: fix leak of iface for primary channel (git-fixes, bsc#1225172).
- cifs: handle cases where a channel is closed (bsc#1225172).
- cifs: handle cases where multiple sessions share connection (bsc#1225172).
- cifs: reconnect work should have reference on server struct (bsc#1225172).
- clk: Do not hold prepare_lock when calling kref_put() (stable-fixes).
- clk: Get runtime PM before walking tree during disable_unused (git-fixes).
- clk: Get runtime PM before walking tree for clk_summary (git-fixes).
- clk: Initialize struct clk_core kref earlier (stable-fixes).
- clk: Remove prepare_lock hold assertion in __clk_release() (git-fixes).
- clk: Show active consumers of clocks in debugfs (stable-fixes).
- clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use (git-fixes).
- clk: mediatek: Do a runtime PM get on controllers during probe (git-fixes).
- clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg (git-fixes).
- clk: mediatek: mt8365-mm: fix DPI0 parent (git-fixes).
- clk: mediatek: pllfh: Do not log error for missing fhctl node (git-fixes).
- clk: qcom: clk-alpha-pll: fix rate setting for Stromer PLLs (git-fixes).
- clk: qcom: clk-alpha-pll: remove invalid Stromer register offset (git-fixes).
- clk: qcom: clk-alpha-pll: set ALPHA_EN bit for Stromer Plus PLLs (git-fixes).
- clk: qcom: dispcc-sm6350: fix DisplayPort clocks (git-fixes).
- clk: qcom: dispcc-sm8450: fix DisplayPort clocks (git-fixes).
- clk: qcom: dispcc-sm8550: fix DisplayPort clocks (git-fixes).
- clk: qcom: gcc-sm6350: Fix gpll6* &amp; gpll7 parents (git-fixes).
- clk: qcom: mmcc-msm8998: fix venus clock issue (git-fixes).
- clk: qcom: reset: Commonize the de/assert functions (stable-fixes).
- clk: qcom: reset: Ensure write completion on reset de/assertion (git-fixes).
- clk: renesas: r8a779a0: Fix CANFD parent clock (git-fixes).
- clk: renesas: r9a07g043: Add clock and reset entry for PLIC (git-fixes).
- clk: rs9: fix wrong default value for clock amplitude (git-fixes).
- clk: samsung: exynosautov9: fix wrong pll clock id value (git-fixes).
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (git-fixes).
- clkdev: Update clkdev id usage to allow for longer names (stable-fixes).
- clocksource/drivers/arm_global_timer: Fix maximum prescaler value (git-fixes).
- clocksource/drivers/imx: Fix -Wunused-but-set-variable warning (git-fixes).
- comedi: vmk80xx: fix incomplete endpoint checking (git-fixes).
- config/arm64: Enable CoreSight PMU drivers (bsc#1228289 jsc#PED-7859)
- coresight: trbe: Add a representative coresight_platform_data for (bsc#1220587)
- coresight: trbe: Allocate platform data per device (bsc#1220587)
- coresight: trbe: Enable ACPI based TRBE devices (bsc#1220587)
- counter: linux/counter.h: fix Excess kernel-doc description warning (git-fixes).
- counter: ti-eqep: enable clock at probe (git-fixes).
- cppc_cpufreq: Fix possible null pointer dereference (git-fixes).
- cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC systems (git-fixes).
- cpufreq: amd-pstate: Fix the inconsistency in max frequency units (git-fixes).
- cpufreq: amd-pstate: fix memory leak on CPU EPP exit (stable-fixes).
- cpufreq: brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations (git-fixes).
- cpufreq: exit() callback is optional (git-fixes).
- cpufreq: ti-cpufreq: Handle deferred probe with dev_err_probe() (git-fixes).
- cpumask: Add for_each_cpu_from() (bsc#1225053).
- crypto/ecdh: make ecdh_compute_value() to zeroize the public key (bsc#1222768).
- crypto/ecdsa: make ecdsa_ecc_ctx_deinit() to zeroize the public key (bsc#1222768).
- crypto: aead,cipher - zeroize key buffer after use (stable-fixes).
- crypto: bcm - Fix pointer arithmetic (git-fixes).
- crypto: ccp - Add support for PCI device 0x156E (bsc#1223338).
- crypto: ccp - Add support for PCI device 0x17E0 (bsc#1223338).
- crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked (git-fixes).
- crypto: ccp - drop platform ifdef checks (git-fixes).
- crypto: deflate - Add aliases to deflate (bsc#1227190).
- crypto: ecc - update ecc_gen_privkey for FIPS 186-5 (bsc#1222782).
- crypto: ecdh - explicitly zeroize private_key (stable-fixes).
- crypto: ecdsa - Fix module auto-load on add-key (git-fixes).
- crypto: ecdsa - Fix the public key format description (git-fixes).
- crypto: ecrdsa - Fix module auto-load on add_key (stable-fixes).
- crypto: hisilicon/debugfs - Fix debugfs uninit process issue (stable-fixes).
- crypto: hisilicon/qm - Add the err memory release process to qm uninit (stable-fixes).
- crypto: hisilicon/sec - Fix memory leak for sec resource release (stable-fixes).
- crypto: iaa - Account for cpu-less numa nodes (bsc#1227190).
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init (git-fixes).
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (git-fixes).
- crypto: qat - extend scope of lock in adf_cfg_add_key_value_param() (git-fixes).
- crypto: qat - fix ring to service map for dcc in 4xxx (git-fixes).
- crypto: qat - improve error logging to be consistent across features (git-fixes).
- crypto: qat - relocate and rename get_service_enabled() (stable-fixes).
- crypto: qat - specify firmware files for 402xx (git-fixes).
- crypto: rsa - add a check for allocation failure (bsc#1222775).
- crypto: rsa - allow only odd e and restrict value in FIPS mode (bsc#1222775).
- crypto: testmgr - remove unused xts4096 and xts512 algorithms from testmgr.c (bsc#1222769).
- crypto: x86/nh-avx2 - add missing vzeroupper (git-fixes).
- crypto: x86/sha256-avx2 - add missing vzeroupper (git-fixes).
- crypto: x86/sha512-avx2 - add missing vzeroupper (git-fixes).
- cxl/acpi: Fix load failures due to single window creation failure (git-fixes).
- cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window (git-fixes).
- cxl/region: Fix cxlr_pmem leaks (git-fixes).
- cxl/region: Fix memregion leaks in devm_cxl_add_region() (git-fixes).
- cxl/test: Add missing vmalloc.h for tools/testing/cxl/test/mem.c (git-fixes).
- cxl/trace: Correct DPA field masks for general_media &amp; dram events (git-fixes).
- cxl/trace: Properly initialize cxl_poison region name (git-fixes).
- dax/bus.c: replace driver-core lock usage by a local rwsem (jsc#PED-5853).
- dax/bus.c: replace several sprintf() with sysfs_emit() (jsc#PED-5853).
- dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n (jsc#PED-5853).
- decompress_bunzip2: fix rare decompression failure (git-fixes).
- device-dax: make dax_bus_type const (jsc#PED-5853).
- devres: Fix devm_krealloc() wasting memory (git-fixes).
- devres: Fix memory leakage caused by driver API devm_free_percpu() (git-fixes).
- dlm: fix user space lkb refcounting (git-fixes).
- dlm: fix user space lock decision to copy lvb (git-fixes).
- dm crypt: remove redundant state settings after waking up (jsc#PED-7542).
- dm thin: add braces around conditional code that spans lines (jsc#PED-7542).
- dm verity: set DM_TARGET_SINGLETON feature flag (jsc#PED-7542).
- dm-integrity: set max_integrity_segments in dm_integrity_io_hints (jsc#PED-7542).
- dm-multipath: dont't attempt SG_IO on non-SCSI-disks (bsc#1223575).
- dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape (bsc#1219596)
- dm-raid: add a new helper prepare_suspend() in md_personality (jsc#PED-7542).
- dm-raid: really frozen sync_thread during suspend (jsc#PED-7542).
- dm/amd/pm: Fix problems with reboot/shutdown for some SMU 13.0.4/13.0.11 users (git-fixes).
- dm: update relevant MODULE_AUTHOR entries to latest dm-devel mailing list (jsc#PED-7542).
- dma-buf/sw-sync: do not enable IRQ from sync_print_obj() (git-fixes).
- dma-buf: Fix NULL pointer dereference in sanitycheck() (git-fixes).
- dma-mapping: benchmark: fix node id validation (git-fixes).
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly (git-fixes).
- dma: fix call order in dmam_free_coherent (git-fixes).
- dma: xilinx_dpdma: Fix locking (git-fixes).
- dmaengine: axi-dmac: fix possible race in remove() (git-fixes).
- dmaengine: idma64: Add check for dma_set_max_seg_size (git-fixes).
- dmaengine: idxd: Avoid unnecessary destruction of file_ida (git-fixes).
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (git-fixes).
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (git-fixes).
- dmaengine: ioatdma: Fix error path in ioat3_dma_probe() (git-fixes).
- dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe() (git-fixes).
- dmaengine: ioatdma: Fix leaking on version mismatch (git-fixes).
- dmaengine: ioatdma: Fix missing kmem_cache_destroy() (git-fixes).
- dmaengine: owl: fix register access functions (git-fixes).
- dmaengine: tegra186: Fix residual calculation (git-fixes).
- dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels (git-fixes).
- docs: Restore "smart quotes" for quotes (stable-fixes).
- docs: crypto: async-tx-api: fix broken code example (git-fixes).
- docs: kernel_include.py: Cope with docutils 0.21 (stable-fixes).
- docs: netdev: Fix typo in Signed-off-by tag (git-fixes).
- dpll: spec: use proper enum for pin capabilities attribute (git-fixes).
- driver core: Introduce device_link_wait_removal() (stable-fixes).
- drivers/nvme: Add quirks for device 126f:2262 (git-fixes).
- drivers/xen: Improve the late XenStore init protocol (git-fixes).
- drivers: core: synchronize really_probe() and dev_uevent() (git-fixes).
- drivers: soc: xilinx: check return status of get_api_version() (git-fixes).
- drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init() (stable-fixes).
- drm/amd/amdgpu: Fix uninitialized variable warnings (git-fixes).
- drm/amd/display: ASSERT when failing to find index by plane/stream id (stable-fixes).
- drm/amd/display: Account for cursor prefetch BW in DML1 mode support (stable-fixes).
- drm/amd/display: Add VCO speed parameter for DCN31 FPU (stable-fixes).
- drm/amd/display: Add dml2 copy functions (stable-fixes).
- drm/amd/display: Add dtbclk access to dcn315 (stable-fixes).
- drm/amd/display: Add refresh rate range check (stable-fixes).
- drm/amd/display: Allocate zero bw after bw alloc enable (stable-fixes).
- drm/amd/display: Allow dirty rects to be sent to dmub when abm is active (stable-fixes).
- drm/amd/display: Atom Integrated System Info v2_2 for DCN35 (stable-fixes).
- drm/amd/display: Change default size for dummy plane in DML2 (stable-fixes).
- drm/amd/display: Check index msg_id before read or write (stable-fixes).
- drm/amd/display: Check pipe offset before setting vblank (stable-fixes).
- drm/amd/display: Disable seamless boot on 128b/132b encoding (stable-fixes).
- drm/amd/display: Do not recursively call manual trigger programming (stable-fixes).
- drm/amd/display: Enable colorspace property for MST connectors (git-fixes).
- drm/amd/display: Exit idle optimizations before HDCP execution (stable-fixes).
- drm/amd/display: Fix DC mode screen flickering on DCN321 (stable-fixes).
- drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport (stable-fixes).
- drm/amd/display: Fix bounds check for dcn35 DcfClocks (git-fixes).
- drm/amd/display: Fix division by zero in setup_dsc_config (stable-fixes).
- drm/amd/display: Fix idle check for shared firmware state (stable-fixes).
- drm/amd/display: Fix incorrect DSC instance for MST (stable-fixes).
- drm/amd/display: Fix nanosec stat overflow (stable-fixes).
- drm/amd/display: Fix noise issue on HDMI AV mute (stable-fixes).
- drm/amd/display: Fix overlapping copy within dml_core_mode_programming (stable-fixes).
- drm/amd/display: Fix potential index out of bounds in color transformation function (git-fixes).
- drm/amd/display: Fix refresh rate range for some panel (stable-fixes).
- drm/amd/display: Fix uninitialized variables in DM (stable-fixes).
- drm/amd/display: Handle Y carry-over in VCP X.Y calculation (stable-fixes).
- drm/amd/display: Init DPPCLK from SMU on dcn32 (stable-fixes).
- drm/amd/display: Move 'struct scaler_data' off stack (git-fixes).
- drm/amd/display: Override min required DCFCLK in dml1_validate (stable-fixes).
- drm/amd/display: Prevent crash when disable stream (stable-fixes).
- drm/amd/display: Program VSC SDP colorimetry for all DP sinks &gt;= 1.4 (stable-fixes).
- drm/amd/display: Remove MPC rate control logic from DCN30 and above (stable-fixes).
- drm/amd/display: Remove pixle rate limit for subvp (stable-fixes).
- drm/amd/display: Remove redundant condition in dcn35_calc_blocks_to_gate() (git-fixes).
- drm/amd/display: Return the correct HDCP error code (stable-fixes).
- drm/amd/display: Revert Remove pixle rate limit for subvp (stable-fixes).
- drm/amd/display: Send DP_TOTAL_LTTPR_CNT during detection if LTTPR is present (stable-fixes).
- drm/amd/display: Send DTBCLK disable message on first commit (git-fixes).
- drm/amd/display: Set DCN351 BB and IP the same as DCN35 (stable-fixes).
- drm/amd/display: Set VSC SDP Colorimetry same way for MST and SST (stable-fixes).
- drm/amd/display: Set color_mgmt_changed to true on unsuspend (stable-fixes).
- drm/amd/display: Skip finding free audio for unknown engine_id (stable-fixes).
- drm/amd/display: Skip pipe if the pipe idx not set properly (stable-fixes).
- drm/amd/display: Update efficiency bandwidth for dcn351 (stable-fixes).
- drm/amd/display: Update odm when ODM combine is changed on an otg master pipe with no plane (stable-fixes).
- drm/amd/display: Use freesync when `DRM_EDID_FEATURE_CONTINUOUS_FREQ` found (stable-fixes).
- drm/amd/display: Workaround register access in idle race with cursor (stable-fixes).
- drm/amd/display: change dram_clock_latency to 34us for dcn35 (stable-fixes).
- drm/amd/display: fix disable otg wa logic in DCN316 (stable-fixes).
- drm/amd/display: fix input states translation error for dcn35 &amp; dcn351 (stable-fixes).
- drm/amd/display: handle range offsets in VRR ranges (stable-fixes).
- drm/amd/display: revert Exit idle optimizations before HDCP execution (stable-fixes).
- drm/amd/pm: Fix aldebaran pcie speed reporting (git-fixes).
- drm/amd/pm: Restore config space after reset (stable-fixes).
- drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11 (stable-fixes).
- drm/amd/pm: remove logically dead code for renoir (git-fixes).
- drm/amd/swsmu: modify the gfx activity scaling (stable-fixes).
- drm/amd: Fix shutdown (again) on some SMU v13.0.4/11 platforms (git-fixes).
- drm/amd: Flush GFXOFF requests in prepare stage (git-fixes).
- drm/amdgpu/atomfirmware: add intergrated info v2.3 table (stable-fixes).
- drm/amdgpu/atomfirmware: fix parsing of vram_info (stable-fixes).
- drm/amdgpu/atomfirmware: silence UBSAN warning (stable-fixes).
- drm/amdgpu/display: Address kdoc for 'is_psr_su' in 'fill_dc_dirty_rects' (git-fixes).
- drm/amdgpu/mes: fix use-after-free issue (stable-fixes).
- drm/amdgpu/pm: Check the validity of overdiver power limit (git-fixes).
- drm/amdgpu/pm: Fix NULL pointer dereference when get power limit (git-fixes).
- drm/amdgpu/pm: Fix the error of pwm1_enable setting (stable-fixes).
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3 (stable-fixes).
- drm/amdgpu: Assign correct bits for SDMA HDP flush (stable-fixes).
- drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit (git-fixes).
- drm/amdgpu: Enable gpu reset for S3 abort cases on Raven series (stable-fixes).
- drm/amdgpu: Fix VCN allocation in CPX partition (stable-fixes).
- drm/amdgpu: Fix VRAM memory accounting (stable-fixes).
- drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode() (git-fixes).
- drm/amdgpu: Fix comparison in amdgpu_res_cpu_visible (git-fixes).
- drm/amdgpu: Fix leak when GPU memory allocation fails (stable-fixes).
- drm/amdgpu: Fix memory range calculation (git-fixes).
- drm/amdgpu: Fix pci state save during mode-1 reset (git-fixes).
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (git-fixes).
- drm/amdgpu: Fix the ring buffer size for queue VM flush (stable-fixes).
- drm/amdgpu: Fix uninitialized variable warnings (stable-fixes).
- drm/amdgpu: Indicate CU havest info to CP (stable-fixes).
- drm/amdgpu: Initialize timestamp for some legacy SOCs (stable-fixes).
- drm/amdgpu: Refine IB schedule error logging (stable-fixes).
- drm/amdgpu: Remove GC HW IP 9.3.0 from noretry=1 (git-fixes).
- drm/amdgpu: Reset dGPU if suspend got aborted (stable-fixes).
- drm/amdgpu: Update BO eviction priorities (stable-fixes).
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (stable-fixes).
- drm/amdgpu: add error handle to avoid out-of-bounds (stable-fixes).
- drm/amdgpu: always force full reset for SOC21 (stable-fixes).
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag (stable-fixes).
- drm/amdgpu: avoid using null object of framebuffer (stable-fixes).
- drm/amdgpu: drop setting buffer funcs in sdma442 (git-fixes).
- drm/amdgpu: fix UBSAN warning in kv_dpm.c (stable-fixes).
- drm/amdgpu: fix deadlock while reading mqd from debugfs (git-fixes).
- drm/amdgpu: fix doorbell regression (git-fixes).
- drm/amdgpu: fix incorrect number of active RBs for gfx11 (stable-fixes).
- drm/amdgpu: fix locking scope when flushing tlb (stable-fixes).
- drm/amdgpu: fix mmhub client id out-of-bounds access (git-fixes).
- drm/amdgpu: fix the warning about the expression (int)size - len (stable-fixes).
- drm/amdgpu: fix uninitialized scalar variable warning (stable-fixes).
- drm/amdgpu: fix use-after-free bug (stable-fixes).
- drm/amdgpu: fix visible VRAM handling during faults (git-fixes).
- drm/amdgpu: implement IRQ_STATE_ENABLE for SDMA v4.4.2 (stable-fixes).
- drm/amdgpu: init microcode chip name from ip versions (stable-fixes).
- drm/amdgpu: make damage clips support configurable (stable-fixes).
- drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2 (git-fixes).
- drm/amdgpu: remove invalid resource-&gt;start check v2 (git-fixes).
- drm/amdgpu: silence UBSAN warning (stable-fixes).
- drm/amdgpu: validate the parameters of bo mapping operations more clearly (git-fixes).
- drm/amdkfd: Add VRAM accounting for SVM migration (stable-fixes).
- drm/amdkfd: Check cgroup when returning DMABuf info (stable-fixes).
- drm/amdkfd: Fix CU Masking for GFX 9.4.3 (git-fixes).
- drm/amdkfd: Fix memory leak in create_process failure (git-fixes).
- drm/amdkfd: Flush the process wq before creating a kfd_process (stable-fixes).
- drm/amdkfd: Let VRAM allocations go to GTT domain on small APUs (stable-fixes).
- drm/amdkfd: Reset GPU on queue preemption failure (stable-fixes).
- drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (git-fixes).
- drm/amdkfd: fix TLB flush after unmap for GFX9.4.2 (stable-fixes).
- drm/amdkfd: range check cp bad op exception interrupts (stable-fixes).
- drm/arm/komeda: Fix komeda probe failing if there are no links in the secondary pipeline (git-fixes).
- drm/arm/malidp: fix a possible null pointer dereference (git-fixes).
- drm/ast: Fix soft lockup (git-fixes).
- drm/bridge/panel: Fix runtime warning on panel bridge release (git-fixes).
- drm/bridge: Fix improper bridge init order with pre_enable_prev_first (git-fixes).
- drm/bridge: anx7625: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: anx7625: Update audio status while detecting (git-fixes).
- drm/bridge: dpc3433: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: icn6211: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: it6505: fix hibernate to resume no display issue (git-fixes).
- drm/bridge: lt8912b: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: lt9611: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: lt9611uxc: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: samsung-dsim: Set P divider based on min/max of fin pll (git-fixes).
- drm/bridge: tc358775: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: tc358775: fix support for jeida-18 and jeida-24 (git-fixes).
- drm/buddy: check range allocation matches alignment (stable-fixes).
- drm/ci: update device type for volteer devices (git-fixes).
- drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex (stable-fixes).
- drm/connector: Add \n to message about demoting connector force-probes (git-fixes).
- drm/display: fix typo (git-fixes).
- drm/dp_mst: Fix all mstb marked as not probed after suspend/resume (git-fixes).
- drm/drm_file: Fix pid refcounting race (git-fixes).
- drm/etnaviv: fix DMA direction handling for cached RW buffers (git-fixes).
- drm/etnaviv: fix tx clock gating on some GC7000 variants (stable-fixes).
- drm/exynos/vidi: fix memory leak in .get_modes() (stable-fixes).
- drm/exynos: do not return negative values from .get_modes() (stable-fixes).
- drm/exynos: dp: drop driver owner initialization (stable-fixes).
- drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found (git-fixes).
- drm/fbdev-dma: Fix framebuffer mode for big endian devices (git-fixes).
- drm/fbdev-dma: Only set smem_start is enable per module option (git-fixes).
- drm/fbdev-generic: Do not set physical framebuffer address (git-fixes).
- drm/fbdev-generic: Fix framebuffer on big endian devices (git-fixes).
- drm/gma500: Remove lid code (git-fixes).
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (git-fixes).
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (git-fixes).
- drm/i915/audio: Fix audio time stamp programming for DP (stable-fixes).
- drm/i915/bios: Fix parsing backlight BDB data (git-fixes).
- drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode() (stable-fixes).
- drm/i915/cdclk: Fix CDCLK programming order when pipes are active (git-fixes).
- drm/i915/display: Use i915_gem_object_get_dma_address to get dma address (stable-fixes).
- drm/i915/dp: Do not switch the LTTPR mode on an active link (git-fixes).
- drm/i915/dp: Fix the computation for compressed_bpp for DISPLAY &amp;lt; 13 (git-fixes).
- drm/i915/dp: Remove support for UHBR13.5 (git-fixes).
- drm/i915/dpt: Make DPT object unshrinkable (git-fixes).
- drm/i915/dsb: Fix DSB vblank waits when using VRR (git-fixes).
- drm/i915/dsi: Go back to the previous INIT_OTP/DISPLAY_ON order, mostly (git-fixes).
- drm/i915/gt: Automate CCS Mode setting during engine resets (git-fixes).
- drm/i915/gt: Disable HW load balancing for CCS (git-fixes).
- drm/i915/gt: Disarm breadcrumbs if engines are already idle (git-fixes).
- drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 (git-fixes).
- drm/i915/gt: Do not generate the command streamer for all the CCS (git-fixes).
- drm/i915/gt: Enable only one CCS for compute workload (git-fixes).
- drm/i915/gt: Fix CCS id's calculation for CCS mode setting (git-fixes).
- drm/i915/gt: Fix potential UAF by revoke of fence registers (git-fixes).
- drm/i915/gt: Reset queue_priority_hint on parking (git-fixes).
- drm/i915/guc: avoid FIELD_PREP warning (git-fixes).
- drm/i915/hwmon: Fix locking inversion in sysfs getter (git-fixes).
- drm/i915/hwmon: Get rid of devm (stable-fixes).
- drm/i915/lspcon: Separate function to set expected mode (bsc#1193599).
- drm/i915/lspcon: Separate lspcon probe and lspcon init (bsc#1193599).
- drm/i915/mso: using joiner is not possible with eDP MSO (git-fixes).
- drm/i915/mst: Limit MST+DSC to TGL+ (git-fixes).
- drm/i915/mst: Reject FEC+MST on ICL (git-fixes).
- drm/i915/mtl: Update workaround 14018575942 (git-fixes).
- drm/i915/vrr: Disable VRR when using bigjoiner (stable-fixes).
- drm/i915/vrr: Generate VRR "safe window" for DSB (git-fixes).
- drm/i915: Disable live M/N updates when using bigjoiner (stable-fixes).
- drm/i915: Disable port sync when bigjoiner is used (stable-fixes).
- drm/i915: Do not match JSL in ehl_combo_pll_div_frac_wa_needed() (git-fixes).
- drm/i915: Fix audio component initialization (git-fixes).
- drm/i915: Include the PLL name in the debug messages (stable-fixes).
- drm/i915: Pre-populate the cursor physical dma address (git-fixes).
- drm/i915: Replace a memset() with zero initialization (stable-fixes).
- drm/i915: Stop printing pipe name as hex (stable-fixes).
- drm/i915: Suppress old PLL pipe_mask checks for MG/TC/TBT PLLs (stable-fixes).
- drm/i915: Try to preserve the current shared_dpll for fastset on type-c ports (stable-fixes).
- drm/i915: Use named initializers for DPLL info (stable-fixes).
- drm/imx/ipuv3: do not return negative values from .get_modes() (stable-fixes).
- drm/komeda: check for error-valued pointer (git-fixes).
- drm/lcdif: Do not disable clocks on already suspended hardware (git-fixes).
- drm/lima: Mark simple_ondemand governor as softdep (git-fixes).
- drm/lima: add mask irq callback to gp and pp (stable-fixes).
- drm/lima: fix shared irq handling on driver remove (stable-fixes).
- drm/lima: mask irqs in timeout path before hard reset (stable-fixes).
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj (git-fixes).
- drm/mediatek: Add DRM_MODE_ROTATE_0 to rotation property (git-fixes).
- drm/mediatek: Add OVL compatible name for MT8195 (git-fixes).
- drm/mediatek: Add missing plane settings when async update (git-fixes).
- drm/mediatek: Call drm_atomic_helper_shutdown() at shutdown time (stable-fixes).
- drm/mediatek: Fix XRGB setting error in Mixer (git-fixes).
- drm/mediatek: Fix XRGB setting error in OVL (git-fixes).
- drm/mediatek: Fix bit depth overwritten for mtk_ovl_set bit_depth() (git-fixes).
- drm/mediatek: Fix destination alpha error in OVL (git-fixes).
- drm/mediatek: Init `ddp_comp` with devm_kcalloc() (git-fixes).
- drm/mediatek: Remove less-than-zero comparison of an unsigned value (git-fixes).
- drm/mediatek: Set DRM mode configs accordingly (git-fixes).
- drm/mediatek: Support DRM plane alpha in Mixer (git-fixes).
- drm/mediatek: Support DRM plane alpha in OVL (git-fixes).
- drm/mediatek: Support RGBA8888 and RGBX8888 in OVL on MT8195 (git-fixes).
- drm/mediatek: Turn off the layers with zero width or height (git-fixes).
- drm/mediatek: Use 8-bit alpha in ETHDR (git-fixes).
- drm/mediatek: dp: Fix mtk_dp_aux_transfer return value (git-fixes).
- drm/meson: dw-hdmi: add bandgap setting for g12 (git-fixes).
- drm/meson: dw-hdmi: power up phy on device init (git-fixes).
- drm/meson: fix canvas release in bind function (git-fixes).
- drm/meson: gate px_clk when setting rate (git-fixes).
- drm/meson: vclk: fix calculation of 59.94 fractional rates (git-fixes).
- drm/mgag200: Bind I2C lifetime to DRM device (git-fixes).
- drm/mgag200: Set DDC timeout in milliseconds (git-fixes).
- drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_dcs_write_seq() (git-fixes).
- drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_generic_write_seq() (git-fixes).
- drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails (git-fixes).
- drm/msm/adreno: fix CP cycles stat retrieval on a7xx (git-fixes).
- drm/msm/dp: Avoid a long timeout for AUX transfer if nothing connected (git-fixes).
- drm/msm/dp: allow voltage swing / pre emphasis of 3 (git-fixes).
- drm/msm/dp: fix typo in dp_display_handle_port_status_changed() (git-fixes).
- drm/msm/dpu: Add callback function pointer check before its call (git-fixes).
- drm/msm/dpu: Allow configuring multiple active DSC blocks (git-fixes).
- drm/msm/dpu: Always flush the slave INTF on the CTL (git-fixes).
- drm/msm/dpu: do not allow overriding data from catalog (git-fixes).
- drm/msm/dpu: drop validity checks for clear_pending_flush() ctl op (git-fixes).
- drm/msm/dpu: fix encoder irq wait skip (git-fixes).
- drm/msm/dpu: make error messages at dpu_core_irq_register_callback() more sensible (git-fixes).
- drm/msm/dpu: use devres-managed allocation for MDP TOP (stable-fixes).
- drm/msm/dsi: Print dual-DSI-adjusted pclk instead of original mode pclk (git-fixes).
- drm/msm/dsi: set VIDEO_COMPRESSION_MODE_CTRL_WC (git-fixes).
- drm/msm/mdp5: Remove MDP_CAP_SRC_SPLIT from msm8x53_config (git-fixes).
- drm/msm: Add newlines to some debug prints (git-fixes).
- drm/nouveau/disp: Fix missing backlight control on Macbook 5, 1 (bsc#1223838).
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (stable-fixes).
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (stable-fixes).
- drm/nouveau/dp: Do not probe eDP ports twice harder (stable-fixes).
- drm/nouveau/dp: Fix incorrect return code in r535_dp_aux_xfer() (git-fixes).
- drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor() (stable-fixes).
- drm/nouveau: do not attempt to schedule hpd_work on headless cards (git-fixes).
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (git-fixes).
- drm/nouveau: use tile_mode and pte_kind for VM_BIND bo allocations (git-fixes).
- drm/omapdrm: Fix console by implementing fb_dirty (git-fixes).
- drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() (git-fixes).
- drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators (git-fixes).
- drm/panel: do not return negative error codes from drm_panel_get_modes() (stable-fixes).
- drm/panel: himax-hx8394: Handle errors from mipi_dsi_dcs_set_display_on() better (git-fixes).
- drm/panel: ili9341: Respect deferred probe (git-fixes).
- drm/panel: ili9341: Use predefined error codes (git-fixes).
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (stable-fixes).
- drm/panel: ilitek-ili9882t: Check for errors on the NOP in prepare() (git-fixes).
- drm/panel: ilitek-ili9882t: If prepare fails, disable GPIO before regulators (git-fixes).
- drm/panel: ltk050h3146w: add MIPI_DSI_MODE_VIDEO to LTK050H3148W flags (git-fixes).
- drm/panel: ltk050h3146w: drop duplicate commands from LTK050H3148W init (git-fixes).
- drm/panel: novatek-nt35950: Do not log an error when DSI host can't be found (git-fixes).
- drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector (git-fixes).
- drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA (git-fixes).
- drm/panel: sitronix-st7789v: Add check for of_drm_get_panel_orientation (git-fixes).
- drm/panel: sitronix-st7789v: fix display size for jt240mhqs_hwt_ek_e3 panel (git-fixes).
- drm/panel: sitronix-st7789v: fix timing for jt240mhqs_hwt_ek_e3 panel (git-fixes).
- drm/panel: sitronix-st7789v: tweak timing for jt240mhqs_hwt_ek_e3 panel (git-fixes).
- drm/panel: visionox-rm69299: do not unregister DSI device (git-fixes).
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr() (git-fixes).
- drm/panfrost: Mark simple_ondemand governor as softdep (git-fixes).
- drm/panfrost: fix power transition timeout warnings (git-fixes).
- drm/prime: Unbreak virtgpu dma-buf export (git-fixes).
- drm/probe-helper: warn about negative .get_modes() (stable-fixes).
- drm/qxl: Add check for drm_cvt_mode (git-fixes).
- drm/qxl: remove unused `count` variable from `qxl_surface_id_alloc()` (git-fixes).
- drm/qxl: remove unused variable from `qxl_process_single_command()` (git-fixes).
- drm/radeon/radeon_display: Decrease the size of allocated memory (stable-fixes).
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it (stable-fixes).
- drm/radeon: fix UBSAN warning in kv_dpm.c (stable-fixes).
- drm/radeon: make -fstrict-flex-arrays=3 happy (git-fixes).
- drm/radeon: silence UBSAN warning (v3) (stable-fixes).
- drm/rockchip: vop2: Do not divide height twice for YUV (git-fixes).
- drm/rockchip: vop2: Fix the port mux of VP2 (git-fixes).
- drm/rockchip: vop2: Remove AR30 and AB30 format support (git-fixes).
- drm/sched: fix null-ptr-deref in init entity (git-fixes).
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) (git-fixes).
- drm/sun4i: hdmi: Convert encoder to atomic (stable-fixes).
- drm/sun4i: hdmi: Move mode_set into enable (stable-fixes).
- drm/ttm: Always take the bo delayed cleanup path for imported bos (git-fixes).
- drm/ttm: return ENOSPC from ttm_bo_mem_space v3 (stable-fixes).
- drm/ttm: stop pooling cached NUMA pages v2 (git-fixes).
- drm/udl: Remove DRM_CONNECTOR_POLL_HPD (git-fixes).
- drm/vc4: do not check if plane-&gt;state-&gt;fb == state-&gt;fb (stable-fixes).
- drm/vc4: hdmi: do not return negative values from .get_modes() (stable-fixes).
- drm/vmwgfx: 3D disabled should not effect STDU memory limits (git-fixes).
- drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (git-fixes).
- drm/vmwgfx: Do not memcmp equivalent pointers (git-fixes).
- drm/vmwgfx: Enable DMA mappings with SEV (git-fixes).
- drm/vmwgfx: Filter modes which exceed graphics memory (git-fixes).
- drm/vmwgfx: Fix Legacy Display Unit (git-fixes).
- drm/vmwgfx: Fix crtc's atomic check conditional (git-fixes).
- drm/vmwgfx: Fix invalid reads in fence signaled events (git-fixes).
- drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency (stable-fixes).
- drm/vmwgfx: Fix prime import/export (git-fixes).
- drm/vmwgfx: Sort primary plane formats by order of preference (git-fixes).
- drm: Check output polling initialized before disabling (stable-fixes).
- drm: Check polling initialized before enabling in drm_helper_probe_single_connector_modes (stable-fixes).
- drm: Fix drm_fixp2int_round() making it add 0.5 (git-fixes).
- drm: add drm_gem_object_is_shared_for_memory_stats() helper (stable-fixes).
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference (git-fixes).
- drm: nv04: Fix out of bounds access (git-fixes).
- drm: panel-orientation-quirks: Add quirk for Aya Neo KUN (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for GPD Win Mini (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for Valve Galileo (stable-fixes).
- drm: vc4: Fix possible null pointer dereference (git-fixes).
- drm: zynqmp_dpsub: Always register bridge (git-fixes).
- drm: zynqmp_dpsub: Fix an error handling path in zynqmp_dpsub_probe() (git-fixes).
- drm: zynqmp_kms: Fix AUX bus not getting unregistered (git-fixes).
- dt-bindings: clock: qcom: Add missing UFS QREF clocks (git-fixes)
- dump_stack: Do not get cpu_sync for panic CPU (bsc#1225607).
- dyndbg: fix old BUG_ON in &gt;control parser (stable-fixes).
- e1000e: Minor flow correction in e1000_shutdown function (git-fixes).
- e1000e: Workaround for sporadic MDI error on Meteor Lake systems (git-fixes).
- e1000e: move force SMBUS from enable ulp function to avoid PHY loss issue (git-fixes).
- ecryptfs: Fix buffer size for tag 66 packet (git-fixes)
- ecryptfs: Reject casefold directory inodes (git-fixes)
- eeprom: at24: Probe for DDR3 thermal sensor in the SPD case (stable-fixes).
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure (git-fixes).
- efi/unaccepted: do not let /proc/vmcore try to access unaccepted memory (git-fixes).
- efi/unaccepted: touch soft lockup during memory accept (git-fixes).
- efi/x86: Free EFI memory map only when installing a new one (git-fixes).
- efi: disable mirror feature during crashkernel (stable-fixes).
- efi: fix panic in kdump kernel (git-fixes).
- efi: libstub: only free priv.runtime_map when allocated (git-fixes).
- erofs: ensure m_llen is reset to 0 if metadata is invalid (git-fixes).
- exfat: fix potential deadlock on __exfat_get_dentry_set (git-fixes).
- extcon: max8997: select IRQ_DOMAIN instead of depending on it (git-fixes).
- f2fs: fix error path of __f2fs_build_free_nids (git-fixes).
- fast_dput(): handle underflows gracefully (git-fixes)
- fat: fix uninitialized field in nostale filehandles (git-fixes)
- fbdev: fix incorrect address computation in deferred IO (git-fixes).
- fbdev: savage: Handle err return when savagefb_check_var failed (git-fixes).
- fbdev: sh7760fb: allow modular build (git-fixes).
- fbdev: shmobile: fix snprintf truncation (git-fixes).
- fbdev: sisfb: hide unused variables (git-fixes).
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 (stable-fixes).
- fbmon: prevent division by zero in fb_videomode_from_videomode() (stable-fixes).
- filelock: fix potential use-after-free in posix_lock_inode (git-fixes).
- firewire: core: use long bus reset on gap count error (stable-fixes).
- firewire: ohci: mask bus reset interrupts between ISR and bottom half (stable-fixes).
- firmware: arm_scmi: Make raw debugfs entries non-seekable (git-fixes).
- firmware: cs_dsp: Fix overflow checking of wmfw header (git-fixes).
- firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (git-fixes).
- firmware: cs_dsp: Return error if block header overflows file (git-fixes).
- firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (git-fixes).
- firmware: cs_dsp: Validate payload length before processing block (git-fixes).
- firmware: dmi-id: add a release callback function (git-fixes).
- firmware: dmi: Stop decoding on broken entry (stable-fixes).
- firmware: psci: Fix return value from psci_system_suspend() (git-fixes).
- firmware: raspberrypi: Use correct device for DMA mappings (git-fixes).
- firmware: tegra: bpmp: Return directly after a failed kzalloc() in get_filename() (stable-fixes).
- firmware: turris-mox-rwtm: Do not complete if there are no waiters (git-fixes).
- firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() (git-fixes).
- firmware: turris-mox-rwtm: Initialize completion before mailbox (git-fixes).
- fpga: dfl-pci: add PCI subdevice ID for Intel D5005 card (stable-fixes).
- fs/9p: only translate RWX permissions for plain 9P2000 (git-fixes)
- fs/9p: translate O_TRUNC into OTRUNC (git-fixes)
- fs/file: fix the check in find_next_fd() (git-fixes).
- fs/pipe: Fix lockdep false-positive in watchqueue pipe_write() (git-fixes).
- fs: Fix error checking for d_hash_and_lookup() (git-fixes)
- fs: indicate request originates from old mount API (git-fixes)
- fs: relax mount_setattr() permission checks (git-fixes)
- fsverity: skip PKCS#7 parser when keyring is empty (git-fixes)
- ftrace: Fix possible use-after-free issue in ftrace_location() (git-fixes).
- fuse: do not unhash root (bsc#1223946).
- fuse: fix root lookup with nonzero generation (bsc#1223945).
- fuse: verify {g,u}id mount options correctly (bsc#1228193).
- geneve: fix header validation in geneve[6]_xmit_skb (git-fixes).
- geneve: make sure to pull inner header in geneve_rx() (git-fixes).
- genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after() (git-fixes).
- gfs2: Do not forget to complete delayed withdraw (git-fixes).
- gfs2: Fix "ignore unlock failures after withdraw" (git-fixes).
- gfs2: Fix invalid metadata access in punch_hole (git-fixes).
- gfs2: Get rid of gfs2_alloc_blocks generation parameter (git-fixes).
- gfs2: Rename gfs2_lookup_{ simple =&gt; meta } (git-fixes).
- gfs2: Use mapping-&gt;gfp_mask for metadata inodes (git-fixes).
- gfs2: convert to ctime accessor functions (git-fixes).
- gpio: cdev: check for NULL labels when sanitizing them for irqs (git-fixes).
- gpio: cdev: fix missed label sanitizing in debounce_setup() (git-fixes).
- gpio: cdev: sanitize the label before requesting the interrupt (stable-fixes).
- gpio: crystalcove: Use -ENOTSUPP consistently (stable-fixes).
- gpio: davinci: Validate the obtained number of IRQs (git-fixes).
- gpio: lpc32xx: fix module autoloading (stable-fixes).
- gpio: mc33880: Convert comma to semicolon (git-fixes).
- gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (stable-fixes).
- gpio: tangier: Use correct type for the IRQ chip data (git-fixes).
- gpio: tegra186: Fix tegra186_gpio_is_accessible() check (git-fixes).
- gpio: tqmx86: fix broken IRQ_TYPE_EDGE_BOTH interrupt type (git-fixes).
- gpio: tqmx86: fix typo in Kconfig label (git-fixes).
- gpio: tqmx86: introduce shadow register for GPIO output value (git-fixes).
- gpio: tqmx86: store IRQ trigger type and unmask status separately (git-fixes).
- gpio: wcove: Use -ENOTSUPP consistently (stable-fixes).
- gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1) (git-fixes).
- gpiolib: cdev: fix uninitialised kfifo (git-fixes).
- gpiolib: cdev: relocate debounce_period_us from struct gpio_desc (stable-fixes).
- gpiolib: swnode: Remove wrong header inclusion (git-fixes).
- gpu: host1x: Do not setup DMA for virtual devices (stable-fixes).
- gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (git-fixes).
- hfsplus: fix to avoid false alarm of circular locking (git-fixes).
- hfsplus: fix uninit-value in copy_name (git-fixes).
- hpet: Support 32-bit userspace (git-fixes).
- hwmon: (adt7475) Fix default duty on fan is disabled (git-fixes).
- hwmon: (amc6821) add of_match table (stable-fixes).
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock (git-fixes).
- hwmon: (corsair-cpro) Use a separate buffer for sending commands (git-fixes).
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event() (git-fixes).
- hwmon: (intel-m10-bmc-hwmon) Fix multiplier for N6000 board power sensor (git-fixes).
- hwmon: (lm70) fix links in doc and comments (git-fixes).
- hwmon: (max6697) Fix swapped temp{1,8} critical alarms (git-fixes).
- hwmon: (max6697) Fix underflow when writing limit attributes (git-fixes).
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us (git-fixes).
- hwmon: (shtc1) Fix property misspelling (git-fixes).
- hwrng: amd - Convert PCIBIOS_* return codes to errnos (git-fixes).
- hwrng: core - Fix wrong quality calculation at hw rng registration (git-fixes).
- hwtracing: hisi_ptt: Move type check to the beginning of hisi_ptt_pmu_event_init() (git-fixes).
- i2c: acpi: Unbind mux adapters before delete (git-fixes).
- i2c: at91: Fix the functionality flags of the slave-only interface (git-fixes).
- i2c: cadence: Avoid fifo clear after start (git-fixes).
- i2c: designware: Fix the functionality flags of the slave-only interface (git-fixes).
- i2c: i801: Annotate apanel_addr as __ro_after_init (stable-fixes).
- i2c: mark HostNotify target address as used (git-fixes).
- i2c: ocores: set IACK bit after core is enabled (git-fixes).
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (git-fixes).
- i2c: pxa: hide unused icr_bits[] variable (git-fixes).
- i2c: rcar: bring hardware to known state when probing (git-fixes).
- i2c: smbus: fix NULL function pointer dereference (git-fixes).
- i2c: synquacer: Fix an error handling path in synquacer_i2c_probe() (git-fixes).
- i2c: testunit: avoid re-issued work after read message (git-fixes).
- i2c: testunit: correct Kconfig description (git-fixes).
- i2c: testunit: discard write requests while old command is running (git-fixes).
- i2c: testunit: do not erase registers after STOP (git-fixes).
- i3c: master: svc: change ENXIO to EAGAIN when IBI occurs during start frame (git-fixes).
- i3c: master: svc: fix invalidate IBI type and miss call client IBI handler (git-fixes).
- i40e: Enforce software interrupt during busy-poll exit (git-fixes).
- i40e: Fix VF MAC filter removal (git-fixes).
- i40e: Fix firmware version comparison function (git-fixes).
- i40e: disable NAPI right after disabling irqs when handling xsk_pool (git-fixes).
- i40e: fix i40e_count_filters() to count only active/new filters (git-fixes).
- i40e: fix vf may be used uninitialized in this function warning (git-fixes).
- i40e: fix: remove needless retries of NVM update (bsc#1227736).
- i915: make inject_virtual_interrupt() void (stable-fixes).
- ice: Refactor FW data type and fix bitmap casting issue (git-fixes).
- ice: fix enabling RX VLAN filtering (git-fixes).
- ice: fix memory corruption bug with suspend and rebuild (git-fixes).
- ice: fix stats being updated by way too large values (git-fixes).
- ice: fix typo in assignment (git-fixes).
- ice: fix uninitialized dplls mutex usage (git-fixes).
- ice: reconfig host after changing MSI-X on VF (git-fixes).
- ice: reorder disabling IRQ and NAPI in ice_qp_dis (git-fixes).
- ice: use relative VSI index for VFs instead of PF VSI number (git-fixes).
- ice: virtchnl: stop pretending to support RSS over AQ or registers (git-fixes).
- ida: make 'ida_dump' static (git-fixes).
- idma64: Do not try to serve interrupts when device is powered off (git-fixes).
- idpf: disable local BH when scheduling napi for marker packets (git-fixes).
- idpf: extend tx watchdog timeout (bsc#1224137).
- idpf: fix kernel panic on unknown packet types (git-fixes).
- igb: Fix missing time sync events (git-fixes).
- igb: extend PTP timestamp adjustments to i211 (git-fixes).
- igc: Fix missing time sync events (git-fixes).
- igc: Remove stale comment about Tx timestamping (git-fixes).
- igc: avoid returning frame twice in XDP_REDIRECT (git-fixes).
- iio: Fix the sorting functionality in iio_gts_build_avail_time_table (git-fixes).
- iio: accel: fxls8962af: select IIO_BUFFER &amp; IIO_KFIFO_BUF (git-fixes).
- iio: accel: mxc4005: Interrupt handling fixes (git-fixes).
- iio: accel: mxc4005: Reset chip on probe() and resume() (stable-fixes).
- iio: accel: mxc4005: allow module autoloading via OF compatible (stable-fixes).
- iio: adc: ad7266: Fix variable checking bug (git-fixes).
- iio: adc: ad9467: fix scan type sign (git-fixes).
- iio: adc: ad9467: use chip_info variables instead of array (stable-fixes).
- iio: adc: ad9467: use spi_get_device_match_data() (stable-fixes).
- iio: adc: stm32: Fixing err code to not indicate success (git-fixes).
- iio: chemical: bme680: Fix calibration data variable (git-fixes).
- iio: chemical: bme680: Fix overflows in compensate() functions (git-fixes).
- iio: chemical: bme680: Fix pressure value output (git-fixes).
- iio: chemical: bme680: Fix sensor data read operation (git-fixes).
- iio: core: Leave private pointer NULL when no private data supplied (git-fixes).
- iio: dac: ad5592r: fix temperature channel scaling value (git-fixes).
- iio: dummy_evgen: remove Excess kernel-doc comments (git-fixes).
- iio: frequency: adrf6780: rm clk provider include (git-fixes).
- iio: gts-helper: Fix division loop (git-fixes).
- iio: imu: inv_icm42600: delete unneeded update watermark call (git-fixes).
- iio: pressure: Fixes BME280 SPI driver data (git-fixes).
- iio: pressure: bmp280: Fix BMP580 temperature reading (stable-fixes).
- iio: pressure: dps310: support negative temperature values (git-fixes).
- iio: pressure: fix some word spelling errors (stable-fixes).
- iio: xilinx-ams: Do not include ams_ctrl_channels in scan_mask (git-fixes).
- iio:imu: adis16475: Fix sync mode setting (git-fixes).
- inet: frags: eliminate kernel-doc warning (git-fixes).
- inet_diag: annotate data-races around inet_diag_table[] (git-fixes).
- init/main.c: Fix potential static_command_line memory overflow (git-fixes).
- init: open /initrd.image with O_LARGEFILE (stable-fixes).
- input/touchscreen: imagis: Correct the maximum touch area value (stable-fixes).
- input: Add event code for accessibility key (stable-fixes).
- input: Add support for "Do Not Disturb" (stable-fixes).
- intel: legacy: Partial revert of field get conversion (git-fixes).
- intel_th: pci: Add Granite Rapids SOC support (stable-fixes).
- intel_th: pci: Add Granite Rapids support (stable-fixes).
- intel_th: pci: Add Lunar Lake support (stable-fixes).
- intel_th: pci: Add Meteor Lake-S CPU support (stable-fixes).
- intel_th: pci: Add Meteor Lake-S support (stable-fixes).
- intel_th: pci: Add Sapphire Rapids SOC support (stable-fixes).
- interconnect: qcom: osm-l3: Replace custom implementation of COUNT_ARGS() (git-fixes).
- interconnect: qcom: qcm2290: Fix mas_snoc_bimc QoS port assignment (git-fixes).
- interconnect: qcom: qcm2290: Fix mas_snoc_bimc RPM master ID (git-fixes).
- interconnect: qcom: sc8180x: Mark CO0 BCM keepalive (git-fixes).
- interconnect: qcom: sm8550: Enable sync_state (git-fixes).
- io-wq: write next_work before dropping acct_lock (git-fixes).
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags (git-fixes).
- io_uring/io-wq: avoid garbage value of 'match' in io_wq_enqueue() (git-fixes).
- io_uring/kbuf: get rid of bl-&gt;is_ready (git-fixes).
- io_uring/kbuf: get rid of lower BGID lists (git-fixes).
- io_uring/kbuf: protect io_buffer_list teardown with a reference (git-fixes).
- io_uring/kbuf: rename is_mapped (git-fixes).
- io_uring/net: correct the type of variable (git-fixes).
- io_uring/net: correctly handle multishot recvmsg retry setup (git-fixes).
- io_uring/net: fix sendzc lazy wake polling (git-fixes).
- io_uring/net: move receive multishot out of the generic msghdr path (git-fixes).
- io_uring/net: restore msg_control on sendzc retry (git-fixes).
- io_uring/net: unify how recvmsg and sendmsg copy in the msghdr (git-fixes).
- io_uring/rsrc: do not lock while !TASK_RUNNING (git-fixes).
- io_uring/rsrc: fix incorrect assignment of iter-&gt;nr_segs in io_import_fixed (git-fixes).
- io_uring/rw: do not allow multishot reads without NOWAIT support (git-fixes).
- io_uring/rw: return IOU_ISSUE_SKIP_COMPLETE for multishot retry (git-fixes).
- io_uring/sqpoll: work around a potential audit memory leak (git-fixes).
- io_uring/unix: drop usage of io_uring socket (git-fixes).
- io_uring: Fix io_cqring_wait() not restoring sigmask on get_timespec64() failure (git-fixes).
- io_uring: clean rings on NO_MMAP alloc fail (git-fixes).
- io_uring: clear opcode specific data for an early failure (git-fixes).
- io_uring: do not save/restore iowait state (git-fixes).
- io_uring: fail NOP if non-zero op flags is passed in (git-fixes).
- io_uring: fix io_queue_proc modifying req-&gt;flags (git-fixes).
- io_uring: fix mshot io-wq checks (git-fixes).
- io_uring: fix mshot read defer taskrun cqe posting (git-fixes).
- io_uring: fix poll_remove stalled req completion (git-fixes).
- io_uring: kabi cookie remove (bsc#1217384).
- io_uring: remove looping around handling traditional task_work (git-fixes).
- io_uring: remove unconditional looping in local task_work handling (git-fixes).
- io_uring: use private workqueue for exit work (git-fixes).
- io_uring: use the right type for work_llist empty check (git-fixes).
- iomap: clear the per-folio dirty bits on all writeback failures (git-fixes)
- iommu/amd: Enhance def_domain_type to handle untrusted device (git-fixes).
- iommu/amd: Fix panic accessing amd_iommu_enable_faulting (bsc#1224767).
- iommu/amd: Fix sysfs leak in iommu init (git-fixes).
- iommu/arm-smmu-v3: Check that the RID domain is S1 in SVA (git-fixes).
- iommu/arm-smmu-v3: Free MSIs in case of ENOMEM (git-fixes).
- iommu/dma: Force swiotlb_max_mapping_size on an untrusted device (bsc#1224331)
- iommu/dma: Trace bounce buffer usage when mapping buffers (git-fixes).
- iommu/vt-d: Allocate DMAR fault interrupts locally (bsc#1224767).
- iommu/vt-d: Allocate local memory for page request queue (git-fixes).
- iommu/vt-d: Fix WARN_ON in iommu probe path (git-fixes).
- iommu/vt-d: Fix wrong use of pasid config (git-fixes).
- iommu/vt-d: Improve ITE fault handling if target device isn't present (git-fixes).
- iommu/vt-d: Set SSADE when attaching to a parent with dirty tracking (git-fixes).
- iommu/vt-d: Update iotlb in nested domain attach (git-fixes).
- iommu/vt-d: Use rbtree to track iommu probed devices (git-fixes).
- iommu: Fix compilation without CONFIG_IOMMU_INTEL (git-fixes).
- iommu: Map reserved memory as cacheable if device is coherent (git-fixes).
- iommu: Return right value in iommu_sva_bind_device() (git-fixes).
- iommu: Undo pasid attachment only for the devices that have succeeded (git-fixes).
- iommu: mtk: fix module autoloading (git-fixes).
- iommufd/iova_bitmap: Bounds check mapped::pages access (git-fixes).
- iommufd/iova_bitmap: Consider page offset for the pages to be pinned (git-fixes).
- iommufd/iova_bitmap: Switch iova_bitmap::bitmap to an u8 array (git-fixes).
- iommufd: Add missing IOMMUFD_DRIVER kconfig for the selftest (git-fixes).
- iommufd: Fix iopt_access_list_id overwrite bug (git-fixes).
- iommufd: Reject non-zero data_type if no data_len is provided (git-fixes).
- ionic: set adminq irq affinity (git-fixes).
- ipmi: ssif_bmc: prevent integer overflow on 32bit systems (git-fixes).
- ipv4: annotate data-races around fi-&gt;fib_dead (git-fixes).
- ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
- irqchip/alpine-msi: Fix off-by-one in allocation error path (git-fixes).
- irqchip/armada-370-xp: Suppress unused-function warning (git-fixes).
- irqchip/gic-v3-its: Do not assume vPE tables are preallocated (git-fixes).
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 (git-fixes).
- irqchip/gic-v3-its: Prevent double free on error (git-fixes).
- irqchip/loongson-pch-msi: Fix off-by-one on allocation error path (git-fixes).
- irqchip/mbigen: Do not use bus_get_dev_root() to find the parent (git-fixes).
- irqchip/renesas-rzg2l: Add macro to retrieve TITSR register offset based on register's index (stable-fixes).
- irqchip/renesas-rzg2l: Flush posted write in irq_eoi() (git-fixes).
- irqchip/renesas-rzg2l: Implement restriction when writing ISCR register (stable-fixes).
- irqchip/renesas-rzg2l: Prevent spurious interrupts when setting trigger type (git-fixes).
- irqchip/renesas-rzg2l: Rename rzg2l_irq_eoi() (stable-fixes).
- irqchip/renesas-rzg2l: Rename rzg2l_tint_eoi() (stable-fixes).
- iwlwifi: fw: fix more kernel-doc warnings (bsc#1227149).
- iwlwifi: mvm: Drop unused fw_trips_index[] from iwl_mvm_thermal_device (bsc#1227149).
- iwlwifi: mvm: Populate trip table before registering thermal zone (bsc#1227149).
- iwlwifi: mvm: Use for_each_thermal_trip() for walking trip points (bsc#1227149).
- ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() (git-fixes).
- ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able (git-fixes).
- jffs2: Fix potential illegal address access in jffs2_free_inode (git-fixes).
- jffs2: prevent xattr node from overflowing the eraseblock (git-fixes).
- jfs: Fix array-index-out-of-bounds in diFree (git-fixes).
- jfs: xattr: fix buffer overflow for invalid xattr (bsc#1227383).
- kABI fix of KVM: x86/pmu: Allow programming events that match unsupported arch events (bsc#1225696).
- kABI fix of KVM: x86/pmu: Prioritize VMX interception over
- kABI fix of KVM: x86: Snapshot if a vCPU's vendor model is AMD vs.  Intel compatible (git-fixes).
- kABI workaround for cs35l56 (git-fixes).
- kABI workaround for of driver changes (git-fixes).
- kABI workaround for sof_ipc_pcm_ops (git-fixes).
- kABI workaround for wireless updates (bsc#1227149).
- kABI: Adjust trace_iterator.wait_index (git-fixes).
- kABI: bpf: verifier kABI workaround (bsc#1225903).
- kabi fix of perf/x86/intel: Expose existence of callback support to KVM (git fixes).
- kabi/severities: Ignore io_uring internal symbols
- kabi/severities: Remove mitigation-related symbols
- kabi/severities: cleanup and update for WiFi driver entries (bsc#1227149)
- kabi/severities: cover all ath/* drivers (bsc#1227149)
- kabi/severities: cover all mt76 modules (bsc#1227149)
- kabi/severities: ignore IMS functions 
- kabi/severities: ignore TAS2781 symbol drop, it's only locally used
- kabi/severities: ignore Wangxun ethernet driver local symbols
- kabi/severities: ignore amd pds internal symbols
- kabi/severities: ignore brcmfmac-specific local symbols
- kabi/severities: ignore kABI changes Realtek WiFi drivers (bsc#1227149)
- kabi: Use __iowriteXX_copy_inlined for in-kernel modules (bsc#1226502)
- kasan, fortify: properly rename memintrinsics (git-fixes).
- kasan/test: avoid gcc warning for intentional overflow (git-fixes).
- kasan: disable kasan_non_canonical_hook() for HW tags (git-fixes).
- kasan: print the original fault addr when access invalid shadow (git-fixes).
- kbuild: Fix build target deb-pkg: ln: failed to create hard link (git-fixes).
- kbuild: Install dtb files as 0644 in Makefile.dtbinst (git-fixes).
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 (stable-fixes).
- kbuild: avoid build error when single DTB is turned into composite DTB (git-fixes).
- kconfig: doc: fix a typo in the note about 'imply' (git-fixes).
- kconfig: fix comparison to constant symbols, 'm', 'n' (git-fixes).
- kconfig: fix infinite loop when expanding a macro at the end of file (git-fixes).
- kconfig: gconf: give a proper initial state to the Save button (stable-fixes).
- kconfig: remove wrong expr_trans_bool() (stable-fixes).
- kcov: do not lose track of remote references during softirqs (git-fixes).
- kernel-binary: vdso: Own module_dir
- kernel-doc: fix struct_group_tagged() parsing (git-fixes).
- kexec: do syscore_shutdown() in kernel_kexec (git-fixes).
- kheaders: explicitly define file modes for archived headers (stable-fixes).
- knfsd: LOOKUP can return an illegal error value (git-fixes).
- kobject_uevent: Fix OOB access within zap_modalias_env() (git-fixes).
- kprobe/ftrace: bail out if ftrace was killed (git-fixes).
- kprobe/ftrace: fix build error due to bad function definition (git-fixes).
- kprobes: Fix possible use-after-free issue on kprobe registration (git-fixes).
- kselftest: Add a ksft_perror() helper (stable-fixes).
- kunit/fortify: Fix mismatched kvalloc()/vfree() usage (git-fixes).
- kunit: Fix checksum tests on big endian CPUs (git-fixed).
- leds: flash: leds-qcom-flash: Test the correct variable in init (git-fixes).
- leds: mt6360: Fix memory leak in mt6360_init_isnk_properties() (git-fixes).
- leds: pwm: Disable PWM when going to suspend (git-fixes).
- leds: ss4200: Convert PCIBIOS_* return codes to errnos (git-fixes).
- leds: trigger: Unregister sysfs attributes before calling deactivate() (git-fixes).
- leds: triggers: Flush pending brightness before activating trigger (git-fixes).
- lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (git-fixes).
- lib: objagg: Fix general protection fault (git-fixes).
- lib: objagg: Fix spelling (git-fixes).
- lib: test_objagg: Fix spelling (git-fixes).
- libceph: fix race between delayed_work() and ceph_monc_stop() (bsc#1228192).
- libnvdimm: Fix ACPI_NFIT in BLK_DEV_PMEM help (jsc#PED-5853).
- libperf evlist: Avoid out-of-bounds access (git-fixes).
- libsubcmd: Fix parse-options memory leak (git-fixes).
- livepatch: Fix missing newline character in klp_resolve_symbols() (bsc#1223539).
- locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock (git-fixes)
- lsm: fix the logic in security_inode_getsecctx() (git-fixes).
- mISDN: Fix a use after free in hfcmulti_tx() (git-fixes).
- mISDN: fix MISDN_TIME_STAMP handling (git-fixes).
- mac802154: fix llsec key resources release in mac802154_llsec_key_del (git-fixes).
- mac802154: fix time calculation in ieee802154_configure_durations() (git-fixes).
- mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable() (git-fixes).
- maple_tree: fix mas_empty_area_rev() null pointer dereference (git-fixes).
- md/dm-raid: do not call md_reap_sync_thread() directly (jsc#PED-7542).
- md/raid1-10: add a helper raid1_check_read_range() (jsc#PED-7542).
- md/raid1-10: factor out a new helper raid1_should_read_first() (jsc#PED-7542).
- md/raid1: factor out choose_bb_rdev() from read_balance() (jsc#PED-7542).
- md/raid1: factor out choose_slow_rdev() from read_balance() (jsc#PED-7542).
- md/raid1: factor out helpers to add rdev to conf (jsc#PED-7542).
- md/raid1: factor out helpers to choose the best rdev from read_balance() (jsc#PED-7542).
- md/raid1: factor out read_first_rdev() from read_balance() (jsc#PED-7542).
- md/raid1: factor out the code to manage sequential IO (jsc#PED-7542).
- md/raid1: fix choose next idle in read_balance() (jsc#PED-7542).
- md/raid1: record nonrot rdevs while adding/removing rdevs to conf (jsc#PED-7542).
- md: Do not clear MD_CLOSING when the raid is about to stop (jsc#PED-7542).
- md: add a new helper rdev_has_badblock() (jsc#PED-7542).
- md: add a new helper reshape_interrupted() (jsc#PED-7542).
- md: changed the switch of RAID_VERSION to if (jsc#PED-7542).
- md: check mddev-&gt;pers before calling md_set_readonly() (jsc#PED-7542).
- md: clean up invalid BUG_ON in md_ioctl (jsc#PED-7542).
- md: clean up openers check in do_md_stop() and md_set_readonly() (jsc#PED-7542).
- md: do not clear MD_RECOVERY_FROZEN for new dm-raid until resume (jsc#PED-7542).
- md: export helper md_is_rdwr() (jsc#PED-7542).
- md: export helpers to stop sync_thread (jsc#PED-7542).
- md: factor out a helper to sync mddev (jsc#PED-7542).
- md: fix kmemleak of rdev-&gt;serial (jsc#PED-7542).
- md: get rdev-&gt;mddev with READ_ONCE() (jsc#PED-7542).
- md: merge the check of capabilities into md_ioctl_valid() (jsc#PED-7542).
- md: preserve KABI in struct md_personality (jsc#PED-7542).
- md: remove redundant check of 'mddev-&gt;sync_thread' (jsc#PED-7542).
- md: remove redundant md_wakeup_thread() (jsc#PED-7542).
- md: return directly before setting did_set_md_closing (jsc#PED-7542).
- md: sync blockdev before stopping raid or setting readonly (jsc#PED-7542).
- md: use RCU lock to protect traversal in md_spares_need_change() (jsc#PED-7542).
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries (git-fixes).
- media: cadence: csi2rx: use match fwnode for media link (git-fixes).
- media: cec: core: remove length check of Timer Status (stable-fixes).
- media: dt-bindings: ovti,ov2680: Fix the power supply names (git-fixes).
- media: dvb-frontends: tda10048: Fix integer overflow (stable-fixes).
- media: dvb-frontends: tda18271c2dd: Remove casting during div (stable-fixes).
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() (git-fixes).
- media: dvb-usb: dib0700_devices: Add missing release_firmware() (stable-fixes).
- media: dvb: as102-fe: Fix as10x_register_addr packing (stable-fixes).
- media: dvbdev: Initialize sbuf (stable-fixes).
- media: dw2102: Do not translate i2c read into write (stable-fixes).
- media: dw2102: fix a potential buffer overflow (git-fixes).
- media: flexcop-usb: fix sanity check of bNumEndpoints (git-fixes).
- media: i2c: Fix imx412 exposure control (git-fixes).
- media: i2c: et8ek8: Do not strip remove function when driver is builtin (git-fixes).
- media: imon: Fix race getting ictx-&gt;lock (git-fixes).
- media: imx-jpeg: Drop initial source change event if capture has been setup (git-fixes).
- media: imx-jpeg: Remove some redundant error logs (git-fixes).
- media: imx-pxp: Fix ERR_PTR dereference in pxp_probe() (git-fixes).
- media: ipu3-cio2: Request IRQ earlier (git-fixes).
- media: lgdt3306a: Add a check against null-pointer-def (stable-fixes).
- media: mc: Fix flags handling when creating pad links (stable-fixes).
- media: mc: Fix graph walk in media_pipeline_start (git-fixes).
- media: mc: Rename pad variable to clarify intent (stable-fixes).
- media: mc: mark the media devnode as registered from the, start (git-fixes).
- media: mxl5xx: Move xpt structures off stack (stable-fixes).
- media: ngene: Add dvb_ca_en50221_init return value check (git-fixes).
- media: pci: ivtv: Add check for DMA map result (git-fixes).
- media: radio-shark2: Avoid led_names truncations (git-fixes).
- media: rcar-vin: Fix YUYV8_1X16 handling for CSI-2 (git-fixes).
- media: rcar-vin: work around -Wenum-compare-conditional warning (git-fixes).
- media: renesas: vsp1: Fix _irqsave and _irq mix (git-fixes).
- media: renesas: vsp1: Store RPF partition configuration per RPF instance (git-fixes).
- media: rkisp1: Fix IRQ handling due to shared interrupts (stable-fixes).
- media: s2255: Use refcount_t instead of atomic_t for num_channels (stable-fixes).
- media: sta2x11: fix irq handler cast (stable-fixes).
- media: stk1160: fix bounds checking in stk1160_copy_video() (git-fixes).
- media: sunxi: a83-mips-csi2: also select GENERIC_PHY (git-fixes).
- media: uvcvideo: Add quirk for Logitech Rally Bar (git-fixes).
- media: uvcvideo: Fix integer overflow calculating timestamp (git-fixes).
- media: uvcvideo: Override default flags (git-fixes).
- media: v4l2-core: hold videodev_lock until dev reg, finishes (stable-fixes).
- media: v4l2-subdev: Fix stream handling for crop API (git-fixes).
- media: v4l: Do not turn on privacy LED if streamon fails (git-fixes).
- media: v4l: async: Fix NULL pointer dereference in adding ancillary links (git-fixes).
- media: v4l: subdev: Fix typo in documentation (git-fixes).
- media: venus: fix use after free in vdec_close (git-fixes).
- media: venus: flush all buffers in output plane streamoff (git-fixes).
- mei: demote client disconnect warning on suspend to debug (stable-fixes).
- mei: me: add arrow lake point H DID (stable-fixes).
- mei: me: add arrow lake point S DID (stable-fixes).
- mei: me: add lunar lake point M DID (stable-fixes).
- mei: me: disable RPL-S on SPS and IGN firmwares (git-fixes).
- mei: me: release irq in mei_me_pci_resume error path (git-fixes).
- mfd: omap-usb-tll: Use struct_size to allocate tll (git-fixes).
- mfd: pm8008: Fix regmap irq chip initialisation (git-fixes).
- misc: fastrpc: Avoid updating PD type for capability request (git-fixes).
- misc: fastrpc: Copy the complete capability structure to user (git-fixes).
- misc: fastrpc: Fix DSP capabilities request (git-fixes).
- misc: fastrpc: Fix memory leak in audio daemon attach operation (git-fixes).
- misc: fastrpc: Fix ownership reassignment of remote heap (git-fixes).
- misc: fastrpc: Restrict untrusted app to attach to privileged PD (git-fixes).
- misc: microchip: pci1xxxx: Fix a memory leak in the error handling of gp_aux_bus_probe() (git-fixes).
- misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe() (git-fixes).
- mlxbf_gige: call request_irq() after NAPI initialized (git-fixes).
- mlxbf_gige: stop PHY during open() error paths (git-fixes).
- mlxbf_gige: stop interface during shutdown (git-fixes).
- mlxsw: Use refcount_t for reference counting (git-fixes).
- mm,page_owner: Defer enablement of static branch (bsc#1222366).
- mm,page_owner: Fix accounting of pages when migrating (bsc#1222366).
- mm,page_owner: Fix printing of stack records (bsc#1222366).
- mm,page_owner: Fix refcount imbalance (bsc#1222366).
- mm,page_owner: Update metadata for tail pages (bsc#1222366).
- mm,page_owner: check for null stack_record before bumping its refcount (bsc#1222366).
- mm,page_owner: drop unnecessary check (bsc#1222366).
- mm,page_owner: fix recursion (bsc#1222366).
- mm/slab: make __free(kfree) accept error pointers (git-fixes).
- mm: memcg: do not periodically flush stats when memcg is disabled (bsc#1222525).
- mm: memcg: use larger batches for proactive reclaim (bsc#1222522).
- mm: page_owner: fix wrong information in dump_page_owner (git-fixes).
- mm_init kABI workaround (git-fixes).
- mmc: core: Add HS400 tuning in HS400es initialization (stable-fixes).
- mmc: core: Add mmc_gpiod_set_cd_config() function (stable-fixes).
- mmc: core: Avoid negative index with array access (git-fixes).
- mmc: core: Do not force a retune before RPMB switch (stable-fixes).
- mmc: core: Initialize mmc_blk_ioc_data (git-fixes).
- mmc: davinci: Do not strip remove function when driver is builtin (git-fixes).
- mmc: omap: fix broken slot switch lookup (git-fixes).
- mmc: omap: fix deferred probe (git-fixes).
- mmc: omap: restore original power up/down steps (git-fixes).
- mmc: sdhci-acpi: Add quirk to enable pull-up on the card-detect GPIO on Asus T100TA (git-fixes).
- mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A (stable-fixes).
- mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working (stable-fixes).
- mmc: sdhci-acpi: Sort DMI quirks alphabetically (stable-fixes).
- mmc: sdhci-brcmstb: check R1_STATUS for erase/trim/discard (git-fixes).
- mmc: sdhci-msm: pervent access to suspended controller (git-fixes).
- mmc: sdhci-omap: re-tuning is needed after a pm transition to support emmc HS200 mode (git-fixes).
- mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos (git-fixes).
- mmc: sdhci: Add support for "Tuning Error" interrupts (stable-fixes).
- mmc: sdhci: Do not invert write-protect twice (git-fixes).
- mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() (git-fixes).
- mmc: sdhci_am654: Add ITAPDLYSEL in sdhci_j721e_4bit_set_clock (git-fixes).
- mmc: sdhci_am654: Add OTAP/ITAP delay enable (git-fixes).
- mmc: sdhci_am654: Add tuning algorithm for delay chain (git-fixes).
- mmc: sdhci_am654: Fix ITAPDLY for HS400 timing (git-fixes).
- mmc: sdhci_am654: Write ITAPDLY for DDR52 timing (git-fixes).
- modpost: Add '.ltext' and '.ltext.*' to TEXT_SECTIONS (stable-fixes).
- module: do not ignore sysfs_create_link() failures (git-fixes).
- mptcp: Remove unnecessary test for __mptcp_init_sock() (git-fixes).
- mptcp: annotate data-races around msk-&gt;rmem_fwd_alloc (git-fixes).
- mptcp: fix bogus receive window shrinkage with multiple subflows (git-fixes).
- mptcp: move __mptcp_error_report in protocol.c (git-fixes).
- mptcp: process pending subflow error on close (git-fixes).
- mt76: connac: move more mt7921/mt7915 mac shared code in connac lib (bsc#1227149).
- mt76: mt7996: rely on mt76_sta_stats in mt76_wcid (bsc#1227149).
- mtd: core: Report error if first mtd_otp_size() call fails in mtd_otp_nvmem_add() (git-fixes).
- mtd: diskonchip: work around ubsan link failure (stable-fixes).
- mtd: partitions: redboot: Added conversion of operands to a larger type (stable-fixes).
- mtd: rawnand: Bypass a couple of sanity checks during NAND identification (git-fixes).
- mtd: rawnand: Ensure ECC configuration is propagated to upper layers (git-fixes).
- mtd: rawnand: Fix the nand_read_data_op() early check (git-fixes).
- mtd: rawnand: hynix: fixed typo (git-fixes).
- mtd: rawnand: rockchip: ensure NVDDR timings are rejected (git-fixes).
- mtd: spinand: Add support for 5-byte IDs (stable-fixes).
- net/dcb: check for detached device before executing callbacks (bsc#1215587).
- net/mlx5: Correctly compare pkt reformat ids (git-fixes).
- net/mlx5: E-switch, Change flow rule destination checking (git-fixes).
- net/mlx5: E-switch, store eswitch pointer before registering devlink_param (git-fixes).
- net/mlx5: Fix MTMP register capability offset in MCAM register (git-fixes).
- net/mlx5: Fix fw reporter diagnose output (git-fixes).
- net/mlx5: Fix peer devlink set for SF representor devlink port (git-fixes).
- net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (git-fixes).
- net/mlx5: Properly link new fs rules into the tree (git-fixes).
- net/mlx5: Register devlink first under devlink lock (git-fixes).
- net/mlx5: Restore mistakenly dropped parts in register devlink flow (git-fixes).
- net/mlx5: SF, Stop waiting for FW as teardown was called (git-fixes).
- net/mlx5: offset comp irq index in name by one (git-fixes).
- net/mlx5e: Change the warning when ignore_flow_level is not supported (git-fixes).
- net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit (git-fixes).
- net/mlx5e: Fix MACsec state loss upon state update in offload path (git-fixes).
- net/mlx5e: Fix mlx5e_priv_init() cleanup flow (git-fixes).
- net/mlx5e: HTB, Fix inconsistencies with QoS SQs number (git-fixes).
- net/mlx5e: RSS, Block XOR hash with over 128 channels (git-fixes).
- net/mlx5e: RSS, Block changing channels number when RXFH is configured (git-fixes).
- net/mlx5e: Switch to using _bh variant of of spinlock API in port timestamping NAPI poll context (git-fixes).
- net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (git-fixes).
- net/smc: bugfix for smcr v2 server connect success statistic (git-fixes).
- net/smc: fix documentation of buffer sizes (git-fixes).
- net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add (git-fixes).
- net/x25: fix incorrect parameter validation in the x25_getsockopt() function (git-fixes).
- net: NSH: fix kernel-doc notation warning (git-fixes).
- net: Use sockaddr_storage for getsockopt(SO_PEERNAME) (git-fixes).
- net: add netdev_lockdep_set_classes() to virtual drivers (git-fixes).
- net: annotate data-races around sk-&gt;sk_bind_phc (git-fixes).
- net: annotate data-races around sk-&gt;sk_forward_alloc (git-fixes).
- net: annotate data-races around sk-&gt;sk_lingertime (git-fixes).
- net: annotate data-races around sk-&gt;sk_tsflags (git-fixes).
- net: bonding: remove kernel-doc comment marker (git-fixes).
- net: can: j1939: Initialize unused data in j1939_send_one() (git-fixes).
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (git-fixes).
- net: can: j1939: recover socket queue on CAN bus error during BAM transmission (git-fixes).
- net: cfg802154: fix kernel-doc notation warnings (git-fixes).
- net: dsa: microchip: fix register write order in ksz8_ind_write8() (git-fixes).
- net: dsa: mt7530: fix handling of all link-local frames (git-fixes).
- net: dsa: mt7530: fix link-local frames that ingress vlan filtering ports (git-fixes).
- net: dsa: mt7530: prevent possible incorrect XTAL frequency selection (git-fixes).
- net: dsa: mt7530: trap link-local frames regardless of ST Port State (git-fixes).
- net: dsa: sja1105: Fix parameters order in sja1110_pcs_mdio_write_c45() (git-fixes).
- net: ena: Fix incorrect descriptor free behavior (git-fixes).
- net: ena: Fix potential sign extension issue (git-fixes).
- net: ena: Fix redundant device NUMA node override (jsc#PED-8688).
- net: ena: Move XDP code to its new files (git-fixes).
- net: ena: Pass ena_adapter instead of net_device to ena_xmit_common() (git-fixes).
- net: ena: Remove ena_select_queue (git-fixes).
- net: ena: Set tx_info-&gt;xdpf value to NULL (git-fixes).
- net: ena: Use tx_ring instead of xdp_ring for XDP channel TX (git-fixes).
- net: ena: Wrong missing IO completions check order (git-fixes).
- net: ethernet: mtk_eth_soc: fix PPE hanging issue (git-fixes).
- net: ethernet: mtk_wed: introduce mtk_wed_buf structure (bsc#1227149).
- net: ethernet: mtk_wed: rename mtk_rxbm_desc in mtk_wed_bm_desc (bsc#1227149).
- net: ethernet: ti: cpsw: enable mac_managed_pm to fix mdio (git-fixes).
- net: fec: Set mac_managed_pm during probe (git-fixes).
- net: fill in MODULE_DESCRIPTION()s in kuba@'s modules (bsc#1227149).
- net: hns3: Remove io_stop_wc() calls after __iowrite64_copy() (bsc#1226502)
- net: hns3: fix index limit to support all queue stats (git-fixes).
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices (git-fixes).
- net: hns3: fix kernel crash when devlink reload during pf initialization (git-fixes).
- net: hns3: fix port duplex configure error in IMP reset (git-fixes).
- net: hns3: fix wrong judgment condition issue (git-fixes).
- net: hns3: mark unexcuted loopback test result as UNEXECUTED (git-fixes).
- net: hns3: tracing: fix hclgevf trace event strings (git-fixes).
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (git-fixes).
- net: ks8851: Handle softirqs at the end of IRQ thread to fix hang (git-fixes).
- net: ks8851: Inline ks8851_rx_skb() (git-fixes).
- net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs (git-fixes).
- net: lan743x: Add set RFE read fifo threshold for PCI1x1x chips (git-fixes).
- net: lan743x: Support WOL at both the PHY and MAC appropriately (git-fixes).
- net: lan743x: disable WOL upon resume to restore full data path operation (git-fixes).
- net: libwx: fix memory leak on free page (git-fixes).
- net: ll_temac: platform_get_resource replaced by wrong function (git-fixes).
- net: llc: fix kernel-doc notation warnings (git-fixes).
- net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() (stable-fixes).
- net: mana: Enable MANA driver on ARM64 with 4K page size (jsc#PED-8491).
- net: mana: Fix Rx DMA datasize and skb_over_panic (git-fixes).
- net: mana: Fix possible double free in error handling path (git-fixes).
- net: mana: Fix the extra HZ in mana_hwc_send_request (git-fixes).
- net: mediatek: mtk_eth_soc: clear MAC_MCR_FORCE_LINK only when MAC is up (git-fixes).
- net: nfc: remove inappropriate attrs check (stable-fixes).
- net: pcs: xpcs: Return EINVAL in the internal methods (git-fixes).
- net: phy: Micrel KSZ8061: fix errata solution not taking effect problem (git-fixes).
- net: phy: fix phy_read_poll_timeout argument type in genphy_loopback (git-fixes).
- net: phy: micrel: Fix potential null pointer dereference (git-fixes).
- net: phy: micrel: add Microchip KSZ 9477 to the device table (git-fixes).
- net: phy: micrel: fix KSZ9477 PHY issues after suspend/resume (git-fixes).
- net: phy: micrel: lan8814: Fix when enabling/disabling 1-step timestamping (git-fixes).
- net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8061 (git-fixes).
- net: phy: microchip: lan87xx: reinit PHY after cable test (git-fixes).
- net: phy: mxl-gpy: Remove interrupt mask clearing from config_init (git-fixes).
- net: phy: phy_device: Fix PHY LED blinking code comment (git-fixes).
- net: phy: phy_device: Prevent nullptr exceptions on ISR (git-fixes).
- net: phy: phy_device: Prevent nullptr exceptions on ISR (stable-fixes).
- net: ravb: Always process TX descriptor ring (git-fixes).
- net: ravb: Always update error counters (git-fixes).
- net: ravb: Let IP-specific receive function to interrogate descriptors (git-fixes).
- net: smsc95xx: add support for SYS TEC USB-SPEmodule1 (git-fixes).
- net: sparx5: Fix use after free inside sparx5_del_mact_entry (git-fixes).
- net: sparx5: fix wrong config being used when reconfiguring PCS (git-fixes).
- net: sparx5: flower: fix fragment flags handling (git-fixes).
- net: stmmac: Fix incorrect dereference in interrupt handlers (git-fixes).
- net: stmmac: dwmac-starfive: Add support for JH7100 SoC (git-fixes).
- net: stmmac: fix rx queue priority assignment (git-fixes).
- net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() (git-fixes).
- net: tcp: fix unexcepted socket die when snd_wnd is 0 (git-fixes).
- net: tls, fix WARNIING in __sk_msg_free (bsc#1221858).
- net: tls: fix returned read length with async decrypt (bsc#1221858).
- net: tls: fix use-after-free with partial reads and async (bsc#1221858).
- net: usb: ax88179_178a: avoid the interface always configured as random address (git-fixes).
- net: usb: ax88179_178a: avoid writing the mac address before first reading (git-fixes).
- net: usb: ax88179_178a: fix link status when link is set to down/up (git-fixes).
- net: usb: ax88179_178a: improve link status logs (git-fixes).
- net: usb: ax88179_178a: improve reset check (git-fixes).
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize (git-fixes).
- net: usb: qmi_wwan: add Telit FN912 compositions (stable-fixes).
- net: usb: qmi_wwan: add Telit FN920C04 compositions (git-fixes).
- net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings (git-fixes).
- net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM (git-fixes).
- net: usb: smsc95xx: stop lying about skb-&gt;truesize (git-fixes).
- net: usb: sr9700: stop lying about skb-&gt;truesize (git-fixes).
- net: veth: do not manipulate GRO when using XDP (git-fixes).
- net: wwan: t7xx: Split 64bit accesses to fix alignment issues (git-fixes).
- net:usb:qmi_wwan: support Rolling modules (stable-fixes).
- netfilter: nf_tables: disable toggling dormant table state more than once (git-fixes).
- netfilter: nf_tables: uapi: Describe NFTA_RULE_CHAIN_ID (git-fixes).
- netfilter: nft_ct: fix l3num expectations with inet pseudo family (git-fixes).
- netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention (git-fixes).
- nf_conntrack: fix -Wunused-const-variable= (git-fixes).
- nfc/nci: Add the inconsistency check between the input data length and count (stable-fixes).
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (git-fixes).
- nfc: nci: Fix kcov check in nci_rx_work() (git-fixes).
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (git-fixes).
- nfc: nci: Fix uninit-value in nci_rx_work (git-fixes).
- nfp: flower: handle acti_netdevs allocation failure (git-fixes).
- nfs: Avoid flushing many pages with NFS_FILE_SYNC (bsc#1218442).
- nfs: Block on write congestion (bsc#1218442).
- nfs: Bump default write congestion size (bsc#1218442).
- nfs: Drop pointless check from nfs_commit_release_pages() (bsc#1218442).
- nfs: Fix up kabi after adding write_congestion_wait (bsc#1218442).
- nfs: Handle error of rpc_proc_register() in nfs_net_init() (git-fixes).
- nfs: Properly initialize server-&gt;writeback (bsc#1218442).
- nfs: drop the incorrect assertion in nfs_swap_rw() (git-fixes).
- nfs: fix panic when nfs4_ff_layout_prepare_ds() fails (git-fixes).
- nfs: fix undefined behavior in nfs_block_bits() (git-fixes).
- nfs: keep server info for remounts (git-fixes).
- nfsd: Fix a regression in nfsd_setattr() (git-fixes).
- nfsd: do not call locks_release_private() twice concurrently (git-fixes).
- nfsd: hold a lighter-weight client reference over CB_RECALL_ANY (git-fixes).
- nfsd: optimise recalculate_deny_mode() for a common case (bsc#1217912).
- nfsd: use __fput_sync() to avoid delayed closing of files (bsc#1223380 bsc#1217408).
- nilfs2: add missing check for inode numbers on directory entries (stable-fixes).
- nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro (git-fixes).
- nilfs2: convert persistent object allocator to use kmap_local (git-fixes).
- nilfs2: fix OOB in nilfs_set_de_type (git-fixes).
- nilfs2: fix incorrect inode allocation from reserved inodes (git-fixes).
- nilfs2: fix inode number range checks (stable-fixes).
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (git-fixes).
- nilfs2: fix out-of-range warning (git-fixes).
- nilfs2: fix potential bug in end_buffer_async_write (git-fixes).
- nilfs2: fix potential hang in nilfs_detach_log_writer() (git-fixes).
- nilfs2: fix unexpected freezing of nilfs_segctor_sync() (git-fixes).
- nilfs2: fix use-after-free of timer for log writer thread (git-fixes).
- nilfs2: make superblock data array index computation sparse friendly (git-fixes).
- nilfs2: return the mapped address from nilfs_get_page() (stable-fixes).
- nouveau/dmem: handle kcalloc() allocation failure (git-fixes).
- nouveau/gsp: do not check devinit disable on GSP (git-fixes).
- nouveau/uvmm: fix addr/range calcs for remap operations (git-fixes).
- nouveau: add an ioctl to report vram usage (stable-fixes).
- nouveau: add an ioctl to return vram bar size (stable-fixes).
- nouveau: fix devinit paths to only handle display on GSP (git-fixes).
- nouveau: fix function cast warning (git-fixes).
- nouveau: fix instmem race condition around ptr stores (git-fixes).
- nouveau: lock the client object tree (stable-fixes).
- nouveau: report byte usage in VRAM usage (git-fixes).
- nouveau: reset the bo resource bus info after an eviction (git-fixes).
- nvdimm/pmem: Treat alloc_dax() -EOPNOTSUPP failure as non-fatal (jsc#PED-5853).
- nvdimm/pmem: fix leak on dax_add_host() failure (jsc#PED-5853).
- nvdimm: make nvdimm_bus_type const (jsc#PED-5853).
- nvme-fabrics: short-circuit reconnect retries (bsc#1186716).
- nvme-fc: do not wait in vain when unloading module (git-fixes).
- nvme-multipath: fix io accounting on failover (git-fixes).
- nvme-pci: Add quirk for broken MSIs (git-fixes).
- nvme-tcp: Export the nvme_tcp_wq to sysfs (bsc#1224049).
- nvme-tcp: strict pdu pacing to avoid send stalls on TLS (bsc#1221858).
- nvme/tcp: Add wq_unbound modparam for nvme_tcp_wq (bsc#1224049).
- nvme: cancel pending I/O if nvme controller is in terminal state (bsc#1226503).
- nvme: do not retry authentication failures (bsc#1186716).
- nvme: find numa distance only if controller has valid numa id (git-fixes).
- nvme: fix multipath batched completion accounting (git-fixes).
- nvme: fix nvme_pr_* status code parsing (git-fixes).
- nvme: fix reconnection fail due to reserved tag allocation (git-fixes).
- nvme: fix warn output about shared namespaces without CONFIG_NVME_MULTIPATH (git-fixes).
- nvme: return kernel error codes for admin queue connect (bsc#1186716).
- nvmet-auth: replace pr_debug() with pr_err() to report an error (git-fixes).
- nvmet-auth: return the error code to the nvmet_auth_host_hash() callers (git-fixes).
- nvmet-fc: abort command when there is no binding (git-fixes).
- nvmet-fc: avoid deadlock on delete association path (git-fixes).
- nvmet-fc: defer cleanup using RCU properly (git-fixes).
- nvmet-fc: hold reference on hostport match (git-fixes).
- nvmet-fc: release reference on target port (git-fixes).
- nvmet-fc: take ref count on tgtport before delete assoc (git-fixes).
- nvmet-fcloop: swap the list_add_tail arguments (git-fixes).
- nvmet-passthru: propagate status from id override functions (git-fixes).
- nvmet-tcp: fix nvme tcp ida memory leak (git-fixes).
- nvmet-tcp: fix possible memory leak when tearing down a controller (git-fixes).
- nvmet: fix ns enable/disable possible hang (git-fixes).
- nvmet: fix nvme status code when namespace is disabled (git-fixes).
- nvmet: lock config semaphore when accessing DH-HMAC-CHAP key (bsc#1186716).
- nvmet: prevent sprintf() overflow in nvmet_subsys_nsid_exists() (git-fixes).
- nvmet: return DHCHAP status codes from nvmet_setup_auth() (bsc#1186716).
- ocfs2: adjust enabling place for la window (bsc#1219224).
- ocfs2: fix DIO failure due to insufficient transaction credits (git-fixes).
- ocfs2: fix races between hole punching and AIO+DIO (git-fixes).
- ocfs2: fix sparse warnings (bsc#1219224).
- ocfs2: improve write IO performance when fragmentation is high (bsc#1219224).
- ocfs2: speed up chain-list searching (bsc#1219224).
- ocfs2: use coarse time for new created files (git-fixes).
- octeontx2-af: Add array index check (git-fixes).
- octeontx2-af: Fix NIX SQ mode and BP config (git-fixes).
- octeontx2-af: Fix devlink params (git-fixes).
- octeontx2-af: Fix issue with loading coalesced KPU profiles (git-fixes).
- octeontx2-af: Use matching wake_up API variant in CGX command interface (git-fixes).
- octeontx2-af: Use separate handlers for interrupts (git-fixes).
- octeontx2-pf: Fix transmit scheduler resource leak (git-fixes).
- octeontx2-pf: Send UP messages to VF only when VF is up (git-fixes).
- octeontx2-pf: Use default max_active works instead of one (git-fixes).
- octeontx2-pf: Wait till detach_resources msg is complete (git-fixes).
- octeontx2-pf: check negative error code in otx2_open() (git-fixes).
- octeontx2-pf: fix FLOW_DIS_IS_FRAGMENT implementation (git-fixes).
- octeontx2: Detect the mbox up or down message via register (git-fixes).
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals (git-fixes).
- of: module: add buffer overflow check in of_modalias() (git-fixes).
- of: module: prevent NULL pointer dereference in vsnprintf() (stable-fixes).
- of: property: Add in-ports/out-ports support to of_graph_get_port_parent() (stable-fixes).
- of: property: Improve finding the consumer of a remote-endpoint property (git-fixes).
- of: property: Improve finding the supplier of a remote-endpoint property (git-fixes).
- of: property: fix typo in io-channels (git-fixes).
- of: property: fw_devlink: Fix stupid bug in remote-endpoint parsing (git-fixes).
- of: unittest: Fix compile in the non-dynamic case (git-fixes).
- orangefs: fix out-of-bounds fsid access (git-fixes).
- overflow: Allow non-type arg to type_max() and type_min() (stable-fixes).
- pNFS/filelayout: fixup pNfs allocation modes (git-fixes).
- peci: linux/peci.h: fix Excess kernel-doc description warning (git-fixes).
- perf annotate: Fix annotation_calc_lines() to pass correct address to get_srcline() (git-fixes).
- perf annotate: Get rid of duplicate --group option item (git-fixes).
- perf auxtrace: Fix multiple use of --itrace option (git-fixes).
- perf bench internals inject-build-id: Fix trap divide when collecting just one DSO (git-fixes).
- perf bench uprobe: Remove lib64 from libc.so.6 binary path (git-fixes).
- perf bpf: Clean up the generated/copied vmlinux.h (git-fixes).
- perf daemon: Fix file leak in daemon_session__control (git-fixes).
- perf docs: Document bpf event modifier (git-fixes).
- perf evsel: Fix duplicate initialization of data-&gt;id in evsel__parse_sample() (git-fixes).
- perf expr: Fix "has_event" function for metric style events (git-fixes).
- perf intel-pt: Fix unassigned instruction op (discovered by MemorySanitizer) (git-fixes).
- perf jevents: Drop or simplify small integer values (git-fixes).
- perf list: fix short description for some cache events (git-fixes).
- perf lock contention: Add a missing NULL check (git-fixes).
- perf metric: Do not remove scale from counts (git-fixes).
- perf pmu: Count sys and cpuid JSON events separately (git fixes).
- perf pmu: Fix a potential memory leak in perf_pmu__lookup() (git-fixes).
- perf pmu: Treat the msr pmu as software (git-fixes).
- perf print-events: make is_event_supported() more robust (git-fixes).
- perf probe: Add missing libgen.h header needed for using basename() (git-fixes).
- perf record: Check conflict between '--timestamp-filename' option and pipe mode before recording (git-fixes).
- perf record: Delete session after stopping sideband thread (git-fixes).
- perf record: Fix debug message placement for test consumption (git-fixes).
- perf record: Fix possible incorrect free in record__switch_output() (git-fixes).
- perf report: Avoid SEGV in report__setup_sample_type() (git-fixes).
- perf sched timehist: Fix -g/--call-graph option failure (git-fixes).
- perf script: Show also errors for --insn-trace option (git-fixes).
- perf srcline: Add missed addr2line closes (git-fixes).
- perf stat: Avoid metric-only segv (git-fixes).
- perf stat: Do not display metric header for non-leader uncore events (git-fixes).
- perf stat: Do not fail on metrics on s390 z/VM systems (git-fixes).
- perf symbols: Fix ownership of string in dso__load_vmlinux() (git-fixes).
- perf test shell arm_coresight: Increase buffer size for Coresight basic tests (git-fixes).
- perf tests: Apply attributes to all events in object code reading test (git-fixes).
- perf tests: Make "test data symbol" more robust on Neoverse N1 (git-fixes).
- perf tests: Make data symbol test wait for perf to start (bsc#1220045).
- perf tests: Skip data symbol test if buf1 symbol is missing (bsc#1220045).
- perf thread: Fixes to thread__new() related to initializing comm (git-fixes).
- perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() (git-fixes).
- perf top: Uniform the event name for the hybrid machine (git-fixes).
- perf top: Use evsel's cpus to replace user_requested_cpus (git-fixes).
- perf ui browser: Avoid SEGV on title (git fixes).
- perf ui browser: Do not save pointer to stack memory (git-fixes).
- perf vendor events amd: Add Zen 4 memory controller events (git-fixes).
- perf vendor events amd: Fix Zen 4 cache latency events (git-fixes).
- perf/x86/amd/core: Avoid register reset when CPU is dead (git-fixes).
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and later (git-fixes).
- perf/x86/amd/lbr: Discard erroneous branch entries (git-fixes).
- perf/x86/amd/lbr: Use freeze based on availability (git-fixes).
- perf/x86/intel/ds: Do not clear -&gt;pebs_data_cfg for the last PEBS event (git-fixes).
- perf/x86/intel: Expose existence of callback support to KVM (git-fixes).
- perf/x86: Fix out of range data (git-fixes).
- phy: cadence-torrent: Check return value on register read (git-fixes).
- phy: freescale: imx8m-pcie: fix pcie link-up instability (git-fixes).
- phy: marvell: a3700-comphy: Fix hardcoded array size (git-fixes).
- phy: marvell: a3700-comphy: Fix out of bounds read (git-fixes).
- phy: rockchip-snps-pcie3: fix bifurcation on rk3588 (git-fixes).
- phy: rockchip-snps-pcie3: fix clearing PHP_GRF_PCIESEL_CON bits (git-fixes).
- phy: rockchip: naneng-combphy: Fix mux on rk3588 (git-fixes).
- phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered (git-fixes).
- pinctrl/meson: fix typo in PDM's pin name (git-fixes).
- pinctrl: armada-37xx: remove an unused variable (git-fixes).
- pinctrl: baytrail: Fix selecting gpio pinctrl state (git-fixes).
- pinctrl: core: delete incorrect free in pinctrl_enable() (git-fixes).
- pinctrl: core: fix possible memory leak when pinctrl_enable() fails (git-fixes).
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (git-fixes).
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (git-fixes).
- pinctrl: freescale: mxs: Fix refcount of child (git-fixes).
- pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback (git-fixes).
- pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE (git-fixes).
- pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T (git-fixes).
- pinctrl: qcom: pinctrl-sm7150: Fix sdc1 and ufs special pins regs (git-fixes).
- pinctrl: qcom: spmi-gpio: drop broken pm8008 support (git-fixes).
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs (stable-fixes).
- pinctrl: renesas: r8a779g0: FIX PWM suffixes (git-fixes).
- pinctrl: renesas: r8a779g0: Fix (H)SCIF1 suffixes (git-fixes).
- pinctrl: renesas: r8a779g0: Fix (H)SCIF3 suffixes (git-fixes).
- pinctrl: renesas: r8a779g0: Fix CANFD5 suffix (git-fixes).
- pinctrl: renesas: r8a779g0: Fix FXR_TXEN[AB] suffixes (git-fixes).
- pinctrl: renesas: r8a779g0: Fix IRQ suffixes (git-fixes).
- pinctrl: renesas: r8a779g0: Fix TCLK suffixes (git-fixes).
- pinctrl: renesas: r8a779g0: Fix TPU suffixes (git-fixes).
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins (git-fixes).
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins (git-fixes).
- pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set (git-fixes).
- pinctrl: rockchip: update rk3308 iomux routes (git-fixes).
- pinctrl: rockchip: use dedicated pinctrl type for RK3328 (git-fixes).
- pinctrl: single: fix possible memory leak when pinctrl_enable() fails (git-fixes).
- pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails (git-fixes).
- platform/chrome: cros_ec_debugfs: fix wrong EC message version (git-fixes).
- platform/chrome: cros_ec_uart: properly fix race condition (git-fixes).
- platform/x86/amd/pmc: Extend Framework 13 quirk to more BIOSes (stable-fixes).
- platform/x86/intel-uncore-freq: Do not present root domain on error (git-fixes).
- platform/x86/intel/tpmi: Handle error from tpmi_process_info() (stable-fixes).
- platform/x86: ISST: Add Grand Ridge to HPM CPU list (stable-fixes).
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list (stable-fixes).
- platform/x86: dell-smbios: Fix wrong token data in sysfs (git-fixes).
- platform/x86: intel-vbtn: Update tablet mode switch at end of probe (git-fixes).
- platform/x86: lg-laptop: Change ACPI device id (stable-fixes).
- platform/x86: lg-laptop: Remove LGEX0815 hotkey handling (stable-fixes).
- platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB (stable-fixes).
- platform/x86: thinkpad_acpi: Take hotkey_mutex during hotkey_exit() (git-fixes).
- platform/x86: toshiba_acpi: Add quirk for buttons on Z830 (stable-fixes).
- platform/x86: toshiba_acpi: Fix array out-of-bounds access (git-fixes).
- platform/x86: toshiba_acpi: Fix quickstart quirk handling (git-fixes).
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet (stable-fixes).
- platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet (stable-fixes).
- platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro (stable-fixes).
- platform/x86: wireless-hotkey: Add support for LG Airplane Button (stable-fixes).
- platform/x86: x86-android-tablets: Fix acer_b1_750_goodix_gpios name (stable-fixes).
- platform/x86: xiaomi-wmi: Fix race condition when reporting key events (git-fixes).
- power: rt9455: hide unused rt9455_boost_voltage_values (git-fixes).
- power: supply: ab8500: Fix error handling when calling iio_read_channel_processed() (git-fixes).
- power: supply: cros_usbpd: provide ID table for avoiding fallback match (stable-fixes).
- power: supply: ingenic: Fix some error handling paths in ingenic_battery_get_property() (git-fixes).
- power: supply: mt6360_charger: Fix of_match for usb-otg-vbus regulator (git-fixes).
- powerpc/64s/radix/kfence: map __kfence_pool at page granularity (bsc#1223570 ltc#205770).
- powerpc/crypto/chacha-p10: Fix failure on non Power10 (bsc#1218205).
- powerpc/eeh: Permanently disable the removed device (bsc#1223991 ltc#205740).
- powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks (git-fixes).
- powerpc/prom: Add CPU info to hardware description string later (bsc#1215199).
- powerpc/pseries/lparcfg: drop error message from guest name lookup (bsc#1187716 ltc#193451 git-fixes).
- powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
- powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869).
- powerpc/pseries: make max polling consistent for longer H_CALLs (bsc#1215199).
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487).
- powerpc/uaccess: Fix build errors seen with GCC 13/14 (bsc#1194869).
- powerpc/uaccess: Use YZ asm constraint for ld (bsc#1194869).
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
- ppdev: Add an error check in register_device (git-fixes).
- prctl: generalize PR_SET_MDWE support check to be per-arch (bsc#1225610).
- printk: Add this_cpu_in_panic() (bsc#1225607).
- printk: Adjust mapping for 32bit seq macros (bsc#1225607).
- printk: Avoid non-panic CPUs writing to ringbuffer (bsc#1225607).
- printk: Consolidate console deferred printing (bsc#1225607).
- printk: Disable passing console lock owner completely during panic() (bsc#1225607).
- printk: Do not take console lock for console_flush_on_panic() (bsc#1225607).
- printk: For @suppress_panic_printk check for other CPU in panic (bsc#1225607).
- printk: Keep non-panic-CPUs out of console lock (bsc#1225607).
- printk: Let no_printk() use _printk() (bsc#1225618).
- printk: Reduce console_unblank() usage in unsafe scenarios (bsc#1225607).
- printk: Rename abandon_console_lock_in_panic() to other_cpu_in_panic() (bsc#1225607).
- printk: Update @console_may_schedule in console_trylock_spinning() (bsc#1225616).
- printk: Use prb_first_seq() as base for 32bit seq macros (bsc#1225607).
- printk: Wait for all reserved records with pr_flush() (bsc#1225607).
- printk: nbcon: Relocate 32bit seq macros (bsc#1225607).
- printk: ringbuffer: Clarify special lpos values (bsc#1225607).
- printk: ringbuffer: Cleanup reader terminology (bsc#1225607).
- printk: ringbuffer: Do not skip non-finalized records with prb_next_seq() (bsc#1225607).
- printk: ringbuffer: Skip non-finalized records in panic (bsc#1225607).
- proc/kcore: do not try to access unaccepted memory (git-fixes).
- pstore/zone: Add a null pointer check to the psz_kmsg_read (stable-fixes).
- pstore: inode: Convert mutex usage to guard(mutex) (stable-fixes).
- pstore: inode: Only d_invalidate() is needed (git-fixes).
- pwm: img: fix pwm clock lookup (git-fixes).
- pwm: sti: Prepare removing pwm_chip from driver data (stable-fixes).
- pwm: sti: Simplify probe function using devm functions (git-fixes).
- pwm: stm32: Always do lazy disabling (git-fixes).
- qibfs: fix dentry leak (git-fixes)
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d (git-fixes).
- r8169: skip DASH fw status checks when DASH is disabled (git-fixes).
- random: handle creditable entropy from atomic process context (git-fixes).
- regmap-i2c: Subtract reg size from max_write (stable-fixes).
- regmap: Add regmap_read_bypassed() (git-fixes).
- regmap: kunit: Ensure that changed bytes are actually different (stable-fixes).
- regmap: maple: Fix cache corruption in regcache_maple_drop() (git-fixes).
- regmap: maple: Fix uninitialized symbol 'ret' warnings (git-fixes).
- regulator: bd71815: fix ramp values (git-fixes).
- regulator: bd71828: Do not overwrite runtime voltages (git-fixes).
- regulator: change devm_regulator_get_enable_optional() stub to return Ok (git-fixes).
- regulator: change stubbed devm_regulator_get_enable to return Ok (git-fixes).
- regulator: core: Fix modpost error "regulator_get_regmap" undefined (git-fixes).
- regulator: core: fix debugfs creation regression (git-fixes).
- regulator: irq_helpers: duplicate IRQ name (stable-fixes).
- regulator: mt6360: De-capitalize devicetree regulator subnodes (git-fixes).
- regulator: tps65132: Add of_match table (stable-fixes).
- regulator: vqmmc-ipq4019: fix module autoloading (stable-fixes).
- remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init (git-fixes).
- remoteproc: imx_rproc: Skip over memory region when node value is NULL (git-fixes).
- remoteproc: k3-r5: Do not allow core1 to power up before core0 via sysfs (git-fixes).
- remoteproc: k3-r5: Fix IPC-only mode detection (git-fixes).
- remoteproc: k3-r5: Jump to error handling labels in start/stop errors (git-fixes).
- remoteproc: k3-r5: Wait for core0 power-up before powering up core1 (git-fixes).
- remoteproc: mediatek: Make sure IPI buffer fits in L2TCM (git-fixes).
- remoteproc: stm32: Fix incorrect type assignment returned by stm32_rproc_get_loaded_rsc_tablef (git-fixes).
- remoteproc: stm32_rproc: Fix mailbox interrupts queuing (git-fixes).
- remoteproc: virtio: Fix wdg cannot recovery remote processor (git-fixes).
- ring-buffer: Do not set shortest_full when full target is hit (git-fixes).
- ring-buffer: Fix a race between readers and resize checks (git-fixes).
- ring-buffer: Fix full_waiters_pending in poll (git-fixes).
- ring-buffer: Fix resetting of shortest_full (git-fixes).
- ring-buffer: Fix waking up ring buffer readers (git-fixes).
- ring-buffer: Make wake once of ring_buffer_wait() more robust (git-fixes).
- ring-buffer: Only update pages_touched when a new page is touched (git-fixes).
- ring-buffer: Use wait_event_interruptible() in ring_buffer_wait() (git-fixes).
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment (git-fixes).
- rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL (git-fixes).
- rpm/kernel-obs-build.spec.in: Add iso9660 (bsc#1226212) Some builds do not just create an iso9660 image, but also mount it during build.
- rpm/kernel-obs-build.spec.in: Add networking modules for docker (bsc#1226211) docker needs more networking modules, even legacy iptable_nat and _filter.
- rpm/kernel-obs-build.spec.in: Include algif_hash, aegis128 and xts modules afgif_hash is needed by some packages (e.g. iwd) for tests, xts is used for LUKS2 volumes by default and aegis128 is useful as AEAD cipher for LUKS2. Wrap the long line to make it readable.
- rtc: abx80x: Fix return value of nvmem callback on read (git-fixes).
- rtc: cmos: Fix return value of nvmem callbacks (git-fixes).
- rtc: interface: Add RTC offset to alarm after fix-up (git-fixes).
- rtc: isl1208: Fix return value of nvmem callbacks (git-fixes).
- rtc: mt6397: select IRQ_DOMAIN instead of depending on it (git-fixes).
- s390/bpf: Emit a barrier for BPF_FETCH instructions (git-fixes bsc#1224792).
- s390/cio: Ensure the copied buf is NUL terminated (git-fixes bsc#1223869).
- s390/cio: fix tracepoint subchannel type field (git-fixes bsc#1224793).
- s390/cpacf: Make use of invalid opcode produce a link error (git-fixes bsc#1227072).
- s390/cpacf: Split and rework cpacf query functions (git-fixes bsc#1225133).
- s390/cpum_cf: make crypto counters upward compatible across machine types (bsc#1224348).
- s390/ipl: Fix incorrect initialization of len fields in nvme reipl block (git-fixes bsc#1225136).
- s390/ipl: Fix incorrect initialization of nvme dump block (git-fixes bsc#1225134).
- s390/ism: Properly fix receive message buffer allocation (git-fixes bsc#1223590).
- s390/mm: Fix clearing storage keys for huge pages (git-fixes bsc#1223871).
- s390/mm: Fix storage key clearing for guest huge pages (git-fixes bsc#1223872).
- s390/qeth: Fix kernel panic after setting hsuid (git-fixes bsc#1223874).
- s390/vdso: Add CFI for RA register to asm macro vdso_func (git-fixes bsc#1223870).
- s390/vdso: drop '-fPIC' from LDFLAGS (git-fixes bsc#1223593).
- s390/vtime: fix average steal time calculation (git-fixes bsc#1221783).
- s390/zcrypt: fix reference counting on zcrypt card objects (git-fixes bsc#1223592).
- s390: Implement __iowrite32_copy() (bsc#1226502)
- s390: Stop using weak symbols for __iowrite64_copy() (bsc#1226502)
- saa7134: Unchecked i2c_transfer function result fixed (git-fixes).
- sched/balancing: Rename newidle_balance() =&gt; sched_balance_newidle() (bsc#1222173).
- sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write() (bsc#1226791).
- sched/fair: Check root_domain::overload value before update (bsc#1222173).
- sched/fair: Use helper functions to access root_domain::overload (bsc#1222173).
- sched/psi: Select KERNFS as needed (git-fixes).
- sched/topology: Optimize topology_span_sane() (bsc#1225053).
- scsi: bfa: Fix function pointer type mismatch for hcb_qe-&gt;cbfn (git-fixes).
- scsi: core: Consult supported VPD page list prior to fetching page (git-fixes).
- scsi: core: Fix unremoved procfs host directory regression (git-fixes).
- scsi: csiostor: Avoid function pointer casts (git-fixes).
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset() (git-fixes).
- scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type() (git-fixes).
- scsi: libsas: Fix disk not being scanned in after being removed (git-fixes).
- scsi: lpfc: Add support for 32 byte CDBs (bsc#1225842).
- scsi: lpfc: Change default logging level for unsolicited CT MIB commands (bsc#1225842).
- scsi: lpfc: Change lpfc_hba hba_flag member into a bitmask (bsc#1225842).
- scsi: lpfc: Clear deferred RSCN processing flag when driver is unloading (bsc#1225842).
- scsi: lpfc: Copyright updates for 14.4.0.1 patches (bsc#1221777).
- scsi: lpfc: Copyright updates for 14.4.0.2 patches (bsc#1225842).
- scsi: lpfc: Correct size for cmdwqe/rspwqe for memset() (bsc#1221777).
- scsi: lpfc: Correct size for wqe for memset() (bsc#1221777).
- scsi: lpfc: Define lpfc_dmabuf type for ctx_buf ptr (bsc#1221777).
- scsi: lpfc: Define lpfc_nodelist type for ctx_ndlp ptr (bsc#1221777).
- scsi: lpfc: Define types in a union for generic void *context3 ptr (bsc#1221777).
- scsi: lpfc: Introduce rrq_list_lock to protect active_rrq_list (bsc#1225842).
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (bsc#1221777).
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1221777).
- scsi: lpfc: Remove IRQF_ONESHOT flag from threaded IRQ handling (bsc#1221777 bsc#1217959).
- scsi: lpfc: Remove unnecessary log message in queuecommand path (bsc#1221777).
- scsi: lpfc: Replace hbalock with ndlp lock in lpfc_nvme_unregister_port() (bsc#1221777).
- scsi: lpfc: Update logging of protection type for T10 DIF I/O (bsc#1225842).
- scsi: lpfc: Update lpfc version to 14.4.0.1 (bsc#1221777).
- scsi: lpfc: Update lpfc version to 14.4.0.2 (bsc#1225842).
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (bsc#1221777).
- scsi: lpfc: Use a dedicated lock for ras_fwlog state (bsc#1221777).
- scsi: mpi3mr: Reduce stack usage in mpi3mr_refresh_sas_ports() (git-fixes).
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready (git-fixes).
- scsi: mylex: Fix sysfs buffer lengths (git-fixes).
- scsi: qla2xxx: Change debug message during driver unload (bsc1221816).
- scsi: qla2xxx: Delay I/O Abort on PCI error (bsc1221816).
- scsi: qla2xxx: Fix N2N stuck connection (bsc1221816).
- scsi: qla2xxx: Fix command flush on cable pull (bsc1221816).
- scsi: qla2xxx: Fix double free of fcport (bsc1221816).
- scsi: qla2xxx: Fix double free of the ha-&gt;vp_map pointer (bsc1221816).
- scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (git-fixes).
- scsi: qla2xxx: NVME|FCP prefer flag not being honored (bsc1221816).
- scsi: qla2xxx: Prevent command send on chip reset (bsc1221816).
- scsi: qla2xxx: Split FCE|EFT trace control (bsc1221816).
- scsi: qla2xxx: Update manufacturer detail (bsc1221816).
- scsi: qla2xxx: Update version to 10.02.09.200-k (bsc1221816).
- scsi: sd: Unregister device if device_add_disk() failed in sd_probe() (git-fixes).
- scsi: sg: Avoid race in error handling &amp; drop bogus warn (git-fixes).
- scsi: sg: Avoid sg device teardown race (git-fixes).
- scsi: smartpqi: Fix disable_managed_interrupts (git-fixes).
- sctp: annotate data-races around sk-&gt;sk_wmem_queued (git-fixes).
- sdhci-of-dwcmshc: disable PM runtime in dwcmshc_remove() (git-fixes).
- selftests/binderfs: use the Makefile's rules, not Make's implicit rules (git-fixes).
- selftests/bpf: add edge case backtracking logic test (bsc#1225756).
- selftests/bpf: precision tracking test for BPF_NEG and BPF_END (bsc#1225756).
- selftests/bpf: test case for callback_depth states pruning logic (bsc#1225903).
- selftests/bpf: test if state loops are detected in a tricky case (bsc#1225903).
- selftests/bpf: test widening for iterating callbacks (bsc#1225903).
- selftests/bpf: tests for iterating callbacks (bsc#1225903).
- selftests/bpf: tests with delayed read/precision makrs in loop body (bsc#1225903).
- selftests/bpf: track string payload offset as scalar in strobemeta (bsc#1225903).
- selftests/bpf: track tcp payload offset as scalar in xdp_synproxy (bsc#1225903).
- selftests/ftrace: Fix event filter target_func selection (stable-fixes).
- selftests/ftrace: Limit length in subsystem-enable tests (git-fixes).
- selftests/kcmp: remove unused open mode (git-fixes).
- selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages (git-fixes).
- selftests/mm: fix build warnings on ppc64 (stable-fixes).
- selftests/net: convert test_bridge_neigh_suppress.sh to run it in unique namespace (stable-fixes).
- selftests/pidfd: Fix config for pidfd_setns_test (git-fixes).
- selftests/powerpc/dexcr: Add -no-pie to hashchk tests (git-fixes).
- selftests/powerpc/papr-vpd: Fix missing variable initialization (jsc#PED-4486 git-fixes).
- selftests/resctrl: fix clang build failure: use LOCAL_HDRS (git-fixes).
- selftests/sigaltstack: Fix ppc64 GCC build (git-fixes).
- selftests/timers/posix_timers: Reimplement check_timer_distribution() (git-fixes).
- selftests: default to host arch for LLVM builds (git-fixes).
- selftests: fix OOM in msg_zerocopy selftest (git-fixes).
- selftests: forwarding: Fix ping failure due to short timeout (git-fixes).
- selftests: kselftest: Fix build failure with NOLIBC (git-fixes).
- selftests: kselftest: Mark functions that unconditionally call exit() as __noreturn (git-fixes).
- selftests: make order checking verbose in msg_zerocopy selftest (git-fixes).
- selftests: mptcp: add ms units for tc-netem delay (stable-fixes).
- selftests: net: bridge: increase IGMP/MLD exclude timeout membership interval (git-fixes).
- selftests: net: kill smcrouted in the cleanup logic in amt.sh (git-fixes).
- selftests: net: move amt to socat for better compatibility (git-fixes).
- selftests: sud_test: return correct emulated syscall value on RISC-V (stable-fixes).
- selftests: test_bridge_neigh_suppress.sh: Fix failures due to duplicate MAC (git-fixes).
- selftests: timers: Convert posix_timers test to generate KTAP output (stable-fixes).
- selftests: timers: Fix abs() warning in posix_timers test (git-fixes).
- selftests: timers: Fix posix_timers ksft_print_msg() warning (git-fixes).
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior (stable-fixes).
- selftests: vxlan_mdb: Fix failures with old libnet (git-fixes).
- selinux: avoid dereference of garbage after mount failure (git-fixes).
- selinux: introduce an initial SID for early boot processes (bsc#1208593).
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood (git-fixes).
- serial: 8250_bcm7271: use default_mux_rate if possible (git-fixes).
- serial: 8250_dw: Revert: Do not reclock if already at correct rate (git-fixes).
- serial: 8250_exar: Do not remove GPIO device on suspend (git-fixes).
- serial: 8520_mtk: Set RTS on shutdown for Rx in-band wakeup (git-fixes).
- serial: Lock console when calling into driver before registration (git-fixes).
- serial: bcm63xx-uart: fix tx after conversion to uart_port_tx_limited() (git-fixes).
- serial: core: Fix atomicity violation in uart_tiocmget (git-fixes).
- serial: core: introduce uart_port_tx_limited_flags() (git-fixes).
- serial: core: only stop transmit when HW fifo is empty (git-fixes).
- serial: exar: adding missing CTI and Exar PCI ids (stable-fixes).
- serial: imx: Introduce timeout when waiting on transmitter empty (stable-fixes).
- serial: imx: Raise TX trigger level to 8 (stable-fixes).
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code (stable-fixes).
- serial: max3100: Fix bitwise types (git-fixes).
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change() (git-fixes).
- serial: max3100: Update uart_driver_registered on driver removal (git-fixes).
- serial: max310x: fix NULL pointer dereference in I2C instantiation (git-fixes).
- serial: max310x: fix syntax error in IRQ error message (git-fixes).
- serial: mxs-auart: add spinlock around changing cts state (git-fixes).
- serial: sc16is7xx: add proper sched.h include for sched_set_fifo() (git-fixes).
- serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler (git-fixes).
- serial: sh-sci: protect invalidating RXDMA on shutdown (git-fixes).
- serial: stm32: Reset .throttled state in .startup() (git-fixes).
- series.conf: cleanup Fix subsection header to silence series_insert error.
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API (git-fixes).
- slimbus: qcom-ngd-ctrl: Add timeout for wait operation (git-fixes).
- smb3: allow controlling length of time directory entries are cached with dir leases (git-fixes, bsc#1225172).
- smb3: allow controlling maximum number of cached directories (git-fixes, bsc#1225172).
- smb3: do not start laundromat thread when dir leases disabled (git-fixes, bsc#1225172).
- smb3: show beginning time for per share stats (bsc#1225172).
- smb: client: do not start laundromat thread on nohandlecache (git-fixes, bsc#1225172).
- smb: client: ensure to try all targets when finding nested links (bsc#1225172).
- smb: client: fix mount when dns_resolver key is not available (git-fixes, bsc#1225172).
- smb: client: fix parsing of SMB3.1.1 POSIX create context (git-fixes, bsc#1225172).
- smb: client: get rid of dfs code dep in namespace.c (bsc#1225172).
- smb: client: get rid of dfs naming in automount code (bsc#1225172).
- smb: client: introduce DFS_CACHE_TGT_LIST() (bsc#1225172).
- smb: client: make laundromat a delayed worker (git-fixes, bsc#1225172).
- smb: client: prevent new fids from being removed by laundromat (git-fixes, bsc#1225172).
- smb: client: reduce stack usage in cifs_try_adding_channels() (bsc#1225172).
- smb: client: remove extra @chan_count check in __cifs_put_smb_ses() (bsc#1225172).
- smb: client: rename cifs_dfs_ref.c to namespace.c (bsc#1225172).
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock (git-fixes).
- soc: fsl: qbman: Use raw spinlock for cgr_lock (git-fixes).
- soc: mediatek: cmdq: Fix typo of CMDQ_JUMP_RELATIVE (git-fixes).
- soc: microchip: Fix POLARFIRE_SOC_SYS_CTRL input prompt (stable-fixes).
- soc: qcom: pdr: fix parsing of domains lists (git-fixes).
- soc: qcom: pdr: protect locator_addr with the main mutex (git-fixes).
- soc: qcom: pmic_glink: Handle the return value of pmic_glink_init (git-fixes).
- soc: qcom: pmic_glink: Make client-lock non-sleeping (git-fixes).
- soc: qcom: pmic_glink: do not traverse clients list without a lock (git-fixes).
- soc: qcom: pmic_glink: notify clients about the current state (git-fixes).
- soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request (git-fixes).
- soc: qcom: rpmh-rsc: Ensure irqs are not disabled by rpmh_rsc_send_data() callers (git-fixes).
- soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message (stable-fixes).
- soc: xilinx: rename cpu_number1 to dummy_cpu_number (git-fixes).
- sock_diag: annotate data-races around sock_diag_handlers[family] (git-fixes).
- soundwire: amd: fix for wake interrupt handling for clockstop mode (git-fixes).
- soundwire: cadence: fix invalid PDI offset (stable-fixes).
- speakup: Avoid crash on very long word (git-fixes).
- speakup: Fix 8bit characters from direct synth (git-fixes).
- speakup: Fix sizeof() vs ARRAY_SIZE() bug (git-fixes).
- spi: Do not mark message DMA mapped when no transfer in it is (git-fixes).
- spi: atmel-quadspi: Add missing check for clk_prepare (git-fixes).
- spi: cadence: Ensure data lines set to low during dummy-cycle period (stable-fixes).
- spi: fix null pointer dereference within spi_sync (git-fixes).
- spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs (git-fixes).
- spi: imx: Do not expect DMA for i.MX{25,35,50,51,53} cspi devices (stable-fixes).
- spi: intel-pci: Add support for Lunar Lake-M SPI serial flash (stable-fixes).
- spi: lm70llp: fix links in doc and comments (git-fixes).
- spi: lpspi: Avoid potential use-after-free in probe() (git-fixes).
- spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxx_spi_probe (git-fixes).
- spi: microchip-core-qspi: fix setting spi bus clock rate (git-fixes).
- spi: microchip-core: defer asserting chip select until just before write to TX FIFO (git-fixes).
- spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer (git-fixes).
- spi: microchip-core: fix the issues in the isr (git-fixes).
- spi: microchip-core: only disable SPI controller when register value change requires it (git-fixes).
- spi: mux: set ctlr-&gt;bits_per_word_mask (stable-fixes).
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call (git-fixes).
- spi: spi-microchip-core: Fix the number of chip selects supported (git-fixes).
- spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (git-fixes).
- spi: spidev: add correct compatible for Rohm BH2228FV (git-fixes).
- spi: stm32: Do not warn about spurious interrupts (git-fixes).
- spi: stm32: qspi: Clamp stm32_qspi_get_mode() output to CCR_BUSWIDTH_4 (git-fixes).
- spi: stm32: qspi: Fix dual flash mode sanity test in stm32_qspi_setup() (git-fixes).
- spi: xilinx: Fix kernel documentation in the xilinx_spi.h (git-fixes).
- spmi: hisi-spmi-controller: Do not override device identifier (git-fixes).
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent() (stable-fixes).
- staging: vc04_services: changen strncpy() to strscpy_pad() (stable-fixes).
- staging: vc04_services: fix information leak in create_component() (git-fixes).
- staging: vt6655: Remove unused declaration of RFbAL7230SelectChannelPostProcess() (git-fixes).
- stmmac: Clear variable when destroying workqueue (git-fixes).
- struct acpi_ec kABI workaround (git-fixes).
- sunrpc: fix NFSACL RPC retry on soft mount (git-fixes).
- supported.conf: Add APM X-Gene SoC hardware monitoring driver (bsc#1223265 jsc#PED-8570)
- supported.conf: Add APM X-Gene SoC hardware monitoring driver (jsc#PED-8649) Module is marked supported because of merge from SP6, but lets add reference to SLM6.0 maintenance task.
- supported.conf: Add support for v4l2-dv-timings (jsc#PED-8644)
- supported.conf: Add support for v4l2-dv-timings (jsc#PED-8645)
- supported.conf: mark orangefs as optional We do not support orangefs at all (and it is already marked as such), but since there are no SLE consumers of it, mark it as optional.
- supported.conf: mark ufs as unsupported UFS is an unsupported filesystem, mark it as such. We still keep it around (not marking as optional), to accommodate any potential migrations from BSD systems.
- supported.conf: mark vdpa modules supported (jsc#PED-8954)
- supported.conf: support tcp_dctcp module (jsc#PED-8111)
- supported.conf: update for mt76 stuff (bsc#1227149)
- swiotlb: Fix alignment checks when both allocation and DMA masks are (bsc#1224331)
- swiotlb: Fix double-allocation of slots due to broken alignment (bsc#1224331)
- swiotlb: Honour dma_alloc_coherent() alignment in swiotlb_alloc() (bsc#1224331)
- swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (bsc#1224331)
- swiotlb: use the calculated number of areas (git-fixes).
- tcp: Dump bound-only sockets in inet_diag (bsc#1204562).
- thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data (stable-fixes).
- thermal/drivers/mediatek/lvts_thermal: Return error in case of invalid efuse data (git-fixes).
- thermal/drivers/qcom/lmh: Check for SCM availability at probe (git-fixes).
- thermal/drivers/tsens: Fix null pointer dereference (git-fixes).
- thermal/of: Assume polling-delay(-passive) 0 when absent (stable-fixes).
- thermal: devfreq_cooling: Fix perf state when calculate dfc res_util (git-fixes).
- thunderbolt: Avoid notify PM core about runtime PM resume (stable-fixes).
- thunderbolt: Do not create DisplayPort tunnels on adapters of the same router (git-fixes).
- thunderbolt: Fix wake configurations after device unplug (stable-fixes).
- thunderbolt: Introduce tb_path_deactivate_hop() (stable-fixes).
- thunderbolt: Introduce tb_port_reset() (stable-fixes).
- thunderbolt: Make tb_switch_reset() support Thunderbolt 2, 3 and USB4 routers (stable-fixes).
- thunderbolt: Reset only non-USB4 host routers in resume (git-fixes).
- thunderbolt: debugfs: Fix margin debugfs node creation condition (git-fixes).
- tls: break out of main loop when PEEK gets a non-data record (bsc#1221858).
- tls: do not skip over different type records from the rx_list (bsc#1221858).
- tls: fix peeking with sync+async decryption (bsc#1221858).
- tls: stop recv() if initial process_rx_list gave us non-DATA (bsc#1221858).
- tools/arch/x86/intel_sdsi: Fix maximum meter bundle length (git-fixes).
- tools/arch/x86/intel_sdsi: Fix meter_certificate decoding (git-fixes).
- tools/arch/x86/intel_sdsi: Fix meter_show display (git-fixes).
- tools/latency-collector: Fix -Wformat-security compile warns (git-fixes).
- tools/memory-model: Fix bug in lock.cat (git-fixes).
- tools/power turbostat: Expand probe_intel_uncore_frequency() (bsc#1221765).
- tools/power turbostat: Remember global max_die_id (stable-fixes).
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs (stable-fixes).
- tools/power/turbostat: Fix uncore frequency file string (bsc#1221765).
- tools: ynl: do not leak mcast_groups on init error (git-fixes).
- tools: ynl: fix handling of multiple mcast groups (git-fixes).
- tools: ynl: make sure we always pass yarg to mnl_cb_run (git-fixes).
- tpm_tis: Do *not* flush uninitialized work (git-fixes).
- tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (git-fixes).
- tracefs: Add missing lockdown check to tracefs_create_dir() (git-fixes).
- tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string (git-fixes).
- tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset() (git-fixes).
- tracing/ring-buffer: Fix wait_on_pipe() race (git-fixes).
- tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test (git-fixes).
- tracing: Build event generation tests only as modules (git-fixes).
- tracing: Have saved_cmdlines arrays all in one allocation (git-fixes).
- tracing: Remove precision vsnprintf() check from print event (git-fixes).
- tracing: Use .flush() call to wake up readers (git-fixes).
- tracing: hide unused ftrace_event_id_fops (git-fixes).
- tty: mcf: MCF54418 has 10 UARTS (git-fixes).
- tty: n_gsm: fix missing receive state reset after mode switch (git-fixes).
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (git-fixes).
- tty: n_tty: Fix buffer offsets when lookahead is used (git-fixes).
- tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT (git-fixes).
- tty: vt: fix 20 vs 0x20 typo in EScsiignore (git-fixes).
- ubifs: Queue up space reservation tasks if retrying many times (git-fixes).
- ubifs: Remove unreachable code in dbg_check_ltab_lnum (git-fixes).
- ubifs: Set page uptodate in the correct place (git-fixes).
- ubifs: dbg_check_idx_size: Fix kmemleak if loading znode failed (git-fixes).
- ubifs: fix sort function prototype (git-fixes).
- usb-storage: alauda: Check whether the media is initialized (git-fixes).
- usb: Disable USB3 LPM at shutdown (stable-fixes).
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device (bsc#1220569).
- usb: aqc111: stop lying about skb-&gt;truesize (git-fixes).
- usb: atm: cxacru: fix endpoint checking in cxacru_bind() (git-fixes).
- usb: audio-v2: Correct comments for struct uac_clock_selector_descriptor (git-fixes).
- usb: cdc-wdm: close race between read and workqueue (git-fixes).
- usb: dwc2: gadget: Fix exiting from clock gating (git-fixes).
- usb: dwc2: gadget: LPM flow fix (git-fixes).
- usb: dwc2: host: Fix ISOC flow in DDMA mode (git-fixes).
- usb: dwc2: host: Fix dereference issue in DDMA completion flow (git-fixes).
- usb: dwc2: host: Fix hibernation flow (git-fixes).
- usb: dwc2: host: Fix remote wakeup from hibernation (git-fixes).
- usb: dwc3-am62: Disable wakeup at remove (git-fixes).
- usb: dwc3-am62: Rename private data (git-fixes).
- usb: dwc3-am62: fix module unload/reload behavior (git-fixes).
- usb: dwc3: Properly set system wakeup (git-fixes).
- usb: dwc3: Wait unconditionally after issuing EndXfer command (git-fixes).
- usb: dwc3: core: Add DWC31 version 2.00a controller (stable-fixes).
- usb: dwc3: core: Prevent phy suspend during init (Git-fixes).
- usb: dwc3: core: Workaround for CSR read timeout (stable-fixes).
- usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock (git-fixes).
- usb: dwc3: pci: Do not set "linux,phy_charger_detect" property on Lenovo Yoga Tab2 1380 (stable-fixes).
- usb: dwc3: pci: Drop duplicate ID (git-fixes).
- usb: dwc3: pci: add support for the Intel Panther Lake (stable-fixes).
- usb: fotg210: Add missing kernel doc description (git-fixes).
- usb: gadget: aspeed_udc: fix device address configuration (git-fixes).
- usb: gadget: composite: fix OS descriptors w_value logic (git-fixes).
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (stable-fixes).
- usb: gadget: f_fs: Fix a race condition when processing setup packets (git-fixes).
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (git-fixes).
- usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (stable-fixes).
- usb: gadget: function: Remove usage of the deprecated ida_simple_xx() API (stable-fixes).
- usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin (git-fixes).
- usb: gadget: printer: SS+ support (stable-fixes).
- usb: gadget: printer: fix races against disable (git-fixes).
- usb: gadget: u_audio: Clear uac pointer when freed (git-fixes).
- usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind (git-fixes).
- usb: gadget: uvc: configfs: ensure guid to be valid before set (stable-fixes).
- usb: gadget: uvc: mark incomplete frames with UVC_STREAM_ERR (stable-fixes).
- usb: gadget: uvc: use correct buffer size when parsing configfs lists (git-fixes).
- usb: misc: uss720: check for incompatible versions of the Belkin F5U002 (stable-fixes).
- usb: musb: da8xx: fix a resource leak in probe() (git-fixes).
- usb: ohci: Prevent missed ohci interrupts (git-fixes).
- usb: phy: generic: Get the vbus supply (git-fixes).
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined (stable-fixes).
- usb: typec: Return size of buffer if pd_set operation succeeds (git-fixes).
- usb: typec: tcpci: add generic tcpci fallback compatible (stable-fixes).
- usb: typec: tcpm: Check for port partner validity before consuming it (git-fixes).
- usb: typec: tcpm: Correct port source pdo array in pd_set callback (git-fixes).
- usb: typec: tcpm: Correct the PDO counting in pd_set (git-fixes).
- usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state (git-fixes).
- usb: typec: tcpm: Update PD of Type-C port upon pd_set (git-fixes).
- usb: typec: tcpm: clear pd_event queue in PORT_RESET (git-fixes).
- usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd() (git-fixes).
- usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps (git-fixes).
- usb: typec: tcpm: unregister existing source caps before re-registration (git-fixes).
- usb: typec: tipd: fix event checking for tps6598x (git-fixes).
- usb: typec: ucsi: Ack also failed Get Error commands (git-fixes).
- usb: typec: ucsi: Ack unsupported commands (stable-fixes).
- usb: typec: ucsi: Check for notifications after init (git-fixes).
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros (git-fixes).
- usb: typec: ucsi: Clear EVENT_PENDING under PPM lock (git-fixes).
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset (stable-fixes).
- usb: typec: ucsi: Fix connector check on init (git-fixes).
- usb: typec: ucsi: Fix race between typec_switch and role_switch (git-fixes).
- usb: typec: ucsi: Limit read size on v1.2 (stable-fixes).
- usb: typec: ucsi: Never send a lone connector change ack (stable-fixes).
- usb: typec: ucsi: always register a link to USB PD device (git-fixes).
- usb: typec: ucsi: displayport: Fix potential deadlock (git-fixes).
- usb: typec: ucsi: glink: fix child node release in probe function (git-fixes).
- usb: typec: ucsi: simplify partner's PD caps registration (git-fixes).
- usb: typec: ucsi_acpi: Refactor and fix DELL quirk (git-fixes).
- usb: typec: ucsi_glink: drop special handling for CCI_BUSY (stable-fixes).
- usb: ucsi: stm32: fix command completion handling (git-fixes).
- usb: udc: remove warning when queue disabled ep (stable-fixes).
- usb: xhci-plat: Do not include xhci.h (stable-fixes).
- usb: xhci: Add error handling in xhci_map_urb_for_dma (git-fixes).
- usb: xhci: Implement xhci_handshake_check_state() helper.
- usb: xhci: correct return value in case of STS_HCE (git-fixes).
- usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (stable-fixes).
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails (git-fixes).
- vboxsf: explicitly deny setlease attempts (stable-fixes).
- vdpa/mlx5: Allow CVQ size changes (git-fixes).
- vdpa_sim: reset must not run (git-fixes).
- veth: try harder when allocating queue memory (git-fixes).
- vhost: Add smp_rmb() in vhost_enable_notify() (git-fixes).
- vhost: Add smp_rmb() in vhost_vq_avail_empty() (git-fixes).
- virtio-blk: Ensure no requests in virtqueues before deleting vqs (git-fixes).
- virtio: treat alloc_dax() -EOPNOTSUPP failure as non-fatal (bsc#1223944).
- virtio_net: Do not send RSS key if it is not supported (git-fixes).
- virtio_net: avoid data-races on dev-&gt;stats fields (git-fixes).
- virtio_net: checksum offloading handling fix (git-fixes).
- vmci: prevent speculation leaks by sanitizing event in event_deliver() (git-fixes).
- vmlinux.lds.h: catch .bss..L* sections into BSS") (git-fixes).
- vsock/virtio: fix packet delivery to tap device (git-fixes).
- watchdog: bd9576: Drop "always-running" property (git-fixes).
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger (git-fixes).
- watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin (git-fixes).
- watchdog: rzg2l_wdt: Check return status of pm_runtime_put() (git-fixes).
- watchdog: rzg2l_wdt: Use pm_runtime_resume_and_get() (git-fixes).
- watchdog: rzn1: Convert comma to semicolon (git-fixes).
- watchdog: sa1100: Fix PTR_ERR_OR_ZERO() vs NULL check in sa1100dog_probe() (git-fixes).
- wifi: add HAS_IOPORT dependencies (bsc#1227149).
- wifi: ar5523: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: ar5523: enable proper endpoint verification (git-fixes).
- wifi: ath10/11/12k: Use alloc_ordered_workqueue() to create ordered workqueues (bsc#1227149).
- wifi: ath10k: Annotate struct ath10k_ce_ring with __counted_by (bsc#1227149).
- wifi: ath10k: Convert to platform remove callback returning void (bsc#1227149).
- wifi: ath10k: Drop checks that are always false (bsc#1227149).
- wifi: ath10k: Drop cleaning of driver data from probe error path and remove (bsc#1227149).
- wifi: ath10k: Fix a few spelling errors (bsc#1227149).
- wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() (git-fixes).
- wifi: ath10k: Fix enum ath10k_fw_crash_dump_type kernel-doc (bsc#1227149).
- wifi: ath10k: Fix htt_data_tx_completion kernel-doc warning (bsc#1227149).
- wifi: ath10k: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: ath10k: Remove unused struct ath10k_htc_frame (bsc#1227149).
- wifi: ath10k: Update Qualcomm Innovation Center, Inc. copyrights (bsc#1227149).
- wifi: ath10k: Use DECLARE_FLEX_ARRAY() for ath10k_htc_record (bsc#1227149).
- wifi: ath10k: Use list_count_nodes() (bsc#1227149).
- wifi: ath10k: add missing wmi_10_4_feature_mask documentation (bsc#1227149).
- wifi: ath10k: add support to allow broadcast action frame RX (bsc#1227149).
- wifi: ath10k: consistently use kstrtoX_from_user() functions (bsc#1227149).
- wifi: ath10k: correctly document enum wmi_tlv_tx_pause_id (bsc#1227149).
- wifi: ath10k: drop HTT_DATA_TX_STATUS_DOWNLOAD_FAIL (bsc#1227149).
- wifi: ath10k: fix QCOM_RPROC_COMMON dependency (git-fixes).
- wifi: ath10k: fix Wvoid-pointer-to-enum-cast warning (bsc#1227149).
- wifi: ath10k: fix htt_q_state_conf &amp; htt_q_state kernel-doc (bsc#1227149).
- wifi: ath10k: improve structure padding (bsc#1227149).
- wifi: ath10k: indicate to mac80211 scan complete with aborted flag for ATH10K_SCAN_STARTING state (bsc#1227149).
- wifi: ath10k: poll service ready message before failing (git-fixes).
- wifi: ath10k: populate board data for WCN3990 (git-fixes).
- wifi: ath10k: remove ath10k_htc_record::pauload[] (bsc#1227149).
- wifi: ath10k: remove duplicate memset() in 10.4 TDLS peer update (bsc#1227149).
- wifi: ath10k: remove struct wmi_pdev_chanlist_update_event (bsc#1227149).
- wifi: ath10k: remove unused template structs (bsc#1227149).
- wifi: ath10k: replace ENOTSUPP with EOPNOTSUPP (bsc#1227149).
- wifi: ath10k: replace deprecated strncpy with memcpy (bsc#1227149).
- wifi: ath10k: simplify __ath10k_htt_tx_txq_recalc() (bsc#1227149).
- wifi: ath10k: simplify ath10k_peer_create() (bsc#1227149).
- wifi: ath10k: use flexible array in struct wmi_host_mem_chunks (bsc#1227149).
- wifi: ath10k: use flexible array in struct wmi_tdls_peer_capabilities (bsc#1227149).
- wifi: ath10k: use flexible arrays for WMI start scan TLVs (bsc#1227149).
- wifi: ath11k: Add HTT stats for PHY reset case (bsc#1227149).
- wifi: ath11k: Add coldboot calibration support for QCN9074 (bsc#1227149).
- wifi: ath11k: Allow ath11k to boot without caldata in ftm mode (bsc#1227149).
- wifi: ath11k: Consistently use ath11k_vif_to_arvif() (bsc#1227149).
- wifi: ath11k: Consolidate WMI peer flags (bsc#1227149).
- wifi: ath11k: Convert to platform remove callback returning void (bsc#1227149).
- wifi: ath11k: Do not directly use scan_flags in struct scan_req_params (bsc#1227149).
- wifi: ath11k: EMA beacon support (bsc#1227149).
- wifi: ath11k: Fix a few spelling errors (bsc#1227149).
- wifi: ath11k: Fix ath11k_htc_record flexible record (bsc#1227149).
- wifi: ath11k: Introduce and use ath11k_sta_to_arsta() (bsc#1227149).
- wifi: ath11k: MBSSID beacon support (bsc#1227149).
- wifi: ath11k: MBSSID configuration during vdev create/start (bsc#1227149).
- wifi: ath11k: MBSSID parameter configuration in AP mode (bsc#1227149).
- wifi: ath11k: Really consistently use ath11k_vif_to_arvif() (bsc#1227149).
- wifi: ath11k: Relocate the func ath11k_mac_bitrate_mask_num_ht_rates() and change hweight16 to hweight8 (bsc#1227149).
- wifi: ath11k: Remove ath11k_base::bd_api (bsc#1227149).
- wifi: ath11k: Remove cal_done check during probe (bsc#1227149).
- wifi: ath11k: Remove obsolete struct wmi_peer_flags_map *peer_flags (bsc#1227149).
- wifi: ath11k: Remove scan_flags union from struct scan_req_params (bsc#1227149).
- wifi: ath11k: Remove struct ath11k::ops (bsc#1227149).
- wifi: ath11k: Remove unneeded semicolon (bsc#1227149).
- wifi: ath11k: Remove unused declarations (bsc#1227149).
- wifi: ath11k: Remove unused struct ath11k_htc_frame (bsc#1227149).
- wifi: ath11k: Send HT fixed rate in WMI peer fixed param (bsc#1227149).
- wifi: ath11k: Split coldboot calibration hw_param (bsc#1227149).
- wifi: ath11k: Update Qualcomm Innovation Center, Inc. copyrights (bsc#1227149).
- wifi: ath11k: Use device_get_match_data() (bsc#1227149).
- wifi: ath11k: Use list_count_nodes() (bsc#1227149).
- wifi: ath11k: add WMI event debug messages (bsc#1227149).
- wifi: ath11k: add WMI_TLV_SERVICE_EXT_TPC_REG_SUPPORT service bit (bsc#1227149).
- wifi: ath11k: add chip id board name while searching board-2.bin for WCN6855 (bsc#1227149).
- wifi: ath11k: add firmware-2.bin support (bsc#1227149).
- wifi: ath11k: add handler for WMI_VDEV_SET_TPC_POWER_CMDID (bsc#1227149).
- wifi: ath11k: add parse of transmit power envelope element (bsc#1227149).
- wifi: ath11k: add parsing of phy bitmap for reg rules (bsc#1227149).
- wifi: ath11k: add support for QCA2066 (bsc#1227149).
- wifi: ath11k: add support to select 6 GHz regulatory type (bsc#1227149).
- wifi: ath11k: ath11k_debugfs_register(): fix format-truncation warning (bsc#1227149).
- wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay() (bsc#1227149).
- wifi: ath11k: call ath11k_mac_fils_discovery() without condition (bsc#1227149).
- wifi: ath11k: constify MHI channel and controller configs (bsc#1227149).
- wifi: ath11k: debug: add ATH11K_DBG_CE (bsc#1227149).
- wifi: ath11k: debug: remove unused ATH11K_DBG_ANY (bsc#1227149).
- wifi: ath11k: debug: use all upper case in ATH11k_DBG_HAL (bsc#1227149).
- wifi: ath11k: decrease MHI channel buffer length to 8KB (bsc#1207948).
- wifi: ath11k: do not force enable power save on non-running vdevs (git-fixes).
- wifi: ath11k: do not use %pK (bsc#1227149).
- wifi: ath11k: document HAL_RX_BUF_RBM_SW4_BM (bsc#1227149).
- wifi: ath11k: dp: cleanup debug message (bsc#1227149).
- wifi: ath11k: driver settings for MBSSID and EMA (bsc#1227149).
- wifi: ath11k: drop NULL pointer check in ath11k_update_per_peer_tx_stats() (bsc#1227149).
- wifi: ath11k: drop redundant check in ath11k_dp_rx_mon_dest_process() (bsc#1227149).
- wifi: ath11k: enable 36 bit mask for stream DMA (bsc#1227149).
- wifi: ath11k: factory test mode support (bsc#1227149).
- wifi: ath11k: fill parameters for vdev set tpc power WMI command (bsc#1227149).
- wifi: ath11k: fix CAC running state during virtual interface start (bsc#1227149).
- wifi: ath11k: fix IOMMU errors on buffer rings (bsc#1227149).
- wifi: ath11k: fix RCU documentation in ath11k_mac_op_ipv6_changed() (git-fixes).
- wifi: ath11k: fix WCN6750 firmware crash caused by 17 num_vdevs (bsc#1227149).
- wifi: ath11k: fix Wvoid-pointer-to-enum-cast warning (bsc#1227149).
- wifi: ath11k: fix a possible dead lock caused by ab-&gt;base_lock (bsc#1227149).
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage (bsc#1227149).
- wifi: ath11k: fix connection failure due to unexpected peer delete (bsc#1227149).
- wifi: ath11k: fix tid bitmap is 0 in peer rx mu stats (bsc#1227149).
- wifi: ath11k: fix wrong definition of CE ring's base address (git-fixes).
- wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers (git-fixes).
- wifi: ath11k: hal: cleanup debug message (bsc#1227149).
- wifi: ath11k: htc: cleanup debug messages (bsc#1227149).
- wifi: ath11k: initialize eirp_power before use (bsc#1227149).
- wifi: ath11k: mac: fix struct ieee80211_sband_iftype_data handling (bsc#1227149).
- wifi: ath11k: mhi: add a warning message for MHI_CB_EE_RDDM crash (bsc#1227149).
- wifi: ath11k: move pci.ops registration ahead (bsc#1227149).
- wifi: ath11k: move power type check to ASSOC stage when connecting to 6 GHz AP (bsc#1227149).
- wifi: ath11k: move references from rsvd2 to info fields (bsc#1227149).
- wifi: ath11k: pci: cleanup debug logging (bsc#1227149).
- wifi: ath11k: print debug level in debug messages (bsc#1227149).
- wifi: ath11k: provide address list if chip supports 2 stations (bsc#1227149).
- wifi: ath11k: qmi: refactor ath11k_qmi_m3_load() (bsc#1227149).
- wifi: ath11k: refactor ath11k_wmi_tlv_parse_alloc() (bsc#1227149).
- wifi: ath11k: refactor setting country code logic (stable-fixes).
- wifi: ath11k: refactor vif parameter configurations (bsc#1227149).
- wifi: ath11k: rely on mac80211 debugfs handling for vif (bsc#1227149).
- wifi: ath11k: remove ath11k_htc_record::pauload[] (bsc#1227149).
- wifi: ath11k: remove invalid peer create logic (bsc#1227149).
- wifi: ath11k: remove manual mask names from debug messages (bsc#1227149).
- wifi: ath11k: remove unnecessary (void*) conversions (bsc#1227149).
- wifi: ath11k: remove unsupported event handlers (bsc#1227149).
- wifi: ath11k: remove unused function ath11k_tm_event_wmi() (bsc#1227149).
- wifi: ath11k: remove unused members of 'struct ath11k_base' (bsc#1227149).
- wifi: ath11k: remove unused scan_events from struct scan_req_params (bsc#1227149).
- wifi: ath11k: rename MBSSID fields in wmi_vdev_up_cmd (bsc#1227149).
- wifi: ath11k: rename ath11k_start_vdev_delay() (bsc#1227149).
- wifi: ath11k: rename the sc naming convention to ab (bsc#1227149).
- wifi: ath11k: rename the wmi_sc naming convention to wmi_ab (bsc#1227149).
- wifi: ath11k: replace ENOTSUPP with EOPNOTSUPP (bsc#1227149).
- wifi: ath11k: restore country code during resume (git-fixes).
- wifi: ath11k: save max transmit power in vdev start response event from firmware (bsc#1227149).
- wifi: ath11k: save power spectral density(PSD) of regulatory rule (bsc#1227149).
- wifi: ath11k: simplify ath11k_mac_validate_vht_he_fixed_rate_settings() (bsc#1227149).
- wifi: ath11k: simplify the code with module_platform_driver (bsc#1227149).
- wifi: ath11k: store cur_regulatory_info for each radio (bsc#1227149).
- wifi: ath11k: support 2 station interfaces (bsc#1227149).
- wifi: ath11k: update proper pdev/vdev id for testmode command (bsc#1227149).
- wifi: ath11k: update regulatory rules when connect to AP on 6 GHz band for station (bsc#1227149).
- wifi: ath11k: update regulatory rules when interface added (bsc#1227149).
- wifi: ath11k: use RCU when accessing struct inet6_dev::ac_list (bsc#1227149).
- wifi: ath11k: use WMI_VDEV_SET_TPC_POWER_CMDID when EXT_TPC_REG_SUPPORT for 6 GHz (bsc#1227149).
- wifi: ath11k: use kstrtoul_from_user() where appropriate (bsc#1227149).
- wifi: ath11k: use select for CRYPTO_MICHAEL_MIC (bsc#1227149).
- wifi: ath11k: wmi: add unified command debug messages (bsc#1227149).
- wifi: ath11k: wmi: cleanup error handling in ath11k_wmi_send_init_country_cmd() (bsc#1227149).
- wifi: ath11k: wmi: use common error handling style (bsc#1227149).
- wifi: ath11k: workaround too long expansion sparse warnings (bsc#1227149).
- wifi: ath12k: Add logic to write QRTR node id to scratch (bsc#1227149).
- wifi: ath12k: Add missing qmi_txn_cancel() calls (bsc#1227149).
- wifi: ath12k: Add support to parse new WMI event for 6 GHz regulatory (bsc#1227149).
- wifi: ath12k: Consistently use ath12k_vif_to_arvif() (bsc#1227149).
- wifi: ath12k: Consolidate WMI peer flags (bsc#1227149).
- wifi: ath12k: Correct 6 GHz frequency value in rx status (git-fixes).
- wifi: ath12k: Do not drop tx_status in failure case (git-fixes).
- wifi: ath12k: Do not use scan_flags from struct ath12k_wmi_scan_req_arg (bsc#1227149).
- wifi: ath12k: Enable Mesh support for QCN9274 (bsc#1227149).
- wifi: ath12k: Fix a few spelling errors (bsc#1227149).
- wifi: ath12k: Fix tx completion ring (WBM2SW) setup failure (git-fixes).
- wifi: ath12k: Fix uninitialized use of ret in ath12k_mac_allocate() (bsc#1227149).
- wifi: ath12k: Introduce and use ath12k_sta_to_arsta() (bsc#1227149).
- wifi: ath12k: Introduce the container for mac80211 hw (bsc#1227149).
- wifi: ath12k: Make QMI message rules const (bsc#1227149).
- wifi: ath12k: Optimize the mac80211 hw data access (bsc#1227149).
- wifi: ath12k: Read board id to support split-PHY QCN9274 (bsc#1227149).
- wifi: ath12k: Refactor the mac80211 hw access from link/radio (bsc#1227149).
- wifi: ath12k: Remove ath12k_base::bd_api (bsc#1227149).
- wifi: ath12k: Remove obsolete struct wmi_peer_flags_map *peer_flags (bsc#1227149).
- wifi: ath12k: Remove some dead code (bsc#1227149).
- wifi: ath12k: Remove struct ath12k::ops (bsc#1227149).
- wifi: ath12k: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: ath12k: Remove unnecessary struct qmi_txn initializers (bsc#1227149).
- wifi: ath12k: Remove unused declarations (bsc#1227149).
- wifi: ath12k: Remove unused scan_flags from struct ath12k_wmi_scan_req_arg (bsc#1227149).
- wifi: ath12k: Set default beacon mode to burst mode (bsc#1227149).
- wifi: ath12k: Update Qualcomm Innovation Center, Inc. copyrights (stable-fixes).
- wifi: ath12k: Use initializers for QMI message buffers (bsc#1227149).
- wifi: ath12k: Use msdu_end to check MCBC (bsc#1227149).
- wifi: ath12k: Use pdev_id rather than mac_id to get pdev (bsc#1227149).
- wifi: ath12k: WMI support to process EHT capabilities (bsc#1227149).
- wifi: ath12k: add 320 MHz bandwidth enums (bsc#1227149).
- wifi: ath12k: add CE and ext IRQ flag to indicate irq_handler (bsc#1227149).
- wifi: ath12k: add EHT PHY modes (bsc#1227149).
- wifi: ath12k: add MAC id support in WBM error path (bsc#1227149).
- wifi: ath12k: add MLO header in peer association (bsc#1227149).
- wifi: ath12k: add P2P IE in beacon template (bsc#1227149).
- wifi: ath12k: add QMI PHY capability learn support (bsc#1227149).
- wifi: ath12k: add WMI support for EHT peer (bsc#1227149).
- wifi: ath12k: add ath12k_qmi_free_resource() for recovery (bsc#1227149).
- wifi: ath12k: add fallback board name without variant while searching board-2.bin (bsc#1227149).
- wifi: ath12k: add firmware-2.bin support (bsc#1227149).
- wifi: ath12k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED (bsc#1227149).
- wifi: ath12k: add keep backward compatibility of PHY mode to avoid firmware crash (bsc#1227149).
- wifi: ath12k: add msdu_end structure for WCN7850 (bsc#1227149).
- wifi: ath12k: add parsing of phy bitmap for reg rules (bsc#1227149).
- wifi: ath12k: add processing for TWT disable event (bsc#1227149).
- wifi: ath12k: add processing for TWT enable event (bsc#1227149).
- wifi: ath12k: add qmi_cnss_feature_bitmap field to hardware parameters (bsc#1227149).
- wifi: ath12k: add rcu lock for ath12k_wmi_p2p_noa_event() (bsc#1227149).
- wifi: ath12k: add read variant from SMBIOS for download board data (bsc#1227149).
- wifi: ath12k: add string type to search board data in board-2.bin for WCN7850 (bsc#1227149).
- wifi: ath12k: add support for BA1024 (bsc#1227149).
- wifi: ath12k: add support for collecting firmware log (bsc#1227149).
- wifi: ath12k: add support for hardware rfkill for WCN7850 (bsc#1227149).
- wifi: ath12k: add support for peer meta data version (bsc#1227149).
- wifi: ath12k: add support one MSI vector (bsc#1227149).
- wifi: ath12k: add support to search regdb data in board-2.bin for WCN7850 (bsc#1227149).
- wifi: ath12k: add wait operation for tx management packets for flush from mac80211 (bsc#1227149).
- wifi: ath12k: advertise P2P dev support for WCN7850 (bsc#1227149).
- wifi: ath12k: allow specific mgmt frame tx while vdev is not up (bsc#1227149).
- wifi: ath12k: ath12k_start_vdev_delay(): convert to use ar (bsc#1227149).
- wifi: ath12k: avoid deadlock by change ieee80211_queue_work for regd_update_work (bsc#1227149).
- wifi: ath12k: avoid duplicated vdev stop (git-fixes).
- wifi: ath12k: avoid explicit HW conversion argument in Rxdma replenish (bsc#1227149).
- wifi: ath12k: avoid explicit RBM id argument in Rxdma replenish (bsc#1227149).
- wifi: ath12k: avoid explicit mac id argument in Rxdma replenish (bsc#1227149).
- wifi: ath12k: avoid repeated hw access from ar (bsc#1227149).
- wifi: ath12k: avoid repeated wiphy access from hw (bsc#1227149).
- wifi: ath12k: call ath12k_mac_fils_discovery() without condition (bsc#1227149).
- wifi: ath12k: change DMA direction while mapping reinjected packets (git-fixes).
- wifi: ath12k: change MAC buffer ring size to 2048 (bsc#1227149).
- wifi: ath12k: change WLAN_SCAN_PARAMS_MAX_IE_LEN from 256 to 512 (bsc#1227149).
- wifi: ath12k: change interface combination for P2P mode (bsc#1227149).
- wifi: ath12k: change to initialize recovery variables earlier in ath12k_core_reset() (bsc#1227149).
- wifi: ath12k: change to treat alpha code na as world wide regdomain (bsc#1227149).
- wifi: ath12k: change to use dynamic memory for channel list of scan (bsc#1227149).
- wifi: ath12k: check M3 buffer size as well whey trying to reuse it (bsc#1227149).
- wifi: ath12k: check hardware major version for WCN7850 (bsc#1227149).
- wifi: ath12k: configure RDDM size to MHI for device recovery (bsc#1227149).
- wifi: ath12k: configure puncturing bitmap (bsc#1227149).
- wifi: ath12k: correct the data_type from QMI_OPT_FLAG to QMI_UNSIGNED_1_BYTE for mlo_capable (bsc#1227149).
- wifi: ath12k: delete the timer rx_replenish_retry during rmmod (bsc#1227149).
- wifi: ath12k: designating channel frequency for ROC scan (bsc#1227149).
- wifi: ath12k: disable QMI PHY capability learn in split-phy QCN9274 (bsc#1227149).
- wifi: ath12k: do not drop data frames from unassociated stations (bsc#1227149).
- wifi: ath12k: do not restore ASPM in case of single MSI vector (bsc#1227149).
- wifi: ath12k: drop NULL pointer check in ath12k_update_per_peer_tx_stats() (bsc#1227149).
- wifi: ath12k: drop failed transmitted frames from metric calculation (git-fixes).
- wifi: ath12k: enable 320 MHz bandwidth for 6 GHz band in EHT PHY capability for WCN7850 (bsc#1227149).
- wifi: ath12k: enable 802.11 power save mode in station mode (bsc#1227149).
- wifi: ath12k: enable IEEE80211_HW_SINGLE_SCAN_ON_ALL_BANDS for WCN7850 (bsc#1227149).
- wifi: ath12k: fetch correct pdev id from WMI_SERVICE_READY_EXT_EVENTID (bsc#1227149).
- wifi: ath12k: fix PCI read and write (bsc#1227149).
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan (bsc#1227149).
- wifi: ath12k: fix broken structure wmi_vdev_create_cmd (bsc#1227149).
- wifi: ath12k: fix conf_mutex in ath12k_mac_op_unassign_vif_chanctx() (bsc#1227149).
- wifi: ath12k: fix debug messages (bsc#1227149).
- wifi: ath12k: fix fetching MCBC flag for QCN9274 (bsc#1227149).
- wifi: ath12k: fix firmware assert during insmod in memory segment mode (bsc#1227149).
- wifi: ath12k: fix firmware crash during reo reinject (git-fixes).
- wifi: ath12k: fix invalid m3 buffer address (bsc#1227149).
- wifi: ath12k: fix invalid memory access while processing fragmented packets (git-fixes).
- wifi: ath12k: fix kernel crash during resume (bsc#1227149).
- wifi: ath12k: fix license in p2p.c and p2p.h (bsc#1227149).
- wifi: ath12k: fix out-of-bound access of qmi_invoke_handler() (git-fixes).
- wifi: ath12k: fix peer metadata parsing (git-fixes).
- wifi: ath12k: fix potential wmi_mgmt_tx_queue race condition (bsc#1227149).
- wifi: ath12k: fix radar detection in 160 MHz (bsc#1227149).
- wifi: ath12k: fix recovery fail while firmware crash when doing channel switch (bsc#1227149).
- wifi: ath12k: fix the error handler of rfkill config (bsc#1227149).
- wifi: ath12k: fix the issue that the multicast/broadcast indicator is not read correctly for WCN7850 (bsc#1227149).
- wifi: ath12k: fix the problem that down grade phy mode operation (bsc#1227149).
- wifi: ath12k: fix wrong definition of CE ring's base address (git-fixes).
- wifi: ath12k: fix wrong definitions of hal_reo_update_rx_queue (bsc#1227149).
- wifi: ath12k: get msi_data again after request_irq is called (bsc#1227149).
- wifi: ath12k: implement handling of P2P NoA event (bsc#1227149).
- wifi: ath12k: implement remain on channel for P2P mode (bsc#1227149).
- wifi: ath12k: increase vdev setup timeout (bsc#1227149).
- wifi: ath12k: indicate NON MBSSID vdev by default during vdev start (bsc#1227149).
- wifi: ath12k: indicate scan complete for scan canceled when scan running (bsc#1227149).
- wifi: ath12k: indicate to mac80211 scan complete with aborted flag for ATH12K_SCAN_STARTING state (bsc#1227149).
- wifi: ath12k: move HE capabilities processing to a new function (bsc#1227149).
- wifi: ath12k: move peer delete after vdev stop of station for WCN7850 (bsc#1227149).
- wifi: ath12k: parse WMI service ready ext2 event (bsc#1227149).
- wifi: ath12k: peer assoc for 320 MHz (bsc#1227149).
- wifi: ath12k: prepare EHT peer assoc parameters (bsc#1227149).
- wifi: ath12k: propagate EHT capabilities to userspace (bsc#1227149).
- wifi: ath12k: refactor DP Rxdma ring structure (bsc#1227149).
- wifi: ath12k: refactor QMI MLO host capability helper function (bsc#1227149).
- wifi: ath12k: refactor ath12k_bss_assoc() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_allocate() and ath12k_mac_destroy() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_ampdu_action() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_conf_tx() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_config() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_configure_filter() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_flush() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_start() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_stop() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_update_vif_offload() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_register() and ath12k_mac_unregister() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_setup_channels_rates() (bsc#1227149).
- wifi: ath12k: refactor ath12k_wmi_tlv_parse_alloc() (bsc#1227149).
- wifi: ath12k: refactor multiple MSI vector implementation (bsc#1227149).
- wifi: ath12k: refactor the rfkill worker (bsc#1227149).
- wifi: ath12k: register EHT mesh capabilities (bsc#1227149).
- wifi: ath12k: relax list iteration in ath12k_mac_vif_unref() (bsc#1227149).
- wifi: ath12k: relocate ath12k_dp_pdev_pre_alloc() call (bsc#1227149).
- wifi: ath12k: remove hal_desc_sz from hw params (bsc#1227149).
- wifi: ath12k: remove redundant memset() in ath12k_hal_reo_qdesc_setup() (bsc#1227149).
- wifi: ath12k: remove the unused scan_events from ath12k_wmi_scan_req_arg (bsc#1227149).
- wifi: ath12k: remove unused ATH12K_BD_IE_BOARD_EXT (bsc#1227149).
- wifi: ath12k: rename HE capabilities setup/copy functions (bsc#1227149).
- wifi: ath12k: rename the sc naming convention to ab (bsc#1227149).
- wifi: ath12k: rename the wmi_sc naming convention to wmi_ab (bsc#1227149).
- wifi: ath12k: replace ENOTSUPP with EOPNOTSUPP (bsc#1227149).
- wifi: ath12k: send WMI_PEER_REORDER_QUEUE_SETUP_CMDID when ADDBA session starts (bsc#1227149).
- wifi: ath12k: set IRQ affinity to CPU0 in case of one MSI vector (bsc#1227149).
- wifi: ath12k: set PERST pin no pull request for WCN7850 (bsc#1227149).
- wifi: ath12k: split hal_ops to support RX TLVs word mask compaction (bsc#1227149).
- wifi: ath12k: subscribe required word mask from rx tlv (bsc#1227149).
- wifi: ath12k: support default regdb while searching board-2.bin for WCN7850 (bsc#1227149).
- wifi: ath12k: trigger station disconnect on hardware restart (bsc#1227149).
- wifi: ath12k: use ATH12K_PCI_IRQ_DP_OFFSET for DP IRQ (bsc#1227149).
- wifi: ath12k: use correct flag field for 320 MHz channels (bsc#1227149).
- wifi: ath12k: use select for CRYPTO_MICHAEL_MIC (bsc#1227149).
- wifi: ath5k: Convert to platform remove callback returning void (bsc#1227149).
- wifi: ath5k: Remove redundant dev_err() (bsc#1227149).
- wifi: ath5k: ath5k_hw_get_median_noise_floor(): use swap() (bsc#1227149).
- wifi: ath5k: remove phydir check from ath5k_debug_init_device() (bsc#1227149).
- wifi: ath5k: remove unnecessary (void*) conversions (bsc#1227149).
- wifi: ath5k: remove unused ath5k_eeprom_info::ee_antenna (bsc#1227149).
- wifi: ath5k: replace deprecated strncpy with strscpy (bsc#1227149).
- wifi: ath6kl: Remove error checking for debugfs_create_dir() (bsc#1227149).
- wifi: ath6kl: remove unnecessary (void*) conversions (bsc#1227149).
- wifi: ath6kl: replace deprecated strncpy with memcpy (bsc#1227149).
- wifi: ath9k: Convert to platform remove callback returning void (bsc#1227149).
- wifi: ath9k: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: ath9k: Remove unnecessary ternary operators (bsc#1227149).
- wifi: ath9k: Remove unused declarations (bsc#1227149).
- wifi: ath9k: avoid using uninitialized array (bsc#1227149).
- wifi: ath9k: clean up function ath9k_hif_usb_resume (bsc#1227149).
- wifi: ath9k: consistently use kstrtoX_from_user() functions (bsc#1227149).
- wifi: ath9k: delete some unused/duplicate macros (bsc#1227149).
- wifi: ath9k: fix LNA selection in ath_ant_try_scan() (stable-fixes).
- wifi: ath9k: fix parameter check in ath9k_init_debug() (bsc#1227149).
- wifi: ath9k: remove redundant assignment to variable ret (bsc#1227149).
- wifi: ath9k: reset survey of current channel after a scan started (bsc#1227149).
- wifi: ath9k: simplify ar9003_hw_process_ini() (bsc#1227149).
- wifi: ath9k: use u32 for txgain indexes (bsc#1227149).
- wifi: ath9k: work around memset overflow warning (bsc#1227149).
- wifi: ath9k_htc: fix format-truncation warning (bsc#1227149).
- wifi: ath: Use is_multicast_ether_addr() to check multicast Ether address (bsc#1227149).
- wifi: ath: dfs_pattern_detector: Use flex array to simplify code (bsc#1227149).
- wifi: ath: remove unused-but-set parameter (bsc#1227149).
- wifi: ath: work around false-positive stringop-overread warning (bsc#1227149).
- wifi: atk10k: Do not opencode ath10k_pci_priv() in ath10k_ahb_priv() (bsc#1227149).
- wifi: atmel: remove unused ioctl function (bsc#1227149).
- wifi: b43: silence sparse warnings (bsc#1227149).
- wifi: brcm80211: replace deprecated strncpy with strscpy (bsc#1227149).
- wifi: brcmfmac: Add DMI nvram filename quirk for ACEPC W5 Pro (stable-fixes).
- wifi: brcmfmac: Annotate struct brcmf_gscan_config with __counted_by (bsc#1227149).
- wifi: brcmfmac: Demote vendor-specific attach/detach messages to info (git-fixes).
- wifi: brcmfmac: Detect corner error case earlier with log (bsc#1227149).
- wifi: brcmfmac: add linefeed at end of file (bsc#1227149).
- wifi: brcmfmac: add per-vendor feature detection callback (stable-fixes).
- wifi: brcmfmac: allow per-vendor event handling (bsc#1227149).
- wifi: brcmfmac: cfg80211: Use WSEC to set SAE password (stable-fixes).
- wifi: brcmfmac: do not cast hidden SSID attribute value to boolean (bsc#1227149).
- wifi: brcmfmac: do not pass hidden SSID attribute as value directly (bsc#1227149).
- wifi: brcmfmac: export firmware interface functions (bsc#1227149).
- wifi: brcmfmac: firmware: Annotate struct brcmf_fw_request with __counted_by (bsc#1227149).
- wifi: brcmfmac: fix format-truncation warnings (bsc#1227149).
- wifi: brcmfmac: fix gnu_printf warnings (bsc#1227149).
- wifi: brcmfmac: fweh: Add __counted_by for struct brcmf_fweh_queue_item and use struct_size() (bsc#1227149).
- wifi: brcmfmac: fweh: Fix boot crash on Raspberry Pi 4 (bsc#1227149).
- wifi: brcmfmac: move feature overrides before feature_disable (bsc#1227149).
- wifi: brcmfmac: pcie: handle randbuf allocation failure (git-fixes).
- wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device (git-fixes).
- wifi: brcmsmac: cleanup SCB-related data types (bsc#1227149).
- wifi: brcmsmac: fix gnu_printf warnings (bsc#1227149).
- wifi: brcmsmac: phy: Remove unreachable code (bsc#1227149).
- wifi: brcmsmac: remove more unused data types (bsc#1227149).
- wifi: brcmsmac: remove unused data type (bsc#1227149).
- wifi: brcmsmac: replace deprecated strncpy with memcpy (bsc#1227149).
- wifi: brcmsmac: silence sparse warnings (bsc#1227149).
- wifi: brcmutil: use helper function pktq_empty() instead of open code (bsc#1227149).
- wifi: carl9170: Remove redundant assignment to pointer super (bsc#1227149).
- wifi: carl9170: add a proper sanity check for endpoints (git-fixes).
- wifi: carl9170: re-fix fortified-memset warning (git-fixes).
- wifi: carl9170: remove unnecessary (void*) conversions (bsc#1227149).
- wifi: cfg80211: Add support for setting TID to link mapping (bsc#1227149).
- wifi: cfg80211: Allow AP/P2PGO to indicate port authorization to peer STA/P2PClient (bsc#1227149).
- wifi: cfg80211: Extend support for scanning while MLO connected (bsc#1227149).
- wifi: cfg80211: Fix typo in documentation (bsc#1227149).
- wifi: cfg80211: Handle specific BSSID in 6GHz scanning (bsc#1227149).
- wifi: cfg80211: Include operating class 137 in 6GHz band (bsc#1227149).
- wifi: cfg80211: Lock wiphy in cfg80211_get_station (git-fixes).
- wifi: cfg80211: OWE DH IE handling offload (bsc#1227149).
- wifi: cfg80211: Replace ENOTSUPP with EOPNOTSUPP (bsc#1227149).
- wifi: cfg80211: Schedule regulatory check on BSS STA channel change (bsc#1227149).
- wifi: cfg80211: Update the default DSCP-to-UP mapping (bsc#1227149).
- wifi: cfg80211: add BSS usage reporting (bsc#1227149).
- wifi: cfg80211: add RNR with reporting AP information (bsc#1227149).
- wifi: cfg80211: add a flag to disable wireless extensions (bsc#1227149).
- wifi: cfg80211: add local_state_change to deauth trace (bsc#1227149).
- wifi: cfg80211: add locked debugfs wrappers (bsc#1227149).
- wifi: cfg80211: add support for SPP A-MSDUs (bsc#1227149).
- wifi: cfg80211: address several kerneldoc warnings (bsc#1227149).
- wifi: cfg80211: allow reg update by driver even if wiphy-&gt;regd is set (bsc#1227149).
- wifi: cfg80211: annotate iftype_data pointer with sparse (bsc#1227149).
- wifi: cfg80211: avoid double free if updating BSS fails (bsc#1227149).
- wifi: cfg80211: call reg_call_notifier on beacon hints (bsc#1227149).
- wifi: cfg80211: check A-MSDU format more carefully (stable-fixes).
- wifi: cfg80211: check RTNL when iterating devices (bsc#1227149).
- wifi: cfg80211: check wiphy mutex is held for wdev mutex (bsc#1227149).
- wifi: cfg80211: consume both probe response and beacon IEs (bsc#1227149).
- wifi: cfg80211: detect stuck ECSA element in probe resp (bsc#1227149).
- wifi: cfg80211: ensure cfg80211_bss_update frees IEs on error (bsc#1227149).
- wifi: cfg80211: export DFS CAC time and usable state helper functions (bsc#1227149).
- wifi: cfg80211: expose nl80211_chan_width_to_mhz for wide sharing (bsc#1227149).
- wifi: cfg80211: fix 6 GHz scan request building (stable-fixes).
- wifi: cfg80211: fix CQM for non-range use (bsc#1227149).
- wifi: cfg80211: fix header kernel-doc typos (bsc#1227149).
- wifi: cfg80211: fix kernel-doc for wiphy_delayed_work_flush() (bsc#1227149).
- wifi: cfg80211: fix rdev_dump_mpp() arguments order (stable-fixes).
- wifi: cfg80211: fix spelling &amp; punctutation (bsc#1227149).
- wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class (stable-fixes).
- wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() (git-fixes).
- wifi: cfg80211: fully move wiphy work to unbound workqueue (git-fixes).
- wifi: cfg80211: generate an ML element for per-STA profiles (bsc#1227149).
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (git-fixes).
- wifi: cfg80211: handle UHB AP and STA power type (bsc#1227149).
- wifi: cfg80211: hold wiphy lock in cfg80211_any_wiphy_oper_chan() (bsc#1227149).
- wifi: cfg80211: hold wiphy mutex for send_interface (bsc#1227149).
- wifi: cfg80211: improve documentation for flag fields (bsc#1227149).
- wifi: cfg80211: introduce cfg80211_ssid_eq() (bsc#1227149).
- wifi: cfg80211: make RX assoc data const (bsc#1227149).
- wifi: cfg80211: make read-only array centers_80mhz static const (bsc#1227149).
- wifi: cfg80211: modify prototype for change_beacon (bsc#1227149).
- wifi: cfg80211: pmsr: use correct nla_get_uX functions (git-fixes).
- wifi: cfg80211: reg: Support P2P operation on DFS channels (bsc#1227149).
- wifi: cfg80211: reg: describe return values in kernel-doc (bsc#1227149).
- wifi: cfg80211: reg: fix various kernel-doc issues (bsc#1227149).
- wifi: cfg80211: reg: hold wiphy mutex for wdev iteration (bsc#1227149).
- wifi: cfg80211: remove scan_width support (bsc#1227149).
- wifi: cfg80211: remove wdev mutex (bsc#1227149).
- wifi: cfg80211: rename UHB to 6 GHz (bsc#1227149).
- wifi: cfg80211: report per-link errors during association (bsc#1227149).
- wifi: cfg80211: report unprotected deauth/disassoc in wowlan (bsc#1227149).
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (git-fixes).
- wifi: cfg80211: save power spectral density(psd) of regulatory rule (bsc#1227149).
- wifi: cfg80211: set correct param change count in ML element (bsc#1227149).
- wifi: cfg80211: sme: hold wiphy lock for wdev iteration (bsc#1227149).
- wifi: cfg80211: sort certificates in build (bsc#1227149).
- wifi: cfg80211: split struct cfg80211_ap_settings (bsc#1227149).
- wifi: cfg80211: validate HE operation element parsing (bsc#1227149).
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (stable-fixes).
- wifi: cfg80211: wext: convert return value to kernel-doc (bsc#1227149).
- wifi: cfg80211: wext: set ssids=NULL for passive scans (git-fixes).
- wifi: cw1200: Avoid processing an invalid TIM IE (bsc#1227149).
- wifi: cw1200: Convert to GPIO descriptors (bsc#1227149).
- wifi: cw1200: fix __le16 sparse warnings (bsc#1227149).
- wifi: cw1200: restore endian swapping (bsc#1227149).
- wifi: drivers: Explicitly include correct DT includes (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for Broadcom WLAN (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for ar5523 (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for mt76 drivers (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for p54spi (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for wcn36xx (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for wilc1000 (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for wl1251 and wl12xx (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for wl18xx (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for wlcore (bsc#1227149).
- wifi: hostap: Add __counted_by for struct prism2_download_data and use struct_size() (bsc#1227149).
- wifi: hostap: fix stringop-truncations GCC warning (bsc#1227149).
- wifi: hostap: remove unused ioctl function (bsc#1227149).
- wifi: ieee80211: add UL-bandwidth definition of trigger frame (bsc#1227149).
- wifi: ieee80211: add definitions for negotiated TID to Link map (bsc#1227149).
- wifi: ieee80211: check for NULL in ieee80211_mle_size_ok() (stable-fixes).
- wifi: ieee80211: fix ieee80211_mle_basic_sta_prof_size_ok() (git-fixes).
- wifi: iwlmei: do not send SAP messages if AMT is disabled (bsc#1227149).
- wifi: iwlmei: do not send nic info with invalid mac address (bsc#1227149).
- wifi: iwlmei: send HOST_GOES_DOWN message even if wiamt is disabled (bsc#1227149).
- wifi: iwlmei: send driver down SAP message only if wiamt is enabled (bsc#1227149).
- wifi: iwlmvm: fw: Add new OEM vendor to tas approved list (bsc#1227149).
- wifi: iwlwifi: Add rf_mapping of new wifi7 devices (bsc#1227149).
- wifi: iwlwifi: Add support for PPAG cmd v5 and PPAG revision 3 (bsc#1227149).
- wifi: iwlwifi: Add support for new 802.11be device (bsc#1227149).
- wifi: iwlwifi: Do not mark DFS channels as NO-IR (bsc#1227149).
- wifi: iwlwifi: Extract common prph mac/phy regions data dump logic (bsc#1227149).
- wifi: iwlwifi: Fix spelling mistake "SESION" -&gt; "SESSION" (bsc#1227149).
- wifi: iwlwifi: Use request_module_nowait (bsc#1227149).
- wifi: iwlwifi: abort scan when rfkill on but device enabled (bsc#1227149).
- wifi: iwlwifi: add HONOR to PPAG approved list (bsc#1227149).
- wifi: iwlwifi: add Razer to ppag approved list (bsc#1227149).
- wifi: iwlwifi: add mapping of a periphery register crf for WH RF (bsc#1227149).
- wifi: iwlwifi: add new RF support for wifi7 (bsc#1227149).
- wifi: iwlwifi: add support for SNPS DPHYIP region type (bsc#1227149).
- wifi: iwlwifi: add support for a wiphy_work rx handler (bsc#1227149).
- wifi: iwlwifi: add support for activating UNII-1 in WW via BIOS (bsc#1227149).
- wifi: iwlwifi: add support for new ini region types (bsc#1227149).
- wifi: iwlwifi: adjust rx_phyinfo debugfs to MLO (bsc#1227149).
- wifi: iwlwifi: always have 'uats_enabled' (bsc#1227149).
- wifi: iwlwifi: api: clean up some kernel-doc/typos (bsc#1227149).
- wifi: iwlwifi: api: dbg-tlv: fix up kernel-doc (bsc#1227149).
- wifi: iwlwifi: api: fix a small upper/lower-case typo (bsc#1227149).
- wifi: iwlwifi: api: fix center_freq label in PHY diagram (bsc#1227149).
- wifi: iwlwifi: api: fix constant version to match FW (bsc#1227149).
- wifi: iwlwifi: api: fix kernel-doc reference (bsc#1227149).
- wifi: iwlwifi: bump FW API to 84 for AX/BZ/SC devices (bsc#1227149).
- wifi: iwlwifi: bump FW API to 86 for AX/BZ/SC devices (bsc#1227149).
- wifi: iwlwifi: bump FW API to 87 for AX/BZ/SC devices (bsc#1227149).
- wifi: iwlwifi: bump FW API to 88 for AX/BZ/SC devices (bsc#1227149).
- wifi: iwlwifi: cancel session protection only if there is one (bsc#1227149).
- wifi: iwlwifi: change link id in time event to s8 (bsc#1227149).
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware() (bsc#1227149).
- wifi: iwlwifi: cleanup BT Shared Single Antenna code (bsc#1227149).
- wifi: iwlwifi: cleanup sending PER_CHAIN_LIMIT_OFFSET_CMD (bsc#1227149).
- wifi: iwlwifi: cleanup uefi variables loading (bsc#1227149).
- wifi: iwlwifi: clear link_id in time_event (bsc#1227149).
- wifi: iwlwifi: dbg-tlv: avoid extra allocation/copy (bsc#1227149).
- wifi: iwlwifi: dbg-tlv: use struct_size() for allocation (bsc#1227149).
- wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef (git-fixes).
- wifi: iwlwifi: disable 160 MHz based on subsystem device ID (bsc#1227149).
- wifi: iwlwifi: disable eSR when BT is active (bsc#1227149).
- wifi: iwlwifi: disable multi rx queue for 9000 (bsc#1227149).
- wifi: iwlwifi: do not check TAS block list size twice (bsc#1227149).
- wifi: iwlwifi: do not use TRUE/FALSE with bool (bsc#1227149).
- wifi: iwlwifi: drop NULL pointer check in iwl_mvm_tzone_set_trip_temp() (bsc#1227149).
- wifi: iwlwifi: dvm: remove kernel-doc warnings (bsc#1227149).
- wifi: iwlwifi: error-dump: fix kernel-doc issues (bsc#1227149).
- wifi: iwlwifi: fail NIC access fast on dead NIC (bsc#1227149).
- wifi: iwlwifi: fix #ifdef CONFIG_ACPI check (bsc#1227149).
- wifi: iwlwifi: fix iwl_mvm_get_valid_rx_ant() (git-fixes).
- wifi: iwlwifi: fix opmode start/stop race (bsc#1227149).
- wifi: iwlwifi: fix some kernel-doc issues (bsc#1227149).
- wifi: iwlwifi: fix some kernel-doc issues (bsc#1227149).
- wifi: iwlwifi: fix system commands group ordering (bsc#1227149).
- wifi: iwlwifi: fix the rf step and flavor bits range (bsc#1227149).
- wifi: iwlwifi: fw: Add support for UATS table in UHB (bsc#1227149).
- wifi: iwlwifi: fw: Fix debugfs command sending (bsc#1227149).
- wifi: iwlwifi: fw: allow vmalloc for PNVM image (bsc#1227149).
- wifi: iwlwifi: fw: dbg: ensure correct config name sizes (bsc#1227149).
- wifi: iwlwifi: fw: disable firmware debug asserts (bsc#1227149).
- wifi: iwlwifi: fw: do not always use FW dump trig (git-fixes).
- wifi: iwlwifi: fw: file: clean up kernel-doc (bsc#1227149).
- wifi: iwlwifi: fw: file: do not use [0] for variable arrays (bsc#1227149).
- wifi: iwlwifi: fw: fix compile w/o CONFIG_ACPI (git-fixes).
- wifi: iwlwifi: fw: fix compiler warning for NULL string print (bsc#1227149).
- wifi: iwlwifi: fw: increase fw_version string size (bsc#1227149).
- wifi: iwlwifi: fw: reconstruct the API/CAPA enum number (bsc#1227149).
- wifi: iwlwifi: fw: replace deprecated strncpy with strscpy_pad (bsc#1227149).
- wifi: iwlwifi: handle per-phy statistics from fw (bsc#1227149).
- wifi: iwlwifi: implement GLAI ACPI table loading (bsc#1227149).
- wifi: iwlwifi: implement can_activate_links callback (bsc#1227149).
- wifi: iwlwifi: implement enable/disable for China 2022 regulatory (bsc#1227149).
- wifi: iwlwifi: iwl-fh.h: fix kernel-doc issues (bsc#1227149).
- wifi: iwlwifi: iwl-trans.h: clean up kernel-doc (bsc#1227149).
- wifi: iwlwifi: iwlmvm: handle unprotected deauth/disassoc in d3 (bsc#1227149).
- wifi: iwlwifi: load b0 version of ucode for HR1/HR2 (bsc#1227149).
- wifi: iwlwifi: make TB reallocation a debug message (bsc#1227149).
- wifi: iwlwifi: make time_events MLO aware (bsc#1227149).
- wifi: iwlwifi: mei: return error from register when not built (bsc#1227149).
- wifi: iwlwifi: mvm: Add basic link selection logic (bsc#1227149).
- wifi: iwlwifi: mvm: Add support for removing responder TKs (bsc#1227149).
- wifi: iwlwifi: mvm: Allow DFS concurrent operation (bsc#1227149).
- wifi: iwlwifi: mvm: Configure the link mapping for non-MLD FW (bsc#1227149).
- wifi: iwlwifi: mvm: Correctly report TSF data in scan complete (bsc#1227149).
- wifi: iwlwifi: mvm: Declare support for secure LTF measurement (bsc#1227149).
- wifi: iwlwifi: mvm: Do not warn if valid link pair was not found (bsc#1227149).
- wifi: iwlwifi: mvm: Do not warn on invalid link on scan complete (bsc#1227149).
- wifi: iwlwifi: mvm: Extend support for P2P service discovery (bsc#1227149).
- wifi: iwlwifi: mvm: Fix FTM initiator flags (bsc#1227149).
- wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill (stable-fixes).
- wifi: iwlwifi: mvm: Fix unreachable code path (bsc#1227149).
- wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd (stable-fixes).
- wifi: iwlwifi: mvm: Keep connection in case of missed beacons during RX (bsc#1227149).
- wifi: iwlwifi: mvm: Return success if link could not be removed (bsc#1227149).
- wifi: iwlwifi: mvm: Use the link ID provided in scan request (bsc#1227149).
- wifi: iwlwifi: mvm: add US/Canada MCC to API (bsc#1227149).
- wifi: iwlwifi: mvm: add a debug print when we get a BAR (bsc#1227149).
- wifi: iwlwifi: mvm: add a debugfs hook to clear the monitor data (bsc#1227149).
- wifi: iwlwifi: mvm: add a per-link debugfs (bsc#1227149).
- wifi: iwlwifi: mvm: add a print when sending RLC command (bsc#1227149).
- wifi: iwlwifi: mvm: add start mac ctdp sum calculation debugfs handler (bsc#1227149).
- wifi: iwlwifi: mvm: add support for TID to link mapping neg request (bsc#1227149).
- wifi: iwlwifi: mvm: add support for new wowlan_info_notif (bsc#1227149).
- wifi: iwlwifi: mvm: advertise MLO only if EHT is enabled (bsc#1227149).
- wifi: iwlwifi: mvm: advertise support for SCS traffic description (bsc#1227149).
- wifi: iwlwifi: mvm: advertise support for protected ranging negotiation (bsc#1227149).
- wifi: iwlwifi: mvm: allocate STA links only for active links (git-fixes).
- wifi: iwlwifi: mvm: always update keys in D3 exit (bsc#1227149).
- wifi: iwlwifi: mvm: avoid garbage iPN (bsc#1227149).
- wifi: iwlwifi: mvm: calculate EMLSR mode after connection (bsc#1227149).
- wifi: iwlwifi: mvm: check AP supports EMLSR (bsc#1227149).
- wifi: iwlwifi: mvm: check for iwl_mvm_mld_update_sta() errors (bsc#1227149).
- wifi: iwlwifi: mvm: check link more carefully (bsc#1227149).
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (git-fixes).
- wifi: iwlwifi: mvm: check own capabilities for EMLSR (bsc#1227149).
- wifi: iwlwifi: mvm: cleanup MLO and non-MLO unification code (bsc#1227149).
- wifi: iwlwifi: mvm: combine condition/warning (bsc#1227149).
- wifi: iwlwifi: mvm: consider having one active link (bsc#1227149).
- wifi: iwlwifi: mvm: const-ify chandef pointers (bsc#1227149).
- wifi: iwlwifi: mvm: cycle FW link on chanctx removal (bsc#1227149).
- wifi: iwlwifi: mvm: d3: avoid intermediate/early mutex unlock (bsc#1227149).
- wifi: iwlwifi: mvm: d3: disconnect on GTK rekey failure (bsc#1227149).
- wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup (stable-fixes).
- wifi: iwlwifi: mvm: d3: implement suspend with MLO (bsc#1227149).
- wifi: iwlwifi: mvm: debugfs for fw system stats (bsc#1227149).
- wifi: iwlwifi: mvm: define RX queue sync timeout as a macro (bsc#1227149).
- wifi: iwlwifi: mvm: disable MLO for the time being (bsc#1227149).
- wifi: iwlwifi: mvm: disallow puncturing in US/Canada (bsc#1227149).
- wifi: iwlwifi: mvm: disconnect long CSA only w/o alternative (bsc#1227149).
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed (bsc#1227149).
- wifi: iwlwifi: mvm: do not abort queue sync in CT-kill (bsc#1227149).
- wifi: iwlwifi: mvm: do not add dummy phy context (bsc#1227149).
- wifi: iwlwifi: mvm: do not always disable EMLSR due to BT coex (bsc#1227149).
- wifi: iwlwifi: mvm: do not do duplicate detection for nullfunc packets (bsc#1227149).
- wifi: iwlwifi: mvm: do not initialize csa_work twice (git-fixes).
- wifi: iwlwifi: mvm: do not limit VLP/AFC to UATS-enabled (git-fixes).
- wifi: iwlwifi: mvm: do not read past the mfuart notifcation (git-fixes).
- wifi: iwlwifi: mvm: do not send BT_COEX_CI command on new devices (bsc#1227149).
- wifi: iwlwifi: mvm: do not send NDPs for new tx devices (bsc#1227149).
- wifi: iwlwifi: mvm: do not send STA_DISABLE_TX_CMD for newer firmware (bsc#1227149).
- wifi: iwlwifi: mvm: do not send the smart fifo command if not needed (bsc#1227149).
- wifi: iwlwifi: mvm: do not set trigger frame padding in AP mode (bsc#1227149).
- wifi: iwlwifi: mvm: do not support reduced tx power on ack for new devices (bsc#1227149).
- wifi: iwlwifi: mvm: do not wake up rx_sync_waitq upon RFKILL (git-fixes).
- wifi: iwlwifi: mvm: enable FILS DF Tx on non-PSC channel (bsc#1227149).
- wifi: iwlwifi: mvm: enable HE TX/RX &amp;lt;242 tone RU on new RFs (bsc#1227149).
- wifi: iwlwifi: mvm: expand queue sync warning messages (bsc#1227149).
- wifi: iwlwifi: mvm: extend alive timeout to 2 seconds (bsc#1227149).
- wifi: iwlwifi: mvm: fix ROC version check (bsc#1227149).
- wifi: iwlwifi: mvm: fix SB CFG check (bsc#1227149).
- wifi: iwlwifi: mvm: fix a battery life regression (bsc#1227149).
- wifi: iwlwifi: mvm: fix a crash on 7265 (bsc#1227149).
- wifi: iwlwifi: mvm: fix active link counting during recovery (git-fixes).
- wifi: iwlwifi: mvm: fix check in iwl_mvm_sta_fw_id_mask (git-fixes).
- wifi: iwlwifi: mvm: fix kernel-doc (bsc#1227149).
- wifi: iwlwifi: mvm: fix link ID management (bsc#1227149).
- wifi: iwlwifi: mvm: fix recovery flow in CSA (bsc#1227149).
- wifi: iwlwifi: mvm: fix regdb initialization (bsc#1227149).
- wifi: iwlwifi: mvm: fix the PHY context resolution for p2p device (bsc#1227149).
- wifi: iwlwifi: mvm: fix the TXF mapping for BZ devices (bsc#1227149).
- wifi: iwlwifi: mvm: fix the key PN index (bsc#1227149).
- wifi: iwlwifi: mvm: fix thermal kernel-doc (bsc#1227149).
- wifi: iwlwifi: mvm: fold the ref++ into iwl_mvm_phy_ctxt_add (bsc#1227149).
- wifi: iwlwifi: mvm: guard against invalid STA ID on removal (stable-fixes).
- wifi: iwlwifi: mvm: handle BA session teardown in RF-kill (stable-fixes).
- wifi: iwlwifi: mvm: handle debugfs names more carefully (bsc#1227149).
- wifi: iwlwifi: mvm: handle link-STA allocation in restart (bsc#1227149).
- wifi: iwlwifi: mvm: implement ROC version 3 (bsc#1227149).
- wifi: iwlwifi: mvm: implement new firmware API for statistics (bsc#1227149).
- wifi: iwlwifi: mvm: include link ID when releasing frames (git-fixes).
- wifi: iwlwifi: mvm: increase session protection after CSA (bsc#1227149).
- wifi: iwlwifi: mvm: init vif works only once (git-fixes).
- wifi: iwlwifi: mvm: introduce PHY_CONTEXT_CMD_API_VER_5 (bsc#1227149).
- wifi: iwlwifi: mvm: introduce esr_disable_reason (bsc#1227149).
- wifi: iwlwifi: mvm: iterate active links for STA queues (bsc#1227149).
- wifi: iwlwifi: mvm: limit EHT 320 MHz MCS for STEP URM (bsc#1227149).
- wifi: iwlwifi: mvm: limit pseudo-D3 to 60 seconds (bsc#1227149).
- wifi: iwlwifi: mvm: log dropped frames (bsc#1227149).
- wifi: iwlwifi: mvm: log dropped packets due to MIC error (bsc#1227149).
- wifi: iwlwifi: mvm: make "pldr_sync" mode effective (bsc#1227149).
- wifi: iwlwifi: mvm: make functions public (bsc#1227149).
- wifi: iwlwifi: mvm: make pldr_sync AX210 specific (bsc#1227149).
- wifi: iwlwifi: mvm: move BA notif messages before action (bsc#1227149).
- wifi: iwlwifi: mvm: move RU alloc B2 placement (bsc#1227149).
- wifi: iwlwifi: mvm: move listen interval to constants (bsc#1227149).
- wifi: iwlwifi: mvm: offload IGTK in AP if BIGTK is supported (bsc#1227149).
- wifi: iwlwifi: mvm: partially support PHY context version 6 (bsc#1227149).
- wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF (bsc#1227149).
- wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option (stable-fixes).
- wifi: iwlwifi: mvm: reduce maximum RX A-MPDU size (bsc#1227149).
- wifi: iwlwifi: mvm: refactor TX rate handling (bsc#1227149).
- wifi: iwlwifi: mvm: refactor duplicate chanctx condition (bsc#1227149).
- wifi: iwlwifi: mvm: remove EHT code from mac80211.c (bsc#1227149).
- wifi: iwlwifi: mvm: remove IWL_MVM_STATUS_NEED_FLUSH_P2P (bsc#1227149).
- wifi: iwlwifi: mvm: remove flags for enable/disable beacon filter (bsc#1227149).
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one (git-fixes).
- wifi: iwlwifi: mvm: remove one queue sync on BA session stop (bsc#1227149).
- wifi: iwlwifi: mvm: remove set_tim callback for MLD ops (bsc#1227149).
- wifi: iwlwifi: mvm: remove stale STA link data during restart (stable-fixes).
- wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd (git-fixes).
- wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 (git-fixes).
- wifi: iwlwifi: mvm: rework debugfs handling (bsc#1227149).
- wifi: iwlwifi: mvm: rfi: fix potential response leaks (git-fixes).
- wifi: iwlwifi: mvm: select STA mask only for active links (git-fixes).
- wifi: iwlwifi: mvm: set properly mac header (git-fixes).
- wifi: iwlwifi: mvm: show dump even for pldr_sync (bsc#1227149).
- wifi: iwlwifi: mvm: show skb_mac_gso_segment() failure reason (bsc#1227149).
- wifi: iwlwifi: mvm: simplify the reorder buffer (bsc#1227149).
- wifi: iwlwifi: mvm: skip adding debugfs symlink for reconfig (bsc#1227149).
- wifi: iwlwifi: mvm: support CSA with MLD (bsc#1227149).
- wifi: iwlwifi: mvm: support SPP A-MSDUs (bsc#1227149).
- wifi: iwlwifi: mvm: support flush on AP interfaces (bsc#1227149).
- wifi: iwlwifi: mvm: support injection antenna control (bsc#1227149).
- wifi: iwlwifi: mvm: support iwl_dev_tx_power_cmd_v8 (bsc#1227149).
- wifi: iwlwifi: mvm: support set_antenna() (bsc#1227149).
- wifi: iwlwifi: mvm: unlock mvm if there is no primary link (bsc#1227149).
- wifi: iwlwifi: mvm: use correct address 3 in A-MSDU (stable-fixes).
- wifi: iwlwifi: mvm: use fast balance scan in case of an active P2P GO (bsc#1227149).
- wifi: iwlwifi: mvm: use the new command to clear the internal buffer (bsc#1227149).
- wifi: iwlwifi: mvm: work around A-MSDU size problem (bsc#1227149).
- wifi: iwlwifi: no power save during transition to D3 (bsc#1227149).
- wifi: iwlwifi: nvm-parse: advertise common packet padding (bsc#1227149).
- wifi: iwlwifi: nvm: parse the VLP/AFC bit from regulatory (bsc#1227149).
- wifi: iwlwifi: pcie: (re-)assign BAR0 on driver bind (bsc#1227149).
- wifi: iwlwifi: pcie: Add new PCI device id and CNVI (bsc#1227149).
- wifi: iwlwifi: pcie: Add the PCI device id for new hardware (stable-fixes).
- wifi: iwlwifi: pcie: clean up WFPM control bits (bsc#1227149).
- wifi: iwlwifi: pcie: clean up device removal work (bsc#1227149).
- wifi: iwlwifi: pcie: clean up gen1/gen2 TFD unmap (bsc#1227149).
- wifi: iwlwifi: pcie: do not allow hw-rfkill to stop device on gen2 (bsc#1227149).
- wifi: iwlwifi: pcie: dump CSRs before removal (bsc#1227149).
- wifi: iwlwifi: pcie: enable TOP fatal error interrupt (bsc#1227149).
- wifi: iwlwifi: pcie: fix RB status reading (stable-fixes).
- wifi: iwlwifi: pcie: fix kernel-doc issues (bsc#1227149).
- wifi: iwlwifi: pcie: get_crf_id() can be void (bsc#1227149).
- wifi: iwlwifi: pcie: give up mem read if HW is dead (bsc#1227149).
- wifi: iwlwifi: pcie: move gen1 TB handling to header (bsc#1227149).
- wifi: iwlwifi: pcie: point invalid TFDs to invalid data (bsc#1227149).
- wifi: iwlwifi: pcie: propagate iwl_pcie_gen2_apm_init() error (bsc#1227149).
- wifi: iwlwifi: pcie: rescan bus if no parent (bsc#1227149).
- wifi: iwlwifi: prepare for reading DSM from UEFI (bsc#1227149).
- wifi: iwlwifi: prepare for reading PPAG table from UEFI (bsc#1227149).
- wifi: iwlwifi: prepare for reading SAR tables from UEFI (bsc#1227149).
- wifi: iwlwifi: prepare for reading SPLC from UEFI (bsc#1227149).
- wifi: iwlwifi: prepare for reading TAS table from UEFI (bsc#1227149).
- wifi: iwlwifi: properly check if link is active (bsc#1227149).
- wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK (stable-fixes).
- wifi: iwlwifi: queue: fix kernel-doc (bsc#1227149).
- wifi: iwlwifi: queue: improve warning for no skb in reclaim (bsc#1227149).
- wifi: iwlwifi: queue: move iwl_txq_gen2_set_tb() up (bsc#1227149).
- wifi: iwlwifi: read DSM func 2 for specific RF types (bsc#1227149).
- wifi: iwlwifi: read DSM functions from UEFI (bsc#1227149).
- wifi: iwlwifi: read ECKV table from UEFI (bsc#1227149).
- wifi: iwlwifi: read PPAG table from UEFI (bsc#1227149).
- wifi: iwlwifi: read SAR tables from UEFI (bsc#1227149).
- wifi: iwlwifi: read SPLC from UEFI (bsc#1227149).
- wifi: iwlwifi: read WRDD table from UEFI (bsc#1227149).
- wifi: iwlwifi: read WTAS table from UEFI (bsc#1227149).
- wifi: iwlwifi: read mac step from aux register (bsc#1227149).
- wifi: iwlwifi: read txq-&gt;read_ptr under lock (stable-fixes).
- wifi: iwlwifi: reconfigure TLC during HW restart (git-fixes).
- wifi: iwlwifi: refactor RX tracing (bsc#1227149).
- wifi: iwlwifi: remove 'def_rx_queue' struct member (bsc#1227149).
- wifi: iwlwifi: remove Gl A-step remnants (bsc#1227149).
- wifi: iwlwifi: remove WARN from read_mem32() (bsc#1227149).
- wifi: iwlwifi: remove async command callback (bsc#1227149).
- wifi: iwlwifi: remove dead-code (bsc#1227149).
- wifi: iwlwifi: remove extra kernel-doc (bsc#1227149).
- wifi: iwlwifi: remove memory check for LMAC error address (bsc#1227149).
- wifi: iwlwifi: remove retry loops in start (bsc#1227149).
- wifi: iwlwifi: remove unused function prototype (bsc#1227149).
- wifi: iwlwifi: replace ENOTSUPP with EOPNOTSUPP (bsc#1227149).
- wifi: iwlwifi: return negative -EINVAL instead of positive EINVAL (bsc#1227149).
- wifi: iwlwifi: rfi: use a single DSM function for all RFI configurations (bsc#1227149).
- wifi: iwlwifi: send EDT table to FW (bsc#1227149).
- wifi: iwlwifi: separate TAS 'read-from-BIOS' and 'send-to-FW' flows (bsc#1227149).
- wifi: iwlwifi: simplify getting DSM from ACPI (bsc#1227149).
- wifi: iwlwifi: skip affinity setting on non-SMP (bsc#1227149).
- wifi: iwlwifi: skip opmode start retries on dead transport (bsc#1227149).
- wifi: iwlwifi: small cleanups in PPAG table flows (bsc#1227149).
- wifi: iwlwifi: support link command version 2 (bsc#1227149).
- wifi: iwlwifi: support link id in SESSION_PROTECTION_NOTIF (bsc#1227149).
- wifi: iwlwifi: support link_id in SESSION_PROTECTION cmd (bsc#1227149).
- wifi: iwlwifi: take SGOM and UATS code out of ACPI ifdef (bsc#1227149).
- wifi: iwlwifi: take send-DSM-to-FW flows out of ACPI ifdef (bsc#1227149).
- wifi: iwlwifi: trace full frames with TX status request (bsc#1227149).
- wifi: iwlwifi: update context info structure definitions (bsc#1227149).
- wifi: iwlwifi: use system_unbound_wq for debug dump (bsc#1227149).
- wifi: iwlwifi: validate PPAG table when sent to FW (bsc#1227149).
- wifi: lib80211: remove unused variables iv32 and iv16 (bsc#1227149).
- wifi: libertas: Follow renaming of SPI "master" to "controller" (bsc#1227149).
- wifi: libertas: add missing calls to cancel_work_sync() (bsc#1227149).
- wifi: libertas: cleanup SDIO reset (bsc#1227149).
- wifi: libertas: handle possible spu_write_u16() errors (bsc#1227149).
- wifi: libertas: prefer kstrtoX() for simple integer conversions (bsc#1227149).
- wifi: libertas: simplify list operations in free_if_spi_card() (bsc#1227149).
- wifi: libertas: use convenient lists to manage SDIO packets (bsc#1227149).
- wifi: mac80211: Add __counted_by for struct ieee802_11_elems and use struct_size() (bsc#1227149).
- wifi: mac80211: Avoid address calculations via out of bounds array indexing (stable-fixes).
- wifi: mac80211: Check if we had first beacon with relevant links (bsc#1227149).
- wifi: mac80211: Do not force off-channel for management Tx with MLO (bsc#1227149).
- wifi: mac80211: Do not include crypto/algapi.h (bsc#1227149).
- wifi: mac80211: Extend support for scanning while MLO connected (bsc#1227149).
- wifi: mac80211: Fix SMPS handling in the context of MLO (bsc#1227149).
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (git-fixes).
- wifi: mac80211: Notify the low level driver on change in MLO valid links (bsc#1227149).
- wifi: mac80211: Print local link address during authentication (bsc#1227149).
- wifi: mac80211: Recalc offload when monitor stop (git-fixes).
- wifi: mac80211: Remove unused function declarations (bsc#1227149).
- wifi: mac80211: Rename and update IEEE80211_VIF_DISABLE_SMPS_OVERRIDE (bsc#1227149).
- wifi: mac80211: Replace ENOTSUPP with EOPNOTSUPP (bsc#1227149).
- wifi: mac80211: Sanity check tx bitrate if not provided by driver (bsc#1227149).
- wifi: mac80211: Schedule regulatory channels check on bandwith change (bsc#1227149).
- wifi: mac80211: Skip association timeout update after comeback rejection (bsc#1227149).
- wifi: mac80211: add a driver callback to add vif debugfs (bsc#1227149).
- wifi: mac80211: add a driver callback to check active_links (bsc#1227149).
- wifi: mac80211: add a flag to disallow puncturing (bsc#1227149).
- wifi: mac80211: add back SPDX identifier (bsc#1227149).
- wifi: mac80211: add ieee80211_tdls_sta_link_id() (stable-fixes).
- wifi: mac80211: add link id to ieee80211_gtk_rekey_add() (bsc#1227149).
- wifi: mac80211: add link id to mgd_prepare_tx() (bsc#1227149).
- wifi: mac80211: add more ops assertions (bsc#1227149).
- wifi: mac80211: add more warnings about inserting sta info (bsc#1227149).
- wifi: mac80211: add support for SPP A-MSDUs (bsc#1227149).
- wifi: mac80211: add support for mld in ieee80211_chswitch_done (bsc#1227149).
- wifi: mac80211: add support for parsing TID to Link mapping element (bsc#1227149).
- wifi: mac80211: add/remove driver debugfs entries as appropriate (bsc#1227149).
- wifi: mac80211: additions to change_beacon() (bsc#1227149).
- wifi: mac80211: address some kerneldoc warnings (bsc#1227149).
- wifi: mac80211: allow 64-bit radiotap timestamps (bsc#1227149).
- wifi: mac80211: allow for_each_sta_active_link() under RCU (bsc#1227149).
- wifi: mac80211: apply mcast rate only if interface is up (stable-fixes).
- wifi: mac80211: cancel multi-link reconf work on disconnect (git-fixes).
- wifi: mac80211: chanctx emulation set CHANGE_CHANNEL when in_reconfig (git-fixes).
- wifi: mac80211: check EHT/TTLM action frame length (bsc#1227149).
- wifi: mac80211: check wiphy mutex in ops (bsc#1227149).
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (stable-fixes).
- wifi: mac80211: clean up assignments to pointer cache (stable-fixes).
- wifi: mac80211: cleanup airtime arithmetic with ieee80211_sta_keep_active() (bsc#1227149).
- wifi: mac80211: cleanup auth_data only if association continues (bsc#1227149).
- wifi: mac80211: convert A-MPDU work to wiphy work (bsc#1227149).
- wifi: mac80211: correctly parse Spatial Reuse Parameter Set element (git-fixes).
- wifi: mac80211: correctly set active links upon TTLM (bsc#1227149).
- wifi: mac80211: correcty limit wider BW TDLS STAs (git-fixes).
- wifi: mac80211: debugfs: lock wiphy instead of RTNL (bsc#1227149).
- wifi: mac80211: describe return values in kernel-doc (bsc#1227149).
- wifi: mac80211: disable softirqs for queued frame handling (git-fixes).
- wifi: mac80211: do not connect to an AP while it's in a CSA process (bsc#1227149).
- wifi: mac80211: do not re-add debugfs entries during resume (bsc#1227149).
- wifi: mac80211: do not select link ID if not provided in scan request (bsc#1227149).
- wifi: mac80211: do not set ESS capab bit in assoc request (bsc#1227149).
- wifi: mac80211: do not use rate mask for scanning (stable-fixes).
- wifi: mac80211: drop robust action frames before assoc (bsc#1227149).
- wifi: mac80211: drop spurious WARN_ON() in ieee80211_ibss_csa_beacon() (bsc#1227149).
- wifi: mac80211: ensure beacon is non-S1G prior to extracting the beacon timestamp field (stable-fixes).
- wifi: mac80211: ethtool: always hold wiphy mutex (bsc#1227149).
- wifi: mac80211: ethtool: hold wiphy mutex (bsc#1227149).
- wifi: mac80211: expand __ieee80211_data_to_8023() status (bsc#1227149).
- wifi: mac80211: extend wiphy lock in interface removal (bsc#1227149).
- wifi: mac80211: fix BA session teardown race (bsc#1227149).
- wifi: mac80211: fix BSS_CHANGED_UNSOL_BCAST_PROBE_RESP (bsc#1227149).
- wifi: mac80211: fix SMPS status handling (bsc#1227149).
- wifi: mac80211: fix TXQ error path and cleanup (bsc#1227149).
- wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (stable-fixes).
- wifi: mac80211: fix a expired vs. cancel race in roc (bsc#1227149).
- wifi: mac80211: fix advertised TTLM scheduling (bsc#1227149).
- wifi: mac80211: fix another key installation error path (bsc#1227149).
- wifi: mac80211: fix change_address deadlock during unregister (bsc#1227149).
- wifi: mac80211: fix channel switch link data (bsc#1227149).
- wifi: mac80211: fix driver debugfs for vif type change (bsc#1227149).
- wifi: mac80211: fix error path key leak (bsc#1227149).
- wifi: mac80211: fix header kernel-doc typos (bsc#1227149).
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (stable-fixes).
- wifi: mac80211: fix ieee80211_drop_unencrypted_mgmt return type/value (bsc#1227149).
- wifi: mac80211: fix monitor channel with chanctx emulation (bsc#1227149).
- wifi: mac80211: fix potential key leak (bsc#1227149).
- wifi: mac80211: fix prep_connection error path (stable-fixes).
- wifi: mac80211: fix spelling typo in comment (bsc#1227149).
- wifi: mac80211: fix unaligned le16 access (git-fixes).
- wifi: mac80211: fix unsolicited broadcast probe config (bsc#1227149).
- wifi: mac80211: fix various kernel-doc issues (bsc#1227149).
- wifi: mac80211: fixes in FILS discovery updates (bsc#1227149).
- wifi: mac80211: flush STA queues on unauthorization (bsc#1227149).
- wifi: mac80211: flush wiphy work where appropriate (bsc#1227149).
- wifi: mac80211: handle debugfs when switching to/from MLO (bsc#1227149).
- wifi: mac80211: handle tasklet frames before stopping (stable-fixes).
- wifi: mac80211: hold wiphy lock in netdev/link debugfs (bsc#1227149).
- wifi: mac80211: hold wiphy_lock around concurrency checks (bsc#1227149).
- wifi: mac80211: improve CSA/ECSA connection refusal (bsc#1227149).
- wifi: mac80211: initialize SMPS mode correctly (bsc#1227149).
- wifi: mac80211: lock wiphy for aggregation debugfs (bsc#1227149).
- wifi: mac80211: lock wiphy in IP address notifier (bsc#1227149).
- wifi: mac80211: make mgd_protect_tdls_discover MLO-aware (bsc#1227149).
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (git-fixes).
- wifi: mac80211: mesh: Remove unused function declaration mesh_ids_set_default() (bsc#1227149).
- wifi: mac80211: mesh: fix some kdoc warnings (bsc#1227149).
- wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (stable-fixes).
- wifi: mac80211: move CSA finalize to wiphy work (bsc#1227149).
- wifi: mac80211: move DFS CAC work to wiphy work (bsc#1227149).
- wifi: mac80211: move TDLS work to wiphy work (bsc#1227149).
- wifi: mac80211: move color change finalize to wiphy work (bsc#1227149).
- wifi: mac80211: move dynamic PS to wiphy work (bsc#1227149).
- wifi: mac80211: move filter reconfig to wiphy work (bsc#1227149).
- wifi: mac80211: move key tailroom work to wiphy work (bsc#1227149).
- wifi: mac80211: move link activation work to wiphy work (bsc#1227149).
- wifi: mac80211: move monitor work to wiphy work (bsc#1227149).
- wifi: mac80211: move tspec work to wiphy work (bsc#1227149).
- wifi: mac80211: only call drv_sta_rc_update for uploaded stations (stable-fixes).
- wifi: mac80211: process and save negotiated TID to Link mapping request (bsc#1227149).
- wifi: mac80211: purge TX queues in flush_queues flow (bsc#1227149).
- wifi: mac80211: reduce iflist_mtx (bsc#1227149).
- wifi: mac80211: reject MLO channel configuration if not supported (bsc#1227149).
- wifi: mac80211: relax RCU check in for_each_vif_active_link() (bsc#1227149).
- wifi: mac80211: remove RX_DROP_UNUSABLE (bsc#1227149).
- wifi: mac80211: remove ampdu_mlme.mtx (bsc#1227149).
- wifi: mac80211: remove chanctx_mtx (bsc#1227149).
- wifi: mac80211: remove key_mtx (bsc#1227149).
- wifi: mac80211: remove link before AP (git-fixes).
- wifi: mac80211: remove local-&gt;mtx (bsc#1227149).
- wifi: mac80211: remove redundant ML element check (bsc#1227149).
- wifi: mac80211: remove shifted rate support (bsc#1227149).
- wifi: mac80211: remove sta_mtx (bsc#1227149).
- wifi: mac80211: remove unnecessary struct forward declaration (bsc#1227149).
- wifi: mac80211: rename ieee80211_tx_status() to ieee80211_tx_status_skb() (bsc#1227149).
- wifi: mac80211: rename struct cfg80211_rx_assoc_resp to cfg80211_rx_assoc_resp_data (bsc#1227149).
- wifi: mac80211: report per-link error during association (bsc#1227149).
- wifi: mac80211: reset negotiated TTLM on disconnect (git-fixes).
- wifi: mac80211: rework RX timestamp flags (bsc#1227149).
- wifi: mac80211: rework ack_frame_id handling a bit (bsc#1227149).
- wifi: mac80211: rx.c: fix sentence grammar (bsc#1227149).
- wifi: mac80211: set wiphy for virtual monitors (bsc#1227149).
- wifi: mac80211: simplify non-chanctx drivers (bsc#1227149).
- wifi: mac80211: split ieee80211_drop_unencrypted_mgmt() return value (bsc#1227149).
- wifi: mac80211: sta_info.c: fix sentence grammar (bsc#1227149).
- wifi: mac80211: support antenna control in injection (bsc#1227149).
- wifi: mac80211: support handling of advertised TID-to-link mapping (bsc#1227149).
- wifi: mac80211: take MBSSID/EHT data also from probe resp (bsc#1227149).
- wifi: mac80211: take wiphy lock for MAC addr change (bsc#1227149).
- wifi: mac80211: tx: clarify conditions in if statement (bsc#1227149).
- wifi: mac80211: update beacon counters per link basis (bsc#1227149).
- wifi: mac80211: update some locking documentation (bsc#1227149).
- wifi: mac80211: update the rx_chains after set_antenna() (bsc#1227149).
- wifi: mac80211: use bandwidth indication element for CSA (bsc#1227149).
- wifi: mac80211: use deflink and fix typo in link ID check (bsc#1227149).
- wifi: mac80211: use wiphy locked debugfs for sdata/link (bsc#1227149).
- wifi: mac80211: use wiphy locked debugfs helpers for agg_status (bsc#1227149).
- wifi: mac80211_hwsim: init peer measurement result (git-fixes).
- wifi: mt7601u: delete dead code checking debugfs returns (bsc#1227149).
- wifi: mt7601u: replace strlcpy() with strscpy() (bsc#1227149).
- wifi: mt76: Annotate struct mt76_rx_tid with __counted_by (bsc#1227149).
- wifi: mt76: Convert to platform remove callback returning void (bsc#1227149).
- wifi: mt76: Remove redundant assignment to variable tidno (bsc#1227149).
- wifi: mt76: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: mt76: Replace strlcpy() with strscpy() (bsc#1227149).
- wifi: mt76: Use PTR_ERR_OR_ZERO() to simplify code (bsc#1227149).
- wifi: mt76: add DMA mapping error check in mt76_alloc_txwi() (bsc#1227149).
- wifi: mt76: add ability to explicitly forbid LED registration with DT (bsc#1227149).
- wifi: mt76: add support for providing eeprom in nvmem cells (bsc#1227149).
- wifi: mt76: add tx_nss histogram to ethtool stats (bsc#1227149).
- wifi: mt76: change txpower init to per-phy (bsc#1227149).
- wifi: mt76: check sta rx control frame to multibss capability (bsc#1227149).
- wifi: mt76: check txs format before getting skb by pid (bsc#1227149).
- wifi: mt76: check vif type before reporting cca and csa (bsc#1227149).
- wifi: mt76: connac: add MBSSID support for mt7996 (bsc#1227149).
- wifi: mt76: connac: add beacon duplicate TX mode support for mt7996 (bsc#1227149).
- wifi: mt76: connac: add beacon protection support for mt7996 (bsc#1227149).
- wifi: mt76: connac: add connac3 mac library (bsc#1227149).
- wifi: mt76: connac: add data field in struct tlv (bsc#1227149).
- wifi: mt76: connac: add eht support for phy mode config (bsc#1227149).
- wifi: mt76: connac: add eht support for tx power (bsc#1227149).
- wifi: mt76: connac: add firmware support for mt7992 (bsc#1227149).
- wifi: mt76: connac: add more unified command IDs (bsc#1227149).
- wifi: mt76: connac: add more unified event IDs (bsc#1227149).
- wifi: mt76: connac: add new definition of tx descriptor (bsc#1227149).
- wifi: mt76: connac: add support for dsp firmware download (bsc#1227149).
- wifi: mt76: connac: add support to set ifs time by mcu command (bsc#1227149).
- wifi: mt76: connac: add thermal protection support for mt7996 (bsc#1227149).
- wifi: mt76: connac: check for null before dereferencing (bsc#1227149).
- wifi: mt76: connac: export functions for mt7925 (bsc#1227149).
- wifi: mt76: connac: introduce helper for mt7925 chipset (bsc#1227149).
- wifi: mt76: connac: set correct muar_idx for mt799x chipsets (bsc#1227149).
- wifi: mt76: connac: set fixed_bw bit in TX descriptor for fixed rate frames (bsc#1227149).
- wifi: mt76: connac: use muar idx 0xe for non-mt799x as well (bsc#1227149).
- wifi: mt76: disable HW AMSDU when using fixed rate (bsc#1227149).
- wifi: mt76: dma: introduce __mt76_dma_queue_reset utility routine (bsc#1227149).
- wifi: mt76: enable UNII-4 channel 177 support (bsc#1227149).
- wifi: mt76: fix race condition related to checking tx queue fill status (bsc#1227149).
- wifi: mt76: fix the issue of missing txpwr settings from ch153 to ch177 (bsc#1227149).
- wifi: mt76: fix typo in mt76_get_of_eeprom_from_nvmem function (bsc#1227149).
- wifi: mt76: increase MT_QFLAG_WED_TYPE size (bsc#1227149).
- wifi: mt76: introduce mt76_queue_is_wed_tx_free utility routine (bsc#1227149).
- wifi: mt76: introduce wed pointer in mt76_queue (bsc#1227149).
- wifi: mt76: limit support of precal loading for mt7915 to MTD only (bsc#1227149).
- wifi: mt76: make mt76_get_of_eeprom static again (bsc#1227149).
- wifi: mt76: mmio: move mt76_mmio_wed_{init,release}_rx_buf in common code (bsc#1227149).
- wifi: mt76: move ampdu_state in mt76_wcid (bsc#1227149).
- wifi: mt76: move mt76_mmio_wed_offload_{enable,disable} in common code (bsc#1227149).
- wifi: mt76: move mt76_net_setup_tc in common code (bsc#1227149).
- wifi: mt76: move rate info in mt76_vif (bsc#1227149).
- wifi: mt76: move wed reset common code in mt76 module (bsc#1227149).
- wifi: mt76: mt7603: add missing register initialization for MT7628 (bsc#1227149).
- wifi: mt76: mt7603: add wpdma tx eof flag for PSE client reset (git-fixes).
- wifi: mt76: mt7603: disable A-MSDU tx support on MT7628 (bsc#1227149).
- wifi: mt76: mt7603: fix beacon interval after disabling a single vif (bsc#1227149).
- wifi: mt76: mt7603: fix tx filter/flush function (bsc#1227149).
- wifi: mt76: mt7603: fix tx queue of loopback packets (git-fixes).
- wifi: mt76: mt7603: rely on shared poll_list field (bsc#1227149).
- wifi: mt76: mt7603: rely on shared sta_poll_list and sta_poll_lock (bsc#1227149).
- wifi: mt76: mt7615: add missing chanctx ops (bsc#1227149).
- wifi: mt76: mt7615: enable BSS_CHANGED_MU_GROUPS support (bsc#1227149).
- wifi: mt76: mt7615: rely on shared poll_list field (bsc#1227149).
- wifi: mt76: mt7615: rely on shared sta_poll_list and sta_poll_lock (bsc#1227149).
- wifi: mt76: mt76_connac3: move lmac queue enumeration in mt76_connac3_mac.h (bsc#1227149).
- wifi: mt76: mt76x02: fix return value check in mt76x02_mac_process_rx (bsc#1227149).
- wifi: mt76: mt76x2u: add netgear wdna3100v3 to device table (bsc#1227149).
- wifi: mt76: mt7915 add tc offloading support (bsc#1227149).
- wifi: mt76: mt7915: accumulate mu-mimo ofdma muru stats (bsc#1227149).
- wifi: mt76: mt7915: add locking for accessing mapped registers (bsc#1227149).
- wifi: mt76: mt7915: add missing chanctx ops (bsc#1227149).
- wifi: mt76: mt7915: add support for MT7981 (bsc#1227149).
- wifi: mt76: mt7915: also MT7981 is 3T3R but nss2 on 5 GHz band (bsc#1227149).
- wifi: mt76: mt7915: disable WFDMA Tx/Rx during SER recovery (bsc#1227149).
- wifi: mt76: mt7915: drop return in mt7915_sta_statistics (bsc#1227149).
- wifi: mt76: mt7915: fix EEPROM offset of TSSI flag on MT7981 (bsc#1227149).
- wifi: mt76: mt7915: fix error recovery with WED enabled (bsc#1227149).
- wifi: mt76: mt7915: fix monitor mode issues (bsc#1227149).
- wifi: mt76: mt7915: move mib_stats structure in mt76.h (bsc#1227149).
- wifi: mt76: mt7915: move poll_list in mt76_wcid (bsc#1227149).
- wifi: mt76: mt7915: move sta_poll_list and sta_poll_lock in mt76_dev (bsc#1227149).
- wifi: mt76: mt7915: report tx retries/failed counts for non-WED path (bsc#1227149).
- wifi: mt76: mt7915: update mpdu density capability (bsc#1227149).
- wifi: mt76: mt7915: update mt798x_wmac_adie_patch_7976 (bsc#1227149).
- wifi: mt76: mt7915: workaround too long expansion sparse warnings (git-fixes).
- wifi: mt76: mt7921: Support temp sensor (bsc#1227149).
- wifi: mt76: mt7921: add 6GHz power type support for clc (bsc#1227149).
- wifi: mt76: mt7921: convert acpisar and clc pointers to void (bsc#1227149).
- wifi: mt76: mt7921: enable set txpower for UNII-4 (bsc#1227149).
- wifi: mt76: mt7921: fix 6GHz disabled by the missing default CLC config (bsc#1227149).
- wifi: mt76: mt7921: fix CLC command timeout when suspend/resume (bsc#1227149).
- wifi: mt76: mt7921: fix a potential association failure upon resuming (bsc#1227149).
- wifi: mt76: mt7921: fix kernel panic by accessing invalid 6GHz channel info (bsc#1227149).
- wifi: mt76: mt7921: fix suspend issue on MediaTek COB platform (bsc#1227149).
- wifi: mt76: mt7921: fix the unfinished command of regd_notifier before suspend (bsc#1227149).
- wifi: mt76: mt7921: fix wrong 6Ghz power type (bsc#1227149).
- wifi: mt76: mt7921: get regulatory information from the clc event (bsc#1227149).
- wifi: mt76: mt7921: get rid of MT7921_RESET_TIMEOUT marco (bsc#1227149).
- wifi: mt76: mt7921: make mt7921_mac_sta_poll static (bsc#1227149).
- wifi: mt76: mt7921: move acpi_sar code in mt792x-lib module (bsc#1227149).
- wifi: mt76: mt7921: move common register definition in mt792x_regs.h (bsc#1227149).
- wifi: mt76: mt7921: move connac nic capability handling to mt7921 (bsc#1227149).
- wifi: mt76: mt7921: move debugfs shared code in mt792x-lib module (bsc#1227149).
- wifi: mt76: mt7921: move dma shared code in mt792x-lib module (bsc#1227149).
- wifi: mt76: mt7921: move hif_ops macro in mt792x.h (bsc#1227149).
- wifi: mt76: mt7921: move init shared code in mt792x-lib module (bsc#1227149).
- wifi: mt76: mt7921: move mac shared code in mt792x-lib module (bsc#1227149).
- wifi: mt76: mt7921: move mt7921_dma_init in pci.c (bsc#1227149).
- wifi: mt76: mt7921: move mt7921u_disconnect mt792x-lib (bsc#1227149).
- wifi: mt76: mt7921: move mt792x_hw_dev in mt792x.h (bsc#1227149).
- wifi: mt76: mt7921: move mt792x_mutex_{acquire/release} in mt792x.h (bsc#1227149).
- wifi: mt76: mt7921: move runtime-pm pci code in mt792x-lib (bsc#1227149).
- wifi: mt76: mt7921: move shared runtime-pm code on mt792x-lib (bsc#1227149).
- wifi: mt76: mt7921: reduce the size of MCU firmware download Rx queue (bsc#1227149).
- wifi: mt76: mt7921: rely on mib_stats shared definition (bsc#1227149).
- wifi: mt76: mt7921: rely on shared poll_list field (bsc#1227149).
- wifi: mt76: mt7921: rely on shared sta_poll_list and sta_poll_lock (bsc#1227149).
- wifi: mt76: mt7921: remove macro duplication in regs.h (bsc#1227149).
- wifi: mt76: mt7921: rename mt7921_dev in mt792x_dev (bsc#1227149).
- wifi: mt76: mt7921: rename mt7921_hif_ops in mt792x_hif_ops (bsc#1227149).
- wifi: mt76: mt7921: rename mt7921_phy in mt792x_phy (bsc#1227149).
- wifi: mt76: mt7921: rename mt7921_sta in mt792x_sta (bsc#1227149).
- wifi: mt76: mt7921: rename mt7921_vif in mt792x_vif (bsc#1227149).
- wifi: mt76: mt7921: support 5.9/6GHz channel config in acpi (bsc#1227149).
- wifi: mt76: mt7921: update the channel usage when the regd domain changed (bsc#1227149).
- wifi: mt76: mt7921e: report tx retries/failed counts in tx free event (bsc#1227149).
- wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (stable-fixes).
- wifi: mt76: mt7925: add Mediatek Wi-Fi7 driver for mt7925 chips (bsc#1227149).
- wifi: mt76: mt7925: add flow to avoid chip bt function fail (bsc#1227149).
- wifi: mt76: mt7925: add support to set ifs time by mcu command (bsc#1227149).
- wifi: mt76: mt7925: ensure 4-byte alignment for suspend &amp; wow command (bsc#1227149).
- wifi: mt76: mt7925: fix SAP no beacon issue in 5Ghz and 6Ghz band (bsc#1227149).
- wifi: mt76: mt7925: fix WoW failed in encrypted mode (bsc#1227149).
- wifi: mt76: mt7925: fix connect to 80211b mode fail in 2Ghz band (bsc#1227149).
- wifi: mt76: mt7925: fix fw download fail (bsc#1227149).
- wifi: mt76: mt7925: fix mcu query command fail (bsc#1227149).
- wifi: mt76: mt7925: fix the wrong data type for scan command (bsc#1227149).
- wifi: mt76: mt7925: fix the wrong header translation config (bsc#1227149).
- wifi: mt76: mt7925: fix typo in mt7925_init_he_caps (bsc#1227149).
- wifi: mt76: mt7925: fix wmm queue mapping (bsc#1227149).
- wifi: mt76: mt7925: remove iftype from mt7925_init_eht_caps signature (bsc#1227149).
- wifi: mt76: mt7925: support temperature sensor (bsc#1227149).
- wifi: mt76: mt7925: update PCIe DMA settings (bsc#1227149).
- wifi: mt76: mt7925e: fix use-after-free in free_irq() (bsc#1227149).
- wifi: mt76: mt792x: add the illegal value check for mtcl table of acpi (bsc#1227149).
- wifi: mt76: mt792x: fix ethtool warning (bsc#1227149).
- wifi: mt76: mt792x: introduce mt792x-lib module (bsc#1227149).
- wifi: mt76: mt792x: introduce mt792x-usb module (bsc#1227149).
- wifi: mt76: mt792x: introduce mt792x_irq_map (bsc#1227149).
- wifi: mt76: mt792x: move MT7921_PM_TIMEOUT and MT7921_HW_SCAN_TIMEOUT in common code (bsc#1227149).
- wifi: mt76: mt792x: move more dma shared code in mt792x_dma (bsc#1227149).
- wifi: mt76: mt792x: move mt7921_load_firmware in mt792x-lib module (bsc#1227149).
- wifi: mt76: mt792x: move mt7921_skb_add_usb_sdio_hdr in mt792x module (bsc#1227149).
- wifi: mt76: mt792x: move shared structure definition in mt792x.h (bsc#1227149).
- wifi: mt76: mt792x: move some common usb code in mt792x module (bsc#1227149).
- wifi: mt76: mt792x: support mt7925 chip init (bsc#1227149).
- wifi: mt76: mt792x: update the country list of EU for ACPI SAR (bsc#1227149).
- wifi: mt76: mt792xu: enable dmashdl support (bsc#1227149).
- wifi: mt76: mt7996: Add mcu commands for getting sta tx statistic (bsc#1227149).
- wifi: mt76: mt7996: Use DECLARE_FLEX_ARRAY() and fix -Warray-bounds warnings (bsc#1227149).
- wifi: mt76: mt7996: add DMA support for mt7992 (bsc#1227149).
- wifi: mt76: mt7996: add TX statistics for EHT mode in debugfs (bsc#1227149).
- wifi: mt76: mt7996: add locking for accessing mapped registers (stable-fixes).
- wifi: mt76: mt7996: add muru support (bsc#1227149).
- wifi: mt76: mt7996: add sanity checks for background radar trigger (stable-fixes).
- wifi: mt76: mt7996: add support for variants with auxiliary RX path (bsc#1227149).
- wifi: mt76: mt7996: add thermal sensor device support (bsc#1227149).
- wifi: mt76: mt7996: add txpower setting support (bsc#1227149).
- wifi: mt76: mt7996: adjust WFDMA settings to improve performance (bsc#1227149).
- wifi: mt76: mt7996: adjust interface num and wtbl size for mt7992 (bsc#1227149).
- wifi: mt76: mt7996: align the format of fixed rate command (bsc#1227149).
- wifi: mt76: mt7996: check txs format before getting skb by pid (bsc#1227149).
- wifi: mt76: mt7996: disable AMSDU for non-data frames (stable-fixes).
- wifi: mt76: mt7996: disable WFDMA Tx/Rx during SER recovery (bsc#1227149).
- wifi: mt76: mt7996: drop return in mt7996_sta_statistics (bsc#1227149).
- wifi: mt76: mt7996: enable BSS_CHANGED_MU_GROUPS support (bsc#1227149).
- wifi: mt76: mt7996: enable PPDU-TxS to host (bsc#1227149).
- wifi: mt76: mt7996: enable VHT extended NSS BW feature (bsc#1227149).
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands (bsc#1227149).
- wifi: mt76: mt7996: fix alignment of sta info event (bsc#1227149).
- wifi: mt76: mt7996: fix fortify warning (bsc#1227149).
- wifi: mt76: mt7996: fix fw loading timeout (bsc#1227149).
- wifi: mt76: mt7996: fix mt7996_mcu_all_sta_info_event struct packing (bsc#1227149).
- wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature (bsc#1227149).
- wifi: mt76: mt7996: fix size of txpower MCU command (bsc#1227149).
- wifi: mt76: mt7996: fix uninitialized variable in mt7996_irq_tasklet() (bsc#1227149).
- wifi: mt76: mt7996: fix uninitialized variable in parsing txfree (bsc#1227149).
- wifi: mt76: mt7996: get tx_retries and tx_failed from txfree (bsc#1227149).
- wifi: mt76: mt7996: handle IEEE80211_RC_SMPS_CHANGED (bsc#1227149).
- wifi: mt76: mt7996: increase tx token size (bsc#1227149).
- wifi: mt76: mt7996: introduce mt7996_band_valid() (bsc#1227149).
- wifi: mt76: mt7996: mark GCMP IGTK unsupported (bsc#1227149).
- wifi: mt76: mt7996: move radio ctrl commands to proper functions (bsc#1227149).
- wifi: mt76: mt7996: only set vif teardown cmds at remove interface (bsc#1227149).
- wifi: mt76: mt7996: rely on mib_stats shared definition (bsc#1227149).
- wifi: mt76: mt7996: rely on shared poll_list field (bsc#1227149).
- wifi: mt76: mt7996: rely on shared sta_poll_list and sta_poll_lock (bsc#1227149).
- wifi: mt76: mt7996: remove TXS queue setting (bsc#1227149).
- wifi: mt76: mt7996: remove periodic MPDU TXS request (bsc#1227149).
- wifi: mt76: mt7996: rework ampdu params setting (bsc#1227149).
- wifi: mt76: mt7996: rework register offsets for mt7992 (bsc#1227149).
- wifi: mt76: mt7996: set DMA mask to 36 bits for boards with more than 4GB of RAM (bsc#1227149).
- wifi: mt76: mt7996: support more options for mt7996_set_bitrate_mask() (bsc#1227149).
- wifi: mt76: mt7996: support mt7992 eeprom loading (bsc#1227149).
- wifi: mt76: mt7996: support per-band LED control (bsc#1227149).
- wifi: mt76: mt7996: switch to mcu command for TX GI report (bsc#1227149).
- wifi: mt76: mt7996: use u16 for val field in mt7996_mcu_set_rro signature (bsc#1227149).
- wifi: mt76: permit to load precal from NVMEM cell for mt7915 (bsc#1227149).
- wifi: mt76: permit to use alternative cell name to eeprom NVMEM load (bsc#1227149).
- wifi: mt76: reduce spin_lock_bh held up in mt76_dma_rx_cleanup (bsc#1227149).
- wifi: mt76: replace skb_put with skb_put_zero (stable-fixes).
- wifi: mt76: report non-binding skb tx rate when WED is active (bsc#1227149).
- wifi: mt76: set page_pool napi pointer for mmio devices (bsc#1227149).
- wifi: mt76: split get_of_eeprom in subfunction (bsc#1227149).
- wifi: mt76: usb: create a dedicated queue for psd traffic (bsc#1227149).
- wifi: mt76: usb: store usb endpoint in mt76_queue (bsc#1227149).
- wifi: mt76: use atomic iface iteration for pre-TBTT work (bsc#1227149).
- wifi: mt76: use chainmask for power delta calculation (bsc#1227149).
- wifi: mwifiex: Drop unused headers (bsc#1227149).
- wifi: mwifiex: Fix interface type change (git-fixes).
- wifi: mwifiex: Refactor 1-element array into flexible array in struct mwifiex_ie_types_chan_list_param_set (bsc#1227149).
- wifi: mwifiex: Replace one-element array with flexible-array member in struct mwifiex_ie_types_rxba_sync (bsc#1227149).
- wifi: mwifiex: Set WIPHY_FLAG_NETNS_OK flag (bsc#1227149).
- wifi: mwifiex: Use default @max_active for workqueues (bsc#1227149).
- wifi: mwifiex: Use helpers to check multicast addresses (bsc#1227149).
- wifi: mwifiex: Use list_count_nodes() (bsc#1227149).
- wifi: mwifiex: cleanup adapter data (bsc#1227149).
- wifi: mwifiex: cleanup private data structures (bsc#1227149).
- wifi: mwifiex: cleanup struct mwifiex_sdio_mpa_rx (bsc#1227149).
- wifi: mwifiex: drop BUG_ON from TX paths (bsc#1227149).
- wifi: mwifiex: fix comment typos in SDIO module (bsc#1227149).
- wifi: mwifiex: followup PCIE and related cleanups (bsc#1227149).
- wifi: mwifiex: handle possible mwifiex_write_reg() errors (bsc#1227149).
- wifi: mwifiex: handle possible sscanf() errors (bsc#1227149).
- wifi: mwifiex: mwifiex_process_sleep_confirm_resp(): remove unused priv variable (bsc#1227149).
- wifi: mwifiex: prefer strscpy() over strlcpy() (bsc#1227149).
- wifi: mwifiex: simplify PCIE write operations (bsc#1227149).
- wifi: mwifiex: use MODULE_FIRMWARE to add firmware files metadata (bsc#1227149).
- wifi: mwifiex: use cfg80211_ssid_eq() instead of mwifiex_ssid_cmp() (bsc#1227149).
- wifi: mwifiex: use is_zero_ether_addr() instead of ether_addr_equal() (bsc#1227149).
- wifi: mwifiex: use kstrtoX_from_user() in debugfs handlers (bsc#1227149).
- wifi: mwl8k: initialize cmd-&gt;addr[] properly (git-fixes).
- wifi: nl80211: Avoid address calculations via out of bounds array indexing (git-fixes).
- wifi: nl80211: Extend del pmksa support for SAE and OWE security (bsc#1227149).
- wifi: nl80211: Remove unused declaration nl80211_pmsr_dump_results() (bsc#1227149).
- wifi: nl80211: additions to NL80211_CMD_SET_BEACON (bsc#1227149).
- wifi: nl80211: allow reporting wakeup for unprot deauth/disassoc (bsc#1227149).
- wifi: nl80211: do not free NULL coalescing rule (git-fixes).
- wifi: nl80211: fixes to FILS discovery updates (bsc#1227149).
- wifi: nl80211: refactor nl80211_send_mlme_event() arguments (bsc#1227149).
- wifi: p54: Add missing MODULE_FIRMWARE macro (bsc#1227149).
- wifi: p54: Annotate struct p54_cal_database with __counted_by (bsc#1227149).
- wifi: p54: fix GCC format truncation warning with wiphy-&gt;fw_version (bsc#1227149).
- wifi: plfxlc: Drop unused include (bsc#1227149).
- wifi: radiotap: add bandwidth definition of EHT U-SIG (bsc#1227149).
- wifi: remove unused argument of ieee80211_get_tdls_action() (bsc#1227149).
- wifi: rsi: fix restricted __le32 degrades to integer sparse warnings (bsc#1227149).
- wifi: rsi: rsi_91x_coex: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: rsi: rsi_91x_debugfs: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: rsi: rsi_91x_hal: Remove unnecessary conversions (bsc#1227149).
- wifi: rsi: rsi_91x_mac80211: Remove unnecessary conversions (bsc#1227149).
- wifi: rsi: rsi_91x_main: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: rsi: rsi_91x_sdio: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: rsi: rsi_91x_sdio_ops: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: rsi: rsi_91x_usb: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: rsi: rsi_91x_usb_ops: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: rt2x00: Simplify bool conversion (bsc#1227149).
- wifi: rt2x00: correct MAC_SYS_CTRL register RX mask in R-Calibration (bsc#1227149).
- wifi: rt2x00: disable RTS threshold for rt2800 by default (bsc#1227149).
- wifi: rt2x00: fix MT7620 low RSSI issue (bsc#1227149).
- wifi: rt2x00: fix rt2800 watchdog function (bsc#1227149).
- wifi: rt2x00: fix the typo in comments (bsc#1227149).
- wifi: rt2x00: improve MT7620 register initialization (bsc#1227149).
- wifi: rt2x00: introduce DMA busy check watchdog for rt2800 (bsc#1227149).
- wifi: rt2x00: limit MT7620 TX power based on eeprom calibration (bsc#1227149).
- wifi: rt2x00: make watchdog param per device (bsc#1227149).
- wifi: rt2x00: remove redundant check if u8 array element is less than zero (bsc#1227149).
- wifi: rt2x00: remove useless code in rt2x00queue_create_tx_descriptor() (bsc#1227149).
- wifi: rt2x00: rework MT7620 PA/LNA RF calibration (bsc#1227149).
- wifi: rt2x00: rework MT7620 channel config function (bsc#1227149).
- wifi: rt2x00: silence sparse warnings (bsc#1227149).
- wifi: rt2x00: simplify rt2x00crypto_rx_insert_iv() (bsc#1227149).
- wifi: rtl8xxxu: 8188e: convert usage of priv-&gt;vif to priv-&gt;vifs[0] (bsc#1227149).
- wifi: rtl8xxxu: 8188f: Limit TX power index (git-fixes).
- wifi: rtl8xxxu: Actually use macid in rtl8xxxu_gen2_report_connect (bsc#1227149).
- wifi: rtl8xxxu: Add TP-Link TL-WN823N V2 (bsc#1227149).
- wifi: rtl8xxxu: Add a description about the device ID 0x7392:0xb722 (bsc#1227149).
- wifi: rtl8xxxu: Add beacon functions (bsc#1227149).
- wifi: rtl8xxxu: Add parameter force to rtl8xxxu_refresh_rate_mask (bsc#1227149).
- wifi: rtl8xxxu: Add parameter macid to update_rate_mask (bsc#1227149).
- wifi: rtl8xxxu: Add parameter role to report_connect (bsc#1227149).
- wifi: rtl8xxxu: Add set_tim() callback (bsc#1227149).
- wifi: rtl8xxxu: Add sta_add() and sta_remove() callbacks (bsc#1227149).
- wifi: rtl8xxxu: Add start_ap() callback (bsc#1227149).
- wifi: rtl8xxxu: Allow creating interface in AP mode (bsc#1227149).
- wifi: rtl8xxxu: Allow setting rts threshold to -1 (bsc#1227149).
- wifi: rtl8xxxu: Clean up filter configuration (bsc#1227149).
- wifi: rtl8xxxu: Declare AP mode support for 8188f (bsc#1227149).
- wifi: rtl8xxxu: Enable AP mode for RTL8192EU (bsc#1227149).
- wifi: rtl8xxxu: Enable AP mode for RTL8192FU (bsc#1227149).
- wifi: rtl8xxxu: Enable AP mode for RTL8710BU (RTL8188GU) (bsc#1227149).
- wifi: rtl8xxxu: Enable AP mode for RTL8723BU (bsc#1227149).
- wifi: rtl8xxxu: Enable hw seq for mgmt/non-QoS data frames (bsc#1227149).
- wifi: rtl8xxxu: Fix LED control code of RTL8192FU (bsc#1227149).
- wifi: rtl8xxxu: Fix off by one initial RTS rate (bsc#1227149).
- wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU (stable-fixes).
- wifi: rtl8xxxu: Put the macid in txdesc (bsc#1227149).
- wifi: rtl8xxxu: Remove usage of ieee80211_get_tx_rate() (bsc#1227149).
- wifi: rtl8xxxu: Remove usage of tx_info-&gt;control.rates[0].flags (bsc#1227149).
- wifi: rtl8xxxu: Rename some registers (bsc#1227149).
- wifi: rtl8xxxu: Select correct queue for beacon frames (bsc#1227149).
- wifi: rtl8xxxu: Set maximum number of supported stations (bsc#1227149).
- wifi: rtl8xxxu: Support USB RX aggregation for the newer chips (bsc#1227149).
- wifi: rtl8xxxu: Support new chip RTL8192FU (bsc#1227149).
- wifi: rtl8xxxu: add hw crypto support for AP mode (bsc#1227149).
- wifi: rtl8xxxu: add macids for STA mode (bsc#1227149).
- wifi: rtl8xxxu: add missing number of sec cam entries for all variants (bsc#1227149).
- wifi: rtl8xxxu: check vif before using in rtl8xxxu_tx() (bsc#1227149).
- wifi: rtl8xxxu: convert EN_DESC_ID of TX descriptor to le32 type (bsc#1227149).
- wifi: rtl8xxxu: declare concurrent mode support for 8188f (bsc#1227149).
- wifi: rtl8xxxu: do not parse CFO, if both interfaces are connected in STA mode (bsc#1227149).
- wifi: rtl8xxxu: enable MFP support with security flag of RX descriptor (bsc#1227149).
- wifi: rtl8xxxu: enable channel switch support (bsc#1227149).
- wifi: rtl8xxxu: extend check for matching bssid to both interfaces (bsc#1227149).
- wifi: rtl8xxxu: extend wifi connected check to both interfaces (bsc#1227149).
- wifi: rtl8xxxu: fix error messages (bsc#1227149).
- wifi: rtl8xxxu: fix mixed declarations in rtl8xxxu_set_aifs() (bsc#1227149).
- wifi: rtl8xxxu: make instances of iface limit and combination to be static const (bsc#1227149).
- wifi: rtl8xxxu: make supporting AP mode only on port 0 transparent (bsc#1227149).
- wifi: rtl8xxxu: mark TOTOLINK N150UA V5/N150UA-B as tested (bsc#1227149).
- wifi: rtl8xxxu: prepare supporting two virtual interfaces (bsc#1227149).
- wifi: rtl8xxxu: remove assignment of priv-&gt;vif in rtl8xxxu_bss_info_changed() (bsc#1227149).
- wifi: rtl8xxxu: remove obsolete priv-&gt;vif (bsc#1227149).
- wifi: rtl8xxxu: rtl8xxxu_rx_complete(): remove unnecessary return (bsc#1227149).
- wifi: rtl8xxxu: support multiple interface in start_ap() (bsc#1227149).
- wifi: rtl8xxxu: support multiple interfaces in bss_info_changed() (bsc#1227149).
- wifi: rtl8xxxu: support multiple interfaces in configure_filter() (bsc#1227149).
- wifi: rtl8xxxu: support multiple interfaces in set_aifs() (bsc#1227149).
- wifi: rtl8xxxu: support multiple interfaces in update_beacon_work_callback() (bsc#1227149).
- wifi: rtl8xxxu: support multiple interfaces in watchdog_callback() (bsc#1227149).
- wifi: rtl8xxxu: support multiple interfaces in {add,remove}_interface() (bsc#1227149).
- wifi: rtl8xxxu: support setting bssid register for multiple interfaces (bsc#1227149).
- wifi: rtl8xxxu: support setting linktype for both interfaces (bsc#1227149).
- wifi: rtl8xxxu: support setting mac address register for both interfaces (bsc#1227149).
- wifi: rtl8xxxu: update rate mask per sta (bsc#1227149).
- wifi: rtlwifi: Convert to use PCIe capability accessors (bsc#1227149).
- wifi: rtlwifi: Ignore IEEE80211_CONF_CHANGE_RETRY_LIMITS (bsc#1227149).
- wifi: rtlwifi: Remove bridge vendor/device ids (bsc#1227149).
- wifi: rtlwifi: Remove rtl_intf_ops.read_efuse_byte (bsc#1227149).
- wifi: rtlwifi: Remove unused PCI related defines and struct (bsc#1227149).
- wifi: rtlwifi: Speed up firmware loading for USB (bsc#1227149).
- wifi: rtlwifi: cleanup USB interface (bsc#1227149).
- wifi: rtlwifi: cleanup few rtlxxx_tx_fill_desc() routines (bsc#1227149).
- wifi: rtlwifi: cleanup few rtlxxxx_set_hw_reg() routines (bsc#1227149).
- wifi: rtlwifi: cleanup struct rtl_hal (bsc#1227149).
- wifi: rtlwifi: cleanup struct rtl_phy (bsc#1227149).
- wifi: rtlwifi: cleanup struct rtl_ps_ctl (bsc#1227149).
- wifi: rtlwifi: drop chk_switch_dmdp() from HAL interface (bsc#1227149).
- wifi: rtlwifi: drop fill_fake_txdesc() from HAL interface (bsc#1227149).
- wifi: rtlwifi: drop pre_fill_tx_bd_desc() from HAL interface (bsc#1227149).
- wifi: rtlwifi: drop unused const_amdpci_aspm (bsc#1227149).
- wifi: rtlwifi: remove misused flag from HAL data (bsc#1227149).
- wifi: rtlwifi: remove unreachable code in rtl92d_dm_check_edca_turbo() (bsc#1227149).
- wifi: rtlwifi: remove unused dualmac control leftovers (bsc#1227149).
- wifi: rtlwifi: remove unused timer and related code (bsc#1227149).
- wifi: rtlwifi: rtl8192cu: Fix 2T2R chip type detection (bsc#1227149).
- wifi: rtlwifi: rtl8192cu: Fix TX aggregation (bsc#1227149).
- wifi: rtlwifi: rtl8192de: Do not read register in _rtl92de_query_rxphystatus (bsc#1227149).
- wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power (stable-fixes).
- wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path (stable-fixes).
- wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE (stable-fixes).
- wifi: rtlwifi: rtl8723: Remove unused function rtl8723_cmd_send_packet() (bsc#1227149).
- wifi: rtlwifi: rtl8821ae: Access full PMCS reg and use pci_regs.h (bsc#1227149).
- wifi: rtlwifi: rtl8821ae: Add pdev into _rtl8821ae_clear_pci_pme_status() (bsc#1227149).
- wifi: rtlwifi: rtl8821ae: Remove unnecessary PME_Status bit set (bsc#1227149).
- wifi: rtlwifi: rtl8821ae: Reverse PM Capability exists check (bsc#1227149).
- wifi: rtlwifi: rtl8821ae: Use pci_find_capability() (bsc#1227149).
- wifi: rtlwifi: rtl8821ae: phy: remove some useless code (bsc#1227149).
- wifi: rtlwifi: rtl8821ae: phy: using calculate_bit_shift() (bsc#1227149).
- wifi: rtlwifi: rtl92ee_dm_dynamic_primary_cca_check(): fix typo in function name (bsc#1227149).
- wifi: rtlwifi: rtl_usb: Store the endpoint addresses (bsc#1227149).
- wifi: rtlwifi: rtl_usb: Use sync register writes (bsc#1227149).
- wifi: rtlwifi: set initial values for unexpected cases of USB endpoint priority (bsc#1227149).
- wifi: rtlwifi: simplify LED management (bsc#1227149).
- wifi: rtlwifi: simplify TX command fill callbacks (bsc#1227149).
- wifi: rtlwifi: simplify rtl_action_proc() and rtl_tx_agg_start() (bsc#1227149).
- wifi: rtlwifi: use convenient list_count_nodes() (bsc#1227149).
- wifi: rtlwifi: use eth_broadcast_addr() to assign broadcast address (bsc#1227149).
- wifi: rtlwifi: use helper function rtl_get_hdr() (bsc#1227149).
- wifi: rtlwifi: use unsigned long for bt_coexist_8723 timestamp (bsc#1227149).
- wifi: rtlwifi: use unsigned long for rtl_bssid_entry timestamp (bsc#1227149).
- wifi: rtw88: 8821c: tweak CCK TX filter setting for SRRC regulation (bsc#1227149).
- wifi: rtw88: 8821c: update TX power limit to V67 (bsc#1227149).
- wifi: rtw88: 8821cu: Fix connection failure (stable-fixes).
- wifi: rtw88: 8822c: update TX power limit to V70 (bsc#1227149).
- wifi: rtw88: 8822ce: refine power parameters for RFE type 5 (bsc#1227149).
- wifi: rtw88: Add missing VID/PIDs for 8811CU and 8821CU (stable-fixes).
- wifi: rtw88: Add support for the SDIO based RTL8723DS chipset (bsc#1227149).
- wifi: rtw88: Fix AP mode incorrect DTIM behavior (bsc#1227149).
- wifi: rtw88: Fix action frame transmission fail before association (bsc#1227149).
- wifi: rtw88: Skip high queue in hci_flush (bsc#1227149).
- wifi: rtw88: Stop high queue during scan (bsc#1227149).
- wifi: rtw88: Use random MAC when efuse MAC invalid (bsc#1227149).
- wifi: rtw88: add missing unwind goto for __rtw_download_firmware() (bsc#1227149).
- wifi: rtw88: debug: add to check if debug mask is enabled (bsc#1227149).
- wifi: rtw88: debug: remove wrapper of rtw_dbg() (bsc#1227149).
- wifi: rtw88: dump firmware debug information in abnormal state (bsc#1227149).
- wifi: rtw88: fix incorrect error codes in rtw_debugfs_copy_from_user (bsc#1227149).
- wifi: rtw88: fix incorrect error codes in rtw_debugfs_set_* (bsc#1227149).
- wifi: rtw88: fix not entering PS mode after AP stops (bsc#1227149).
- wifi: rtw88: fix typo rtw8822cu_probe (bsc#1227149).
- wifi: rtw88: process VO packets without workqueue to avoid PTK rekey failed (bsc#1227149).
- wifi: rtw88: refine register based H2C command (bsc#1227149).
- wifi: rtw88: regd: configure QATAR and UK (bsc#1227149).
- wifi: rtw88: regd: update regulatory map to R64-R42 (bsc#1227149).
- wifi: rtw88: remove unused USB bulkout size set (bsc#1227149).
- wifi: rtw88: remove unused and set but unused leftovers (bsc#1227149).
- wifi: rtw88: rtw8723d: Implement RTL8723DS (SDIO) efuse parsing (bsc#1227149).
- wifi: rtw88: simplify __rtw_tx_work() (bsc#1227149).
- wifi: rtw88: simplify vif iterators (bsc#1227149).
- wifi: rtw88: use cfg80211_ssid_eq() instead of rtw_ssid_equal() (bsc#1227149).
- wifi: rtw88: use kstrtoX_from_user() in debugfs handlers (bsc#1227149).
- wifi: rtw88: use struct instead of macros to set TX desc (bsc#1227149).
- wifi: rtw89: 52c: rfk: disable DPK during MCC (bsc#1227149).
- wifi: rtw89: 52c: rfk: refine MCC channel info notification (bsc#1227149).
- wifi: rtw89: 8851b: add 8851B basic chip_info (bsc#1227149).
- wifi: rtw89: 8851b: add 8851be to Makefile and Kconfig (bsc#1227149).
- wifi: rtw89: 8851b: add BT coexistence support function (bsc#1227149).
- wifi: rtw89: 8851b: add DLE mem and HFC quota (bsc#1227149).
- wifi: rtw89: 8851b: add MAC configurations to chip_info (bsc#1227149).
- wifi: rtw89: 8851b: add NCTL post table (bsc#1227149).
- wifi: rtw89: 8851b: add RF configurations (bsc#1227149).
- wifi: rtw89: 8851b: add TX power related functions (bsc#1227149).
- wifi: rtw89: 8851b: add basic power on function (bsc#1227149).
- wifi: rtw89: 8851b: add set channel function (bsc#1227149).
- wifi: rtw89: 8851b: add set_channel_rf() (bsc#1227149).
- wifi: rtw89: 8851b: add support WoWLAN to 8851B (bsc#1227149).
- wifi: rtw89: 8851b: add to parse efuse content (bsc#1227149).
- wifi: rtw89: 8851b: add to read efuse version to recognize hardware version B (bsc#1227149).
- wifi: rtw89: 8851b: configure CRASH_TRIGGER feature for 8851B (bsc#1227149).
- wifi: rtw89: 8851b: configure GPIO according to RFE type (bsc#1227149).
- wifi: rtw89: 8851b: configure to force 1 TX power value (bsc#1227149).
- wifi: rtw89: 8851b: enable hw_scan support (bsc#1227149).
- wifi: rtw89: 8851b: fill BB related capabilities to chip_info (bsc#1227149).
- wifi: rtw89: 8851b: rfk: Fix spelling mistake KIP_RESOTRE -&gt; KIP_RESTORE (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add AACK (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add DACK (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add DPK (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add IQK (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add LCK track (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add RCK (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add RX DCK (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add TSSI (bsc#1227149).
- wifi: rtw89: 8851b: rfk: update IQK to version 0x8 (bsc#1227149).
- wifi: rtw89: 8851b: update RF radio A parameters to R28 (bsc#1227149).
- wifi: rtw89: 8851b: update TX power tables to R28 (bsc#1227149).
- wifi: rtw89: 8851b: update TX power tables to R34 (bsc#1227149).
- wifi: rtw89: 8851b: update TX power tables to R37 (bsc#1227149).
- wifi: rtw89: 8851be: add 8851BE PCI entry and fill PCI capabilities (bsc#1227149).
- wifi: rtw89: 8852b: fix definition of KIP register number (git-fixes).
- wifi: rtw89: 8852b: update TX power tables to R35 (bsc#1227149).
- wifi: rtw89: 8852b: update TX power tables to R36 (bsc#1227149).
- wifi: rtw89: 8852c: Fix TSSI causes transmit power inaccuracy (bsc#1227149).
- wifi: rtw89: 8852c: Update bandedge parameters for better performance (bsc#1227149).
- wifi: rtw89: 8852c: add quirk to set PCI BER for certain platforms (bsc#1227149).
- wifi: rtw89: 8852c: declare to support two chanctx (bsc#1227149).
- wifi: rtw89: 8852c: read RX gain offset from efuse for 6GHz channels (bsc#1227149).
- wifi: rtw89: 8852c: update RF radio A/B parameters to R63 (bsc#1227149).
- wifi: rtw89: 8852c: update TX power tables to R63 with 6 GHz power type (1 of 3) (bsc#1227149).
- wifi: rtw89: 8852c: update TX power tables to R63 with 6 GHz power type (2 of 3) (bsc#1227149).
- wifi: rtw89: 8852c: update TX power tables to R63 with 6 GHz power type (3 of 3) (bsc#1227149).
- wifi: rtw89: 8852c: update TX power tables to R67 (bsc#1227149).
- wifi: rtw89: 8922a: add 8922A basic chip info (bsc#1227149).
- wifi: rtw89: 8922a: add BTG functions to assist BT coexistence to control TX/RX (bsc#1227149).
- wifi: rtw89: 8922a: add NCTL pre-settings for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: 8922a: add RF read/write v2 (bsc#1227149).
- wifi: rtw89: 8922a: add SER IMR tables (bsc#1227149).
- wifi: rtw89: 8922a: add TX power related ops (bsc#1227149).
- wifi: rtw89: 8922a: add chip_ops related to BB init (bsc#1227149).
- wifi: rtw89: 8922a: add chip_ops to get thermal value (bsc#1227149).
- wifi: rtw89: 8922a: add chip_ops::bb_preinit to enable BB before downloading firmware (bsc#1227149).
- wifi: rtw89: 8922a: add chip_ops::cfg_txrx_path (bsc#1227149).
- wifi: rtw89: 8922a: add chip_ops::rfk_hw_init (bsc#1227149).
- wifi: rtw89: 8922a: add chip_ops::rfk_init_late to do initial RF calibrations later (bsc#1227149).
- wifi: rtw89: 8922a: add chip_ops::{enable,disable}_bb_rf (bsc#1227149).
- wifi: rtw89: 8922a: add coexistence helpers of SW grant (bsc#1227149).
- wifi: rtw89: 8922a: add helper of set_channel (bsc#1227149).
- wifi: rtw89: 8922a: add ieee80211_ops::hw_scan (bsc#1227149).
- wifi: rtw89: 8922a: add more fields to beacon H2C command to support multi-links (bsc#1227149).
- wifi: rtw89: 8922a: add power on/off functions (bsc#1227149).
- wifi: rtw89: 8922a: add register definitions of H2C, C2H, page, RRSR and EDCCA (bsc#1227149).
- wifi: rtw89: 8922a: add set_channel BB part (bsc#1227149).
- wifi: rtw89: 8922a: add set_channel MAC part (bsc#1227149).
- wifi: rtw89: 8922a: add set_channel RF part (bsc#1227149).
- wifi: rtw89: 8922a: configure CRASH_TRIGGER FW feature (bsc#1227149).
- wifi: rtw89: 8922a: correct register definition and merge IO for ctrl_nbtg_bt_tx() (bsc#1227149).
- wifi: rtw89: 8922a: declare to support two chanctx (bsc#1227149).
- wifi: rtw89: 8922a: dump MAC registers when SER occurs (bsc#1227149).
- wifi: rtw89: 8922a: extend and add quota number (bsc#1227149).
- wifi: rtw89: 8922a: hook handlers of TX/RX descriptors to chip_ops (bsc#1227149).
- wifi: rtw89: 8922a: implement AP mode related reg for BE generation (bsc#1227149).
- wifi: rtw89: 8922a: implement {stop,resume}_sch_tx and cfg_ppdu (bsc#1227149).
- wifi: rtw89: 8922a: read efuse content from physical map (bsc#1227149).
- wifi: rtw89: 8922a: read efuse content via efuse map struct from logic map (bsc#1227149).
- wifi: rtw89: 8922a: rfk: implement chip_ops to call RF calibrations (bsc#1227149).
- wifi: rtw89: 8922a: set RX gain along with set_channel operation (bsc#1227149).
- wifi: rtw89: 8922a: set chip_ops FEM and GPIO to NULL (bsc#1227149).
- wifi: rtw89: 8922a: set memory heap address for secure firmware (bsc#1227149).
- wifi: rtw89: 8922a: update BA CAM number to 24 (bsc#1227149).
- wifi: rtw89: 8922a: update the register used in DIG and the DIG flow (bsc#1227149).
- wifi: rtw89: 8922ae: add 8922AE PCI entry and basic info (bsc#1227149).
- wifi: rtw89: 8922ae: add v2 interrupt handlers for 8922AE (bsc#1227149).
- wifi: rtw89: Add EHT rate mask as parameters of RA H2C command (bsc#1227149).
- wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (git-fixes).
- wifi: rtw89: Fix clang -Wimplicit-fallthrough in rtw89_query_sar() (bsc#1227149).
- wifi: rtw89: Introduce Time Averaged SAR (TAS) feature (bsc#1227149).
- wifi: rtw89: Refine active scan behavior in 6 GHz (bsc#1227149).
- wifi: rtw89: Set default CQM config if not present (bsc#1227149).
- wifi: rtw89: TX power stuffs replace confusing naming of _max with _num (bsc#1227149).
- wifi: rtw89: Update EHT PHY beamforming capability (bsc#1227149).
- wifi: rtw89: acpi: process 6 GHz band policy from DSM (bsc#1227149).
- wifi: rtw89: add C2H RA event V1 to support WiFi 7 chips (bsc#1227149).
- wifi: rtw89: add C2H event handlers of RFK log and report (bsc#1227149).
- wifi: rtw89: add CFO XTAL registers field to support 8851B (bsc#1227149).
- wifi: rtw89: add DBCC H2C to notify firmware the status (bsc#1227149).
- wifi: rtw89: add EHT capabilities for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: add EHT radiotap in monitor mode (bsc#1227149).
- wifi: rtw89: add EVM and SNR statistics to debugfs (bsc#1227149).
- wifi: rtw89: add EVM for antenna diversity (bsc#1227149).
- wifi: rtw89: add H2C RA command V1 to support WiFi 7 chips (bsc#1227149).
- wifi: rtw89: add H2C command to download beacon frame for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: add RSSI based antenna diversity (bsc#1227149).
- wifi: rtw89: add RSSI statistics for the case of antenna diversity to debugfs (bsc#1227149).
- wifi: rtw89: add XTAL SI for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: add chip_info::chip_gen to determine chip generation (bsc#1227149).
- wifi: rtw89: add chip_info::txwd_info size to generalize TX WD submit (bsc#1227149).
- wifi: rtw89: add chip_ops::h2c_ba_cam() to configure BA CAM (bsc#1227149).
- wifi: rtw89: add chip_ops::query_rxdesc() and rxd_len as helpers to support newer chips (bsc#1227149).
- wifi: rtw89: add chip_ops::update_beacon to abstract update beacon operation (bsc#1227149).
- wifi: rtw89: add firmware H2C command of BA CAM V1 (bsc#1227149).
- wifi: rtw89: add firmware parser for v1 format (bsc#1227149).
- wifi: rtw89: add firmware suit for BB MCU 0/1 (bsc#1227149).
- wifi: rtw89: add function prototype for coex request duration (bsc#1227149).
- wifi: rtw89: add mac_gen pointer to access mac port registers (bsc#1227149).
- wifi: rtw89: add mlo_dbcc_mode for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: add new H2C command to pause/sleep transmitting by MAC ID (bsc#1227149).
- wifi: rtw89: add new H2C for PS mode in 802.11be chip (bsc#1227149).
- wifi: rtw89: add reserved size as factor of DLE used size (bsc#1227149).
- wifi: rtw89: add subband index of primary channel to struct rtw89_chan (bsc#1227149).
- wifi: rtw89: add to display hardware rates v1 histogram in debugfs (bsc#1227149).
- wifi: rtw89: add to fill TX descriptor for firmware command v2 (bsc#1227149).
- wifi: rtw89: add to fill TX descriptor v2 (bsc#1227149).
- wifi: rtw89: add to parse firmware elements of BB and RF tables (bsc#1227149).
- wifi: rtw89: add to query RX descriptor format v2 (bsc#1227149).
- wifi: rtw89: add tx_wake notify for 8851B (bsc#1227149).
- wifi: rtw89: add wait/completion for abort scan (bsc#1227149).
- wifi: rtw89: adjust init_he_cap() to add EHT cap into iftype_data (bsc#1227149).
- wifi: rtw89: advertise missing extended scan feature (bsc#1227149).
- wifi: rtw89: avoid stringop-overflow warning (bsc#1227149).
- wifi: rtw89: call rtw89_chan_get() by vif chanctx if aware of vif (bsc#1227149).
- wifi: rtw89: chan: MCC take reconfig into account (bsc#1227149).
- wifi: rtw89: chan: add sub-entity swap function to cover replacing (bsc#1227149).
- wifi: rtw89: chan: move handling from add/remove to assign/unassign for MLO (bsc#1227149).
- wifi: rtw89: chan: support MCC on Wi-Fi 7 chips (bsc#1227149).
- wifi: rtw89: chan: tweak bitmap recalc ahead before MLO (bsc#1227149).
- wifi: rtw89: chan: tweak weight recalc ahead before MLO (bsc#1227149).
- wifi: rtw89: change naming of BA CAM from V1 to V0_EXT (bsc#1227149).
- wifi: rtw89: change qutoa to DBCC by default for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: change supported bandwidths of chip_info to bit mask (bsc#1227149).
- wifi: rtw89: cleanup firmware elements parsing (bsc#1227149).
- wifi: rtw89: cleanup private data structures (bsc#1227149).
- wifi: rtw89: cleanup rtw89_iqk_info and related code (bsc#1227149).
- wifi: rtw89: coex: Add Bluetooth RSSI level information (bsc#1227149).
- wifi: rtw89: coex: Add Pre-AGC control to enhance Wi-Fi RX performance (bsc#1227149).
- wifi: rtw89: coex: Add coexistence policy to decrease WiFi packet CRC-ERR (bsc#1227149).
- wifi: rtw89: coex: Fix wrong Wi-Fi role info and FDDT parameter members (bsc#1227149).
- wifi: rtw89: coex: Record down Wi-Fi initial mode information (bsc#1227149).
- wifi: rtw89: coex: Reorder H2C command index to align with firmware (bsc#1227149).
- wifi: rtw89: coex: Set Bluetooth scan low-priority when Wi-Fi link/scan (bsc#1227149).
- wifi: rtw89: coex: Still show hardware grant signal info even Wi-Fi is PS (bsc#1227149).
- wifi: rtw89: coex: To improve Wi-Fi performance while BT is idle (bsc#1227149).
- wifi: rtw89: coex: Translate antenna configuration from ID to string (bsc#1227149).
- wifi: rtw89: coex: Update BTG control related logic (bsc#1227149).
- wifi: rtw89: coex: Update RF parameter control setting logic (bsc#1227149).
- wifi: rtw89: coex: Update coexistence policy for Wi-Fi LPS (bsc#1227149).
- wifi: rtw89: coex: When Bluetooth not available do not set power/gain (bsc#1227149).
- wifi: rtw89: coex: add BTC ctrl_info version 7 and related logic (bsc#1227149).
- wifi: rtw89: coex: add annotation __counted_by() for struct rtw89_btc_btf_set_slot_table (bsc#1227149).
- wifi: rtw89: coex: add annotation __counted_by() to struct rtw89_btc_btf_set_mon_reg (bsc#1227149).
- wifi: rtw89: coex: add init_info H2C command format version 7 (bsc#1227149).
- wifi: rtw89: coex: add return value to ensure H2C command is success or not (bsc#1227149).
- wifi: rtw89: coex: fix configuration for shared antenna for 8922A (bsc#1227149).
- wifi: rtw89: coex: use struct assignment to replace memcpy() to append TDMA content (bsc#1227149).
- wifi: rtw89: configure PPDU max user by chip (bsc#1227149).
- wifi: rtw89: consider RX info for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: consolidate registers of mac port to struct (bsc#1227149).
- wifi: rtw89: correct PHY register offset for PHY-1 (bsc#1227149).
- wifi: rtw89: correct aSIFSTime for 6GHz band (stable-fixes).
- wifi: rtw89: correct the DCFO tracking flow to improve CFO compensation (bsc#1227149).
- wifi: rtw89: debug: add FW log component for scan (bsc#1227149).
- wifi: rtw89: debug: add debugfs entry to disable dynamic mechanism (bsc#1227149).
- wifi: rtw89: debug: add to check if debug mask is enabled (bsc#1227149).
- wifi: rtw89: debug: remove wrapper of rtw89_debug() (bsc#1227149).
- wifi: rtw89: debug: show txpwr table according to chip gen (bsc#1227149).
- wifi: rtw89: debug: txpwr table access only valid page according to chip (bsc#1227149).
- wifi: rtw89: debug: txpwr table supports Wi-Fi 7 chips (bsc#1227149).
- wifi: rtw89: declare EXT NSS BW of VHT capability (bsc#1227149).
- wifi: rtw89: declare MCC in interface combination (bsc#1227149).
- wifi: rtw89: define hardware rate v1 for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: differentiate narrow_bw_ru_dis setting according to chip gen (bsc#1227149).
- wifi: rtw89: disable RTS when broadcast/multicast (bsc#1227149).
- wifi: rtw89: download firmware with five times retry (bsc#1227149).
- wifi: rtw89: drop TIMING_BEACON_ONLY and sync beacon TSF by self (bsc#1227149).
- wifi: rtw89: enlarge supported length of read_reg debugfs entry (bsc#1227149).
- wifi: rtw89: extend PHY status parser to support WiFi 7 chips (bsc#1227149).
- wifi: rtw89: fix HW scan not aborting properly (git-fixes).
- wifi: rtw89: fix HW scan timeout due to TSF sync issue (bsc#1227149).
- wifi: rtw89: fix a width vs precision bug (bsc#1227149).
- wifi: rtw89: fix disabling concurrent mode TX hang issue (bsc#1227149).
- wifi: rtw89: fix misbehavior of TX beacon in concurrent mode (bsc#1227149).
- wifi: rtw89: fix not entering PS mode after AP stops (bsc#1227149).
- wifi: rtw89: fix null pointer access when abort scan (stable-fixes).
- wifi: rtw89: fix spelling typo of IQK debug messages (bsc#1227149).
- wifi: rtw89: fix typo of rtw89_fw_h2c_mcc_macid_bitmap() (bsc#1227149).
- wifi: rtw89: fw: add H2C command to reset CMAC table for WiFi 7 (bsc#1227149).
- wifi: rtw89: fw: add H2C command to reset DMAC table for WiFi 7 (bsc#1227149).
- wifi: rtw89: fw: add H2C command to update security CAM v2 (bsc#1227149).
- wifi: rtw89: fw: add checking type for variant type of firmware (bsc#1227149).
- wifi: rtw89: fw: add chip_ops to update CMAC table to associated station (bsc#1227149).
- wifi: rtw89: fw: add definition of H2C command and C2H event for MRC series (bsc#1227149).
- wifi: rtw89: fw: add version field to BB MCU firmware element (bsc#1227149).
- wifi: rtw89: fw: consider checksum length of security data (bsc#1227149).
- wifi: rtw89: fw: download firmware with key data for secure boot (bsc#1227149).
- wifi: rtw89: fw: extend JOIN H2C command to support WiFi 7 chips (bsc#1227149).
- wifi: rtw89: fw: extend program counter dump for Wi-Fi 7 chip (bsc#1227149).
- wifi: rtw89: fw: fill CMAC table to associated station for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: fw: generalize download firmware flow by mac_gen pointers (bsc#1227149).
- wifi: rtw89: fw: implement MRC H2C command functions (bsc#1227149).
- wifi: rtw89: fw: implement supported functions of download firmware for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: fw: load TX power track tables from fw_element (bsc#1227149).
- wifi: rtw89: fw: move polling function of firmware path ready to an individual function (bsc#1227149).
- wifi: rtw89: fw: parse secure section from firmware file (bsc#1227149).
- wifi: rtw89: fw: propagate an argument include_bb for BB MCU firmware (bsc#1227149).
- wifi: rtw89: fw: read firmware secure information from efuse (bsc#1227149).
- wifi: rtw89: fw: refine download flow to support variant firmware suits (bsc#1227149).
- wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband (bsc#1227149).
- wifi: rtw89: fw: update TX AMPDU parameter to CMAC table (bsc#1227149).
- wifi: rtw89: fw: use struct to fill BA CAM H2C commands (bsc#1227149).
- wifi: rtw89: fw: use struct to fill JOIN H2C command (bsc#1227149).
- wifi: rtw89: get data rate mode/NSS/MCS v1 from RX descriptor (bsc#1227149).
- wifi: rtw89: indicate TX power by rate table inside RFE parameter (bsc#1227149).
- wifi: rtw89: indicate TX shape table inside RFE parameter (bsc#1227149).
- wifi: rtw89: initialize antenna for antenna diversity (bsc#1227149).
- wifi: rtw89: initialize multi-channel handling (bsc#1227149).
- wifi: rtw89: introduce infrastructure of firmware elements (bsc#1227149).
- wifi: rtw89: introduce realtek ACPI DSM method (bsc#1227149).
- wifi: rtw89: introduce v1 format of firmware header (bsc#1227149).
- wifi: rtw89: load BB parameters to PHY-1 (bsc#1227149).
- wifi: rtw89: load RFK log format string from firmware file (bsc#1227149).
- wifi: rtw89: load TX power by rate when RFE parms setup (bsc#1227149).
- wifi: rtw89: load TX power related tables from FW elements (bsc#1227149).
- wifi: rtw89: mac: Fix spelling mistakes "notfify" -&gt; "notify" (bsc#1227149).
- wifi: rtw89: mac: add coexistence helpers {cfg/get}_plt (bsc#1227149).
- wifi: rtw89: mac: add feature_init to initialize BA CAM V1 (bsc#1227149).
- wifi: rtw89: mac: add flags to check if CMAC and DMAC are enabled (bsc#1227149).
- wifi: rtw89: mac: add mac_gen_def::band1_offset to map MAC band1 register address (bsc#1227149).
- wifi: rtw89: mac: add registers of MU-EDCA parameters for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: mac: add suffix _ax to MAC functions (bsc#1227149).
- wifi: rtw89: mac: add sys_init and filter option for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: mac: add to access efuse for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: mac: add to get DLE reserved quota (bsc#1227149).
- wifi: rtw89: mac: check queue empty according to chip gen (bsc#1227149).
- wifi: rtw89: mac: correct MUEDCA setting for MAC-1 (bsc#1227149).
- wifi: rtw89: mac: define internal memory address for WiFi 7 chip (bsc#1227149).
- wifi: rtw89: mac: define register address of rx_filter to generalize code (bsc#1227149).
- wifi: rtw89: mac: do bf_monitor only if WiFi 6 chips (bsc#1227149).
- wifi: rtw89: mac: functions to configure hardware engine and quota for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: mac: generalize code to indirectly access WiFi internal memory (bsc#1227149).
- wifi: rtw89: mac: generalize register of MU-EDCA switch according to chip gen (bsc#1227149).
- wifi: rtw89: mac: get TX power control register according to chip gen (bsc#1227149).
- wifi: rtw89: mac: handle C2H receive/done ACK in interrupt context (bsc#1227149).
- wifi: rtw89: mac: implement MRC C2H event handling (bsc#1227149).
- wifi: rtw89: mac: implement to configure TX/RX engines for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: mac: move code related to hardware engine to individual functions (bsc#1227149).
- wifi: rtw89: mac: refine SER setting during WiFi CPU power on (bsc#1227149).
- wifi: rtw89: mac: reset PHY-1 hardware when going to enable/disable (bsc#1227149).
- wifi: rtw89: mac: return held quota of DLE when changing MAC-1 (bsc#1227149).
- wifi: rtw89: mac: set bf_assoc capabilities according to chip gen (bsc#1227149).
- wifi: rtw89: mac: set bfee_ctrl() according to chip gen (bsc#1227149).
- wifi: rtw89: mac: update RTS threshold according to chip gen (bsc#1227149).
- wifi: rtw89: mac: use mac_gen pointer to access about efuse (bsc#1227149).
- wifi: rtw89: mac: use pointer to access functions of hardware engine and quota (bsc#1227149).
- wifi: rtw89: mcc: consider and determine BT duration (bsc#1227149).
- wifi: rtw89: mcc: deal with BT slot change (bsc#1227149).
- wifi: rtw89: mcc: deal with P2P PS change (bsc#1227149).
- wifi: rtw89: mcc: deal with beacon NoA if GO exists (bsc#1227149).
- wifi: rtw89: mcc: decide pattern and calculate parameters (bsc#1227149).
- wifi: rtw89: mcc: fill fundamental configurations (bsc#1227149).
- wifi: rtw89: mcc: fix NoA start time when GO is auxiliary (bsc#1227149).
- wifi: rtw89: mcc: initialize start flow (bsc#1227149).
- wifi: rtw89: mcc: track beacon offset and update when needed (bsc#1227149).
- wifi: rtw89: mcc: trigger FW to start/stop MCC (bsc#1227149).
- wifi: rtw89: mcc: update role bitmap when changed (bsc#1227149).
- wifi: rtw89: modify the register setting and the flow of CFO tracking (bsc#1227149).
- wifi: rtw89: move software DCFO compensation setting to proper position (bsc#1227149).
- wifi: rtw89: only reset BB/RF for existing WiFi 6 chips while starting up (bsc#1227149).
- wifi: rtw89: packet offload wait for FW response (bsc#1227149).
- wifi: rtw89: parse EHT information from RX descriptor and PPDU status packet (bsc#1227149).
- wifi: rtw89: parse TX EHT rate selected by firmware from RA C2H report (bsc#1227149).
- wifi: rtw89: parse and print out RFK log from C2H events (bsc#1227149).
- wifi: rtw89: pause/proceed MCC for ROC and HW scan (bsc#1227149).
- wifi: rtw89: pci: add LTR v2 for WiFi 7 chip (bsc#1227149).
- wifi: rtw89: pci: add PCI generation information to pci_info for each chip (bsc#1227149).
- wifi: rtw89: pci: add new RX ring design to determine full RX ring efficiently (bsc#1227149).
- wifi: rtw89: pci: add pre_deinit to be called after probe complete (bsc#1227149).
- wifi: rtw89: pci: correct TX resource checking for PCI DMA channel of firmware command (git-fixes).
- wifi: rtw89: pci: correct interrupt mitigation register for 8852CE (bsc#1227149).
- wifi: rtw89: pci: define PCI ring address for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: pci: enlarge RX DMA buffer to consider size of RX descriptor (stable-fixes).
- wifi: rtw89: pci: fix interrupt enable mask for HALT C2H of RTL8851B (bsc#1227149).
- wifi: rtw89: pci: generalize code of PCI control DMA IO for WiFi 7 (bsc#1227149).
- wifi: rtw89: pci: generalize interrupt status bits of interrupt handlers (bsc#1227149).
- wifi: rtw89: pci: implement PCI CLK/ASPM/L1SS for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: pci: implement PCI mac_post_init for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: pci: implement PCI mac_pre_init for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: pci: interrupt v2 refine IMR for SER (bsc#1227149).
- wifi: rtw89: pci: reset BDRAM according to chip gen (bsc#1227149).
- wifi: rtw89: pci: stop/start DMA for level 1 recovery according to chip gen (bsc#1227149).
- wifi: rtw89: pci: update SER timer unit and timeout time (bsc#1227149).
- wifi: rtw89: pci: update interrupt mitigation register for 8922AE (bsc#1227149).
- wifi: rtw89: pci: use DBI function for 8852AE/8852BE/8851BE (bsc#1227149).
- wifi: rtw89: pci: use gen_def pointer to configure mac_{pre,post}_init and clear PCI ring index (bsc#1227149).
- wifi: rtw89: pci: validate RX tag for RXQ and RPQ (bsc#1227149).
- wifi: rtw89: phy: add BB wrapper of TX power for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: phy: add parser to support RX gain dynamic setting flow (bsc#1227149).
- wifi: rtw89: phy: add phy_gen_def::cr_base to support WiFi 7 chips (bsc#1227149).
- wifi: rtw89: phy: change naming related BT coexistence functions (bsc#1227149).
- wifi: rtw89: phy: dynamically adjust EDCCA threshold (bsc#1227149).
- wifi: rtw89: phy: extend TX power common stuffs for Wi-Fi 7 chips (bsc#1227149).
- wifi: rtw89: phy: generalize valid bit of BSS color (bsc#1227149).
- wifi: rtw89: phy: ignore special data from BB parameter file (bsc#1227149).
- wifi: rtw89: phy: modify register setting of ENV_MNTR, PHYSTS and DIG (bsc#1227149).
- wifi: rtw89: phy: move bb_gain_info used by WiFi 6 chips to union (bsc#1227149).
- wifi: rtw89: phy: print out RFK log with formatted string (bsc#1227149).
- wifi: rtw89: phy: rate pattern handles HW rate by chip gen (bsc#1227149).
- wifi: rtw89: phy: refine helpers used for raw TX power (bsc#1227149).
- wifi: rtw89: phy: set TX power RU limit according to chip gen (bsc#1227149).
- wifi: rtw89: phy: set TX power by rate according to chip gen (bsc#1227149).
- wifi: rtw89: phy: set TX power limit according to chip gen (bsc#1227149).
- wifi: rtw89: phy: set TX power offset according to chip gen (bsc#1227149).
- wifi: rtw89: phy: set channel_info for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: prepare scan leaf functions for wifi 7 ICs (bsc#1227149).
- wifi: rtw89: process regulatory for 6 GHz power type (bsc#1227149).
- wifi: rtw89: provide functions to configure NoA for beacon update (bsc#1227149).
- wifi: rtw89: recognize log format from firmware file (bsc#1227149).
- wifi: rtw89: reference quota mode when setting Tx power (bsc#1227149).
- wifi: rtw89: refine H2C command that pause transmitting by MAC ID (bsc#1227149).
- wifi: rtw89: refine add_chan H2C command to encode_bits (bsc#1227149).
- wifi: rtw89: refine bandwidth 160MHz uplink OFDMA performance (bsc#1227149).
- wifi: rtw89: refine clearing supported bands to check 2/5 GHz first (bsc#1227149).
- wifi: rtw89: refine element naming used by queue empty check (bsc#1227149).
- wifi: rtw89: refine hardware scan C2H events (bsc#1227149).
- wifi: rtw89: refine packet offload delete flow of 6 GHz probe (bsc#1227149).
- wifi: rtw89: refine packet offload handling under SER (bsc#1227149).
- wifi: rtw89: refine remain on channel flow to improve P2P connection (bsc#1227149).
- wifi: rtw89: refine rtw89_correct_cck_chan() by rtw89_hw_to_nl80211_band() (bsc#1227149).
- wifi: rtw89: refine uplink trigger based control mechanism (bsc#1227149).
- wifi: rtw89: regd: configure Thailand in regulation type (bsc#1227149).
- wifi: rtw89: regd: handle policy of 6 GHz according to BIOS (bsc#1227149).
- wifi: rtw89: regd: judge 6 GHz according to chip and BIOS (bsc#1227149).
- wifi: rtw89: regd: judge UNII-4 according to BIOS and chip (bsc#1227149).
- wifi: rtw89: regd: update regulatory map to R64-R40 (bsc#1227149).
- wifi: rtw89: regd: update regulatory map to R64-R43 (bsc#1227149).
- wifi: rtw89: regd: update regulatory map to R65-R44 (bsc#1227149).
- wifi: rtw89: release bit in rtw89_fw_h2c_del_pkt_offload() (bsc#1227149).
- wifi: rtw89: return failure if needed firmware elements are not recognized (bsc#1227149).
- wifi: rtw89: rfk: add H2C command to trigger DACK (bsc#1227149).
- wifi: rtw89: rfk: add H2C command to trigger DPK (bsc#1227149).
- wifi: rtw89: rfk: add H2C command to trigger IQK (bsc#1227149).
- wifi: rtw89: rfk: add H2C command to trigger RX DCK (bsc#1227149).
- wifi: rtw89: rfk: add H2C command to trigger TSSI (bsc#1227149).
- wifi: rtw89: rfk: add H2C command to trigger TXGAPK (bsc#1227149).
- wifi: rtw89: rfk: add a completion to wait RF calibration report from C2H event (bsc#1227149).
- wifi: rtw89: rfk: disable driver tracking during MCC (bsc#1227149).
- wifi: rtw89: rfk: send channel information to firmware for RF calibrations (bsc#1227149).
- wifi: rtw89: sar: let caller decide the center frequency to query (bsc#1227149).
- wifi: rtw89: scan offload wait for FW done ACK (bsc#1227149).
- wifi: rtw89: ser: L1 add pre-M0 and post-M0 states (bsc#1227149).
- wifi: rtw89: ser: reset total_sta_assoc and tdls_peer when L2 (bsc#1227149).
- wifi: rtw89: set TX power without precondition during setting channel (bsc#1227149).
- wifi: rtw89: set capability of TX antenna diversity (bsc#1227149).
- wifi: rtw89: set entry size of address CAM to H2C field by chip (bsc#1227149).
- wifi: rtw89: show EHT rate in debugfs (bsc#1227149).
- wifi: rtw89: support U-NII-4 channels on 5GHz band (bsc#1227149).
- wifi: rtw89: support firmware log with formatted text (bsc#1227149).
- wifi: rtw89: suppress the log for specific SER called CMDPSR_FRZTO (bsc#1227149).
- wifi: rtw89: tweak H2C TX waiting function for SER (bsc#1227149).
- wifi: rtw89: update DMA function with different generation (bsc#1227149).
- wifi: rtw89: update ps_state register for chips with different generation (bsc#1227149).
- wifi: rtw89: update scan C2H messages for wifi 7 IC (bsc#1227149).
- wifi: rtw89: update suspend/resume for different generation (bsc#1227149).
- wifi: rtw89: use PLCP information to match BSS_COLOR and AID (bsc#1227149).
- wifi: rtw89: use chip_info::small_fifo_size to choose debug_mask (bsc#1227149).
- wifi: rtw89: use flexible array member in rtw89_btc_btf_tlv (bsc#1227149).
- wifi: rtw89: use struct and le32_get_bits to access RX info (bsc#1227149).
- wifi: rtw89: use struct and le32_get_bits() to access RX descriptor (bsc#1227149).
- wifi: rtw89: use struct and le32_get_bits() to access received PHY status IEs (bsc#1227149).
- wifi: rtw89: use struct rtw89_phy_sts_ie0 instead of macro to access PHY IE0 status (bsc#1227149).
- wifi: rtw89: use struct to access RA report (bsc#1227149).
- wifi: rtw89: use struct to access firmware C2H event header (bsc#1227149).
- wifi: rtw89: use struct to access register-based H2C/C2H (bsc#1227149).
- wifi: rtw89: use struct to fill H2C command to download beacon frame (bsc#1227149).
- wifi: rtw89: use struct to parse firmware header (bsc#1227149).
- wifi: rtw89: use struct to set RA H2C command (bsc#1227149).
- wifi: rtw89: wow: move release offload packet earlier for WoWLAN mode (bsc#1227149).
- wifi: rtw89: wow: refine WoWLAN flows of HCI interrupts and low power mode (bsc#1227149).
- wifi: rtw89: wow: set security engine options for 802.11ax chips only (bsc#1227149).
- wifi: rtw89: wow: update WoWLAN reason register for different chips (bsc#1227149).
- wifi: rtw89: wow: update WoWLAN status register for different generation (bsc#1227149).
- wifi: rtw89: wow: update config mac function with different generation (bsc#1227149).
- wifi: ti: wlcore: sdio: Drop unused include (bsc#1227149).
- wifi: virt_wifi: avoid reporting connection success with wrong SSID (git-fixes).
- wifi: virt_wifi: do not use strlen() in const context (git-fixes).
- wifi: wcn36xx: Annotate struct wcn36xx_hal_ind_msg with __counted_by (bsc#1227149).
- wifi: wcn36xx: Convert to platform remove callback returning void (bsc#1227149).
- wifi: wcn36xx: remove unnecessary (void*) conversions (bsc#1227149).
- wifi: wext: avoid extra calls to strlen() in ieee80211_bss() (bsc#1227149).
- wifi: wfx: Use devm_kmemdup to replace devm_kmalloc + memcpy (bsc#1227149).
- wifi: wfx: allow to send frames during ROC (bsc#1227149).
- wifi: wfx: fix power_save setting when AP is stopped (bsc#1227149).
- wifi: wfx: implement wfx_remain_on_channel() (bsc#1227149).
- wifi: wfx: introduce hif_scan_uniq() (bsc#1227149).
- wifi: wfx: move wfx_skb_*() out of the header file (bsc#1227149).
- wifi: wfx: relocate wfx_rate_mask_to_hw() (bsc#1227149).
- wifi: wfx: scan_lock is global to the device (bsc#1227149).
- wifi: wfx: simplify exclusion between scan and Rx filters (bsc#1227149).
- wifi: wil6210: fw: Replace zero-length arrays with DECLARE_FLEX_ARRAY() helper (bsc#1227149).
- wifi: wil6210: wmi: Replace zero-length array with DECLARE_FLEX_ARRAY() helper (bsc#1227149).
- wifi: wilc1000: Increase ASSOC response buffer (bsc#1227149).
- wifi: wilc1000: Remove unused declarations (bsc#1227149).
- wifi: wilc1000: add SPI commands retry mechanism (bsc#1227149).
- wifi: wilc1000: add back-off algorithm to balance tx queue packets (bsc#1227149).
- wifi: wilc1000: add missing read critical sections around vif list traversal (bsc#1227149).
- wifi: wilc1000: always release SDIO host in wilc_sdio_cmd53() (bsc#1227149).
- wifi: wilc1000: cleanup struct wilc_conn_info (bsc#1227149).
- wifi: wilc1000: correct CRC7 calculation (bsc#1227149).
- wifi: wilc1000: fix declarations ordering (bsc#1227149).
- wifi: wilc1000: fix driver_handler when committing initial configuration (bsc#1227149).
- wifi: wilc1000: fix ies_len type in connect path (git-fixes).
- wifi: wilc1000: fix incorrect power down sequence (bsc#1227149).
- wifi: wilc1000: remove AKM suite be32 conversion for external auth request (bsc#1227149).
- wifi: wilc1000: remove setting msg.spi (bsc#1227149).
- wifi: wilc1000: remove use of has_thrpt_enh3 flag (bsc#1227149).
- wifi: wilc1000: set preamble size to auto as default in wilc_init_fw_config() (bsc#1227149).
- wifi: wilc1000: simplify remain on channel support (bsc#1227149).
- wifi: wilc1000: simplify wilc_scan() (bsc#1227149).
- wifi: wilc1000: split deeply nested RCU list traversal in dedicated helper (bsc#1227149).
- wifi: wilc1000: use SRCU instead of RCU for vif list traversal (bsc#1227149).
- wifi: wilc1000: validate chip id during bus probe (bsc#1227149).
- wifi: wl1251: replace deprecated strncpy with strscpy (bsc#1227149).
- wifi: wl18xx: replace deprecated strncpy with strscpy (bsc#1227149).
- wifi: wlcore: boot: replace deprecated strncpy with strscpy (bsc#1227149).
- wifi: wlcore: main: replace deprecated strncpy with strscpy (bsc#1227149).
- wifi: wlcore: sdio: Rate limit wl12xx_sdio_raw_{read,write}() failures warns (bsc#1227149).
- wifi: wlcore: sdio: Use module_sdio_driver macro to simplify the code (bsc#1227149).
- wifi: zd1211rw: fix typo "tranmits" (bsc#1227149).
- wifi: zd1211rw: remove __nocast from zd_addr_t (bsc#1227149).
- wifi: zd1211rw: silence sparse warnings (bsc#1227149).
- wireguard: netlink: access device through ctx instead of peer (git-fixes).
- wireguard: netlink: check for dangling peer via is_dead instead of empty list (git-fixes).
- wireguard: receive: annotate data-race around receiving_counter.counter (git-fixes).
- wlcore: spi: Remove redundant of_match_ptr() (bsc#1227149).
- work around gcc bugs with 'asm goto' with outputs (git-fixes).
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range (git-fixes).
- x86/CPU/AMD: Update the Zenbleed microcode revisions (git-fixes).
- x86/Kconfig: Remove CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT (git-fixes).
- x86/amd_nb: Check for invalid SMN reads (git-fixes).
- x86/apic: Force native_apic_mem_read() to use the MOV instruction (git-fixes).
- x86/asm: Fix build of UML with KASAN (git-fixes).
- x86/asm: Remove the __iomem annotation of movdir64b()'s dst argument (git-fixes).
- x86/bhi: Avoid warning in #DB handler due to BHI mitigation :(git-fixes).
- x86/boot: Ignore NMIs during very early boot (git-fixes).
- x86/bugs: Fix BHI retpoline check (git-fixes).
- x86/bugs: Fix the SRSO mitigation on Zen3/4 (git-fixes).
- x86/bugs: Remove default case for fully switched enums (git-fixes).
- x86/calldepth: Rename __x86_return_skl() to call_depth_return_thunk() (git-fixes).
- x86/coco: Require seeding RNG with RDRAND on CoCo systems (git-fixes).
- x86/cpu: Add model number for Intel Arrow Lake mobile processor (git-fixes).
- x86/cpu: Provide default cache line size if not enumerated (git-fixes).
- x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ (git-fixes).
- x86/csum: Fix clang -Wuninitialized in csum_partial() (git-fixes).
- x86/csum: Improve performance of `csum_partial` (git-fixes).
- x86/csum: Remove unnecessary odd handling (git-fixes).
- x86/csum: clean up `csum_partial' further (git-fixes).
- x86/efistub: Add missing boot_params for mixed mode compat entry (git-fixes).
- x86/efistub: Call mixed mode boot services on the firmware's stack (git-fixes).
- x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup (git-fixes).
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (git-fixes).
- x86/head/64: Move the __head definition to &amp;lt;asm/init.h&gt; (git-fixes).
- x86/hyperv: Allow 15-bit APIC IDs for VTL platforms (git-fixes).
- x86/hyperv: Use per cpu initial stack for vtl context (git-fixes).
- x86/insn: Add VEX versions of VPDPBUSD, VPDPBUSDS, VPDPWSSD and VPDPWSSDS (git-fixes).
- x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map (git-fixes).
- x86/kconfig: Add as-instr64 macro to properly evaluate AS_WRUSS (git-fixes).
- x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y (git-fixes).
- x86/kexec: Fix bug with call depth tracking (git-fixes).
- x86/kvm/Kconfig: Have KVM_AMD_SEV select ARCH_HAS_CC_PLATFORM (git-fixes).
- x86/mce: Dynamically size space for machine check records (bsc#1222241).
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (git-fixes).
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel (git-fixes).
- x86/nmi: Drop unused declaration of proc_nmi_enabled() (git-fixes).
- x86/nmi: Fix the inverse "in NMI handler" check (git-fixes).
- x86/nospec: Refactor UNTRAIN_RET[_*] (git-fixes).
- x86/pm: Work around false positive kmemleak report in msr_build_context() (git-fixes).
- x86/purgatory: Switch to the position-independent small code model (git-fixes).
- x86/resctrl: Read supported bandwidth sources from CPUID (git-fixes).
- x86/resctrl: Remove redundant variable in mbm_config_write_domain() (git-fixes).
- x86/rethunk: Use SYM_CODE_START[_LOCAL]_NOALIGN macros (git-fixes).
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk (git-fixes).
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO (git-fixes).
- x86/sev: Fix position dependent variable references in startup code (git-fixes).
- x86/shstk: Make return uprobe work with shadow stack (git-fixes).
- x86/speculation, objtool: Use absolute relocations for annotations (git-fixes).
- x86/srso: Disentangle rethunk-dependent options (git-fixes).
- x86/srso: Fix unret validation dependencies (git-fixes).
- x86/srso: Improve i-cache locality for alias mitigation (git-fixes).
- x86/srso: Print actual mitigation if requested mitigation isn't possible (git-fixes).
- x86/srso: Remove 'pred_cmd' label (git-fixes).
- x86/srso: Unexport untraining functions (git-fixes).
- x86/tdx: Preserve shared bit on mprotect() (git-fixes).
- x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (bsc#1222015 bsc#1226962).
- x86/uaccess: Fix missed zeroing of ia32 u64 get_user() range checking (git-fixes).
- x86/xen: Add some null pointer checking to smp.c (git-fixes).
- x86/xen: attempt to inflate the memory balloon on PVH (git-fixes).
- x86: Stop using weak symbols for __iowrite32_copy() (bsc#1226502)
- xdp, bonding: Fix feature flags when there are no slave devs anymore (git-fixes).
- xen-netfront: Add missing skb_mark_for_recycle (git-fixes).
- xen/events: drop xen_allocate_irqs_dynamic() (git-fixes).
- xen/events: fix error code in xen_bind_pirq_msi_to_irq() (git-fixes).
- xen/events: increment refcnt only if event channel is refcounted (git-fixes).
- xen/events: modify internal [un]bind interfaces (git-fixes).
- xen/events: reduce externally visible helper functions (git-fixes).
- xen/events: remove some simple helpers from events_base.c (git-fixes).
- xen/evtchn: avoid WARN() when unbinding an event channel (git-fixes).
- xen/x86: add extra pages to unpopulated-alloc if available (git-fixes).
- xen: evtchn: Allow shared registration of IRQ handers (git-fixes).
- xfs: Add cond_resched to block unmap range and reflink remap path (bsc#1228211).
- xfs: add lock protection when remove perag from radix tree (git-fixes).
- xfs: allow extent free intents to be retried (git-fixes).
- xfs: fix perag leak when growfs fails (git-fixes).
- xfs: force all buffers to be written during btree bulk load (git-fixes).
- xfs: make xchk_iget safer in the presence of corrupt inode btrees (git-fixes).
- xfs: pass the xfs_defer_pending object to iop_recover (git-fixes).
- xfs: recompute growfsrtfree transaction reservation while growing rt volume (git-fixes).
- xfs: transfer recovered intent item ownership in -&gt;iop_recover (git-fixes).
- xfs: use roundup_pow_of_two instead of ffs during xlog_find_tail (git-fixes).
- xfs: use xfs_defer_pending objects to recover intent items (git-fixes).
- xhci: Apply broken streams quirk to Etron EJ188 xHCI host (stable-fixes).
- xhci: Apply reset resume quirk to Etron EJ188 xHCI host (stable-fixes).
- xhci: Handle TD clearing for multiple streams case (git-fixes).
- xhci: Set correct transferred length for cancelled bulk transfers (stable-fixes).
- xhci: Simplify event ring dequeue pointer update for port change events (git-fixes).
- xhci: add helper that checks for unhandled events on a event ring (git-fixes).
- xhci: always resume roothubs if xHC was reset during resume (stable-fixes).
- xhci: remove unnecessary event_ring_deq parameter from xhci_handle_event() (git-fixes).
- xhci: simplify event ring dequeue tracking for transfer events (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="6.4.0" release="18.1" arch="nosrc" src="nosrc/kernel-default-6.4.0-18.1.nosrc.rpm">
          <filename>kernel-default-6.4.0-18.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="6.4.0" release="18.1" arch="x86_64" src="x86_64/kernel-default-6.4.0-18.1.x86_64.rpm">
          <filename>kernel-default-6.4.0-18.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-debuginfo" epoch="0" version="6.4.0" release="18.1" arch="x86_64" src="x86_64/kernel-default-debuginfo-6.4.0-18.1.x86_64.rpm">
          <filename>kernel-default-debuginfo-6.4.0-18.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-debugsource" epoch="0" version="6.4.0" release="18.1" arch="x86_64" src="x86_64/kernel-default-debugsource-6.4.0-18.1.x86_64.rpm">
          <filename>kernel-default-debugsource-6.4.0-18.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-extra" epoch="0" version="6.4.0" release="18.1" arch="x86_64" src="x86_64/kernel-default-extra-6.4.0-18.1.x86_64.rpm">
          <filename>kernel-default-extra-6.4.0-18.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-extra-debuginfo" epoch="0" version="6.4.0" release="18.1" arch="x86_64" src="x86_64/kernel-default-extra-debuginfo-6.4.0-18.1.x86_64.rpm">
          <filename>kernel-default-extra-debuginfo-6.4.0-18.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-kvmsmall" epoch="0" version="6.4.0" release="18.1" arch="nosrc" src="nosrc/kernel-kvmsmall-6.4.0-18.1.nosrc.rpm">
          <filename>kernel-kvmsmall-6.4.0-18.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-kvmsmall" epoch="0" version="6.4.0" release="18.1" arch="x86_64" src="x86_64/kernel-kvmsmall-6.4.0-18.1.x86_64.rpm">
          <filename>kernel-kvmsmall-6.4.0-18.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-kvmsmall-debuginfo" epoch="0" version="6.4.0" release="18.1" arch="x86_64" src="x86_64/kernel-kvmsmall-debuginfo-6.4.0-18.1.x86_64.rpm">
          <filename>kernel-kvmsmall-debuginfo-6.4.0-18.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-kvmsmall-debugsource" epoch="0" version="6.4.0" release="18.1" arch="x86_64" src="x86_64/kernel-kvmsmall-debugsource-6.4.0-18.1.x86_64.rpm">
          <filename>kernel-kvmsmall-debugsource-6.4.0-18.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="6.4.0" release="17.1.1.51" arch="src" src="src/kernel-default-base-6.4.0-17.1.1.51.src.rpm">
          <filename>kernel-default-base-6.4.0-17.1.1.51.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="6.4.0" release="17.1.1.51" arch="x86_64" src="x86_64/kernel-default-base-6.4.0-17.1.1.51.x86_64.rpm">
          <filename>kernel-default-base-6.4.0-17.1.1.51.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>8</id>
    <title>Security update for openssh</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1722325402" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217950" id="1217950" title="VUL-0: CVE-2023-48795: openssh: prefix truncation breaking ssh channel integrity aka Terrapin Attack" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218215" id="1218215" title="VUL-0: CVE-2023-51385: openssh: command injection via user name or host name metacharacters" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226642" id="1226642" title="VUL-0: CVE-2024-6387: openssh: regression of CVE-2006-5051" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" id="CVE-2023-48795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-48795" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51385" id="CVE-2023-51385" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51385" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6387" id="CVE-2024-6387" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6387" type="cve" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227318" id="1227318" title="VUL-0: CVE-2024-39894: openssh: timing attacks against echo-off password entry" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39894" id="CVE-2024-39894" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39894" type="cve" />
    </references>
    <description>This update for openssh fixes the following issues:

- CVE-2024-39894: Fixed timing attacks against echo-off password entry (bsc#1227318)
- CVE-2024-6387: Fixed race condition in a signal handler (bsc#1226642).
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="9.6p1" release="2.1" arch="src" src="src/openssh-9.6p1-2.1.src.rpm">
          <filename>openssh-9.6p1-2.1.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="9.6p1" release="2.1" arch="x86_64" src="x86_64/openssh-9.6p1-2.1.x86_64.rpm">
          <filename>openssh-9.6p1-2.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="9.6p1" release="2.1" arch="x86_64" src="x86_64/openssh-clients-9.6p1-2.1.x86_64.rpm">
          <filename>openssh-clients-9.6p1-2.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients-debuginfo" epoch="0" version="9.6p1" release="2.1" arch="x86_64" src="x86_64/openssh-clients-debuginfo-9.6p1-2.1.x86_64.rpm">
          <filename>openssh-clients-debuginfo-9.6p1-2.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="9.6p1" release="2.1" arch="x86_64" src="x86_64/openssh-common-9.6p1-2.1.x86_64.rpm">
          <filename>openssh-common-9.6p1-2.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common-debuginfo" epoch="0" version="9.6p1" release="2.1" arch="x86_64" src="x86_64/openssh-common-debuginfo-9.6p1-2.1.x86_64.rpm">
          <filename>openssh-common-debuginfo-9.6p1-2.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-debuginfo" epoch="0" version="9.6p1" release="2.1" arch="x86_64" src="x86_64/openssh-debuginfo-9.6p1-2.1.x86_64.rpm">
          <filename>openssh-debuginfo-9.6p1-2.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-debugsource" epoch="0" version="9.6p1" release="2.1" arch="x86_64" src="x86_64/openssh-debugsource-9.6p1-2.1.x86_64.rpm">
          <filename>openssh-debugsource-9.6p1-2.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="9.6p1" release="2.1" arch="x86_64" src="x86_64/openssh-fips-9.6p1-2.1.x86_64.rpm">
          <filename>openssh-fips-9.6p1-2.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="9.6p1" release="2.1" arch="x86_64" src="x86_64/openssh-server-9.6p1-2.1.x86_64.rpm">
          <filename>openssh-server-9.6p1-2.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server-config-rootlogin" epoch="0" version="9.6p1" release="2.1" arch="x86_64" src="x86_64/openssh-server-config-rootlogin-9.6p1-2.1.x86_64.rpm">
          <filename>openssh-server-config-rootlogin-9.6p1-2.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server-debuginfo" epoch="0" version="9.6p1" release="2.1" arch="x86_64" src="x86_64/openssh-server-debuginfo-9.6p1-2.1.x86_64.rpm">
          <filename>openssh-server-debuginfo-9.6p1-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>11</id>
    <title>Security update for wget</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1722612469" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226419" id="1226419" title="VUL-0: CVE-2024-38428: wget: mishandles semicolons in the userinfo subcomponent of a URI" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38428" id="CVE-2024-38428" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38428" type="cve" />
    </references>
    <description>This update for wget fixes the following issues:

- CVE-2024-38428: Fix mishandled semicolons in the userinfo subcomponent of a URI. (bsc#1226419)

- Update to GNU wget 1.24.5:
  * Fix how subdomain matches are checked for HSTS.
  * Wget will now also parse the srcset attribute in &lt;source&gt; HTML tags
  * Support reading fetchmail style "user" and "passwd" fields from netrc
  * In some cases, prevent the confusing "Cannot write to... (success)" error messages
  * Support extremely fast download speeds (TB/s)
  * Ensure that CSS URLs are corectly quoted
  * libproxy support is now upstream- drop wget-libproxy.patch
</description>
    <pkglist>
      <collection>
        <package name="wget" epoch="0" version="1.24.5" release="1.1" arch="src" src="src/wget-1.24.5-1.1.src.rpm">
          <filename>wget-1.24.5-1.1.src.rpm</filename>
        </package>
        <package name="wget" epoch="0" version="1.24.5" release="1.1" arch="x86_64" src="x86_64/wget-1.24.5-1.1.x86_64.rpm">
          <filename>wget-1.24.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="wget-debuginfo" epoch="0" version="1.24.5" release="1.1" arch="x86_64" src="x86_64/wget-debuginfo-1.24.5-1.1.x86_64.rpm">
          <filename>wget-debuginfo-1.24.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="wget-debugsource" epoch="0" version="1.24.5" release="1.1" arch="x86_64" src="x86_64/wget-debugsource-1.24.5-1.1.x86_64.rpm">
          <filename>wget-debugsource-1.24.5-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>10</id>
    <title>Security update for qemu</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1722522791" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1084909" id="1084909" title="trackerbug: packages do not build reproducibly from hostname" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220065" id="1220065" title="VUL-0: CVE-2024-26328: qemu: invalid NumVFs value is mishandled in NVME SR/IOV implementation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220310" id="1220310" title="Qemu cmdline core dumped with more(8193 or more) cpus" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222218" id="1222218" title="[HPE Bug]: virt-manager looses connection to linux guest" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222841" id="1222841" title="VUL-0: CVE-2024-3567: qemu: net: assertion failure in update_sctp_checksum()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222843" id="1222843" title="VUL-0: CVE-2024-3446: qemu: virtio: DMA reentrancy issue leads to double free vulnerability" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222845" id="1222845" title="VUL-0: CVE-2024-3447: qemu: sdhci: heap buffer overflow in sdhci_write_dataport()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224179" id="1224179" title="SLES 15 SP6 - KVM : Live migration of guest with multiple qcow devices remains incomplete." type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3446" id="CVE-2024-3446" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3446" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3447" id="CVE-2024-3447" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3447" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3567" id="CVE-2024-3567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3567" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26328" id="CVE-2024-26328" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26328" type="cve" />
    </references>
    <description>This update for qemu fixes the following issues:

- Update to version 8.2.5:
  * target/loongarch: fix a wrong print in cpu dump
  * ui/sdl2: Allow host to power down screen
  * target/i386: fix SSE and SSE2 feature check
  * target/i386: fix xsave.flat from kvm-unit-tests
  * disas/riscv: Decode all of the pmpcfg and pmpaddr CSRs
  * target/riscv/kvm.c: Fix the hart bit setting of AIA
  * target/riscv: rvzicbo: Fixup CBO extension register calculation
  * target/riscv: do not set mtval2 for non guest-page faults
  * target/riscv: prioritize pmp errors in raise_mmu_exception()
  * target/riscv: rvv: Remove redudant SEW checking for vector fp narrow/widen instructions
  * target/riscv: rvv: Check single width operator for vfncvt.rod.f.f.w
  * target/riscv: rvv: Check single width operator for vector fp widen instructions
  * target/riscv: rvv: Fix Zvfhmin checking for vfwcvt.f.f.v and vfncvt.f.f.w instructions
  * target/riscv/cpu.c: fix Zvkb extension config
  * target/riscv: Fix the element agnostic function problem
  * target/riscv/kvm: tolerate KVM disable ext errors
  * hw/intc/riscv_aplic: APLICs should add child earlier than realize
  * iotests: test NBD+TLS+iothread
  * qio: Inherit follow_coroutine_ctx across TLS
  * target/arm: Disable SVE extensions when SVE is disabled
  * hw/intc/arm_gic: Fix handling of NS view of GICC_APR&lt;n&gt;
  * hvf: arm: Fix encodings for ID_AA64PFR1_EL1 and debug System registers
  * gitlab: use 'setarch -R' to workaround tsan bug
  * gitlab: use $MAKE instead of 'make'
  * dockerfiles: add 'MAKE' env variable to remaining containers
  * gitlab: Update msys2-64bit runner tags
  * target/i386: no single-step exception after MOV or POP SS

- Update to version 8.2.4.
  * target/sh4: Fix SUBV opcode
  * target/sh4: Fix ADDV opcode
  * hw/arm/npcm7xx: Store derivative OTP fuse key in little endian
  * hw/dmax/xlnx_dpdma: fix handling of address_extension descriptor fields
  * hw/ufs: Fix buffer overflow bug
  * tests/avocado: update sunxi kernel from armbian to 6.6.16
  * target/loongarch/cpu.c: typo fix: expection
  * backends/cryptodev-builtin: Fix local_error leaks
  * nbd/server: Mark negotiation functions as coroutine_fn
  * nbd/server: do not poll within a coroutine context
  * linux-user: do_setsockopt: fix SOL_ALG.ALG_SET_KEY
  * target/riscv/kvm: change timer regs size to u64
  * target/riscv/kvm: change KVM_REG_RISCV_FP_D to u64
  * target/riscv/kvm: change KVM_REG_RISCV_FP_F to u32

- Update to version 8.2.3.
  * Update version for 8.2.3 release
  * ppc/spapr: Initialize max_cpus limit to SPAPR_IRQ_NR_IPIS.
  * ppc/spapr: Introduce SPAPR_IRQ_NR_IPIS to refer IRQ range for CPU IPIs.
  * hw/pci-host/ppc440_pcix: Do not expose a bridge device on PCI bus
  * hw/isa/vt82c686: Keep track of PIRQ/PINT pins separately
  * virtio-pci: fix use of a released vector
  * linux-user/x86_64: Handle the vsyscall page in open_self_maps_{2,4}
  * hw/audio/virtio-snd: Remove unused assignment
  * hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum()
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set
  * hw/net/lan9118: Fix overflow in MIL TX FIFO
  * hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE definition
  * backends/cryptodev: Do not abort for invalid session ID
  * hw/misc/applesmc: Fix memory leak in reset() handler
  * hw/block/nand: Fix out-of-bound access in NAND block buffer
  * hw/block/nand: Have blk_load() take unsigned offset and return boolean
  * hw/block/nand: Factor nand_load_iolen() method out
  * qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs
  * mirror: Don't call job_pause_point() under graph lock (bsc#1224179)

- Backports and bugfixes:
  * hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum() (bsc#1222841, CVE-2024-3567)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)

- Update to version 8.2.2
  * chardev/char-socket: Fix TLS io channels sending too much data to the backend
  * tests/unit/test-util-sockets: Remove temporary file after test
  * hw/usb/bus.c: PCAP adding 0xA in Windows version
  * hw/intc/Kconfig: Fix GIC settings when using "--without-default-devices"
  * gitlab: force allow use of pip in Cirrus jobs
  * tests/vm: avoid re-building the VM images all the time
  * tests/vm: update openbsd image to 7.4
  * target/i386: leave the A20 bit set in the final NPT walk
  * target/i386: remove unnecessary/wrong application of the A20 mask
  * target/i386: Fix physical address truncation
  * target/i386: check validity of VMCB addresses
  * target/i386: mask high bits of CR3 in 32-bit mode
  * pl031: Update last RTCLR value on write in case it's read back
  * hw/nvme: fix invalid endian conversion
  * update edk2 binaries to edk2-stable202402
  * update edk2 submodule to edk2-stable202402
  * target/ppc: Fix crash on machine check caused by ifetch
  * target/ppc: Fix lxv/stxv MSR facility check
  * .gitlab-ci.d/windows.yml: Drop msys2-32bit job
  * system/vl: Update description for input grab key
  * docs/system: Update description for input grab key
  * hw/hppa/Kconfig: Fix building with "configure --without-default-devices"
  * tests/qtest: Depend on dbus_display1_dep
  * meson: Explicitly specify dbus-display1.h dependency
  * audio: Depend on dbus_display1_dep
  * ui/console: Fix console resize with placeholder surface
  * ui/clipboard: add asserts for update and request
  * ui/clipboard: mark type as not available when there is no data
  * ui: reject extended clipboard message if not activated
  * target/i386: Generate an illegal opcode exception on cmp instructions with lock prefix
  * i386/cpuid: Move leaf 7 to correct group
  * i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
  * i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
  * i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
  * .gitlab-ci/windows.yml: Don't install libusb or spice packages on 32-bit
  * iotests: Make 144 deterministic again
  * target/arm: Don't get MDCR_EL2 in pmu_counter_enabled() before checking ARM_FEATURE_PMU
  * target/arm: Fix SVE/SME gross MTE suppression checks
  * target/arm: Handle mte in do_ldrq, do_ldro
- Address bsc#1220310. Backported upstream commits:
  * ppc/spapr: Initialize max_cpus limit to SPAPR_IRQ_NR_IPIS
  * ppc/spapr: Introduce SPAPR_IRQ_NR_IPIS to refer IRQ range for CPU IPIs.
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="8.2.5" release="1.1" arch="src" src="src/qemu-8.2.5-1.1.src.rpm">
          <filename>qemu-8.2.5-1.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-audio-spice-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-audio-spice-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-audio-spice-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-audio-spice-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-block-curl-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-block-curl-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-block-curl-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-block-curl-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-block-iscsi-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-block-iscsi-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-block-iscsi-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-block-iscsi-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-block-rbd-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-block-rbd-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-block-rbd-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-block-rbd-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-block-ssh-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-block-ssh-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-block-ssh-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-block-ssh-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-chardev-spice-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-chardev-spice-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-chardev-spice-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-chardev-spice-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-debugsource" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-debugsource-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-debugsource-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-guest-agent-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-guest-agent-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-guest-agent-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-guest-agent-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-img" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-img-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-img-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-img-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-img-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-img-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="8.2.5" release="1.1" arch="noarch" src="noarch/qemu-ipxe-8.2.5-1.1.noarch.rpm">
          <filename>qemu-ipxe-8.2.5-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-ksm" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-ksm-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-ksm-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-lang" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-lang-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-lang-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-pr-helper" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-pr-helper-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-pr-helper-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-pr-helper-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-pr-helper-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-pr-helper-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="8.2.51.16.3_3_ga95067eb" release="1.1" arch="noarch" src="noarch/qemu-seabios-8.2.51.16.3_3_ga95067eb-1.1.noarch.rpm">
          <filename>qemu-seabios-8.2.51.16.3_3_ga95067eb-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-tools-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-tools-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-tools-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-tools-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-tools-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-ui-opengl-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-ui-opengl-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-ui-opengl-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-ui-opengl-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="8.2.51.16.3_3_ga95067eb" release="1.1" arch="noarch" src="noarch/qemu-vgabios-8.2.51.16.3_3_ga95067eb-1.1.noarch.rpm">
          <filename>qemu-vgabios-8.2.51.16.3_3_ga95067eb-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-x86-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-x86-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-x86-debuginfo" epoch="0" version="8.2.5" release="1.1" arch="x86_64" src="x86_64/qemu-x86-debuginfo-8.2.5-1.1.x86_64.rpm">
          <filename>qemu-x86-debuginfo-8.2.5-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>40</id>
    <title>Security update for libvirt</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1725960620" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222584" id="1222584" title="[SLES15SP6] virsh domxml-to-native xen-xl error in finding network" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223849" id="1223849" title="VUL-0: CVE-2024-4418: libvirt: stack use-after-free in virNetClientIOEventLoop()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226492" id="1226492" title="[Kubevirt][GMC][Build92.1] unsupported configuration: Target CPU feature count 29 does not match source 97" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4418" id="CVE-2024-4418" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4418" type="cve" />
    </references>
    <description>This update for libvirt fixes the following issues:

Security issue fixed:

- CVE-2024-4418: rpc: ensure temporary GSource is removed from client event loop (bsc#1223849)

Non-security issue fixed:

- libxl: Fix domxml-to-native conversion (bsc#1222584)
- qemu: Fix migration with custom XML (bsc#1226492)
</description>
    <pkglist>
      <collection>
        <package name="libvirt" epoch="0" version="10.0.0" release="3.1" arch="src" src="src/libvirt-10.0.0-3.1.src.rpm">
          <filename>libvirt-10.0.0-3.1.src.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-client-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-client-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-client-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-client-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client-qemu" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-client-qemu-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-client-qemu-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-common" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-common-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-common-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-common-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-common-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-common-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-config-network" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-config-network-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-config-network-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-network-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-network-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-network-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-network-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nodedev-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nodedev-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nodedev-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nodedev-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nwfilter-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nwfilter-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-qemu-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-qemu-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-qemu-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-qemu-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-secret-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-secret-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-secret-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-secret-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-core-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-core-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-core-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-core-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-disk-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-disk-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-direct-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-direct-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-logical-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-logical-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-mpath-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-mpath-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-rbd-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-rbd-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-scsi-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-scsi-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-hooks" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-hooks-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-hooks-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-lock" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-lock-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-lock-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-lock-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-lock-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-lock-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-log" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-log-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-log-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-log-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-log-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-log-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-plugin-lockd" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-plugin-lockd-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-plugin-lockd-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-plugin-lockd-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-plugin-lockd-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-plugin-lockd-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-proxy" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-proxy-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-proxy-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-proxy-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-proxy-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-proxy-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-daemon-qemu-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-daemon-qemu-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-debugsource" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-debugsource-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-debugsource-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-libs-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-libs-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-libs-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-libs-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-libs-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-nss" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-nss-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-nss-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-nss-debuginfo" epoch="0" version="10.0.0" release="3.1" arch="x86_64" src="x86_64/libvirt-nss-debuginfo-10.0.0-3.1.x86_64.rpm">
          <filename>libvirt-nss-debuginfo-10.0.0-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>46</id>
    <title>Security update for podman</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1726134389" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227052" id="1227052" title="VUL-0: CVE-2024-6104: podman: hashicorp/go-retryablehttp: url might write sensitive information to log file" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1753" id="CVE-2024-1753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1753" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" id="CVE-2024-3727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104" id="CVE-2024-6104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24786" id="CVE-2024-24786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24786" type="cve" />
    </references>
    <description>This update for podman fixes the following issues:

- CVE-2024-6104: Fixed dependency issue with go-retryablehttp: url might write sensitive information to log file (bsc#1227052).

- Update to version 4.9.5:
  * Bump to v4.9.5
  * Update release notes for v4.9.5
  * fix "concurrent map writes" in network ls compat endpoint
  * [v4.9] Fix for CVE-2024-3727
  * Disable failing bud test
  * CI Maintenance: Disable machine tests
  * [CI:DOCS] Allow downgrade of WiX
  * [CI:DOCS] Force WiX 3.11
  * [CI:DOCS] Fix windows installer action
  * Bump to v4.9.5-dev
  * Bump to v4.9.4
  * Update release notes for v4.9.4
  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786
  * Add farm command to commands list
  * Bump to FreeBSD 13.3 (13.2 vanished)
  * Update health-start-periods docs
  * Don't update health check status during initialDelaySeconds
  * image scp: don't require port for ssh URL
  * Ignore docker's end point config when the final network mode isn't bridge.
  * Fix running container from docker client with rootful in rootless podman.
  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9
  * Bump to v4.9.4-dev
  * Remove gitleaks scanning
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.9.5" release="1.1" arch="src" src="src/podman-4.9.5-1.1.src.rpm">
          <filename>podman-4.9.5-1.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="1.1" arch="x86_64" src="x86_64/podman-4.9.5-1.1.x86_64.rpm">
          <filename>podman-4.9.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="podman-debuginfo" epoch="0" version="4.9.5" release="1.1" arch="x86_64" src="x86_64/podman-debuginfo-4.9.5-1.1.x86_64.rpm">
          <filename>podman-debuginfo-4.9.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="podman-docker" epoch="0" version="4.9.5" release="1.1" arch="noarch" src="noarch/podman-docker-4.9.5-1.1.noarch.rpm">
          <filename>podman-docker-4.9.5-1.1.noarch.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="1.1" arch="x86_64" src="x86_64/podman-remote-4.9.5-1.1.x86_64.rpm">
          <filename>podman-remote-4.9.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="podman-remote-debuginfo" epoch="0" version="4.9.5" release="1.1" arch="x86_64" src="x86_64/podman-remote-debuginfo-4.9.5-1.1.x86_64.rpm">
          <filename>podman-remote-debuginfo-4.9.5-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>58</id>
    <title>Security update for openssl-3, libpulp, ulp-macros</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1729001208" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221763" id="1221763" title="ptrace(PTRACE_ATTACH) fails on processes of the same user" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222548" id="1222548" title="VUL-0: CVE-2024-2511: openssl-1_1,openssl-3:Unbounded memory growth with session handling in TLSv1.3" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222899" id="1222899" title="[SECURITY] openSSL 3.1.x EC doesn't work with tpm2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223306" id="1223306" title="Userspace livepatch application fails: ulp: Unable to get section data." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223336" id="1223336" title="openssl-3: variations in openssl-3-debugsource" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223428" id="1223428" title="SUSE:SLE-15-SP6:GA openssl-3 not livepatch enabled" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224388" id="1224388" title="VUL-0: CVE-2024-4603: openssl-3: excessive time spent checking DSA keys and parameters" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225291" id="1225291" title="[NetApp SLES15 SP6 Bug]: NVMe/TCP TLS connection fails due to handshake failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225551" id="1225551" title="VUL-0: CVE-2024-4741: openssl-1_1,openssl-3: Use After Free with SSL_free_buffers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227138" id="1227138" title="VUL-0: CVE-2024-5535: openssl: SSL_select_next_proto buffer overread" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511" id="CVE-2024-2511" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603" id="CVE-2024-4603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741" id="CVE-2024-4741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535" id="CVE-2024-5535" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119" id="CVE-2024-6119" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6119" type="cve" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229465" id="1229465" title="VUL-0: EMBARGOED: CVE-2024-6119: openssl-3: possible denial of service in X.509 name checks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221365" id="1221365" title="[FIPS][OpenSSL-3] Service Level Indicator is needed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221760" id="1221760" title="[FIPS][OpenSSL-3] Selftests are required" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221753" id="1221753" title="[FIPS][OpenSSL-3] Error state has to be enforced" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220523" id="1220523" title="[FIPS][OpenSSL-3] Entropy Source" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221786" id="1221786" title="[FIPS][OpenSSL-3] Use of non-Approved Elliptic Curves" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221751" id="1221751" title="[FIPS][OpenSSL-3] The FIPS module shall provide an output possibility" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221821" id="1221821" title="[FIPS][OpenSSL-3] FIPS Domain Parameters" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221827" id="1221827" title="[FIPS][OpenSSL-3] Recommendation for Password-Based Key Derivation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221752" id="1221752" title="[FIPS][OpenSSL-3] Zeroisation is required" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220690" id="1220690" title="[FIPS][OpenSSL-3] Primary DRBG for openssl needs to have prediction resistance enabled or it shall be reseeded every time before providing an output to the caller." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220693" id="1220693" title="[FIPS][OpenSSL-3] Add oversampling of the noise source to comply with requirements of NIST SP 800-90C." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220696" id="1220696" title="[FIPS][OpenSSL-3] Change CRNG buf size to align with output size of the Jitter RNG." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221824" id="1221824" title="[FIPS][OpenSSL-3] NIST SP 800-56Brev2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221787" id="1221787" title="[FIPS][OpenSSL-3] Approved Modulus Sizes for RSA Digital Signature for FIPS 186-4" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221822" id="1221822" title="[FIPS][OpenSSL-3] NIST SP 800-56Arev3" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226463" id="1226463" title="algif_hash in kernel-obs-build causes an openssl-1_1 test failure" type="bugzilla" />
      <reference href="https://github.com/openssl/openssl#23448" id="openssl/openssl#23448" title="https://github.com/openssl/openssl#23448" type="github" />
      <reference href="https://github.com/openssl/openssl#23456" id="openssl/openssl#23456" title="https://github.com/openssl/openssl#23456" type="github" />
    </references>
    <description>This update for openssl-3, libpulp, ulp-macros fixes the following issues:

openssl-3:
  - CVE-2024-6119: possible denial of service in X.509 name checks (bsc#1229465)
  - CVE-2024-5535: SSL_select_next_proto buffer overread (bsc#1227138)
  - CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers (bsc#1225551)
  - CVE-2024-4603: Check DSA parameters for excessive sizes before validating (bsc#1224388)
  - CVE-2024-2511: Fix unconstrained session cache growth in TLSv1.3 (bsc#1222548)
  - FIPS: Deny SHA-1 signature verification in FIPS provider (bsc#1221365)
  - FIPS: RSA keygen PCT requirements. (bsc#1221760, bsc#1221753)
  - FIPS: Check that the fips provider is available before setting it as the default provider in FIPS mode. (bsc#1220523)
  - FIPS: Port openssl to use jitterentropy (bsc#1220523)
  - FIPS: Block non-Approved Elliptic Curves (bsc#1221786)
  - FIPS: Service Level Indicator (bsc#1221365)
  - FIPS: Output the FIPS-validation name and module version which uniquely identify the FIPS validated module. (bsc#1221751)
  - FIPS: Add required selftests (bsc#1221760)
  - FIPS: DH: Disable FIPS 186-4 Domain Parameters (bsc#1221821)
  - FIPS: Recommendation for Password-Based Key Derivation (bsc#1221827)
  - FIPS: Zeroization is required (bsc#1221752)
  - FIPS: Reseed DRBG (bsc#1220690, bsc#1220693, bsc#1220696)
  - FIPS: NIST SP 800-56Brev2 (bsc#1221824)
  - FIPS: Approved Modulus Sizes for RSA Digital Signature for FIPS 186-4 (bsc#1221787)
  - FIPS: Port openssl to use jitterentropy (bsc#1220523)
  - FIPS: NIST SP 800-56Arev3 (bsc#1221822)
  - FIPS: Error state has to be enforced (bsc#1221753)
  - Build with enabled sm2 and sm4 support (bsc#1222899)
  - fix non-reproducible build issue
  - Fix HDKF key derivation (bsc#1225291)
  - Enable livepatching support (bsc#1223428)

libpulp:
  - Update package with libpulp-0.3.5
    * Change .so load policy from lazy to eager.
    * Fix patch of references when mprotect is enabled.
    * Fix tramposed calloc arguments.
    * Fix crash of ulp packer on empty lines.

  - Disabled ptrace_scope through aaa_base-enable-ptrace package (bsc#1221763).
  - Update package with libpulp-0.3.4:
    * Add debuginfo into ulp extract.

  - Disabled ptrace_scope when building the package (bsc#1221763).
  - Update package with libpulp-0.3.3:
    * Fixed a race condition when process list is empty.
    * Removed "Unable to get section data" error message (bsc#1223306).
    * Bumped asunsafe_conversion attempts from 100 to 2000.
    * Fixed banner test on clang-18.
    * Check if ptrace_scope is enabled when attempting a ptrace operation (bsc#1221763).

  - Update package with libpulp-0.3.1:
    * Add timestamp information on `ulp patches`.

ulp-macros:
  - Initial release.
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-3-devel" epoch="0" version="3.1.4" release="6.1" arch="x86_64" src="x86_64/libopenssl-3-devel-3.1.4-6.1.x86_64.rpm">
          <filename>libopenssl-3-devel-3.1.4-6.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider" epoch="0" version="3.1.4" release="6.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-3.1.4-6.1.x86_64.rpm">
          <filename>libopenssl-3-fips-provider-3.1.4-6.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider-debuginfo" epoch="0" version="3.1.4" release="6.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-debuginfo-3.1.4-6.1.x86_64.rpm">
          <filename>libopenssl-3-fips-provider-debuginfo-3.1.4-6.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.1.4" release="6.1" arch="x86_64" src="x86_64/libopenssl3-3.1.4-6.1.x86_64.rpm">
          <filename>libopenssl3-3.1.4-6.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3-debuginfo" epoch="0" version="3.1.4" release="6.1" arch="x86_64" src="x86_64/libopenssl3-debuginfo-3.1.4-6.1.x86_64.rpm">
          <filename>libopenssl3-debuginfo-3.1.4-6.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="6.1" arch="src" src="src/openssl-3-3.1.4-6.1.src.rpm">
          <filename>openssl-3-3.1.4-6.1.src.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="6.1" arch="x86_64" src="x86_64/openssl-3-3.1.4-6.1.x86_64.rpm">
          <filename>openssl-3-3.1.4-6.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debuginfo" epoch="0" version="3.1.4" release="6.1" arch="x86_64" src="x86_64/openssl-3-debuginfo-3.1.4-6.1.x86_64.rpm">
          <filename>openssl-3-debuginfo-3.1.4-6.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debugsource" epoch="0" version="3.1.4" release="6.1" arch="x86_64" src="x86_64/openssl-3-debugsource-3.1.4-6.1.x86_64.rpm">
          <filename>openssl-3-debugsource-3.1.4-6.1.x86_64.rpm</filename>
        </package>
        <package name="jitterentropy" epoch="0" version="3.4.1" release="3.1" arch="src" src="src/jitterentropy-3.4.1-3.1.src.rpm">
          <filename>jitterentropy-3.4.1-3.1.src.rpm</filename>
        </package>
        <package name="jitterentropy-devel" epoch="0" version="3.4.1" release="3.1" arch="x86_64" src="x86_64/jitterentropy-devel-3.4.1-3.1.x86_64.rpm">
          <filename>jitterentropy-devel-3.4.1-3.1.x86_64.rpm</filename>
        </package>
        <package name="libjitterentropy3" epoch="0" version="3.4.1" release="3.1" arch="x86_64" src="x86_64/libjitterentropy3-3.4.1-3.1.x86_64.rpm">
          <filename>libjitterentropy3-3.4.1-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>38</id>
    <title>Recommended update for transactional-update</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1725888589" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223504" id="1223504" title="transactional_update cannot deal with new table look of snapper" type="bugzilla" />
    </references>
    <description>This update for transactional-update fixes the following issues:

- Version 4.6.8
  - tukit: Properly handle overlay syncing failures
  - soft-reboot: Log requested reboot type
  - soft-reboot: Don't force hard reboot on version change only

- Version 4.6.7
  - Add support for snapper 0.11.0; also significantly decreases cleanup time (bsc#1223504)
</description>
    <pkglist>
      <collection>
        <package name="dracut-transactional-update" epoch="0" version="4.8.1" release="1.1" arch="noarch" src="noarch/dracut-transactional-update-4.8.1-1.1.noarch.rpm">
          <filename>dracut-transactional-update-4.8.1-1.1.noarch.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.8.1" release="1.1" arch="x86_64" src="x86_64/libtukit4-4.8.1-1.1.x86_64.rpm">
          <filename>libtukit4-4.8.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtukit4-debuginfo" epoch="0" version="4.8.1" release="1.1" arch="x86_64" src="x86_64/libtukit4-debuginfo-4.8.1-1.1.x86_64.rpm">
          <filename>libtukit4-debuginfo-4.8.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.8.1" release="1.1" arch="src" src="src/transactional-update-4.8.1-1.1.src.rpm">
          <filename>transactional-update-4.8.1-1.1.src.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.8.1" release="1.1" arch="x86_64" src="x86_64/transactional-update-4.8.1-1.1.x86_64.rpm">
          <filename>transactional-update-4.8.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="transactional-update-debuginfo" epoch="0" version="4.8.1" release="1.1" arch="x86_64" src="x86_64/transactional-update-debuginfo-4.8.1-1.1.x86_64.rpm">
          <filename>transactional-update-debuginfo-4.8.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="transactional-update-debugsource" epoch="0" version="4.8.1" release="1.1" arch="x86_64" src="x86_64/transactional-update-debugsource-4.8.1-1.1.x86_64.rpm">
          <filename>transactional-update-debugsource-4.8.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="transactional-update-zypp-config" epoch="0" version="4.8.1" release="1.1" arch="noarch" src="noarch/transactional-update-zypp-config-4.8.1-1.1.noarch.rpm">
          <filename>transactional-update-zypp-config-4.8.1-1.1.noarch.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.8.1" release="1.1" arch="x86_64" src="x86_64/tukit-4.8.1-1.1.x86_64.rpm">
          <filename>tukit-4.8.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="tukit-debuginfo" epoch="0" version="4.8.1" release="1.1" arch="x86_64" src="x86_64/tukit-debuginfo-4.8.1-1.1.x86_64.rpm">
          <filename>tukit-debuginfo-4.8.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.8.1" release="1.1" arch="x86_64" src="x86_64/tukitd-4.8.1-1.1.x86_64.rpm">
          <filename>tukitd-4.8.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="tukitd-debuginfo" epoch="0" version="4.8.1" release="1.1" arch="x86_64" src="x86_64/tukitd-debuginfo-4.8.1-1.1.x86_64.rpm">
          <filename>tukitd-debuginfo-4.8.1-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>25</id>
    <title>Security update for gnutls</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1724845915" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221242" id="1221242" title="Memory leak in gnutls — ref:_00D1igLOd._500Tr6tLDN:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221746" id="1221746" title="VUL-0: CVE-2024-28834: gnutls: side-channel in the deterministic ECDSA" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221747" id="1221747" title="VUL-0: CVE-2024-28835: gnutls: certtool crash when verifying a  certificate chain" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28834" id="CVE-2024-28834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28834" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28835" id="CVE-2024-28835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28835" type="cve" />
    </references>
    <description>This update for gnutls fixes the following issues:

- CVE-2024-28835: certtool crash when verifying a certificate chain (bsc#1221747)
- CVE-2024-28834: Fixed side-channel in the deterministic ECDSA (bsc#1221746)
- jitterentropy: Release the memory of the entropy collector when using jitterentropy 
  with phtreads as there is also a pre-initialization done in the main thread. (bsc#1221242)
</description>
    <pkglist>
      <collection>
        <package name="gnutls" epoch="0" version="3.8.3" release="2.1" arch="src" src="src/gnutls-3.8.3-2.1.src.rpm">
          <filename>gnutls-3.8.3-2.1.src.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.8.3" release="2.1" arch="x86_64" src="x86_64/gnutls-3.8.3-2.1.x86_64.rpm">
          <filename>gnutls-3.8.3-2.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls-debuginfo" epoch="0" version="3.8.3" release="2.1" arch="x86_64" src="x86_64/gnutls-debuginfo-3.8.3-2.1.x86_64.rpm">
          <filename>gnutls-debuginfo-3.8.3-2.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls-debugsource" epoch="0" version="3.8.3" release="2.1" arch="x86_64" src="x86_64/gnutls-debugsource-3.8.3-2.1.x86_64.rpm">
          <filename>gnutls-debugsource-3.8.3-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.8.3" release="2.1" arch="x86_64" src="x86_64/libgnutls30-3.8.3-2.1.x86_64.rpm">
          <filename>libgnutls30-3.8.3-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30-debuginfo" epoch="0" version="3.8.3" release="2.1" arch="x86_64" src="x86_64/libgnutls30-debuginfo-3.8.3-2.1.x86_64.rpm">
          <filename>libgnutls30-debuginfo-3.8.3-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>20</id>
    <title>Security update for kernel-firmware</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1724232619" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219458" id="1219458" title="[DELL SLES15SP6 BUG]: observed: 4xxx 0000:0b:00.0: Direct firmware load for qat_402xx_mmp.bin failed with error -2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222319" id="1222319" title="kernel-firmware-* packages have duplicate WHENCE license files" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225600" id="1225600" title="VUL-0: CVE-2023-38417: kernel-firmware: Improper input validation for some Intel(R) PROSet/Wireless WiFi software before version 23.20" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225601" id="1225601" title="VUL-0: CVE-2023-47210: kernel-firmware: Improper input validation for some Intel(R) PROSet/Wireless WiFi software for linux before version 23.20" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38417" id="CVE-2023-38417" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38417" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47210" id="CVE-2023-47210" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47210" type="cve" />
    </references>
    <description>This update for kernel-firmware fixes the following issues:

Update to version 20240712:

* amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
* qcom: add gpu firmwares for x1e80100 chipset (bsc#1219458)
* linux-firmware: add firmware for qat_402xx devices
* amdgpu: update raven firmware
* amdgpu: update SMU 13.0.10 firmware
* amdgpu: update SDMA 6.0.3 firmware
* amdgpu: update PSP 13.0.10 firmware
* amdgpu: update GC 11.0.3 firmware
* amdgpu: update vega20 firmware
* amdgpu: update PSP 13.0.5 firmware
* amdgpu: update PSP 13.0.8 firmware
* amdgpu: update vega12 firmware
* amdgpu: update vega10 firmware
* amdgpu: update VCN 4.0.0 firmware
* amdgpu: update SDMA 6.0.0 firmware
* amdgpu: update PSP 13.0.0 firmware
* amdgpu: update GC 11.0.0 firmware
* amdgpu: update picasso firmware
* amdgpu: update beige goby firmware
* amdgpu: update vangogh firmware
* amdgpu: update dimgrey cavefish firmware
* amdgpu: update navy flounder firmware
* amdgpu: update PSP 13.0.11 firmware
* amdgpu: update GC 11.0.4 firmware
* amdgpu: update green sardine firmware
* amdgpu: update VCN 4.0.2 firmware
* amdgpu: update SDMA 6.0.1 firmware
* amdgpu: update PSP 13.0.4 firmware
* amdgpu: update GC 11.0.1 firmware
* amdgpu: update sienna cichlid firmware
* amdgpu: update VPE 6.1.1 firmware
* amdgpu: update VCN 4.0.6 firmware
* amdgpu: update SDMA 6.1.1 firmware
* amdgpu: update PSP 14.0.1 firmware
* amdgpu: update GC 11.5.1 firmware
* amdgpu: update VCN 4.0.5 firmware
* amdgpu: update SDMA 6.1.0 firmware
* amdgpu: update PSP 14.0.0 firmware
* amdgpu: update GC 11.5.0 firmware
* amdgpu: update navi14 firmware
* amdgpu: update renoir firmware
* amdgpu: update navi12 firmware
* amdgpu: update PSP 13.0.6 firmware
* amdgpu: update GC 9.4.3 firmware
* amdgpu: update yellow carp firmware
* amdgpu: update VCN 4.0.4 firmware
* amdgpu: update SMU 13.0.7 firmware
* amdgpu: update SDMA 6.0.2 firmware
* amdgpu: update PSP 13.0.7 firmware
* amdgpu: update GC 11.0.2 firmware
* amdgpu: update navi10 firmware
* amdgpu: update raven2 firmware
* amdgpu: update aldebaran firmware
* linux-firmware: Update AMD cpu microcode
* linux-firmware: Add ISH firmware file for Intel Lunar Lake platform
* amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
* cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
* amdgpu: Update ISP FW for isp v4.1.1
</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware" epoch="0" version="20240728" release="1.1" arch="src" src="src/kernel-firmware-20240728-1.1.src.rpm">
          <filename>kernel-firmware-20240728-1.1.src.rpm</filename>
        </package>
        <package name="kernel-firmware-all" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-all-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-all-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-amdgpu" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-amdgpu-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-amdgpu-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-ath10k" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-ath10k-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-ath10k-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-ath11k" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-ath11k-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-ath11k-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-ath12k" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-ath12k-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-ath12k-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-atheros" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-atheros-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-atheros-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-bluetooth" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-bluetooth-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-bluetooth-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-bnx2" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-bnx2-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-bnx2-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-brcm" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-brcm-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-brcm-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-chelsio" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-chelsio-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-chelsio-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-dpaa2" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-dpaa2-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-dpaa2-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-i915" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-i915-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-i915-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-intel" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-intel-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-intel-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-iwlwifi" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-iwlwifi-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-iwlwifi-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-liquidio" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-liquidio-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-liquidio-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-marvell" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-marvell-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-marvell-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-media" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-media-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-media-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-mediatek" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-mediatek-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-mediatek-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-mellanox" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-mellanox-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-mellanox-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-mwifiex" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-mwifiex-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-mwifiex-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-network" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-network-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-network-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-nfp" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-nfp-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-nfp-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-nvidia" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-nvidia-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-nvidia-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-platform" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-platform-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-platform-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-prestera" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-prestera-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-prestera-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-qcom" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-qcom-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-qcom-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-qlogic" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-qlogic-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-qlogic-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-radeon" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-radeon-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-radeon-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-realtek" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-realtek-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-realtek-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-serial" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-serial-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-serial-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-sound" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-sound-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-sound-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-ti" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-ti-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-ti-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-ueagle" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-ueagle-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-ueagle-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="kernel-firmware-usb-network" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/kernel-firmware-usb-network-20240728-1.1.noarch.rpm">
          <filename>kernel-firmware-usb-network-20240728-1.1.noarch.rpm</filename>
        </package>
        <package name="ucode-amd" epoch="0" version="20240728" release="1.1" arch="noarch" src="noarch/ucode-amd-20240728-1.1.noarch.rpm">
          <filename>ucode-amd-20240728-1.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>21</id>
    <title>Security update for skopeo</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1724233069" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219563" id="1219563" title="docker v.25.0 breaks API compatibility with skopeo/buildah [ref:_00D1igLOd._500Tr4rZDT:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224123" id="1224123" title="VUL-0: CVE-2024-3727: skopeo: containers/image: digest type does not guarantee valid type" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" id="CVE-2024-3727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28180" id="CVE-2024-28180" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28180" type="cve" />
    </references>
    <description>This update for skopeo fixes the following issues:

- Update to version 1.14.4:
  * CVE-2024-3727: digest type does not guarantee valid type (bsc#1224123)
  * Packit: update packit targets
  * Bump gopkg.in/go-jose to v2.6.3
  * Bump ocicrypt and go-jose CVE-2024-28180
  * Freeze the fedora-minimal image reference at Fedora 38
  * Bump c/common to v0.57.4
  * Bump google.golang.org/protobuf to v1.33.0
  * Bump Skopeo to v1.14.3-dev

- Update to version 1.14.2:
  * Bump c/image to v5.29.2, c/common to v0.57.3 (fixes bsc#1219563)

- Update to version 1.14.1:
  * fix(deps): update module github.com/containers/common to v0.57.2
  * fix(deps): update module github.com/containers/image/v5 to v5.29.1
  * chore(deps): update dependency containers/automation_images to v20240102
  * Fix libsubid detection
  * fix(deps): update module golang.org/x/term to v0.16.0
  * fix(deps): update golang.org/x/exp digest to 02704c9
  * chore(deps): update dependency containers/automation_images to v20231208
  * [skip-ci] Update actions/stale action to v9
  * fix(deps): update module github.com/containers/common to v0.57.1
  * fix(deps): update golang.org/x/exp digest to 6522937
  * fix(deps): update module golang.org/x/term to v0.15.0
</description>
    <pkglist>
      <collection>
        <package name="skopeo" epoch="0" version="1.14.4" release="1.1" arch="src" src="src/skopeo-1.14.4-1.1.src.rpm">
          <filename>skopeo-1.14.4-1.1.src.rpm</filename>
        </package>
        <package name="skopeo" epoch="0" version="1.14.4" release="1.1" arch="x86_64" src="x86_64/skopeo-1.14.4-1.1.x86_64.rpm">
          <filename>skopeo-1.14.4-1.1.x86_64.rpm</filename>
        </package>
        <package name="skopeo-debuginfo" epoch="0" version="1.14.4" release="1.1" arch="x86_64" src="x86_64/skopeo-debuginfo-1.14.4-1.1.x86_64.rpm">
          <filename>skopeo-debuginfo-1.14.4-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>22</id>
    <title>Security update for ucode-intel</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1724396816" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221323" id="1221323" title="VUL-0: CVE-2023-28746: ucode-intel: 20240312 release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224277" id="1224277" title="VUL-0: ucode-intel: 20240514 release" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22655" id="CVE-2023-22655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22655" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" id="CVE-2023-28746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28746" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38575" id="CVE-2023-38575" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38575" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39368" id="CVE-2023-39368" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39368" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43490" id="CVE-2023-43490" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43490" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45733" id="CVE-2023-45733" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45733" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45745" id="CVE-2023-45745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45745" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46103" id="CVE-2023-46103" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46103" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47855" id="CVE-2023-47855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47855" type="cve" />
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Intel CPU Microcode was updated to the 20240514 release (bsc#1224277)
  - CVE-2023-45733: Security updates for  INTEL-SA-01051
  - CVE-2023-46103: Security updates for  INTEL-SA-01052
  - CVE-2023-45745,CVE-2023-47855: Security updates for INTEL-SA-01036

- Updated to Intel CPU Microcode 20240312 release. (bsc#1221323)
  - Security updates for INTEL-SA-INTEL-SA-00972
    - CVE-2023-39368: Protection mechanism failure of bus lock regulator
      for some Intel Processors may allow an unauthenticated user to
      potentially enable denial of service via network access
  - Security updates for INTEL-SA-INTEL-SA-00982
    - CVE-2023-38575: Non-transparent sharing of return predictor targets
      between contexts in some Intel Processors may allow an authorized
      user to potentially enable information disclosure via local access.
  - Security updates for INTEL-SA-INTEL-SA-00898
    - CVE-2023-28746: Information exposure through microarchitectural
      state after transient execution from some register files for some
      Intel Atom Processors may allow an authenticated user to potentially
      enable information disclosure via local access.
  - Security updates for INTEL-SA-INTEL-SA-00960
    - CVE-2023-22655 Protection mechanism failure in some 3rd and 4th
      Generation Intel Xeon Processors when using Intel SGX or Intel TDX
      may allow a privileged user to potentially enable escalation of
      privilege via local access.
  - Security updates for INTEL-SA-INTEL-SA-01045
    - CVE-2023-43490: Incorrect calculation in microcode keying mechanism
      for some Intel Xeon D Processors with Intel SGX may allow a
      privileged user to potentially enable information disclosure via
      local access.
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20240813" release="1.1" arch="src" src="src/ucode-intel-20240813-1.1.src.rpm">
          <filename>ucode-intel-20240813-1.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-intel" epoch="0" version="20240813" release="1.1" arch="x86_64" src="x86_64/ucode-intel-20240813-1.1.x86_64.rpm">
          <filename>ucode-intel-20240813-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>9</id>
    <title>Recommended update for bash, libcap-ng, libselinux, libselinux-bindings, libsemanage, zypper</title>
    <severity>low</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1723192414" />
    <references>
    </references>
    <description>This update fixes the following issues:

- No change rebuild due to dependency changes.
</description>
    <pkglist>
      <collection>
        <package name="bash" epoch="0" version="5.2.15" release="3.1" arch="src" src="src/bash-5.2.15-3.1.src.rpm">
          <filename>bash-5.2.15-3.1.src.rpm</filename>
        </package>
        <package name="bash" epoch="0" version="5.2.15" release="3.1" arch="x86_64" src="x86_64/bash-5.2.15-3.1.x86_64.rpm">
          <filename>bash-5.2.15-3.1.x86_64.rpm</filename>
        </package>
        <package name="bash-debuginfo" epoch="0" version="5.2.15" release="3.1" arch="x86_64" src="x86_64/bash-debuginfo-5.2.15-3.1.x86_64.rpm">
          <filename>bash-debuginfo-5.2.15-3.1.x86_64.rpm</filename>
        </package>
        <package name="bash-debugsource" epoch="0" version="5.2.15" release="3.1" arch="x86_64" src="x86_64/bash-debugsource-5.2.15-3.1.x86_64.rpm">
          <filename>bash-debugsource-5.2.15-3.1.x86_64.rpm</filename>
        </package>
        <package name="bash-sh" epoch="0" version="5.2.15" release="3.1" arch="noarch" src="noarch/bash-sh-5.2.15-3.1.noarch.rpm">
          <filename>bash-sh-5.2.15-3.1.noarch.rpm</filename>
        </package>
        <package name="libcap-ng" epoch="0" version="0.8.3" release="4.1" arch="src" src="src/libcap-ng-0.8.3-4.1.src.rpm">
          <filename>libcap-ng-0.8.3-4.1.src.rpm</filename>
        </package>
        <package name="libcap-ng-debugsource" epoch="0" version="0.8.3" release="4.1" arch="x86_64" src="x86_64/libcap-ng-debugsource-0.8.3-4.1.x86_64.rpm">
          <filename>libcap-ng-debugsource-0.8.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="libcap-ng0" epoch="0" version="0.8.3" release="4.1" arch="x86_64" src="x86_64/libcap-ng0-0.8.3-4.1.x86_64.rpm">
          <filename>libcap-ng0-0.8.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="libcap-ng0-debuginfo" epoch="0" version="0.8.3" release="4.1" arch="x86_64" src="x86_64/libcap-ng0-debuginfo-0.8.3-4.1.x86_64.rpm">
          <filename>libcap-ng0-debuginfo-0.8.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="libselinux" epoch="0" version="3.5" release="3.1" arch="src" src="src/libselinux-3.5-3.1.src.rpm">
          <filename>libselinux-3.5-3.1.src.rpm</filename>
        </package>
        <package name="libselinux-debugsource" epoch="0" version="3.5" release="3.1" arch="x86_64" src="x86_64/libselinux-debugsource-3.5-3.1.x86_64.rpm">
          <filename>libselinux-debugsource-3.5-3.1.x86_64.rpm</filename>
        </package>
        <package name="libselinux1" epoch="0" version="3.5" release="3.1" arch="x86_64" src="x86_64/libselinux1-3.5-3.1.x86_64.rpm">
          <filename>libselinux1-3.5-3.1.x86_64.rpm</filename>
        </package>
        <package name="libselinux1-debuginfo" epoch="0" version="3.5" release="3.1" arch="x86_64" src="x86_64/libselinux1-debuginfo-3.5-3.1.x86_64.rpm">
          <filename>libselinux1-debuginfo-3.5-3.1.x86_64.rpm</filename>
        </package>
        <package name="selinux-tools" epoch="0" version="3.5" release="3.1" arch="x86_64" src="x86_64/selinux-tools-3.5-3.1.x86_64.rpm">
          <filename>selinux-tools-3.5-3.1.x86_64.rpm</filename>
        </package>
        <package name="selinux-tools-debuginfo" epoch="0" version="3.5" release="3.1" arch="x86_64" src="x86_64/selinux-tools-debuginfo-3.5-3.1.x86_64.rpm">
          <filename>selinux-tools-debuginfo-3.5-3.1.x86_64.rpm</filename>
        </package>
        <package name="libselinux-bindings" epoch="0" version="3.5" release="3.1" arch="src" src="src/libselinux-bindings-3.5-3.1.src.rpm">
          <filename>libselinux-bindings-3.5-3.1.src.rpm</filename>
        </package>
        <package name="libselinux-bindings-debugsource" epoch="0" version="3.5" release="3.1" arch="x86_64" src="x86_64/libselinux-bindings-debugsource-3.5-3.1.x86_64.rpm">
          <filename>libselinux-bindings-debugsource-3.5-3.1.x86_64.rpm</filename>
        </package>
        <package name="python3-selinux" epoch="0" version="3.5" release="3.1" arch="x86_64" src="x86_64/python3-selinux-3.5-3.1.x86_64.rpm">
          <filename>python3-selinux-3.5-3.1.x86_64.rpm</filename>
        </package>
        <package name="python3-selinux-debuginfo" epoch="0" version="3.5" release="3.1" arch="x86_64" src="x86_64/python3-selinux-debuginfo-3.5-3.1.x86_64.rpm">
          <filename>python3-selinux-debuginfo-3.5-3.1.x86_64.rpm</filename>
        </package>
        <package name="libsemanage" epoch="0" version="3.5" release="3.1" arch="src" src="src/libsemanage-3.5-3.1.src.rpm">
          <filename>libsemanage-3.5-3.1.src.rpm</filename>
        </package>
        <package name="libsemanage-conf" epoch="0" version="3.5" release="3.1" arch="x86_64" src="x86_64/libsemanage-conf-3.5-3.1.x86_64.rpm">
          <filename>libsemanage-conf-3.5-3.1.x86_64.rpm</filename>
        </package>
        <package name="libsemanage-debugsource" epoch="0" version="3.5" release="3.1" arch="x86_64" src="x86_64/libsemanage-debugsource-3.5-3.1.x86_64.rpm">
          <filename>libsemanage-debugsource-3.5-3.1.x86_64.rpm</filename>
        </package>
        <package name="libsemanage2" epoch="0" version="3.5" release="3.1" arch="x86_64" src="x86_64/libsemanage2-3.5-3.1.x86_64.rpm">
          <filename>libsemanage2-3.5-3.1.x86_64.rpm</filename>
        </package>
        <package name="libsemanage2-debuginfo" epoch="0" version="3.5" release="3.1" arch="x86_64" src="x86_64/libsemanage2-debuginfo-3.5-3.1.x86_64.rpm">
          <filename>libsemanage2-debuginfo-3.5-3.1.x86_64.rpm</filename>
        </package>
        <package name="zypper" epoch="0" version="1.14.68" release="2.1" arch="src" src="src/zypper-1.14.68-2.1.src.rpm">
          <filename>zypper-1.14.68-2.1.src.rpm</filename>
        </package>
        <package name="zypper" epoch="0" version="1.14.68" release="2.1" arch="x86_64" src="x86_64/zypper-1.14.68-2.1.x86_64.rpm">
          <filename>zypper-1.14.68-2.1.x86_64.rpm</filename>
        </package>
        <package name="zypper-debuginfo" epoch="0" version="1.14.68" release="2.1" arch="x86_64" src="x86_64/zypper-debuginfo-1.14.68-2.1.x86_64.rpm">
          <filename>zypper-debuginfo-1.14.68-2.1.x86_64.rpm</filename>
        </package>
        <package name="zypper-debugsource" epoch="0" version="1.14.68" release="2.1" arch="x86_64" src="x86_64/zypper-debugsource-1.14.68-2.1.x86_64.rpm">
          <filename>zypper-debugsource-1.14.68-2.1.x86_64.rpm</filename>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.68" release="2.1" arch="noarch" src="noarch/zypper-needs-restarting-1.14.68-2.1.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.68-2.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>24</id>
    <title>Security update for ca-certificates-mozilla</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1724844661" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199079" id="1199079" title="VUL-0: ca-certificatges-mozilla: update to 2.54 nss release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220356" id="1220356" title="ca-certificates-mozilla: update to 2.66" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227525" id="1227525" title="VUL-0: ca-certificates-mozilla: 2.68 release" type="bugzilla" />
    </references>
    <description>This update for ca-certificates-mozilla fixes the following issues:

- Updated to 2.68 state of Mozilla SSL root CAs (bsc#1227525)
  - Added: FIRMAPROFESIONAL CA ROOT-A WEB
  - Distrust: GLOBALTRUST 2020

- Updated to 2.66 state of Mozilla SSL root CAs (bsc#1220356)
  Added:
  - CommScope Public Trust ECC Root-01
  - CommScope Public Trust ECC Root-02
  - CommScope Public Trust RSA Root-01
  - CommScope Public Trust RSA Root-02
  - D-Trust SBR Root CA 1 2022
  - D-Trust SBR Root CA 2 2022
  - Telekom Security SMIME ECC Root 2021
  - Telekom Security SMIME RSA Root 2023
  - Telekom Security TLS ECC Root 2020
  - Telekom Security TLS RSA Root 2023
  - TrustAsia Global Root CA G3
  - TrustAsia Global Root CA G4
  Removed:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - Chambers of Commerce Root - 2008
  - Global Chambersign Root - 2008
  - Security Communication Root CA
  - Symantec Class 1 Public Primary Certification Authority - G6
  - Symantec Class 2 Public Primary Certification Authority - G6
  - TrustCor ECA-1
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - VeriSign Class 1 Public Primary Certification Authority - G3
  - VeriSign Class 2 Public Primary Certification Authority - G3
</description>
    <pkglist>
      <collection>
        <package name="ca-certificates-mozilla" epoch="0" version="2.68" release="1.1" arch="noarch" src="noarch/ca-certificates-mozilla-2.68-1.1.noarch.rpm">
          <filename>ca-certificates-mozilla-2.68-1.1.noarch.rpm</filename>
        </package>
        <package name="ca-certificates-mozilla" epoch="0" version="2.68" release="1.1" arch="src" src="src/ca-certificates-mozilla-2.68-1.1.src.rpm">
          <filename>ca-certificates-mozilla-2.68-1.1.src.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>31</id>
    <title>Security update for unbound</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1725528645" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215628" id="1215628" title="unbound fails to start under openSUSE MicroOS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219823" id="1219823" title="VUL-0: CVE-2023-50387 : unbound, pdns, bind, dnsmasq: Denial Of Service while trying to validate specially crafted DNSSEC responses" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219826" id="1219826" title="VUL-0: CVE-2023-50868: unbound, bind, pdns, dnsmasq: Denial Of Service while trying to validate specially crafted DNSSEC responses" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221164" id="1221164" title="VUL-0: CVE-2024-1931: unbound: Infinite loop due to improper EDE message size check" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387" id="CVE-2023-50387" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868" id="CVE-2023-50868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1931" id="CVE-2024-1931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1931" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33655" id="CVE-2024-33655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33655" type="cve" />
    </references>
    <description>This update for unbound fixes the following issues:

- Update to 1.20.0:
  Features:
  * The config for discard-timeout, wait-limit, wait-limit-cookie,
    wait-limit-netblock and wait-limit-cookie-netblock was added,
    for the fix to the DNSBomb issue.
  * Merge GH#1027: Introduce 'cache-min-negative-ttl' option.
  * Merge GH#1043 from xiaoxiaoafeifei: Add loongarch support;
    updates config.guess(2024-01-01) and config.sub(2024-01-01),
    verified with upstream.
  * Implement cachedb-check-when-serve-expired: yes option, default
    is enabled. When serve expired is enabled with cachedb, it
    first checks cachedb before serving the expired response.
  * Fix GH#876: [FR] can unbound-checkconf be silenced when
    configuration is valid?

  Bug Fixes:
  * Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to
    Xiang Li from the Network and Information Security Lab of
    Tsinghua University for reporting it.
  * Update doc/unbound.doxygen with 'doxygen -u'. Fixes option
    deprecation warnings and updates with newer defaults.
  * Remove unused portion from iter_dname_ttl unit test.
  * Fix validator classification of qtype DNAME for positive and
    redirection answers, and fix validator signature routine for
    dealing with the synthesized CNAME for a DNAME without
    previously encountering it and also for when the qtype is
    DNAME.
  * Fix qname minimisation for reply with a DNAME for qtype CNAME
    that answers it.
  * Fix doc test so it ignores but outputs unsupported doxygen
    options.
  * Fix GH#1021 Inconsistent Behavior with Changing
    rpz-cname-override and doing a unbound-control reload.
  * Merge GH#1028: Clearer documentation for tcp-idle-timeout and
    edns-tcp-keepalive-timeout.
  * Fix GH#1029: rpz trigger clientip and action rpz-passthru not
    working as expected.
  * Fix rpz that the rpz override is taken in case of clientip
    triggers. Fix that the clientip passthru action is logged. Fix
    that the clientip localdata action is logged. Fix rpz override
    action cname for the clientip trigger.
  * Fix to unify codepath for local alias for rpz cname action
    override.
  * Fix rpz for cname override action after nsdname and nsip
    triggers.
  * Fix that addrinfo is not kept around but copied and freed, so
    that log-destaddr uses a copy of the information, much like NSD
    does.
  * Merge GH#1030: Persist the openssl and expat directories for
    repeated Windows builds.
  * Fix that rpz CNAME content is limited to the max number of
    cnames.
  * Fix rpz, it follows iterator CNAMEs for nsip and nsdname and
    sets the reply query_info values, that is better for debug
    logging.
  * Fix rpz that copies the cname override completely to the temp
    region, so there are no references to the rpz region.
  * Add rpz unit test for nsip action override.
  * Fix rpz for qtype CNAME after nameserver trigger.
  * Fix rpz so that rpz CNAME can apply after rpz CNAME. And fix
    that clientip and nsip can give a CNAME.
  * Fix localdata and rpz localdata to match CNAME only if no
    direct type match is available.
  * Merge GH#831 from Pierre4012: Improve Windows NSIS installer
    script (setup.nsi).
  * For GH#831: Format text, use exclamation icon and explicit label
    names.
  * Fix name of unit test for subnet cache response.
  * Fix GH#1032: The size of subnet_msg_cache calculation mistake
    cause memory usage increased beyond expectations.
  * Fix for GH#1032, add safeguard to make table space positive.
  * Fix comment in lruhash space function.
  * Fix to add unit test for lruhash space that exercises the
    routines.
  * Fix that when the server truncates the pidfile, it does not
    follow symbolic links.
  * Fix that the server does not chown the pidfile.
  * Fix GH#1034: DoT forward-zone via unbound-control.
  * Fix for crypto related failures to have a better error string.
  * Fix GH#1035: Potential Bug while parsing port from the
    "stub-host" string; also affected forward-zones and
    remote-control host directives.
  * Fix GH#369: dnstap showing extra responses; for client responses
    right from the cache when replying with expired data or
    prefetching.
  * Fix GH#1040: fix heap-buffer-overflow issue in function
    cfg_mark_ports of file util/config_file.c.
  * For GH#1040: adjust error text and disallow negative ports in
    other parts of cfg_mark_ports.
  * Fix comment syntax for view function views_find_view.
  * Fix GH#595: unbound-anchor cannot deal with full disk; it will
    now first write out to a temp file before replacing the
    original one, like Unbound already does for
    auto-trust-anchor-file.
  * Fixup compile without cachedb.
  * Add test for cachedb serve expired.
  * Extended test for cachedb serve expired.
  * Fix makefile dependencies for fake_event.c.
  * Fix cachedb for serve-expired with serve-expired-reply-ttl.
  * Fix to not reply serve expired unless enabled for cachedb.
  * Fix cachedb for serve-expired with
    serve-expired-client-timeout.
  * Fixup unit test for cachedb server expired client timeout with
    a check if response if from upstream or from cachedb.
  * Fixup cachedb to not refetch when serve-expired-client-timeout
    is used.
  * Merge GH#1049 from Petr Menšík: Py_NoSiteFlag is not needed since
    Python 3.8
  * Fix GH#1048: Update ax_pkg_swig.m4 and ax_pthread.m4.
  * Fix configure, autoconf for GH#1048.
  * Add checklock feature verbose_locking to trace locks and
    unlocks.
  * Fix edns subnet to sort rrset references when storing messages
    in the cache. This fixes a race condition in the rrset locks.
  * Merge GH#1053: Remove child delegations from cache when
    grandchild delegations are returned from parent.
  * Fix ci workflow for macos for moved install locations.
  * Fix configure flto check error, by finding grep for it.
  * Merge GH#1041: Stub and Forward unshare. This has one structure
    for them and fixes GH#1038: fatal error: Could not initialize
    thread / error: reading root hints.
  * Fix to disable fragmentation on systems with IP_DONTFRAG, with
    a nonzero value for the socket option argument.
  * Fix doc unit test for out of directory build.
  * Fix cachedb with serve-expired-client-timeout disabled. The
    edns subnet module deletes global cache and cachedb cache when
    it stores a result, and serve-expired is enabled, so that the
    global reply, that is older than the ecs reply, does not return
    after the ecs reply expires.
  * Add unit tests for cachedb and subnet cache expired data.
  * Man page entry for unbound-checkconf -q.
  * Cleanup unnecessary strdup calls for EDE strings.
  * Fix doxygen comment for errinf_to_str_bogus.

- Update to 1.19.3:
  * Features:
    - Merge PR #973: Use the origin (DNAME) TTL for synthesized
      CNAMEs as per RFC 6672.
  * Bug Fixes
    - Fix unit test parse of origin syntax.
    - Use 127.0.0.1 explicitly in tests to avoid delays and errors
      on newer systems.
    - Fix #964: config.h.in~ backup file in release tar balls.
    - Merge #968: Replace the obsolescent fgrep with grep -F in
      tests.
    - Merge #971: fix 'WARNING: Message has 41 extra bytes at end'.
    - Fix #969: [FR] distinguish Do53, DoT and DoH in the logs.
    - Fix dnstap that assertion failed on logging other than UDP
      and TCP traffic. It lists it as TCP traffic.
    - Fix to sync the tests script file common.sh.
    - iana portlist update.
    - Updated IPv4 and IPv6 address for b.root-servers.net in root
      hints.
    - Update test script file common.sh.
    - Fix tests to use new common.sh functions, wait_logfile and
      kill_from_pidfile.
    - Fix #974: doc: default number of outgoing ports without
      libevent.
    - Merge #975: Fixed some syntax errors in rpl files.
    - Fix root_zonemd unit test, it checks that the root ZONEMD
      verifies, now that the root has a valid ZONEMD.
    - Update example.conf with cookie options.
    - Merge #980: DoH: reject non-h2 early. To fix #979: Improve
      errors for non-HTTP/2 DoH clients.
    - Merge #985: Add DoH and DoT to dnstap message.
    - Fix #983: Sha1 runtime insecure change was incomplete.
    - Remove unneeded newlines and improve indentation in remote
      control code.
    - Merge #987: skip edns frag retry if advertised udp payload
      size is not smaller.
    - Fix unit test for #987 change in udp1xxx retry packet send.
    - Merge #988: Fix NLnetLabs#981: dump_cache truncates large
      records.
    - Fix to link with -lcrypt32 for OpenSSL 3.2.0 on Windows.
    - Fix to link with libssp for libcrypto and getaddrinfo check
      for only header. Also update crosscompile to remove ssp for
      32bit.
    - Merge #993: Update b.root-servers.net also in example config
      file.
    - Update workflow for ports to use newer openssl on windows
      compile.
    - Fix warning for windres on resource files due to
      redefinition.
    - Fix for #997: Print details for SSL certificate failure.
    - Update error printout for duplicate trust anchors to include
      the trust anchor name (relates to #920).
    - Update message TTL when using cached RRSETs. It could result
      in non-expired messages with expired RRSETs (non-usable
      messages by Unbound).
    - Merge #999: Search for protobuf-c with pkg-config.
    - Fix #1006: Can't find protobuf-c package since #999.
    - Fix documentation for access-control in the unbound.conf man
      page.
    - Merge #1010: Mention REFUSED has the TC bit set with
      unmatched allow_cookie acl in the manpage. It also fixes the
      code to match the documentation about clients with a valid
      cookie that bypass the ratelimit regardless of the
      allow_cookie acl.
    - Document the suspend argument for process_ds_response().
    - Move github workflows to use checkoutv4.
    - Fix edns subnet replies for scope zero answers to not get
      stored in the global cache, and in cachedb, when the upstream
      replies without an EDNS record.
    - Fix for #1022: Fix ede prohibited in access control refused
      answers.
    - Fix unbound-control-setup.cmd to use 3072 bits so that
      certificates are long enough for newer OpenSSL versions.
    - Fix TTL of synthesized CNAME when a DNAME is used from cache.
    - Fix unbound-control-setup.cmd to have CA v3 basicConstraints,
      like unbound-control-setup.sh has.

- Update to 1.19.2:
  * Bug Fixes:
    - Fix CVE-2024-1931, Denial of service when trimming EDE text
      on positive replies.
      [bsc#1221164]

- Update to 1.19.1:
  * Bug Fixes: [bsc#1219823, CVE-2023-50387][bsc#1219826, CVE-2023-50868]
    - Fix CVE-2023-50387, DNSSEC verification complexity can be
      exploited to exhaust CPU resources and stall DNS resolvers.
    - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.

- as we use --disable-explicit-port-randomisation, also disable
  outgoing-port-permit and outgoing-port-avoid in config file to
  suppress the related unbound-checkconf warnings on every start

- Update to 1.19.0:
  * Features:
    - Fix #850: [FR] Ability to use specific database in Redis, with
      new redis-logical-db configuration option.
    - Merge #944: Disable EDNS DO. Disable the EDNS DO flag in upstream
      requests. This can be helpful for devices that cannot handle
      DNSSEC information. But it should not be enabled otherwise, because
      that would stop DNSSEC validation. The DNSSEC validation would not
      work for Unbound itself, and also not for downstream users. Default
      is no. The option is disable-edns-do: no
    - Expose the script filename in the Python module environment 'mod_env'
      instead of the config_file structure which includes the linked list
      of scripts in a multi Python module setup; fixes #79.
    - Expose the configured listening and outgoing interfaces, if any, as
      a list of strings in the Python 'config_file' class instead of the
      current Swig object proxy; fixes #79.
    - Mailing list patches from Daniel Gröber for DNS64 fallback to plain
      AAAA when no A record exists for synthesis, and minor DNS64 code
      refactoring for better readability.
    - Merge #951: Cachedb no store. The cachedb-no-store: yes option is
      used to stop cachedb from writing messages to the backend storage.
      It reads messages when data is available from the backend.
      The default is no.
  * Bug Fixes:
    - Fix for version generation race condition that ignored changes.
    - Fix #942: 1.18.0 libunbound DNS regression when built without OpenSSL.
    - Fix for WKS call to getservbyname that creates allocation on exit in
      unit test by testing numbers first and testing from the services list later.
    - Fix autoconf 2.69 warnings in configure.
    - Fix #927: unbound 1.18.0 make test error. Fix make test without SHA1.
    - Merge #931: Prevent warnings from -Wmissing-prototypes.
    - Fix to scrub resource records of type A and AAAA that have an
      inappropriate size. They are removed from responses.
    - Fix to move msgparse_rrset_remove_rr code to util/msgparse.c.
    - Fix to add EDE text when RRs have been removed due to length.
    - Fix to set ede match in unit test for rr length removal.
    - Fix to print EDE text in readable form in output logs.
    - Fix send of udp retries when ENOBUFS is returned. It stops looping
      and also waits for the condition to go away. Reported by Florian Obser.
    - Fix authority zone answers for obscured DNAMEs and delegations.
    - Merge #936: Check for c99 with autoconf versions prior to 2.70.
    - Fix to remove two c99 notations.
    - Fix rpz tcp-only action with rpz triggers nsdname and nsip.
    - Fix misplaced comment.
    - Merge #881: Generalise the proxy protocol code.
    - Fix #946: Forwarder returns servfail on upstream response noerror no data.
    - Fix edns subnet so that queries with a source prefix of zero cause the
      recursor send no edns subnet option to the upstream.
    - Fix that printout of EDNS options shows the EDNS cookie option by name.
    - Fix infinite loop when reading multiple lines of input on a broken remote
      control socket. Addesses #947 and #948.
    - Fix #949: "could not create control compt".
    - Fix that cachedb does not warn when serve-expired is disabled about use
      of serve-expired-reply-ttl and serve-expired-client-timeout.
    - Fix for #949: Fix pythonmod/ubmodule-tst.py for Python 3.x.
    - Better fix for infinite loop when reading multiple lines of input on a
      broken remote control socket, by treating a zero byte line the same as
      transmission end. Addesses #947 and #948.
    - For multi Python module setups, clean previously parsed module functions
      in __main__'s dictionary, if any, so that only current module functions
      are registered.
    - Fix #954: Inconsistent RPZ handling for A record returned along with CNAME.
    - Fixes for the DNS64 patches.
    - Update the dns64_lookup.rpl test for the DNS64 fallback patch.
    - Merge #955 from buevsan: fix ipset wrong behavior.
    - Update testdata/ipset.tdir test for ipset fix.
    - Fix to print detailed errors when an SSL IO routine fails via SSL_get_error.
    - Clearer configure text for missing protobuf-c development libraries.
    - autoconf.
    - Merge #930 from Stuart Henderson: add void to log_ident_revert_to_default
      declaration.
    - Fix #941: dnscrypt doesn't work after upgrade to 1.18 with suggestion by
      dukeartem to also fix the udp_ancil with dnscrypt.
    - Fix SSL compile failure for definition in log_crypto_err_io_code_arg.
    - Fix SSL compile failure for other missing definitions in log_crypto_err_io_code_arg.
    - Fix compilation without openssl, remove unused function warning.
    - Mention flex and bison in README.md when building from repository source.

- Update to 1.18.0:
  * Features:
    - Аdd a metric about the maximum number of collisions in lrushah.
    - Set max-udp-size default to 1232. This is the same default value
      as the default value for edns-buffer-size. It restricts client
      edns buffer size choices, and makes unbound behave similar to
      other DNS resolvers.
    - Add harden-unknown-additional option. It removes unknown records
      from the authority section and additional section.
    - Added new static zone type block_a to suppress all A queries for
      specific zones.
    - [FR] Ability to use Redis unix sockets.
    - [FR] Ability to set the Redis password.
    - Features/dropqueuedpackets, with sock-queue-timeout option that
      drops packets that have been in the socket queue for too long.
      Added statistics num.queries_timed_out and query.queue_time_us.max
      that track the socket queue timeouts.
    - 'eqvinox' Lamparter: NAT64 support.
    - [FR] Use kernel timestamps for dnstap.
    - Add cachedb hit stat. Introduces 'num.query.cachedb' as a new
      statistical counter.
    - Add SVCB dohpath support.
    - Add validation EDEs to queries where the CD bit is set.
    - Add prefetch support for subnet cache entries.
    - Add EDE (RFC8914) caching.
    - Add support for EDE caching in cachedb and subnetcache.
    - Downstream DNS Server Cookies a la RFC7873 and RFC9018. Create server
      cookies for clients that send client cookies. This needs to be explicitly
      turned on in the config file with: `answer-cookie: yes`.
  * Bug Fixes
    - Response change to NODATA for some ANY queries since 1.12.
    - Fix not following cleared RD flags potentially enables
      amplification DDoS attacks.
    - Set default for harden-unknown-additional to no. So that it
      does not hamper future protocol developments.
    - Fix to ignore entirely empty responses, and try at another authority.
      This turns completely empty responses, a type of noerror/nodata into
      a servfail, but they do not conform to RFC2308, and the retry can fetch
      improved content.
    - Allow TTL refresh of expired error responses.
    - Fix: Unexpected behavior with client-subnet-always-forward and serve-expired
    - Fix unbound-dnstap-socket test program to reply the finish frame over
      a TLS connection correctly.
    - Fix: reserved identifier violation
    - Fix: Unencrypted query is sent when forward-tls-upstream: yes is used
      without tls-cert-bundle
    - Extra consistency check to make sure that when TLS is requested,
      either we set up a TLS connection or we return an error.
    - Fix: NXDOMAIN instead of NOERROR rcode when asked for existing CNAME record.
    - Fix: Bad interaction with 0 TTL records and serve-expired
    - Fix RPZ IP responses with trigger rpz-drop on cache entries.
    - Fix RPZ removal of client-ip, nsip, nsdname triggers from IXFR.
    - Fix dereference of NULL variable warning in mesh_do_callback.
    - Fix ip_ratelimit test to work with dig that enables DNS cookies.
    - Fix for iter_dec_attempts that could cause a hang, part of capsforid
      and qname minimisation, depending on the settings.
    - Fix uninitialized memory passed in padding bytes of cmsg to sendmsg.
    - Fix stat_values test to work with dig that enables DNS cookies.
    - unbound.service: Main process exited, code=killed, status=11/SEGV.
      Fixes cachedb configuration handling.
    - Fix: processQueryResponse() THROWAWAY should be mindful of fail_reply.

- Update to 1.20.0:
  Features:
  * The config for discard-timeout, wait-limit, wait-limit-cookie,
    wait-limit-netblock and wait-limit-cookie-netblock was added,
    for the fix to the DNSBomb issue.
  * Merge GH#1027: Introduce 'cache-min-negative-ttl' option.
  * Merge GH#1043 from xiaoxiaoafeifei: Add loongarch support;
    updates config.guess(2024-01-01) and config.sub(2024-01-01),
    verified with upstream.
  * Implement cachedb-check-when-serve-expired: yes option, default
    is enabled. When serve expired is enabled with cachedb, it
    first checks cachedb before serving the expired response.
  * Fix GH#876: [FR] can unbound-checkconf be silenced when
    configuration is valid?

  Bug Fixes:
  * Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to
    Xiang Li from the Network and Information Security Lab of
    Tsinghua University for reporting it.
  * Update doc/unbound.doxygen with 'doxygen -u'. Fixes option
    deprecation warnings and updates with newer defaults.
  * Remove unused portion from iter_dname_ttl unit test.
  * Fix validator classification of qtype DNAME for positive and
    redirection answers, and fix validator signature routine for
    dealing with the synthesized CNAME for a DNAME without
    previously encountering it and also for when the qtype is
    DNAME.
  * Fix qname minimisation for reply with a DNAME for qtype CNAME
    that answers it.
  * Fix doc test so it ignores but outputs unsupported doxygen
    options.
  * Fix GH#1021 Inconsistent Behavior with Changing
    rpz-cname-override and doing a unbound-control reload.
  * Merge GH#1028: Clearer documentation for tcp-idle-timeout and
    edns-tcp-keepalive-timeout.
  * Fix GH#1029: rpz trigger clientip and action rpz-passthru not
    working as expected.
  * Fix rpz that the rpz override is taken in case of clientip
    triggers. Fix that the clientip passthru action is logged. Fix
    that the clientip localdata action is logged. Fix rpz override
    action cname for the clientip trigger.
  * Fix to unify codepath for local alias for rpz cname action
    override.
  * Fix rpz for cname override action after nsdname and nsip
    triggers.
  * Fix that addrinfo is not kept around but copied and freed, so
    that log-destaddr uses a copy of the information, much like NSD
    does.
  * Merge GH#1030: Persist the openssl and expat directories for
    repeated Windows builds.
  * Fix that rpz CNAME content is limited to the max number of
    cnames.
  * Fix rpz, it follows iterator CNAMEs for nsip and nsdname and
    sets the reply query_info values, that is better for debug
    logging.
  * Fix rpz that copies the cname override completely to the temp
    region, so there are no references to the rpz region.
  * Add rpz unit test for nsip action override.
  * Fix rpz for qtype CNAME after nameserver trigger.
  * Fix rpz so that rpz CNAME can apply after rpz CNAME. And fix
    that clientip and nsip can give a CNAME.
  * Fix localdata and rpz localdata to match CNAME only if no
    direct type match is available.
  * Merge GH#831 from Pierre4012: Improve Windows NSIS installer
    script (setup.nsi).
  * For GH#831: Format text, use exclamation icon and explicit label
    names.
  * Fix name of unit test for subnet cache response.
  * Fix GH#1032: The size of subnet_msg_cache calculation mistake
    cause memory usage increased beyond expectations.
  * Fix for GH#1032, add safeguard to make table space positive.
  * Fix comment in lruhash space function.
  * Fix to add unit test for lruhash space that exercises the
    routines.
  * Fix that when the server truncates the pidfile, it does not
    follow symbolic links.
  * Fix that the server does not chown the pidfile.
  * Fix GH#1034: DoT forward-zone via unbound-control.
  * Fix for crypto related failures to have a better error string.
  * Fix GH#1035: Potential Bug while parsing port from the
    "stub-host" string; also affected forward-zones and
    remote-control host directives.
  * Fix GH#369: dnstap showing extra responses; for client responses
    right from the cache when replying with expired data or
    prefetching.
  * Fix GH#1040: fix heap-buffer-overflow issue in function
    cfg_mark_ports of file util/config_file.c.
  * For GH#1040: adjust error text and disallow negative ports in
    other parts of cfg_mark_ports.
  * Fix comment syntax for view function views_find_view.
  * Fix GH#595: unbound-anchor cannot deal with full disk; it will
    now first write out to a temp file before replacing the
    original one, like Unbound already does for
    auto-trust-anchor-file.
  * Fixup compile without cachedb.
  * Add test for cachedb serve expired.
  * Extended test for cachedb serve expired.
  * Fix makefile dependencies for fake_event.c.
  * Fix cachedb for serve-expired with serve-expired-reply-ttl.
  * Fix to not reply serve expired unless enabled for cachedb.
  * Fix cachedb for serve-expired with
    serve-expired-client-timeout.
  * Fixup unit test for cachedb server expired client timeout with
    a check if response if from upstream or from cachedb.
  * Fixup cachedb to not refetch when serve-expired-client-timeout
    is used.
  * Merge GH#1049 from Petr Menšík: Py_NoSiteFlag is not needed since
    Python 3.8
  * Fix GH#1048: Update ax_pkg_swig.m4 and ax_pthread.m4.
  * Fix configure, autoconf for GH#1048.
  * Add checklock feature verbose_locking to trace locks and
    unlocks.
  * Fix edns subnet to sort rrset references when storing messages
    in the cache. This fixes a race condition in the rrset locks.
  * Merge GH#1053: Remove child delegations from cache when
    grandchild delegations are returned from parent.
  * Fix ci workflow for macos for moved install locations.
  * Fix configure flto check error, by finding grep for it.
  * Merge GH#1041: Stub and Forward unshare. This has one structure
    for them and fixes GH#1038: fatal error: Could not initialize
    thread / error: reading root hints.
  * Fix to disable fragmentation on systems with IP_DONTFRAG, with
    a nonzero value for the socket option argument.
  * Fix doc unit test for out of directory build.
  * Fix cachedb with serve-expired-client-timeout disabled. The
    edns subnet module deletes global cache and cachedb cache when
    it stores a result, and serve-expired is enabled, so that the
    global reply, that is older than the ecs reply, does not return
    after the ecs reply expires.
  * Add unit tests for cachedb and subnet cache expired data.
  * Man page entry for unbound-checkconf -q.
  * Cleanup unnecessary strdup calls for EDE strings.
  * Fix doxygen comment for errinf_to_str_bogus.

- Update to 1.19.3:
  * Features:
    - Merge PR #973: Use the origin (DNAME) TTL for synthesized
      CNAMEs as per RFC 6672.
  * Bug Fixes
    - Fix unit test parse of origin syntax.
    - Use 127.0.0.1 explicitly in tests to avoid delays and errors
      on newer systems.
    - Fix #964: config.h.in~ backup file in release tar balls.
    - Merge #968: Replace the obsolescent fgrep with grep -F in
      tests.
    - Merge #971: fix 'WARNING: Message has 41 extra bytes at end'.
    - Fix #969: [FR] distinguish Do53, DoT and DoH in the logs.
    - Fix dnstap that assertion failed on logging other than UDP
      and TCP traffic. It lists it as TCP traffic.
    - Fix to sync the tests script file common.sh.
    - iana portlist update.
    - Updated IPv4 and IPv6 address for b.root-servers.net in root
      hints.
    - Update test script file common.sh.
    - Fix tests to use new common.sh functions, wait_logfile and
      kill_from_pidfile.
    - Fix #974: doc: default number of outgoing ports without
      libevent.
    - Merge #975: Fixed some syntax errors in rpl files.
    - Fix root_zonemd unit test, it checks that the root ZONEMD
      verifies, now that the root has a valid ZONEMD.
    - Update example.conf with cookie options.
    - Merge #980: DoH: reject non-h2 early. To fix #979: Improve
      errors for non-HTTP/2 DoH clients.
    - Merge #985: Add DoH and DoT to dnstap message.
    - Fix #983: Sha1 runtime insecure change was incomplete.
    - Remove unneeded newlines and improve indentation in remote
      control code.
    - Merge #987: skip edns frag retry if advertised udp payload
      size is not smaller.
    - Fix unit test for #987 change in udp1xxx retry packet send.
    - Merge #988: Fix NLnetLabs#981: dump_cache truncates large
      records.
    - Fix to link with -lcrypt32 for OpenSSL 3.2.0 on Windows.
    - Fix to link with libssp for libcrypto and getaddrinfo check
      for only header. Also update crosscompile to remove ssp for
      32bit.
    - Merge #993: Update b.root-servers.net also in example config
      file.
    - Update workflow for ports to use newer openssl on windows
      compile.
    - Fix warning for windres on resource files due to
      redefinition.
    - Fix for #997: Print details for SSL certificate failure.
    - Update error printout for duplicate trust anchors to include
      the trust anchor name (relates to #920).
    - Update message TTL when using cached RRSETs. It could result
      in non-expired messages with expired RRSETs (non-usable
      messages by Unbound).
    - Merge #999: Search for protobuf-c with pkg-config.
    - Fix #1006: Can't find protobuf-c package since #999.
    - Fix documentation for access-control in the unbound.conf man
      page.
    - Merge #1010: Mention REFUSED has the TC bit set with
      unmatched allow_cookie acl in the manpage. It also fixes the
      code to match the documentation about clients with a valid
      cookie that bypass the ratelimit regardless of the
      allow_cookie acl.
    - Document the suspend argument for process_ds_response().
    - Move github workflows to use checkoutv4.
    - Fix edns subnet replies for scope zero answers to not get
      stored in the global cache, and in cachedb, when the upstream
      replies without an EDNS record.
    - Fix for #1022: Fix ede prohibited in access control refused
      answers.
    - Fix unbound-control-setup.cmd to use 3072 bits so that
      certificates are long enough for newer OpenSSL versions.
    - Fix TTL of synthesized CNAME when a DNAME is used from cache.
    - Fix unbound-control-setup.cmd to have CA v3 basicConstraints,
      like unbound-control-setup.sh has.

- Update to 1.19.2:
  * Bug Fixes:
    - Fix CVE-2024-1931, Denial of service when trimming EDE text
      on positive replies.
      [bsc#1221164]

- Update to 1.19.1:
  * Bug Fixes: [bsc#1219823, CVE-2023-50387][bsc#1219826, CVE-2023-50868]
    - Fix CVE-2023-50387, DNSSEC verification complexity can be
      exploited to exhaust CPU resources and stall DNS resolvers.
    - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.

- as we use --disable-explicit-port-randomisation, also disable
  outgoing-port-permit and outgoing-port-avoid in config file to
  suppress the related unbound-checkconf warnings on every start

- Use prefixes instead of sudo in unbound.service (bsc#1215628)

- Update to 1.19.0:
  * Features:
    - Fix #850: [FR] Ability to use specific database in Redis, with
      new redis-logical-db configuration option.
    - Merge #944: Disable EDNS DO. Disable the EDNS DO flag in upstream
      requests. This can be helpful for devices that cannot handle
      DNSSEC information. But it should not be enabled otherwise, because
      that would stop DNSSEC validation. The DNSSEC validation would not
      work for Unbound itself, and also not for downstream users. Default
      is no. The option is disable-edns-do: no
    - Expose the script filename in the Python module environment 'mod_env'
      instead of the config_file structure which includes the linked list
      of scripts in a multi Python module setup; fixes #79.
    - Expose the configured listening and outgoing interfaces, if any, as
      a list of strings in the Python 'config_file' class instead of the
      current Swig object proxy; fixes #79.
    - Mailing list patches from Daniel Gröber for DNS64 fallback to plain
      AAAA when no A record exists for synthesis, and minor DNS64 code
      refactoring for better readability.
    - Merge #951: Cachedb no store. The cachedb-no-store: yes option is
      used to stop cachedb from writing messages to the backend storage.
      It reads messages when data is available from the backend.
      The default is no.
  * Bug Fixes:
    - Fix for version generation race condition that ignored changes.
    - Fix #942: 1.18.0 libunbound DNS regression when built without OpenSSL.
    - Fix for WKS call to getservbyname that creates allocation on exit in
      unit test by testing numbers first and testing from the services list later.
    - Fix autoconf 2.69 warnings in configure.
    - Fix #927: unbound 1.18.0 make test error. Fix make test without SHA1.
    - Merge #931: Prevent warnings from -Wmissing-prototypes.
    - Fix to scrub resource records of type A and AAAA that have an
      inappropriate size. They are removed from responses.
    - Fix to move msgparse_rrset_remove_rr code to util/msgparse.c.
    - Fix to add EDE text when RRs have been removed due to length.
    - Fix to set ede match in unit test for rr length removal.
    - Fix to print EDE text in readable form in output logs.
    - Fix send of udp retries when ENOBUFS is returned. It stops looping
      and also waits for the condition to go away. Reported by Florian Obser.
    - Fix authority zone answers for obscured DNAMEs and delegations.
    - Merge #936: Check for c99 with autoconf versions prior to 2.70.
    - Fix to remove two c99 notations.
    - Fix rpz tcp-only action with rpz triggers nsdname and nsip.
    - Fix misplaced comment.
    - Merge #881: Generalise the proxy protocol code.
    - Fix #946: Forwarder returns servfail on upstream response noerror no data.
    - Fix edns subnet so that queries with a source prefix of zero cause the
      recursor send no edns subnet option to the upstream.
    - Fix that printout of EDNS options shows the EDNS cookie option by name.
    - Fix infinite loop when reading multiple lines of input on a broken remote
      control socket. Addesses #947 and #948.
    - Fix #949: "could not create control compt".
    - Fix that cachedb does not warn when serve-expired is disabled about use
      of serve-expired-reply-ttl and serve-expired-client-timeout.
    - Fix for #949: Fix pythonmod/ubmodule-tst.py for Python 3.x.
    - Better fix for infinite loop when reading multiple lines of input on a
      broken remote control socket, by treating a zero byte line the same as
      transmission end. Addesses #947 and #948.
    - For multi Python module setups, clean previously parsed module functions
      in __main__'s dictionary, if any, so that only current module functions
      are registered.
    - Fix #954: Inconsistent RPZ handling for A record returned along with CNAME.
    - Fixes for the DNS64 patches.
    - Update the dns64_lookup.rpl test for the DNS64 fallback patch.
    - Merge #955 from buevsan: fix ipset wrong behavior.
    - Update testdata/ipset.tdir test for ipset fix.
    - Fix to print detailed errors when an SSL IO routine fails via SSL_get_error.
    - Clearer configure text for missing protobuf-c development libraries.
    - autoconf.
    - Merge #930 from Stuart Henderson: add void to log_ident_revert_to_default
      declaration.
    - Fix #941: dnscrypt doesn't work after upgrade to 1.18 with suggestion by
      dukeartem to also fix the udp_ancil with dnscrypt.
    - Fix SSL compile failure for definition in log_crypto_err_io_code_arg.
    - Fix SSL compile failure for other missing definitions in log_crypto_err_io_code_arg.
    - Fix compilation without openssl, remove unused function warning.
    - Mention flex and bison in README.md when building from repository source.

- Update to 1.18.0:
  * Features:
    - Аdd a metric about the maximum number of collisions in lrushah.
    - Set max-udp-size default to 1232. This is the same default value
      as the default value for edns-buffer-size. It restricts client
      edns buffer size choices, and makes unbound behave similar to
      other DNS resolvers.
    - Add harden-unknown-additional option. It removes unknown records
      from the authority section and additional section.
    - Added new static zone type block_a to suppress all A queries for
      specific zones.
    - [FR] Ability to use Redis unix sockets.
    - [FR] Ability to set the Redis password.
    - Features/dropqueuedpackets, with sock-queue-timeout option that
      drops packets that have been in the socket queue for too long.
      Added statistics num.queries_timed_out and query.queue_time_us.max
      that track the socket queue timeouts.
    - 'eqvinox' Lamparter: NAT64 support.
    - [FR] Use kernel timestamps for dnstap.
    - Add cachedb hit stat. Introduces 'num.query.cachedb' as a new
      statistical counter.
    - Add SVCB dohpath support.
    - Add validation EDEs to queries where the CD bit is set.
    - Add prefetch support for subnet cache entries.
    - Add EDE (RFC8914) caching.
    - Add support for EDE caching in cachedb and subnetcache.
    - Downstream DNS Server Cookies a la RFC7873 and RFC9018. Create server
      cookies for clients that send client cookies. This needs to be explicitly
      turned on in the config file with: `answer-cookie: yes`.
  * Bug Fixes
    - Response change to NODATA for some ANY queries since 1.12.
    - Fix not following cleared RD flags potentially enables
      amplification DDoS attacks.
    - Set default for harden-unknown-additional to no. So that it
      does not hamper future protocol developments.
    - Fix to ignore entirely empty responses, and try at another authority.
      This turns completely empty responses, a type of noerror/nodata into
      a servfail, but they do not conform to RFC2308, and the retry can fetch
      improved content.
    - Allow TTL refresh of expired error responses.
    - Fix: Unexpected behavior with client-subnet-always-forward and serve-expired
    - Fix unbound-dnstap-socket test program to reply the finish frame over
      a TLS connection correctly.
    - Fix: reserved identifier violation
    - Fix: Unencrypted query is sent when forward-tls-upstream: yes is used
      without tls-cert-bundle
    - Extra consistency check to make sure that when TLS is requested,
      either we set up a TLS connection or we return an error.
    - Fix: NXDOMAIN instead of NOERROR rcode when asked for existing CNAME record.
    - Fix: Bad interaction with 0 TTL records and serve-expired
    - Fix RPZ IP responses with trigger rpz-drop on cache entries.
    - Fix RPZ removal of client-ip, nsip, nsdname triggers from IXFR.
    - Fix dereference of NULL variable warning in mesh_do_callback.
    - Fix ip_ratelimit test to work with dig that enables DNS cookies.
    - Fix for iter_dec_attempts that could cause a hang, part of capsforid
      and qname minimisation, depending on the settings.
    - Fix uninitialized memory passed in padding bytes of cmsg to sendmsg.
    - Fix stat_values test to work with dig that enables DNS cookies.
    - unbound.service: Main process exited, code=killed, status=11/SEGV.
      Fixes cachedb configuration handling.
    - Fix: processQueryResponse() THROWAWAY should be mindful of fail_reply.

</description>
    <pkglist>
      <collection>
        <package name="libunbound8" epoch="0" version="1.21.0" release="1.1" arch="x86_64" src="x86_64/libunbound8-1.21.0-1.1.x86_64.rpm">
          <filename>libunbound8-1.21.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libunbound8-debuginfo" epoch="0" version="1.21.0" release="1.1" arch="x86_64" src="x86_64/libunbound8-debuginfo-1.21.0-1.1.x86_64.rpm">
          <filename>libunbound8-debuginfo-1.21.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="unbound" epoch="0" version="1.21.0" release="1.1" arch="src" src="src/unbound-1.21.0-1.1.src.rpm">
          <filename>unbound-1.21.0-1.1.src.rpm</filename>
        </package>
        <package name="unbound-anchor" epoch="0" version="1.21.0" release="1.1" arch="x86_64" src="x86_64/unbound-anchor-1.21.0-1.1.x86_64.rpm">
          <filename>unbound-anchor-1.21.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="unbound-anchor-debuginfo" epoch="0" version="1.21.0" release="1.1" arch="x86_64" src="x86_64/unbound-anchor-debuginfo-1.21.0-1.1.x86_64.rpm">
          <filename>unbound-anchor-debuginfo-1.21.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="unbound-debugsource" epoch="0" version="1.21.0" release="1.1" arch="x86_64" src="x86_64/unbound-debugsource-1.21.0-1.1.x86_64.rpm">
          <filename>unbound-debugsource-1.21.0-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>23</id>
    <title>Security update for python311, python-rpm-macros</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1724777382" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=831629" id="831629" title="python3-base test test_faulthandler fails on ppc64" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174091" id="1174091" title="VUL-1: CVE-2019-20907: python,python36,python3,python27: in Lib/tarfile.py an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189495" id="1189495" title="%autopatch missing -m and -M parameter" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221854" id="1221854" title="VUL-0: CVE-2024-0450: python: The zipfile module is vulnerable to &quot;quoted-overlap&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226447" id="1226447" title="VUL-0: CVE-2024-0397: python,python3,python310,python311,python312,python36,python39: memory race condition in ssl.SSLContext certificate store methods" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226448" id="1226448" title="VUL-0: CVE-2024-4032: python,python3,python310,python311,python312,python36,python39: incorrect IPv4 and IPv6 private ranges" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227378" id="1227378" title="/usr/bin/idle* don't have executable bits" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228780" id="1228780" title="VUL-0: CVE-2024-6923: python,python3,python310,python311,python312,python36,python39: CPython : Email header injection due to unquoted newlines" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9947" id="CVE-2019-9947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9947" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20907" id="CVE-2019-20907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20907" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15523" id="CVE-2020-15523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15523" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15801" id="CVE-2020-15801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15801" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25236" id="CVE-2022-25236" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25236" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52425" id="CVE-2023-52425" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52425" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0397" id="CVE-2024-0397" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0397" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0450" id="CVE-2024-0450" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0450" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4032" id="CVE-2024-4032" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4032" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6923" id="CVE-2024-6923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6923" type="cve" />
      <reference href="https://github.com/openSUSE/python-rpm-macros#163" id="openSUSE/python-rpm-macros#163" title="https://github.com/openSUSE/python-rpm-macros#163" type="github" />
    </references>
    <description>This update for python311, python-rpm-macros fixes the following issues:

python311:
  - CVE-2024-0450: Fixed zipfile module vulnerability with "quoted-overlap" zipbomb (bsc#1221854)
  - CVE-2024-4032: Fixed incorrect IPv4 and IPv6 private ranges (bsc#1226448)
  - CVE-2024-0397: Fixed memory race condition in ssl.SSLContext certificate store methods (bsc#1226447)
  - CVE-2024-6923: Prevent email header injection due to unquoted newlines (bsc#1228780)
  - Fixed executable bits for /usr/bin/idle* (bsc#1227378).


python-rpm-macros:

  - Update to version 20240618.c146b29:
    * Add %FLAVOR_pytest and %FLAVOR_pyunittest variants

  - Update to version 20240618.1e386da:
    * Fix python_clone sed regex

  - Update to version 20240614.02920b8:
    * Make sure that RPM_BUILD_ROOT env is set
    * don't eliminate any cmdline arguments in the shebang line
    * Create python313 macros

  - Update to version 20240415.c664b45:
    * Fix typo 310 -&gt; 312 in default-prjconf

  - Update to version 20240202.501440e:
    * SPEC0: Drop python39, add python312 to buildset (#169)

  - Update to version 20231220.98427f3:
    * fix python2_compile macro

  - Update to version 20231207.46c2ec3:
    * make FLAVOR_compile compatible with python2

  - Update to version 20231204.dd64e74:
    * Combine fix_shebang in one line
    * New macro FLAVOR_fix_shebang_path
    * Use realpath in %python_clone macro shebang replacement
    * Compile and fix_shebang in %python_install macros

  - Update to version 20231010.0a1f0d9:
    * Revert "Compile and fix_shebang in %python_install macros"
    * gh#openSUSE/python-rpm-macros#163

  - Update to version 20231010.a32e110:
    * Compile and fix_shebang in %python_install macros

  - Update to version 20231005.bf2d3ab:
    * Fix shebang also in sbin with macro _fix_shebang
</description>
    <pkglist>
      <collection>
        <package name="python311" epoch="0" version="3.11.8" release="3.1" arch="src" src="src/python311-3.11.8-3.1.src.rpm">
          <filename>python311-3.11.8-3.1.src.rpm</filename>
        </package>
        <package name="python311" epoch="0" version="3.11.8" release="3.1" arch="x86_64" src="x86_64/python311-3.11.8-3.1.x86_64.rpm">
          <filename>python311-3.11.8-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses" epoch="0" version="3.11.8" release="3.1" arch="x86_64" src="x86_64/python311-curses-3.11.8-3.1.x86_64.rpm">
          <filename>python311-curses-3.11.8-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses-debuginfo" epoch="0" version="3.11.8" release="3.1" arch="x86_64" src="x86_64/python311-curses-debuginfo-3.11.8-3.1.x86_64.rpm">
          <filename>python311-curses-debuginfo-3.11.8-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debuginfo" epoch="0" version="3.11.8" release="3.1" arch="x86_64" src="x86_64/python311-debuginfo-3.11.8-3.1.x86_64.rpm">
          <filename>python311-debuginfo-3.11.8-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debugsource" epoch="0" version="3.11.8" release="3.1" arch="x86_64" src="x86_64/python311-debugsource-3.11.8-3.1.x86_64.rpm">
          <filename>python311-debugsource-3.11.8-3.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0" epoch="0" version="3.11.8" release="3.1" arch="x86_64" src="x86_64/libpython3_11-1_0-3.11.8-3.1.x86_64.rpm">
          <filename>libpython3_11-1_0-3.11.8-3.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0-debuginfo" epoch="0" version="3.11.8" release="3.1" arch="x86_64" src="x86_64/libpython3_11-1_0-debuginfo-3.11.8-3.1.x86_64.rpm">
          <filename>libpython3_11-1_0-debuginfo-3.11.8-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base" epoch="0" version="3.11.8" release="3.1" arch="x86_64" src="x86_64/python311-base-3.11.8-3.1.x86_64.rpm">
          <filename>python311-base-3.11.8-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base-debuginfo" epoch="0" version="3.11.8" release="3.1" arch="x86_64" src="x86_64/python311-base-debuginfo-3.11.8-3.1.x86_64.rpm">
          <filename>python311-base-debuginfo-3.11.8-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-core" epoch="0" version="3.11.8" release="3.1" arch="src" src="src/python311-core-3.11.8-3.1.src.rpm">
          <filename>python311-core-3.11.8-3.1.src.rpm</filename>
        </package>
        <package name="python311-core-debugsource" epoch="0" version="3.11.8" release="3.1" arch="x86_64" src="x86_64/python311-core-debugsource-3.11.8-3.1.x86_64.rpm">
          <filename>python311-core-debugsource-3.11.8-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>33</id>
    <title>Recommended update for dracut</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1725538427" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208690" id="1208690" title="dracut problem when /etc/ld.so.preload contains a non-existing library" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226412" id="1226412" title="Intermittent reboot Failure on md RAID1 for dracut" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226529" id="1226529" title="Latest util-linux leads to broken initrd when luks is used for the rootfs" type="bugzilla" />
    </references>
    <description>This update for dracut fixes the following issues:

- Update to version 059+suse.567.gadd3169d:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)
</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="059+suse.571.g32b61281" release="1.1" arch="src" src="src/dracut-059+suse.571.g32b61281-1.1.src.rpm">
          <filename>dracut-059+suse.571.g32b61281-1.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="059+suse.571.g32b61281" release="1.1" arch="x86_64" src="x86_64/dracut-059+suse.571.g32b61281-1.1.x86_64.rpm">
          <filename>dracut-059+suse.571.g32b61281-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-debuginfo" epoch="0" version="059+suse.571.g32b61281" release="1.1" arch="x86_64" src="x86_64/dracut-debuginfo-059+suse.571.g32b61281-1.1.x86_64.rpm">
          <filename>dracut-debuginfo-059+suse.571.g32b61281-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-debugsource" epoch="0" version="059+suse.571.g32b61281" release="1.1" arch="x86_64" src="x86_64/dracut-debugsource-059+suse.571.g32b61281-1.1.x86_64.rpm">
          <filename>dracut-debugsource-059+suse.571.g32b61281-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="059+suse.571.g32b61281" release="1.1" arch="x86_64" src="x86_64/dracut-fips-059+suse.571.g32b61281-1.1.x86_64.rpm">
          <filename>dracut-fips-059+suse.571.g32b61281-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>19</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1724157474" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1012628" id="1012628" title="Continuous stable update tracker for Tumbleweed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1065729" id="1065729" title="[trackerbug] 4.12 powerpc base kernel fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1141539" id="1141539" title="kernel backtrace while working with DASDs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1181674" id="1181674" title="SLES 15 SP2 - HST:STC950:Fleetwood:LPAR is not accessible during LPM and migration hung" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1186716" id="1186716" title="[NetApp SLES15 SP6 Bug]: NVMe/TCP host attempts to reconnect despite connect failure with DNR set" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1187716" id="1187716" title="lparstat displays the wrong partition name" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193599" id="1193599" title="intel_dp_detect [i915]] *ERROR* LSPCON init failed on port D" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1195775" id="1195775" title="apparmor fails to build with 5.16.7" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204562" id="1204562" title="L3-Question: Improve visibility of created and bound - but not connected nor listening - TCP ports" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207948" id="1207948" title="Lenovo T14s Gen3 AMD resume from hibernation ends in kernel panic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208593" id="1208593" title="overlayfs causes strange AVCs after recent SELinux policy change" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209657" id="1209657" title="VUL-0: CVE-2023-0160: kernel-source,kernel-source-azure,kernel-source-rt: possibility of deadlock in libbpf function sock_hash_delete_elem()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1209834" id="1209834" title="An upgrade from SLES 15 sp3 to SLES 15 sp4 on ppc64le machines provoked a sudden loss of paths to LUN-s." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213573" id="1213573" title="PVT:1050:NXGZIP: LPM of lpar got failed with error HSCLA2CF in 19th loops" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214683" id="1214683" title="PREEMPT_RT prerequisite backports" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214852" id="1214852" title="install to FCoE hangs instead of rebooting: BUG: kernel NULL pointer dereference, address: 0000000000000102" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215199" id="1215199" title="[trackerbug] 6.4 powerpc base kernel fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215587" id="1215587" title="Partner-L3: SLES 15 SP4 QLogic Driver Causes NIC Failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216196" id="1216196" title="[Build I.67.4] openQA test fails in journal_check: &quot;qgroup reserved space leaked&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216358" id="1216358" title="kernel: Use-after-Free bug in hci_remove_adv_monitor" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216436" id="1216436" title="Backport block layer patches from 6.6" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216702" id="1216702" title="VUL-0: CVE-2023-47233: kernel: Use after Free bug in brcmf_cfg80211_detach" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217169" id="1217169" title="VUL-0: CVE-2023-52655: kernel: malicious USB device impersonating an aqc111 device can make the kernel overstep a buffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217384" id="1217384" title="VUL-0: CVE-2023-6238: kernel-source,kernel-source-azure,kernel-source-rt: nvme: memory corruption via unprivileged user passthrough" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217408" id="1217408" title="VFS: file-max limit 2409228 reached - server becomes unresponsive - need core analyzed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217481" id="1217481" title="s390/dasd: protect device queue against concurrent access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217750" id="1217750" title="Nonfunctional brightness keys on Lenovo Slim 7 16&quot; AMD" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217912" id="1217912" title="L3: Soft lockups in nfsd while nfsserver.service is stopped" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218442" id="1218442" title="[SLES-15-SP6-beta2][xfs] NFS v3/v4 fio random write 4k block size got 10%-33% decline VS 15SP5 GM+MU" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218447" id="1218447" title="VUL-0: CVE-2023-6531: kernel: GC's deletion of an SKB races with unix_stream_read_generic()  leading to UAF" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218562" id="1218562" title="VUL-0: CVE-2023-6270: kernel: use-after-free vulnerability in ATA over Ethernet (AoE) driver" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218730" id="1218730" title="VUL-0: CVE-2023-51780: kernel: use-after-free in net/atm/ioctl.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218820" id="1218820" title="L3-Question: vmware esxi8 uefi secure boot blacklist: Problem with revocation key (-74)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218917" id="1218917" title="VUL-0: CVE-2024-0639: kernel: potential deadlock on &amp;net-&gt;sctp.addr_wq_lock leading to DOS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219104" id="1219104" title="VUL-0: CVE-2024-23848: kernel: use-after-free in cec_queue_msg_fh, related to drivers/media/cec/core/cec-adap.c and drivers/media/cec/core/cec-api.c." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219170" id="1219170" title="VUL-0: CVE-2024-22099: kernel: NULL pointer dereference vulnerability allows buffers overflow in /net/bluetooth/rfcomm/core.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219216" id="1219216" title="Bluetooth: Race condition between MGMT_OP_REMOVE_ADV_MONITOR command with power of controller" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219224" id="1219224" title="OCFS2 writes delay on large volumes - slow la window lookup from global_bitmap" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219451" id="1219451" title="SLES 15 SP6 Beta2 - qeth device recovery fails frequently during reboot" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219478" id="1219478" title="Fix for: KVM: arm64: Always invalidate TLB for stage-2 permission faults" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219485" id="1219485" title="SLES 15 SP6 Beta2 - qeth device triggers recovery right after first activation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219596" id="1219596" title="dm-raid/md/raid: regression related to dm-raid456 IO concurrent with reshape" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219633" id="1219633" title="L3-Question: kernel workqueue and soft lockups for extended periods with NFS involved in backtraces" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219832" id="1219832" title="VUL-0: CVE-2024-25741: kernel: possible denial of service in printer_write in drivers/usb/gadget/function/f_printer.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219847" id="1219847" title="Request to truncate file on NFS results in file not truncated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219953" id="1219953" title="SLE15-SP6 locking and clocksource backports and fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220021" id="1220021" title="Update Broadcom Emulex lpfc driver for SLES15 SP6 to 14.2.0.17 and 14.4.0.0" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220120" id="1220120" title="SLES15 SP6 [6.4.0-150600.5-default] FS/BTRFS: generic/175 test with 64k bs fails with WARNING: CPU: 1 PID: 95307 at ../fs/btrfs/extent-tree.c:1494" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220138" id="1220138" title="VUL-0: CVE-2023-52435: kernel: mss overflow in skb_segment()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220148" id="1220148" title="VUL-0: CVE-2023-52434: kernel-source,kernel-source-azure,kernel-source-rt: kernel: smb: client: fix potential OOBs in smb2_parse_contexts()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220214" id="1220214" title="VUL-0: CVE-2024-26582: kernel: net: tls: fix use-after-free with partial reads and async decrypt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220328" id="1220328" title="VUL-0: CVE-2023-52463: kernel: efivarfs: force RO when remounting if SetVariable is not supported" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220427" id="1220427" title="VUL-0: CVE-2023-52472: kernel: crypto: rsa - add a check for allocation failure due to mpi_alloc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220430" id="1220430" title="VUL-0: CVE-2023-52473: kernel: thermal: core: Fix NULL pointer dereference in zone registration error path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220569" id="1220569" title="No mouse pointer in noVNC when installing latest Tumbleweed using BVCP" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220738" id="1220738" title="VUL-0: CVE-2023-52483: kernel: mctp: route lookups without holding RCU read-side lock can lead to use-after-free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220783" id="1220783" title="synth uevent: /devices/vio: failed to send uevent - ref:_00D1igLOd._500Tr56lz5:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220942" id="1220942" title="VUL-0: CVE-2024-26615: kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221044" id="1221044" title="VUL-0: CVE-2023-52591: kernel: reiserfs: potential filesystem corruption on directory rename" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221057" id="1221057" title="VUL-0: CVE-2024-26623: kernel: pds_core: Prevent race issues involving the adminq" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221086" id="1221086" title="VUL-0: CVE-2024-26625: kernel: llc: call sock_orphan() at release time" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221097" id="1221097" title="system panic during failing a component disk of md raid1 array with I/O workload" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221303" id="1221303" title="VUL-0: CVE-2024-26611: kernel: xsk: fix usage of multi-buffer BPF helpers for ZC XDP" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221612" id="1221612" title="VUL-0: CVE-2023-52616: kernel: crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221615" id="1221615" title="VUL-0: CVE-2023-52618: kernel: block/rnbd-srv: Check for unlikely string overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221635" id="1221635" title="VUL-0: CVE-2024-26632: kernel: block: Fix iterating over an empty bio with bio_for_each_folio_all" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221645" id="1221645" title="SLES15 SP6 - [P10] - LPAR crashes and hangs on running ksefltest powerpc/mce/inject-ra-err with parameter &quot;percpu_alloc=page&quot; enabled" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221647" id="1221647" title="VUL-0: CVE-2024-26633: kernel: ip6_tunnel: NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() reads uninitialized memory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221649" id="1221649" title="VUL-0: CVE-2024-26638: kernel: nbd: uninitialized struct msghdr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221654" id="1221654" title="VUL-0: CVE-2024-26641: kernel: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221656" id="1221656" title="VUL-0: CVE-2024-26635: kernel: llc: drop support for ETH_P_TR_802_2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221659" id="1221659" title="VUL-0: CVE-2024-26636: kernel: llc: make llc_ui_sendmsg() more robust against bonding changes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221765" id="1221765" title="Fix uncore frequency file string" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221777" id="1221777" title="Update Broadcom Emulex lpfc driver for SLES15 SP6 to 14.4.0.1" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221816" id="1221816" title="qla2xxx: update driver to 10.02.09.200-k" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221829" id="1221829" title="VUL-0: CVE-2024-26643: kernel: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221858" id="1221858" title="[NetApp SLES15 SP6 Bug]: Timeouts leading to controller resets seen on nvme tls connections" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221958" id="1221958" title="Checksum errors on SCTP traffic through IPVS  [ref:_00D1igLOd._500Tr7dsRC:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222011" id="1222011" title="[Regression] SLES15SP6:[6.4.0-150600.9] LPAR reboot crashes the kernel after PCI injection (everest/1060_023/shinner)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222015" id="1222015" title="TSC clocksource spuriously declared invalid in 12+ socket Sapphire Rapids systems" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222080" id="1222080" title="VUL-0: CVE-2023-52622: kernel: ext4: avoid online resizing failures due to oversized flex bg" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222241" id="1222241" title="[Bug Fix/Enhancement] Extend size of the MCE Records pool" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222294" id="1222294" title="VUL-0: CVE-2023-52635: kernel: PM / devfreq: Synchronize devfreq_monitor_[start/stop]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222303" id="1222303" title="VUL-0: CVE-2023-52641: kernel: fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222326" id="1222326" title="VUL-0: CVE-2024-26663: kernel: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222328" id="1222328" title="VUL-0: CVE-2024-26665: kernel: tunnels: fix out of bounds access when building IPv6 PMTU error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222357" id="1222357" title="VUL-0: CVE-2024-26671: kernel: blk-mq: fix IO hang from sbitmap wakeup race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222368" id="1222368" title="VUL-0: CVE-2024-26673: kernel: netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222378" id="1222378" title="VUL-0: CVE-2024-26674: kernel: x86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222380" id="1222380" title="VUL-0: CVE-2024-26676: kernel: af_unix: Call kfree_skb() for dead unix_(sk)-&gt;oob_skb in GC" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222385" id="1222385" title="VUL-0: CVE-2024-26679: kernel: inet: read sk-&gt;sk_family once in inet_recv_error()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222426" id="1222426" title="VUL-0: CVE-2024-26794: kernel: btrfs: fix race between ordered extent completion and fiemap" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222438" id="1222438" title="VUL-0: CVE-2024-26734: kernel: devlink: fix possible use-after-free and memory leaks in devlink_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222459" id="1222459" title="fstests btrfs/303 fails on btrfs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222463" id="1222463" title="VUL-0: CVE-2024-26691: kernel: KVM: arm64: Fix circular locking dependency" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222464" id="1222464" title="VUL-0: CVE-2024-26692: kernel: smb: Fix regression in writes when non-standard maximum write size negotiated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222532" id="1222532" title="VUL-0: CVE-2024-26726: kernel: btrfs: don't drop extent_map for free space inode on write error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222559" id="1222559" title="VUL-0: CVE-2024-26739: kernel: net/sched: act_mirred: don't override retval if we already lost the skb" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222588" id="1222588" title="VUL-0: CVE-2024-26780: kernel: af_unix: Fix task hung while purging oob_skb in GC." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222596" id="1222596" title="VUL-0: CVE-2024-26760: kernel: scsi: target: pscsi: Fix bio_put() for error case" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222608" id="1222608" title="VUL-0: CVE-2024-26742: kernel: scsi: smartpqi: Fix disable_managed_interrupts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222613" id="1222613" title="VUL-0: CVE-2024-26772: kernel: ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222615" id="1222615" title="VUL-0: CVE-2024-26783: kernel: mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222617" id="1222617" title="VUL-0: CVE-2024-26750: kernel: kernel: af_unix: ask hung in __unix_gc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222619" id="1222619" title="VUL-0: CVE-2023-52880: kernel: tty/n_gsm: 0day with exploit dropped on Github" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222624" id="1222624" title="VUL-0: CVE-2024-26816: kernel: startup_xen address leaked in user readable /sys/kernel/notes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222627" id="1222627" title="VUL-0: CVE-2024-26775: kernel: aoe: avoid potential deadlock at set_capacity" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222654" id="1222654" title="NVIDIA vGPU v16.2 failed to be installed on SLE15SP6 RC1 due to compilation errors" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222721" id="1222721" title="VUL-0: CVE-2024-26764: kernel: fs/aio: WARNING in kiocb_set_cancel_fn" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222768" id="1222768" title="[FIPS 140-3][Kernel] Zeroisation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222769" id="1222769" title="[FIPS 140-3][Kernel] Declaration of implementations." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222771" id="1222771" title="[FIPS 140-3][Kernel] Implementation topics" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222775" id="1222775" title="[FIPS 140-3][Kernel]  value exponent enforcement." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222777" id="1222777" title="[FIPS 140-3][Kernel] explicit message digest computation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222779" id="1222779" title="VUL-0: CVE-2024-26785: kernel: iommufd: Fix protection fault in iommufd_test_syz_conv_iova" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222780" id="1222780" title="VUL-0: CVE-2024-26786: kernel: iommufd: Fix iopt_access_list_id overwrite bug" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222782" id="1222782" title="[FIPS 140-3][Kernel] nbits value check requirements" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222793" id="1222793" title="VUL-0: CVE-2024-26791: kernel: btrfs: dev-replace: properly validate device names" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222809" id="1222809" title="VUL-0: CVE-2024-26813: kernel: vfio/platform: NULL pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222810" id="1222810" title="VUL-0: CVE-2024-26814: kernel: vfio/fsl-mc: Block calling interrupt handler without trigger" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222893" id="1222893" title="WARNING: at ../kernel/trace/ring_buffer.c:1544 rb_check_pages.isra [ref:_00D1igLOd._500Tr8mhUI:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223007" id="1223007" title="VUL-0: CVE-2024-26832: kernel: mm: zswap: fix missing folio cleanup in writeback race path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223010" id="1223010" title="VUL-0: CVE-2024-26826: kernel: mptcp: fix data re-injection from stale subflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223011" id="1223011" title="VUL-0: CVE-2024-26822: kernel: smb: client: set correct id, uid and cruid for multiuser automounts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223016" id="1223016" title="VUL-0: CVE-2024-26898: kernel: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223018" id="1223018" title="VUL-0: CVE-2024-26845: kernel: scsi: target: core: uncompleted abort leaving the kernel leaving a never-ending task" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223020" id="1223020" title="VUL-0: CVE-2024-26858: kernel: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223021" id="1223021" title="VUL-0: CVE-2024-26863: kernel: hsr: Fix uninit-value access in hsr_get_node()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223023" id="1223023" title="VUL-0: CVE-2024-26846: kernel: nvme-fc: prevent double free in module exit path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223024" id="1223024" title="VUL-0: CVE-2024-26866: kernel: spi: lpspi: Avoid potential use-after-free in probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223035" id="1223035" title="VUL-0: CVE-2024-26883: kernel: bpf: Fix stackmap overflow check on 32-bit arches" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223038" id="1223038" title="VUL-0: CVE-2024-26868: kernel: nfs: fix panic when nfs4_ff_layout_prepare_ds() fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223039" id="1223039" title="VUL-0: CVE-2024-26854: kernel: ice: fix uninitialized dplls mutex usage" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223041" id="1223041" title="VUL-0: CVE-2024-26881: kernel: net: hns3: fix kernel crash when 1588 is received on HIP08 devices" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223045" id="1223045" title="VUL-0: CVE-2024-26899: kernel: block: fix deadlock between bd_link_disk_holder and partition scan" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223046" id="1223046" title="VUL-0: CVE-2024-26900: kernel: md: fix kmemleak of rdev-&gt;serial" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223051" id="1223051" title="VUL-0: CVE-2024-26855: kernel: net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223052" id="1223052" title="VUL-0: CVE-2024-26856: kernel: net: sparx5: Fix use after free inside sparx5_del_mact_entry" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223057" id="1223057" title="VUL-0: CVE-2024-26852: kernel: net/ipv6: UAF in ip6_route_mpath_notify()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223058" id="1223058" title="VUL-0: CVE-2024-26857: kernel: geneve: make sure to pull inner header in geneve_rx()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223060" id="1223060" title="VUL-0: CVE-2024-26878: kernel: quota: Fix potential NULL pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223061" id="1223061" title="VUL-0: CVE-2024-26853: kernel: igc: invalid free in" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223062" id="1223062" title="VUL-0: CVE-2024-26865: kernel: rds: tcp: Fix use-after-free of net in reqsk_timer_handler()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223076" id="1223076" title="VUL-0: CVE-2024-26861: kernel: wireguard: receive: annotate data-race around receiving_counter.counter" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223077" id="1223077" title="VUL-0: CVE-2024-26860: kernel: dm-integrity: fix a memory leak when rechecking the data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223084" id="1223084" title="VUL-0: CVE-2024-26828: kernel: cifs: underflow in parse_server_interfaces()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223111" id="1223111" title="VUL-0: CVE-2024-26862: kernel: packet: data-races in ignore_outgoing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223113" id="1223113" title="VUL-0: CVE-2024-26870: kernel: NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223137" id="1223137" title="VUL-0: CVE-2024-26916: kernel: Revert &quot;drm/amd: flush any delayed gfxoff on suspend entry&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223138" id="1223138" title="VUL-0: CVE-2024-26921: kernel: inet: inet_defrag: prevent sk release while still in use" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223140" id="1223140" title="VUL-0: CVE-2024-26877: kernel: crypto: WARNING in crypto_finalize_request" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223143" id="1223143" title="VUL-0: CVE-2024-26909: kernel: soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223187" id="1223187" title="VUL-0: CVE-2024-26903: kernel: Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223188" id="1223188" title="VUL-0: CVE-2024-26880: kernel: dm: crash when experimenting with the lvm2 testsuite" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223189" id="1223189" title="VUL-0: CVE-2024-26884: kernel: bpf: hashtab overflow check on 32-bit arches" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223190" id="1223190" title="VUL-0: CVE-2024-26885: kernel: bpf: DEVMAP_HASH overflow check on 32-bit arches" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223191" id="1223191" title="powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223192" id="1223192" title="VUL-0: CVE-2024-26890: kernel: btrtl: out of bounds memory access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223195" id="1223195" title="VUL-0: CVE-2024-26892: kernel: wifi: mt76: mt7921e: use-after-free in free_irq()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223196" id="1223196" title="VUL-0: CVE-2024-26893: kernel: firmware: arm_scmi: double free in SMC transport cleanup path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223197" id="1223197" title="VUL-0: CVE-2024-26895: kernel: wifi: wilc1000:  use-after-free on vif when cleaning up all interfaces" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223198" id="1223198" title="VUL-0: CVE-2024-26901: kernel: information leak vulnerability in do_sys_name_to_handle()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223202" id="1223202" title="VUL-0: CVE-2024-26906: kernel: x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223203" id="1223203" title="VUL-0: CVE-2024-26907: kernel: RDMA/mlx5: Fix fortify source warning while accessing Eth segment" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223204" id="1223204" title="VUL-0: CVE-2024-26913: kernel: drm/amd/display: Fix dcn35 8k30 Underflow/Corruption Issue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223205" id="1223205" title="VUL-0: CVE-2024-26914: kernel: drm/amd/display: fix incorrect mpc_combine array size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223207" id="1223207" title="VUL-0: CVE-2024-26915: kernel: drm/amdgpu: Reset IH OVERFLOW_CLEAR bit" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223265" id="1223265" title="[TRACKER] CONFIG_SENSORS_XGENE is not enable for Ampere platforms" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223285" id="1223285" title="fstests generic/742 got deadlock on btrfs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223315" id="1223315" title="VUL-0: CVE-2024-26922: kernel: drm/amdgpu: validate the parameters of bo mapping operations more clearly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223323" id="1223323" title="VUL-0: CVE-2024-26897: kernel: wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223338" id="1223338" title="SEV test is failed in AMD Turin Processor" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223357" id="1223357" title="arm64 64kb flavor misses $CONFIG_SUSE_SUPPORTED" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223369" id="1223369" title="ISST-LTE : P10:eralp52:Call traces and EEH errors are seen while dlpar add of Shasta adapter" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223380" id="1223380" title="L3: PANIC: &quot;Kernel panic - not syncing: NMI: Not continuing&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223384" id="1223384" title="VUL-0: CVE-2024-26923: kernel: af_unix: fix garbage collector racing against connect()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223390" id="1223390" title="VUL-0: CVE-2024-26925: kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223415" id="1223415" title="Failing build without debuginfo due to missing xfrm_bpf_md_dst kabi symbol" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223439" id="1223439" title="Backport gpio: tegra186: Fix tegra186_gpio_is_accessible() check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223462" id="1223462" title="since 6.7.9-1-default sound has stopped working" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223525" id="1223525" title="VUL-0: CVE-2024-26927: kernel: ASoC: SOF: Add some bounds checking to firmware data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223532" id="1223532" title="VUL-0: CVE-2024-26928: kernel: smb: client: fix potential UAF in cifs_debug_files_proc_show()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223539" id="1223539" title="[PATCH] livepatch: Fix missing newline character in  klp_resolve_symbols()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223570" id="1223570" title="ISST-RWS:- SLES15.6 fadump Hangs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223575" id="1223575" title="[Marvell 15.6 Bug] SLE15-SP6 Public Beta: Server hit kernel panic after running IO on NVMe dm devices" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223590" id="1223590" title="s390/ism: Properly fix receive message buffer allocation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223591" id="1223591" title="block: fix q-&gt;blkg_list corruption during disk rebind" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223592" id="1223592" title="s390/zcrypt: fix reference counting on zcrypt card objects" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223593" id="1223593" title="s390/vdso: drop '-fPIC' from LDFLAGS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223625" id="1223625" title="VUL-0: CVE-2024-21823: kernel: Intel DSA/IAA adapter security issues memory corruption/hangs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223626" id="1223626" title="VUL-0: CVE-2024-26930: kernel: scsi: qla2xxx: double free of the ha-&gt;vp_map pointer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223627" id="1223627" title="VUL-0: CVE-2024-26931: kernel: scsi: qla2xxx: NULL pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223629" id="1223629" title="VUL-0: CVE-2024-26978: kernel: serial: max310x: fix NULL pointer dereference in I2C instantiation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223631" id="1223631" title="VUL-0: CVE-2024-26977: kernel: pci_iounmap(): Fix MMIO mapping leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223632" id="1223632" title="VUL-0: CVE-2024-26975: kernel: powercap: intel_rapl: Fix a NULL pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223633" id="1223633" title="VUL-0: CVE-2024-26984: kernel: nouveau: fix instmem race condition around ptr stores" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223634" id="1223634" title="VUL-0: CVE-2024-26982: kernel: Squashfs: check the inode number is not the invalid value of zero" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223637" id="1223637" title="VUL-0: CVE-2024-26983: kernel: bootconfig: use memblock_free_late to free xbc memory to buddy" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223638" id="1223638" title="VUL-0: CVE-2024-26974: kernel: crypto: qat - resolve race condition during AER recovery" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223641" id="1223641" title="VUL-0: CVE-2024-26973: kernel: fat: fix uninitialized field in nostale filehandles" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223642" id="1223642" title="VUL-0: CVE-2024-26968: kernel: clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223643" id="1223643" title="VUL-0: CVE-2024-26972: kernel: ubifs: ubifs_symlink: Fix memleak of inode-&gt;i_link in error path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223644" id="1223644" title="VUL-0: CVE-2024-26970: kernel: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223645" id="1223645" title="VUL-0: CVE-2024-26969: kernel: clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223646" id="1223646" title="VUL-0: CVE-2024-26966: kernel: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223648" id="1223648" title="VUL-0: CVE-2024-26965: kernel: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223649" id="1223649" title="VUL-0: CVE-2024-26932: kernel: usb: typec: tcpm: double-free issue in tcpm_port_unregister_pd()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223650" id="1223650" title="VUL-0: CVE-2024-26964: kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223651" id="1223651" title="VUL-0: CVE-2024-26963: kernel: usb: dwc3-am62: fix module unload/reload behavior" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223652" id="1223652" title="VUL-0: CVE-2024-26961: kernel: mac802154: fix llsec key resources release in mac802154_llsec_key_del" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223653" id="1223653" title="VUL-0: CVE-2024-26958: kernel: nfs: fix UAF in direct writes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223654" id="1223654" title="VUL-0: CVE-2024-26962: kernel: dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223655" id="1223655" title="VUL-0: CVE-2024-26960: kernel: mm: swap: fix race between free_swap_and_cache() and swapoff()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223657" id="1223657" title="VUL-0: CVE-2024-26955: kernel: nilfs2: prevent kernel bug at submit_bh_wbc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223660" id="1223660" title="VUL-0: CVE-2024-26951: kernel: wireguard: netlink: check for dangling peer via is_dead instead of empty list" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223661" id="1223661" title="VUL-0: CVE-2024-26950: kernel: wireguard: netlink: access device through ctx instead of peer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223663" id="1223663" title="VUL-0: CVE-2024-26956: kernel: nilfs2: fix failure to detect DAT corruption in btree and direct mappings" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223664" id="1223664" title="VUL-0: CVE-2024-26948: kernel: drm/amd/display: Add a dc_state NULL check in dc_state_release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223665" id="1223665" title="VUL-0: CVE-2024-26949: kernel: drm/amdgpu/pm: Fix NULL pointer dereference when get power limit" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223666" id="1223666" title="VUL-0: CVE-2024-26957: kernel: s390/zcrypt: fix reference counting on zcrypt card objects" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223667" id="1223667" title="VUL-0: CVE-2024-26959: kernel: Bluetooth: btnxpuart: Fix btnxpuart_close" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223668" id="1223668" title="VUL-0: CVE-2024-26981: kernel: nilfs2: fix OOB in nilfs_set_de_type" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223669" id="1223669" title="VUL-0: CVE-2024-26946: kernel: kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223670" id="1223670" title="VUL-0: CVE-2024-26933: kernel: USB: core: deadlock in port &quot;disable&quot; sysfs attribute" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223671" id="1223671" title="VUL-0: CVE-2024-26934: kernel: USB: core: deadlock in usb_deauthorize_interface()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223675" id="1223675" title="VUL-0: CVE-2024-26935: kernel: scsi: core: WARNING in proc_register" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223677" id="1223677" title="VUL-0: CVE-2024-26937: kernel: drm/i915/gt: BUG in intel_engine_pm.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223678" id="1223678" title="VUL-0: CVE-2024-26938: kernel: drm/i915/bios: oops in intel_bios_encoder_supports_dp_dual_mode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223679" id="1223679" title="VUL-0: CVE-2024-26939: kernel: drm/i915/vma: UAF on destroy against retire race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223686" id="1223686" title="VUL-0: CVE-2023-52652: kernel: NTB: possible mempry leak in ntb_register_device()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223692" id="1223692" title="VUL-0: CVE-2024-26992: kernel: KVM: x86/pmu: Disable support for adaptive PEBS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223693" id="1223693" title="VUL-0: CVE-2024-26993: kernel: fs: sysfs: fix reference leak in sysfs_break_active_protection()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223695" id="1223695" title="VUL-0: CVE-2024-26991: kernel: KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223696" id="1223696" title="VUL-0: CVE-2024-26995: kernel: usb: typec: tcpm: correct the PDO counting in pd_set" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223698" id="1223698" title="VUL-0: CVE-2024-27001: kernel: comedi: vmk80xx: fix incomplete endpoint checking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223699" id="1223699" title="VUL-0: CVE-2024-27009: kernel: s390/cio: fix race condition during online processing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223705" id="1223705" title="VUL-0: CVE-2024-27389: kernel: pstore: inode: only d_invalidate() is needed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223709" id="1223709" title="VUL-0: CVE-2024-27391: kernel: wifi: wilc1000: do not realloc workqueue everytime an interface is added" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223711" id="1223711" title="VUL-0: CVE-2024-27040: kernel: drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223712" id="1223712" title="VUL-0: CVE-2023-52653: kernel: SUNRPC: memleak in gss_import_v2_context" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223714" id="1223714" title="VUL-0: CVE-2024-27041: kernel: drm/amd/display: fix NULL checks for adev-&gt;dm.dc in amdgpu_dm_fini()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223715" id="1223715" title="VUL-0: CVE-2024-26929: kernel: scsi: qla2xxx: double free of fcport" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223717" id="1223717" title="VUL-0: CVE-2024-27037: kernel: clk: zynq: Prevent null pointer dereference caused by kmalloc failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223718" id="1223718" title="VUL-0: CVE-2024-26940: kernel: drm/vmwgfx: crash when reading /sys/kernel/debug/dri/0/mob_ttm" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223723" id="1223723" title="VUL-0: CVE-2024-27044: kernel: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223725" id="1223725" title="VUL-0: CVE-2024-27060: kernel: thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223728" id="1223728" title="VUL-0: CVE-2024-26986: kernel: drm/amdkfd: Fix memory leak in create_process failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223731" id="1223731" title="VUL-0: CVE-2024-26944: kernel: btrfs: zoned: use-after-free in do_zone_finish()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223732" id="1223732" title="VUL-0: CVE-2024-26945: kernel: crypto: iaa: divide-by-0 in rebalance_wq_table()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223734" id="1223734" title="VUL-0: CVE-2024-27071: kernel: backlight: hx8357: Fix potential NULL pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223735" id="1223735" title="VUL-0: CVE-2024-27014: kernel: net/mlx5e: Prevent deadlock while disabling aRFS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223737" id="1223737" title="VUL-0: CVE-2024-27053: kernel: wifi: wilc1000: fix RCU usage in connect path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223738" id="1223738" title="VUL-0: CVE-2024-27059: kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223739" id="1223739" title="VUL-0: CVE-2024-27067: kernel: xen/evtchn: avoid WARN() when unbinding an event channel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223740" id="1223740" title="VUL-0: CVE-2024-27064: kernel: netfilter: nf_tables: Fix a memory leak in nf_tables_updchain" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223741" id="1223741" title="VUL-0: CVE-2024-26997: kernel: usb: dwc2: host: Fix dereference issue in DDMA completion flow." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223744" id="1223744" title="VUL-0: CVE-2024-27388: kernel: SUNRPC: fix some memleaks in gssx_dec_option_array" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223745" id="1223745" title="VUL-0: CVE-2024-27013: kernel: tun: limit printing rate when illegal packet received by tun dev" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223747" id="1223747" title="VUL-0: CVE-2024-26988: kernel: init/main.c: potential static_command_line memory overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223748" id="1223748" title="VUL-0: CVE-2024-26989: kernel: arm64: hibernate: level3 translation fault in swsusp_save()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223749" id="1223749" title="VUL-0: CVE-2024-26990: kernel: KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223750" id="1223750" title="VUL-0: CVE-2024-26994: kernel: speakup: crash on very long word" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223752" id="1223752" title="VUL-0: CVE-2024-26996: kernel: usb: gadget: f_ncm: UAF ncm object at re-bind after usb ep transport error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223754" id="1223754" title="VUL-0: CVE-2024-26999: kernel: serial/pmac_zilog: flawed mitigation for rx irq flood" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223756" id="1223756" title="VUL-0: CVE-2022-48669: kernel: powerpc/pseries: Fix potential memleak in papr_get_attr()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223757" id="1223757" title="VUL-0: CVE-2024-27000: kernel: serial: mxs-auart: WARNING in uart_handle_cts_change" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223759" id="1223759" title="VUL-0: CVE-2024-27002: kernel: clk: mediatek: deadlock in mt8183-mfgcfg" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223760" id="1223760" title="VUL-0: CVE-2024-27048: kernel: wifi: brcm80211: handle pmk_op allocation failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223761" id="1223761" title="VUL-0: CVE-2024-27003: kernel: clk: Get runtime PM before walking tree for clk_summary" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223762" id="1223762" title="VUL-0: CVE-2024-27004: kernel: clk: deadlock in clk PM" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223764" id="1223764" title="VUL-0: CVE-2023-52647: kernel: media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223765" id="1223765" title="VUL-0: CVE-2023-52648: kernel: drm/vmwgfx: Unmap the surface before resetting it on a plane state" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223768" id="1223768" title="VUL-0: CVE-2023-52649: kernel: drm/vkms: Avoid reading beyond LUT array" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223769" id="1223769" title="VUL-0: CVE-2024-27051: kernel: cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223770" id="1223770" title="VUL-0: CVE-2023-52650: kernel: drm/tegra: dsi: Add missing check for of_find_device_by_node" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223774" id="1223774" title="VUL-0: CVE-2024-27022: kernel: fork: defer linking file vma until vma is fully initialized" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223776" id="1223776" title="VUL-0: CVE-2024-27023: kernel: md: fix missing release of 'active_io' for flush" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223778" id="1223778" title="VUL-0: CVE-2024-27025: kernel: nbd: null check for nla_nest_start" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223779" id="1223779" title="VUL-0: CVE-2024-27076: kernel: media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223780" id="1223780" title="VUL-0: CVE-2024-27077: kernel: media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223781" id="1223781" title="VUL-0: CVE-2024-27078: kernel: media: v4l2-tpg: fix some memleaks in tpg_alloc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223782" id="1223782" title="VUL-0: CVE-2024-27080: kernel: btrfs: fix race when detecting delalloc ranges during fiemap" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223787" id="1223787" title="VUL-0: CVE-2024-27027: kernel: dpll: fix dpll_xa_ref_*_del() for multiple registrations" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223788" id="1223788" title="VUL-0: CVE-2024-27028: kernel: spi: spi-mt65xx: fix NULL pointer access in interrupt handler" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223789" id="1223789" title="VUL-0: CVE-2024-27029: kernel: drm/amdgpu: fix mmhub client id out-of-bounds access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223790" id="1223790" title="VUL-0: CVE-2024-27030: kernel: octeontx2-af: use separate handlers for interrupts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223802" id="1223802" title="VUL-0: CVE-2024-27008: kernel: drm: nv04: Fix out of bounds access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223804" id="1223804" title="VUL-0: CVE-2024-27012: kernel: netfilter: nf_tables: restore set elements when delete set fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223805" id="1223805" title="VUL-0: CVE-2024-27031: kernel: NFS: deadlock in nfs_netfs_issue_read" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223806" id="1223806" title="VUL-0: CVE-2024-27015: kernel: netfilter: flowtable: incorrect pppoe tuple" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223807" id="1223807" title="VUL-0: CVE-2024-27016: kernel: netfilter: flowtable: validate pppoe header" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223808" id="1223808" title="VUL-0: CVE-2024-27068: kernel: thermal/drivers/mediatek/lvts_thermal: Fix a memory leak in an error handling path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223810" id="1223810" title="VUL-0: CVE-2024-27036: kernel: cifs: writeback data corruption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223813" id="1223813" title="VUL-0: CVE-2024-27019: kernel: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223815" id="1223815" title="VUL-0: CVE-2024-27020: kernel: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223816" id="1223816" title="VUL-0: CVE-2024-27038: kernel: clk: clk_core_get NULL dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223819" id="1223819" title="VUL-0: CVE-2024-27054: kernel: s390/dasd: fix double module refcount decrement" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223821" id="1223821" title="VUL-0: CVE-2024-27039: kernel: clk: hisilicon: hi3559a: erroneous devm_kfree()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223822" id="1223822" title="VUL-0: CVE-2024-27056: kernel: wifi: iwlwifi: mvm: ensure offloading TID queue exists" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223823" id="1223823" title="VUL-0: CVE-2024-27042: kernel: drm/amdgpu: potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223824" id="1223824" title="VUL-0: CVE-2024-27043: kernel: media: media: dvbdev: use-after-free in different places" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223826" id="1223826" title="VUL-0: CVE-2024-27045: kernel: drm/amd/display: potential buffer overflow in 'dp_dsc_clock_en_read()'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223827" id="1223827" title="VUL-0: CVE-2024-27046: kernel: nfp: flower: NULL pointer dereference with acti_netdevs allocation failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223828" id="1223828" title="VUL-0: CVE-2024-27047: kernel: net: phy: NULL pointer 0 in phy_get_internal_delay" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223829" id="1223829" title="VUL-0: CVE-2024-27052: kernel: wifi: rtl8xxxu: use-after-free when the driver is stopped" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223831" id="1223831" title="VUL-0: CVE-2024-27057: kernel: ASoC: SOF: ipc4-pcm: Workaround for crashed firmware on system suspend" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223834" id="1223834" title="VUL-0: CVE-2024-27062: kernel: nouveau: lock the client object tree." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223836" id="1223836" title="VUL-0: CVE-2024-27065: kernel: netfilter: nf_tables: do not compare internal table flags on updates" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223837" id="1223837" title="VUL-0: CVE-2024-27072: kernel: media: usbtv: Remove useless locks in usbtv_video_free()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223838" id="1223838" title="Nonfunctional brightness keys on Apple Macbook 5.1 (mcp79,nouveau)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223842" id="1223842" title="VUL-0: CVE-2024-27075: kernel: media: dvb-frontends: avoid stack overflow warnings with clang" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223843" id="1223843" title="VUL-0: CVE-2024-27073: kernel: media: ttpci: fix two memleaks in budget_av_attach" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223844" id="1223844" title="VUL-0: CVE-2024-27074: kernel: media: go7007: fix a memleak in go7007_load_encoder" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223847" id="1223847" title="VUL-0: CVE-2024-26919: kernel: usb: ulpi: Fix debugfs directory leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223863" id="1223863" title="Process accessing NFS enters Uninterruptible sleep state" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223869" id="1223869" title="s390/cio: Ensure the copied buf is NUL terminated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223870" id="1223870" title="s390/vdso: Add CFI for RA register to asm macro vdso_func" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223871" id="1223871" title="s390/mm: Fix clearing storage keys for huge pages" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223872" id="1223872" title="s390/mm: Fix storage key clearing for guest huge pages" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223874" id="1223874" title="s390/qeth: Fix kernel panic after setting hsuid" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223944" id="1223944" title="virtio: treat alloc_dax() -EOPNOTSUPP failure as non-fatal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223945" id="1223945" title="fuse: fix root lookup with nonzero generation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223946" id="1223946" title="fuse: don't unhash root" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223991" id="1223991" title="PVT:1060:XM:Splitter:SUSE:Traffic is not resuming over another path when Fatal errors been injected in one path till the threshold." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224049" id="1224049" title="[NetApp SLES15 SP6 Bug]: Long I/O outages seen occasionally during heavy I/O on NVMe/TCP TLS connections" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224076" id="1224076" title="VUL-0: CVE-2024-27393: kernel: xen: Memory leak due to missing cleanup function (XSA-457)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224096" id="1224096" title="VUL-0: CVE-2024-27396: kernel: net: gtp: Fix Use-After-Free in gtp_dellink" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224098" id="1224098" title="VUL-0: CVE-2024-27395: kernel: net: openvswitch: Fix Use-After-Free in ovs_ct_exit" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224099" id="1224099" title="VUL-0: CVE-2023-52654: kernel: io_uring/af_unix: disable sending io_uring over sockets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224137" id="1224137" title="IDPF needs a longer watchdog timeout" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224166" id="1224166" title="autofs restart and stuck perl script" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224174" id="1224174" title="VUL-0: CVE-2024-27398: kernel: Bluetooth: fix use-after-free bugs caused by sco_sock_timeout" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224177" id="1224177" title="VUL-0: CVE-2024-27399: kernel: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224180" id="1224180" title="VUL-0: CVE-2024-27400: kernel: drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224181" id="1224181" title="VUL-0: CVE-2024-27401: kernel: firewire: nosy: ensure user_length is taken into account when fetching packet contents" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224187" id="1224187" title="VUL-0: CVE-2023-52656: kernel: io_uring: drop any code related to SCM_RIGHTS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224331" id="1224331" title="Nvidia Grace: Fix double allocation in swiotlb_alloc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224348" id="1224348" title="SLES 15 SP6 - kernel: s390/cpum_cf: make crypto counters upward compatible" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224414" id="1224414" title="VUL-0: CVE-2024-27402: kernel: phonet/pep: fix racy skb_queue_empty() use" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224422" id="1224422" title="VUL-0: CVE-2024-27404: kernel: mptcp: fix data races on remote_id" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224423" id="1224423" title="VUL-0: CVE-2024-27405: kernel: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224429" id="1224429" title="VUL-0: CVE-2024-27407: kernel: fs/ntfs3: Fixed overflow check in mi_enum_attr()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224430" id="1224430" title="VUL-0: CVE-2024-27408: kernel: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224432" id="1224432" title="VUL-0: CVE-2024-27410: kernel: wifi: nl80211: reject iftype change with mesh ID change" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224433" id="1224433" title="VUL-0: CVE-2024-27411: kernel: drm/nouveau: keep DMA buffers required for suspend/resume" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224437" id="1224437" title="VUL-0: CVE-2024-27412: kernel: power: supply: bq27xxx-i2c: Do not free non existing IRQ" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224438" id="1224438" title="VUL-0: CVE-2024-27413: kernel: efi/capsule-loader: fix incorrect allocation size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224439" id="1224439" title="VUL-0: CVE-2024-27414: kernel: rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224442" id="1224442" title="VUL-0: CVE-2023-52659: kernel: x86/mm: ensure input to pfn_to_kaddr() is treated as a 64-bit type" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224443" id="1224443" title="VUL-0: CVE-2023-52660: kernel: media: rkisp1: fix IRQ handling due to shared interrupts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224445" id="1224445" title="VUL-0: CVE-2023-52661: kernel: drm/tegra: rgb: fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224449" id="1224449" title="VUL-0: CVE-2023-52662: kernel: drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224477" id="1224477" title="VUL-0: CVE-2024-35921: kernel: media: mediatek: vcodec: Fix oops when HEVC init fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224479" id="1224479" title="VUL-0: CVE-2024-35915: kernel: nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224480" id="1224480" title="VUL-0: CVE-2024-35916: kernel: dma-buf: Fix NULL pointer dereference in sanitycheck()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224481" id="1224481" title="VUL-0: CVE-2024-35917: kernel: s390/bpf: Fix bpf_plt pointer arithmetic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224482" id="1224482" title="VUL-0: CVE-2024-35914: kernel: nfsd: Fix error cleanup path in nfsd_rename()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224486" id="1224486" title="VUL-0: CVE-2024-35911: kernel: ice: fix memory corruption bug with suspend and rebuild" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224487" id="1224487" title="VUL-0: CVE-2024-35912: kernel: wifi: iwlwifi: mvm: rfi: fix potential response leaks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224488" id="1224488" title="VUL-0: CVE-2024-35905: kernel: bpf: Protect against int overflow for stack access size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224490" id="1224490" title="VUL-0: CVE-2024-35908: kernel: tls: get psock ref after taking rxlock to avoid leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224491" id="1224491" title="VUL-0: CVE-2024-35909: kernel: net: wwan: t7xx: Split 64bit accesses to fix alignment issues" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224492" id="1224492" title="VUL-0: CVE-2024-35907: kernel: mlxbf_gige: call request_irq() after NAPI initialized" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224493" id="1224493" title="VUL-0: CVE-2024-35903: kernel: x86/bpf: Fix IP after emitting call depth accounting" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224494" id="1224494" title="VUL-0: CVE-2024-35904: kernel: selinux: avoid dereference of garbage after mount failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224495" id="1224495" title="VUL-0: CVE-2024-35901: kernel: net: mana: Fix Rx DMA datasize and skb_over_panic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224497" id="1224497" title="VUL-0: CVE-2024-35900: kernel: netfilter: nf_tables: reject new basechain after table flag update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224498" id="1224498" title="VUL-0: CVE-2024-35898: kernel: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224499" id="1224499" title="VUL-0: CVE-2024-35899: kernel: netfilter: nf_tables: flush pending destroy work before exit_net release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224500" id="1224500" title="VUL-0: CVE-2024-35837: kernel: net: mvpp2: clear BM pool before initialization" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224501" id="1224501" title="VUL-0: CVE-2023-52687: kernel: crypto: safexcel - Add error handling for dma_map_sg() calls" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224502" id="1224502" title="VUL-0: CVE-2024-35852: kernel: mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224504" id="1224504" title="VUL-0: CVE-2023-52675: kernel: powerpc/imc-pmu: Add a null pointer check in update_events_in_group()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224505" id="1224505" title="VUL-0: CVE-2023-52681: kernel: efivarfs: Free s_fs_info on unmount" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224506" id="1224506" title="VUL-0: CVE-2023-52695: kernel: drm/amd/display: Check writeback connectors in create_validate_stream_for_sink" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224507" id="1224507" title="VUL-0: CVE-2024-35800: kernel: efi: fix panic in kdump kernel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224508" id="1224508" title="VUL-0: CVE-2023-52679: kernel: of: Fix double free in of_parse_phandle_with_args_map" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224509" id="1224509" title="VUL-0: CVE-2024-35851: kernel: Bluetooth: qca: fix NULL-deref on non-serdev suspend" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224511" id="1224511" title="VUL-0: CVE-2024-35895: kernel: bpf, sockmap: Prevent lock inversion deadlock in map delete elem" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224512" id="1224512" title="VUL-0: CVE-2024-35893: kernel: net/sched: act_skbmod: prevent kernel-infoleak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224513" id="1224513" title="VUL-0: CVE-2024-35891: kernel: net: phy: micrel: Fix potential null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224515" id="1224515" title="VUL-0: CVE-2024-35892: kernel: net/sched: fix lockdep splat in qdisc_tree_reduce_backlog()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224516" id="1224516" title="VUL-0: CVE-2024-35890: kernel: gro: fix ownership transfer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224517" id="1224517" title="VUL-0: CVE-2024-35889: kernel: idpf: fix kernel panic on unknown packet types" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224519" id="1224519" title="VUL-0: CVE-2024-35885: kernel: mlxbf_gige: stop interface during shutdown" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224520" id="1224520" title="VUL-0: CVE-2024-35884: kernel: udp: do not accept non-tunnel GSO skbs landing in a tunnel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224521" id="1224521" title="VUL-0: CVE-2024-35883: kernel: spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxx_spi_probe" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224523" id="1224523" title="VUL-0: CVE-2024-35880: kernel: io_uring/kbuf: hold io_buffer_list reference over mmap" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224524" id="1224524" title="VUL-0: CVE-2024-35879: kernel: of: dynamic: Synchronize of_changeset_destroy() with the devlink removals" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224525" id="1224525" title="VUL-0: CVE-2024-35877: kernel: x86/mm/pat: fix VM_PAT handling in COW mappings" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224526" id="1224526" title="VUL-0: CVE-2024-35937: kernel: wifi: cfg80211: check A-MSDU format more carefully" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224530" id="1224530" title="VUL-0: CVE-2024-35872: kernel: mm/secretmem: fix GUP-fast succeeding on secretmem folios" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224531" id="1224531" title="VUL-0: CVE-2024-35860: kernel: bpf: support deferring bpf_link dealloc to after RCU grace period" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224534" id="1224534" title="PVT:1060:XM:Splitter:SUSE:Traffic is not resuming over another path after threshold reached upon switch injections on one path." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224537" id="1224537" title="VUL-0: CVE-2024-35940: kernel: pstore/zone: Add a null pointer check to the psz_kmsg_read" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224539" id="1224539" title="VUL-0: CVE-2024-36005: kernel: netfilter: nf_tables: honor table dormant flag from netdev release event path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224540" id="1224540" title="VUL-0: CVE-2024-36008: kernel: ipv4: check for NULL idev in ip_route_use_hint()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224541" id="1224541" title="VUL-0: CVE-2024-36006: kernel: mlxsw: spectrum_acl_tcam: Fix incorrect list API usage" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224542" id="1224542" title="VUL-0: CVE-2024-36009: kernel: ax25: Fix netdev refcount issue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224543" id="1224543" title="VUL-0: CVE-2024-36007: kernel: mlxsw: spectrum_acl_tcam: Fix warning during rehash" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224544" id="1224544" title="VUL-0: CVE-2024-36003: kernel: ice: fix LAG and VF lock dependency in ice_reset_vf()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224545" id="1224545" title="VUL-0: CVE-2024-36004: kernel: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224546" id="1224546" title="VUL-0: CVE-2024-36002: kernel: dpll: fix dpll_pin_on_pin_register() for multiple parent pins" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224549" id="1224549" title="VUL-0: CVE-2024-35998: kernel: smb3: fix lock ordering potential deadlock in cifs_sync_mid_result" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224550" id="1224550" title="VUL-0: CVE-2024-35999: kernel: smb3: missing lock when picking channel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224552" id="1224552" title="VUL-0: CVE-2024-35997: kernel: HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224553" id="1224553" title="VUL-0: CVE-2024-35991: kernel: dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224555" id="1224555" title="VUL-0: CVE-2024-35992: kernel: phy: marvell: a3700-comphy: Fix out of bounds read" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224557" id="1224557" title="VUL-0: CVE-2024-35995: kernel: ACPI: CPPC: Use access_width over bit_width for system memory accesses" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224558" id="1224558" title="VUL-0: CVE-2024-35989: kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224559" id="1224559" title="VUL-0: CVE-2024-35990: kernel: dma: xilinx_dpdma: Fix locking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224562" id="1224562" title="VUL-0: CVE-2024-35986: kernel: phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224565" id="1224565" title="VUL-0: CVE-2024-35981: kernel: virtio_net: Do not send RSS key if it is not supported" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224566" id="1224566" title="VUL-0: CVE-2024-35982: kernel: batman-adv: Avoid infinite loop trying to resize local TT" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224567" id="1224567" title="VUL-0: CVE-2024-35984: kernel: i2c: smbus: fix NULL function pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224568" id="1224568" title="VUL-0: CVE-2024-35977: kernel: platform/chrome: cros_ec_uart: properly fix race condition" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224569" id="1224569" title="VUL-0: CVE-2024-35975: kernel: octeontx2-pf: Fix transmit scheduler resource leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224571" id="1224571" title="VUL-0: CVE-2024-35978: kernel: Bluetooth: Fix memory leak in hci_req_sync_complete()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224572" id="1224572" title="VUL-0: CVE-2024-35979: kernel: raid1: fix use-after-free for original bio in raid1_write_request()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224573" id="1224573" title="VUL-0: CVE-2024-35974: kernel: block: fix q-&gt;blkg_list corruption during disk rebind" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224575" id="1224575" title="VUL-0: CVE-2024-35976: kernel: xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224576" id="1224576" title="VUL-0: CVE-2024-35966: kernel: Bluetooth: RFCOMM: Fix not validating setsockopt user input" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224577" id="1224577" title="VUL-0: CVE-2024-35972: kernel: bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224578" id="1224578" title="VUL-0: CVE-2024-35971: kernel: net: ks8851: Handle softirqs at the end of IRQ thread to fix hang" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224579" id="1224579" title="VUL-0: CVE-2024-35965: kernel: Bluetooth: L2CAP: Fix not validating setsockopt user input" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224580" id="1224580" title="VUL-0: CVE-2024-35969: kernel: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224581" id="1224581" title="VUL-0: CVE-2024-35964: kernel: Bluetooth: ISO: Fix not validating setsockopt user input" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224582" id="1224582" title="VUL-0: CVE-2024-35963: kernel: Bluetooth: hci_sock: Fix not validating setsockopt user input" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224583" id="1224583" title="VUL-0: CVE-2024-35962: kernel: netfilter: complete validation of user input" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224584" id="1224584" title="VUL-0: CVE-2024-35970: kernel: af_unix: Clear stale u-&gt;oob_skb." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224585" id="1224585" title="VUL-0: CVE-2024-35961: kernel: net/mlx5: Register devlink first under devlink lock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224586" id="1224586" title="VUL-0: CVE-2024-35973: kernel: geneve: fix header validation in geneve[6]_xmit_skb" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224587" id="1224587" title="VUL-0: CVE-2024-35967: kernel: Bluetooth: SCO: Fix not validating setsockopt user input" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224588" id="1224588" title="VUL-0: CVE-2024-35960: kernel: net/mlx5: Properly link new fs rules into the tree" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224589" id="1224589" title="VUL-0: CVE-2024-35942: kernel: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224592" id="1224592" title="VUL-0: CVE-2024-35811: kernel: wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224596" id="1224596" title="VUL-0: CVE-2023-52697: kernel: ASoC: Intel: sof_sdw_rt_sdca_jack_common: ctx-&gt;headset_codec_dev = NULL" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224598" id="1224598" title="VUL-0: CVE-2023-52694: kernel: drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224600" id="1224600" title="VUL-0: CVE-2024-35850: kernel: Bluetooth: qca: fix NULL-deref on non-serdev setup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224601" id="1224601" title="VUL-0: CVE-2023-52696: kernel: powerpc/powernv: Add a null pointer check in opal_powercap_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224602" id="1224602" title="VUL-0: CVE-2024-35814: kernel: swiotlb: Fix double-allocation of slots due to broken alignment handling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224603" id="1224603" title="VUL-0: CVE-2023-52667: kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224604" id="1224604" title="VUL-0: CVE-2024-35853: kernel: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224605" id="1224605" title="VUL-0: CVE-2024-35835: kernel: net/mlx5e: fix a double-free in arfs_create_groups" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224606" id="1224606" title="VUL-0: CVE-2024-35827: kernel: io_uring/net: fix overflow check in io_recvmsg_mshot_prep()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224607" id="1224607" title="VUL-0: CVE-2023-52691: kernel: drm/amd/pm: fix a double-free in si_dpm_init" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224608" id="1224608" title="VUL-0: CVE-2023-52680: kernel: ALSA: scarlett2: Add missing error checks to *_ctl_get()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224609" id="1224609" title="VUL-0: CVE-2024-35824: kernel: misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224611" id="1224611" title="VUL-0: CVE-2023-52690: kernel: powerpc/powernv: Add a null pointer check to scom_debug_init_one()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224612" id="1224612" title="VUL-0: CVE-2024-35848: kernel: eeprom: at24: fix memory corruption race condition" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224613" id="1224613" title="VUL-0: CVE-2024-35838: kernel: wifi: mac80211: fix potential sta-link leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224614" id="1224614" title="VUL-0: CVE-2023-52672: kernel: pipe: wakeup wr_wait after setting max_usage" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224615" id="1224615" title="VUL-0: CVE-2024-35796: kernel: net: ll_temac: platform_get_resource replaced by wrong function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224617" id="1224617" title="VUL-0: CVE-2023-52678: kernel: drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224618" id="1224618" title="VUL-0: CVE-2024-35813: kernel: mmc: core: Avoid negative index with array access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224619" id="1224619" title="VUL-0: CVE-2024-35857: kernel: icmp: prevent possible NULL dereferences from icmp_build_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224620" id="1224620" title="VUL-0: CVE-2024-35834: kernel: xsk: recycle buffer in case Rx queue was full" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224621" id="1224621" title="VUL-0: CVE-2023-52698: kernel: calipso: fix memory leak in netlbl_calipso_add_pass()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224622" id="1224622" title="VUL-0: CVE-2024-35828: kernel: wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224623" id="1224623" title="VUL-0: CVE-2024-35808: kernel: md/dm-raid: don't call md_reap_sync_thread() directly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224624" id="1224624" title="VUL-0: REJECTED: CVE-2024-35812: kernel: usb: cdc-wdm: close race between read and workqueue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224626" id="1224626" title="VUL-0: CVE-2024-35810: kernel: drm/vmwgfx: Fix the lifetime of the bo cursor memory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224627" id="1224627" title="VUL-0: CVE-2023-52683: kernel: ACPI: LPIT: Avoid u32 multiplication overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224628" id="1224628" title="VUL-0: CVE-2023-52692: kernel: ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224629" id="1224629" title="VUL-0: CVE-2024-35821: kernel: ubifs: Set page uptodate in the correct place" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224630" id="1224630" title="VUL-0: CVE-2023-52663: kernel: ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224632" id="1224632" title="VUL-0: CVE-2024-35833: kernel: dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224633" id="1224633" title="VUL-0: CVE-2024-35836: kernel: dpll: fix pin dump crash for rebound module" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224634" id="1224634" title="VUL-0: CVE-2024-35795: kernel: drm/amdgpu: fix deadlock while reading mqd from debugfs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224636" id="1224636" title="VUL-0: CVE-2024-35854: kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224637" id="1224637" title="VUL-0: CVE-2023-52669: kernel: crypto: s390/aes - Fix buffer overread in CTR mode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224638" id="1224638" title="VUL-0: CVE-2024-35804: kernel: KVM: x86: Mark target gfn of emulated atomic instruction as dirty" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224639" id="1224639" title="VUL-0: CVE-2024-35945: kernel: net: phy: phy_device: Prevent nullptr exceptions on ISR" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224640" id="1224640" title="VUL-0: CVE-2024-35933: kernel: Bluetooth: btintel: Fix null ptr deref in btintel_read_version" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224641" id="1224641" title="VUL-0: CVE-2024-35934: kernel: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224643" id="1224643" title="VUL-0: CVE-2024-35938: kernel: wifi: ath11k: decrease MHI channel buffer length to 8KB" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224644" id="1224644" title="VUL-0: CVE-2024-35936: kernel: btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224645" id="1224645" title="VUL-0: CVE-2024-35935: kernel: btrfs: send: handle path ref underflow in header iterate_inode_ref()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224646" id="1224646" title="VUL-0: CVE-2024-35946: kernel: wifi: rtw89: fix null pointer access when abort scan" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224647" id="1224647" title="VUL-0: CVE-2024-35947: kernel: dyndbg: fix old BUG_ON in &gt;control parser" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224648" id="1224648" title="VUL-0: CVE-2024-35944: kernel: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224649" id="1224649" title="VUL-0: CVE-2024-35943: kernel: pmdomain: ti: Add a null pointer check to the omap_prm_domain_init" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224650" id="1224650" title="VUL-0: CVE-2024-35932: kernel: drm/vc4: don't check if plane-&gt;state-&gt;fb == state-&gt;fb" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224651" id="1224651" title="VUL-0: CVE-2024-35930: kernel: scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224652" id="1224652" title="VUL-0: CVE-2024-35931: kernel: drm/amdgpu: Skip do PCI error slot reset during RAS recovery" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224653" id="1224653" title="VUL-0: CVE-2024-35928: kernel: drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224654" id="1224654" title="VUL-0: CVE-2024-35927: kernel: drm: Check output polling initialized before disabling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224655" id="1224655" title="VUL-0: CVE-2024-35926: kernel: crypto: iaa - Fix async_disable descriptor leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224657" id="1224657" title="VUL-0: CVE-2024-35924: kernel: usb: typec: ucsi: Limit read size on v1.2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224659" id="1224659" title="VUL-0: CVE-2023-52699: kernel: sysv: don't call sb_bread() with pointers_lock held" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224660" id="1224660" title="VUL-0: CVE-2024-35922: kernel: fbmon: prevent division by zero in fb_videomode_from_videomode()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224661" id="1224661" title="VUL-0: CVE-2024-35925: kernel: block: prevent division by zero in blk_rq_stat_sum()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224662" id="1224662" title="VUL-0: CVE-2024-35896: kernel: netfilter: validate user input for expected length" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224663" id="1224663" title="VUL-0: CVE-2024-35887: kernel: ax25: fix use-after-free bugs caused by ax25_ds_del_timer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224664" id="1224664" title="VUL-0: CVE-2024-35867: kernel: smb: client: fix potential UAF in cifs_stats_proc_show()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224665" id="1224665" title="VUL-0: CVE-2024-35875: kernel: x86/coco: Require seeding RNG with RDRAND on CoCo systems" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224666" id="1224666" title="VUL-0: CVE-2024-35959: kernel: net/mlx5e: Fix mlx5e_priv_init() cleanup flow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224667" id="1224667" title="VUL-0: CVE-2024-35866: kernel: smb: client: fix potential UAF in cifs_dump_full_key()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224668" id="1224668" title="VUL-0: CVE-2024-35865: kernel: smb: client: fix potential UAF in smb2_is_valid_oplock_break()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224670" id="1224670" title="VUL-0: CVE-2024-35886: kernel: ipv6: Fix infinite recursion in fib6_dump_done()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224671" id="1224671" title="VUL-0: CVE-2024-35878: kernel: of: module: prevent NULL pointer dereference in vsnprintf()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224672" id="1224672" title="VUL-0: CVE-2024-35870: kernel: smb: client: fix UAF in smb2_reconnect_server()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224673" id="1224673" title="VUL-0: CVE-2024-35957: kernel: iommu/vt-d: Fix WARN_ON in iommu probe path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224675" id="1224675" title="VUL-0: CVE-2024-35954: kernel: scsi: sg: Avoid sg device teardown race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224676" id="1224676" title="VUL-0: CVE-2024-35955: kernel: kprobes: Fix possible use-after-free issue on kprobe registration" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224677" id="1224677" title="VUL-0: CVE-2024-35958: kernel: net: ena: Fix incorrect descriptor free behavior" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224678" id="1224678" title="VUL-0: CVE-2024-35868: kernel: smb: client: fix potential UAF in cifs_stats_proc_write()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224679" id="1224679" title="VUL-0: CVE-2024-35869: kernel: smb: client: guarantee refcounted children from parent session" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224680" id="1224680" title="VUL-0: CVE-2024-35830: kernel: media: tc358743: register v4l2 async device only after successful setup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224681" id="1224681" title="VUL-0: CVE-2024-35825: kernel: usb: gadget: ncm: Fix handling of zero block length packets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224682" id="1224682" title="VUL-0: CVE-2023-52686: kernel: powerpc/powernv: Add a null pointer check in opal_event_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224683" id="1224683" title="VUL-0: CVE-2024-35819: kernel: soc: fsl: qbman: Use raw spinlock for cgr_lock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224685" id="1224685" title="VUL-0: CVE-2024-35815: kernel: fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224686" id="1224686" title="VUL-0: CVE-2023-52693: kernel: ACPI: video: check for error while searching for backlight device parent" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224687" id="1224687" title="VUL-0: CVE-2024-35841: kernel: net: tls, fix WARNIING in __sk_msg_free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224688" id="1224688" title="VUL-0: CVE-2024-35842: kernel: ASoC: mediatek: sof-common: Add NULL check for normal_link string" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224692" id="1224692" title="VUL-0: CVE-2024-35823: kernel: vt: fix unicode buffer corruption when deleting characters" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224696" id="1224696" title="VUL-0: CVE-2023-52670: kernel: rpmsg: virtio: Free driver_override when rpmsg_remove()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224697" id="1224697" title="VUL-0: CVE-2024-35847: kernel: irqchip/gic-v3-its: Prevent double free on error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224698" id="1224698" title="VUL-0: CVE-2024-35831: kernel: io_uring: Fix release of pinned pages when __io_uaddr_map fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224699" id="1224699" title="VUL-0: CVE-2024-35806: kernel: soc: fsl: qbman: Always disable interrupts when taking cgr_lock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224701" id="1224701" title="VUL-0: CVE-2024-35951: kernel: drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224703" id="1224703" title="VUL-0: CVE-2024-35950: kernel: drm/client: Fully protect modes[] with dev-&gt;mode_config.mutex" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224704" id="1224704" title="VUL-0: CVE-2024-35953: kernel: accel/ivpu: Fix deadlock in context_xa" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224705" id="1224705" title="VUL-0: CVE-2024-35952: kernel: drm/ast: Fix soft lockup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224706" id="1224706" title="VUL-0: CVE-2024-35794: kernel: dm-raid: really frozen sync_thread during suspend" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224707" id="1224707" title="VUL-0: CVE-2024-35829: kernel: drm/lima: fix a memleak in lima_heap_alloc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224709" id="1224709" title="VUL-0: CVE-2024-35788: kernel: drm/amd/display: Fix bounds check for dcn35 DcfClocks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224710" id="1224710" title="VUL-0: CVE-2024-27434: kernel: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224712" id="1224712" title="VUL-0: CVE-2024-35790: kernel: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224714" id="1224714" title="VUL-0: CVE-2024-35786: kernel: drm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224716" id="1224716" title="VUL-0: CVE-2024-27432: kernel: net: ethernet: mtk_eth_soc: fix PPE hanging issue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224717" id="1224717" title="VUL-0: CVE-2024-27435: kernel: nvme: fix reconnection fail due to reserved tag allocation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224718" id="1224718" title="VUL-0: CVE-2024-27431: kernel: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224719" id="1224719" title="VUL-0: CVE-2023-52658: kernel: Revert &quot;net/mlx5: Block entering switchdev mode with ns inconsistency&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224720" id="1224720" title="VUL-0: CVE-2024-27418: kernel: net: mctp: take ownership of skb in mctp_local_output" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224721" id="1224721" title="VUL-0: CVE-2024-27417: kernel: ipv6: fix potential &quot;struct net&quot; leak in inet6_rtm_getaddr()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224722" id="1224722" title="VUL-0: CVE-2023-52657: kernel: Revert &quot;drm/amd/pm: resolve reboot exception for si oland&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224723" id="1224723" title="VUL-0: CVE-2024-27416: kernel: Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224725" id="1224725" title="VUL-0: CVE-2024-35791: kernel: KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224727" id="1224727" title="VUL-0: CVE-2023-52674: kernel: ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224728" id="1224728" title="VUL-0: CVE-2023-52685: kernel: pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224729" id="1224729" title="VUL-0: CVE-2023-52671: kernel: drm/amd/display: Fix hang/underflow when transitioning to ODM4:1" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224730" id="1224730" title="VUL-0: CVE-2023-52676: kernel: bpf: Guard stack limits against 32bit overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224731" id="1224731" title="VUL-0: CVE-2024-35845: kernel: wifi: iwlwifi: dbg-tlv: ensure NUL termination" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224732" id="1224732" title="VUL-0: CVE-2024-35801: kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224733" id="1224733" title="VUL-0: CVE-2024-35849: kernel: btrfs: fix information leak in btrfs_ioctl_logical_to_ino()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224735" id="1224735" title="VUL-0: CVE-2024-35807: kernel: ext4: fix corruption during on-line resize" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224736" id="1224736" title="VUL-0: CVE-2024-35817: kernel: drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224738" id="1224738" title="VUL-0: CVE-2024-35809: kernel: PCI/PM: Drain runtime-idle callbacks before driver removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224739" id="1224739" title="VUL-0: CVE-2024-35822: kernel: usb: udc: remove warning when queue disabled ep" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224740" id="1224740" title="VUL-0: CVE-2024-35799: kernel: drm/amd/display: Prevent crash when disable stream" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224741" id="1224741" title="VUL-0: CVE-2023-52673: kernel: drm/amd/display: Fix a debugfs null pointer error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224742" id="1224742" title="VUL-0: CVE-2024-35803: kernel: x86/efistub: Call mixed mode boot services on the firmware's stack" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224743" id="1224743" title="VUL-0: CVE-2024-35805: kernel: dm snapshot: fix lockup in dm_exception_table_exit" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224747" id="1224747" title="VUL-0: CVE-2023-52664: kernel: net: atlantic: eliminate double free in error handling logic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224749" id="1224749" title="VUL-0: CVE-2024-35789: kernel: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224751" id="1224751" title="VUL-0: CVE-2024-35843: kernel: iommu/vt-d: Use device rbtree in iopf reporting path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224763" id="1224763" title="VUL-0: CVE-2024-35863: kernel: smb: client: fix potential UAF in is_valid_oplock_break()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224764" id="1224764" title="VUL-0: CVE-2024-35862: kernel: smb: client: fix potential UAF in smb2_is_network_name_deleted()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224765" id="1224765" title="VUL-0: CVE-2024-35864: kernel: smb: client: fix potential UAF in smb2_is_valid_lease_break()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224766" id="1224766" title="VUL-0: CVE-2024-35861: kernel: smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224767" id="1224767" title="iommu/vt-d: Allocate DMAR fault interrupts locally" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224790" id="1224790" title="KVM: s390: Check kvm pointer when testing KVM_CAP_S390_HPAGE_1M" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224792" id="1224792" title="s390/bpf: Emit a barrier for BPF_FETCH instructions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224793" id="1224793" title="s390/cio: fix tracepoint subchannel type field" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224803" id="1224803" title="VUL-0: CVE-2024-27436: kernel: ALSA: usb-audio: Stop parsing channels bits when all channels are found." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224804" id="1224804" title="VUL-0: CVE-2024-35784: kernel: btrfs: fix deadlock with fiemap and extent locking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224866" id="1224866" title="ceph: redirty page before returning AOP_WRITEPAGE_ACTIVATE" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224928" id="1224928" title="VUL-0: CVE-2023-52840: kernel: Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224930" id="1224930" title="VUL-0: CVE-2023-52796: kernel: ipvlan: add ipvlan_route_v6_outbound() helper" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224932" id="1224932" title="VUL-0: CVE-2023-52856: kernel: drm/bridge: lt8912b: Fix crash on bridge detach" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224933" id="1224933" title="VUL-0: CVE-2023-52780: kernel: net: mvneta: fix calls to page_pool_get_stats" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224935" id="1224935" title="VUL-0: CVE-2023-52837: kernel: nbd: fix uaf in nbd_open" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224936" id="1224936" title="VUL-0: CVE-2023-52860: kernel: drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224937" id="1224937" title="VUL-0: CVE-2023-52870: kernel: clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224939" id="1224939" title="VUL-0: CVE-2023-52786: kernel: ext4: fix racy may inline data check in dio write" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224941" id="1224941" title="VUL-0: CVE-2023-52861: kernel: drm: bridge: it66121: Fix invalid connector dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224944" id="1224944" title="VUL-0: CVE-2023-52877: kernel: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224946" id="1224946" title="VUL-0: CVE-2023-52784: kernel: bonding: stop the device in bond_setup_by_slave()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224947" id="1224947" title="VUL-0: CVE-2023-52798: kernel: wifi: ath11k: fix dfs radar event locking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224949" id="1224949" title="VUL-0: CVE-2023-52849: kernel: cxl/mem: Fix shutdown order" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224951" id="1224951" title="VUL-0: CVE-2023-52843: kernel: llc: verify mac len before reading mac header" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224988" id="1224988" title="VUL-0: CVE-2023-52853: kernel: hid: cp2112: Fix duplicate workqueue initialization" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224989" id="1224989" title="VUL-0: CVE-2023-52772: kernel: af_unix: fix use-after-free in unix_stream_read_actor()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224992" id="1224992" title="VUL-0: CVE-2023-52777: kernel: wifi: ath11k: fix gtk offload status event locking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224998" id="1224998" title="VUL-0: CVE-2023-52767: kernel: tls: fix NULL deref on tls_sw_splice_eof() with empty record" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225000" id="1225000" title="VUL-0: CVE-2023-52878: kernel: can: dev: can_put_echo_skb(): don't crash kernel if can_priv:echo_skb is accessed out of bounds" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225001" id="1225001" title="VUL-0: CVE-2023-52769: kernel: wifi: ath12k: fix htt mlo-offset event locking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225004" id="1225004" title="VUL-0: CVE-2023-52768: kernel: wifi: wilc1000: use vmm_table as array in wilc struct" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225006" id="1225006" title="VUL-0: CVE-2023-52801: kernel: iommufd: Fix missing update of domains_itree after splitting iopt_area" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225007" id="1225007" title="VUL-0: CVE-2023-52771: kernel: cxl/port: Fix delete_endpoint() vs parent unregistration race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225008" id="1225008" title="VUL-0: CVE-2023-52803: kernel: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225009" id="1225009" title="VUL-0: CVE-2023-52867: kernel: drm/radeon: possible buffer overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225014" id="1225014" title="VUL-0: CVE-2023-52850: kernel: media: hantro: Check whether reset op is defined before use" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225015" id="1225015" title="VUL-0: CVE-2023-52862: kernel: drm/amd/display: Fix null pointer dereference in error message" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225022" id="1225022" title="VUL-0: CVE-2023-52821: kernel: drm/panel: fix a possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225025" id="1225025" title="VUL-0: CVE-2023-52842: kernel: virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225028" id="1225028" title="VUL-0: CVE-2023-52794: kernel: thermal: intel: powerclamp: fix mismatch in get function for max_idle" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225029" id="1225029" title="VUL-0: CVE-2023-52765: kernel: mfd: qcom-spmi-pmic: Fix revid implementation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225031" id="1225031" title="VUL-0: CVE-2023-52838: kernel: fbdev: imsttfb: fix a resource leak in probe" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225036" id="1225036" title="VUL-0: CVE-2023-52876: kernel: clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225041" id="1225041" title="VUL-0: CVE-2023-52773: kernel: drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225044" id="1225044" title="VUL-0: CVE-2023-52868: kernel: thermal: core: prevent potential string overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225049" id="1225049" title="VUL-0: CVE-2023-52874: kernel: x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225050" id="1225050" title="VUL-0: CVE-2023-52869: kernel: pstore/platform: Add check for kstrdup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225053" id="1225053" title="sched/topology: Optimize topology_span_sane()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225076" id="1225076" title="VUL-0: CVE-2023-52825: kernel: drm/amdkfd: Fix a race condition of vram buffer unref in svm code" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225077" id="1225077" title="VUL-0: CVE-2023-52826: kernel: drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225078" id="1225078" title="VUL-0: CVE-2023-52827: kernel: wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225081" id="1225081" title="VUL-0: CVE-2023-52829: kernel: wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225085" id="1225085" title="VUL-0: CVE-2023-52795: kernel: vhost-vdpa: fix use after free in vhost_vdpa_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225086" id="1225086" title="VUL-0: CVE-2023-52865: kernel: clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225088" id="1225088" title="VUL-0: CVE-2023-52775: kernel: net/smc: avoid data corruption caused by decline" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225090" id="1225090" title="VUL-0: CVE-2023-52776: kernel: wifi: ath12k: fix dfs-radar and temperature event locking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225092" id="1225092" title="VUL-0: CVE-2023-52781: kernel: usb: config: fix iteration issue in 'usb_get_bos_descriptor()'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225096" id="1225096" title="VUL-0: CVE-2023-52875: kernel: clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225097" id="1225097" title="VUL-0: CVE-2023-52807: kernel: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225098" id="1225098" title="VUL-0: CVE-2023-52846: kernel: hsr: Prevent use after free in prp_create_tagged_frame()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225101" id="1225101" title="VUL-0: CVE-2023-52879: kernel: tracing: Have trace_event_file have ref counters" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225103" id="1225103" title="VUL-0: CVE-2023-52782: kernel: net/mlx5e: Track xmit submission to PTP WQ after populating metadata map" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225104" id="1225104" title="VUL-0: CVE-2023-52783: kernel: net: wangxun: fix kernel panic due to null pointer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225105" id="1225105" title="VUL-0: CVE-2023-52787: kernel: blk-mq: make sure active queue usage is held for bio_integrity_prep()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225106" id="1225106" title="VUL-0: CVE-2023-52788: kernel: i915/perf: Fix NULL deref bugs with drm_dbg() calls" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225108" id="1225108" title="VUL-0: CVE-2023-52791: kernel: i2c: core: Run atomic i2c xfer when !preemptible" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225120" id="1225120" title="VUL-0: CVE-2023-52866: kernel: HID: uclogic: Fix user-memory-access bug in uclogic_params_ugee_v2_init_event_hooks()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225132" id="1225132" title="VUL-0: CVE-2023-52864: kernel: platform/x86: wmi: Fix opening of char device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225133" id="1225133" title="s390/cpacf: Split and rework cpacf query functions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225134" id="1225134" title="s390/ipl: Fix incorrect initialization of nvme dump block" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225136" id="1225136" title="s390/ipl: Fix incorrect initialization of len fields in nvme reipl  block" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225172" id="1225172" title="[TRACKERBUG] SLE15-SP6 backports for cifs.ko" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225180" id="1225180" title="VUL-0: CVE-2023-52789: kernel: tty: vcc: Add check for kstrdup() in vcc_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225272" id="1225272" title="soft lockup on non-responding NFS server after blocking NFS port [ref:_00D1igLOd._500TrA9Uu1:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225300" id="1225300" title="[MI300A] Bug Fix in AMD Address translation support for MI300A" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225391" id="1225391" title="VUL-0: CVE-2021-47432: kernel: lib/generic-radix-tree.c: Don't overflow in peek()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225472" id="1225472" title="VUL-0: CVE-2023-52799: kernel: jfs: fix array-index-out-of-bounds in dbFindLeaf" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225475" id="1225475" title="VUL-0: CVE-2023-52735: kernel: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225476" id="1225476" title="VUL-0: CVE-2023-52749: kernel: spi: Fix null dereference on suspend" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225477" id="1225477" title="VUL-0: CVE-2023-52792: kernel: cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225478" id="1225478" title="VUL-0: CVE-2023-52753: kernel: drm/amd/display: Avoid NULL dereference of timing generator" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225485" id="1225485" title="VUL-0: CVE-2023-52750: kernel: arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225489" id="1225489" title="VUL-0: CVE-2023-52751: kernel: smb: client: fix use-after-free in smb2_query_info_compound()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225490" id="1225490" title="VUL-0: CVE-2023-52754: kernel: media: imon: fix access to invalid resource for the second interface" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225502" id="1225502" title="VUL-0: CVE-2024-36012: kernel: Bluetooth: msft: fix slab-use-after-free in msft_do_close()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225527" id="1225527" title="VUL-0: CVE-2023-52813: kernel: crypto: pcrypt - fix hungtask for PADATA_RESET" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225529" id="1225529" title="VUL-0: CVE-2023-52816: kernel: drm/amdkfd: fix shift out-of-bounds issue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225530" id="1225530" title="VUL-0: CVE-2023-52818: kernel: drm/amd: fix UBSAN array-index-out-of-bounds for SMU7" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225532" id="1225532" title="VUL-0: CVE-2023-52819: kernel: drm/amd: fix UBSAN array-index-out-of-bounds for Polaris and Tonga" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225534" id="1225534" title="VUL-0: CVE-2023-52871: kernel: soc: qcom: llcc: handle a second device without data corruption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225548" id="1225548" title="VUL-0: CVE-2023-52757: kernel: smb: client: fix potential deadlock when releasing mids" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225550" id="1225550" title="VUL-0: CVE-2023-52804: kernel: fs/jfs: Add validity check for db_maxag and db_agpref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225553" id="1225553" title="VUL-0: CVE-2023-52805: kernel: jfs: fix array-index-out-of-bounds in diAlloc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225554" id="1225554" title="VUL-0: CVE-2023-52806: kernel: ALSA: hda: Fix possible null-ptr-deref when assigning a stream" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225555" id="1225555" title="VUL-0: CVE-2023-52808: kernel: scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225556" id="1225556" title="VUL-0: CVE-2023-52809: kernel: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225557" id="1225557" title="VUL-0: CVE-2023-52810: kernel: fs/jfs: Add check for negative db_l2nbperpage" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225559" id="1225559" title="VUL-0: CVE-2023-52811: kernel: scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225560" id="1225560" title="VUL-0: CVE-2023-52759: kernel: gfs2: ignore negated quota changes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225564" id="1225564" title="VUL-0: CVE-2023-52812: kernel: drm/amd: check num of link levels when update pcie param" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225565" id="1225565" title="VUL-0: CVE-2023-52814: kernel: drm/amdgpu: Fix potential null pointer derefernce" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225566" id="1225566" title="VUL-0: CVE-2023-52858: kernel: clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225568" id="1225568" title="VUL-0: CVE-2023-52815: kernel: drm/amdgpu/vkms: fix a possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225569" id="1225569" title="VUL-0: CVE-2023-52817: kernel: drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225570" id="1225570" title="VUL-0: CVE-2023-52763: kernel: i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225571" id="1225571" title="VUL-0: CVE-2023-52764: kernel: media: gspca: cpia1: shift-out-of-bounds in set_flicker" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225572" id="1225572" title="VUL-0: CVE-2023-52774: kernel: s390/dasd: protect device queue against concurrent access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225573" id="1225573" title="VUL-0: CVE-2023-52762: kernel: virtio-blk: fix implicit overflow on virtio_max_dma_size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225577" id="1225577" title="VUL-0: CVE-2023-52832: kernel: wifi: mac80211: don't return unset power in ieee80211_get_tx_power()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225578" id="1225578" title="VUL-0: CVE-2024-36013: kernel: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225579" id="1225579" title="VUL-0: CVE-2024-36011: kernel: Bluetooth: HCI: Fix potential null-ptr-deref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225580" id="1225580" title="[PATCH] workqueue: Implement system-wide nr_active enforcement for  unbound workqueues" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225581" id="1225581" title="VUL-0: CVE-2023-52857: kernel: drm/mediatek: Fix coverity issue with unintentional integer overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225583" id="1225583" title="VUL-0: CVE-2023-52855: kernel: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225584" id="1225584" title="VUL-0: CVE-2023-52854: kernel: padata: Fix refcnt handling in padata_free_shell()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225585" id="1225585" title="VUL-0: CVE-2023-52845: kernel: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225586" id="1225586" title="VUL-0: CVE-2023-52863: kernel: hwmon: (axi-fan-control) Fix possible NULL pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225587" id="1225587" title="VUL-0: CVE-2023-52851: kernel: IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225588" id="1225588" title="VUL-0: CVE-2023-52847: kernel: media: bttv: fix use after free error due to btv-&gt;timeout timer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225589" id="1225589" title="VUL-0: CVE-2023-52873: kernel: clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225590" id="1225590" title="VUL-0: CVE-2023-52844: kernel: media: vidtv: psi: Add check for kstrdup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225591" id="1225591" title="VUL-0: CVE-2023-52872: kernel: tty: n_gsm: fix race condition in status line change on dead connections" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225592" id="1225592" title="VUL-0: CVE-2023-52841: kernel: media: vidtv: mux: Add check and kfree for kstrdup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225593" id="1225593" title="VUL-0: CVE-2024-36014: kernel: drm/arm/malidp: fix a possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225594" id="1225594" title="VUL-0: CVE-2024-36010: kernel: igb: Fix string truncation warnings in igb_set_fw_version" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225595" id="1225595" title="VUL-0: CVE-2023-52833: kernel: Bluetooth: btusb: add date-&gt;evt_skb is NULL check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225599" id="1225599" title="VUL-0: CVE-2023-52834: kernel: atl1c: work around the DMA RX overflow issue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225600" id="1225600" title="VUL-0: CVE-2023-38417: kernel-firmware: Improper input validation for some Intel(R) PROSet/Wireless WiFi software before version 23.20" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225601" id="1225601" title="VUL-0: CVE-2023-47210: kernel-firmware: Improper input validation for some Intel(R) PROSet/Wireless WiFi software for linux before version 23.20" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225602" id="1225602" title="VUL-0: CVE-2023-52835: kernel: perf/core: bail out early if the request AUX area is out of bound" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225605" id="1225605" title="blk-cgroup: fix list corruption from resetting io stat" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225607" id="1225607" title="[PATCH] printk: console flushing fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225609" id="1225609" title="VUL-0: CVE-2023-52836: kernel: locking/ww_mutex/test: fix potential workqueue corruption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225610" id="1225610" title="prctl: generalize PR_SET_MDWE support check to be per-arch" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225611" id="1225611" title="VUL-0: CVE-2023-52881: kernel: tcp: do not accept ACK of bytes we never sent" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225616" id="1225616" title="printk: Update @console_may_schedule in console_trylock_spinning()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225618" id="1225618" title="printk: Let no_printk() use _printk()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225640" id="1225640" title="VUL-0: CVE-2024-36015: kernel: ppdev: Add an error check in register_device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225642" id="1225642" title="VUL-0: CVE-2024-36016: kernel: tty: n_gsm: fix possible out-of-bounds in gsm0_receive()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225681" id="1225681" title="VUL-0: CVE-2024-36017: kernel: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225692" id="1225692" title="VUL-0: CVE-2023-52882: kernel: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225694" id="1225694" title="VUL-0: CVE-2024-36018: kernel: nouveau/uvmm: fix addr/range calcs for remap operations" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225695" id="1225695" title="VUL-0: CVE-2024-36019: kernel: regmap: maple: Fix cache corruption in regcache_maple_drop()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225696" id="1225696" title="A new warning on SLE15-SP6 KOTD (WARNING: CPU: 0 PID: 1087 at ../arch/x86/include/asm/kvm-x86-pmu-ops.h:15 kvm_pmu_ops_update+0x24e/0x2a0 [kvm])" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225698" id="1225698" title="VUL-0: CVE-2024-36020: kernel: i40e: fix vf may be used uninitialized in this function warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225699" id="1225699" title="VUL-0: CVE-2024-36021: kernel: net: hns3: fix kernel crash when devlink reload during pf initialization" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225702" id="1225702" title="VUL-0: CVE-2024-36024: kernel: drm/amd/display: Disable idle reallow as part of command/gpint execution" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225704" id="1225704" title="VUL-0: CVE-2024-36025: kernel: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225705" id="1225705" title="VUL-0: CVE-2024-36026: kernel: drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225708" id="1225708" title="VUL-0: CVE-2024-36029: kernel: mmc: sdhci-msm: pervent access to suspended controller" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225710" id="1225710" title="VUL-0: CVE-2024-36891: kernel: maple_tree: fix mas_empty_area_rev() null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225711" id="1225711" title="VUL-0: CVE-2024-36901: kernel: ipv6: prevent NULL dereference in ip6_output()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225712" id="1225712" title="VUL-0: CVE-2024-36030: kernel: octeontx2-af: fix the double free in rvu_npc_freemem()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225714" id="1225714" title="VUL-0: CVE-2024-36890: kernel: mm/slab: make __free(kfree) accept error pointers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225715" id="1225715" title="VUL-0: CVE-2024-36906: kernel: ARM: 9381/1: kasan: clear stale stack poison" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225717" id="1225717" title="VUL-0: CVE-2024-36910: kernel: uio_hv_generic: Don't free decrypted memory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225719" id="1225719" title="VUL-0: CVE-2024-36902: kernel: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225720" id="1225720" title="VUL-0: CVE-2024-36032: kernel: Bluetooth: qca: fix info leak when fetching fw build id" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225722" id="1225722" title="VUL-0: CVE-2024-36880: kernel: Bluetooth: qca: add missing firmware sanity checks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225723" id="1225723" title="VUL-0: CVE-2024-36882: kernel: mm: use memalloc_nofs_save() in page_cache_ra_order()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225726" id="1225726" title="VUL-0: CVE-2024-36900: kernel: net: hns3: fix kernel crash when devlink reload during initialization" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225728" id="1225728" title="VUL-0: CVE-2024-36885: kernel: drm/nouveau/firmware: fix SG_DEBUG error with nvkm_firmware_ctor()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225731" id="1225731" title="VUL-0: CVE-2024-36887: kernel: e1000e: change usleep_range to udelay in PHY mdic access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225732" id="1225732" title="VUL-0: CVE-2024-36904: kernel: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225734" id="1225734" title="VUL-0: CVE-2024-36896: kernel: USB: core: Fix access violation during port device removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225735" id="1225735" title="VUL-0: CVE-2024-36897: kernel: drm/amd/display: Atom Integrated System Info v2_2 for DCN35" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225736" id="1225736" title="VUL-0: CVE-2024-36898: kernel: gpiolib: cdev: fix uninitialised kfifo" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225737" id="1225737" title="VUL-0: CVE-2024-36899: kernel: gpiolib: cdev: Fix use after free in lineinfo_changed_notify" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225741" id="1225741" title="VUL-0: CVE-2024-36903: kernel: ipv6: Fix potential uninit-value access in __ip6_make_skb()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225744" id="1225744" title="VUL-0: CVE-2024-36909: kernel: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225745" id="1225745" title="VUL-0: CVE-2024-36911: kernel: hv_netvsc: Don't free decrypted memory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225746" id="1225746" title="VUL-0: CVE-2024-36889: kernel: mptcp: ensure snd_nxt is properly initialized on connect" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225747" id="1225747" title="VUL-0: CVE-2024-36931: kernel: s390/cio: Ensure the copied buf is NUL terminated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225748" id="1225748" title="VUL-0: CVE-2024-36893: kernel: usb: typec: tcpm: Check for port partner validity before consuming it" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225749" id="1225749" title="VUL-0: CVE-2024-36894: kernel: usb: gadget: f_fs: fix race between aio_cancel() and AIO request complete" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225750" id="1225750" title="VUL-0: CVE-2024-36895: kernel: usb: gadget: uvc: use correct buffer size when parsing configfs lists" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225752" id="1225752" title="VUL-0: CVE-2024-36912: kernel: Drivers: hv: vmbus: track decrypted status in vmbus_gpadl" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225753" id="1225753" title="VUL-0: CVE-2024-36913: kernel: Drivers: hv: vmbus: leak pages if set_memory_encrypted() fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225756" id="1225756" title="Backport BPF control flow graph and precision backtrack fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225757" id="1225757" title="VUL-0: CVE-2024-36914: kernel: drm/amd/display: skip on writeback when it's not applicable" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225758" id="1225758" title="VUL-0: CVE-2024-36915: kernel: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225759" id="1225759" title="VUL-0: CVE-2024-36916: kernel: blk-iocost: avoid out of bounds shift" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225760" id="1225760" title="VUL-0: CVE-2024-36934: kernel: bna: ensure the copied buf is NUL terminated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225761" id="1225761" title="VUL-0: CVE-2024-36938: kernel: bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225762" id="1225762" title="VUL-0: CVE-2024-36957: kernel: octeontx2-af: avoid off-by-one read from userspace" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225763" id="1225763" title="VUL-0: CVE-2024-36935: kernel: ice: ensure the copied buf is NUL terminated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225765" id="1225765" title="PTF request for backport of BPF control flow graph and precision backtrack fixes — ref:_00D1igLOd._500TrBEVKJ:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225766" id="1225766" title="VUL-0: CVE-2024-36918: kernel: bpf: check bloom filter map value size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225767" id="1225767" title="VUL-0: CVE-2024-36919: kernel: scsi: bnx2fc: remove spin_lock_bh while releasing resources after upload" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225769" id="1225769" title="VUL-0: CVE-2024-36921: kernel: wifi: iwlwifi: mvm: guard against invalid STA ID on removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225770" id="1225770" title="VUL-0: CVE-2024-36917: kernel: block: fix overflow in blk_ioctl_discard()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225773" id="1225773" title="VUL-0: CVE-2024-36936: kernel: efi/unaccepted: touch soft lockup during memory accept" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225775" id="1225775" title="VUL-0: CVE-2024-36928: kernel: s390/qeth: fix kernel panic after setting hsuid" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225805" id="1225805" title="VUL-0: CVE-2024-36922: kernel: wifi: iwlwifi: read txq-&gt;read_ptr under lock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225810" id="1225810" title="VUL-0: CVE-2024-36955: kernel: ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225815" id="1225815" title="VUL-0: CVE-2024-36923: kernel: fs/9p: fix uninitialized values during inode evict" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225820" id="1225820" title="VUL-0: CVE-2024-36924: kernel: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225823" id="1225823" title="VUL-0: CVE-2024-36945: kernel: net/smc: fix neighbour and rtable leak in smc_ib_find_route()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225827" id="1225827" title="VUL-0: CVE-2024-36962: kernel: net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225829" id="1225829" title="VUL-0: CVE-2024-36926: kernel: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225830" id="1225830" title="VUL-0: CVE-2024-36930: kernel: spi: fix null pointer dereference within spi_sync" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225834" id="1225834" title="VUL-0: CVE-2024-36937: kernel: xdp: use flags field to disambiguate broadcast redirect" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225835" id="1225835" title="VUL-0: CVE-2024-36941: kernel: wifi: nl80211: don't free NULL coalescing rule" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225839" id="1225839" title="VUL-0: CVE-2024-36959: kernel: pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225840" id="1225840" title="VUL-0: CVE-2024-36940: kernel: pinctrl: core: delete incorrect free in pinctrl_enable()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225842" id="1225842" title="Update Broadcom Emulex lpfc driver to 14.4.0.2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225843" id="1225843" title="VUL-0: CVE-2024-36942: kernel: Bluetooth: qca: fix firmware check error path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225847" id="1225847" title="VUL-0: CVE-2024-36944: kernel: reapply &quot;drm/qxl: simplify qxl_fence_wait&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225851" id="1225851" title="VUL-0: CVE-2024-36946: kernel: phonet: fix rtm_phonet_notify() skb allocation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225856" id="1225856" title="VUL-0: CVE-2024-36947: kernel: qibfs: fix dentry leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225866" id="1225866" title="VUL-0: CVE-2024-36964: kernel: fs/9p: only translate RWX permissions for plain 9P2000" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225872" id="1225872" title="VUL-0: CVE-2024-36960: kernel: drm/vmwgfx: fix invalid reads in fence signaled events" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225894" id="1225894" title="VUL-0: CVE-2024-36949: kernel: amd/amdkfd: sync all devices to wait all processes being evicted" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225895" id="1225895" title="VUL-0: CVE-2024-36950: kernel: firewire: ohci: mask bus reset interrupts between ISR and bottom half" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225896" id="1225896" title="VUL-0: CVE-2024-36951: kernel: drm/amdkfd: range check cp bad op exception interrupts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225898" id="1225898" title="VUL-0: CVE-2024-36952: kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225903" id="1225903" title="bpf: backport of iterator and callback handling fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225945" id="1225945" title="Missing patches for btrfs in 15 SP6 kernel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226022" id="1226022" title="L3: Backport of cephfs client fix addressing hangs [ref:_00D1igLOd._500TrBZugw:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226131" id="1226131" title="VUL-0: CVE-2024-36967: kernel: KEYS: trusted: Fix memory leak in tpm2_key_encode()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226145" id="1226145" title="VUL-0: CVE-2024-36971: kernel: fix __dst_negative_advice() race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226149" id="1226149" title="VUL-0: CVE-2024-36965: kernel: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226155" id="1226155" title="VUL-0: CVE-2024-36969: kernel: drm/amd/display: Fix division by zero in setup_dsc_config" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226158" id="1226158" title="SLE-15SP6: Kernel oops during boot on Intel Xeon" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226163" id="1226163" title="VUL-0: CVE-2024-36972: kernel: af_unix: update unix_sk(sk)-&gt;oob_skb under sk_receive_queue lock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226202" id="1226202" title="Request to backport kernel changes to support EC2 Graviton4 instance" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226211" id="1226211" title="kernel-obs-build missing network modules for Docker build" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226212" id="1226212" title="kernel-obs-build doesn't find &quot;iso9660&quot; when building containers with podman" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226213" id="1226213" title="[INTEL 15SP6 BUG][VROC] mdadm detects dm-device as partition" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226226" id="1226226" title="Backport request for commit b6a1f9a, &quot;avoid infinite loop in pnfs_update_layout&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226457" id="1226457" title="VUL-0: CVE-2024-36973: kernel: misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226502" id="1226502" title="Backport arm64 write combining support optimization to SLES 15" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226503" id="1226503" title="SLES15SP6: kernel tasks hang while using errinject and drmgr(NVME/Denali/P10)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226513" id="1226513" title="VUL-0: CVE-2024-36977: kernel: usb: dwc3: Wait unconditionally after issuing EndXfer command" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226514" id="1226514" title="VUL-0: CVE-2024-36978: kernel: net: sched: sch_multiq: fix possible OOB write in multiq_tune()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226519" id="1226519" title="VUL-0: CVE-2024-36974: kernel: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226520" id="1226520" title="VUL-0: CVE-2024-36975: kernel: KEYS: trusted: Do not use WARN when encode fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226582" id="1226582" title="VUL-0: CVE-2024-38540: kernel: bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226587" id="1226587" title="VUL-0: CVE-2024-38541: kernel: of: module: add buffer overflow check in of_modalias()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226588" id="1226588" title="cachefiles: remove requests from xarray during flushing requests" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226592" id="1226592" title="VUL-0: CVE-2024-38615: kernel: cpufreq: exit() callback is optional" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226593" id="1226593" title="VUL-0: CVE-2024-38546: kernel: drm: vc4: Fix possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226594" id="1226594" title="VUL-0: CVE-2024-38543: kernel: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226595" id="1226595" title="VUL-0: CVE-2024-38545: kernel: RDMA/hns: Fix UAF for cq async event" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226597" id="1226597" title="VUL-0: CVE-2024-38544: kernel: RDMA/rxe: fix seg fault in rxe_comp_queue_pkt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226607" id="1226607" title="VUL-0: CVE-2024-38555: kernel: net/mlx5: Discard command completions in internal error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226608" id="1226608" title="VUL-0: CVE-2024-38539: kernel: RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226610" id="1226610" title="VUL-0: CVE-2024-38580: kernel: epoll: be better about file lifetimes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226612" id="1226612" title="VUL-0: CVE-2024-38575: kernel: wifi: brcmfmac: pcie: handle randbuf allocation failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226613" id="1226613" title="VUL-0: CVE-2024-38602: kernel: ax25: Fix reference count leak issues of ax25_dev" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226630" id="1226630" title="VUL-0: CVE-2023-52883: kernel: drm/amdgpu: Fix possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226632" id="1226632" title="VUL-0: CVE-2024-38547: kernel: media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226633" id="1226633" title="VUL-0: CVE-2024-38550: kernel: ASoC: kirkwood: Fix potential NULL dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226634" id="1226634" title="VUL-0: CVE-2024-38578: kernel: ecryptfs: fix buffer size for tag 66 packet" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226637" id="1226637" title="VUL-0: CVE-2024-38579: kernel: crypto: bcm - fix pointer arithmetic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226657" id="1226657" title="VUL-0: CVE-2024-38581: kernel: drm/amdgpu/mes: fix use-after-free issue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226658" id="1226658" title="VUL-0: CVE-2024-38582: kernel: nilfs2: fix potential hang in nilfs_detach_log_writer()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226734" id="1226734" title="VUL-0: CVE-2024-38594: kernel: net: stmmac: move the EST lock to struct stmmac_priv" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226735" id="1226735" title="VUL-0: CVE-2024-38549: kernel: drm/mediatek: Add 0 size check to mtk_drm_gem_obj" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226737" id="1226737" title="VUL-0: CVE-2024-38571: kernel: thermal/drivers/tsens: Fix null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226738" id="1226738" title="VUL-0: CVE-2024-38591: kernel: RDMA/hns: Fix deadlock on SRQ async events." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226739" id="1226739" title="VUL-0: CVE-2024-38573: kernel: cppc_cpufreq: Fix possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226740" id="1226740" title="VUL-0: CVE-2024-38605: kernel: ALSA: core: Fix NULL module pointer assignment at card init" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226741" id="1226741" title="VUL-0: CVE-2024-38595: kernel: net/mlx5: fix peer devlink set for SF representor devlink port" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226742" id="1226742" title="VUL-0: CVE-2024-38554: kernel: ax25: Fix reference count leak issue of net_device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226744" id="1226744" title="VUL-0: CVE-2024-38553: kernel: net: fec: remove .ndo_poll_controller to avoid deadlocks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226746" id="1226746" title="VUL-0: CVE-2024-38608: kernel: net/mlx5e: fix netif state handling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226747" id="1226747" title="VUL-0: CVE-2024-38565: kernel: wifi: ar5523: enable proper endpoint verification" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226749" id="1226749" title="VUL-0: CVE-2024-38597: kernel: eth: sungem: remove .ndo_poll_controller to avoid deadlocks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226750" id="1226750" title="VUL-0: CVE-2024-38586: kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226754" id="1226754" title="VUL-0: CVE-2024-38618: kernel: ALSA: timer: Set lower bound of start tick time" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226757" id="1226757" title="VUL-0: CVE-2024-38598: kernel: md: fix resync softlockup when bitmap size is less than array size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226758" id="1226758" title="VUL-0: CVE-2024-38610: kernel: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226760" id="1226760" title="VUL-0: CVE-2024-38611: kernel: media: i2c: et8ek8: don't strip remove function when driver is builtin" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226761" id="1226761" title="VUL-0: CVE-2024-38551: kernel: ASoC: mediatek: assign dummy when codec not specified for a DAI link" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226764" id="1226764" title="VUL-0: CVE-2023-52884: kernel: Input: cyapa - add missing input core locking to suspend/resume functions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226767" id="1226767" title="VUL-0: CVE-2024-38552: kernel: drm/amd/display: fix potential index out of bounds in color transformation function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226768" id="1226768" title="VUL-0: CVE-2024-33619: kernel: efi: libstub: only free priv.runtime_map when allocated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226769" id="1226769" title="VUL-0: CVE-2024-38567: kernel: wifi: carl9170: add a proper sanity check for endpoints" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226771" id="1226771" title="VUL-0: CVE-2024-38568: kernel: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226772" id="1226772" title="VUL-0: CVE-2024-38569: kernel: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226774" id="1226774" title="VUL-0: CVE-2024-38556: kernel: net/mlx5: add a timeout to acquire the command queue semaphore" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226775" id="1226775" title="VUL-0: CVE-2024-38570: kernel: gfs2: Fix potential glock use-after-free on unmount" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226776" id="1226776" title="VUL-0: CVE-2024-38572: kernel: wifi: ath12k: fix out-of-bound access of qmi_invoke_handler()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226777" id="1226777" title="VUL-0: CVE-2024-38583: kernel: nilfs2: fix use-after-free of timer for log writer thread" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226780" id="1226780" title="VUL-0: CVE-2024-38587: kernel: speakup: Fix sizeof() vs ARRAY_SIZE() bug" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226781" id="1226781" title="VUL-0: CVE-2024-38557: kernel: net/mlx5: reload only IB representors upon lag disable/enable" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226783" id="1226783" title="VUL-0: CVE-2024-38558: kernel: net: openvswitch: fix overwriting ct original tuple for ICMPv6" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226785" id="1226785" title="VUL-0: CVE-2024-38559: kernel: scsi: qedf: ensure the copied buf is NUL terminated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226786" id="1226786" title="VUL-0: CVE-2024-38560: kernel: scsi: bfa: ensure the copied buf is NUL terminated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226788" id="1226788" title="VUL-0: CVE-2024-38562: kernel: wifi: nl80211: avoid address calculations via out of bounds array indexing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226789" id="1226789" title="VUL-0: CVE-2024-38564: kernel: bpf: add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226790" id="1226790" title="VUL-0: CVE-2024-38566: kernel: bpf: fix verifier assumptions about socket-&gt;sk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226791" id="1226791" title="sched/core: Fix incorrect initialization of the 'burst' parameter in  cpu_max_write()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226796" id="1226796" title="VUL-0: CVE-2024-34777: kernel: dma-mapping: benchmark: fix node id validation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226799" id="1226799" title="VUL-0: CVE-2024-36281: kernel: net/mlx5: use mlx5_ipsec_rx_status_destroy to correctly delete status rules" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226837" id="1226837" title="VUL-0: CVE-2024-38588: kernel: ftrace: Fix possible use-after-free issue in ftrace_location()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226839" id="1226839" title="VUL-0: CVE-2024-38590: kernel: RDMA/hns: Modify the print level of CQE error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226840" id="1226840" title="VUL-0: CVE-2024-36477: kernel: tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226841" id="1226841" title="VUL-0: CVE-2024-36478: kernel: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226842" id="1226842" title="VUL-0: CVE-2024-38603: kernel: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226844" id="1226844" title="VUL-0: CVE-2024-38592: kernel: drm/mediatek: init `ddp_comp` with devm_kcalloc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226848" id="1226848" title="VUL-0: CVE-2024-38599: kernel: jffs2: prevent xattr node from overflowing the eraseblock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226852" id="1226852" title="VUL-0: CVE-2024-38616: kernel: wifi: carl9170: re-fix fortified-memset warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226856" id="1226856" title="VUL-0: CVE-2024-38622: kernel: drm/msm/dpu: Add callback function pointer check before its call" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226857" id="1226857" title="VUL-0: CVE-2024-38627: kernel: stm class: Fix a double free in stm_register_device()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226859" id="1226859" title="VUL-0: CVE-2024-38617: kernel: kunit/fortify: Fix mismatched kvalloc()/vfree() usage" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226861" id="1226861" title="VUL-0: CVE-2024-38619: kernel: usb-storage: alauda: Check whether the media is initialized" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226863" id="1226863" title="VUL-0: CVE-2024-38635: kernel: soundwire: cadence: fix invalid PDI offset" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226864" id="1226864" title="VUL-0: CVE-2024-38600: kernel: ALSA: fix deadlocks with kctl removals at disconnection" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226866" id="1226866" title="VUL-0: CVE-2024-38604: kernel: block: refine the EOF check in blkdev_iomap_begin" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226867" id="1226867" title="VUL-0: CVE-2024-38633: kernel: serial: max3100: Update uart_driver_registered on driver removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226868" id="1226868" title="VUL-0: CVE-2024-38634: kernel: serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226875" id="1226875" title="VUL-0: CVE-2024-37353: kernel: virtio: delete vq in vp_find_vqs_msix() when request_irq() fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226876" id="1226876" title="VUL-0: CVE-2024-38601: kernel: ring-buffer: fix a race between readers and resize checks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226878" id="1226878" title="VUL-0: CVE-2024-38381: kernel: nfc: nci: Fix uninit-value in nci_rx_work" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226879" id="1226879" title="VUL-0: CVE-2024-38636: kernel: f2fs: multidev: fix to recognize valid zero block address" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226883" id="1226883" title="VUL-0: CVE-2024-38659: kernel: enic: validate length of nl attributes in enic_set_vf_port" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226886" id="1226886" title="VUL-0: CVE-2024-38780: kernel: dma-buf/sw-sync: don't enable IRQ from sync_print_obj()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226890" id="1226890" title="VUL-0: CVE-2024-38388: kernel: ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226891" id="1226891" title="VUL-0: CVE-2024-38390: kernel: drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226894" id="1226894" title="VUL-0: CVE-2024-38391: kernel: cxl/region: Fix cxlr_pmem leaks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226895" id="1226895" title="VUL-0: CVE-2024-38621: kernel: media: stk1160: fix bounds checking in stk1160_copy_video()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226905" id="1226905" title="VUL-0: CVE-2024-38629: kernel: dmaengine: idxd: avoid unnecessary destruction of file_ida" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226908" id="1226908" title="VUL-0: CVE-2024-38630: kernel: watchdog: cpu5wdt.c: fix use-after-free bug caused by cpu5wdt_trigger" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226909" id="1226909" title="VUL-0: CVE-2024-39277: kernel: dma-mapping: benchmark: handle NUMA_NO_NODE correctly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226911" id="1226911" title="VUL-0: CVE-2024-38628: kernel: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226915" id="1226915" title="Backport arm64: Update  saved buffers with latest ASPM" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226928" id="1226928" title="Backport arm64: pci: clear Secondary Status errors after enumeration" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226934" id="1226934" title="VUL-0: CVE-2024-39291: kernel: drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226938" id="1226938" title="VUL-0: CVE-2024-38384: kernel: blk-cgroup: fix list corruption from reorder of WRITE -&gt;lqueued" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226939" id="1226939" title="VUL-0: CVE-2024-38663: kernel: blk-cgroup: fix list corruption from resetting io stat" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226941" id="1226941" title="VUL-0: CVE-2024-38664: kernel: drm: zynqmp_dpsub: Always register bridge" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226948" id="1226948" title="VUL-0: CVE-2024-35247: kernel: fpga: region: add owner module and take its refcount" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226949" id="1226949" title="VUL-0: CVE-2024-36479: kernel: fpga: bridge: add owner module and take its refcount" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226950" id="1226950" title="VUL-0: CVE-2024-37021: kernel: fpga: manager: add owner module and take its refcount" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226962" id="1226962" title="TSC clocksource spuriously declared invalid in 12+ socket Sapphire Rapids systems" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226976" id="1226976" title="VUL-0: CVE-2022-48772: kernel: media: lgdt3306a: add a check against null-pointer-def" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226989" id="1226989" title="VUL-0: CVE-2024-39296: kernel: bonding: fix oops during rmmod" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226990" id="1226990" title="VUL-0: CVE-2024-39371: kernel: io_uring: check for non-NULL file pointer in io_file_can_poll()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226992" id="1226992" title="VUL-0: CVE-2024-39469: kernel: nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226993" id="1226993" title="VUL-0: CVE-2024-39276: kernel: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226994" id="1226994" title="VUL-0: CVE-2024-39301: kernel: net/9p: fix uninit-value in p9_client_rpc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226995" id="1226995" title="VUL-0: REJECTED: CVE-2024-39362: kernel: i2c: acpi: Unbind mux adapters before delete" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226996" id="1226996" title="VUL-0: CVE-2024-38661: kernel: s390/ap: Fix crash in AP internal function modify_bitmap()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227066" id="1227066" title="VUL-0: CVE-2024-37078: kernel: nilfs2: fix potential kernel bug due to lack of writeback flag waiting" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227072" id="1227072" title="s390/cpacf: Make use of invalid opcode produce a link error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227085" id="1227085" title="VUL-0: CVE-2024-38385: kernel: genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227089" id="1227089" title="VUL-0: CVE-2024-39466: kernel: thermal/drivers/qcom/lmh: Check for SCM availability at probe" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227090" id="1227090" title="VUL-0: CVE-2024-39463: kernel: 9p: add missing locking around taking dentry fid list" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227096" id="1227096" title="VUL-0: CVE-2024-39471: kernel: drm/amdgpu: add error handle to avoid out-of-bounds" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227101" id="1227101" title="VUL-0: CVE-2024-37354: kernel: btrfs: fix crash on racing fsync and size-extending write into prealloc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227103" id="1227103" title="VUL-0: CVE-2024-39468: kernel: smb: client: fix deadlock in smb2_find_smb_tcon()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227149" id="1227149" title="Bump base code of iwlwifi to 6.9.x (or 6.10.x)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227190" id="1227190" title="Fix iaa_crypto on SLES 15 SP6" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227282" id="1227282" title="[docs][SELinux]: kernel params security=selinux selinux=1 appends selinux behind bpf, leading to broken system in Leap 15.6" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227362" id="1227362" title="SUSE NFS 4.1 client logs &quot;lock reclaim failed&quot; after NFS4ERR_BAD_STATEID from Azure NFS server" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227363" id="1227363" title="PM1743 vroc raid1 install SLE-15-SP6.os into emergency mode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227383" id="1227383" title="VUL-0: kernel: slab-out-of-bounds in hex_dump_to_buffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227432" id="1227432" title="VUL-0: CVE-2024-39472: kernel: xfs: fix log recovery buffer allocation for the legacy h_size fixup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227433" id="1227433" title="VUL-0: CVE-2024-39473: kernel: ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227434" id="1227434" title="VUL-0: CVE-2024-39474: kernel: mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227435" id="1227435" title="VUL-0: CVE-2024-39475: kernel: fbdev: savage: Handle err return when savagefb_check_var failed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227443" id="1227443" title="VUL-0: CVE-2024-39479: kernel: drm/i915/hwmon: Get rid of devm" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227446" id="1227446" title="VUL-0: CVE-2024-39481: kernel: media: mc: Fix graph walk in media_pipeline_start" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227447" id="1227447" title="VUL-0: CVE-2024-39482: kernel: bcache: fix variable length array abuse in btree_iter" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227487" id="1227487" title="powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227573" id="1227573" title="VUL-0: CVE-2024-39487: kernel: bonding: fix out-of-bounds read in bond_option_arp_ip_targets_set()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227626" id="1227626" title="VUL-0: CVE-2024-39490: kernel: ipv6: sr: fix missing sk_buff release in seg6_input_core" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227716" id="1227716" title="VUL-0: CVE-2024-39494: kernel: ima: fix use-after-free on a dentry's dname.name" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227719" id="1227719" title="VUL-0: CVE-2024-39496: kernel: btrfs: zoned: fix use-after-free due to race with dev replace" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227723" id="1227723" title="VUL-0: CVE-2024-39498: kernel: drm/mst: fix NULL pointer dereference at drm_dp_add_payload_part2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227730" id="1227730" title="VUL-0: CVE-2024-39507: kernel: net: hns3: fix kernel crash problem in concurrent scenario" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227736" id="1227736" title="[HPE SLES15SP6] Intel FVL NIC FW flash fails with inbox driver, causing driver not detected" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227755" id="1227755" title="VUL-0: CVE-2024-39502: kernel: ionic: fix use after netif_napi_del()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227757" id="1227757" title="VUL-0: CVE-2024-39504: kernel: netfilter: nft_inner: validate mandatory meta and payload" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227762" id="1227762" title="VUL-0: CVE-2024-40901: kernel: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227763" id="1227763" title="VUL-0: CVE-2024-40906: kernel: net/mlx5: Always stop health timer during driver removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227779" id="1227779" title="VUL-0: CVE-2024-40919: kernel: bnxt_en: adjust logging of firmware messages in case of released token in __hwrm_send()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227780" id="1227780" title="VUL-0: CVE-2024-40931: kernel: mptcp: ensure snd_una is properly initialized on connect" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227783" id="1227783" title="VUL-0: CVE-2024-40908: kernel: bpf: Set run context for rawtp test_run callback" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227786" id="1227786" title="VUL-0: CVE-2024-40923: kernel: vmxnet3: disable rx data ring on dma allocation failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227788" id="1227788" title="VUL-0: CVE-2024-40928: kernel: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227789" id="1227789" title="VUL-0: CVE-2024-40925: kernel: block: fix request.queuelist usage in flush" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227797" id="1227797" title="VUL-0: CVE-2024-40935: kernel: cachefiles: flush all requests after setting CACHEFILES_DEAD" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227800" id="1227800" title="VUL-0: CVE-2024-40940: kernel: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227801" id="1227801" title="VUL-0: CVE-2024-40948: kernel: mm/page_table_check: fix crash on ZONE_DEVICE" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227803" id="1227803" title="VUL-0: CVE-2024-40947: kernel: ima: Avoid blocking in RCU read-side critical section" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227806" id="1227806" title="VUL-0: CVE-2024-40953: kernel: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227813" id="1227813" title="VUL-0: CVE-2024-40960: kernel: ipv6: prevent possible NULL dereference in rt6_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227814" id="1227814" title="VUL-0: CVE-2024-40961: kernel: ipv6: prevent possible NULL deref in fib6_nh_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227836" id="1227836" title="VUL-0: CVE-2024-40937: kernel: gve: clear napi-&gt;skb before dev_kfree_skb_any()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227855" id="1227855" title="VUL-0: CVE-2024-40979: kernel: wifi: ath12k: fix kernel crash during resume" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227862" id="1227862" title="VUL-0: CVE-2024-41006: kernel: netrom: fix a memory leak in nr_heartbeat_expiry()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227866" id="1227866" title="VUL-0: CVE-2024-40998: kernel: ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227886" id="1227886" title="VUL-0: CVE-2024-40966: kernel: tty: add the option to have a tty reject a new ldisc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227899" id="1227899" title="VUL-0: CVE-2024-40970: kernel: Avoid hw_desc array overrun in dw-axi-dmac" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227910" id="1227910" title="VUL-0: CVE-2024-40972: kernel: ext4: do not create EA inode under buffer lock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227913" id="1227913" title="VUL-0: CVE-2024-40999: kernel: net: ena: add validation for completion descriptors consistency" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227926" id="1227926" title="VUL-0: CVE-2024-40975: kernel: platform/x86: x86-android-tablets: Unregister devices in reverse order" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228090" id="1228090" title="Backport arm64: PCI: Extend ACS configurability" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228114" id="1228114" title="VUL-0: CVE-2024-41011: kernel: drm/amdkfd: don't allow mapping the MMIO HDP page with large pages" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228192" id="1228192" title="libceph: fix race between delayed_work() and ceph_monc_stop()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228193" id="1228193" title="fuse: verify {g,u}id mount options correctly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228211" id="1228211" title="SLES15 SP6 [6.4.0-150600.5-default] FS/XFS: generic/175 test with 64k block size fails with soft lockup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228269" id="1228269" title="Internal microphone not working on Lenovo Thinkpad E16 Gen 2 (Model 21M5)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228289" id="1228289" title="Backport arm64: Enable Nvidia driver for Coresight PMU arch device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228327" id="1228327" title="VUL-0: CVE-2024-41091: kernel: virtio-net: tun: mlx5_core short frame denial of service" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228328" id="1228328" title="VUL-0: CVE-2024-41090: kernel: virtio-net: tap: mlx5_core short frame denial of service" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228403" id="1228403" title="VUL-0: CVE-2024-41017: kernel: jfs: don't walk off the end of ealist" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228405" id="1228405" title="VUL-0: CVE-2024-41013: kernel: xfs: don't walk off the end of a directory data block" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228408" id="1228408" title="VUL-0: CVE-2024-41014: kernel: xfs: add bounds checking to xlog_recover_process_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228417" id="1228417" title="ceph: fix incorrect kmalloc size of pagevec mempool" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229025" id="1229025" title="SLERT-15SP6: /proc/sys/kernel/printk does not exist" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36889" id="CVE-2024-36889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36889" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40979" id="CVE-2024-40979" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40979" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38417" id="CVE-2023-38417" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38417" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51780" id="CVE-2023-51780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51780" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36955" id="CVE-2024-36955" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36955" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39473" id="CVE-2024-39473" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39473" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36942" id="CVE-2024-36942" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36942" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36944" id="CVE-2024-36944" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36944" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36949" id="CVE-2024-36949" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36949" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36951" id="CVE-2024-36951" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36951" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39479" id="CVE-2024-39479" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39479" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39475" id="CVE-2024-39475" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39475" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36950" id="CVE-2024-36950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36950" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39481" id="CVE-2024-39481" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39481" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36940" id="CVE-2024-36940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36940" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36959" id="CVE-2024-36959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36959" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36947" id="CVE-2024-36947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36947" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36930" id="CVE-2024-36930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36930" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36922" id="CVE-2024-36922" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36922" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36941" id="CVE-2024-36941" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36941" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52472" id="CVE-2023-52472" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52472" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25741" id="CVE-2024-25741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25741" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52883" id="CVE-2023-52883" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52883" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39463" id="CVE-2024-39463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39463" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38600" id="CVE-2024-38600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38600" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38605" id="CVE-2024-38605" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38605" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52806" id="CVE-2023-52806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52806" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38388" id="CVE-2024-38388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38388" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38618" id="CVE-2024-38618" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38618" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38550" id="CVE-2024-38550" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38550" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38551" id="CVE-2024-38551" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38551" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52833" id="CVE-2023-52833" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52833" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26889" id="CVE-2024-26889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26889" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52866" id="CVE-2023-52866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52866" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52851" id="CVE-2023-52851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52851" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52884" id="CVE-2023-52884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52884" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52840" id="CVE-2023-52840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52840" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36975" id="CVE-2024-36975" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36975" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36967" id="CVE-2024-36967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36967" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38539" id="CVE-2024-38539" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38539" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38545" id="CVE-2024-38545" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38545" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38591" id="CVE-2024-38591" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38591" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38590" id="CVE-2024-38590" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38590" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38544" id="CVE-2024-38544" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38544" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52803" id="CVE-2023-52803" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52803" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26676" id="CVE-2024-26676" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26676" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35970" id="CVE-2024-35970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35970" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26750" id="CVE-2024-26750" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26750" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26780" id="CVE-2024-26780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26780" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36972" id="CVE-2024-36972" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36972" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52750" id="CVE-2023-52750" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52750" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52834" id="CVE-2023-52834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52834" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38554" id="CVE-2024-38554" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38554" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38602" id="CVE-2024-38602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38602" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38384" id="CVE-2024-38384" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38384" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38663" id="CVE-2024-38663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38663" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38540" id="CVE-2024-38540" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38540" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52784" id="CVE-2023-52784" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52784" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52878" id="CVE-2023-52878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52878" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52875" id="CVE-2023-52875" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52875" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52870" id="CVE-2023-52870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52870" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52873" id="CVE-2023-52873" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52873" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52865" id="CVE-2023-52865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52865" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52858" id="CVE-2023-52858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52858" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52876" id="CVE-2023-52876" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52876" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38573" id="CVE-2024-38573" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38573" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38615" id="CVE-2024-38615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38615" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38579" id="CVE-2024-38579" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38579" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52813" id="CVE-2023-52813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52813" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52849" id="CVE-2023-52849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52849" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52792" id="CVE-2023-52792" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52792" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38391" id="CVE-2024-38391" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38391" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38780" id="CVE-2024-38780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38780" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34777" id="CVE-2024-34777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34777" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39277" id="CVE-2024-39277" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39277" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38629" id="CVE-2024-38629" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38629" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52819" id="CVE-2023-52819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52819" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52818" id="CVE-2023-52818" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52818" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52812" id="CVE-2023-52812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52812" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52753" id="CVE-2023-52753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52753" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36969" id="CVE-2024-36969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36969" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52862" id="CVE-2023-52862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52862" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38552" id="CVE-2024-38552" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38552" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52773" id="CVE-2023-52773" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52773" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26767" id="CVE-2024-26767" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26767" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52817" id="CVE-2023-52817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52817" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39291" id="CVE-2024-39291" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39291" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52814" id="CVE-2023-52814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52814" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39471" id="CVE-2024-39471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39471" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38581" id="CVE-2024-38581" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38581" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52815" id="CVE-2023-52815" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52815" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52825" id="CVE-2023-52825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52825" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52816" id="CVE-2023-52816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52816" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38548" id="CVE-2024-38548" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38548" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52861" id="CVE-2023-52861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52861" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52856" id="CVE-2023-52856" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52856" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38549" id="CVE-2024-38549" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38549" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52857" id="CVE-2023-52857" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52857" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38592" id="CVE-2024-38592" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38592" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38390" id="CVE-2024-38390" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38390" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38622" id="CVE-2024-38622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38622" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52821" id="CVE-2023-52821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52821" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52826" id="CVE-2023-52826" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52826" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52867" id="CVE-2023-52867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52867" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38546" id="CVE-2024-38546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38546" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36960" id="CVE-2024-36960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36960" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38664" id="CVE-2024-38664" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38664" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39296" id="CVE-2024-39296" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39296" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36887" id="CVE-2024-36887" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36887" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38578" id="CVE-2024-38578" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38578" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33619" id="CVE-2024-33619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33619" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52838" id="CVE-2023-52838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52838" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36964" id="CVE-2024-36964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36964" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52810" id="CVE-2023-52810" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52810" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52804" id="CVE-2023-52804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52804" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38588" id="CVE-2024-38588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38588" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38385" id="CVE-2024-38385" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38385" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52759" id="CVE-2023-52759" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52759" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52853" id="CVE-2023-52853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52853" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52863" id="CVE-2023-52863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52863" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39362" id="CVE-2024-39362" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39362" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52791" id="CVE-2023-52791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52791" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52763" id="CVE-2023-52763" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52763" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" id="CVE-2023-52766" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52766" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52788" id="CVE-2023-52788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52788" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36010" id="CVE-2024-36010" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36010" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35957" id="CVE-2024-35957" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35957" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52801" id="CVE-2023-52801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52801" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52796" id="CVE-2023-52796" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52796" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38599" id="CVE-2024-38599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38599" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52799" id="CVE-2023-52799" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52799" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52805" id="CVE-2023-52805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52805" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38617" id="CVE-2024-38617" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38617" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47432" id="CVE-2021-47432" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47432" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38543" id="CVE-2024-38543" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38543" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52836" id="CVE-2023-52836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52836" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26758" id="CVE-2024-26758" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26758" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38547" id="CVE-2024-38547" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38547" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52847" id="CVE-2023-52847" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52847" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52764" id="CVE-2023-52764" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52764" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52850" id="CVE-2023-52850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52850" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38611" id="CVE-2024-38611" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38611" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52754" id="CVE-2023-52754" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52754" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48772" id="CVE-2022-48772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48772" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38621" id="CVE-2024-38621" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38621" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52841" id="CVE-2023-52841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52841" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52844" id="CVE-2023-52844" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52844" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52765" id="CVE-2023-52765" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52765" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36973" id="CVE-2024-36973" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36973" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52807" id="CVE-2023-52807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52807" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36962" id="CVE-2024-36962" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36962" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38595" id="CVE-2024-38595" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38595" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52782" id="CVE-2023-52782" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52782" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52780" id="CVE-2023-52780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52780" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52783" id="CVE-2023-52783" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52783" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35896" id="CVE-2024-35896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35896" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35962" id="CVE-2024-35962" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35962" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38381" id="CVE-2024-38381" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38381" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39469" id="CVE-2024-39469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39469" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38582" id="CVE-2024-38582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38582" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38583" id="CVE-2024-38583" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38583" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38541" id="CVE-2024-38541" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38541" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52854" id="CVE-2023-52854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52854" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52835" id="CVE-2023-52835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52835" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52864" id="CVE-2023-52864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52864" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36926" id="CVE-2024-36926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36926" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52869" id="CVE-2023-52869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52869" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36965" id="CVE-2024-36965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36965" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38601" id="CVE-2024-38601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38601" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52774" id="CVE-2023-52774" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52774" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52808" id="CVE-2023-52808" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52808" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52811" id="CVE-2023-52811" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52811" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52809" id="CVE-2023-52809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52809" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36952" id="CVE-2024-36952" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36952" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36924" id="CVE-2024-36924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36924" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38634" id="CVE-2024-38634" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38634" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38633" id="CVE-2024-38633" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38633" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52871" id="CVE-2023-52871" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52871" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38635" id="CVE-2024-38635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38635" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38587" id="CVE-2024-38587" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38587" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52749" id="CVE-2023-52749" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52749" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52868" id="CVE-2023-52868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52868" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39466" id="CVE-2024-39466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39466" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38571" id="CVE-2024-38571" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38571" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52794" id="CVE-2023-52794" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52794" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52767" id="CVE-2023-52767" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52767" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36477" id="CVE-2024-36477" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36477" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52879" id="CVE-2023-52879" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52879" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26920" id="CVE-2024-26920" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26920" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52872" id="CVE-2023-52872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52872" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52880" id="CVE-2023-52880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52880" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52789" id="CVE-2023-52789" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52789" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52781" id="CVE-2023-52781" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52781" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36977" id="CVE-2024-36977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36977" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38628" id="CVE-2024-38628" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38628" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38619" id="CVE-2024-38619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38619" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52877" id="CVE-2023-52877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52877" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52795" id="CVE-2023-52795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52795" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52762" id="CVE-2023-52762" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52762" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52842" id="CVE-2023-52842" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52842" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38630" id="CVE-2024-38630" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38630" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38565" id="CVE-2024-38565" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38565" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52798" id="CVE-2023-52798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52798" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52777" id="CVE-2023-52777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52777" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" id="CVE-2023-52800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52800" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52776" id="CVE-2023-52776" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52776" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52769" id="CVE-2023-52769" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52769" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38572" id="CVE-2024-38572" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38572" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52827" id="CVE-2023-52827" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52827" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52829" id="CVE-2023-52829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52829" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38575" id="CVE-2024-38575" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38575" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38567" id="CVE-2024-38567" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38567" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38616" id="CVE-2024-38616" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38616" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52832" id="CVE-2023-52832" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52832" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38562" id="CVE-2024-38562" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38562" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52768" id="CVE-2023-52768" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52768" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52874" id="CVE-2023-52874" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52874" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35979" id="CVE-2024-35979" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35979" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52837" id="CVE-2023-52837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52837" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52855" id="CVE-2023-52855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52855" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36906" id="CVE-2024-36906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36906" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36011" id="CVE-2024-36011" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36011" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36013" id="CVE-2024-36013" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36013" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36012" id="CVE-2024-36012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36012" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36880" id="CVE-2024-36880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36880" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36032" id="CVE-2024-36032" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36032" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26990" id="CVE-2024-26990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26990" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26992" id="CVE-2024-26992" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26992" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36896" id="CVE-2024-36896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36896" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" id="CVE-2024-35905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35905" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36918" id="CVE-2024-36918" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36918" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52882" id="CVE-2023-52882" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52882" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26761" id="CVE-2024-26761" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26761" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36897" id="CVE-2024-36897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36897" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36026" id="CVE-2024-36026" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36026" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36014" id="CVE-2024-36014" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36014" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36885" id="CVE-2024-36885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36885" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36936" id="CVE-2024-36936" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36936" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36898" id="CVE-2024-36898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36898" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36020" id="CVE-2024-36020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36020" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36891" id="CVE-2024-36891" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36891" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36890" id="CVE-2024-36890" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36890" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36029" id="CVE-2024-36029" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36029" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36021" id="CVE-2024-36021" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36021" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26943" id="CVE-2024-26943" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26943" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36018" id="CVE-2024-36018" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36018" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36015" id="CVE-2024-36015" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36015" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36019" id="CVE-2024-36019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36019" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36931" id="CVE-2024-36931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36931" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36928" id="CVE-2024-36928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36928" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36025" id="CVE-2024-36025" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36025" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35814" id="CVE-2024-35814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35814" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36016" id="CVE-2024-36016" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36016" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36894" id="CVE-2024-36894" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36894" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36895" id="CVE-2024-36895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36895" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36893" id="CVE-2024-36893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36893" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36921" id="CVE-2024-36921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36921" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35803" id="CVE-2024-35803" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35803" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35935" id="CVE-2024-35935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35935" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35981" id="CVE-2024-35981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35981" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35804" id="CVE-2024-35804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35804" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35791" id="CVE-2024-35791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35791" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35995" id="CVE-2024-35995" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35995" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27436" id="CVE-2024-27436" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27436" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27057" id="CVE-2024-27057" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27057" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35842" id="CVE-2024-35842" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35842" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35978" id="CVE-2024-35978" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35978" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27398" id="CVE-2024-27398" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27398" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35965" id="CVE-2024-35965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35965" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35966" id="CVE-2024-35966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35966" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35967" id="CVE-2024-35967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35967" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35933" id="CVE-2024-35933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35933" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27416" id="CVE-2024-27416" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27416" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35963" id="CVE-2024-35963" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35963" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27399" id="CVE-2024-27399" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27399" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35850" id="CVE-2024-35850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35850" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35851" id="CVE-2024-35851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35851" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26903" id="CVE-2024-26903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26903" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35997" id="CVE-2024-35997" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35997" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27031" id="CVE-2024-27031" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27031" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26870" id="CVE-2024-26870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26870" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35809" id="CVE-2024-35809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35809" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27388" id="CVE-2024-27388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27388" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26934" id="CVE-2024-26934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26934" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35953" id="CVE-2024-35953" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35953" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26989" id="CVE-2024-26989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26989" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36009" id="CVE-2024-36009" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36009" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35887" id="CVE-2024-35887" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35887" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35982" id="CVE-2024-35982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35982" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35974" id="CVE-2024-35974" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35974" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35972" id="CVE-2024-35972" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35972" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26983" id="CVE-2024-26983" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26983" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35784" id="CVE-2024-35784" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35784" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35849" id="CVE-2024-35849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35849" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26794" id="CVE-2024-26794" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26794" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27080" id="CVE-2024-27080" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27080" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35936" id="CVE-2024-35936" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35936" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27004" id="CVE-2024-27004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27004" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27003" id="CVE-2024-27003" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27003" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27002" id="CVE-2024-27002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27002" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27001" id="CVE-2024-27001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27001" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35794" id="CVE-2024-35794" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35794" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26962" id="CVE-2024-26962" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26962" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35916" id="CVE-2024-35916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35916" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35990" id="CVE-2024-35990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35990" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35833" id="CVE-2024-35833" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35833" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35989" id="CVE-2024-35989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35989" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27027" id="CVE-2024-27027" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27027" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36002" id="CVE-2024-36002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36002" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35836" id="CVE-2024-35836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35836" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35927" id="CVE-2024-35927" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35927" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35928" id="CVE-2024-35928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35928" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35788" id="CVE-2024-35788" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35788" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35799" id="CVE-2024-35799" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35799" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35817" id="CVE-2024-35817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35817" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35795" id="CVE-2024-35795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35795" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27029" id="CVE-2024-27029" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27029" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27400" id="CVE-2024-27400" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27400" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26949" id="CVE-2024-26949" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26949" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26922" id="CVE-2024-26922" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26922" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26986" id="CVE-2024-26986" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26986" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35952" id="CVE-2024-35952" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35952" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35950" id="CVE-2024-35950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35950" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26938" id="CVE-2024-26938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26938" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26937" id="CVE-2024-26937" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26937" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35829" id="CVE-2024-35829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35829" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35786" id="CVE-2024-35786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35786" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27411" id="CVE-2024-27411" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27411" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27008" id="CVE-2024-27008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27008" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35951" id="CVE-2024-35951" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35951" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35932" id="CVE-2024-35932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35932" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26940" id="CVE-2024-26940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26940" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35810" id="CVE-2024-35810" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35810" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35947" id="CVE-2024-35947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35947" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27413" id="CVE-2024-27413" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27413" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35800" id="CVE-2024-35800" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35800" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26973" id="CVE-2024-26973" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26973" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35922" id="CVE-2024-35922" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35922" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35815" id="CVE-2024-35815" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35815" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35973" id="CVE-2024-35973" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35973" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26857" id="CVE-2024-26857" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26857" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35984" id="CVE-2024-35984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35984" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35911" id="CVE-2024-35911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35911" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26854" id="CVE-2024-26854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26854" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35889" id="CVE-2024-35889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35889" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26853" id="CVE-2024-26853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26853" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26988" id="CVE-2024-26988" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26988" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26786" id="CVE-2024-26786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26786" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35847" id="CVE-2024-35847" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35847" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35955" id="CVE-2024-35955" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35955" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26961" id="CVE-2024-26961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26961" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35808" id="CVE-2024-35808" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35808" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26900" id="CVE-2024-26900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26900" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35830" id="CVE-2024-35830" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35830" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35824" id="CVE-2024-35824" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35824" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35907" id="CVE-2024-35907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35907" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35885" id="CVE-2024-35885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35885" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35813" id="CVE-2024-35813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35813" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35901" id="CVE-2024-35901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35901" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35958" id="CVE-2024-35958" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35958" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27432" id="CVE-2024-27432" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27432" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26881" id="CVE-2024-26881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26881" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26855" id="CVE-2024-26855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26855" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35971" id="CVE-2024-35971" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35971" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35796" id="CVE-2024-35796" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35796" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35960" id="CVE-2024-35960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35960" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35961" id="CVE-2024-35961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35961" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35959" id="CVE-2024-35959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35959" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26858" id="CVE-2024-26858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26858" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35835" id="CVE-2024-35835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35835" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35837" id="CVE-2024-35837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35837" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35891" id="CVE-2024-35891" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35891" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35945" id="CVE-2024-35945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35945" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26856" id="CVE-2024-26856" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26856" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35841" id="CVE-2024-35841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35841" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35909" id="CVE-2024-35909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35909" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35915" id="CVE-2024-35915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35915" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27046" id="CVE-2024-27046" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27046" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26868" id="CVE-2024-26868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26868" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35914" id="CVE-2024-35914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35914" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26984" id="CVE-2024-26984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26984" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27062" id="CVE-2024-27062" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27062" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26846" id="CVE-2024-26846" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26846" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27435" id="CVE-2024-27435" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27435" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27030" id="CVE-2024-27030" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27030" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35975" id="CVE-2024-35975" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35975" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35879" id="CVE-2024-35879" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35879" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35878" id="CVE-2024-35878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35878" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35992" id="CVE-2024-35992" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35992" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35986" id="CVE-2024-35986" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35986" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35977" id="CVE-2024-35977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35977" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27412" id="CVE-2024-27412" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27412" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27389" id="CVE-2024-27389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27389" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35940" id="CVE-2024-35940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35940" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26957" id="CVE-2024-26957" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26957" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26935" id="CVE-2024-26935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26935" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35930" id="CVE-2024-35930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35930" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35954" id="CVE-2024-35954" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35954" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26742" id="CVE-2024-26742" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26742" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35904" id="CVE-2024-35904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35904" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27000" id="CVE-2024-27000" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27000" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26999" id="CVE-2024-26999" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26999" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35806" id="CVE-2024-35806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35806" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35819" id="CVE-2024-35819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35819" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26994" id="CVE-2024-26994" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26994" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26866" id="CVE-2024-26866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26866" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35883" id="CVE-2024-35883" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35883" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27028" id="CVE-2024-27028" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27028" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35821" id="CVE-2024-35821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35821" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35812" id="CVE-2024-35812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35812" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26997" id="CVE-2024-26997" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26997" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26963" id="CVE-2024-26963" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26963" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26996" id="CVE-2024-26996" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26996" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27405" id="CVE-2024-27405" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27405" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35825" id="CVE-2024-35825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35825" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35790" id="CVE-2024-35790" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35790" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26995" id="CVE-2024-26995" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26995" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26932" id="CVE-2024-26932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26932" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35924" id="CVE-2024-35924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35924" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35822" id="CVE-2024-35822" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35822" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26964" id="CVE-2024-26964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26964" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35823" id="CVE-2024-35823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35823" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35938" id="CVE-2024-35938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35938" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35811" id="CVE-2024-35811" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35811" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35937" id="CVE-2024-35937" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35937" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35845" id="CVE-2024-35845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35845" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27434" id="CVE-2024-27434" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27434" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35912" id="CVE-2024-35912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35912" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35828" id="CVE-2024-35828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35828" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35789" id="CVE-2024-35789" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35789" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35838" id="CVE-2024-35838" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35838" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27410" id="CVE-2024-27410" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27410" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35946" id="CVE-2024-35946" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35946" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26950" id="CVE-2024-26950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26950" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26951" id="CVE-2024-26951" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26951" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26861" id="CVE-2024-26861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26861" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35875" id="CVE-2024-35875" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35875" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35801" id="CVE-2024-35801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35801" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27067" id="CVE-2024-27067" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27067" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26611" id="CVE-2024-26611" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26611" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35834" id="CVE-2024-35834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35834" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52683" id="CVE-2023-52683" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52683" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52693" id="CVE-2023-52693" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52693" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52697" id="CVE-2023-52697" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52697" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52663" id="CVE-2023-52663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52663" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52657" id="CVE-2023-52657" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52657" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52658" id="CVE-2023-52658" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52658" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52653" id="CVE-2023-52653" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52653" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52676" id="CVE-2023-52676" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52676" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52669" id="CVE-2023-52669" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52669" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52687" id="CVE-2023-52687" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52687" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52695" id="CVE-2023-52695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52695" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52673" id="CVE-2023-52673" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52673" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52671" id="CVE-2023-52671" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52671" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52691" id="CVE-2023-52691" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52691" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52678" id="CVE-2023-52678" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52678" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52694" id="CVE-2023-52694" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52694" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52661" id="CVE-2023-52661" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52661" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52662" id="CVE-2023-52662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52662" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52681" id="CVE-2023-52681" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52681" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52660" id="CVE-2023-52660" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52660" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52664" id="CVE-2023-52664" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52664" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52667" id="CVE-2023-52667" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52667" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52679" id="CVE-2023-52679" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52679" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52675" id="CVE-2023-52675" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52675" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52686" id="CVE-2023-52686" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52686" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52696" id="CVE-2023-52696" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52696" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52690" id="CVE-2023-52690" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52690" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52685" id="CVE-2023-52685" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52685" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52670" id="CVE-2023-52670" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52670" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52654" id="CVE-2023-52654" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52654" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52655" id="CVE-2023-52655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52655" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26919" id="CVE-2024-26919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26919" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27393" id="CVE-2024-27393" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27393" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26933" id="CVE-2024-26933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26933" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52616" id="CVE-2023-52616" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52616" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" id="CVE-2024-26739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26739" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0639" id="CVE-2024-0639" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0639" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27009" id="CVE-2024-27009" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27009" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26959" id="CVE-2024-26959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26959" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27059" id="CVE-2024-27059" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27059" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27071" id="CVE-2024-27071" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27071" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27038" id="CVE-2024-27038" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27038" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27039" id="CVE-2024-27039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27039" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26970" id="CVE-2024-26970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26970" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26969" id="CVE-2024-26969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26969" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26968" id="CVE-2024-26968" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26968" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26966" id="CVE-2024-26966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26966" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26965" id="CVE-2024-26965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26965" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27037" id="CVE-2024-27037" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27037" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27051" id="CVE-2024-27051" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27051" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26974" id="CVE-2024-26974" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26974" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27040" id="CVE-2024-27040" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27040" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27045" id="CVE-2024-27045" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27045" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27044" id="CVE-2024-27044" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27044" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27041" id="CVE-2024-27041" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27041" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27042" id="CVE-2024-27042" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27042" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27023" id="CVE-2024-27023" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27023" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27075" id="CVE-2024-27075" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27075" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27043" id="CVE-2024-27043" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27043" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27074" id="CVE-2024-27074" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27074" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27076" id="CVE-2024-27076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27076" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27073" id="CVE-2024-27073" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27073" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27072" id="CVE-2024-27072" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27072" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27077" id="CVE-2024-27077" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27077" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27078" id="CVE-2024-27078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27078" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27047" id="CVE-2024-27047" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27047" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26956" id="CVE-2024-26956" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26956" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26955" id="CVE-2024-26955" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26955" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26977" id="CVE-2024-26977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26977" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26975" id="CVE-2024-26975" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26975" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27054" id="CVE-2024-27054" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27054" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26931" id="CVE-2024-26931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26931" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26929" id="CVE-2024-26929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26929" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26930" id="CVE-2024-26930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26930" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27068" id="CVE-2024-27068" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27068" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27060" id="CVE-2024-27060" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27060" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27048" id="CVE-2024-27048" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27048" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27052" id="CVE-2024-27052" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27052" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27391" id="CVE-2024-27391" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27391" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27053" id="CVE-2024-27053" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27053" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52650" id="CVE-2023-52650" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52650" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52649" id="CVE-2023-52649" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52649" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52648" id="CVE-2023-52648" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52648" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52647" id="CVE-2023-52647" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52647" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48669" id="CVE-2022-48669" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48669" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26978" id="CVE-2024-26978" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26978" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26972" id="CVE-2024-26972" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26972" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26981" id="CVE-2024-26981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26981" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26927" id="CVE-2024-26927" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26927" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26890" id="CVE-2024-26890" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26890" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26907" id="CVE-2024-26907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26907" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26916" id="CVE-2024-26916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26916" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26877" id="CVE-2024-26877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26877" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26880" id="CVE-2024-26880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26880" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26913" id="CVE-2024-26913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26913" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26914" id="CVE-2024-26914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26914" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26915" id="CVE-2024-26915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26915" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26893" id="CVE-2024-26893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26893" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26582" id="CVE-2024-26582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26582" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26897" id="CVE-2024-26897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26897" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26892" id="CVE-2024-26892" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26892" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26895" id="CVE-2024-26895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26895" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26760" id="CVE-2024-26760" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26760" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26898" id="CVE-2024-26898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26898" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41014" id="CVE-2024-41014" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41014" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41013" id="CVE-2024-41013" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41013" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41017" id="CVE-2024-41017" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41017" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40972" id="CVE-2024-40972" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40972" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39276" id="CVE-2024-39276" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39276" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40925" id="CVE-2024-40925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40925" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40998" id="CVE-2024-40998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40998" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41011" id="CVE-2024-41011" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41011" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39494" id="CVE-2024-39494" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39494" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39496" id="CVE-2024-39496" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39496" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41091" id="CVE-2024-41091" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41091" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41090" id="CVE-2024-41090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41090" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40999" id="CVE-2024-40999" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40999" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40966" id="CVE-2024-40966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40966" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40975" id="CVE-2024-40975" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40975" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40970" id="CVE-2024-40970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40970" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40947" id="CVE-2024-40947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40947" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40908" id="CVE-2024-40908" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40908" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40960" id="CVE-2024-40960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40960" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40935" id="CVE-2024-40935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40935" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40961" id="CVE-2024-40961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40961" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39504" id="CVE-2024-39504" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39504" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41006" id="CVE-2024-41006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41006" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40937" id="CVE-2024-40937" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40937" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39507" id="CVE-2024-39507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39507" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40940" id="CVE-2024-40940" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40940" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40928" id="CVE-2024-40928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40928" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26944" id="CVE-2024-26944" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26944" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40923" id="CVE-2024-40923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40923" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40931" id="CVE-2024-40931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40931" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40919" id="CVE-2024-40919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40919" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39487" id="CVE-2024-39487" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39487" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35908" id="CVE-2024-35908" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35908" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35899" id="CVE-2024-35899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35899" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35934" id="CVE-2024-35934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35934" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35893" id="CVE-2024-35893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35893" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40901" id="CVE-2024-40901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40901" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39472" id="CVE-2024-39472" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39472" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40953" id="CVE-2024-40953" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40953" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27404" id="CVE-2024-27404" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27404" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27020" id="CVE-2024-27020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27020" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27019" id="CVE-2024-27019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27019" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40948" id="CVE-2024-40948" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40948" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35890" id="CVE-2024-35890" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35890" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36902" id="CVE-2024-36902" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36902" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36946" id="CVE-2024-36946" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36946" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38586" id="CVE-2024-38586" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38586" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39468" id="CVE-2024-39468" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39468" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40906" id="CVE-2024-40906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40906" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27012" id="CVE-2024-27012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27012" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39498" id="CVE-2024-39498" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39498" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39502" id="CVE-2024-39502" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39502" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27016" id="CVE-2024-27016" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27016" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36901" id="CVE-2024-36901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36901" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36004" id="CVE-2024-36004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36004" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27025" id="CVE-2024-27025" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27025" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35853" id="CVE-2024-35853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35853" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35854" id="CVE-2024-35854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35854" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27402" id="CVE-2024-27402" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27402" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52435" id="CVE-2023-52435" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52435" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27065" id="CVE-2024-27065" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27065" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27015" id="CVE-2024-27015" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27015" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27064" id="CVE-2024-27064" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27064" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26663" id="CVE-2024-26663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26663" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47210" id="CVE-2023-47210" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47210" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52775" id="CVE-2023-52775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52775" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38558" id="CVE-2024-38558" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38558" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39490" id="CVE-2024-39490" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39490" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26826" id="CVE-2024-26826" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26826" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26615" id="CVE-2024-26615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26615" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35942" id="CVE-2024-35942" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35942" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26691" id="CVE-2024-26691" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26691" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36909" id="CVE-2024-36909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36909" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36910" id="CVE-2024-36910" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36910" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36911" id="CVE-2024-36911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36911" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36912" id="CVE-2024-36912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36912" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36913" id="CVE-2024-36913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36913" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26665" id="CVE-2024-26665" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26665" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38659" id="CVE-2024-38659" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38659" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52751" id="CVE-2023-52751" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52751" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39482" id="CVE-2024-39482" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39482" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39474" id="CVE-2024-39474" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39474" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26636" id="CVE-2024-26636" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26636" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26635" id="CVE-2024-26635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26635" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38598" id="CVE-2024-38598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38598" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36003" id="CVE-2024-36003" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36003" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38604" id="CVE-2024-38604" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38604" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26641" id="CVE-2024-26641" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26641" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26863" id="CVE-2024-26863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26863" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26633" id="CVE-2024-26633" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26633" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26623" id="CVE-2024-26623" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26623" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26785" id="CVE-2024-26785" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26785" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26734" id="CVE-2024-26734" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26734" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35805" id="CVE-2024-35805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35805" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39371" id="CVE-2024-39371" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39371" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52846" id="CVE-2023-52846" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52846" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38610" id="CVE-2024-38610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38610" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37354" id="CVE-2024-37354" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37354" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36919" id="CVE-2024-36919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36919" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38559" id="CVE-2024-38559" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38559" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38570" id="CVE-2024-38570" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38570" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36904" id="CVE-2024-36904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36904" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52881" id="CVE-2023-52881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52881" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37353" id="CVE-2024-37353" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37353" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39301" id="CVE-2024-39301" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39301" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35843" id="CVE-2024-35843" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35843" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37078" id="CVE-2024-37078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37078" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35247" id="CVE-2024-35247" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35247" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36479" id="CVE-2024-36479" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36479" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37021" id="CVE-2024-37021" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37021" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36281" id="CVE-2024-36281" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36281" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38580" id="CVE-2024-38580" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38580" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36478" id="CVE-2024-36478" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36478" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38636" id="CVE-2024-38636" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38636" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38661" id="CVE-2024-38661" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38661" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38564" id="CVE-2024-38564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38564" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38566" id="CVE-2024-38566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38566" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38560" id="CVE-2024-38560" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38560" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36978" id="CVE-2024-36978" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36978" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36917" id="CVE-2024-36917" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36917" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36974" id="CVE-2024-36974" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36974" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38627" id="CVE-2024-38627" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38627" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38603" id="CVE-2024-38603" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38603" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38553" id="CVE-2024-38553" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38553" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38555" id="CVE-2024-38555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38555" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38556" id="CVE-2024-38556" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38556" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38557" id="CVE-2024-38557" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38557" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38608" id="CVE-2024-38608" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38608" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38597" id="CVE-2024-38597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38597" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38594" id="CVE-2024-38594" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38594" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38569" id="CVE-2024-38569" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38569" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38568" id="CVE-2024-38568" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38568" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26814" id="CVE-2024-26814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26814" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26813" id="CVE-2024-26813" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26813" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36945" id="CVE-2024-36945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36945" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36923" id="CVE-2024-36923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36923" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36971" id="CVE-2024-36971" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36971" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27414" id="CVE-2024-27414" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27414" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35900" id="CVE-2024-35900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35900" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35886" id="CVE-2024-35886" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35886" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36024" id="CVE-2024-36024" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36024" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36903" id="CVE-2024-36903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36903" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36914" id="CVE-2024-36914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36914" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36899" id="CVE-2024-36899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36899" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35807" id="CVE-2024-35807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35807" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52622" id="CVE-2023-52622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52622" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52843" id="CVE-2023-52843" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52843" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35898" id="CVE-2024-35898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35898" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36915" id="CVE-2024-36915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36915" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36017" id="CVE-2024-36017" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36017" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36882" id="CVE-2024-36882" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36882" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36916" id="CVE-2024-36916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36916" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36900" id="CVE-2024-36900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36900" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52787" id="CVE-2023-52787" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52787" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35925" id="CVE-2024-35925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35925" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52786" id="CVE-2023-52786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52786" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36934" id="CVE-2024-36934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36934" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36935" id="CVE-2024-36935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36935" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36937" id="CVE-2024-36937" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36937" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52672" id="CVE-2023-52672" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52672" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52845" id="CVE-2023-52845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52845" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36005" id="CVE-2024-36005" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36005" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26845" id="CVE-2024-26845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26845" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35892" id="CVE-2024-35892" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35892" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35848" id="CVE-2024-35848" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35848" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35884" id="CVE-2024-35884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35884" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35857" id="CVE-2024-35857" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35857" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52735" id="CVE-2023-52735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52735" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26921" id="CVE-2024-26921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26921" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35926" id="CVE-2024-35926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35926" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35976" id="CVE-2024-35976" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35976" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36938" id="CVE-2024-36938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36938" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36008" id="CVE-2024-36008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36008" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35998" id="CVE-2024-35998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35998" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52757" id="CVE-2023-52757" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52757" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36957" id="CVE-2024-36957" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36957" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26925" id="CVE-2024-26925" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26925" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26625" id="CVE-2024-26625" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26625" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36030" id="CVE-2024-36030" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36030" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52698" id="CVE-2023-52698" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52698" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26822" id="CVE-2024-26822" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26822" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52434" id="CVE-2023-52434" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52434" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26860" id="CVE-2024-26860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26860" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52772" id="CVE-2023-52772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52772" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27431" id="CVE-2024-27431" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27431" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35860" id="CVE-2024-35860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35860" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35964" id="CVE-2024-35964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35964" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" id="CVE-2023-0160" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0160" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35895" id="CVE-2024-35895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35895" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26928" id="CVE-2024-26928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26928" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35999" id="CVE-2024-35999" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35999" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35861" id="CVE-2024-35861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35861" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35862" id="CVE-2024-35862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35862" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35863" id="CVE-2024-35863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35863" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35865" id="CVE-2024-35865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35865" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35864" id="CVE-2024-35864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35864" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35867" id="CVE-2024-35867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35867" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35868" id="CVE-2024-35868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35868" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35866" id="CVE-2024-35866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35866" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35869" id="CVE-2024-35869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35869" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35870" id="CVE-2024-35870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35870" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26692" id="CVE-2024-26692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26692" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27036" id="CVE-2024-27036" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27036" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35903" id="CVE-2024-35903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35903" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35931" id="CVE-2024-35931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35931" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35877" id="CVE-2024-35877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35877" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35880" id="CVE-2024-35880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35880" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35831" id="CVE-2024-35831" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35831" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35969" id="CVE-2024-35969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35969" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35852" id="CVE-2024-35852" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35852" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36006" id="CVE-2024-36006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36006" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36007" id="CVE-2024-36007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36007" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35872" id="CVE-2024-35872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35872" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52771" id="CVE-2023-52771" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52771" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35827" id="CVE-2024-35827" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35827" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27408" id="CVE-2024-27408" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27408" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35943" id="CVE-2024-35943" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35943" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35921" id="CVE-2024-35921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35921" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52860" id="CVE-2023-52860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52860" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35991" id="CVE-2024-35991" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35991" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27418" id="CVE-2024-27418" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27418" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27417" id="CVE-2024-27417" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27417" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52656" id="CVE-2023-52656" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52656" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35917" id="CVE-2024-35917" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35917" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52674" id="CVE-2023-52674" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52674" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52680" id="CVE-2023-52680" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52680" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52692" id="CVE-2023-52692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52692" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35944" id="CVE-2024-35944" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35944" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26923" id="CVE-2024-26923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26923" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52659" id="CVE-2023-52659" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52659" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52699" id="CVE-2023-52699" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52699" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21823" id="CVE-2024-21823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21823" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26828" id="CVE-2024-26828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26828" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27395" id="CVE-2024-27395" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27395" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52483" id="CVE-2023-52483" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52483" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27396" id="CVE-2024-27396" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27396" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26632" id="CVE-2024-26632" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26632" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27401" id="CVE-2024-27401" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27401" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26775" id="CVE-2024-26775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26775" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26958" id="CVE-2024-26958" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26958" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26643" id="CVE-2024-26643" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26643" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52618" id="CVE-2023-52618" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52618" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6238" id="CVE-2023-6238" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6238" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26946" id="CVE-2024-26946" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26946" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26945" id="CVE-2024-26945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26945" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26679" id="CVE-2024-26679" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26679" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26791" id="CVE-2024-26791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26791" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52641" id="CVE-2023-52641" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52641" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26939" id="CVE-2024-26939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26939" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26865" id="CVE-2024-26865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26865" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26862" id="CVE-2024-26862" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26862" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26673" id="CVE-2024-26673" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26673" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26993" id="CVE-2024-26993" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26993" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26726" id="CVE-2024-26726" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26726" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27013" id="CVE-2024-27013" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27013" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27014" id="CVE-2024-27014" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27014" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26948" id="CVE-2024-26948" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26948" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27056" id="CVE-2024-27056" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27056" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26991" id="CVE-2024-26991" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26991" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26960" id="CVE-2024-26960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26960" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52652" id="CVE-2023-52652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52652" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27022" id="CVE-2024-27022" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27022" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23848" id="CVE-2024-23848" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23848" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26982" id="CVE-2024-26982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26982" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26899" id="CVE-2024-26899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26899" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26878" id="CVE-2024-26878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26878" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26901" id="CVE-2024-26901" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26901" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26671" id="CVE-2024-26671" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26671" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26638" id="CVE-2024-26638" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26638" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26772" id="CVE-2024-26772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26772" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26852" id="CVE-2024-26852" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26852" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26909" id="CVE-2024-26909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26909" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26674" id="CVE-2024-26674" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26674" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26906" id="CVE-2024-26906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26906" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26816" id="CVE-2024-26816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26816" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26832" id="CVE-2024-26832" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26832" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26783" id="CVE-2024-26783" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26783" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52635" id="CVE-2023-52635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52635" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26883" id="CVE-2024-26883" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26883" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26884" id="CVE-2024-26884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26884" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26885" id="CVE-2024-26885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26885" type="cve" />
      <reference href="https://jira.suse.com/browse/PED-542" id="PED-542" title="https://jira.suse.com/browse/PED-542" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8111" id="PED-8111" title="https://jira.suse.com/browse/PED-8111" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8240" id="PED-8240" title="https://jira.suse.com/browse/PED-8240" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8491" id="PED-8491" title="https://jira.suse.com/browse/PED-8491" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8570" id="PED-8570" title="https://jira.suse.com/browse/PED-8570" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8644" id="PED-8644" title="https://jira.suse.com/browse/PED-8644" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8645" id="PED-8645" title="https://jira.suse.com/browse/PED-8645" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8649" id="PED-8649" title="https://jira.suse.com/browse/PED-8649" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8688" id="PED-8688" title="https://jira.suse.com/browse/PED-8688" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8701" id="PED-8701" title="https://jira.suse.com/browse/PED-8701" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8954" id="PED-8954" title="https://jira.suse.com/browse/PED-8954" type="jira" />
    </references>
    <description>The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
- CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
- CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
- CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
- CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
- CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
- CVE-2024-40998: ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super() (bsc#1227866).
- CVE-2024-41011: drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (bsc#1228114).
- CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
- CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
- CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
- CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
- CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
- CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
- CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
- CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
- CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
- CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
- CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
- CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
- CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
- CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
- CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
- CVE-2024-40937: gve: Clear napi-&gt;skb before dev_kfree_skb_any() (bsc#1227836).
- CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
- CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
- CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
- CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
- CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
- CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
- CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779).
- CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
- CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
- CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
- CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
- CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
- CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
- CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
- CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
- CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
- CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
- CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
- CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
- CVE-2024-35890: gro: fix ownership transfer (bsc#1224516).
- CVE-2024-36902: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (bsc#1225719).
- CVE-2024-36946: phonet: fix rtm_phonet_notify() skb allocation (bsc#1225851).
- CVE-2024-38586: r8169: Fix possible ring buffer corruption on fragmented Tx packets (bsc#1226750).
- CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103).
- CVE-2024-40906: net/mlx5: Always stop health timer during driver removal (bsc#1227763).
- CVE-2024-27012: netfilter: nf_tables: restore set elements when delete set fails (bsc#1223804).
- CVE-2024-39498: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2 (bsc#1227723)
- CVE-2024-39502: ionic: fix use after netif_napi_del() (bsc#1227755).
- CVE-2024-27016: netfilter: flowtable: validate pppoe header (bsc#1223807).
- CVE-2024-36901: ipv6: prevent NULL dereference in ip6_output() (bsc#1225711)
- CVE-2024-36004: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (bsc#1224545)
- CVE-2024-27025: nbd: null check for nla_nest_start (bsc#1223778)
- CVE-2024-35853: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (bsc#1224604).
- CVE-2024-35854: Fixed possible use-after-free during rehash (bsc#1224636).
- CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414).
- CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
- CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates (bsc#1223836).
- CVE-2024-27015: netfilter: flowtable: incorrect pppoe tuple (bsc#1223806).
- CVE-2024-27064: netfilter: nf_tables: Fix a memory leak in nf_tables_updchain (bsc#1223740).
- CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326).
- CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601, bsc#1225600).
- CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
- CVE-2024-38558: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (bsc#1226783).
- CVE-2024-39490: ipv6: sr: fix missing sk_buff release in seg6_input_core (bsc#1227626).
- CVE-2024-26826: mptcp: fix data re-injection from stale subflow (bsc#1223010).
- CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
- CVE-2024-35942: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain (bsc#1224589).
- CVE-2024-26691: KVM: arm64: Fix circular locking dependency (bsc#1222463).
- CVE-2024-36909: Drivers: hv: vmbus: Do not free ring buffers that couldn't be re-encrypted (bsc#1225744).
- CVE-2024-36910: uio_hv_generic: Do not free decrypted memory (bsc#1225717).
- CVE-2024-36911: hv_netvsc: Do not free decrypted memory (bsc#1225745).
- CVE-2024-36912: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl (bsc#1225752).
- CVE-2024-36913: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails (bsc#1225753).
- CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328).
- CVE-2024-38659: enic: Validate length of nl attributes in enic_set_vf_port (bsc#1226883).
- CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
- CVE-2024-39482: bcache: fix variable length array abuse in btree_iter (bsc#1227447).
- CVE-2024-39474: mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL (bsc#1227434).
- CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659).
- CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656).
- CVE-2024-38598: md: fix resync softlockup when bitmap size is less than array size (bsc#1226757).
- CVE-2024-36003: ice: fix LAG and VF lock dependency in ice_reset_vf() (bsc#1224544).
- CVE-2024-38604: block: refine the EOF check in blkdev_iomap_begin (bsc#1226866).
- CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654).
- CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021).
- CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647).
- CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
- CVE-2024-26785: iommufd: Fix protection fault in iommufd_test_syz_conv_iova (bsc#1222779).
- CVE-2024-26734: devlink: fix possible use-after-free and memory leaks in devlink_init() (bsc#1222438).
- CVE-2024-35805: dm snapshot: fix lockup in dm_exception_table_exit (bsc#1224743).
- CVE-2024-39371: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990).
- CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
- CVE-2024-38610: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (bsc#1226758).
- CVE-2024-37354: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101).
- CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767).
- CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
- CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775).
- CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
- CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
- CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
- CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994).
- CVE-2024-35843: iommu/vt-d: Use device rbtree in iopf reporting path (bsc#1224751).
- CVE-2024-37078: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066).
- CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
- CVE-2024-36479: fpga: bridge: add owner module and take its refcount (bsc#1226949).
- CVE-2024-37021: fpga: manager: add owner module and take its refcount (bsc#1226950).
- CVE-2024-36281: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules (bsc#1226799).
- CVE-2024-38580: epoll: be better about file lifetimes (bsc#1226610).
- CVE-2024-36478: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (bsc#1226841).
- CVE-2024-38636: f2fs: multidev: fix to recognize valid zero block address (bsc#1226879).
- CVE-2024-38661: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996).
- CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (bsc#1226789).
- CVE-2024-38566: bpf: Fix verifier assumptions about socket-&gt;sk (bsc#1226790).
- CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).
- CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
- CVE-2024-36917: block: fix overflow in blk_ioctl_discard() (bsc#1225770).
- CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).
- CVE-2024-38627: stm class: Fix a double free in stm_register_device() (bsc#1226857).
- CVE-2024-38603: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842).
- CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744).
- CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
- CVE-2024-38556: net/mlx5: Add a timeout to acquire the command queue semaphore (bsc#1226774).
- CVE-2024-38557: net/mlx5: Reload only IB representors upon lag disable/enable (bsc#1226781).
- CVE-2024-38608: net/mlx5e: Fix netif state handling (bsc#1226746).
- CVE-2024-38597: eth: sungem: remove .ndo_poll_controller to avoid deadlocks (bsc#1226749).
- CVE-2024-38594: net: stmmac: move the EST lock to struct stmmac_priv (bsc#1226734).
- CVE-2024-38569: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group (bsc#1226772).
- CVE-2024-38568: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (bsc#1226771).
- CVE-2024-26814: vfio/fsl-mc: Block calling interrupt handler without trigger (bsc#1222810).
- CVE-2024-26813: vfio/platform: Create persistent IRQ handlers (bsc#1222809).
- CVE-2024-36945: net/smc: fix neighbour and rtable leak in smc_ib_find_route() (bsc#1225823).
- CVE-2024-36923: fs/9p: fix uninitialized values during inode evict (bsc#1225815).
- CVE-2024-36971: net: fix __dst_negative_advice() race (bsc#1226145).
- CVE-2024-27414: rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (bsc#1224439).
- CVE-2024-35900: netfilter: nf_tables: reject new basechain after table flag update (bsc#1224497).
- CVE-2024-35886: ipv6: Fix infinite recursion in fib6_dump_done() (bsc#1224670).
- CVE-2024-36024: drm/amd/display: Disable idle reallow as part of command/gpint execution (bsc#1225702).
- CVE-2024-36903: ipv6: Fix potential uninit-value access in __ip6_make_skb() (bsc#1225741).
- CVE-2024-36914: drm/amd/display: Skip on writeback when it's not applicable (bsc#1225757).
- CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225737).
- CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
- CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
- CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
- CVE-2024-35898: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (bsc#1224498).
- CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
- CVE-2024-36017: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (bsc#1225681).
- CVE-2024-36882: mm: use memalloc_nofs_save() in page_cache_ra_order() (bsc#1225723).
- CVE-2024-36916: blk-iocost: avoid out of bounds shift (bsc#1225759).
- CVE-2024-36900: net: hns3: fix kernel crash when devlink reload during initialization (bsc#1225726).
- CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
- CVE-2024-35925: block: prevent division by zero in blk_rq_stat_sum() (bsc#1224661).
- CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
- CVE-2024-36934: bna: ensure the copied buf is NUL terminated (bsc#1225760).
- CVE-2024-36935: ice: ensure the copied buf is NUL terminated (bsc#1225763).
- CVE-2024-36937: xdp: use flags field to disambiguate broadcast redirect (bsc#1225834).
- CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
- CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
- CVE-2024-36005: netfilter: nf_tables: honor table dormant flag from netdev release event path (bsc#1224539).
- CVE-2024-26845: scsi: target: core: Add TMF to tmr_list handling (bsc#1223018).
- CVE-2024-35892: net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() (bsc#1224515).
- CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
- CVE-2024-35884: udp: do not accept non-tunnel GSO skbs landing in a tunnel (bsc#1224520).
- CVE-2024-35857: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619).
- CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
- CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
- CVE-2024-35926: crypto: iaa - Fix async_disable descriptor leak (bsc#1224655).
- CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (bsc#1224575).
- CVE-2024-36938: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761).
- CVE-2024-36008: ipv4: check for NULL idev in ip_route_use_hint() (bsc#1224540).
- CVE-2024-35998: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549).
- CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
- CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762).
- CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
- CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
- CVE-2024-36030: Fixed the double free in rvu_npc_freemem() (bsc#1225712)
- CVE-2023-52698: Fixed memory leak in netlbl_calipso_add_pass() (bsc#1224621)
- CVE-2024-26822: Set correct id, uid and cruid for multiuser  automounts (bsc#1223011).
- CVE-2023-52434: Fixed potential OOBs in smb2_parse_contexts()  (bsc#1220148).
- CVE-2024-26860: Fixed a memory leak when rechecking the data (bsc#1223077).
- CVE-2023-52772: Fixed use-after-free in unix_stream_read_actor()  (bsc#1224989).
- CVE-2024-27431: Fixed Zero-initialise xdp_rxq_info struct before running  XDP program (bsc#1224718).
- CVE-2024-35860: Struct bpf_link and bpf_link_ops kABI workaround  (bsc#1224531).
- CVE-2024-35964: Fixed not validating setsockopt user input  (bsc#1224581).
- CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657).
- CVE-2024-35895: Fixed lock inversion deadlock in map delete elem (bsc#1224511).
- CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
- CVE-2024-35999: Fixed missing lock when picking channel (bsc#1224550).
- CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
- CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
- CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
- CVE-2024-35865: Fixed potential UAF in smb2_is_valid_oplock_break() (bsc#1224668).
- CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
- CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
- CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
- CVE-2024-35866: Fixed potential UAF in cifs_dump_full_key()  (bsc#1224667).
- CVE-2024-35869: smb: client: guarantee refcounted children from parent session (bsc#1224679).
- CVE-2024-35870: Fixed UAF in smb2_reconnect_server() (bsc#1224672).
- CVE-2024-26692: Fixed regression in writes when non-standard maximum write  size negotiated (bsc#1222464).
- CVE-2024-27036: Fixed writeback data corruption (bsc#1223810).
- CVE-2024-35903: Fixed IP after emitting call depth accounting (bsc#1224493).
- CVE-2024-35931: Fixed PCI error slot reset during RAS recovery (bsc#1224652).
- CVE-2024-35877: Fixed VM_PAT handling in COW mappings (bsc#1224525).
- CVE-2024-35880: io_uring/kbuf: hold io_buffer_list reference over mmap (bsc#1224523).
- CVE-2024-35831: io_uring: Fix release of pinned pages when __io_uaddr_map fails (bsc#1224698).
- CVE-2024-35969: Fixed race condition between ipv6_get_ifaddr and ipv6_del_addr (bsc#1224580).
- CVE-2024-35852: Fixed memory leak when canceling rehash  work (bsc#1224502).
- CVE-2024-36006: Fixed incorrect list API usage  (bsc#1224541).
- CVE-2024-36007: Fixed warning during rehash  (bsc#1224543).
- CVE-2024-35872: Fixed GUP-fast succeeding on secretmem folios  (bsc#1224530).
- CVE-2023-52771: Fixed delete_endpoint() vs parent unregistration race  (bsc#1225007).
- CVE-2024-35827: io_uring/net: fix overflow check in io_recvmsg_mshot_prep() (bsc#1224606).
- CVE-2024-27408: Fixed race condition in dmaengine w-edma/eDMA (bsc#1224430).
- CVE-2024-35943: Fixed a null pointer dereference in omap_prm_domain_init (bsc#1224649).
- CVE-2024-35921: Fixed oops when HEVC init fails (bsc#1224477).
- CVE-2023-52860: Fixed null pointer dereference in hisi_hns3 (bsc#1224936).
- CVE-2024-35991: Fixed kABI workaround for struct idxd_evl (bsc#1224553).
- CVE-2024-27418: Fixed memory leak in mctp_local_output (bsc#1224720)
- CVE-2024-27417: Fixed potential "struct net" leak in inet6_rtm_getaddr()  (bsc#1224721)
- CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
- CVE-2024-35917: Fixed Fix bpf_plt pointer arithmetic (bsc#1224481).
- CVE-2023-52674: Add clamp() in scarlett2_mixer_ctl_put()  (bsc#1224727).
- CVE-2023-52680: Fixed missing error checks to *_ctl_get()  (bsc#1224608).
- CVE-2023-52692: Fixed missing error check to  scarlett2_usb_set_config() (bsc#1224628).
- CVE-2024-35944: Fixed memcpy() run-time warning in dg_dispatch_as_host() (bsc#1224648).
- CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
- CVE-2023-52659: Fixed to pfn_to_kaddr() not treated as a 64-bit type (bsc#1224442).
- CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).
- CVE-2024-21823: Fixed safety flag to struct ends (bsc#1223625).
- CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
- CVE-2024-27395: Fixed Use-After-Free in ovs_ct_exit (bsc#1224098).
- CVE-2023-52483: mctp: perform route lookups under a RCU read-side lock (bsc#1220738).
- CVE-2024-27396: Fixed Use-After-Free in gtp_dellink (bsc#1224096).
- CVE-2024-26632: Fixed iterating over an empty bio with  bio_for_each_folio_all (bsc#1221635).
- CVE-2024-27401: Fixed user_length taken into account when fetching packet contents (bsc#1224181).
- CVE-2024-26775: Fixed potential deadlock at set_capacity (bsc#1222627).
- CVE-2024-26958: Fixed UAF in direct writes (bsc#1223653).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous  set with timeout (bsc#1221829).
- CVE-2023-52618: Fixed string overflow in block/rnbd-srv (bsc#1221615).
- CVE-2023-6238: Fixed kcalloc() arguments order (bsc#1217384).
- CVE-2024-26946: Fixed copy_from_kernel_nofault() to read from unsafe  address (bsc#1223669).
- CVE-2024-26945: Fixed nr_cpus &amp;lt; nr_iaa case (bsc#1223732).
- CVE-2024-26679: Fixed read sk-&gt;sk_family once in inet_recv_error() (bsc#1222385).
- CVE-2024-26791: Fixed properly validate device names in btrfs (bsc#1222793)
- CVE-2023-52641: Fixed NULL ptr dereference checking at the end of attr_allocate_frame() (bsc#1222303)
- CVE-2024-26939: Fixed UAF on destroy against retire race (bsc#1223679).
- CVE-2024-26865: rds: tcp: Fix use-after-free of net in reqsk_timer_handler() (bsc#1223062).
- CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
- CVE-2024-26673: Fixed netfilter/nft_ct layer 3 and 4 protocol sanitization (bsc#1222368).
- CVE-2024-26993: Fixed fs/sysfs reference leak in sysfs_break_active_protection() (bsc#1223693).
- CVE-2024-26726: Fixed invalid drop extent_map for free space inode on write error (bsc#1222532)
- CVE-2024-27013: Fixed tun limit printing rate when illegal packet received by tun device (bsc#1223745).
- CVE-2024-27014: Fixed net/mlx5e to prevent deadlock while disabling aRFS (bsc#1223735).
- CVE-2024-26948: Fixed drm/amd/display by adding dc_state NULL check in dc_state_release (bsc#1223664).
- CVE-2024-27056: Fixed wifi/iwlwifi/mvm to ensure offloading TID queue exists (bsc#1223822).
- CVE-2024-26991: Fixed overflow lpage_info when checking  attributes (bsc#1223695).
- CVE-2024-26960: Fixed mm/swap race between free_swap_and_cache() and swapoff() (bsc#1223655).
- CVE-2023-52652: Fixed NTB for possible name leak in ntb_register_device() (bsc#1223686).
- CVE-2024-27022: Fixed linking file vma until vma is fully initialized  (bsc#1223774).
- CVE-2024-23848: Fixed media/cec for possible use-after-free in cec_queue_msg_fh (bsc#1219104).
- CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
- CVE-2024-26899: Fixed deadlock between bd_link_disk_holder and partition  scan (bsc#1223045).
- CVE-2024-26878: Fixed quota for potential NULL pointer dereference (bsc#1223060).
- CVE-2024-26901: Fixed do_sys_name_to_handle() to use kzalloc() to prevent kernel-infoleak (bsc#1223198).
- CVE-2024-26671: Fixed blk-mq IO hang from sbitmap wakeup race (bsc#1222357).
- CVE-2024-26638: Fixed uninitialize struct msghdr completely (bsc#1221649).
- CVE-2024-26772: Fixed ext4 to avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (bsc#1222613).
- CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
- CVE-2024-26909: Fixed drm bridge use-after-free  (bsc#1223143).
- CVE-2024-26674: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups (bsc#1222378).
- CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202).
- CVE-2024-26816: Fixed relocations in .notes section when building with CONFIG_XEN_PV=y (bsc#1222624).
- CVE-2024-26832: Fixed missing folio cleanup in writeback race path  (bsc#1223007).
- CVE-2024-26783: Fixed mm/vmscan bug when calling wakeup_kswapd() with a wrong zone index (bsc#1222615).
- CVE-2023-52635: Fixed PM/devfreq to synchronize devfreq_monitor_[start/stop] (bsc#1222294).
- CVE-2024-26883: Fixed bpf stackmap overflow check on 32-bit arches (bsc#1223035).
- CVE-2024-26884: Fixed bpf hashtab overflow check on 32-bit arches (bsc#1223189).
- CVE-2024-26885: Fixed bpf DEVMAP_HASH overflow check on 32-bit arches (bsc#1223190).

The following non-security bugs were fixed:

- 9p: add missing locking around taking dentry fid list (git-fixes)
- ACPI: CPPC: Fix access width used for PCC registers (git-fixes).
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro (git-fixes).
- ACPI: CPPC: Use access_width over bit_width for system memory accesses (stable-fixes).
- ACPI: EC: Abort address space access upon error (stable-fixes).
- ACPI: EC: Avoid returning AE_OK on errors in address space handler (stable-fixes).
- ACPI: EC: Evaluate orphan _REG under EC device (git-fixes).
- ACPI: EC: Install address space handler at the namespace root (stable-fixes).
- ACPI: Fix Generic Initiator Affinity _OSC bit (git-fixes).
- ACPI: LPSS: Advertise number of chip selects via property (git-fixes).
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC (git-fixes).
- ACPI: bus: Indicate support for _TFP thru _OSC (git-fixes).
- ACPI: bus: Indicate support for the Generic Event Device thru _OSC (git-fixes).
- ACPI: disable -Wstringop-truncation (git-fixes).
- ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (git-fixes).
- ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx (stable-fixes).
- ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7 (bsc#1217750).
- ACPI: x86: Add PNP_UART1_SKIP quirk for Lenovo Blade2 tablets (stable-fixes).
- ACPI: x86: Force StorageD3Enable on more products (stable-fixes).
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (git-fixes).
- ALSA/hda: intel-dsp-config: Document AVS as dsp_driver option (git-fixes).
- ALSA/hda: intel-dsp-config: reduce log verbosity (git-fixes).
- ALSA: Fix deadlocks with kctl removals at disconnection (stable-fixes).
- ALSA: PCM: Allow resume only for suspended streams (stable-fixes).
- ALSA: core: Fix NULL module pointer assignment at card init (git-fixes).
- ALSA: core: Remove debugfs at disconnection (git-fixes).
- ALSA: dmaengine: Synchronize dma channel after drop() (stable-fixes).
- ALSA: dmaengine_pcm: terminate dmaengine before synchronize (stable-fixes).
- ALSA: emux: improve patch ioctl data validation (stable-fixes).
- ALSA: hda/conexant: Mute speakers at suspend / shutdown (bsc#1228269).
- ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup (git-fixes).
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown (bsc#1228269).
- ALSA: hda/realtek - Set GPIO3 to default at S4 state for Thinkpad with ALC1318 (stable-fixes).
- ALSA: hda/realtek - fixed headset Mic not show (stable-fixes).
- ALSA: hda/realtek: Add more codec ID to no shutup pins list (stable-fixes).
- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14AHP9 (stable-fixes).
- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ARP8 (stable-fixes).
- ALSA: hda/realtek: Add quirks for HP Omen models using CS35L41 (stable-fixes).
- ALSA: hda/realtek: Add quirks for Lenovo 13X (stable-fixes).
- ALSA: hda/realtek: Add support for ASUS Zenbook 2024 HN7306W (stable-fixes).
- ALSA: hda/realtek: Adjust G814JZR to use SPI init for amp (git-fixes).
- ALSA: hda/realtek: Drop doubly quirk entry for 103c:8a2e (git-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP 250 G7 (stable-fixes).
- ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 (stable-fixes).
- ALSA: hda/realtek: Enable headset mic on IdeaPad 330-17IKB 81DM (git-fixes).
- ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (stable-fixes).
- ALSA: hda/realtek: Fix build error without CONFIG_PM (stable-fixes).
- ALSA: hda/realtek: Fix conflicting PCI SSID 17aa:386f for Lenovo Legion models (bsc#1223462).
- ALSA: hda/realtek: Fix conflicting quirk for PCI SSID 17aa:3820 (git-fixes).
- ALSA: hda/realtek: Fix internal speakers for Legion Y9000X 2022 IAH7 (stable-fixes).
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU (stable-fixes).
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (stable-fixes).
- ALSA: hda/realtek: Limit mic boost on N14AP7 (stable-fixes).
- ALSA: hda/realtek: Limit mic boost on VAIO PRO PX (stable-fixes).
- ALSA: hda/realtek: Remove Framework Laptop 16 from quirks (git-fixes).
- ALSA: hda/realtek: Support Lenovo Thinkbook 13x Gen 4 (stable-fixes).
- ALSA: hda/realtek: Support Lenovo Thinkbook 16P Gen 5 (stable-fixes).
- ALSA: hda/realtek: add quirk for Clevo V5[46]0TU (stable-fixes).
- ALSA: hda/realtek: cs35l41: Fixup remaining asus strix models (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for EliteBook 645/665 G11 (stable-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for ProBook 440/460 G11 (stable-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs do not work for ProBook 445/465 G11 (stable-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx (stable-fixes).
- ALSA: hda/tas2781: Add new quirk for Lenovo Hera2 Laptop (stable-fixes).
- ALSA: hda: Add Intel BMG PCI ID and HDMI codec vid (stable-fixes).
- ALSA: hda: clarify Copyright information (stable-fixes).
- ALSA: hda: cs35l41: Add support for ASUS ROG 2024 Laptops (stable-fixes).
- ALSA: hda: cs35l41: Component should be unbound before deconstruction (git-fixes).
- ALSA: hda: cs35l41: Fix swapped l/r audio channels for Lenovo ThinBook 13x Gen4 (git-fixes).
- ALSA: hda: cs35l41: Ignore errors when configuring IRQs (stable-fixes).
- ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind() (git-fixes).
- ALSA: hda: cs35l41: Remove Speaker ID for Lenovo Legion slim 7 16ARHA7 (git-fixes).
- ALSA: hda: cs35l41: Remove redundant argument to cs35l41_request_firmware_file() (stable-fixes).
- ALSA: hda: cs35l41: Set the max PCM Gain using tuning setting (stable-fixes).
- ALSA: hda: cs35l41: Support HP Omen models without _DSD (stable-fixes).
- ALSA: hda: cs35l41: Support Lenovo 13X laptop without _DSD (stable-fixes).
- ALSA: hda: cs35l41: Support Lenovo Thinkbook 13x Gen 4 (stable-fixes).
- ALSA: hda: cs35l41: Support Lenovo Thinkbook 16P Gen 5 (stable-fixes).
- ALSA: hda: cs35l41: Update DSP1RX5/6 Sources for DSP config (stable-fixes).
- ALSA: hda: cs35l56: Component should be unbound before deconstruction (git-fixes).
- ALSA: hda: cs35l56: Exit cache-only after cs35l56_wait_for_firmware_boot() (stable-fixes).
- ALSA: hda: cs35l56: Fix lifecycle of codec pointer (stable-fixes).
- ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance (git-fixes).
- ALSA: hda: hda_cs_dsp_ctl: Remove notification of driver write (stable-fixes).
- ALSA: hda: intel-dsp-config: harden I2C/I2S codec detection (stable-fixes).
- ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node() (git-fixes).
- ALSA: hda: tas2781: Component should be unbound before deconstruction (git-fixes).
- ALSA: line6: Zero-initialize message buffers (stable-fixes).
- ALSA: pcm_dmaengine: Do not synchronize DMA channel when DMA is paused (git-fixes).
- ALSA: scarlett2: Add Focusrite Clarett 2Pre and 4Pre USB support (stable-fixes).
- ALSA: scarlett2: Add Focusrite Clarett+ 2Pre and 4Pre support (stable-fixes).
- ALSA: scarlett2: Add correct product series name to messages (stable-fixes).
- ALSA: scarlett2: Add missing error check to scarlett2_config_save() (git-fixes).
- ALSA: scarlett2: Add support for Clarett 8Pre USB (stable-fixes).
- ALSA: scarlett2: Default mixer driver to enabled (stable-fixes).
- ALSA: scarlett2: Move USB IDs out from device_info struct (stable-fixes).
- ALSA: seq: Do not clear bank selection at event -&gt; UMP MIDI2 conversion (git-fixes).
- ALSA: seq: Fix incorrect UMP type for system messages (git-fixes).
- ALSA: seq: Fix missing MSB in MIDI2 SPP conversion (git-fixes).
- ALSA: seq: Fix missing bank setup between MIDI1/MIDI2 UMP conversion (git-fixes).
- ALSA: seq: Fix missing channel at encoding RPN/NRPN MIDI2 messages (git-fixes).
- ALSA: seq: Fix yet another spot for system message conversion (git-fixes).
- ALSA: seq: ump: Fix missing System Reset message handling (git-fixes).
- ALSA: seq: ump: Fix swapped song position pointer data (git-fixes).
- ALSA: seq: ump: Skip useless ports for static blocks (git-fixes).
- ALSA: timer: Set lower bound of start tick time (stable-fixes).
- ALSA: ump: Do not accept an invalid UMP protocol number (git-fixes).
- ALSA: ump: Do not clear bank selection after sending a program change (git-fixes).
- ALSA: ump: Do not update FB name for static blocks (git-fixes).
- ALSA: ump: Force 1 Group for MIDI1 FBs (git-fixes).
- ALSA: ump: Set default protocol when not given explicitly (git-fixes).
- ALSA: usb-audio: Add a quirk for Sonix HD USB Camera (stable-fixes).
- ALSA: usb-audio: Add sampling rates support for Mbox3 (stable-fixes).
- ALSA: usb-audio: Fix for sampling rates support for Mbox3 (stable-fixes).
- ALSA: usb-audio: Fix microphone sound on HD webcam (stable-fixes).
- ALSA: usb-audio: Move HD Webcam quirk to the right place (git-fixes).
- ARM: 9381/1: kasan: clear stale stack poison (git-fixes).
- ARM: OMAP2+: fix N810 MMC gpiod table (git-fixes).
- ARM: OMAP2+: fix USB regression on Nokia N8x0 (git-fixes).
- ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init (git-fixes).
- ARM: imx_v6_v7_defconfig: Restore CONFIG_BACKLIGHT_CLASS_DEVICE (git-fixes).
- ARM: prctl: reject PR_SET_MDWE on pre-ARMv6 (stable-fixes).
- ARM: s5pv210: fix pm.c kernel-doc warning (git-fixes).
- ASoC: Intel: Disable route checks for Skylake boards (git-fixes).
- ASoC: Intel: avs: Fix ASRC module initialization (git-fixes).
- ASoC: Intel: avs: Fix potential integer overflow (git-fixes).
- ASoC: Intel: avs: Set name of control as in topology (git-fixes).
- ASoC: Intel: avs: Test result of avs_get_module_entry() (git-fixes).
- ASoC: Intel: avs: ssm4567: Do not ignore route checks (git-fixes).
- ASoC: Intel: bytcr_rt5640: Apply Asus T100TA quirk to Asus T100TAM too (git-fixes).
- ASoC: Intel: common: add ACPI matching tables for Arrow Lake (stable-fixes).
- ASoC: Intel: sof-sdw: really remove FOUR_SPEAKER quirk (git-fixes).
- ASoC: Intel: sof_sdw: add JD2 quirk for HP Omen 14 (stable-fixes).
- ASoC: Intel: sof_sdw: add quirk for Dell SKU 0C0F (stable-fixes).
- ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable (git-fixes).
- ASoC: SOF: Intel: add default firmware library path for LNL (git-fixes).
- ASoC: SOF: Intel: hda-dsp: Skip IMR boot on ACE platforms in case of S3 suspend (stable-fixes).
- ASoC: SOF: Intel: hda-pcm: Limit the maximum number of periods by MAX_BDL_ENTRIES (stable-fixes).
- ASoC: SOF: Intel: hda: fix null deref on system suspend entry (git-fixes).
- ASoC: SOF: Intel: lnl: Correct rom_status_reg (git-fixes).
- ASoC: SOF: Intel: mtl: Correct rom_status_reg (git-fixes).
- ASoC: SOF: Intel: mtl: Disable interrupts when firmware boot failed (git-fixes).
- ASoC: SOF: Intel: mtl: Implement firmware boot state check (git-fixes).
- ASoC: SOF: Intel: mtl: call dsp dump when boot retry fails (stable-fixes).
- ASoC: SOF: imx8m: Fix DSP control regmap retrieval (git-fixes).
- ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension (git-fixes).
- ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare (git-fixes).
- ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin format (stable-fixes).
- ASoC: SOF: pcm: Restrict DSP D0i3 during S0ix to IPC3 (stable-fixes).
- ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback (stable-fixes).
- ASoC: TAS2781: Fix tasdev_load_calibrated_data() (git-fixes).
- ASoC: acp: Support microphone from device Acer 315-24p (git-fixes).
- ASoC: amd: Adjust error handling in case of absent codec device (git-fixes).
- ASoC: amd: acp: add a null check for chip_pdev structure (git-fixes).
- ASoC: amd: acp: remove i2s configuration check in acp_i2s_probe() (git-fixes).
- ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA (stable-fixes).
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E16 Gen 2 (bsc#1228269).
- ASoC: codecs: wsa881x: set clk_stop_mode1 flag (git-fixes).
- ASoC: cs35l41: Update DSP1RX5/6 Sources for DSP config (git-fixes).
- ASoC: cs35l56: Accept values greater than 0 as IRQ numbers (git-fixes).
- ASoC: cs35l56: Fix unintended bus access while resetting amp (git-fixes).
- ASoC: cs35l56: Prevent overwriting firmware ASP config (git-fixes).
- ASoC: da7219-aad: fix usage of device_get_named_child_node() (git-fixes).
- ASoC: fsl-asoc-card: set priv-&gt;pdev before using it (git-fixes).
- ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value (git-fixes).
- ASoC: kirkwood: Fix potential NULL dereference (git-fixes).
- ASoC: max98088: Check for clk_prepare_enable() error (git-fixes).
- ASoC: mediatek: Assign dummy when codec not specified for a DAI link (git-fixes).
- ASoC: mediatek: mt8192: fix register configuration for tdm (git-fixes).
- ASoC: meson: axg-card: make links nonatomic (git-fixes).
- ASoC: meson: axg-fifo: use FIELD helpers (stable-fixes).
- ASoC: meson: axg-fifo: use threaded irq to check periods (git-fixes).
- ASoC: meson: axg-tdm-interface: manage formatters in trigger (git-fixes).
- ASoC: meson: cards: select SND_DYNAMIC_MINORS (git-fixes).
- ASoC: q6apm-lpass-dai: close graph on prepare errors (git-fixes).
- ASoC: qcom: Adjust issues in case of DT error in asoc_qcom_lpass_cpu_platform_probe() (git-fixes).
- ASoC: rockchip: i2s-tdm: Fix trcm mode by setting clock on right mclk (git-fixes).
- ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating (git-fixes).
- ASoC: rt711-sdw: add missing readable registers (stable-fixes).
- ASoC: rt715-sdca: volume step modification (git-fixes).
- ASoC: rt715: add vendor clear control register (git-fixes).
- ASoC: rt722-sdca-sdw: add debounce time for type detection (stable-fixes).
- ASoC: rt722-sdca-sdw: add silence detection register as volatile (stable-fixes).
- ASoC: rt722-sdca: add headset microphone vrefo setting (git-fixes).
- ASoC: rt722-sdca: modify channel number to support 4 channels (git-fixes).
- ASoC: sof: amd: fix for firmware reload failure in Vangogh platform (git-fixes).
- ASoC: tas2552: Add TX path for capturing AUDIO-OUT data (git-fixes).
- ASoC: tas2781: Fix a warning reported by robot kernel test (git-fixes).
- ASoC: tas2781: Fix wrong loading calibrated data sequence (git-fixes).
- ASoC: tegra: Fix DSPK 16-bit playback (git-fixes).
- ASoC: ti: Convert Pandora ASoC to GPIO descriptors (stable-fixes).
- ASoC: ti: davinci-mcasp: Fix race condition during probe (git-fixes).
- ASoC: ti: davinci-mcasp: Set min period size using FIFO config (stable-fixes).
- ASoC: ti: omap-hdmi: Fix too long driver name (stable-fixes).
- ASoC: topology: Do not assign fields that are already set (stable-fixes).
- ASoC: topology: Fix references to freed memory (stable-fixes).
- ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value (git-fixes).
- ASoC: wm_adsp: Add missing MODULE_DESCRIPTION() (git-fixes).
- ASoc: tas2781: Enable RCA-based playback without DSP firmware download (git-fixes).
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (stable-fixes).
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (git-fixes).
- Bluetooth: HCI: Fix potential null-ptr-deref (git-fixes).
- Bluetooth: ISO: Check socket flag instead of hcon (git-fixes).
- Bluetooth: ISO: Fix BIS cleanup (stable-fixes).
- Bluetooth: Ignore too large handle values in BIG (git-fixes).
- Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ (git-fixes).
- Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() (git-fixes).
- Bluetooth: Remove usage of the deprecated ida_simple_xx() API (stable-fixes).
- Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl (stable-fixes).
- Bluetooth: btintel: Refactor btintel_set_ppag() (git-fixes).
- Bluetooth: btnxpuart: Add handling for boot-signature timeout errors (git-fixes).
- Bluetooth: btnxpuart: Enable Power Save feature on startup (stable-fixes).
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (stable-fixes).
- Bluetooth: btusb: Fix triggering coredump implementation for QCA (git-fixes).
- Bluetooth: hci_bcm4377: Fix msgid release (git-fixes).
- Bluetooth: hci_bcm4377: Use correct unit for timeouts (git-fixes).
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (stable-fixes).
- Bluetooth: hci_event: Fix sending HCI_OP_READ_ENC_KEY_SIZE (git-fixes).
- Bluetooth: hci_event: Fix setting of unicast qos interval (git-fixes).
- Bluetooth: hci_event: Remove code to removed CONFIG_BT_HS (stable-fixes).
- Bluetooth: hci_event: Set QoS encryption from BIGInfo report (git-fixes).
- Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (bsc#1219216).
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (git-fixes).
- Bluetooth: msft: fix slab-use-after-free in msft_do_close() (git-fixes).
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot (git-fixes).
- Bluetooth: qca: Fix error code in qca_read_fw_build_info() (git-fixes).
- Bluetooth: qca: add missing firmware sanity checks (git-fixes).
- Bluetooth: qca: fix NULL-deref on non-serdev setup (git-fixes).
- Bluetooth: qca: fix NULL-deref on non-serdev suspend (git-fixes).
- Bluetooth: qca: fix NVM configuration parsing (git-fixes).
- Bluetooth: qca: fix firmware check error path (git-fixes).
- Bluetooth: qca: fix info leak when fetching fw build id (git-fixes).
- Bluetooth: qca: set power_ctrl_enabled on NULL returned by gpiod_get_optional() (git-fixes).
- EDAC/synopsys: Fix ECC status and IRQ control race condition (git-fixes).
- Enable CONFIG_FIPS_SIGNATURE_SELFTEST (bsc#1222771)
- Enable CONFIG_SCHED_CLUSTER=y on arm64 (jsc#PED-8701).
- Enable new CONFIG_FIPS_SIGNATURE_SELFTEST_ECDSA.
- Enable new CONFIG_FIPS_SIGNATURE_SELFTEST_RSA.
- Fix a potential infinite loop in extract_user_to_sg() (git-fixes).
- Fix build errors due to new UIO_MEM_DMA_COHERENT mess (git-fixes).
- Fix missing CONFIG_SUSE_SUPPORTED for arm64/64kb flavor (bsc#1223357)
- HID: Add quirk for Logitech Casa touchpad (stable-fixes).
- HID: Ignore battery for ELAN touchscreens 2F2C and 4116 (stable-fixes).
- HID: amd_sfh: Handle "no sensors" in PM operations (git-fixes).
- HID: core: remove unnecessary WARN_ON() in implement() (git-fixes).
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (git-fixes).
- HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors (git-fixes).
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev-&gt;devc (git-fixes).
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() (git-fixes).
- HID: logitech-dj: allow mice to use all types of reports (git-fixes).
- HID: mcp-2221: cancel delayed_work only when CONFIG_IIO is enabled (stable-fixes).
- HID: wacom: Modify pen IDs (git-fixes).
- IB/mlx5: Use __iowrite64_copy() for write combining stores (git-fixes)
- Input: ads7846 - use spi_device_id table (stable-fixes).
- Input: cyapa - add missing input core locking to suspend/resume functions (git-fixes).
- Input: elan_i2c - do not leave interrupt disabled on suspend failure (git-fixes).
- Input: elantech - fix touchpad state on resume for Lenovo N24 (stable-fixes).
- Input: ff-core - prefer struct_size over open coded arithmetic (stable-fixes).
- Input: i8042 - add Ayaneo Kun to i8042 quirk table (stable-fixes).
- Input: ili210x - fix ili251x_read_touch_data() return value (git-fixes).
- Input: ims-pcu - fix printf string overflow (git-fixes).
- Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation (git-fixes).
- Input: qt1050 - handle CHIP_ID reading error (git-fixes).
- Input: silead - Always support 10 fingers (stable-fixes).
- Input: xpad - add support for ASUS ROG RAIKIRI (git-fixes).
- Input: xpad - add support for ASUS ROG RAIKIRI PRO (stable-fixes).
- KEYS: trusted: Do not use WARN when encode fails (git-fixes).
- KEYS: trusted: Fix memory leak in tpm2_key_encode() (git-fixes).
- KVM: SEV-ES: Delegate LBR virtualization to the processor (git-fixes).
- KVM: SEV-ES: Disallow SEV-ES guests when X86_FEATURE_LBRV is absent (git-fixes).
- KVM: SVM: Add support for allowing zero SEV ASIDs (git-fixes).
- KVM: SVM: Flush pages under kvm-&gt;lock to fix UAF in svm_register_enc_region() (git-fixes).
- KVM: SVM: Use unsigned integers when dealing with ASIDs (git-fixes).
- KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (git-fixes).
- KVM: VMX: Disable LBR virtualization if the CPU does not support LBR callstacks (git-fixes).
- KVM: VMX: Report up-to-date exit qualification to userspace (git-fixes).
- KVM: arm64: Use local TLBI on permission relaxation (bsc#1219478).
- KVM: nVMX: Clear EXIT_QUALIFICATION when injecting an EPT Misconfig (git-fixes).
- KVM: s390: Check kvm pointer when testing KVM_CAP_S390_HPAGE_1M (git-fixes bsc#1224790).
- KVM: x86/mmu: Do not force emulation of L2 accesses to non-APIC internal slots (git-fixes).
- KVM: x86/mmu: Move private vs. shared check above slot validity checks (git-fixes).
- KVM: x86/mmu: Restrict KVM_SW_PROTECTED_VM to the TDP MMU (git-fixes).
- KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status (git-fixes).
- KVM: x86/pmu: Allow programming events that match unsupported arch events (git-fixes).
- KVM: x86/pmu: Always treat Fixed counters as available when supported (git-fixes).
- KVM: x86/pmu: Apply "fast" RDPMC only to Intel PMUs (git-fixes).
- KVM: x86/pmu: Disable support for adaptive PEBS (git-fixes).
- KVM: x86/pmu: Disallow "fast" RDPMC for architectural Intel PMUs (git-fixes).
- KVM: x86/pmu: Do not ignore bits 31:30 for RDPMC index on AMD (git-fixes).
- KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms (git-fixes).
- KVM: x86/pmu: Explicitly check NMI from guest to reducee false positives (git-fixes).
- KVM: x86/pmu: Prioritize VMX interception over #GP on RDPMC due to bad index (bsc#1226158).
- KVM: x86/pmu: Prioritize VMX interception over #GP on RDPMC due to bad index (git-fixes).
- KVM: x86/pmu: Set enable bits for GP counters in PERF_GLOBAL_CTRL at "RESET" (git-fixes).
- KVM: x86/pmu: Zero out PMU metadata on AMD if PMU is disabled (git-fixes).
- KVM: x86/xen: fix recursive deadlock in timer injection (git-fixes).
- KVM: x86/xen: improve accuracy of Xen timers (git-fixes).
- KVM: x86/xen: inject vCPU upcall vector when local APIC is enabled (git-fixes).
- KVM: x86/xen: remove WARN_ON_ONCE() with false positives in evtchn delivery (git-fixes).
- KVM: x86: Allow, do not ignore, same-value writes to immutable MSRs (git-fixes).
- KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes (git-fixes).
- KVM: x86: Do not advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID (git-fixes).
- KVM: x86: Fix broken debugregs ABI for 32 bit kernels (git-fixes).
- KVM: x86: Fully re-initialize supported_mce_cap on vendor module load (git-fixes).
- KVM: x86: Introduce __kvm_get_hypervisor_cpuid() helper (git-fixes).
- KVM: x86: Mark target gfn of emulated atomic instruction as dirty (git-fixes).
- KVM: x86: Only set APICV_INHIBIT_REASON_ABSENT if APICv is enabled (git-fixes).
- KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel compatible (git-fixes).
- KVM: x86: Update KVM_SW_PROTECTED_VM docs to make it clear they're a WIP (git-fixes).
- KVM: x86: Use actual kvm_cpuid.base for clearing KVM_FEATURE_PV_UNHALT (git-fixes).
- NFC: trf7970a: disable all regulators on removal (git-fixes).
- NFS: Fix READ_PLUS when server does not support OP_READ_PLUS (git-fixes).
- NFS: abort nfs_atomic_open_v23 if name is too long (bsc#1219847).
- NFS: add atomic_open for NFSv3 to handle O_TRUNC correctly (bsc#1219847).
- NFS: add barriers when testing for NFS_FSDATA_BLOCKED (git-fixes).
- NFS: avoid infinite loop in pnfs_update_layout (bsc#1219633 bsc#1226226).
- NFSD: Fix checksum mismatches in the duplicate reply cache (git-fixes).
- NFSv4.1 enforce rootpath check in fs_location query (git-fixes).
- NFSv4.x: by default serialize open/close operations (bsc#1223863 bsc#1227362).
- NFSv4: Fixup smatch warning for ambiguous return (git-fixes).
- Octeontx2-af: fix pause frame configuration in GMP mode (git-fixes).
- PCI/ASPM: Update save_state when configuration changes (bsc#1226915)
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (git-fixes).
- PCI/DPC: Use FIELD_GET() (stable-fixes).
- PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3 (git-fixes).
- PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3 (git-fixes).
- PCI/MSI: Fix UAF in msi_capability_init (git-fixes).
- PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports (stable-fixes).
- PCI: Clear Secondary Status errors after enumeration (bsc#1226928)
- PCI: Delay after FLR of Solidigm P44 Pro NVMe (stable-fixes).
- PCI: Do not wait for disconnected devices when resuming (git-fixes).
- PCI: Execute quirk_enable_clear_retrain_link() earlier (stable-fixes).
- PCI: Extend ACS configurability (bsc#1228090).
- PCI: Fix resource double counting on remove &amp; rescan (git-fixes).
- PCI: Fix typos in docs and comments (stable-fixes).
- PCI: Introduce cleanup helpers for device reference counts and locks (stable-fixes).
- PCI: Simplify pcie_capability_clear_and_set_word() to ..._clear_word() (stable-fixes).
- PCI: dw-rockchip: Fix initial PERST# GPIO value (git-fixes).
- PCI: dwc: Fix index 0 incorrectly being interpreted as a free ATU slot (git-fixes).
- PCI: dwc: ep: Fix DBI access failure for drivers requiring refclk from host (git-fixes).
- PCI: endpoint: Clean up error handling in vpci_scan_bus() (git-fixes).
- PCI: endpoint: Fix error handling in epf_ntb_epc_cleanup() (git-fixes).
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init() (git-fixes).
- PCI: keystone: Do not enable BAR 0 for AM654x (git-fixes).
- PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs() (git-fixes).
- PCI: keystone: Relocate ks_pcie_set/clear_dbi_mode() (git-fixes).
- PCI: qcom-ep: Disable resources unconditionally during PERST# assert (git-fixes).
- PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup() (git-fixes).
- PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id (git-fixes).
- PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (git-fixes).
- PCI: rpaphp: Error out on busy status from get-sensor-state (bsc#1223369 ltc#205888).
- PCI: switchtec: Add support for PCIe Gen5 devices (stable-fixes).
- PCI: switchtec: Use normal comment style (stable-fixes).
- PCI: tegra194: Fix probe path for Endpoint mode (git-fixes).
- PCI: tegra194: Set EP alignment restriction for inbound ATU (git-fixes).
- PCI: vmd: Create domain symlink before pci_bus_add_devices() (bsc#1227363).
- PM / devfreq: Synchronize devfreq_monitor_[start/stop] (stable-fixes).
- Port "certs: Add ECDSA signature verification self-test".
- Port "certs: Move RSA self-test data to separate file".
- RAS/AMD/ATL: Fix MI300 bank hash (bsc#1225300).
- RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation (bsc#1225300).
- RDMA/IPoIB: Fix format truncation compilation errors (git-fixes)
- RDMA/bnxt_re: Fix the max msix vectors macro (git-fixes)
- RDMA/cm: Print the old state when cm_destroy_id gets timeout (git-fixes)
- RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw (git-fixes)
- RDMA/hns: Add max_ah and cq moderation capacities in query_device() (git-fixes)
- RDMA/hns: Fix GMV table pagesize (git-fixes)
- RDMA/hns: Fix UAF for cq async event (git-fixes)
- RDMA/hns: Fix deadlock on SRQ async events. (git-fixes)
- RDMA/hns: Fix return value in hns_roce_map_mr_sg (git-fixes)
- RDMA/hns: Modify the print level of CQE error (git-fixes)
- RDMA/hns: Use complete parentheses in macros (git-fixes)
- RDMA/mana_ib: Ignore optional access flags for MRs (git-fixes).
- RDMA/mlx5: Add check for srq max_sge attribute (git-fixes)
- RDMA/mlx5: Adding remote atomic access flag to updatable flags (git-fixes)
- RDMA/mlx5: Change check for cacheable mkeys (git-fixes)
- RDMA/mlx5: Ensure created mkeys always have a populated rb_key (git-fixes)
- RDMA/mlx5: Fix port number for counter query in multi-port configuration (git-fixes)
- RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init (git-fixes)
- RDMA/mlx5: Follow rb_key.ats when creating new mkeys (git-fixes)
- RDMA/mlx5: Remove extra unlock on error path (git-fixes)
- RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent (git-fixes)
- RDMA/restrack: Fix potential invalid address access (git-fixes)
- RDMA/rxe: Allow good work requests to be executed (git-fixes)
- RDMA/rxe: Fix data copy for IB_SEND_INLINE (git-fixes)
- RDMA/rxe: Fix incorrect rxe_put in error path (git-fixes)
- RDMA/rxe: Fix responder length checking for UD request packets (git-fixes)
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (git-fixes)
- RDMA/rxe: Fix the problem "mutex_destroy missing" (git-fixes)
- SEV: disable SEV-ES DebugSwap by default (git-fixes).
- SUNRPC: Fix gss_free_in_token_pages() (git-fixes).
- SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (git-fixes).
- SUNRPC: avoid soft lockup when transmitting UDP to reachable server (bsc#1225272).
- SUNRPC: return proper error from gss_wrap_req_priv (git-fixes).
- USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k (stable-fixes).
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (git-fixes).
- USB: core: Fix access violation during port device removal (git-fixes).
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (git-fixes).
- USB: serial: mos7840: fix crash on resume (git-fixes).
- USB: serial: option: add Fibocom FM135-GL variants (stable-fixes).
- USB: serial: option: add Fibocom FM350-GL (stable-fixes).
- USB: serial: option: add Lonsung U8300/U9300 product (stable-fixes).
- USB: serial: option: add Netprisma LCUK54 series modules (stable-fixes).
- USB: serial: option: add Rolling RW101-GL and RW135-GL support (stable-fixes).
- USB: serial: option: add Rolling RW350-GL variants (stable-fixes).
- USB: serial: option: add Telit FN912 rmnet compositions (stable-fixes).
- USB: serial: option: add Telit FN920C04 rmnet compositions (stable-fixes).
- USB: serial: option: add Telit generic core-dump composition (stable-fixes).
- USB: serial: option: add support for Fibocom FM650/FG650 (stable-fixes).
- USB: serial: option: add support for Foxconn T99W651 (stable-fixes).
- USB: serial: option: support Quectel EM060K sub-models (stable-fixes).
- USB: xen-hcd: Traverse host/ when CONFIG_USB_XEN_HCD is selected (git-fixes).
- VMCI: Fix an error handling path in vmci_guest_probe_device() (git-fixes).
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (stable-fixes).
- X.509: Fix the parser of extended key usage for length (bsc#1218820).
- admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET (git-fixes).
- amd/amdkfd: sync all devices to wait all processes being evicted (stable-fixes).
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- arm64/head: Disable MMU at EL2 before clearing HCR_EL2.E2H (git-fixes).
- arm64/io: Provide a WC friendly __iowriteXX_copy() (bsc#1226502)
- arm64/io: add constant-argument check (bsc#1226502 git-fixes)
- arm64: Add the arm64.no32bit_el0 command line option (jsc#PED-3184).
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (git-fixes).
- arm64: dts: allwinner: Pine H64: correctly remove reg_gmac_3v3 (git-fixes)
- arm64: dts: allwinner: h616: Fix I2C0 pins (git-fixes)
- arm64: dts: freescale: imx8mm-verdin: enable hysteresis on slow input (git-fixes)
- arm64: dts: hi3798cv200: fix the size of GICR (git-fixes)
- arm64: dts: imx8-ss-conn: fix usb lpcg indices (git-fixes)
- arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order (git-fixes)
- arm64: dts: imx8-ss-dma: fix adc lpcg indices (git-fixes)
- arm64: dts: imx8-ss-dma: fix can lpcg indices (git-fixes)
- arm64: dts: imx8-ss-dma: fix spi lpcg indices (git-fixes)
- arm64: dts: imx8-ss-lsio: fix pwm lpcg indices (git-fixes)
- arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc (git-fixes)
- arm64: dts: imx8qm-ss-dma: fix can lpcg indices (git-fixes)
- arm64: dts: imx93-11x11-evk: Remove the 'no-sdio' property (git-fixes)
- arm64: dts: microchip: sparx5: fix mdio reg (git-fixes)
- arm64: dts: rockchip: Add enable-strobe-pulldown to emmc phy on ROCK (git-fixes)
- arm64: dts: rockchip: Add enable-strobe-pulldown to emmc phy on ROCK (git-fixes)
- arm64: dts: rockchip: Add mdio and ethernet-phy nodes to (git-fixes)
- arm64: dts: rockchip: Add missing power-domains for rk356x vop_mmu (git-fixes)
- arm64: dts: rockchip: Add pinctrl for UART0 to rk3308-rock-pi-s (git-fixes)
- arm64: dts: rockchip: Add sdmmc related properties on (git-fixes)
- arm64: dts: rockchip: Add sound-dai-cells for RK3368 (git-fixes)
- arm64: dts: rockchip: Drop invalid mic-in-differential on (git-fixes)
- arm64: dts: rockchip: Fix SD NAND and eMMC init on rk3308-rock-pi-s (git-fixes)
- arm64: dts: rockchip: Fix mic-in-differential usage on (git-fixes)
- arm64: dts: rockchip: Fix mic-in-differential usage on rk3566-roc-pc (git-fixes)
- arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 (git-fixes)
- arm64: dts: rockchip: Fix the value of `dlg,jack-det-rate` mismatch (git-fixes)
- arm64: dts: rockchip: Increase VOP clk rate on RK3328 (git-fixes)
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro (git-fixes)
- arm64: dts: rockchip: Rename LED related pinctrl nodes on (git-fixes)
- arm64: dts: rockchip: Update WIFi/BT related nodes on (git-fixes)
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 (git-fixes)
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for (git-fixes)
- arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 (git-fixes)
- arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E (git-fixes)
- arm64: dts: rockchip: fix rk3328 hdmi ports node (git-fixes)
- arm64: dts: rockchip: fix rk3399 hdmi ports node (git-fixes)
- arm64: dts: rockchip: regulator for sd needs to be always on for (git-fixes)
- arm64: dts: rockchip: set PHY address of MT7531 switch to 0x1f (git-fixes)
- arm64: hibernate: Fix level3 translation fault in swsusp_save() (git-fixes).
- arm64: mm: Batch dsb and isb when populating pgtables (jsc#PED-8688).
- arm64: mm: Do not remap pgtables for allocate vs populate (jsc#PED-8688).
- arm64: mm: Do not remap pgtables per-cont(pte|pmd) block (jsc#PED-8688).
- arm64: tegra: Correct Tegra132 I2C alias (git-fixes)
- asm-generic: make sparse happy with odd-sized put_unaligned_*() (stable-fixes).
- ata,scsi: libata-core: Do not leak memory for ata_port struct members (git-fixes).
- ata: ahci: Clean up sysfs file on error (git-fixes).
- ata: libata-core: Fix double free on error (git-fixes).
- ata: libata-core: Fix null pointer dereference on error (git-fixes).
- ata: libata-scsi: Fix offsets for the fixed format sense data (git-fixes).
- ata: pata_legacy: make legacy_exit() work again (git-fixes).
- ata: sata_gemini: Check clk_enable() result (stable-fixes).
- autofs: use wake_up() instead of wake_up_interruptible(() (bsc#1224166).
- auxdisplay: ht16k33: Drop reference after LED registration (git-fixes).
- ax25: Fix netdev refcount issue (git-fixes).
- ax25: Fix refcount imbalance on inbound connections (git-fixes).
- ax25: Fix reference count leak issue of net_device (git-fixes).
- ax25: Fix reference count leak issues of ax25_dev (git-fixes).
- batman-adv: Do not accept TT entries for out-of-spec VIDs (git-fixes).
- batman-adv: bypass empty buckets in batadv_purge_orig_ref() (stable-fixes).
- bitops: add missing prototype check (git-fixes).
- blk-cgroup: fix list corruption from reorder of WRITE -&gt;lqueued (bsc#1225605).
- blk-cgroup: fix list corruption from resetting io stat (bsc#1225605).
- block: Move checking GENHD_FL_NO_PART to bdev_add_partition() (bsc#1226213).
- block: fix q-&gt;blkg_list corruption during disk rebind (bsc#1223591).
- bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX (git-fixes).
- bnxt_en: Fix error recovery for RoCE ulp client (git-fixes).
- bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() (git-fixes).
- bnxt_en: Reset PTP tx_avail after possible firmware reset (git-fixes).
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (git-fixes)
- bootconfig: Fix the kerneldoc of _xbc_exit() (git-fixes).
- bootconfig: use memblock_free_late to free xbc memory to buddy (git-fixes).
- bootmem: use kmemleak_free_part_phys in put_page_bootmem (git-fixes).
- bpf, arm64: Fix incorrect runtime stats (git-fixes)
- bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END (git-fixes).
- bpf: Remove xdp_do_flush_map() (bsc#1214683 (PREEMPT_RT prerequisite backports)).
- bpf: check bpf_func_state-&gt;callback_depth when pruning states (bsc#1225903).
- bpf: correct loop detection for iterators convergence (bsc#1225903).
- bpf: exact states comparison for iterator convergence checks (bsc#1225903).
- bpf: extract __check_reg_arg() utility function (bsc#1225903).
- bpf: extract same_callsites() as utility function (bsc#1225903).
- bpf: extract setup_func_entry() utility function (bsc#1225903).
- bpf: fix precision backtracking instruction iteration (bsc#1225756).
- bpf: handle ldimm64 properly in check_cfg() (bsc#1225756).
- bpf: keep track of max number of bpf_loop callback iterations (bsc#1225903).
- bpf: move explored_state() closer to the beginning of verifier.c (bsc#1225903).
- bpf: print full verifier states on infinite loop detection (bsc#1225903).
- bpf: verify callbacks as if they are called unknown number of times (bsc#1225903).
- bpf: widening for callback iterators (bsc#1225903).
- btrfs: add a helper to read the superblock metadata_uuid (git-fixes)
- btrfs: add and use helper to check if block group is used (bsc#1220120).
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (git-fixes)
- btrfs: add new unused block groups to the list of unused block groups (bsc#1220120).
- btrfs: allow to run delayed refs by bytes to be released instead of count (bsc#1220120).
- btrfs: always clear PERTRANS metadata during commit (git-fixes)
- btrfs: always print transaction aborted messages with an error level (git-fixes)
- btrfs: always reserve space for delayed refs when starting transaction (bsc#1220120).
- btrfs: assert correct lock is held at btrfs_select_ref_head() (bsc#1220120).
- btrfs: assert delayed node locked when removing delayed item (git-fixes)
- btrfs: avoid start and commit empty transaction when flushing qgroups (bsc#1220120).
- btrfs: avoid start and commit empty transaction when starting qgroup rescan (bsc#1220120).
- btrfs: avoid starting and committing empty transaction when flushing space (bsc#1220120).
- btrfs: avoid starting new transaction when flushing delayed items and refs (bsc#1220120).
- btrfs: check for BTRFS_FS_ERROR in pending ordered assert (git-fixes)
- btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super (git-fixes)
- btrfs: defrag: avoid unnecessary defrag caused by incorrect extent size (git-fixes)
- btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args (git-fixes)
- btrfs: do not allow non subvolume root targets for snapshot (git-fixes)
- btrfs: do not arbitrarily slow down delalloc if we're committing (git-fixes)
- btrfs: do not delete unused block group if it may be used soon (bsc#1220120).
- btrfs: do not refill whole delayed refs block reserve when starting transaction (bsc#1220120).
- btrfs: do not start transaction when joining with TRANS_JOIN_NOSTART (git-fixes)
- btrfs: do not steal space from global rsv after a transaction abort (bsc#1220120).
- btrfs: do not warn if discard range is not aligned to sector (git-fixes)
- btrfs: ensure fiemap does not race with writes when FIEMAP_FLAG_SYNC is given (bsc#1223285).
- btrfs: error out when COWing block using a stale transaction (git-fixes)
- btrfs: error out when reallocating block for defrag using a stale transaction (git-fixes)
- btrfs: error when COWing block from a root that is being deleted (git-fixes)
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent() (git-fixes)
- btrfs: fail priority metadata ticket with real fs error (bsc#1220120).
- btrfs: file_remove_privs needs an exclusive lock in direct io write (git-fixes)
- btrfs: fix 64bit compat send ioctl arguments not initializing version member (git-fixes)
- btrfs: fix deadlock with fiemap and extent locking (bsc#1223285).
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (git-fixes)
- btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send() (git-fixes)
- btrfs: fix lockdep splat and potential deadlock after failure running delayed items (git-fixes)
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent() (git-fixes)
- btrfs: fix off-by-one when checking chunk map includes logical address (git-fixes)
- btrfs: fix race between ordered extent completion and fiemap (bsc#1223285).
- btrfs: fix race when detecting delalloc ranges during fiemap (bsc#1223285).
- btrfs: fix race when refilling delayed refs block reserve (git-fixes)
- btrfs: fix start transaction qgroup rsv double free (git-fixes)
- btrfs: fix wrong block_start calculation for btrfs_drop_extent_map_range() (git-fixes)
- btrfs: free qgroup rsv on io failure (git-fixes)
- btrfs: free the allocated memory if btrfs_alloc_page_array() fails (git-fixes)
- btrfs: get rid of label and goto at insert_delayed_ref() (bsc#1220120).
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (git-fixes)
- btrfs: handle errors properly in update_inline_extent_backref() (git-fixes)
- btrfs: initialize key where it's used when running delayed data ref (bsc#1220120).
- btrfs: log message if extent item not found when running delayed extent op (bsc#1220120).
- btrfs: make btrfs_cleanup_fs_roots() static (bsc#1220120).
- btrfs: make btrfs_destroy_delayed_refs() return void (bsc#1220120).
- btrfs: make btrfs_destroy_marked_extents() return void (bsc#1220120).
- btrfs: make btrfs_destroy_pinned_extent() return void (bsc#1220120).
- btrfs: make error messages more clear when getting a chunk map (git-fixes)
- btrfs: make find_first_extent_bit() return a boolean (bsc#1220120).
- btrfs: make find_free_dev_extent() static (bsc#1220120).
- btrfs: make insert_delayed_ref() return a bool instead of an int (bsc#1220120).
- btrfs: merge find_free_dev_extent() and find_free_dev_extent_start() (bsc#1220120).
- btrfs: move btrfs_free_excluded_extents() into block-group.c (bsc#1220120).
- btrfs: open code trivial btrfs_add_excluded_extent() (bsc#1220120).
- btrfs: output extra debug info if we failed to find an inline backref (git-fixes)
- btrfs: pass a space_info argument to btrfs_reserve_metadata_bytes() (bsc#1220120).
- btrfs: prevent transaction block reserve underflow when starting transaction (git-fixes)
- btrfs: print available space across all block groups when dumping space info (bsc#1220120).
- btrfs: print available space for a block group when dumping a space info (bsc#1220120).
- btrfs: print block group super and delalloc bytes when dumping space info (bsc#1220120).
- btrfs: print target number of bytes when dumping free space (bsc#1220120).
- btrfs: qgroup: always free reserved space for extent records (bsc#1216196).
- btrfs: qgroup: convert PREALLOC to PERTRANS after record_root_in_trans (git-fixes)
- btrfs: record delayed inode root in transaction (git-fixes)
- btrfs: reject encoded write if inode has nodatasum flag set (git-fixes)
- btrfs: release path before inode lookup during the ino lookup ioctl (git-fixes)
- btrfs: remove pointless 'ref_root' variable from run_delayed_data_ref() (bsc#1220120).
- btrfs: remove pointless in_tree field from struct btrfs_delayed_ref_node (bsc#1220120).
- btrfs: remove pointless initialization at btrfs_delayed_refs_rsv_release() (bsc#1220120).
- btrfs: remove redundant BUG_ON() from __btrfs_inc_extent_ref() (bsc#1220120).
- btrfs: remove refs_to_add argument from __btrfs_inc_extent_ref() (bsc#1220120).
- btrfs: remove refs_to_drop argument from __btrfs_free_extent() (bsc#1220120).
- btrfs: remove the refcount warning/check at btrfs_put_delayed_ref() (bsc#1220120).
- btrfs: remove unnecessary logic when running new delayed references (bsc#1220120).
- btrfs: remove unnecessary prototype declarations at disk-io.c (bsc#1220120).
- btrfs: remove unused is_head field from struct btrfs_delayed_ref_node (bsc#1220120).
- btrfs: rename add_new_free_space() to btrfs_add_new_free_space() (bsc#1220120).
- btrfs: reorder some members of struct btrfs_delayed_ref_head (bsc#1220120).
- btrfs: reserve space for delayed refs on a per ref basis (bsc#1220120).
- btrfs: reset destination buffer when read_extent_buffer() gets invalid range (git-fixes)
- btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 (git-fixes)
- btrfs: return -EUCLEAN if extent item is missing when searching inline backref (bsc#1220120).
- btrfs: return real error when orphan cleanup fails due to a transaction abort (bsc#1220120).
- btrfs: send: do not issue unnecessary zero writes for trailing hole (bsc#1222459).
- btrfs: send: ensure send_fd is writable (git-fixes)
- btrfs: send: handle path ref underflow in header iterate_inode_ref() (git-fixes)
- btrfs: send: return EOPNOTSUPP on unknown flags (git-fixes)
- btrfs: set page extent mapped after read_folio in relocate_one_page (git-fixes)
- btrfs: simplify check for extent item overrun at lookup_inline_extent_backref() (bsc#1220120).
- btrfs: stop doing excessive space reservation for csum deletion (bsc#1220120).
- btrfs: store the error that turned the fs into error state (bsc#1220120).
- btrfs: sysfs: validate scrub_speed_max value (git-fixes)
- btrfs: tree-checker: fix inline ref size in error messages (git-fixes)
- btrfs: update comment for btrfs_join_transaction_nostart() (bsc#1220120).
- btrfs: update documentation for add_new_free_space() (bsc#1220120).
- btrfs: use a bool to track qgroup record insertion when adding ref head (bsc#1220120).
- btrfs: use a single switch statement when initializing delayed ref head (bsc#1220120).
- btrfs: use a single variable for return value at lookup_inline_extent_backref() (bsc#1220120).
- btrfs: use a single variable for return value at run_delayed_extent_op() (bsc#1220120).
- btrfs: use bool type for delayed ref head fields that are used as booleans (bsc#1220120).
- btrfs: use the correct superblock to compare fsid in btrfs_validate_super (git-fixes)
- btrfs: use u64 for buffer sizes in the tree search ioctls (git-fixes)
- btrfs: zoned: do not skip block groups with 100% zone unusable (bsc#1220120).
- bus: mhi: host: allow MHI client drivers to provide the firmware via a pointer (bsc#1227149).
- bytcr_rt5640 : inverse jack detect for Archos 101 cesium (stable-fixes).
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd (git-fixes).
- cachefiles: remove requests from xarray during flushing requests (bsc#1226588).
- can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct (git-fixes).
- can: kvaser_usb: fix return value for hif_usb_send_regout (stable-fixes).
- can: mcp251xfd: fix infinite loop when xmit fails (git-fixes).
- cdrom: rearrange last_media_change check to avoid unintentional overflow (stable-fixes).
- ceph: add ceph_cap_unlink_work to fire check_caps() immediately (bsc#1226022).
- ceph: always check dir caps asynchronously (bsc#1226022).
- ceph: always queue a writeback when revoking the Fb caps (bsc#1226022).
- ceph: break the check delayed cap loop every 5s (bsc#1226022).
- ceph: fix incorrect kmalloc size of pagevec mempool (bsc#1228417).
- ceph: redirty page before returning AOP_WRITEPAGE_ACTIVATE (bsc#1224866).
- ceph: switch to use cap_delay_lock for the unlink delay list (bsc#1226022).
- certs: Add ECDSA signature verification self-test (bsc#1222777).
- certs: Move RSA self-test data to separate file (bsc#1222777).
- char: tpm: Fix possible memory leak in tpm_bios_measurements_open() (git-fixes).
- checkpatch: really skip LONG_LINE_* when LONG_LINE is ignored (git-fixes).
- cifs: Add a laundromat thread for cached directories (git-fixes, bsc#1225172).
- cifs: Do not use certain unnecessary folio_*() functions (bsc#1225172).
- cifs: account for primary channel in the interface list (bsc#1225172).
- cifs: cifs_chan_is_iface_active should be called with chan_lock held (bsc#1225172).
- cifs: distribute channels across interfaces based on speed (bsc#1225172).
- cifs: do not pass cifs_sb when trying to add channels (bsc#1225172).
- cifs: failure to add channel on iface should bump up weight (git-fixes, bsc#1225172).
- cifs: fix charset issue in reconnection (bsc#1225172).
- cifs: fix leak of iface for primary channel (git-fixes, bsc#1225172).
- cifs: handle cases where a channel is closed (bsc#1225172).
- cifs: handle cases where multiple sessions share connection (bsc#1225172).
- cifs: reconnect work should have reference on server struct (bsc#1225172).
- clk: Do not hold prepare_lock when calling kref_put() (stable-fixes).
- clk: Get runtime PM before walking tree during disable_unused (git-fixes).
- clk: Get runtime PM before walking tree for clk_summary (git-fixes).
- clk: Initialize struct clk_core kref earlier (stable-fixes).
- clk: Show active consumers of clocks in debugfs (stable-fixes).
- clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use (git-fixes).
- clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg (git-fixes).
- clk: mediatek: mt8365-mm: fix DPI0 parent (git-fixes).
- clk: mediatek: pllfh: Do not log error for missing fhctl node (git-fixes).
- clk: qcom: clk-alpha-pll: fix rate setting for Stromer PLLs (git-fixes).
- clk: qcom: clk-alpha-pll: remove invalid Stromer register offset (git-fixes).
- clk: qcom: clk-alpha-pll: set ALPHA_EN bit for Stromer Plus PLLs (git-fixes).
- clk: qcom: dispcc-sm6350: fix DisplayPort clocks (git-fixes).
- clk: qcom: dispcc-sm8450: fix DisplayPort clocks (git-fixes).
- clk: qcom: dispcc-sm8550: fix DisplayPort clocks (git-fixes).
- clk: qcom: gcc-sm6350: Fix gpll6* &amp; gpll7 parents (git-fixes).
- clk: qcom: mmcc-msm8998: fix venus clock issue (git-fixes).
- clk: renesas: r8a779a0: Fix CANFD parent clock (git-fixes).
- clk: renesas: r9a07g043: Add clock and reset entry for PLIC (git-fixes).
- clk: rs9: fix wrong default value for clock amplitude (git-fixes).
- clk: samsung: exynosautov9: fix wrong pll clock id value (git-fixes).
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (git-fixes).
- clkdev: Update clkdev id usage to allow for longer names (stable-fixes).
- config/arm64: Enable CoreSight PMU drivers (bsc#1228289 jsc#PED-7859)
- counter: linux/counter.h: fix Excess kernel-doc description warning (git-fixes).
- counter: ti-eqep: enable clock at probe (git-fixes).
- cppc_cpufreq: Fix possible null pointer dereference (git-fixes).
- cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC systems (git-fixes).
- cpufreq: amd-pstate: Fix the inconsistency in max frequency units (git-fixes).
- cpufreq: amd-pstate: fix memory leak on CPU EPP exit (stable-fixes).
- cpufreq: brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations (git-fixes).
- cpufreq: exit() callback is optional (git-fixes).
- cpufreq: ti-cpufreq: Handle deferred probe with dev_err_probe() (git-fixes).
- cpumask: Add for_each_cpu_from() (bsc#1225053).
- crypto/ecdh: make ecdh_compute_value() to zeroize the public key (bsc#1222768).
- crypto/ecdsa: make ecdsa_ecc_ctx_deinit() to zeroize the public key (bsc#1222768).
- crypto: aead,cipher - zeroize key buffer after use (stable-fixes).
- crypto: bcm - Fix pointer arithmetic (git-fixes).
- crypto: ccp - Add support for PCI device 0x156E (bsc#1223338).
- crypto: ccp - Add support for PCI device 0x17E0 (bsc#1223338).
- crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked (git-fixes).
- crypto: ccp - drop platform ifdef checks (git-fixes).
- crypto: deflate - Add aliases to deflate (bsc#1227190).
- crypto: ecc - update ecc_gen_privkey for FIPS 186-5 (bsc#1222782).
- crypto: ecdh - explicitly zeroize private_key (stable-fixes).
- crypto: ecdsa - Fix module auto-load on add-key (git-fixes).
- crypto: ecdsa - Fix the public key format description (git-fixes).
- crypto: ecrdsa - Fix module auto-load on add_key (stable-fixes).
- crypto: hisilicon/debugfs - Fix debugfs uninit process issue (stable-fixes).
- crypto: hisilicon/qm - Add the err memory release process to qm uninit (stable-fixes).
- crypto: hisilicon/sec - Fix memory leak for sec resource release (stable-fixes).
- crypto: iaa - Account for cpu-less numa nodes (bsc#1227190).
- crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init (git-fixes).
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (git-fixes).
- crypto: qat - extend scope of lock in adf_cfg_add_key_value_param() (git-fixes).
- crypto: qat - improve error logging to be consistent across features (git-fixes).
- crypto: qat - specify firmware files for 402xx (git-fixes).
- crypto: rsa - add a check for allocation failure (bsc#1222775).
- crypto: rsa - allow only odd e and restrict value in FIPS mode (bsc#1222775).
- crypto: testmgr - remove unused xts4096 and xts512 algorithms from testmgr.c (bsc#1222769).
- crypto: x86/nh-avx2 - add missing vzeroupper (git-fixes).
- crypto: x86/sha256-avx2 - add missing vzeroupper (git-fixes).
- crypto: x86/sha512-avx2 - add missing vzeroupper (git-fixes).
- cxgb4: Properly lock TX queue for the selftest (bsc#1214683 (PREEMPT_RT prerequisite backports)).
- cxl/region: Fix cxlr_pmem leaks (git-fixes).
- cxl/region: Fix memregion leaks in devm_cxl_add_region() (git-fixes).
- cxl/test: Add missing vmalloc.h for tools/testing/cxl/test/mem.c (git-fixes).
- cxl/trace: Correct DPA field masks for general_media &amp; dram events (git-fixes).
- decompress_bunzip2: fix rare decompression failure (git-fixes).
- devres: Fix devm_krealloc() wasting memory (git-fixes).
- devres: Fix memory leakage caused by driver API devm_free_percpu() (git-fixes).
- dlm: fix user space lock decision to copy lvb (git-fixes).
- dm-multipath: dont't attempt SG_IO on non-SCSI-disks (bsc#1223575).
- dm/amd/pm: Fix problems with reboot/shutdown for some SMU 13.0.4/13.0.11 users (git-fixes).
- dma-buf/sw-sync: do not enable IRQ from sync_print_obj() (git-fixes).
- dma-mapping: benchmark: fix node id validation (git-fixes).
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly (git-fixes).
- dma: fix call order in dmam_free_coherent (git-fixes).
- dma: xilinx_dpdma: Fix locking (git-fixes).
- dmaengine: axi-dmac: fix possible race in remove() (git-fixes).
- dmaengine: idma64: Add check for dma_set_max_seg_size (git-fixes).
- dmaengine: idxd: Avoid unnecessary destruction of file_ida (git-fixes).
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (git-fixes).
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (git-fixes).
- dmaengine: ioatdma: Fix error path in ioat3_dma_probe() (git-fixes).
- dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe() (git-fixes).
- dmaengine: ioatdma: Fix leaking on version mismatch (git-fixes).
- dmaengine: ioatdma: Fix missing kmem_cache_destroy() (git-fixes).
- dmaengine: owl: fix register access functions (git-fixes).
- dmaengine: tegra186: Fix residual calculation (git-fixes).
- dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels (git-fixes).
- docs: crypto: async-tx-api: fix broken code example (git-fixes).
- docs: kernel_include.py: Cope with docutils 0.21 (stable-fixes).
- docs: netdev: Fix typo in Signed-off-by tag (git-fixes).
- dpll: spec: use proper enum for pin capabilities attribute (git-fixes).
- driver core: Introduce device_link_wait_removal() (stable-fixes).
- drivers/nvme: Add quirks for device 126f:2262 (git-fixes).
- drivers/xen: Improve the late XenStore init protocol (git-fixes).
- drivers: core: synchronize really_probe() and dev_uevent() (git-fixes).
- drivers: soc: xilinx: check return status of get_api_version() (git-fixes).
- drm/amd/amdgpu: Fix uninitialized variable warnings (git-fixes).
- drm/amd/display: ASSERT when failing to find index by plane/stream id (stable-fixes).
- drm/amd/display: Account for cursor prefetch BW in DML1 mode support (stable-fixes).
- drm/amd/display: Add VCO speed parameter for DCN31 FPU (stable-fixes).
- drm/amd/display: Add dtbclk access to dcn315 (stable-fixes).
- drm/amd/display: Add refresh rate range check (stable-fixes).
- drm/amd/display: Allocate zero bw after bw alloc enable (stable-fixes).
- drm/amd/display: Atom Integrated System Info v2_2 for DCN35 (stable-fixes).
- drm/amd/display: Check index msg_id before read or write (stable-fixes).
- drm/amd/display: Check pipe offset before setting vblank (stable-fixes).
- drm/amd/display: Disable seamless boot on 128b/132b encoding (stable-fixes).
- drm/amd/display: Do not recursively call manual trigger programming (stable-fixes).
- drm/amd/display: Enable colorspace property for MST connectors (git-fixes).
- drm/amd/display: Exit idle optimizations before HDCP execution (stable-fixes).
- drm/amd/display: Fix DC mode screen flickering on DCN321 (stable-fixes).
- drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport (stable-fixes).
- drm/amd/display: Fix division by zero in setup_dsc_config (stable-fixes).
- drm/amd/display: Fix incorrect DSC instance for MST (stable-fixes).
- drm/amd/display: Fix overlapping copy within dml_core_mode_programming (stable-fixes).
- drm/amd/display: Fix potential index out of bounds in color transformation function (git-fixes).
- drm/amd/display: Fix refresh rate range for some panel (stable-fixes).
- drm/amd/display: Fix uninitialized variables in DM (stable-fixes).
- drm/amd/display: Handle Y carry-over in VCP X.Y calculation (stable-fixes).
- drm/amd/display: Move 'struct scaler_data' off stack (git-fixes).
- drm/amd/display: Remove pixle rate limit for subvp (stable-fixes).
- drm/amd/display: Remove redundant condition in dcn35_calc_blocks_to_gate() (git-fixes).
- drm/amd/display: Revert Remove pixle rate limit for subvp (stable-fixes).
- drm/amd/display: Send DP_TOTAL_LTTPR_CNT during detection if LTTPR is present (stable-fixes).
- drm/amd/display: Set color_mgmt_changed to true on unsuspend (stable-fixes).
- drm/amd/display: Skip finding free audio for unknown engine_id (stable-fixes).
- drm/amd/display: Skip pipe if the pipe idx not set properly (stable-fixes).
- drm/amd/display: Update efficiency bandwidth for dcn351 (stable-fixes).
- drm/amd/display: Workaround register access in idle race with cursor (stable-fixes).
- drm/amd/display: change dram_clock_latency to 34us for dcn35 (stable-fixes).
- drm/amd/display: revert Exit idle optimizations before HDCP execution (stable-fixes).
- drm/amd/pm: Fix aldebaran pcie speed reporting (git-fixes).
- drm/amd/pm: Restore config space after reset (stable-fixes).
- drm/amd/pm: remove logically dead code for renoir (git-fixes).
- drm/amd: Fix shutdown (again) on some SMU v13.0.4/11 platforms (git-fixes).
- drm/amdgpu/atomfirmware: add intergrated info v2.3 table (stable-fixes).
- drm/amdgpu/atomfirmware: fix parsing of vram_info (stable-fixes).
- drm/amdgpu/atomfirmware: silence UBSAN warning (stable-fixes).
- drm/amdgpu/mes: fix use-after-free issue (stable-fixes).
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3 (stable-fixes).
- drm/amdgpu: Assign correct bits for SDMA HDP flush (stable-fixes).
- drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit (git-fixes).
- drm/amdgpu: Fix VCN allocation in CPX partition (stable-fixes).
- drm/amdgpu: Fix VRAM memory accounting (stable-fixes).
- drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and rlc_microcode() (git-fixes).
- drm/amdgpu: Fix comparison in amdgpu_res_cpu_visible (git-fixes).
- drm/amdgpu: Fix leak when GPU memory allocation fails (stable-fixes).
- drm/amdgpu: Fix memory range calculation (git-fixes).
- drm/amdgpu: Fix pci state save during mode-1 reset (git-fixes).
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (git-fixes).
- drm/amdgpu: Fix the ring buffer size for queue VM flush (stable-fixes).
- drm/amdgpu: Fix uninitialized variable warnings (stable-fixes).
- drm/amdgpu: Indicate CU havest info to CP (stable-fixes).
- drm/amdgpu: Initialize timestamp for some legacy SOCs (stable-fixes).
- drm/amdgpu: Refine IB schedule error logging (stable-fixes).
- drm/amdgpu: Remove GC HW IP 9.3.0 from noretry=1 (git-fixes).
- drm/amdgpu: Update BO eviction priorities (stable-fixes).
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (stable-fixes).
- drm/amdgpu: add error handle to avoid out-of-bounds (stable-fixes).
- drm/amdgpu: avoid using null object of framebuffer (stable-fixes).
- drm/amdgpu: fix UBSAN warning in kv_dpm.c (stable-fixes).
- drm/amdgpu: fix doorbell regression (git-fixes).
- drm/amdgpu: fix locking scope when flushing tlb (stable-fixes).
- drm/amdgpu: fix the warning about the expression (int)size - len (stable-fixes).
- drm/amdgpu: fix uninitialized scalar variable warning (stable-fixes).
- drm/amdgpu: implement IRQ_STATE_ENABLE for SDMA v4.4.2 (stable-fixes).
- drm/amdgpu: init microcode chip name from ip versions (stable-fixes).
- drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2 (git-fixes).
- drm/amdgpu: silence UBSAN warning (stable-fixes).
- drm/amdkfd: Add VRAM accounting for SVM migration (stable-fixes).
- drm/amdkfd: Check cgroup when returning DMABuf info (stable-fixes).
- drm/amdkfd: Fix CU Masking for GFX 9.4.3 (git-fixes).
- drm/amdkfd: Flush the process wq before creating a kfd_process (stable-fixes).
- drm/amdkfd: Let VRAM allocations go to GTT domain on small APUs (stable-fixes).
- drm/amdkfd: do not allow mapping the MMIO HDP page with large pages (git-fixes).
- drm/amdkfd: range check cp bad op exception interrupts (stable-fixes).
- drm/arm/komeda: Fix komeda probe failing if there are no links in the secondary pipeline (git-fixes).
- drm/arm/malidp: fix a possible null pointer dereference (git-fixes).
- drm/bridge/panel: Fix runtime warning on panel bridge release (git-fixes).
- drm/bridge: Fix improper bridge init order with pre_enable_prev_first (git-fixes).
- drm/bridge: anx7625: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: anx7625: Update audio status while detecting (git-fixes).
- drm/bridge: dpc3433: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: icn6211: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: it6505: fix hibernate to resume no display issue (git-fixes).
- drm/bridge: lt8912b: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: lt9611: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: lt9611uxc: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: samsung-dsim: Set P divider based on min/max of fin pll (git-fixes).
- drm/bridge: tc358775: Do not log an error when DSI host can't be found (git-fixes).
- drm/bridge: tc358775: fix support for jeida-18 and jeida-24 (git-fixes).
- drm/ci: update device type for volteer devices (git-fixes).
- drm/connector: Add \n to message about demoting connector force-probes (git-fixes).
- drm/dp_mst: Fix all mstb marked as not probed after suspend/resume (git-fixes).
- drm/drm_file: Fix pid refcounting race (git-fixes).
- drm/etnaviv: fix DMA direction handling for cached RW buffers (git-fixes).
- drm/etnaviv: fix tx clock gating on some GC7000 variants (stable-fixes).
- drm/exynos/vidi: fix memory leak in .get_modes() (stable-fixes).
- drm/exynos: dp: drop driver owner initialization (stable-fixes).
- drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found (git-fixes).
- drm/fbdev-dma: Fix framebuffer mode for big endian devices (git-fixes).
- drm/fbdev-dma: Only set smem_start is enable per module option (git-fixes).
- drm/fbdev-generic: Do not set physical framebuffer address (git-fixes).
- drm/fbdev-generic: Fix framebuffer on big endian devices (git-fixes).
- drm/gma500: Remove lid code (git-fixes).
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (git-fixes).
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (git-fixes).
- drm/i915/audio: Fix audio time stamp programming for DP (stable-fixes).
- drm/i915/bios: Fix parsing backlight BDB data (git-fixes).
- drm/i915/dp: Do not switch the LTTPR mode on an active link (git-fixes).
- drm/i915/dpt: Make DPT object unshrinkable (git-fixes).
- drm/i915/gt: Automate CCS Mode setting during engine resets (git-fixes).
- drm/i915/gt: Disarm breadcrumbs if engines are already idle (git-fixes).
- drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 (git-fixes).
- drm/i915/gt: Fix CCS id's calculation for CCS mode setting (git-fixes).
- drm/i915/gt: Fix potential UAF by revoke of fence registers (git-fixes).
- drm/i915/guc: avoid FIELD_PREP warning (git-fixes).
- drm/i915/hwmon: Get rid of devm (stable-fixes).
- drm/i915/lspcon: Separate lspcon probe and lspcon init (bsc#1193599).
- drm/i915/mso: using joiner is not possible with eDP MSO (git-fixes).
- drm/i915: Disable live M/N updates when using bigjoiner (stable-fixes).
- drm/i915: Fix audio component initialization (git-fixes).
- drm/komeda: check for error-valued pointer (git-fixes).
- drm/lcdif: Do not disable clocks on already suspended hardware (git-fixes).
- drm/lima: Mark simple_ondemand governor as softdep (git-fixes).
- drm/lima: add mask irq callback to gp and pp (stable-fixes).
- drm/lima: fix shared irq handling on driver remove (stable-fixes).
- drm/lima: mask irqs in timeout path before hard reset (stable-fixes).
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj (git-fixes).
- drm/mediatek: Add DRM_MODE_ROTATE_0 to rotation property (git-fixes).
- drm/mediatek: Add OVL compatible name for MT8195 (git-fixes).
- drm/mediatek: Add missing plane settings when async update (git-fixes).
- drm/mediatek: Call drm_atomic_helper_shutdown() at shutdown time (stable-fixes).
- drm/mediatek: Fix XRGB setting error in Mixer (git-fixes).
- drm/mediatek: Fix XRGB setting error in OVL (git-fixes).
- drm/mediatek: Fix bit depth overwritten for mtk_ovl_set bit_depth() (git-fixes).
- drm/mediatek: Fix destination alpha error in OVL (git-fixes).
- drm/mediatek: Init `ddp_comp` with devm_kcalloc() (git-fixes).
- drm/mediatek: Remove less-than-zero comparison of an unsigned value (git-fixes).
- drm/mediatek: Set DRM mode configs accordingly (git-fixes).
- drm/mediatek: Support DRM plane alpha in Mixer (git-fixes).
- drm/mediatek: Support DRM plane alpha in OVL (git-fixes).
- drm/mediatek: Support RGBA8888 and RGBX8888 in OVL on MT8195 (git-fixes).
- drm/mediatek: Turn off the layers with zero width or height (git-fixes).
- drm/mediatek: Use 8-bit alpha in ETHDR (git-fixes).
- drm/mediatek: dp: Fix mtk_dp_aux_transfer return value (git-fixes).
- drm/meson: dw-hdmi: add bandgap setting for g12 (git-fixes).
- drm/meson: dw-hdmi: power up phy on device init (git-fixes).
- drm/meson: fix canvas release in bind function (git-fixes).
- drm/meson: gate px_clk when setting rate (git-fixes).
- drm/meson: vclk: fix calculation of 59.94 fractional rates (git-fixes).
- drm/mgag200: Bind I2C lifetime to DRM device (git-fixes).
- drm/mgag200: Set DDC timeout in milliseconds (git-fixes).
- drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_dcs_write_seq() (git-fixes).
- drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_generic_write_seq() (git-fixes).
- drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails (git-fixes).
- drm/msm/adreno: fix CP cycles stat retrieval on a7xx (git-fixes).
- drm/msm/dp: Avoid a long timeout for AUX transfer if nothing connected (git-fixes).
- drm/msm/dp: allow voltage swing / pre emphasis of 3 (git-fixes).
- drm/msm/dpu: Add callback function pointer check before its call (git-fixes).
- drm/msm/dpu: Allow configuring multiple active DSC blocks (git-fixes).
- drm/msm/dpu: Always flush the slave INTF on the CTL (git-fixes).
- drm/msm/dpu: drop validity checks for clear_pending_flush() ctl op (git-fixes).
- drm/msm/dpu: fix encoder irq wait skip (git-fixes).
- drm/msm/dsi: Print dual-DSI-adjusted pclk instead of original mode pclk (git-fixes).
- drm/msm/dsi: set VIDEO_COMPRESSION_MODE_CTRL_WC (git-fixes).
- drm/msm/mdp5: Remove MDP_CAP_SRC_SPLIT from msm8x53_config (git-fixes).
- drm/nouveau/disp: Fix missing backlight control on Macbook 5, 1 (bsc#1223838).
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (stable-fixes).
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (stable-fixes).
- drm/nouveau/dp: Do not probe eDP ports twice harder (stable-fixes).
- drm/nouveau/dp: Fix incorrect return code in r535_dp_aux_xfer() (git-fixes).
- drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor() (stable-fixes).
- drm/nouveau: do not attempt to schedule hpd_work on headless cards (git-fixes).
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (git-fixes).
- drm/nouveau: use tile_mode and pte_kind for VM_BIND bo allocations (git-fixes).
- drm/omapdrm: Fix console by implementing fb_dirty (git-fixes).
- drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() (git-fixes).
- drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators (git-fixes).
- drm/panel: himax-hx8394: Handle errors from mipi_dsi_dcs_set_display_on() better (git-fixes).
- drm/panel: ili9341: Respect deferred probe (git-fixes).
- drm/panel: ili9341: Use predefined error codes (git-fixes).
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (stable-fixes).
- drm/panel: ilitek-ili9882t: Check for errors on the NOP in prepare() (git-fixes).
- drm/panel: ilitek-ili9882t: If prepare fails, disable GPIO before regulators (git-fixes).
- drm/panel: ltk050h3146w: add MIPI_DSI_MODE_VIDEO to LTK050H3148W flags (git-fixes).
- drm/panel: ltk050h3146w: drop duplicate commands from LTK050H3148W init (git-fixes).
- drm/panel: novatek-nt35950: Do not log an error when DSI host can't be found (git-fixes).
- drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector (git-fixes).
- drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA (git-fixes).
- drm/panel: sitronix-st7789v: Add check for of_drm_get_panel_orientation (git-fixes).
- drm/panel: sitronix-st7789v: fix display size for jt240mhqs_hwt_ek_e3 panel (git-fixes).
- drm/panel: sitronix-st7789v: fix timing for jt240mhqs_hwt_ek_e3 panel (git-fixes).
- drm/panel: sitronix-st7789v: tweak timing for jt240mhqs_hwt_ek_e3 panel (git-fixes).
- drm/panfrost: Mark simple_ondemand governor as softdep (git-fixes).
- drm/qxl: Add check for drm_cvt_mode (git-fixes).
- drm/radeon/radeon_display: Decrease the size of allocated memory (stable-fixes).
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it (stable-fixes).
- drm/radeon: fix UBSAN warning in kv_dpm.c (stable-fixes).
- drm/radeon: make -fstrict-flex-arrays=3 happy (git-fixes).
- drm/radeon: silence UBSAN warning (v3) (stable-fixes).
- drm/rockchip: vop2: Do not divide height twice for YUV (git-fixes).
- drm/rockchip: vop2: Fix the port mux of VP2 (git-fixes).
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) (git-fixes).
- drm/sun4i: hdmi: Convert encoder to atomic (stable-fixes).
- drm/sun4i: hdmi: Move mode_set into enable (stable-fixes).
- drm/ttm: Always take the bo delayed cleanup path for imported bos (git-fixes).
- drm/udl: Remove DRM_CONNECTOR_POLL_HPD (git-fixes).
- drm/vmwgfx: 3D disabled should not effect STDU memory limits (git-fixes).
- drm/vmwgfx: Do not memcmp equivalent pointers (git-fixes).
- drm/vmwgfx: Filter modes which exceed graphics memory (git-fixes).
- drm/vmwgfx: Fix Legacy Display Unit (git-fixes).
- drm/vmwgfx: Fix invalid reads in fence signaled events (git-fixes).
- drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency (stable-fixes).
- drm: add drm_gem_object_is_shared_for_memory_stats() helper (stable-fixes).
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference (git-fixes).
- drm: panel-orientation-quirks: Add quirk for Aya Neo KUN (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for Valve Galileo (stable-fixes).
- drm: vc4: Fix possible null pointer dereference (git-fixes).
- drm: zynqmp_dpsub: Always register bridge (git-fixes).
- drm: zynqmp_dpsub: Fix an error handling path in zynqmp_dpsub_probe() (git-fixes).
- drm: zynqmp_kms: Fix AUX bus not getting unregistered (git-fixes).
- dt-bindings: clock: qcom: Add missing UFS QREF clocks (git-fixes)
- dump_stack: Do not get cpu_sync for panic CPU (bsc#1225607).
- dyndbg: fix old BUG_ON in &gt;control parser (stable-fixes).
- e1000e: Workaround for sporadic MDI error on Meteor Lake systems (git-fixes).
- e1000e: move force SMBUS from enable ulp function to avoid PHY loss issue (git-fixes).
- ecryptfs: Fix buffer size for tag 66 packet (git-fixes)
- ecryptfs: Reject casefold directory inodes (git-fixes)
- eeprom: at24: Probe for DDR3 thermal sensor in the SPD case (stable-fixes).
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure (git-fixes).
- efi/unaccepted: do not let /proc/vmcore try to access unaccepted memory (git-fixes).
- efi/unaccepted: touch soft lockup during memory accept (git-fixes).
- efi/x86: Free EFI memory map only when installing a new one (git-fixes).
- efi: libstub: only free priv.runtime_map when allocated (git-fixes).
- erofs: ensure m_llen is reset to 0 if metadata is invalid (git-fixes).
- exfat: fix potential deadlock on __exfat_get_dentry_set (git-fixes).
- extcon: max8997: select IRQ_DOMAIN instead of depending on it (git-fixes).
- f2fs: fix error path of __f2fs_build_free_nids (git-fixes).
- fast_dput(): handle underflows gracefully (git-fixes)
- fat: fix uninitialized field in nostale filehandles (git-fixes)
- fbdev: fix incorrect address computation in deferred IO (git-fixes).
- fbdev: savage: Handle err return when savagefb_check_var failed (git-fixes).
- fbdev: sh7760fb: allow modular build (git-fixes).
- fbdev: shmobile: fix snprintf truncation (git-fixes).
- fbdev: sisfb: hide unused variables (git-fixes).
- filelock: fix potential use-after-free in posix_lock_inode (git-fixes).
- firewire: ohci: mask bus reset interrupts between ISR and bottom half (stable-fixes).
- firmware: cs_dsp: Fix overflow checking of wmfw header (git-fixes).
- firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (git-fixes).
- firmware: cs_dsp: Return error if block header overflows file (git-fixes).
- firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (git-fixes).
- firmware: cs_dsp: Validate payload length before processing block (git-fixes).
- firmware: dmi-id: add a release callback function (git-fixes).
- firmware: dmi: Stop decoding on broken entry (stable-fixes).
- firmware: psci: Fix return value from psci_system_suspend() (git-fixes).
- firmware: raspberrypi: Use correct device for DMA mappings (git-fixes).
- firmware: turris-mox-rwtm: Do not complete if there are no waiters (git-fixes).
- firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() (git-fixes).
- firmware: turris-mox-rwtm: Initialize completion before mailbox (git-fixes).
- fpga: dfl-pci: add PCI subdevice ID for Intel D5005 card (stable-fixes).
- fs/9p: only translate RWX permissions for plain 9P2000 (git-fixes)
- fs/9p: translate O_TRUNC into OTRUNC (git-fixes)
- fs/file: fix the check in find_next_fd() (git-fixes).
- fs/pipe: Fix lockdep false-positive in watchqueue pipe_write() (git-fixes).
- fs: Fix error checking for d_hash_and_lookup() (git-fixes)
- fs: indicate request originates from old mount API (git-fixes)
- fs: relax mount_setattr() permission checks (git-fixes)
- fsverity: skip PKCS#7 parser when keyring is empty (git-fixes)
- ftrace: Fix possible use-after-free issue in ftrace_location() (git-fixes).
- fuse: do not unhash root (bsc#1223946).
- fuse: fix root lookup with nonzero generation (bsc#1223945).
- fuse: verify {g,u}id mount options correctly (bsc#1228193).
- geneve: fix header validation in geneve[6]_xmit_skb (git-fixes).
- genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after() (git-fixes).
- gfs2: Do not forget to complete delayed withdraw (git-fixes).
- gfs2: Fix "ignore unlock failures after withdraw" (git-fixes).
- gfs2: Fix invalid metadata access in punch_hole (git-fixes).
- gfs2: Get rid of gfs2_alloc_blocks generation parameter (git-fixes).
- gfs2: Rename gfs2_lookup_{ simple =&gt; meta } (git-fixes).
- gfs2: Use mapping-&gt;gfp_mask for metadata inodes (git-fixes).
- gfs2: convert to ctime accessor functions (git-fixes).
- gpio: crystalcove: Use -ENOTSUPP consistently (stable-fixes).
- gpio: davinci: Validate the obtained number of IRQs (git-fixes).
- gpio: lpc32xx: fix module autoloading (stable-fixes).
- gpio: mc33880: Convert comma to semicolon (git-fixes).
- gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (stable-fixes).
- gpio: tangier: Use correct type for the IRQ chip data (git-fixes).
- gpio: tegra186: Fix tegra186_gpio_is_accessible() check (git-fixes).
- gpio: tqmx86: fix broken IRQ_TYPE_EDGE_BOTH interrupt type (git-fixes).
- gpio: tqmx86: fix typo in Kconfig label (git-fixes).
- gpio: tqmx86: introduce shadow register for GPIO output value (git-fixes).
- gpio: tqmx86: store IRQ trigger type and unmask status separately (git-fixes).
- gpio: wcove: Use -ENOTSUPP consistently (stable-fixes).
- gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1) (git-fixes).
- gpiolib: cdev: fix uninitialised kfifo (git-fixes).
- gpiolib: cdev: relocate debounce_period_us from struct gpio_desc (stable-fixes).
- gpiolib: swnode: Remove wrong header inclusion (git-fixes).
- gpu: host1x: Do not setup DMA for virtual devices (stable-fixes).
- hfsplus: fix to avoid false alarm of circular locking (git-fixes).
- hfsplus: fix uninit-value in copy_name (git-fixes).
- hpet: Support 32-bit userspace (git-fixes).
- hwmon: (adt7475) Fix default duty on fan is disabled (git-fixes).
- hwmon: (corsair-cpro) Protect ccp-&gt;wait_input_report with a spinlock (git-fixes).
- hwmon: (corsair-cpro) Use a separate buffer for sending commands (git-fixes).
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event() (git-fixes).
- hwmon: (intel-m10-bmc-hwmon) Fix multiplier for N6000 board power sensor (git-fixes).
- hwmon: (lm70) fix links in doc and comments (git-fixes).
- hwmon: (max6697) Fix swapped temp{1,8} critical alarms (git-fixes).
- hwmon: (max6697) Fix underflow when writing limit attributes (git-fixes).
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us (git-fixes).
- hwmon: (shtc1) Fix property misspelling (git-fixes).
- hwrng: amd - Convert PCIBIOS_* return codes to errnos (git-fixes).
- hwrng: core - Fix wrong quality calculation at hw rng registration (git-fixes).
- i2c: acpi: Unbind mux adapters before delete (git-fixes).
- i2c: at91: Fix the functionality flags of the slave-only interface (git-fixes).
- i2c: cadence: Avoid fifo clear after start (git-fixes).
- i2c: designware: Fix the functionality flags of the slave-only interface (git-fixes).
- i2c: i801: Annotate apanel_addr as __ro_after_init (stable-fixes).
- i2c: mark HostNotify target address as used (git-fixes).
- i2c: ocores: set IACK bit after core is enabled (git-fixes).
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (git-fixes).
- i2c: pxa: hide unused icr_bits[] variable (git-fixes).
- i2c: rcar: bring hardware to known state when probing (git-fixes).
- i2c: smbus: fix NULL function pointer dereference (git-fixes).
- i2c: synquacer: Fix an error handling path in synquacer_i2c_probe() (git-fixes).
- i2c: testunit: avoid re-issued work after read message (git-fixes).
- i2c: testunit: correct Kconfig description (git-fixes).
- i2c: testunit: discard write requests while old command is running (git-fixes).
- i2c: testunit: do not erase registers after STOP (git-fixes).
- i3c: master: svc: change ENXIO to EAGAIN when IBI occurs during start frame (git-fixes).
- i3c: master: svc: fix invalidate IBI type and miss call client IBI handler (git-fixes).
- i40e: Enforce software interrupt during busy-poll exit (git-fixes).
- i40e: Fix VF MAC filter removal (git-fixes).
- i40e: fix i40e_count_filters() to count only active/new filters (git-fixes).
- i40e: fix vf may be used uninitialized in this function warning (git-fixes).
- i40e: fix: remove needless retries of NVM update (bsc#1227736).
- ice: fix enabling RX VLAN filtering (git-fixes).
- ida: make 'ida_dump' static (git-fixes).
- idma64: Do not try to serve interrupts when device is powered off (git-fixes).
- idpf: extend tx watchdog timeout (bsc#1224137).
- idpf: fix kernel panic on unknown packet types (git-fixes).
- iio: Fix the sorting functionality in iio_gts_build_avail_time_table (git-fixes).
- iio: accel: fxls8962af: select IIO_BUFFER &amp; IIO_KFIFO_BUF (git-fixes).
- iio: accel: mxc4005: Interrupt handling fixes (git-fixes).
- iio: accel: mxc4005: Reset chip on probe() and resume() (stable-fixes).
- iio: accel: mxc4005: allow module autoloading via OF compatible (stable-fixes).
- iio: adc: ad7266: Fix variable checking bug (git-fixes).
- iio: adc: ad9467: fix scan type sign (git-fixes).
- iio: adc: ad9467: use chip_info variables instead of array (stable-fixes).
- iio: adc: ad9467: use spi_get_device_match_data() (stable-fixes).
- iio: adc: stm32: Fixing err code to not indicate success (git-fixes).
- iio: chemical: bme680: Fix calibration data variable (git-fixes).
- iio: chemical: bme680: Fix overflows in compensate() functions (git-fixes).
- iio: chemical: bme680: Fix pressure value output (git-fixes).
- iio: chemical: bme680: Fix sensor data read operation (git-fixes).
- iio: core: Leave private pointer NULL when no private data supplied (git-fixes).
- iio: dac: ad5592r: fix temperature channel scaling value (git-fixes).
- iio: frequency: adrf6780: rm clk provider include (git-fixes).
- iio: imu: inv_icm42600: delete unneeded update watermark call (git-fixes).
- iio: pressure: Fixes BME280 SPI driver data (git-fixes).
- iio: pressure: bmp280: Fix BMP580 temperature reading (stable-fixes).
- iio: pressure: dps310: support negative temperature values (git-fixes).
- iio: pressure: fix some word spelling errors (stable-fixes).
- iio: xilinx-ams: Do not include ams_ctrl_channels in scan_mask (git-fixes).
- iio:imu: adis16475: Fix sync mode setting (git-fixes).
- init/main.c: Fix potential static_command_line memory overflow (git-fixes).
- init: open /initrd.image with O_LARGEFILE (stable-fixes).
- input: Add event code for accessibility key (stable-fixes).
- input: Add support for "Do Not Disturb" (stable-fixes).
- intel_th: pci: Add Granite Rapids SOC support (stable-fixes).
- intel_th: pci: Add Granite Rapids support (stable-fixes).
- intel_th: pci: Add Lunar Lake support (stable-fixes).
- intel_th: pci: Add Meteor Lake-S CPU support (stable-fixes).
- intel_th: pci: Add Meteor Lake-S support (stable-fixes).
- intel_th: pci: Add Sapphire Rapids SOC support (stable-fixes).
- interconnect: qcom: qcm2290: Fix mas_snoc_bimc QoS port assignment (git-fixes).
- interconnect: qcom: qcm2290: Fix mas_snoc_bimc RPM master ID (git-fixes).
- io-wq: write next_work before dropping acct_lock (git-fixes).
- io_uring/io-wq: Use set_bit() and test_bit() at worker-&gt;flags (git-fixes).
- io_uring/io-wq: avoid garbage value of 'match' in io_wq_enqueue() (git-fixes).
- io_uring/kbuf: get rid of bl-&gt;is_ready (git-fixes).
- io_uring/kbuf: get rid of lower BGID lists (git-fixes). Including kabi preservation patch.
- io_uring/kbuf: protect io_buffer_list teardown with a reference (git-fixes).
- io_uring/kbuf: rename is_mapped (git-fixes).
- io_uring/net: correct the type of variable (git-fixes).
- io_uring/net: correctly handle multishot recvmsg retry setup (git-fixes).
- io_uring/net: fix sendzc lazy wake polling (git-fixes).
- io_uring/net: move receive multishot out of the generic msghdr path (git-fixes).
- io_uring/net: restore msg_control on sendzc retry (git-fixes).
- io_uring/net: unify how recvmsg and sendmsg copy in the msghdr (git-fixes).
- io_uring/rsrc: do not lock while !TASK_RUNNING (git-fixes).
- io_uring/rsrc: fix incorrect assignment of iter-&gt;nr_segs in io_import_fixed (git-fixes).
- io_uring/rw: do not allow multishot reads without NOWAIT support (git-fixes).
- io_uring/rw: return IOU_ISSUE_SKIP_COMPLETE for multishot retry (git-fixes).
- io_uring/sqpoll: work around a potential audit memory leak (git-fixes).
- io_uring/unix: drop usage of io_uring socket (git-fixes).
- io_uring: Fix io_cqring_wait() not restoring sigmask on get_timespec64() failure (git-fixes).
- io_uring: clean rings on NO_MMAP alloc fail (git-fixes).
- io_uring: clear opcode specific data for an early failure (git-fixes).
- io_uring: do not save/restore iowait state (git-fixes).
- io_uring: fail NOP if non-zero op flags is passed in (git-fixes).
- io_uring: fix io_queue_proc modifying req-&gt;flags (git-fixes).
- io_uring: fix mshot io-wq checks (git-fixes).
- io_uring: fix mshot read defer taskrun cqe posting (git-fixes).
- io_uring: fix poll_remove stalled req completion (git-fixes).
- io_uring: kabi cookie remove (bsc#1217384).
- io_uring: remove looping around handling traditional task_work (git-fixes).
- io_uring: remove unconditional looping in local task_work handling (git-fixes).
- io_uring: use private workqueue for exit work (git-fixes).
- io_uring: use the right type for work_llist empty check (git-fixes).
- iomap: clear the per-folio dirty bits on all writeback failures (git-fixes)
- iommu/amd: Enhance def_domain_type to handle untrusted device (git-fixes).
- iommu/amd: Fix panic accessing amd_iommu_enable_faulting (bsc#1224767).
- iommu/amd: Fix sysfs leak in iommu init (git-fixes).
- iommu/arm-smmu-v3: Free MSIs in case of ENOMEM (git-fixes).
- iommu/dma: Force swiotlb_max_mapping_size on an untrusted device (bsc#1224331)
- iommu/vt-d: Allocate DMAR fault interrupts locally (bsc#1224767).
- iommu/vt-d: Fix WARN_ON in iommu probe path (git-fixes).
- iommu/vt-d: Improve ITE fault handling if target device isn't present (git-fixes).
- iommu/vt-d: Use rbtree to track iommu probed devices (git-fixes).
- iommu: Fix compilation without CONFIG_IOMMU_INTEL (git-fixes).
- iommu: Return right value in iommu_sva_bind_device() (git-fixes).
- iommu: Undo pasid attachment only for the devices that have succeeded (git-fixes).
- iommu: mtk: fix module autoloading (git-fixes).
- iommufd: Add missing IOMMUFD_DRIVER kconfig for the selftest (git-fixes).
- ipmi: ssif_bmc: prevent integer overflow on 32bit systems (git-fixes).
- ipv4: annotate data-races around fi-&gt;fib_dead (git-fixes).
- ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
- irqchip/alpine-msi: Fix off-by-one in allocation error path (git-fixes).
- irqchip/armada-370-xp: Suppress unused-function warning (git-fixes).
- irqchip/gic-v3-its: Do not assume vPE tables are preallocated (git-fixes).
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 (git-fixes).
- irqchip/gic-v3-its: Prevent double free on error (git-fixes).
- irqchip/loongson-pch-msi: Fix off-by-one on allocation error path (git-fixes).
- irqchip/mbigen: Do not use bus_get_dev_root() to find the parent (git-fixes).
- irqchip/renesas-rzg2l: Add macro to retrieve TITSR register offset based on register's index (stable-fixes).
- irqchip/renesas-rzg2l: Flush posted write in irq_eoi() (git-fixes).
- irqchip/renesas-rzg2l: Implement restriction when writing ISCR register (stable-fixes).
- irqchip/renesas-rzg2l: Prevent spurious interrupts when setting trigger type (git-fixes).
- irqchip/renesas-rzg2l: Rename rzg2l_irq_eoi() (stable-fixes).
- irqchip/renesas-rzg2l: Rename rzg2l_tint_eoi() (stable-fixes).
- iwlwifi: fw: fix more kernel-doc warnings (bsc#1227149).
- iwlwifi: mvm: Drop unused fw_trips_index[] from iwl_mvm_thermal_device (bsc#1227149).
- iwlwifi: mvm: Populate trip table before registering thermal zone (bsc#1227149).
- iwlwifi: mvm: Use for_each_thermal_trip() for walking trip points (bsc#1227149).
- jffs2: Fix potential illegal address access in jffs2_free_inode (git-fixes).
- jffs2: prevent xattr node from overflowing the eraseblock (git-fixes).
- jfs: Fix array-index-out-of-bounds in diFree (git-fixes).
- jfs: xattr: fix buffer overflow for invalid xattr (bsc#1227383).
- kABI fix of KVM: x86/pmu: Allow programming events that match unsupported arch events (bsc#1225696).
- kABI fix of KVM: x86/pmu: Prioritize VMX interception over
- kABI fix of KVM: x86: Snapshot if a vCPU's vendor model is AMD vs.  Intel compatible (git-fixes).
- kABI workaround for cs35l56 (git-fixes).
- kABI workaround for of driver changes (git-fixes).
- kABI workaround for sof_ipc_pcm_ops (git-fixes).
- kABI workaround for wireless updates (bsc#1227149).
- kABI: bpf: verifier kABI workaround (bsc#1225903).
- kabi fix of perf/x86/intel: Expose existence of callback support to KVM (git fixes).
- kabi/severities: Ignore io_uring internal symbols
- kabi/severities: Remove mitigation-related symbols Those are used by the core kernel to implement CPU vulnerabilities mitigation and are not expected to be consumed by 3rd party users.
- kabi/severities: cleanup and update for WiFi driver entries (bsc#1227149)
- kabi/severities: cover all ath/* drivers (bsc#1227149) All symbols in ath/* network drivers are local and can be ignored
- kabi/severities: cover all mt76 modules (bsc#1227149)
- kabi/severities: ignore IMS functions They were dropped in previous patches. Noone is supposed to use them.
- kabi/severities: ignore TAS2781 symbol drop, it's only locally used
- kabi/severities: ignore amd pds internal symbols
- kabi/severities: ignore kABI changes Realtek WiFi drivers (bsc#1227149) All those symbols are local and used for its own helpers
- kabi/severities: ignore xfrm_bpf_md_dst that depends on CONFIG_DEBUG_* (bsc#1223415)
- kabi: Use __iowriteXX_copy_inlined for in-kernel modules (bsc#1226502)
- kasan, fortify: properly rename memintrinsics (git-fixes).
- kbuild: Fix build target deb-pkg: ln: failed to create hard link (git-fixes).
- kbuild: Install dtb files as 0644 in Makefile.dtbinst (git-fixes).
- kbuild: avoid build error when single DTB is turned into composite DTB (git-fixes).
- kbuild: doc: Update default INSTALL_MOD_DIR from extra to updates (git-fixes).
- kconfig: doc: fix a typo in the note about 'imply' (git-fixes).
- kconfig: fix comparison to constant symbols, 'm', 'n' (git-fixes).
- kconfig: gconf: give a proper initial state to the Save button (stable-fixes).
- kconfig: remove wrong expr_trans_bool() (stable-fixes).
- kcov: do not lose track of remote references during softirqs (git-fixes).
- kernel-binary: vdso: Own module_dir
- kernel-doc: fix struct_group_tagged() parsing (git-fixes).
- kexec: do syscore_shutdown() in kernel_kexec (git-fixes).
- kheaders: explicitly define file modes for archived headers (stable-fixes).
- knfsd: LOOKUP can return an illegal error value (git-fixes).
- kobject_uevent: Fix OOB access within zap_modalias_env() (git-fixes).
- kprobe/ftrace: bail out if ftrace was killed (git-fixes).
- kprobe/ftrace: fix build error due to bad function definition (git-fixes).
- kprobes: Fix possible use-after-free issue on kprobe registration (git-fixes).
- kselftest: Add a ksft_perror() helper (stable-fixes).
- kunit/fortify: Fix mismatched kvalloc()/vfree() usage (git-fixes).
- kunit: Fix checksum tests on big endian CPUs (git-fixed).
- leds: flash: leds-qcom-flash: Test the correct variable in init (git-fixes).
- leds: mt6360: Fix memory leak in mt6360_init_isnk_properties() (git-fixes).
- leds: pwm: Disable PWM when going to suspend (git-fixes).
- leds: ss4200: Convert PCIBIOS_* return codes to errnos (git-fixes).
- leds: trigger: Unregister sysfs attributes before calling deactivate() (git-fixes).
- leds: triggers: Flush pending brightness before activating trigger (git-fixes).
- lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (git-fixes).
- lib: objagg: Fix general protection fault (git-fixes).
- lib: objagg: Fix spelling (git-fixes).
- lib: test_objagg: Fix spelling (git-fixes).
- libceph: fix race between delayed_work() and ceph_monc_stop() (bsc#1228192).
- libperf evlist: Avoid out-of-bounds access (git-fixes).
- libsubcmd: Fix parse-options memory leak (git-fixes).
- livepatch: Fix missing newline character in klp_resolve_symbols() (bsc#1223539).
- locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock (git-fixes)
- lsm: fix the logic in security_inode_getsecctx() (git-fixes).
- mISDN: Fix a use after free in hfcmulti_tx() (git-fixes).
- mISDN: fix MISDN_TIME_STAMP handling (git-fixes).
- mac802154: fix time calculation in ieee802154_configure_durations() (git-fixes).
- mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable() (git-fixes).
- maple_tree: fix mas_empty_area_rev() null pointer dereference (git-fixes).
- media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries (git-fixes).
- media: dt-bindings: ovti,ov2680: Fix the power supply names (git-fixes).
- media: dvb-frontends: tda10048: Fix integer overflow (stable-fixes).
- media: dvb-frontends: tda18271c2dd: Remove casting during div (stable-fixes).
- media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() (git-fixes).
- media: dvb-usb: dib0700_devices: Add missing release_firmware() (stable-fixes).
- media: dvb: as102-fe: Fix as10x_register_addr packing (stable-fixes).
- media: dvbdev: Initialize sbuf (stable-fixes).
- media: dw2102: Do not translate i2c read into write (stable-fixes).
- media: dw2102: fix a potential buffer overflow (git-fixes).
- media: flexcop-usb: fix sanity check of bNumEndpoints (git-fixes).
- media: i2c: Fix imx412 exposure control (git-fixes).
- media: i2c: et8ek8: Do not strip remove function when driver is builtin (git-fixes).
- media: imon: Fix race getting ictx-&gt;lock (git-fixes).
- media: imx-jpeg: Drop initial source change event if capture has been setup (git-fixes).
- media: imx-jpeg: Remove some redundant error logs (git-fixes).
- media: imx-pxp: Fix ERR_PTR dereference in pxp_probe() (git-fixes).
- media: ipu3-cio2: Request IRQ earlier (git-fixes).
- media: lgdt3306a: Add a check against null-pointer-def (stable-fixes).
- media: mc: Fix graph walk in media_pipeline_start (git-fixes).
- media: mc: mark the media devnode as registered from the, start (git-fixes).
- media: mxl5xx: Move xpt structures off stack (stable-fixes).
- media: ngene: Add dvb_ca_en50221_init return value check (git-fixes).
- media: pci: ivtv: Add check for DMA map result (git-fixes).
- media: radio-shark2: Avoid led_names truncations (git-fixes).
- media: rcar-vin: Fix YUYV8_1X16 handling for CSI-2 (git-fixes).
- media: rcar-vin: work around -Wenum-compare-conditional warning (git-fixes).
- media: renesas: vsp1: Fix _irqsave and _irq mix (git-fixes).
- media: renesas: vsp1: Store RPF partition configuration per RPF instance (git-fixes).
- media: s2255: Use refcount_t instead of atomic_t for num_channels (stable-fixes).
- media: stk1160: fix bounds checking in stk1160_copy_video() (git-fixes).
- media: sunxi: a83-mips-csi2: also select GENERIC_PHY (git-fixes).
- media: uvcvideo: Add quirk for Logitech Rally Bar (git-fixes).
- media: uvcvideo: Fix integer overflow calculating timestamp (git-fixes).
- media: uvcvideo: Override default flags (git-fixes).
- media: v4l2-core: hold videodev_lock until dev reg, finishes (stable-fixes).
- media: v4l2-subdev: Fix stream handling for crop API (git-fixes).
- media: v4l: Do not turn on privacy LED if streamon fails (git-fixes).
- media: v4l: async: Fix NULL pointer dereference in adding ancillary links (git-fixes).
- media: v4l: subdev: Fix typo in documentation (git-fixes).
- media: venus: fix use after free in vdec_close (git-fixes).
- media: venus: flush all buffers in output plane streamoff (git-fixes).
- mei: demote client disconnect warning on suspend to debug (stable-fixes).
- mei: me: add lunar lake point M DID (stable-fixes).
- mei: me: release irq in mei_me_pci_resume error path (git-fixes).
- mfd: omap-usb-tll: Use struct_size to allocate tll (git-fixes).
- mfd: pm8008: Fix regmap irq chip initialisation (git-fixes).
- misc: fastrpc: Avoid updating PD type for capability request (git-fixes).
- misc: fastrpc: Copy the complete capability structure to user (git-fixes).
- misc: fastrpc: Fix DSP capabilities request (git-fixes).
- misc: fastrpc: Fix memory leak in audio daemon attach operation (git-fixes).
- misc: fastrpc: Fix ownership reassignment of remote heap (git-fixes).
- misc: fastrpc: Restrict untrusted app to attach to privileged PD (git-fixes).
- misc: microchip: pci1xxxx: Fix a memory leak in the error handling of gp_aux_bus_probe() (git-fixes).
- misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe() (git-fixes).
- mlxbf_gige: stop interface during shutdown (git-fixes).
- mlxsw: Use refcount_t for reference counting (git-fixes).
- mm/slab: make __free(kfree) accept error pointers (git-fixes).
- mm: page_owner: fix wrong information in dump_page_owner (git-fixes).
- mmc: core: Add HS400 tuning in HS400es initialization (stable-fixes).
- mmc: core: Add mmc_gpiod_set_cd_config() function (stable-fixes).
- mmc: core: Do not force a retune before RPMB switch (stable-fixes).
- mmc: davinci: Do not strip remove function when driver is builtin (git-fixes).
- mmc: sdhci-acpi: Add quirk to enable pull-up on the card-detect GPIO on Asus T100TA (git-fixes).
- mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A (stable-fixes).
- mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working (stable-fixes).
- mmc: sdhci-acpi: Sort DMI quirks alphabetically (stable-fixes).
- mmc: sdhci-brcmstb: check R1_STATUS for erase/trim/discard (git-fixes).
- mmc: sdhci-msm: pervent access to suspended controller (git-fixes).
- mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos (git-fixes).
- mmc: sdhci: Add support for "Tuning Error" interrupts (stable-fixes).
- mmc: sdhci: Do not invert write-protect twice (git-fixes).
- mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() (git-fixes).
- mmc: sdhci_am654: Add ITAPDLYSEL in sdhci_j721e_4bit_set_clock (git-fixes).
- mmc: sdhci_am654: Add OTAP/ITAP delay enable (git-fixes).
- mmc: sdhci_am654: Add tuning algorithm for delay chain (git-fixes).
- mmc: sdhci_am654: Fix ITAPDLY for HS400 timing (git-fixes).
- mmc: sdhci_am654: Write ITAPDLY for DDR52 timing (git-fixes).
- module: do not ignore sysfs_create_link() failures (git-fixes).
- mptcp: Remove unnecessary test for __mptcp_init_sock() (git-fixes).
- mptcp: annotate data-races around msk-&gt;rmem_fwd_alloc (git-fixes).
- mptcp: fix bogus receive window shrinkage with multiple subflows (git-fixes).
- mptcp: move __mptcp_error_report in protocol.c (git-fixes).
- mptcp: process pending subflow error on close (git-fixes).
- mt76: connac: move more mt7921/mt7915 mac shared code in connac lib (bsc#1227149).
- mt76: mt7996: rely on mt76_sta_stats in mt76_wcid (bsc#1227149).
- mtd: core: Report error if first mtd_otp_size() call fails in mtd_otp_nvmem_add() (git-fixes).
- mtd: diskonchip: work around ubsan link failure (stable-fixes).
- mtd: partitions: redboot: Added conversion of operands to a larger type (stable-fixes).
- mtd: rawnand: Bypass a couple of sanity checks during NAND identification (git-fixes).
- mtd: rawnand: Ensure ECC configuration is propagated to upper layers (git-fixes).
- mtd: rawnand: Fix the nand_read_data_op() early check (git-fixes).
- mtd: rawnand: hynix: fixed typo (git-fixes).
- mtd: rawnand: rockchip: ensure NVDDR timings are rejected (git-fixes).
- net/dcb: check for detached device before executing callbacks (bsc#1215587).
- net/mlx5: Correctly compare pkt reformat ids (git-fixes).
- net/mlx5: E-switch, store eswitch pointer before registering devlink_param (git-fixes).
- net/mlx5: Fix MTMP register capability offset in MCAM register (git-fixes).
- net/mlx5: Fix peer devlink set for SF representor devlink port (git-fixes).
- net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (git-fixes).
- net/mlx5: Properly link new fs rules into the tree (git-fixes).
- net/mlx5: Register devlink first under devlink lock (git-fixes).
- net/mlx5: Restore mistakenly dropped parts in register devlink flow (git-fixes).
- net/mlx5: SF, Stop waiting for FW as teardown was called (git-fixes).
- net/mlx5: offset comp irq index in name by one (git-fixes).
- net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit (git-fixes).
- net/mlx5e: Fix mlx5e_priv_init() cleanup flow (git-fixes).
- net/mlx5e: HTB, Fix inconsistencies with QoS SQs number (git-fixes).
- net/mlx5e: RSS, Block XOR hash with over 128 channels (git-fixes).
- net/mlx5e: RSS, Block changing channels number when RXFH is configured (git-fixes).
- net/smc: bugfix for smcr v2 server connect success statistic (git-fixes).
- net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add (git-fixes).
- net: Remove conditional threaded-NAPI wakeup based on task state (bsc#1214683 (PREEMPT_RT prerequisite backports)).
- net: annotate data-races around sk-&gt;sk_bind_phc (git-fixes).
- net: annotate data-races around sk-&gt;sk_forward_alloc (git-fixes).
- net: annotate data-races around sk-&gt;sk_lingertime (git-fixes).
- net: annotate data-races around sk-&gt;sk_tsflags (git-fixes).
- net: can: j1939: Initialize unused data in j1939_send_one() (git-fixes).
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (git-fixes).
- net: can: j1939: recover socket queue on CAN bus error during BAM transmission (git-fixes).
- net: dsa: mt7530: trap link-local frames regardless of ST Port State (git-fixes).
- net: dsa: sja1105: Fix parameters order in sja1110_pcs_mdio_write_c45() (git-fixes).
- net: ena: Fix incorrect descriptor free behavior (git-fixes).
- net: ena: Fix potential sign extension issue (git-fixes).
- net: ena: Fix redundant device NUMA node override (jsc#PED-8688).
- net: ena: Move XDP code to its new files (git-fixes).
- net: ena: Pass ena_adapter instead of net_device to ena_xmit_common() (git-fixes).
- net: ena: Set tx_info-&gt;xdpf value to NULL (git-fixes).
- net: ena: Use tx_ring instead of xdp_ring for XDP channel TX (git-fixes).
- net: ena: Wrong missing IO completions check order (git-fixes).
- net: ethernet: mtk_wed: introduce mtk_wed_buf structure (bsc#1227149).
- net: ethernet: mtk_wed: rename mtk_rxbm_desc in mtk_wed_bm_desc (bsc#1227149).
- net: fec: Set mac_managed_pm during probe (git-fixes).
- net: fill in MODULE_DESCRIPTION()s in kuba@'s modules (bsc#1227149).
- net: hns3: Remove io_stop_wc() calls after __iowrite64_copy() (bsc#1226502)
- net: ks8851: Handle softirqs at the end of IRQ thread to fix hang (git-fixes).
- net: ks8851: Inline ks8851_rx_skb() (git-fixes).
- net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs (git-fixes).
- net: lan743x: Support WOL at both the PHY and MAC appropriately (git-fixes).
- net: lan743x: disable WOL upon resume to restore full data path operation (git-fixes).
- net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() (stable-fixes).
- net: mana: Enable MANA driver on ARM64 with 4K page size (jsc#PED-8491).
- net: mana: Fix possible double free in error handling path (git-fixes).
- net: mana: Fix the extra HZ in mana_hwc_send_request (git-fixes).
- net: nfc: remove inappropriate attrs check (stable-fixes).
- net: phy: Micrel KSZ8061: fix errata solution not taking effect problem (git-fixes).
- net: phy: micrel: add Microchip KSZ 9477 to the device table (git-fixes).
- net: phy: micrel: fix KSZ9477 PHY issues after suspend/resume (git-fixes).
- net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8061 (git-fixes).
- net: phy: microchip: lan87xx: reinit PHY after cable test (git-fixes).
- net: phy: mxl-gpy: Remove interrupt mask clearing from config_init (git-fixes).
- net: phy: phy_device: Fix PHY LED blinking code comment (git-fixes).
- net: ravb: Always process TX descriptor ring (git-fixes).
- net: ravb: Always update error counters (git-fixes).
- net: sparx5: fix wrong config being used when reconfiguring PCS (git-fixes).
- net: sparx5: flower: fix fragment flags handling (git-fixes).
- net: stmmac: fix rx queue priority assignment (git-fixes).
- net: tls, fix WARNIING in __sk_msg_free (bsc#1221858).
- net: tls: fix returned read length with async decrypt (bsc#1221858).
- net: tls: fix use-after-free with partial reads and async (bsc#1221858).
- net: usb: ax88179_178a: fix link status when link is set to down/up (git-fixes).
- net: usb: ax88179_178a: improve link status logs (git-fixes).
- net: usb: ax88179_178a: improve reset check (git-fixes).
- net: usb: ax88179_178a: stop lying about skb-&gt;truesize (git-fixes).
- net: usb: qmi_wwan: add Telit FN912 compositions (stable-fixes).
- net: usb: qmi_wwan: add Telit FN920C04 compositions (git-fixes).
- net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings (git-fixes).
- net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM (git-fixes).
- net: usb: smsc95xx: stop lying about skb-&gt;truesize (git-fixes).
- net: usb: sr9700: stop lying about skb-&gt;truesize (git-fixes).
- net:usb:qmi_wwan: support Rolling modules (stable-fixes).
- netfilter: nf_tables: disable toggling dormant table state more than once (git-fixes).
- netfilter: nf_tables: uapi: Describe NFTA_RULE_CHAIN_ID (git-fixes).
- netfilter: nft_ct: fix l3num expectations with inet pseudo family (git-fixes).
- netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention (git-fixes).
- nfc/nci: Add the inconsistency check between the input data length and count (stable-fixes).
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (git-fixes).
- nfc: nci: Fix kcov check in nci_rx_work() (git-fixes).
- nfc: nci: Fix uninit-value in nci_rx_work (git-fixes).
- nfs: Avoid flushing many pages with NFS_FILE_SYNC (bsc#1218442).
- nfs: Block on write congestion (bsc#1218442).
- nfs: Bump default write congestion size (bsc#1218442).
- nfs: Drop pointless check from nfs_commit_release_pages() (bsc#1218442).
- nfs: Fix up kabi after adding write_congestion_wait (bsc#1218442).
- nfs: Handle error of rpc_proc_register() in nfs_net_init() (git-fixes).
- nfs: Properly initialize server-&gt;writeback (bsc#1218442).
- nfs: drop the incorrect assertion in nfs_swap_rw() (git-fixes).
- nfs: fix undefined behavior in nfs_block_bits() (git-fixes).
- nfs: keep server info for remounts (git-fixes).
- nfsd: hold a lighter-weight client reference over CB_RECALL_ANY (git-fixes).
- nfsd: optimise recalculate_deny_mode() for a common case (bsc#1217912).
- nfsd: use __fput_sync() to avoid delayed closing of files (bsc#1223380 bsc#1217408).
- nilfs2: add missing check for inode numbers on directory entries (stable-fixes).
- nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro (git-fixes).
- nilfs2: convert persistent object allocator to use kmap_local (git-fixes).
- nilfs2: fix incorrect inode allocation from reserved inodes (git-fixes).
- nilfs2: fix inode number range checks (stable-fixes).
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (git-fixes).
- nilfs2: fix out-of-range warning (git-fixes).
- nilfs2: fix potential hang in nilfs_detach_log_writer() (git-fixes).
- nilfs2: fix unexpected freezing of nilfs_segctor_sync() (git-fixes).
- nilfs2: fix use-after-free of timer for log writer thread (git-fixes).
- nilfs2: make superblock data array index computation sparse friendly (git-fixes).
- nilfs2: return the mapped address from nilfs_get_page() (stable-fixes).
- nouveau: add an ioctl to report vram usage (stable-fixes).
- nouveau: add an ioctl to return vram bar size (stable-fixes).
- nouveau: report byte usage in VRAM usage (git-fixes).
- nvme-fabrics: short-circuit reconnect retries (bsc#1186716).
- nvme-multipath: fix io accounting on failover (git-fixes).
- nvme-pci: Add quirk for broken MSIs (git-fixes).
- nvme-tcp: Export the nvme_tcp_wq to sysfs (bsc#1224049).
- nvme-tcp: strict pdu pacing to avoid send stalls on TLS (bsc#1221858).
- nvme/tcp: Add wq_unbound modparam for nvme_tcp_wq (bsc#1224049).
- nvme: cancel pending I/O if nvme controller is in terminal state (bsc#1226503).
- nvme: do not retry authentication failures (bsc#1186716).
- nvme: find numa distance only if controller has valid numa id (git-fixes).
- nvme: fix multipath batched completion accounting (git-fixes).
- nvme: fix nvme_pr_* status code parsing (git-fixes).
- nvme: fix warn output about shared namespaces without CONFIG_NVME_MULTIPATH (git-fixes).
- nvme: return kernel error codes for admin queue connect (bsc#1186716).
- nvmet-auth: replace pr_debug() with pr_err() to report an error (git-fixes).
- nvmet-auth: return the error code to the nvmet_auth_host_hash() callers (git-fixes).
- nvmet-passthru: propagate status from id override functions (git-fixes).
- nvmet-tcp: fix possible memory leak when tearing down a controller (git-fixes).
- nvmet: fix ns enable/disable possible hang (git-fixes).
- nvmet: fix nvme status code when namespace is disabled (git-fixes).
- nvmet: lock config semaphore when accessing DH-HMAC-CHAP key (bsc#1186716).
- nvmet: prevent sprintf() overflow in nvmet_subsys_nsid_exists() (git-fixes).
- nvmet: return DHCHAP status codes from nvmet_setup_auth() (bsc#1186716).
- ocfs2: adjust enabling place for la window (bsc#1219224).
- ocfs2: fix DIO failure due to insufficient transaction credits (git-fixes).
- ocfs2: fix races between hole punching and AIO+DIO (git-fixes).
- ocfs2: fix sparse warnings (bsc#1219224).
- ocfs2: improve write IO performance when fragmentation is high (bsc#1219224).
- ocfs2: speed up chain-list searching (bsc#1219224).
- ocfs2: use coarse time for new created files (git-fixes).
- octeontx2-af: Add array index check (git-fixes).
- octeontx2-af: Fix NIX SQ mode and BP config (git-fixes).
- octeontx2-af: Fix issue with loading coalesced KPU profiles (git-fixes).
- octeontx2-pf: Fix transmit scheduler resource leak (git-fixes).
- octeontx2-pf: check negative error code in otx2_open() (git-fixes).
- octeontx2-pf: fix FLOW_DIS_IS_FRAGMENT implementation (git-fixes).
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals (git-fixes).
- of: module: add buffer overflow check in of_modalias() (git-fixes).
- of: module: prevent NULL pointer dereference in vsnprintf() (stable-fixes).
- of: property: Add in-ports/out-ports support to of_graph_get_port_parent() (stable-fixes).
- of: property: Improve finding the consumer of a remote-endpoint property (git-fixes).
- of: property: Improve finding the supplier of a remote-endpoint property (git-fixes).
- of: property: fix typo in io-channels (git-fixes).
- of: property: fw_devlink: Fix stupid bug in remote-endpoint parsing (git-fixes).
- of: unittest: Fix compile in the non-dynamic case (git-fixes).
- orangefs: fix out-of-bounds fsid access (git-fixes).
- pNFS/filelayout: fixup pNfs allocation modes (git-fixes).
- perf annotate: Fix annotation_calc_lines() to pass correct address to get_srcline() (git-fixes).
- perf annotate: Get rid of duplicate --group option item (git-fixes).
- perf auxtrace: Fix multiple use of --itrace option (git-fixes).
- perf bench internals inject-build-id: Fix trap divide when collecting just one DSO (git-fixes).
- perf bench uprobe: Remove lib64 from libc.so.6 binary path (git-fixes).
- perf bpf: Clean up the generated/copied vmlinux.h (git-fixes).
- perf daemon: Fix file leak in daemon_session__control (git-fixes).
- perf docs: Document bpf event modifier (git-fixes).
- perf evsel: Fix duplicate initialization of data-&gt;id in evsel__parse_sample() (git-fixes).
- perf expr: Fix "has_event" function for metric style events (git-fixes).
- perf intel-pt: Fix unassigned instruction op (discovered by MemorySanitizer) (git-fixes).
- perf jevents: Drop or simplify small integer values (git-fixes).
- perf list: fix short description for some cache events (git-fixes).
- perf lock contention: Add a missing NULL check (git-fixes).
- perf metric: Do not remove scale from counts (git-fixes).
- perf pmu: Count sys and cpuid JSON events separately (git fixes).
- perf pmu: Fix a potential memory leak in perf_pmu__lookup() (git-fixes).
- perf pmu: Treat the msr pmu as software (git-fixes).
- perf print-events: make is_event_supported() more robust (git-fixes).
- perf probe: Add missing libgen.h header needed for using basename() (git-fixes).
- perf record: Check conflict between '--timestamp-filename' option and pipe mode before recording (git-fixes).
- perf record: Delete session after stopping sideband thread (git-fixes).
- perf record: Fix debug message placement for test consumption (git-fixes).
- perf record: Fix possible incorrect free in record__switch_output() (git-fixes).
- perf report: Avoid SEGV in report__setup_sample_type() (git-fixes).
- perf sched timehist: Fix -g/--call-graph option failure (git-fixes).
- perf script: Show also errors for --insn-trace option (git-fixes).
- perf srcline: Add missed addr2line closes (git-fixes).
- perf stat: Avoid metric-only segv (git-fixes).
- perf stat: Do not display metric header for non-leader uncore events (git-fixes).
- perf stat: Do not fail on metrics on s390 z/VM systems (git-fixes).
- perf symbols: Fix ownership of string in dso__load_vmlinux() (git-fixes).
- perf test shell arm_coresight: Increase buffer size for Coresight basic tests (git-fixes).
- perf tests: Apply attributes to all events in object code reading test (git-fixes).
- perf tests: Make "test data symbol" more robust on Neoverse N1 (git-fixes).
- perf thread: Fixes to thread__new() related to initializing comm (git-fixes).
- perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() (git-fixes).
- perf top: Uniform the event name for the hybrid machine (git-fixes).
- perf top: Use evsel's cpus to replace user_requested_cpus (git-fixes).
- perf ui browser: Avoid SEGV on title (git fixes).
- perf ui browser: Do not save pointer to stack memory (git-fixes).
- perf vendor events amd: Add Zen 4 memory controller events (git-fixes).
- perf vendor events amd: Fix Zen 4 cache latency events (git-fixes).
- perf/x86/amd/lbr: Discard erroneous branch entries (git-fixes).
- perf/x86/intel/ds: Do not clear -&gt;pebs_data_cfg for the last PEBS event (git-fixes).
- perf/x86/intel: Expose existence of callback support to KVM (git-fixes).
- perf/x86: Fix out of range data (git-fixes).
- perf: Enqueue SIGTRAP always via task_work (bsc#1214683 (PREEMPT_RT prerequisite backports)).
- perf: Move irq_work_queue() where the event is prepared (bsc#1214683 (PREEMPT_RT prerequisite backports)).
- perf: Remove perf_swevent_get_recursion_context() from perf_pending_task() (bsc#1214683 (PREEMPT_RT prerequisite backports)).
- perf: Split __perf_pending_irq() out of perf_pending_irq() (bsc#1214683 (PREEMPT_RT prerequisite backports)).
- phy: cadence-torrent: Check return value on register read (git-fixes).
- phy: freescale: imx8m-pcie: fix pcie link-up instability (git-fixes).
- phy: marvell: a3700-comphy: Fix hardcoded array size (git-fixes).
- phy: marvell: a3700-comphy: Fix out of bounds read (git-fixes).
- phy: rockchip-snps-pcie3: fix bifurcation on rk3588 (git-fixes).
- phy: rockchip-snps-pcie3: fix clearing PHP_GRF_PCIESEL_CON bits (git-fixes).
- phy: rockchip: naneng-combphy: Fix mux on rk3588 (git-fixes).
- phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered (git-fixes).
- pinctrl/meson: fix typo in PDM's pin name (git-fixes).
- pinctrl: armada-37xx: remove an unused variable (git-fixes).
- pinctrl: baytrail: Fix selecting gpio pinctrl state (git-fixes).
- pinctrl: core: delete incorrect free in pinctrl_enable() (git-fixes).
- pinctrl: core: fix possible memory leak when pinctrl_enable() fails (git-fixes).
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (git-fixes).
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (git-fixes).
- pinctrl: freescale: mxs: Fix refcount of child (git-fixes).
- pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback (git-fixes).
- pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE (git-fixes).
- pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T (git-fixes).
- pinctrl: qcom: pinctrl-sm7150: Fix sdc1 and ufs special pins regs (git-fixes).
- pinctrl: qcom: spmi-gpio: drop broken pm8008 support (git-fixes).
- pinctrl: renesas: r8a779g0: FIX PWM suffixes (git-fixes).
- pinctrl: renesas: r8a779g0: Fix (H)SCIF1 suffixes (git-fixes).
- pinctrl: renesas: r8a779g0: Fix (H)SCIF3 suffixes (git-fixes).
- pinctrl: renesas: r8a779g0: Fix CANFD5 suffix (git-fixes).
- pinctrl: renesas: r8a779g0: Fix FXR_TXEN[AB] suffixes (git-fixes).
- pinctrl: renesas: r8a779g0: Fix IRQ suffixes (git-fixes).
- pinctrl: renesas: r8a779g0: Fix TCLK suffixes (git-fixes).
- pinctrl: renesas: r8a779g0: Fix TPU suffixes (git-fixes).
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins (git-fixes).
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins (git-fixes).
- pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set (git-fixes).
- pinctrl: rockchip: update rk3308 iomux routes (git-fixes).
- pinctrl: rockchip: use dedicated pinctrl type for RK3328 (git-fixes).
- pinctrl: single: fix possible memory leak when pinctrl_enable() fails (git-fixes).
- pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails (git-fixes).
- platform/chrome: cros_ec_debugfs: fix wrong EC message version (git-fixes).
- platform/x86/amd/pmc: Extend Framework 13 quirk to more BIOSes (stable-fixes).
- platform/x86/intel-uncore-freq: Do not present root domain on error (git-fixes).
- platform/x86/intel/tpmi: Handle error from tpmi_process_info() (stable-fixes).
- platform/x86: ISST: Add Grand Ridge to HPM CPU list (stable-fixes).
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list (stable-fixes).
- platform/x86: dell-smbios: Fix wrong token data in sysfs (git-fixes).
- platform/x86: lg-laptop: Change ACPI device id (stable-fixes).
- platform/x86: lg-laptop: Remove LGEX0815 hotkey handling (stable-fixes).
- platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB (stable-fixes).
- platform/x86: thinkpad_acpi: Take hotkey_mutex during hotkey_exit() (git-fixes).
- platform/x86: toshiba_acpi: Add quirk for buttons on Z830 (stable-fixes).
- platform/x86: toshiba_acpi: Fix array out-of-bounds access (git-fixes).
- platform/x86: toshiba_acpi: Fix quickstart quirk handling (git-fixes).
- platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet (stable-fixes).
- platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro (stable-fixes).
- platform/x86: wireless-hotkey: Add support for LG Airplane Button (stable-fixes).
- platform/x86: xiaomi-wmi: Fix race condition when reporting key events (git-fixes).
- power: rt9455: hide unused rt9455_boost_voltage_values (git-fixes).
- power: supply: ab8500: Fix error handling when calling iio_read_channel_processed() (git-fixes).
- power: supply: cros_usbpd: provide ID table for avoiding fallback match (stable-fixes).
- power: supply: ingenic: Fix some error handling paths in ingenic_battery_get_property() (git-fixes).
- power: supply: mt6360_charger: Fix of_match for usb-otg-vbus regulator (git-fixes).
- powerpc/64s/radix/kfence: map __kfence_pool at page granularity (bsc#1223570 ltc#205770).
- powerpc/eeh: Permanently disable the removed device (bsc#1223991 ltc#205740).
- powerpc/prom: Add CPU info to hardware description string later (bsc#1215199).
- powerpc/pseries/lparcfg: drop error message from guest name lookup (bsc#1187716 ltc#193451 git-fixes).
- powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
- powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869).
- powerpc/pseries: make max polling consistent for longer H_CALLs (bsc#1215199).
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487).
- powerpc/uaccess: Fix build errors seen with GCC 13/14 (bsc#1194869).
- powerpc/uaccess: Use YZ asm constraint for ld (bsc#1194869).
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
- ppdev: Add an error check in register_device (git-fixes).
- prctl: generalize PR_SET_MDWE support check to be per-arch (bsc#1225610).
- printk: Add this_cpu_in_panic() (bsc#1225607).
- printk: Adjust mapping for 32bit seq macros (bsc#1225607).
- printk: Avoid non-panic CPUs writing to ringbuffer (bsc#1225607).
- printk: Consolidate console deferred printing (bsc#1225607).
- printk: Disable passing console lock owner completely during panic() (bsc#1225607).
- printk: Do not take console lock for console_flush_on_panic() (bsc#1225607).
- printk: For @suppress_panic_printk check for other CPU in panic (bsc#1225607).
- printk: Keep non-panic-CPUs out of console lock (bsc#1225607).
- printk: Let no_printk() use _printk() (bsc#1225618).
- printk: Reduce console_unblank() usage in unsafe scenarios (bsc#1225607).
- printk: Rename abandon_console_lock_in_panic() to other_cpu_in_panic() (bsc#1225607).
- printk: Update @console_may_schedule in console_trylock_spinning() (bsc#1225616).
- printk: Use prb_first_seq() as base for 32bit seq macros (bsc#1225607).
- printk: Wait for all reserved records with pr_flush() (bsc#1225607).
- printk: nbcon: Relocate 32bit seq macros (bsc#1225607).
- printk: ringbuffer: Clarify special lpos values (bsc#1225607).
- printk: ringbuffer: Cleanup reader terminology (bsc#1225607).
- printk: ringbuffer: Do not skip non-finalized records with prb_next_seq() (bsc#1225607).
- printk: ringbuffer: Skip non-finalized records in panic (bsc#1225607).
- proc/kcore: do not try to access unaccepted memory (git-fixes).
- pwm: sti: Prepare removing pwm_chip from driver data (stable-fixes).
- pwm: sti: Simplify probe function using devm functions (git-fixes).
- pwm: stm32: Always do lazy disabling (git-fixes).
- qibfs: fix dentry leak (git-fixes)
- regmap-i2c: Subtract reg size from max_write (stable-fixes).
- regmap: Add regmap_read_bypassed() (git-fixes).
- regulator: bd71815: fix ramp values (git-fixes).
- regulator: bd71828: Do not overwrite runtime voltages (git-fixes).
- regulator: change devm_regulator_get_enable_optional() stub to return Ok (git-fixes).
- regulator: change stubbed devm_regulator_get_enable to return Ok (git-fixes).
- regulator: core: Fix modpost error "regulator_get_regmap" undefined (git-fixes).
- regulator: core: fix debugfs creation regression (git-fixes).
- regulator: irq_helpers: duplicate IRQ name (stable-fixes).
- regulator: mt6360: De-capitalize devicetree regulator subnodes (git-fixes).
- regulator: tps65132: Add of_match table (stable-fixes).
- regulator: vqmmc-ipq4019: fix module autoloading (stable-fixes).
- remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init (git-fixes).
- remoteproc: imx_rproc: Skip over memory region when node value is NULL (git-fixes).
- remoteproc: k3-r5: Do not allow core1 to power up before core0 via sysfs (git-fixes).
- remoteproc: k3-r5: Fix IPC-only mode detection (git-fixes).
- remoteproc: k3-r5: Jump to error handling labels in start/stop errors (git-fixes).
- remoteproc: k3-r5: Wait for core0 power-up before powering up core1 (git-fixes).
- remoteproc: mediatek: Make sure IPI buffer fits in L2TCM (git-fixes).
- remoteproc: stm32_rproc: Fix mailbox interrupts queuing (git-fixes).
- ring-buffer: Fix a race between readers and resize checks (git-fixes).
- ring-buffer: Only update pages_touched when a new page is touched (git-fixes).
- ring-buffer: use READ_ONCE() to read cpu_buffer-&gt;commit_page in concurrent environment (git-fixes).
- rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL (git-fixes).
- rtc: abx80x: Fix return value of nvmem callback on read (git-fixes).
- rtc: cmos: Fix return value of nvmem callbacks (git-fixes).
- rtc: interface: Add RTC offset to alarm after fix-up (git-fixes).
- rtc: isl1208: Fix return value of nvmem callbacks (git-fixes).
- s390/bpf: Emit a barrier for BPF_FETCH instructions (git-fixes bsc#1224792).
- s390/cio: Ensure the copied buf is NUL terminated (git-fixes bsc#1223869).
- s390/cio: fix tracepoint subchannel type field (git-fixes bsc#1224793).
- s390/cpacf: Make use of invalid opcode produce a link error (git-fixes bsc#1227072).
- s390/cpacf: Split and rework cpacf query functions (git-fixes bsc#1225133).
- s390/cpum_cf: make crypto counters upward compatible across machine types (bsc#1224348).
- s390/ipl: Fix incorrect initialization of len fields in nvme reipl block (git-fixes bsc#1225136).
- s390/ipl: Fix incorrect initialization of nvme dump block (git-fixes bsc#1225134).
- s390/ism: Properly fix receive message buffer allocation (git-fixes bsc#1223590).
- s390/mm: Fix clearing storage keys for huge pages (git-fixes bsc#1223871).
- s390/mm: Fix storage key clearing for guest huge pages (git-fixes bsc#1223872).
- s390/qeth: Fix kernel panic after setting hsuid (git-fixes bsc#1223874).
- s390/vdso: Add CFI for RA register to asm macro vdso_func (git-fixes bsc#1223870).
- s390/vdso: drop '-fPIC' from LDFLAGS (git-fixes bsc#1223593).
- s390/zcrypt: fix reference counting on zcrypt card objects (git-fixes bsc#1223592).
- s390: Implement __iowrite32_copy() (bsc#1226502)
- s390: Stop using weak symbols for __iowrite64_copy() (bsc#1226502)
- saa7134: Unchecked i2c_transfer function result fixed (git-fixes).
- sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write() (bsc#1226791).
- sched/debug: Update stale reference to sched_debug.c (bsc#1214683 (PREEMPT_RT prerequisite backports)).
- sched/topology: Optimize topology_span_sane() (bsc#1225053).
- scsi: lpfc: Add support for 32 byte CDBs (bsc#1225842).
- scsi: lpfc: Change default logging level for unsolicited CT MIB commands (bsc#1225842).
- scsi: lpfc: Change lpfc_hba hba_flag member into a bitmask (bsc#1225842).
- scsi: lpfc: Clear deferred RSCN processing flag when driver is unloading (bsc#1225842).
- scsi: lpfc: Copyright updates for 14.4.0.2 patches (bsc#1225842).
- scsi: lpfc: Introduce rrq_list_lock to protect active_rrq_list (bsc#1225842).
- scsi: lpfc: Update logging of protection type for T10 DIF I/O (bsc#1225842).
- scsi: lpfc: Update lpfc version to 14.4.0.2 (bsc#1225842).
- sctp: annotate data-races around sk-&gt;sk_wmem_queued (git-fixes).
- selftests/binderfs: use the Makefile's rules, not Make's implicit rules (git-fixes).
- selftests/bpf: add edge case backtracking logic test (bsc#1225756).
- selftests/bpf: precision tracking test for BPF_NEG and BPF_END (bsc#1225756).
- selftests/bpf: test case for callback_depth states pruning logic (bsc#1225903).
- selftests/bpf: test if state loops are detected in a tricky case (bsc#1225903).
- selftests/bpf: test widening for iterating callbacks (bsc#1225903).
- selftests/bpf: tests for iterating callbacks (bsc#1225903).
- selftests/bpf: tests with delayed read/precision makrs in loop body (bsc#1225903).
- selftests/bpf: track string payload offset as scalar in strobemeta (bsc#1225903).
- selftests/bpf: track tcp payload offset as scalar in xdp_synproxy (bsc#1225903).
- selftests/ftrace: Fix event filter target_func selection (stable-fixes).
- selftests/ftrace: Limit length in subsystem-enable tests (git-fixes).
- selftests/kcmp: remove unused open mode (git-fixes).
- selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages (git-fixes).
- selftests/mm: fix build warnings on ppc64 (stable-fixes).
- selftests/net: convert test_bridge_neigh_suppress.sh to run it in unique namespace (stable-fixes).
- selftests/pidfd: Fix config for pidfd_setns_test (git-fixes).
- selftests/powerpc/dexcr: Add -no-pie to hashchk tests (git-fixes).
- selftests/resctrl: fix clang build failure: use LOCAL_HDRS (git-fixes).
- selftests/sigaltstack: Fix ppc64 GCC build (git-fixes).
- selftests/timers/posix_timers: Reimplement check_timer_distribution() (git-fixes).
- selftests: default to host arch for LLVM builds (git-fixes).
- selftests: fix OOM in msg_zerocopy selftest (git-fixes).
- selftests: hsr: Extend the testsuite to also cover HSRv1 (bsc#1214683 (PREEMPT_RT prerequisite backports)).
- selftests: hsr: Reorder the testsuite (bsc#1214683 (PREEMPT_RT prerequisite backports)).
- selftests: hsr: Use `let' properly (bsc#1214683 (PREEMPT_RT prerequisite backports)).
- selftests: kselftest: Fix build failure with NOLIBC (git-fixes).
- selftests: kselftest: Mark functions that unconditionally call exit() as __noreturn (git-fixes).
- selftests: make order checking verbose in msg_zerocopy selftest (git-fixes).
- selftests: mptcp: add ms units for tc-netem delay (stable-fixes).
- selftests: net: bridge: increase IGMP/MLD exclude timeout membership interval (git-fixes).
- selftests: net: kill smcrouted in the cleanup logic in amt.sh (git-fixes).
- selftests: net: move amt to socat for better compatibility (git-fixes).
- selftests: sud_test: return correct emulated syscall value on RISC-V (stable-fixes).
- selftests: test_bridge_neigh_suppress.sh: Fix failures due to duplicate MAC (git-fixes).
- selftests: timers: Convert posix_timers test to generate KTAP output (stable-fixes).
- selftests: timers: Fix abs() warning in posix_timers test (git-fixes).
- selftests: timers: Fix posix_timers ksft_print_msg() warning (git-fixes).
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior (stable-fixes).
- selinux: introduce an initial SID for early boot processes (bsc#1208593).
- serial: 8250_bcm7271: use default_mux_rate if possible (git-fixes).
- serial: 8520_mtk: Set RTS on shutdown for Rx in-band wakeup (git-fixes).
- serial: bcm63xx-uart: fix tx after conversion to uart_port_tx_limited() (git-fixes).
- serial: core: introduce uart_port_tx_limited_flags() (git-fixes).
- serial: exar: adding missing CTI and Exar PCI ids (stable-fixes).
- serial: imx: Introduce timeout when waiting on transmitter empty (stable-fixes).
- serial: imx: Raise TX trigger level to 8 (stable-fixes).
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code (stable-fixes).
- serial: max3100: Fix bitwise types (git-fixes).
- serial: max3100: Lock port-&gt;lock when calling uart_handle_cts_change() (git-fixes).
- serial: max3100: Update uart_driver_registered on driver removal (git-fixes).
- serial: pch: Do not disable interrupts while acquiring lock in ISR (bsc#1214683 (PREEMPT_RT prerequisite backports)).
- serial: pch: Do not initialize uart_port's spin_lock (bsc#1214683 (PREEMPT_RT prerequisite backports)).
- serial: pch: Invoke handle_rx_to() directly (bsc#1214683 (PREEMPT_RT prerequisite backports)).
- serial: pch: Make push_rx() return void (bsc#1214683 (PREEMPT_RT prerequisite backports)).
- serial: sc16is7xx: add proper sched.h include for sched_set_fifo() (git-fixes).
- serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler (git-fixes).
- serial: sh-sci: protect invalidating RXDMA on shutdown (git-fixes).
- slimbus: qcom-ngd-ctrl: Add timeout for wait operation (git-fixes).
- smb3: allow controlling length of time directory entries are cached with dir leases (git-fixes, bsc#1225172).
- smb3: allow controlling maximum number of cached directories (git-fixes, bsc#1225172).
- smb3: do not start laundromat thread when dir leases disabled (git-fixes, bsc#1225172).
- smb3: show beginning time for per share stats (bsc#1225172).
- smb: client: do not start laundromat thread on nohandlecache (git-fixes, bsc#1225172).
- smb: client: ensure to try all targets when finding nested links (bsc#1225172).
- smb: client: fix mount when dns_resolver key is not available (git-fixes, bsc#1225172).
- smb: client: fix parsing of SMB3.1.1 POSIX create context (git-fixes, bsc#1225172).
- smb: client: get rid of dfs code dep in namespace.c (bsc#1225172).
- smb: client: get rid of dfs naming in automount code (bsc#1225172).
- smb: client: introduce DFS_CACHE_TGT_LIST() (bsc#1225172).
- smb: client: make laundromat a delayed worker (git-fixes, bsc#1225172).
- smb: client: prevent new fids from being removed by laundromat (git-fixes, bsc#1225172).
- smb: client: reduce stack usage in cifs_try_adding_channels() (bsc#1225172).
- smb: client: remove extra @chan_count check in __cifs_put_smb_ses() (bsc#1225172).
- smb: client: rename cifs_dfs_ref.c to namespace.c (bsc#1225172).
- soc: mediatek: cmdq: Fix typo of CMDQ_JUMP_RELATIVE (git-fixes).
- soc: qcom: pdr: fix parsing of domains lists (git-fixes).
- soc: qcom: pdr: protect locator_addr with the main mutex (git-fixes).
- soc: qcom: pmic_glink: Handle the return value of pmic_glink_init (git-fixes).
- soc: qcom: pmic_glink: Make client-lock non-sleeping (git-fixes).
- soc: qcom: pmic_glink: do not traverse clients list without a lock (git-fixes).
- soc: qcom: pmic_glink: notify clients about the current state (git-fixes).
- soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request (git-fixes).
- soc: qcom: rpmh-rsc: Ensure irqs are not disabled by rpmh_rsc_send_data() callers (git-fixes).
- soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message (stable-fixes).
- soc: xilinx: rename cpu_number1 to dummy_cpu_number (git-fixes).
- soundwire: amd: fix for wake interrupt handling for clockstop mode (git-fixes).
- soundwire: cadence: fix invalid PDI offset (stable-fixes).
- speakup: Fix sizeof() vs ARRAY_SIZE() bug (git-fixes).
- spi: Do not mark message DMA mapped when no transfer in it is (git-fixes).
- spi: atmel-quadspi: Add missing check for clk_prepare (git-fixes).
- spi: cadence: Ensure data lines set to low during dummy-cycle period (stable-fixes).
- spi: fix null pointer dereference within spi_sync (git-fixes).
- spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs (git-fixes).
- spi: imx: Do not expect DMA for i.MX{25,35,50,51,53} cspi devices (stable-fixes).
- spi: microchip-core-qspi: fix setting spi bus clock rate (git-fixes).
- spi: microchip-core: defer asserting chip select until just before write to TX FIFO (git-fixes).
- spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer (git-fixes).
- spi: microchip-core: fix the issues in the isr (git-fixes).
- spi: microchip-core: only disable SPI controller when register value change requires it (git-fixes).
- spi: mux: set ctlr-&gt;bits_per_word_mask (stable-fixes).
- spi: spi-microchip-core: Fix the number of chip selects supported (git-fixes).
- spi: spidev: add correct compatible for Rohm BH2228FV (git-fixes).
- spi: stm32: Do not warn about spurious interrupts (git-fixes).
- spi: stm32: qspi: Clamp stm32_qspi_get_mode() output to CCR_BUSWIDTH_4 (git-fixes).
- spi: stm32: qspi: Fix dual flash mode sanity test in stm32_qspi_setup() (git-fixes).
- spi: xilinx: Fix kernel documentation in the xilinx_spi.h (git-fixes).
- spmi: hisi-spmi-controller: Do not override device identifier (git-fixes).
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent() (stable-fixes).
- staging: vt6655: Remove unused declaration of RFbAL7230SelectChannelPostProcess() (git-fixes).
- struct acpi_ec kABI workaround (git-fixes).
- sunrpc: fix NFSACL RPC retry on soft mount (git-fixes).
- swiotlb: Fix alignment checks when both allocation and DMA masks are (bsc#1224331)
- swiotlb: Fix double-allocation of slots due to broken alignment (bsc#1224331)
- swiotlb: Honour dma_alloc_coherent() alignment in swiotlb_alloc() (bsc#1224331)
- swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (bsc#1224331)
- tcp: Dump bound-only sockets in inet_diag (bsc#1204562).
- thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data (stable-fixes).
- thermal/drivers/mediatek/lvts_thermal: Return error in case of invalid efuse data (git-fixes).
- thermal/drivers/qcom/lmh: Check for SCM availability at probe (git-fixes).
- thermal/drivers/tsens: Fix null pointer dereference (git-fixes).
- thunderbolt: Avoid notify PM core about runtime PM resume (stable-fixes).
- thunderbolt: Fix wake configurations after device unplug (stable-fixes).
- thunderbolt: Introduce tb_path_deactivate_hop() (stable-fixes).
- thunderbolt: Introduce tb_port_reset() (stable-fixes).
- thunderbolt: Make tb_switch_reset() support Thunderbolt 2, 3 and USB4 routers (stable-fixes).
- thunderbolt: Reset only non-USB4 host routers in resume (git-fixes).
- thunderbolt: debugfs: Fix margin debugfs node creation condition (git-fixes).
- tls: break out of main loop when PEEK gets a non-data record (bsc#1221858).
- tls: do not skip over different type records from the rx_list (bsc#1221858).
- tls: fix peeking with sync+async decryption (bsc#1221858).
- tls: stop recv() if initial process_rx_list gave us non-DATA (bsc#1221858).
- tools/arch/x86/intel_sdsi: Fix maximum meter bundle length (git-fixes).
- tools/arch/x86/intel_sdsi: Fix meter_certificate decoding (git-fixes).
- tools/arch/x86/intel_sdsi: Fix meter_show display (git-fixes).
- tools/latency-collector: Fix -Wformat-security compile warns (git-fixes).
- tools/memory-model: Fix bug in lock.cat (git-fixes).
- tools/power turbostat: Expand probe_intel_uncore_frequency() (bsc#1221765).
- tools/power turbostat: Remember global max_die_id (stable-fixes).
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs (stable-fixes).
- tools: ynl: do not leak mcast_groups on init error (git-fixes).
- tools: ynl: fix handling of multiple mcast groups (git-fixes).
- tools: ynl: make sure we always pass yarg to mnl_cb_run (git-fixes).
- tpm_tis: Do *not* flush uninitialized work (git-fixes).
- tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (git-fixes).
- tracefs: Add missing lockdown check to tracefs_create_dir() (git-fixes).
- tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset() (git-fixes).
- tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test (git-fixes).
- tracing: Build event generation tests only as modules (git-fixes).
- tracing: hide unused ftrace_event_id_fops (git-fixes).
- tty: mcf: MCF54418 has 10 UARTS (git-fixes).
- tty: n_gsm: fix missing receive state reset after mode switch (git-fixes).
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (git-fixes).
- tty: n_tty: Fix buffer offsets when lookahead is used (git-fixes).
- usb-storage: alauda: Check whether the media is initialized (git-fixes).
- usb: Disable USB3 LPM at shutdown (stable-fixes).
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device (bsc#1220569).
- usb: aqc111: stop lying about skb-&gt;truesize (git-fixes).
- usb: atm: cxacru: fix endpoint checking in cxacru_bind() (git-fixes).
- usb: dwc3: Wait unconditionally after issuing EndXfer command (git-fixes).
- usb: dwc3: core: Add DWC31 version 2.00a controller (stable-fixes).
- usb: dwc3: core: Prevent phy suspend during init (Git-fixes).
- usb: dwc3: core: Workaround for CSR read timeout (stable-fixes).
- usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock (git-fixes).
- usb: dwc3: pci: Do not set "linux,phy_charger_detect" property on Lenovo Yoga Tab2 1380 (stable-fixes).
- usb: dwc3: pci: add support for the Intel Panther Lake (stable-fixes).
- usb: fotg210: Add missing kernel doc description (git-fixes).
- usb: gadget: aspeed_udc: fix device address configuration (git-fixes).
- usb: gadget: composite: fix OS descriptors w_value logic (git-fixes).
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (stable-fixes).
- usb: gadget: f_fs: Fix a race condition when processing setup packets (git-fixes).
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (git-fixes).
- usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error (stable-fixes).
- usb: gadget: function: Remove usage of the deprecated ida_simple_xx() API (stable-fixes).
- usb: gadget: printer: SS+ support (stable-fixes).
- usb: gadget: printer: fix races against disable (git-fixes).
- usb: gadget: u_audio: Clear uac pointer when freed (git-fixes).
- usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind (git-fixes).
- usb: gadget: uvc: configfs: ensure guid to be valid before set (stable-fixes).
- usb: gadget: uvc: use correct buffer size when parsing configfs lists (git-fixes).
- usb: misc: uss720: check for incompatible versions of the Belkin F5U002 (stable-fixes).
- usb: musb: da8xx: fix a resource leak in probe() (git-fixes).
- usb: ohci: Prevent missed ohci interrupts (git-fixes).
- usb: typec: tcpm: Check for port partner validity before consuming it (git-fixes).
- usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state (git-fixes).
- usb: typec: tcpm: clear pd_event queue in PORT_RESET (git-fixes).
- usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps (git-fixes).
- usb: typec: tcpm: unregister existing source caps before re-registration (git-fixes).
- usb: typec: tipd: fix event checking for tps6598x (git-fixes).
- usb: typec: ucsi: Ack also failed Get Error commands (git-fixes).
- usb: typec: ucsi: Never send a lone connector change ack (stable-fixes).
- usb: typec: ucsi: always register a link to USB PD device (git-fixes).
- usb: typec: ucsi: displayport: Fix potential deadlock (git-fixes).
- usb: typec: ucsi: glink: fix child node release in probe function (git-fixes).
- usb: typec: ucsi: simplify partner's PD caps registration (git-fixes).
- usb: typec: ucsi_glink: drop special handling for CCI_BUSY (stable-fixes).
- usb: ucsi: stm32: fix command completion handling (git-fixes).
- usb: xhci-plat: Do not include xhci.h (stable-fixes).
- usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (stable-fixes).
- vboxsf: explicitly deny setlease attempts (stable-fixes).
- vhost: Add smp_rmb() in vhost_enable_notify() (git-fixes).
- vhost: Add smp_rmb() in vhost_vq_avail_empty() (git-fixes).
- virtio-blk: Ensure no requests in virtqueues before deleting vqs (git-fixes).
- virtio: treat alloc_dax() -EOPNOTSUPP failure as non-fatal (bsc#1223944).
- virtio_net: Do not send RSS key if it is not supported (git-fixes).
- virtio_net: avoid data-races on dev-&gt;stats fields (git-fixes).
- virtio_net: checksum offloading handling fix (git-fixes).
- vmci: prevent speculation leaks by sanitizing event in event_deliver() (git-fixes).
- vmlinux.lds.h: catch .bss..L* sections into BSS") (git-fixes).
- vsock/virtio: fix packet delivery to tap device (git-fixes).
- watchdog: bd9576: Drop "always-running" property (git-fixes).
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger (git-fixes).
- watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin (git-fixes).
- watchdog: rzg2l_wdt: Check return status of pm_runtime_put() (git-fixes).
- watchdog: rzg2l_wdt: Use pm_runtime_resume_and_get() (git-fixes).
- watchdog: rzn1: Convert comma to semicolon (git-fixes).
- watchdog: sa1100: Fix PTR_ERR_OR_ZERO() vs NULL check in sa1100dog_probe() (git-fixes).
- wifi: add HAS_IOPORT dependencies (bsc#1227149).
- wifi: ar5523: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: ar5523: enable proper endpoint verification (git-fixes).
- wifi: ath10/11/12k: Use alloc_ordered_workqueue() to create ordered workqueues (bsc#1227149).
- wifi: ath10k: Annotate struct ath10k_ce_ring with __counted_by (bsc#1227149).
- wifi: ath10k: Convert to platform remove callback returning void (bsc#1227149).
- wifi: ath10k: Drop checks that are always false (bsc#1227149).
- wifi: ath10k: Drop cleaning of driver data from probe error path and remove (bsc#1227149).
- wifi: ath10k: Fix a few spelling errors (bsc#1227149).
- wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() (git-fixes).
- wifi: ath10k: Fix enum ath10k_fw_crash_dump_type kernel-doc (bsc#1227149).
- wifi: ath10k: Fix htt_data_tx_completion kernel-doc warning (bsc#1227149).
- wifi: ath10k: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: ath10k: Remove unused struct ath10k_htc_frame (bsc#1227149).
- wifi: ath10k: Update Qualcomm Innovation Center, Inc. copyrights (bsc#1227149).
- wifi: ath10k: Use DECLARE_FLEX_ARRAY() for ath10k_htc_record (bsc#1227149).
- wifi: ath10k: Use list_count_nodes() (bsc#1227149).
- wifi: ath10k: add missing wmi_10_4_feature_mask documentation (bsc#1227149).
- wifi: ath10k: add support to allow broadcast action frame RX (bsc#1227149).
- wifi: ath10k: consistently use kstrtoX_from_user() functions (bsc#1227149).
- wifi: ath10k: correctly document enum wmi_tlv_tx_pause_id (bsc#1227149).
- wifi: ath10k: drop HTT_DATA_TX_STATUS_DOWNLOAD_FAIL (bsc#1227149).
- wifi: ath10k: fix QCOM_RPROC_COMMON dependency (git-fixes).
- wifi: ath10k: fix Wvoid-pointer-to-enum-cast warning (bsc#1227149).
- wifi: ath10k: fix htt_q_state_conf &amp; htt_q_state kernel-doc (bsc#1227149).
- wifi: ath10k: improve structure padding (bsc#1227149).
- wifi: ath10k: indicate to mac80211 scan complete with aborted flag for ATH10K_SCAN_STARTING state (bsc#1227149).
- wifi: ath10k: poll service ready message before failing (git-fixes).
- wifi: ath10k: populate board data for WCN3990 (git-fixes).
- wifi: ath10k: remove ath10k_htc_record::pauload[] (bsc#1227149).
- wifi: ath10k: remove duplicate memset() in 10.4 TDLS peer update (bsc#1227149).
- wifi: ath10k: remove struct wmi_pdev_chanlist_update_event (bsc#1227149).
- wifi: ath10k: remove unused template structs (bsc#1227149).
- wifi: ath10k: replace ENOTSUPP with EOPNOTSUPP (bsc#1227149).
- wifi: ath10k: replace deprecated strncpy with memcpy (bsc#1227149).
- wifi: ath10k: simplify __ath10k_htt_tx_txq_recalc() (bsc#1227149).
- wifi: ath10k: simplify ath10k_peer_create() (bsc#1227149).
- wifi: ath10k: use flexible array in struct wmi_tdls_peer_capabilities (bsc#1227149).
- wifi: ath10k: use flexible array in struct wmi_host_mem_chunks (bsc#1227149).
- wifi: ath10k: use flexible arrays for WMI start scan TLVs (bsc#1227149).
- wifi: ath11k: Add HTT stats for PHY reset case (bsc#1227149).
- wifi: ath11k: Add coldboot calibration support for QCN9074 (bsc#1227149).
- wifi: ath11k: Allow ath11k to boot without caldata in ftm mode (bsc#1227149).
- wifi: ath11k: Consistently use ath11k_vif_to_arvif() (bsc#1227149).
- wifi: ath11k: Consolidate WMI peer flags (bsc#1227149).
- wifi: ath11k: Convert to platform remove callback returning void (bsc#1227149).
- wifi: ath11k: Do not directly use scan_flags in struct scan_req_params (bsc#1227149).
- wifi: ath11k: EMA beacon support (bsc#1227149).
- wifi: ath11k: Fix a few spelling errors (bsc#1227149).
- wifi: ath11k: Fix ath11k_htc_record flexible record (bsc#1227149).
- wifi: ath11k: Introduce and use ath11k_sta_to_arsta() (bsc#1227149).
- wifi: ath11k: MBSSID beacon support (bsc#1227149).
- wifi: ath11k: MBSSID configuration during vdev create/start (bsc#1227149).
- wifi: ath11k: MBSSID parameter configuration in AP mode (bsc#1227149).
- wifi: ath11k: Really consistently use ath11k_vif_to_arvif() (bsc#1227149).
- wifi: ath11k: Relocate the func ath11k_mac_bitrate_mask_num_ht_rates() and change hweight16 to hweight8 (bsc#1227149).
- wifi: ath11k: Remove ath11k_base::bd_api (bsc#1227149).
- wifi: ath11k: Remove cal_done check during probe (bsc#1227149).
- wifi: ath11k: Remove obsolete struct wmi_peer_flags_map *peer_flags (bsc#1227149).
- wifi: ath11k: Remove scan_flags union from struct scan_req_params (bsc#1227149).
- wifi: ath11k: Remove struct ath11k::ops (bsc#1227149).
- wifi: ath11k: Remove unneeded semicolon (bsc#1227149).
- wifi: ath11k: Remove unused declarations (bsc#1227149).
- wifi: ath11k: Remove unused struct ath11k_htc_frame (bsc#1227149).
- wifi: ath11k: Send HT fixed rate in WMI peer fixed param (bsc#1227149).
- wifi: ath11k: Split coldboot calibration hw_param (bsc#1227149).
- wifi: ath11k: Update Qualcomm Innovation Center, Inc. copyrights (bsc#1227149).
- wifi: ath11k: Use device_get_match_data() (bsc#1227149).
- wifi: ath11k: Use list_count_nodes() (bsc#1227149).
- wifi: ath11k: add WMI event debug messages (bsc#1227149).
- wifi: ath11k: add WMI_TLV_SERVICE_EXT_TPC_REG_SUPPORT service bit (bsc#1227149).
- wifi: ath11k: add chip id board name while searching board-2.bin for WCN6855 (bsc#1227149).
- wifi: ath11k: add firmware-2.bin support (bsc#1227149).
- wifi: ath11k: add handler for WMI_VDEV_SET_TPC_POWER_CMDID (bsc#1227149).
- wifi: ath11k: add parse of transmit power envelope element (bsc#1227149).
- wifi: ath11k: add parsing of phy bitmap for reg rules (bsc#1227149).
- wifi: ath11k: add support for QCA2066 (bsc#1227149).
- wifi: ath11k: add support to select 6 GHz regulatory type (bsc#1227149).
- wifi: ath11k: ath11k_debugfs_register(): fix format-truncation warning (bsc#1227149).
- wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay() (bsc#1227149).
- wifi: ath11k: call ath11k_mac_fils_discovery() without condition (bsc#1227149).
- wifi: ath11k: constify MHI channel and controller configs (bsc#1227149).
- wifi: ath11k: debug: add ATH11K_DBG_CE (bsc#1227149).
- wifi: ath11k: debug: remove unused ATH11K_DBG_ANY (bsc#1227149).
- wifi: ath11k: debug: use all upper case in ATH11k_DBG_HAL (bsc#1227149).
- wifi: ath11k: do not force enable power save on non-running vdevs (git-fixes).
- wifi: ath11k: do not use %pK (bsc#1227149).
- wifi: ath11k: document HAL_RX_BUF_RBM_SW4_BM (bsc#1227149).
- wifi: ath11k: dp: cleanup debug message (bsc#1227149).
- wifi: ath11k: driver settings for MBSSID and EMA (bsc#1227149).
- wifi: ath11k: drop NULL pointer check in ath11k_update_per_peer_tx_stats() (bsc#1227149).
- wifi: ath11k: drop redundant check in ath11k_dp_rx_mon_dest_process() (bsc#1227149).
- wifi: ath11k: enable 36 bit mask for stream DMA (bsc#1227149).
- wifi: ath11k: factory test mode support (bsc#1227149).
- wifi: ath11k: fill parameters for vdev set tpc power WMI command (bsc#1227149).
- wifi: ath11k: fix CAC running state during virtual interface start (bsc#1227149).
- wifi: ath11k: fix IOMMU errors on buffer rings (bsc#1227149).
- wifi: ath11k: fix RCU documentation in ath11k_mac_op_ipv6_changed() (git-fixes).
- wifi: ath11k: fix WCN6750 firmware crash caused by 17 num_vdevs (bsc#1227149).
- wifi: ath11k: fix Wvoid-pointer-to-enum-cast warning (bsc#1227149).
- wifi: ath11k: fix a possible dead lock caused by ab-&gt;base_lock (bsc#1227149).
- wifi: ath11k: fix ath11k_mac_op_remain_on_channel() stack usage (bsc#1227149).
- wifi: ath11k: fix connection failure due to unexpected peer delete (bsc#1227149).
- wifi: ath11k: fix tid bitmap is 0 in peer rx mu stats (bsc#1227149).
- wifi: ath11k: fix wrong definition of CE ring's base address (git-fixes).
- wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers (git-fixes).
- wifi: ath11k: hal: cleanup debug message (bsc#1227149).
- wifi: ath11k: htc: cleanup debug messages (bsc#1227149).
- wifi: ath11k: initialize eirp_power before use (bsc#1227149).
- wifi: ath11k: mac: fix struct ieee80211_sband_iftype_data handling (bsc#1227149).
- wifi: ath11k: mhi: add a warning message for MHI_CB_EE_RDDM crash (bsc#1227149).
- wifi: ath11k: move pci.ops registration ahead (bsc#1227149).
- wifi: ath11k: move power type check to ASSOC stage when connecting to 6 GHz AP (bsc#1227149).
- wifi: ath11k: move references from rsvd2 to info fields (bsc#1227149).
- wifi: ath11k: pci: cleanup debug logging (bsc#1227149).
- wifi: ath11k: print debug level in debug messages (bsc#1227149).
- wifi: ath11k: provide address list if chip supports 2 stations (bsc#1227149).
- wifi: ath11k: qmi: refactor ath11k_qmi_m3_load() (bsc#1227149).
- wifi: ath11k: refactor ath11k_wmi_tlv_parse_alloc() (bsc#1227149).
- wifi: ath11k: refactor setting country code logic (stable-fixes).
- wifi: ath11k: refactor vif parameter configurations (bsc#1227149).
- wifi: ath11k: rely on mac80211 debugfs handling for vif (bsc#1227149).
- wifi: ath11k: remove ath11k_htc_record::pauload[] (bsc#1227149).
- wifi: ath11k: remove invalid peer create logic (bsc#1227149).
- wifi: ath11k: remove manual mask names from debug messages (bsc#1227149).
- wifi: ath11k: remove unnecessary (void*) conversions (bsc#1227149).
- wifi: ath11k: remove unsupported event handlers (bsc#1227149).
- wifi: ath11k: remove unused function ath11k_tm_event_wmi() (bsc#1227149).
- wifi: ath11k: remove unused members of 'struct ath11k_base' (bsc#1227149).
- wifi: ath11k: remove unused scan_events from struct scan_req_params (bsc#1227149).
- wifi: ath11k: rename MBSSID fields in wmi_vdev_up_cmd (bsc#1227149).
- wifi: ath11k: rename ath11k_start_vdev_delay() (bsc#1227149).
- wifi: ath11k: rename the sc naming convention to ab (bsc#1227149).
- wifi: ath11k: rename the wmi_sc naming convention to wmi_ab (bsc#1227149).
- wifi: ath11k: replace ENOTSUPP with EOPNOTSUPP (bsc#1227149).
- wifi: ath11k: restore country code during resume (git-fixes).
- wifi: ath11k: save max transmit power in vdev start response event from firmware (bsc#1227149).
- wifi: ath11k: save power spectral density(PSD) of regulatory rule (bsc#1227149).
- wifi: ath11k: simplify ath11k_mac_validate_vht_he_fixed_rate_settings() (bsc#1227149).
- wifi: ath11k: simplify the code with module_platform_driver (bsc#1227149).
- wifi: ath11k: store cur_regulatory_info for each radio (bsc#1227149).
- wifi: ath11k: support 2 station interfaces (bsc#1227149).
- wifi: ath11k: update proper pdev/vdev id for testmode command (bsc#1227149).
- wifi: ath11k: update regulatory rules when connect to AP on 6 GHz band for station (bsc#1227149).
- wifi: ath11k: update regulatory rules when interface added (bsc#1227149).
- wifi: ath11k: use RCU when accessing struct inet6_dev::ac_list (bsc#1227149).
- wifi: ath11k: use WMI_VDEV_SET_TPC_POWER_CMDID when EXT_TPC_REG_SUPPORT for 6 GHz (bsc#1227149).
- wifi: ath11k: use kstrtoul_from_user() where appropriate (bsc#1227149).
- wifi: ath11k: use select for CRYPTO_MICHAEL_MIC (bsc#1227149).
- wifi: ath11k: wmi: add unified command debug messages (bsc#1227149).
- wifi: ath11k: wmi: cleanup error handling in ath11k_wmi_send_init_country_cmd() (bsc#1227149).
- wifi: ath11k: wmi: use common error handling style (bsc#1227149).
- wifi: ath11k: workaround too long expansion sparse warnings (bsc#1227149).
- wifi: ath12k: Add logic to write QRTR node id to scratch (bsc#1227149).
- wifi: ath12k: Add missing qmi_txn_cancel() calls (bsc#1227149).
- wifi: ath12k: Add support to parse new WMI event for 6 GHz regulatory (bsc#1227149).
- wifi: ath12k: Consistently use ath12k_vif_to_arvif() (bsc#1227149).
- wifi: ath12k: Consolidate WMI peer flags (bsc#1227149).
- wifi: ath12k: Correct 6 GHz frequency value in rx status (git-fixes).
- wifi: ath12k: Do not drop tx_status in failure case (git-fixes).
- wifi: ath12k: Do not use scan_flags from struct ath12k_wmi_scan_req_arg (bsc#1227149).
- wifi: ath12k: Enable Mesh support for QCN9274 (bsc#1227149).
- wifi: ath12k: Fix a few spelling errors (bsc#1227149).
- wifi: ath12k: Fix tx completion ring (WBM2SW) setup failure (git-fixes).
- wifi: ath12k: Fix uninitialized use of ret in ath12k_mac_allocate() (bsc#1227149).
- wifi: ath12k: Introduce and use ath12k_sta_to_arsta() (bsc#1227149).
- wifi: ath12k: Introduce the container for mac80211 hw (bsc#1227149).
- wifi: ath12k: Make QMI message rules const (bsc#1227149).
- wifi: ath12k: Optimize the mac80211 hw data access (bsc#1227149).
- wifi: ath12k: Read board id to support split-PHY QCN9274 (bsc#1227149).
- wifi: ath12k: Refactor the mac80211 hw access from link/radio (bsc#1227149).
- wifi: ath12k: Remove ath12k_base::bd_api (bsc#1227149).
- wifi: ath12k: Remove obsolete struct wmi_peer_flags_map *peer_flags (bsc#1227149).
- wifi: ath12k: Remove some dead code (bsc#1227149).
- wifi: ath12k: Remove struct ath12k::ops (bsc#1227149).
- wifi: ath12k: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: ath12k: Remove unnecessary struct qmi_txn initializers (bsc#1227149).
- wifi: ath12k: Remove unused declarations (bsc#1227149).
- wifi: ath12k: Remove unused scan_flags from struct ath12k_wmi_scan_req_arg (bsc#1227149).
- wifi: ath12k: Set default beacon mode to burst mode (bsc#1227149).
- wifi: ath12k: Use initializers for QMI message buffers (bsc#1227149).
- wifi: ath12k: Use msdu_end to check MCBC (bsc#1227149).
- wifi: ath12k: Use pdev_id rather than mac_id to get pdev (bsc#1227149).
- wifi: ath12k: WMI support to process EHT capabilities (bsc#1227149).
- wifi: ath12k: add 320 MHz bandwidth enums (bsc#1227149).
- wifi: ath12k: add CE and ext IRQ flag to indicate irq_handler (bsc#1227149).
- wifi: ath12k: add EHT PHY modes (bsc#1227149).
- wifi: ath12k: add MAC id support in WBM error path (bsc#1227149).
- wifi: ath12k: add MLO header in peer association (bsc#1227149).
- wifi: ath12k: add P2P IE in beacon template (bsc#1227149).
- wifi: ath12k: add QMI PHY capability learn support (bsc#1227149).
- wifi: ath12k: add WMI support for EHT peer (bsc#1227149).
- wifi: ath12k: add ath12k_qmi_free_resource() for recovery (bsc#1227149).
- wifi: ath12k: add fallback board name without variant while searching board-2.bin (bsc#1227149).
- wifi: ath12k: add firmware-2.bin support (bsc#1227149).
- wifi: ath12k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED (bsc#1227149).
- wifi: ath12k: add keep backward compatibility of PHY mode to avoid firmware crash (bsc#1227149).
- wifi: ath12k: add msdu_end structure for WCN7850 (bsc#1227149).
- wifi: ath12k: add parsing of phy bitmap for reg rules (bsc#1227149).
- wifi: ath12k: add processing for TWT disable event (bsc#1227149).
- wifi: ath12k: add processing for TWT enable event (bsc#1227149).
- wifi: ath12k: add qmi_cnss_feature_bitmap field to hardware parameters (bsc#1227149).
- wifi: ath12k: add rcu lock for ath12k_wmi_p2p_noa_event() (bsc#1227149).
- wifi: ath12k: add read variant from SMBIOS for download board data (bsc#1227149).
- wifi: ath12k: add string type to search board data in board-2.bin for WCN7850 (bsc#1227149).
- wifi: ath12k: add support for BA1024 (bsc#1227149).
- wifi: ath12k: add support for collecting firmware log (bsc#1227149).
- wifi: ath12k: add support for hardware rfkill for WCN7850 (bsc#1227149).
- wifi: ath12k: add support for peer meta data version (bsc#1227149).
- wifi: ath12k: add support one MSI vector (bsc#1227149).
- wifi: ath12k: add support to search regdb data in board-2.bin for WCN7850 (bsc#1227149).
- wifi: ath12k: add wait operation for tx management packets for flush from mac80211 (bsc#1227149).
- wifi: ath12k: advertise P2P dev support for WCN7850 (bsc#1227149).
- wifi: ath12k: allow specific mgmt frame tx while vdev is not up (bsc#1227149).
- wifi: ath12k: ath12k_start_vdev_delay(): convert to use ar (bsc#1227149).
- wifi: ath12k: avoid deadlock by change ieee80211_queue_work for regd_update_work (bsc#1227149).
- wifi: ath12k: avoid duplicated vdev stop (git-fixes).
- wifi: ath12k: avoid explicit HW conversion argument in Rxdma replenish (bsc#1227149).
- wifi: ath12k: avoid explicit RBM id argument in Rxdma replenish (bsc#1227149).
- wifi: ath12k: avoid explicit mac id argument in Rxdma replenish (bsc#1227149).
- wifi: ath12k: avoid repeated hw access from ar (bsc#1227149).
- wifi: ath12k: avoid repeated wiphy access from hw (bsc#1227149).
- wifi: ath12k: call ath12k_mac_fils_discovery() without condition (bsc#1227149).
- wifi: ath12k: change DMA direction while mapping reinjected packets (git-fixes).
- wifi: ath12k: change MAC buffer ring size to 2048 (bsc#1227149).
- wifi: ath12k: change WLAN_SCAN_PARAMS_MAX_IE_LEN from 256 to 512 (bsc#1227149).
- wifi: ath12k: change interface combination for P2P mode (bsc#1227149).
- wifi: ath12k: change to initialize recovery variables earlier in ath12k_core_reset() (bsc#1227149).
- wifi: ath12k: change to treat alpha code na as world wide regdomain (bsc#1227149).
- wifi: ath12k: change to use dynamic memory for channel list of scan (bsc#1227149).
- wifi: ath12k: check M3 buffer size as well whey trying to reuse it (bsc#1227149).
- wifi: ath12k: check hardware major version for WCN7850 (bsc#1227149).
- wifi: ath12k: configure RDDM size to MHI for device recovery (bsc#1227149).
- wifi: ath12k: configure puncturing bitmap (bsc#1227149).
- wifi: ath12k: correct the data_type from QMI_OPT_FLAG to QMI_UNSIGNED_1_BYTE for mlo_capable (bsc#1227149).
- wifi: ath12k: delete the timer rx_replenish_retry during rmmod (bsc#1227149).
- wifi: ath12k: designating channel frequency for ROC scan (bsc#1227149).
- wifi: ath12k: disable QMI PHY capability learn in split-phy QCN9274 (bsc#1227149).
- wifi: ath12k: do not drop data frames from unassociated stations (bsc#1227149).
- wifi: ath12k: do not restore ASPM in case of single MSI vector (bsc#1227149).
- wifi: ath12k: drop NULL pointer check in ath12k_update_per_peer_tx_stats() (bsc#1227149).
- wifi: ath12k: drop failed transmitted frames from metric calculation (git-fixes).
- wifi: ath12k: enable 320 MHz bandwidth for 6 GHz band in EHT PHY capability for WCN7850 (bsc#1227149).
- wifi: ath12k: enable 802.11 power save mode in station mode (bsc#1227149).
- wifi: ath12k: enable IEEE80211_HW_SINGLE_SCAN_ON_ALL_BANDS for WCN7850 (bsc#1227149).
- wifi: ath12k: fetch correct pdev id from WMI_SERVICE_READY_EXT_EVENTID (bsc#1227149).
- wifi: ath12k: fix PCI read and write (bsc#1227149).
- wifi: ath12k: fix WARN_ON during ath12k_mac_update_vif_chan (bsc#1227149).
- wifi: ath12k: fix broken structure wmi_vdev_create_cmd (bsc#1227149).
- wifi: ath12k: fix conf_mutex in ath12k_mac_op_unassign_vif_chanctx() (bsc#1227149).
- wifi: ath12k: fix debug messages (bsc#1227149).
- wifi: ath12k: fix fetching MCBC flag for QCN9274 (bsc#1227149).
- wifi: ath12k: fix firmware assert during insmod in memory segment mode (bsc#1227149).
- wifi: ath12k: fix firmware crash during reo reinject (git-fixes).
- wifi: ath12k: fix invalid m3 buffer address (bsc#1227149).
- wifi: ath12k: fix invalid memory access while processing fragmented packets (git-fixes).
- wifi: ath12k: fix kernel crash during resume (bsc#1227149).
- wifi: ath12k: fix license in p2p.c and p2p.h (bsc#1227149).
- wifi: ath12k: fix out-of-bound access of qmi_invoke_handler() (git-fixes).
- wifi: ath12k: fix peer metadata parsing (git-fixes).
- wifi: ath12k: fix potential wmi_mgmt_tx_queue race condition (bsc#1227149).
- wifi: ath12k: fix radar detection in 160 MHz (bsc#1227149).
- wifi: ath12k: fix recovery fail while firmware crash when doing channel switch (bsc#1227149).
- wifi: ath12k: fix the error handler of rfkill config (bsc#1227149).
- wifi: ath12k: fix the issue that the multicast/broadcast indicator is not read correctly for WCN7850 (bsc#1227149).
- wifi: ath12k: fix the problem that down grade phy mode operation (bsc#1227149).
- wifi: ath12k: fix wrong definition of CE ring's base address (git-fixes).
- wifi: ath12k: fix wrong definitions of hal_reo_update_rx_queue (bsc#1227149).
- wifi: ath12k: get msi_data again after request_irq is called (bsc#1227149).
- wifi: ath12k: implement handling of P2P NoA event (bsc#1227149).
- wifi: ath12k: implement remain on channel for P2P mode (bsc#1227149).
- wifi: ath12k: increase vdev setup timeout (bsc#1227149).
- wifi: ath12k: indicate NON MBSSID vdev by default during vdev start (bsc#1227149).
- wifi: ath12k: indicate scan complete for scan canceled when scan running (bsc#1227149).
- wifi: ath12k: indicate to mac80211 scan complete with aborted flag for ATH12K_SCAN_STARTING state (bsc#1227149).
- wifi: ath12k: move HE capabilities processing to a new function (bsc#1227149).
- wifi: ath12k: move peer delete after vdev stop of station for WCN7850 (bsc#1227149).
- wifi: ath12k: parse WMI service ready ext2 event (bsc#1227149).
- wifi: ath12k: peer assoc for 320 MHz (bsc#1227149).
- wifi: ath12k: prepare EHT peer assoc parameters (bsc#1227149).
- wifi: ath12k: propagate EHT capabilities to userspace (bsc#1227149).
- wifi: ath12k: refactor DP Rxdma ring structure (bsc#1227149).
- wifi: ath12k: refactor QMI MLO host capability helper function (bsc#1227149).
- wifi: ath12k: refactor ath12k_bss_assoc() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_allocate() and ath12k_mac_destroy() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_ampdu_action() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_conf_tx() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_config() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_configure_filter() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_flush() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_start() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_stop() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_op_update_vif_offload() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_register() and ath12k_mac_unregister() (bsc#1227149).
- wifi: ath12k: refactor ath12k_mac_setup_channels_rates() (bsc#1227149).
- wifi: ath12k: refactor ath12k_wmi_tlv_parse_alloc() (bsc#1227149).
- wifi: ath12k: refactor multiple MSI vector implementation (bsc#1227149).
- wifi: ath12k: refactor the rfkill worker (bsc#1227149).
- wifi: ath12k: register EHT mesh capabilities (bsc#1227149).
- wifi: ath12k: relax list iteration in ath12k_mac_vif_unref() (bsc#1227149).
- wifi: ath12k: relocate ath12k_dp_pdev_pre_alloc() call (bsc#1227149).
- wifi: ath12k: remove hal_desc_sz from hw params (bsc#1227149).
- wifi: ath12k: remove redundant memset() in ath12k_hal_reo_qdesc_setup() (bsc#1227149).
- wifi: ath12k: remove the unused scan_events from ath12k_wmi_scan_req_arg (bsc#1227149).
- wifi: ath12k: remove unused ATH12K_BD_IE_BOARD_EXT (bsc#1227149).
- wifi: ath12k: rename HE capabilities setup/copy functions (bsc#1227149).
- wifi: ath12k: rename the sc naming convention to ab (bsc#1227149).
- wifi: ath12k: rename the wmi_sc naming convention to wmi_ab (bsc#1227149).
- wifi: ath12k: replace ENOTSUPP with EOPNOTSUPP (bsc#1227149).
- wifi: ath12k: send WMI_PEER_REORDER_QUEUE_SETUP_CMDID when ADDBA session starts (bsc#1227149).
- wifi: ath12k: set IRQ affinity to CPU0 in case of one MSI vector (bsc#1227149).
- wifi: ath12k: set PERST pin no pull request for WCN7850 (bsc#1227149).
- wifi: ath12k: split hal_ops to support RX TLVs word mask compaction (bsc#1227149).
- wifi: ath12k: subscribe required word mask from rx tlv (bsc#1227149).
- wifi: ath12k: support default regdb while searching board-2.bin for WCN7850 (bsc#1227149).
- wifi: ath12k: trigger station disconnect on hardware restart (bsc#1227149).
- wifi: ath12k: use ATH12K_PCI_IRQ_DP_OFFSET for DP IRQ (bsc#1227149).
- wifi: ath12k: use correct flag field for 320 MHz channels (bsc#1227149).
- wifi: ath12k: use select for CRYPTO_MICHAEL_MIC (bsc#1227149).
- wifi: ath5k: Convert to platform remove callback returning void (bsc#1227149).
- wifi: ath5k: Remove redundant dev_err() (bsc#1227149).
- wifi: ath5k: ath5k_hw_get_median_noise_floor(): use swap() (bsc#1227149).
- wifi: ath5k: remove phydir check from ath5k_debug_init_device() (bsc#1227149).
- wifi: ath5k: remove unnecessary (void*) conversions (bsc#1227149).
- wifi: ath5k: remove unused ath5k_eeprom_info::ee_antenna (bsc#1227149).
- wifi: ath5k: replace deprecated strncpy with strscpy (bsc#1227149).
- wifi: ath6kl: Remove error checking for debugfs_create_dir() (bsc#1227149).
- wifi: ath6kl: remove unnecessary (void*) conversions (bsc#1227149).
- wifi: ath6kl: replace deprecated strncpy with memcpy (bsc#1227149).
- wifi: ath9k: remove redundant assignment to variable ret (bsc#1227149).
- wifi: ath9k: Convert to platform remove callback returning void (bsc#1227149).
- wifi: ath9k: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: ath9k: Remove unnecessary ternary operators (bsc#1227149).
- wifi: ath9k: Remove unused declarations (bsc#1227149).
- wifi: ath9k: avoid using uninitialized array (bsc#1227149).
- wifi: ath9k: clean up function ath9k_hif_usb_resume (bsc#1227149).
- wifi: ath9k: consistently use kstrtoX_from_user() functions (bsc#1227149).
- wifi: ath9k: delete some unused/duplicate macros (bsc#1227149).
- wifi: ath9k: fix parameter check in ath9k_init_debug() (bsc#1227149).
- wifi: ath9k: reset survey of current channel after a scan started (bsc#1227149).
- wifi: ath9k: simplify ar9003_hw_process_ini() (bsc#1227149).
- wifi: ath9k: use u32 for txgain indexes (bsc#1227149).
- wifi: ath9k: work around memset overflow warning (bsc#1227149).
- wifi: ath9k_htc: fix format-truncation warning (bsc#1227149).
- wifi: ath: Use is_multicast_ether_addr() to check multicast Ether address (bsc#1227149).
- wifi: ath: dfs_pattern_detector: Use flex array to simplify code (bsc#1227149).
- wifi: ath: remove unused-but-set parameter (bsc#1227149).
- wifi: ath: work around false-positive stringop-overread warning (bsc#1227149).
- wifi: atk10k: Do not opencode ath10k_pci_priv() in ath10k_ahb_priv() (bsc#1227149).
- wifi: atmel: remove unused ioctl function (bsc#1227149).
- wifi: b43: silence sparse warnings (bsc#1227149).
- wifi: brcm80211: replace deprecated strncpy with strscpy (bsc#1227149).
- wifi: brcmfmac: Annotate struct brcmf_gscan_config with __counted_by (bsc#1227149).
- wifi: brcmfmac: Detect corner error case earlier with log (bsc#1227149).
- wifi: brcmfmac: add linefeed at end of file (bsc#1227149).
- wifi: brcmfmac: allow per-vendor event handling (bsc#1227149).
- wifi: brcmfmac: do not cast hidden SSID attribute value to boolean (bsc#1227149).
- wifi: brcmfmac: do not pass hidden SSID attribute as value directly (bsc#1227149).
- wifi: brcmfmac: export firmware interface functions (bsc#1227149).
- wifi: brcmfmac: firmware: Annotate struct brcmf_fw_request with __counted_by (bsc#1227149).
- wifi: brcmfmac: fix format-truncation warnings (bsc#1227149).
- wifi: brcmfmac: fix gnu_printf warnings (bsc#1227149).
- wifi: brcmfmac: fweh: Add __counted_by for struct brcmf_fweh_queue_item and use struct_size() (bsc#1227149).
- wifi: brcmfmac: fweh: Fix boot crash on Raspberry Pi 4 (bsc#1227149).
- wifi: brcmfmac: move feature overrides before feature_disable (bsc#1227149).
- wifi: brcmfmac: pcie: handle randbuf allocation failure (git-fixes).
- wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device (git-fixes).
- wifi: brcmsmac: cleanup SCB-related data types (bsc#1227149).
- wifi: brcmsmac: fix gnu_printf warnings (bsc#1227149).
- wifi: brcmsmac: phy: Remove unreachable code (bsc#1227149).
- wifi: brcmsmac: remove more unused data types (bsc#1227149).
- wifi: brcmsmac: remove unused data type (bsc#1227149).
- wifi: brcmsmac: replace deprecated strncpy with memcpy (bsc#1227149).
- wifi: brcmsmac: silence sparse warnings (bsc#1227149).
- wifi: brcmutil: use helper function pktq_empty() instead of open code (bsc#1227149).
- wifi: carl9170: Remove redundant assignment to pointer super (bsc#1227149).
- wifi: carl9170: add a proper sanity check for endpoints (git-fixes).
- wifi: carl9170: re-fix fortified-memset warning (git-fixes).
- wifi: carl9170: remove unnecessary (void*) conversions (bsc#1227149).
- wifi: cfg80211: Add support for setting TID to link mapping (bsc#1227149).
- wifi: cfg80211: Allow AP/P2PGO to indicate port authorization to peer STA/P2PClient (bsc#1227149).
- wifi: cfg80211: Extend support for scanning while MLO connected (bsc#1227149).
- wifi: cfg80211: Fix typo in documentation (bsc#1227149).
- wifi: cfg80211: Handle specific BSSID in 6GHz scanning (bsc#1227149).
- wifi: cfg80211: Include operating class 137 in 6GHz band (bsc#1227149).
- wifi: cfg80211: Lock wiphy in cfg80211_get_station (git-fixes).
- wifi: cfg80211: OWE DH IE handling offload (bsc#1227149).
- wifi: cfg80211: Replace ENOTSUPP with EOPNOTSUPP (bsc#1227149).
- wifi: cfg80211: Schedule regulatory check on BSS STA channel change (bsc#1227149).
- wifi: cfg80211: Update the default DSCP-to-UP mapping (bsc#1227149).
- wifi: cfg80211: add BSS usage reporting (bsc#1227149).
- wifi: cfg80211: add RNR with reporting AP information (bsc#1227149).
- wifi: cfg80211: add a flag to disable wireless extensions (bsc#1227149).
- wifi: cfg80211: add local_state_change to deauth trace (bsc#1227149).
- wifi: cfg80211: add locked debugfs wrappers (bsc#1227149).
- wifi: cfg80211: add support for SPP A-MSDUs (bsc#1227149).
- wifi: cfg80211: address several kerneldoc warnings (bsc#1227149).
- wifi: cfg80211: allow reg update by driver even if wiphy-&gt;regd is set (bsc#1227149).
- wifi: cfg80211: annotate iftype_data pointer with sparse (bsc#1227149).
- wifi: cfg80211: avoid double free if updating BSS fails (bsc#1227149).
- wifi: cfg80211: call reg_call_notifier on beacon hints (bsc#1227149).
- wifi: cfg80211: check RTNL when iterating devices (bsc#1227149).
- wifi: cfg80211: check wiphy mutex is held for wdev mutex (bsc#1227149).
- wifi: cfg80211: consume both probe response and beacon IEs (bsc#1227149).
- wifi: cfg80211: detect stuck ECSA element in probe resp (bsc#1227149).
- wifi: cfg80211: ensure cfg80211_bss_update frees IEs on error (bsc#1227149).
- wifi: cfg80211: export DFS CAC time and usable state helper functions (bsc#1227149).
- wifi: cfg80211: expose nl80211_chan_width_to_mhz for wide sharing (bsc#1227149).
- wifi: cfg80211: fix 6 GHz scan request building (stable-fixes).
- wifi: cfg80211: fix CQM for non-range use (bsc#1227149).
- wifi: cfg80211: fix header kernel-doc typos (bsc#1227149).
- wifi: cfg80211: fix kernel-doc for wiphy_delayed_work_flush() (bsc#1227149).
- wifi: cfg80211: fix rdev_dump_mpp() arguments order (stable-fixes).
- wifi: cfg80211: fix spelling &amp; punctutation (bsc#1227149).
- wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class (stable-fixes).
- wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() (git-fixes).
- wifi: cfg80211: fully move wiphy work to unbound workqueue (git-fixes).
- wifi: cfg80211: generate an ML element for per-STA profiles (bsc#1227149).
- wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (git-fixes).
- wifi: cfg80211: handle UHB AP and STA power type (bsc#1227149).
- wifi: cfg80211: hold wiphy lock in cfg80211_any_wiphy_oper_chan() (bsc#1227149).
- wifi: cfg80211: hold wiphy mutex for send_interface (bsc#1227149).
- wifi: cfg80211: improve documentation for flag fields (bsc#1227149).
- wifi: cfg80211: introduce cfg80211_ssid_eq() (bsc#1227149).
- wifi: cfg80211: make RX assoc data const (bsc#1227149).
- wifi: cfg80211: make read-only array centers_80mhz static const (bsc#1227149).
- wifi: cfg80211: modify prototype for change_beacon (bsc#1227149).
- wifi: cfg80211: pmsr: use correct nla_get_uX functions (git-fixes).
- wifi: cfg80211: reg: Support P2P operation on DFS channels (bsc#1227149).
- wifi: cfg80211: reg: describe return values in kernel-doc (bsc#1227149).
- wifi: cfg80211: reg: fix various kernel-doc issues (bsc#1227149).
- wifi: cfg80211: reg: hold wiphy mutex for wdev iteration (bsc#1227149).
- wifi: cfg80211: remove scan_width support (bsc#1227149).
- wifi: cfg80211: remove wdev mutex (bsc#1227149).
- wifi: cfg80211: rename UHB to 6 GHz (bsc#1227149).
- wifi: cfg80211: report per-link errors during association (bsc#1227149).
- wifi: cfg80211: report unprotected deauth/disassoc in wowlan (bsc#1227149).
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (git-fixes).
- wifi: cfg80211: save power spectral density(psd) of regulatory rule (bsc#1227149).
- wifi: cfg80211: set correct param change count in ML element (bsc#1227149).
- wifi: cfg80211: sme: hold wiphy lock for wdev iteration (bsc#1227149).
- wifi: cfg80211: sort certificates in build (bsc#1227149).
- wifi: cfg80211: split struct cfg80211_ap_settings (bsc#1227149).
- wifi: cfg80211: validate HE operation element parsing (bsc#1227149).
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (stable-fixes).
- wifi: cfg80211: wext: convert return value to kernel-doc (bsc#1227149).
- wifi: cfg80211: wext: set ssids=NULL for passive scans (git-fixes).
- wifi: cw1200: Avoid processing an invalid TIM IE (bsc#1227149).
- wifi: cw1200: Convert to GPIO descriptors (bsc#1227149).
- wifi: cw1200: fix __le16 sparse warnings (bsc#1227149).
- wifi: cw1200: restore endian swapping (bsc#1227149).
- wifi: drivers: Explicitly include correct DT includes (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for Broadcom WLAN (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for ar5523 (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for mt76 drivers (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for p54spi (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for wcn36xx (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for wilc1000 (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for wl1251 and wl12xx (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for wl18xx (bsc#1227149).
- wifi: fill in MODULE_DESCRIPTION()s for wlcore (bsc#1227149).
- wifi: hostap: Add __counted_by for struct prism2_download_data and use struct_size() (bsc#1227149).
- wifi: hostap: fix stringop-truncations GCC warning (bsc#1227149).
- wifi: hostap: remove unused ioctl function (bsc#1227149).
- wifi: ieee80211: add UL-bandwidth definition of trigger frame (bsc#1227149).
- wifi: ieee80211: add definitions for negotiated TID to Link map (bsc#1227149).
- wifi: ieee80211: check for NULL in ieee80211_mle_size_ok() (stable-fixes).
- wifi: ieee80211: fix ieee80211_mle_basic_sta_prof_size_ok() (git-fixes).
- wifi: iwlmei: do not send SAP messages if AMT is disabled (bsc#1227149).
- wifi: iwlmei: do not send nic info with invalid mac address (bsc#1227149).
- wifi: iwlmei: send HOST_GOES_DOWN message even if wiamt is disabled (bsc#1227149).
- wifi: iwlmei: send driver down SAP message only if wiamt is enabled (bsc#1227149).
- wifi: iwlmvm: fw: Add new OEM vendor to tas approved list (bsc#1227149).
- wifi: iwlwifi: Add rf_mapping of new wifi7 devices (bsc#1227149).
- wifi: iwlwifi: Add support for PPAG cmd v5 and PPAG revision 3 (bsc#1227149).
- wifi: iwlwifi: Add support for new 802.11be device (bsc#1227149).
- wifi: iwlwifi: Do not mark DFS channels as NO-IR (bsc#1227149).
- wifi: iwlwifi: Extract common prph mac/phy regions data dump logic (bsc#1227149).
- wifi: iwlwifi: Fix spelling mistake "SESION" -&gt; "SESSION" (bsc#1227149).
- wifi: iwlwifi: Use request_module_nowait (bsc#1227149).
- wifi: iwlwifi: abort scan when rfkill on but device enabled (bsc#1227149).
- wifi: iwlwifi: add HONOR to PPAG approved list (bsc#1227149).
- wifi: iwlwifi: add Razer to ppag approved list (bsc#1227149).
- wifi: iwlwifi: add mapping of a periphery register crf for WH RF (bsc#1227149).
- wifi: iwlwifi: add new RF support for wifi7 (bsc#1227149).
- wifi: iwlwifi: add support for SNPS DPHYIP region type (bsc#1227149).
- wifi: iwlwifi: add support for a wiphy_work rx handler (bsc#1227149).
- wifi: iwlwifi: add support for activating UNII-1 in WW via BIOS (bsc#1227149).
- wifi: iwlwifi: add support for new ini region types (bsc#1227149).
- wifi: iwlwifi: adjust rx_phyinfo debugfs to MLO (bsc#1227149).
- wifi: iwlwifi: always have 'uats_enabled' (bsc#1227149).
- wifi: iwlwifi: api: clean up some kernel-doc/typos (bsc#1227149).
- wifi: iwlwifi: api: dbg-tlv: fix up kernel-doc (bsc#1227149).
- wifi: iwlwifi: api: fix a small upper/lower-case typo (bsc#1227149).
- wifi: iwlwifi: api: fix center_freq label in PHY diagram (bsc#1227149).
- wifi: iwlwifi: api: fix constant version to match FW (bsc#1227149).
- wifi: iwlwifi: api: fix kernel-doc reference (bsc#1227149).
- wifi: iwlwifi: bump FW API to 84 for AX/BZ/SC devices (bsc#1227149).
- wifi: iwlwifi: bump FW API to 86 for AX/BZ/SC devices (bsc#1227149).
- wifi: iwlwifi: bump FW API to 87 for AX/BZ/SC devices (bsc#1227149).
- wifi: iwlwifi: bump FW API to 88 for AX/BZ/SC devices (bsc#1227149).
- wifi: iwlwifi: cancel session protection only if there is one (bsc#1227149).
- wifi: iwlwifi: change link id in time event to s8 (bsc#1227149).
- wifi: iwlwifi: check for kmemdup() return value in iwl_parse_tlv_firmware() (bsc#1227149).
- wifi: iwlwifi: cleanup BT Shared Single Antenna code (bsc#1227149).
- wifi: iwlwifi: cleanup sending PER_CHAIN_LIMIT_OFFSET_CMD (bsc#1227149).
- wifi: iwlwifi: cleanup uefi variables loading (bsc#1227149).
- wifi: iwlwifi: clear link_id in time_event (bsc#1227149).
- wifi: iwlwifi: dbg-tlv: avoid extra allocation/copy (bsc#1227149).
- wifi: iwlwifi: dbg-tlv: use struct_size() for allocation (bsc#1227149).
- wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef (git-fixes).
- wifi: iwlwifi: disable 160 MHz based on subsystem device ID (bsc#1227149).
- wifi: iwlwifi: disable eSR when BT is active (bsc#1227149).
- wifi: iwlwifi: disable multi rx queue for 9000 (bsc#1227149).
- wifi: iwlwifi: do not check TAS block list size twice (bsc#1227149).
- wifi: iwlwifi: do not use TRUE/FALSE with bool (bsc#1227149).
- wifi: iwlwifi: drop NULL pointer check in iwl_mvm_tzone_set_trip_temp() (bsc#1227149).
- wifi: iwlwifi: dvm: remove kernel-doc warnings (bsc#1227149).
- wifi: iwlwifi: error-dump: fix kernel-doc issues (bsc#1227149).
- wifi: iwlwifi: fail NIC access fast on dead NIC (bsc#1227149).
- wifi: iwlwifi: fix #ifdef CONFIG_ACPI check (bsc#1227149).
- wifi: iwlwifi: fix iwl_mvm_get_valid_rx_ant() (git-fixes).
- wifi: iwlwifi: fix opmode start/stop race (bsc#1227149).
- wifi: iwlwifi: fix some kernel-doc issues (bsc#1227149).
- wifi: iwlwifi: fix some kernel-doc issues (bsc#1227149).
- wifi: iwlwifi: fix system commands group ordering (bsc#1227149).
- wifi: iwlwifi: fix the rf step and flavor bits range (bsc#1227149).
- wifi: iwlwifi: fw: Add support for UATS table in UHB (bsc#1227149).
- wifi: iwlwifi: fw: Fix debugfs command sending (bsc#1227149).
- wifi: iwlwifi: fw: allow vmalloc for PNVM image (bsc#1227149).
- wifi: iwlwifi: fw: dbg: ensure correct config name sizes (bsc#1227149).
- wifi: iwlwifi: fw: disable firmware debug asserts (bsc#1227149).
- wifi: iwlwifi: fw: file: clean up kernel-doc (bsc#1227149).
- wifi: iwlwifi: fw: file: do not use [0] for variable arrays (bsc#1227149).
- wifi: iwlwifi: fw: fix compiler warning for NULL string print (bsc#1227149).
- wifi: iwlwifi: fw: increase fw_version string size (bsc#1227149).
- wifi: iwlwifi: fw: reconstruct the API/CAPA enum number (bsc#1227149).
- wifi: iwlwifi: fw: replace deprecated strncpy with strscpy_pad (bsc#1227149).
- wifi: iwlwifi: handle per-phy statistics from fw (bsc#1227149).
- wifi: iwlwifi: implement GLAI ACPI table loading (bsc#1227149).
- wifi: iwlwifi: implement can_activate_links callback (bsc#1227149).
- wifi: iwlwifi: implement enable/disable for China 2022 regulatory (bsc#1227149).
- wifi: iwlwifi: iwl-fh.h: fix kernel-doc issues (bsc#1227149).
- wifi: iwlwifi: iwl-trans.h: clean up kernel-doc (bsc#1227149).
- wifi: iwlwifi: iwlmvm: handle unprotected deauth/disassoc in d3 (bsc#1227149).
- wifi: iwlwifi: load b0 version of ucode for HR1/HR2 (bsc#1227149).
- wifi: iwlwifi: make TB reallocation a debug message (bsc#1227149).
- wifi: iwlwifi: make time_events MLO aware (bsc#1227149).
- wifi: iwlwifi: mei: return error from register when not built (bsc#1227149).
- wifi: iwlwifi: mvm: Add basic link selection logic (bsc#1227149).
- wifi: iwlwifi: mvm: Add support for removing responder TKs (bsc#1227149).
- wifi: iwlwifi: mvm: Allow DFS concurrent operation (bsc#1227149).
- wifi: iwlwifi: mvm: Configure the link mapping for non-MLD FW (bsc#1227149).
- wifi: iwlwifi: mvm: Correctly report TSF data in scan complete (bsc#1227149).
- wifi: iwlwifi: mvm: Declare support for secure LTF measurement (bsc#1227149).
- wifi: iwlwifi: mvm: Do not warn if valid link pair was not found (bsc#1227149).
- wifi: iwlwifi: mvm: Do not warn on invalid link on scan complete (bsc#1227149).
- wifi: iwlwifi: mvm: Extend support for P2P service discovery (bsc#1227149).
- wifi: iwlwifi: mvm: Fix FTM initiator flags (bsc#1227149).
- wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill (stable-fixes).
- wifi: iwlwifi: mvm: Fix unreachable code path (bsc#1227149).
- wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd (stable-fixes).
- wifi: iwlwifi: mvm: Keep connection in case of missed beacons during RX (bsc#1227149).
- wifi: iwlwifi: mvm: Return success if link could not be removed (bsc#1227149).
- wifi: iwlwifi: mvm: Use the link ID provided in scan request (bsc#1227149).
- wifi: iwlwifi: mvm: add US/Canada MCC to API (bsc#1227149).
- wifi: iwlwifi: mvm: add a debug print when we get a BAR (bsc#1227149).
- wifi: iwlwifi: mvm: add a debugfs hook to clear the monitor data (bsc#1227149).
- wifi: iwlwifi: mvm: add a per-link debugfs (bsc#1227149).
- wifi: iwlwifi: mvm: add a print when sending RLC command (bsc#1227149).
- wifi: iwlwifi: mvm: add start mac ctdp sum calculation debugfs handler (bsc#1227149).
- wifi: iwlwifi: mvm: add support for TID to link mapping neg request (bsc#1227149).
- wifi: iwlwifi: mvm: add support for new wowlan_info_notif (bsc#1227149).
- wifi: iwlwifi: mvm: advertise MLO only if EHT is enabled (bsc#1227149).
- wifi: iwlwifi: mvm: advertise support for SCS traffic description (bsc#1227149).
- wifi: iwlwifi: mvm: advertise support for protected ranging negotiation (bsc#1227149).
- wifi: iwlwifi: mvm: allocate STA links only for active links (git-fixes).
- wifi: iwlwifi: mvm: always update keys in D3 exit (bsc#1227149).
- wifi: iwlwifi: mvm: avoid garbage iPN (bsc#1227149).
- wifi: iwlwifi: mvm: calculate EMLSR mode after connection (bsc#1227149).
- wifi: iwlwifi: mvm: check AP supports EMLSR (bsc#1227149).
- wifi: iwlwifi: mvm: check for iwl_mvm_mld_update_sta() errors (bsc#1227149).
- wifi: iwlwifi: mvm: check link more carefully (bsc#1227149).
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (git-fixes).
- wifi: iwlwifi: mvm: check own capabilities for EMLSR (bsc#1227149).
- wifi: iwlwifi: mvm: cleanup MLO and non-MLO unification code (bsc#1227149).
- wifi: iwlwifi: mvm: combine condition/warning (bsc#1227149).
- wifi: iwlwifi: mvm: consider having one active link (bsc#1227149).
- wifi: iwlwifi: mvm: const-ify chandef pointers (bsc#1227149).
- wifi: iwlwifi: mvm: cycle FW link on chanctx removal (bsc#1227149).
- wifi: iwlwifi: mvm: d3: avoid intermediate/early mutex unlock (bsc#1227149).
- wifi: iwlwifi: mvm: d3: disconnect on GTK rekey failure (bsc#1227149).
- wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup (stable-fixes).
- wifi: iwlwifi: mvm: d3: implement suspend with MLO (bsc#1227149).
- wifi: iwlwifi: mvm: debugfs for fw system stats (bsc#1227149).
- wifi: iwlwifi: mvm: define RX queue sync timeout as a macro (bsc#1227149).
- wifi: iwlwifi: mvm: disable MLO for the time being (bsc#1227149).
- wifi: iwlwifi: mvm: disallow puncturing in US/Canada (bsc#1227149).
- wifi: iwlwifi: mvm: disconnect long CSA only w/o alternative (bsc#1227149).
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed (bsc#1227149).
- wifi: iwlwifi: mvm: do not abort queue sync in CT-kill (bsc#1227149).
- wifi: iwlwifi: mvm: do not add dummy phy context (bsc#1227149).
- wifi: iwlwifi: mvm: do not always disable EMLSR due to BT coex (bsc#1227149).
- wifi: iwlwifi: mvm: do not do duplicate detection for nullfunc packets (bsc#1227149).
- wifi: iwlwifi: mvm: do not initialize csa_work twice (git-fixes).
- wifi: iwlwifi: mvm: do not limit VLP/AFC to UATS-enabled (git-fixes).
- wifi: iwlwifi: mvm: do not read past the mfuart notifcation (git-fixes).
- wifi: iwlwifi: mvm: do not send BT_COEX_CI command on new devices (bsc#1227149).
- wifi: iwlwifi: mvm: do not send NDPs for new tx devices (bsc#1227149).
- wifi: iwlwifi: mvm: do not send STA_DISABLE_TX_CMD for newer firmware (bsc#1227149).
- wifi: iwlwifi: mvm: do not send the smart fifo command if not needed (bsc#1227149).
- wifi: iwlwifi: mvm: do not set trigger frame padding in AP mode (bsc#1227149).
- wifi: iwlwifi: mvm: do not support reduced tx power on ack for new devices (bsc#1227149).
- wifi: iwlwifi: mvm: do not wake up rx_sync_waitq upon RFKILL (git-fixes).
- wifi: iwlwifi: mvm: enable FILS DF Tx on non-PSC channel (bsc#1227149).
- wifi: iwlwifi: mvm: enable HE TX/RX &amp;lt;242 tone RU on new RFs (bsc#1227149).
- wifi: iwlwifi: mvm: expand queue sync warning messages (bsc#1227149).
- wifi: iwlwifi: mvm: extend alive timeout to 2 seconds (bsc#1227149).
- wifi: iwlwifi: mvm: fix ROC version check (bsc#1227149).
- wifi: iwlwifi: mvm: fix SB CFG check (bsc#1227149).
- wifi: iwlwifi: mvm: fix a battery life regression (bsc#1227149).
- wifi: iwlwifi: mvm: fix a crash on 7265 (bsc#1227149).
- wifi: iwlwifi: mvm: fix active link counting during recovery (git-fixes).
- wifi: iwlwifi: mvm: fix check in iwl_mvm_sta_fw_id_mask (git-fixes).
- wifi: iwlwifi: mvm: fix kernel-doc (bsc#1227149).
- wifi: iwlwifi: mvm: fix link ID management (bsc#1227149).
- wifi: iwlwifi: mvm: fix recovery flow in CSA (bsc#1227149).
- wifi: iwlwifi: mvm: fix regdb initialization (bsc#1227149).
- wifi: iwlwifi: mvm: fix the PHY context resolution for p2p device (bsc#1227149).
- wifi: iwlwifi: mvm: fix the TXF mapping for BZ devices (bsc#1227149).
- wifi: iwlwifi: mvm: fix the key PN index (bsc#1227149).
- wifi: iwlwifi: mvm: fix thermal kernel-doc (bsc#1227149).
- wifi: iwlwifi: mvm: fold the ref++ into iwl_mvm_phy_ctxt_add (bsc#1227149).
- wifi: iwlwifi: mvm: guard against invalid STA ID on removal (stable-fixes).
- wifi: iwlwifi: mvm: handle BA session teardown in RF-kill (stable-fixes).
- wifi: iwlwifi: mvm: handle debugfs names more carefully (bsc#1227149).
- wifi: iwlwifi: mvm: handle link-STA allocation in restart (bsc#1227149).
- wifi: iwlwifi: mvm: implement ROC version 3 (bsc#1227149).
- wifi: iwlwifi: mvm: implement new firmware API for statistics (bsc#1227149).
- wifi: iwlwifi: mvm: increase session protection after CSA (bsc#1227149).
- wifi: iwlwifi: mvm: init vif works only once (git-fixes).
- wifi: iwlwifi: mvm: introduce PHY_CONTEXT_CMD_API_VER_5 (bsc#1227149).
- wifi: iwlwifi: mvm: introduce esr_disable_reason (bsc#1227149).
- wifi: iwlwifi: mvm: iterate active links for STA queues (bsc#1227149).
- wifi: iwlwifi: mvm: limit EHT 320 MHz MCS for STEP URM (bsc#1227149).
- wifi: iwlwifi: mvm: limit pseudo-D3 to 60 seconds (bsc#1227149).
- wifi: iwlwifi: mvm: log dropped frames (bsc#1227149).
- wifi: iwlwifi: mvm: log dropped packets due to MIC error (bsc#1227149).
- wifi: iwlwifi: mvm: make "pldr_sync" mode effective (bsc#1227149).
- wifi: iwlwifi: mvm: make functions public (bsc#1227149).
- wifi: iwlwifi: mvm: make pldr_sync AX210 specific (bsc#1227149).
- wifi: iwlwifi: mvm: move BA notif messages before action (bsc#1227149).
- wifi: iwlwifi: mvm: move RU alloc B2 placement (bsc#1227149).
- wifi: iwlwifi: mvm: move listen interval to constants (bsc#1227149).
- wifi: iwlwifi: mvm: offload IGTK in AP if BIGTK is supported (bsc#1227149).
- wifi: iwlwifi: mvm: partially support PHY context version 6 (bsc#1227149).
- wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF (bsc#1227149).
- wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option (stable-fixes).
- wifi: iwlwifi: mvm: reduce maximum RX A-MPDU size (bsc#1227149).
- wifi: iwlwifi: mvm: refactor TX rate handling (bsc#1227149).
- wifi: iwlwifi: mvm: refactor duplicate chanctx condition (bsc#1227149).
- wifi: iwlwifi: mvm: remove EHT code from mac80211.c (bsc#1227149).
- wifi: iwlwifi: mvm: remove IWL_MVM_STATUS_NEED_FLUSH_P2P (bsc#1227149).
- wifi: iwlwifi: mvm: remove flags for enable/disable beacon filter (bsc#1227149).
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one (git-fixes).
- wifi: iwlwifi: mvm: remove one queue sync on BA session stop (bsc#1227149).
- wifi: iwlwifi: mvm: remove set_tim callback for MLD ops (bsc#1227149).
- wifi: iwlwifi: mvm: remove stale STA link data during restart (stable-fixes).
- wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd (git-fixes).
- wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 (git-fixes).
- wifi: iwlwifi: mvm: rework debugfs handling (bsc#1227149).
- wifi: iwlwifi: mvm: select STA mask only for active links (git-fixes).
- wifi: iwlwifi: mvm: set properly mac header (git-fixes).
- wifi: iwlwifi: mvm: show dump even for pldr_sync (bsc#1227149).
- wifi: iwlwifi: mvm: show skb_mac_gso_segment() failure reason (bsc#1227149).
- wifi: iwlwifi: mvm: simplify the reorder buffer (bsc#1227149).
- wifi: iwlwifi: mvm: skip adding debugfs symlink for reconfig (bsc#1227149).
- wifi: iwlwifi: mvm: support CSA with MLD (bsc#1227149).
- wifi: iwlwifi: mvm: support SPP A-MSDUs (bsc#1227149).
- wifi: iwlwifi: mvm: support flush on AP interfaces (bsc#1227149).
- wifi: iwlwifi: mvm: support injection antenna control (bsc#1227149).
- wifi: iwlwifi: mvm: support iwl_dev_tx_power_cmd_v8 (bsc#1227149).
- wifi: iwlwifi: mvm: support set_antenna() (bsc#1227149).
- wifi: iwlwifi: mvm: unlock mvm if there is no primary link (bsc#1227149).
- wifi: iwlwifi: mvm: use fast balance scan in case of an active P2P GO (bsc#1227149).
- wifi: iwlwifi: mvm: use the new command to clear the internal buffer (bsc#1227149).
- wifi: iwlwifi: mvm: work around A-MSDU size problem (bsc#1227149).
- wifi: iwlwifi: no power save during transition to D3 (bsc#1227149).
- wifi: iwlwifi: nvm-parse: advertise common packet padding (bsc#1227149).
- wifi: iwlwifi: nvm: parse the VLP/AFC bit from regulatory (bsc#1227149).
- wifi: iwlwifi: pcie: (re-)assign BAR0 on driver bind (bsc#1227149).
- wifi: iwlwifi: pcie: Add new PCI device id and CNVI (bsc#1227149).
- wifi: iwlwifi: pcie: clean up WFPM control bits (bsc#1227149).
- wifi: iwlwifi: pcie: clean up device removal work (bsc#1227149).
- wifi: iwlwifi: pcie: clean up gen1/gen2 TFD unmap (bsc#1227149).
- wifi: iwlwifi: pcie: do not allow hw-rfkill to stop device on gen2 (bsc#1227149).
- wifi: iwlwifi: pcie: dump CSRs before removal (bsc#1227149).
- wifi: iwlwifi: pcie: enable TOP fatal error interrupt (bsc#1227149).
- wifi: iwlwifi: pcie: fix kernel-doc issues (bsc#1227149).
- wifi: iwlwifi: pcie: get_crf_id() can be void (bsc#1227149).
- wifi: iwlwifi: pcie: give up mem read if HW is dead (bsc#1227149).
- wifi: iwlwifi: pcie: move gen1 TB handling to header (bsc#1227149).
- wifi: iwlwifi: pcie: point invalid TFDs to invalid data (bsc#1227149).
- wifi: iwlwifi: pcie: propagate iwl_pcie_gen2_apm_init() error (bsc#1227149).
- wifi: iwlwifi: pcie: rescan bus if no parent (bsc#1227149).
- wifi: iwlwifi: prepare for reading DSM from UEFI (bsc#1227149).
- wifi: iwlwifi: prepare for reading PPAG table from UEFI (bsc#1227149).
- wifi: iwlwifi: prepare for reading SAR tables from UEFI (bsc#1227149).
- wifi: iwlwifi: prepare for reading SPLC from UEFI (bsc#1227149).
- wifi: iwlwifi: prepare for reading TAS table from UEFI (bsc#1227149).
- wifi: iwlwifi: properly check if link is active (bsc#1227149).
- wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK (stable-fixes).
- wifi: iwlwifi: queue: fix kernel-doc (bsc#1227149).
- wifi: iwlwifi: queue: improve warning for no skb in reclaim (bsc#1227149).
- wifi: iwlwifi: queue: move iwl_txq_gen2_set_tb() up (bsc#1227149).
- wifi: iwlwifi: read DSM func 2 for specific RF types (bsc#1227149).
- wifi: iwlwifi: read DSM functions from UEFI (bsc#1227149).
- wifi: iwlwifi: read ECKV table from UEFI (bsc#1227149).
- wifi: iwlwifi: read PPAG table from UEFI (bsc#1227149).
- wifi: iwlwifi: read SAR tables from UEFI (bsc#1227149).
- wifi: iwlwifi: read SPLC from UEFI (bsc#1227149).
- wifi: iwlwifi: read WRDD table from UEFI (bsc#1227149).
- wifi: iwlwifi: read WTAS table from UEFI (bsc#1227149).
- wifi: iwlwifi: read mac step from aux register (bsc#1227149).
- wifi: iwlwifi: read txq-&gt;read_ptr under lock (stable-fixes).
- wifi: iwlwifi: reconfigure TLC during HW restart (git-fixes).
- wifi: iwlwifi: refactor RX tracing (bsc#1227149).
- wifi: iwlwifi: remove 'def_rx_queue' struct member (bsc#1227149).
- wifi: iwlwifi: remove Gl A-step remnants (bsc#1227149).
- wifi: iwlwifi: remove WARN from read_mem32() (bsc#1227149).
- wifi: iwlwifi: remove async command callback (bsc#1227149).
- wifi: iwlwifi: remove dead-code (bsc#1227149).
- wifi: iwlwifi: remove extra kernel-doc (bsc#1227149).
- wifi: iwlwifi: remove memory check for LMAC error address (bsc#1227149).
- wifi: iwlwifi: remove retry loops in start (bsc#1227149).
- wifi: iwlwifi: remove unused function prototype (bsc#1227149).
- wifi: iwlwifi: replace ENOTSUPP with EOPNOTSUPP (bsc#1227149).
- wifi: iwlwifi: return negative -EINVAL instead of positive EINVAL (bsc#1227149).
- wifi: iwlwifi: rfi: use a single DSM function for all RFI configurations (bsc#1227149).
- wifi: iwlwifi: send EDT table to FW (bsc#1227149).
- wifi: iwlwifi: separate TAS 'read-from-BIOS' and 'send-to-FW' flows (bsc#1227149).
- wifi: iwlwifi: simplify getting DSM from ACPI (bsc#1227149).
- wifi: iwlwifi: skip affinity setting on non-SMP (bsc#1227149).
- wifi: iwlwifi: skip opmode start retries on dead transport (bsc#1227149).
- wifi: iwlwifi: small cleanups in PPAG table flows (bsc#1227149).
- wifi: iwlwifi: support link command version 2 (bsc#1227149).
- wifi: iwlwifi: support link id in SESSION_PROTECTION_NOTIF (bsc#1227149).
- wifi: iwlwifi: support link_id in SESSION_PROTECTION cmd (bsc#1227149).
- wifi: iwlwifi: take SGOM and UATS code out of ACPI ifdef (bsc#1227149).
- wifi: iwlwifi: take send-DSM-to-FW flows out of ACPI ifdef (bsc#1227149).
- wifi: iwlwifi: trace full frames with TX status request (bsc#1227149).
- wifi: iwlwifi: update context info structure definitions (bsc#1227149).
- wifi: iwlwifi: use system_unbound_wq for debug dump (bsc#1227149).
- wifi: iwlwifi: validate PPAG table when sent to FW (bsc#1227149).
- wifi: lib80211: remove unused variables iv32 and iv16 (bsc#1227149).
- wifi: libertas: Follow renaming of SPI "master" to "controller" (bsc#1227149).
- wifi: libertas: add missing calls to cancel_work_sync() (bsc#1227149).
- wifi: libertas: cleanup SDIO reset (bsc#1227149).
- wifi: libertas: handle possible spu_write_u16() errors (bsc#1227149).
- wifi: libertas: prefer kstrtoX() for simple integer conversions (bsc#1227149).
- wifi: libertas: simplify list operations in free_if_spi_card() (bsc#1227149).
- wifi: libertas: use convenient lists to manage SDIO packets (bsc#1227149).
- wifi: mac80211: Add __counted_by for struct ieee802_11_elems and use struct_size() (bsc#1227149).
- wifi: mac80211: Avoid address calculations via out of bounds array indexing (stable-fixes).
- wifi: mac80211: Check if we had first beacon with relevant links (bsc#1227149).
- wifi: mac80211: Do not force off-channel for management Tx with MLO (bsc#1227149).
- wifi: mac80211: Do not include crypto/algapi.h (bsc#1227149).
- wifi: mac80211: Extend support for scanning while MLO connected (bsc#1227149).
- wifi: mac80211: Fix SMPS handling in the context of MLO (bsc#1227149).
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (git-fixes).
- wifi: mac80211: Notify the low level driver on change in MLO valid links (bsc#1227149).
- wifi: mac80211: Print local link address during authentication (bsc#1227149).
- wifi: mac80211: Recalc offload when monitor stop (git-fixes).
- wifi: mac80211: Remove unused function declarations (bsc#1227149).
- wifi: mac80211: Rename and update IEEE80211_VIF_DISABLE_SMPS_OVERRIDE (bsc#1227149).
- wifi: mac80211: Replace ENOTSUPP with EOPNOTSUPP (bsc#1227149).
- wifi: mac80211: Sanity check tx bitrate if not provided by driver (bsc#1227149).
- wifi: mac80211: Schedule regulatory channels check on bandwith change (bsc#1227149).
- wifi: mac80211: Skip association timeout update after comeback rejection (bsc#1227149).
- wifi: mac80211: add a driver callback to add vif debugfs (bsc#1227149).
- wifi: mac80211: add a driver callback to check active_links (bsc#1227149).
- wifi: mac80211: add a flag to disallow puncturing (bsc#1227149).
- wifi: mac80211: add back SPDX identifier (bsc#1227149).
- wifi: mac80211: add ieee80211_tdls_sta_link_id() (stable-fixes).
- wifi: mac80211: add link id to ieee80211_gtk_rekey_add() (bsc#1227149).
- wifi: mac80211: add link id to mgd_prepare_tx() (bsc#1227149).
- wifi: mac80211: add more ops assertions (bsc#1227149).
- wifi: mac80211: add more warnings about inserting sta info (bsc#1227149).
- wifi: mac80211: add support for SPP A-MSDUs (bsc#1227149).
- wifi: mac80211: add support for mld in ieee80211_chswitch_done (bsc#1227149).
- wifi: mac80211: add support for parsing TID to Link mapping element (bsc#1227149).
- wifi: mac80211: add/remove driver debugfs entries as appropriate (bsc#1227149).
- wifi: mac80211: additions to change_beacon() (bsc#1227149).
- wifi: mac80211: address some kerneldoc warnings (bsc#1227149).
- wifi: mac80211: allow 64-bit radiotap timestamps (bsc#1227149).
- wifi: mac80211: allow for_each_sta_active_link() under RCU (bsc#1227149).
- wifi: mac80211: apply mcast rate only if interface is up (stable-fixes).
- wifi: mac80211: cancel multi-link reconf work on disconnect (git-fixes).
- wifi: mac80211: chanctx emulation set CHANGE_CHANNEL when in_reconfig (git-fixes).
- wifi: mac80211: check EHT/TTLM action frame length (bsc#1227149).
- wifi: mac80211: check wiphy mutex in ops (bsc#1227149).
- wifi: mac80211: clean up assignments to pointer cache (stable-fixes).
- wifi: mac80211: cleanup airtime arithmetic with ieee80211_sta_keep_active() (bsc#1227149).
- wifi: mac80211: cleanup auth_data only if association continues (bsc#1227149).
- wifi: mac80211: convert A-MPDU work to wiphy work (bsc#1227149).
- wifi: mac80211: correctly parse Spatial Reuse Parameter Set element (git-fixes).
- wifi: mac80211: correctly set active links upon TTLM (bsc#1227149).
- wifi: mac80211: correcty limit wider BW TDLS STAs (git-fixes).
- wifi: mac80211: debugfs: lock wiphy instead of RTNL (bsc#1227149).
- wifi: mac80211: describe return values in kernel-doc (bsc#1227149).
- wifi: mac80211: disable softirqs for queued frame handling (git-fixes).
- wifi: mac80211: do not connect to an AP while it's in a CSA process (bsc#1227149).
- wifi: mac80211: do not re-add debugfs entries during resume (bsc#1227149).
- wifi: mac80211: do not select link ID if not provided in scan request (bsc#1227149).
- wifi: mac80211: do not set ESS capab bit in assoc request (bsc#1227149).
- wifi: mac80211: do not use rate mask for scanning (stable-fixes).
- wifi: mac80211: drop robust action frames before assoc (bsc#1227149).
- wifi: mac80211: drop spurious WARN_ON() in ieee80211_ibss_csa_beacon() (bsc#1227149).
- wifi: mac80211: ensure beacon is non-S1G prior to extracting the beacon timestamp field (stable-fixes).
- wifi: mac80211: ethtool: always hold wiphy mutex (bsc#1227149).
- wifi: mac80211: ethtool: hold wiphy mutex (bsc#1227149).
- wifi: mac80211: expand __ieee80211_data_to_8023() status (bsc#1227149).
- wifi: mac80211: extend wiphy lock in interface removal (bsc#1227149).
- wifi: mac80211: fix BA session teardown race (bsc#1227149).
- wifi: mac80211: fix BSS_CHANGED_UNSOL_BCAST_PROBE_RESP (bsc#1227149).
- wifi: mac80211: fix SMPS status handling (bsc#1227149).
- wifi: mac80211: fix TXQ error path and cleanup (bsc#1227149).
- wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (stable-fixes).
- wifi: mac80211: fix a expired vs. cancel race in roc (bsc#1227149).
- wifi: mac80211: fix advertised TTLM scheduling (bsc#1227149).
- wifi: mac80211: fix another key installation error path (bsc#1227149).
- wifi: mac80211: fix change_address deadlock during unregister (bsc#1227149).
- wifi: mac80211: fix channel switch link data (bsc#1227149).
- wifi: mac80211: fix driver debugfs for vif type change (bsc#1227149).
- wifi: mac80211: fix error path key leak (bsc#1227149).
- wifi: mac80211: fix header kernel-doc typos (bsc#1227149).
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (stable-fixes).
- wifi: mac80211: fix ieee80211_drop_unencrypted_mgmt return type/value (bsc#1227149).
- wifi: mac80211: fix monitor channel with chanctx emulation (bsc#1227149).
- wifi: mac80211: fix potential key leak (bsc#1227149).
- wifi: mac80211: fix prep_connection error path (stable-fixes).
- wifi: mac80211: fix spelling typo in comment (bsc#1227149).
- wifi: mac80211: fix unaligned le16 access (git-fixes).
- wifi: mac80211: fix unsolicited broadcast probe config (bsc#1227149).
- wifi: mac80211: fix various kernel-doc issues (bsc#1227149).
- wifi: mac80211: fixes in FILS discovery updates (bsc#1227149).
- wifi: mac80211: flush STA queues on unauthorization (bsc#1227149).
- wifi: mac80211: flush wiphy work where appropriate (bsc#1227149).
- wifi: mac80211: handle debugfs when switching to/from MLO (bsc#1227149).
- wifi: mac80211: handle tasklet frames before stopping (stable-fixes).
- wifi: mac80211: hold wiphy lock in netdev/link debugfs (bsc#1227149).
- wifi: mac80211: hold wiphy_lock around concurrency checks (bsc#1227149).
- wifi: mac80211: improve CSA/ECSA connection refusal (bsc#1227149).
- wifi: mac80211: initialize SMPS mode correctly (bsc#1227149).
- wifi: mac80211: lock wiphy for aggregation debugfs (bsc#1227149).
- wifi: mac80211: lock wiphy in IP address notifier (bsc#1227149).
- wifi: mac80211: make mgd_protect_tdls_discover MLO-aware (bsc#1227149).
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (git-fixes).
- wifi: mac80211: mesh: Remove unused function declaration mesh_ids_set_default() (bsc#1227149).
- wifi: mac80211: mesh: fix some kdoc warnings (bsc#1227149).
- wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (stable-fixes).
- wifi: mac80211: move CSA finalize to wiphy work (bsc#1227149).
- wifi: mac80211: move DFS CAC work to wiphy work (bsc#1227149).
- wifi: mac80211: move TDLS work to wiphy work (bsc#1227149).
- wifi: mac80211: move color change finalize to wiphy work (bsc#1227149).
- wifi: mac80211: move dynamic PS to wiphy work (bsc#1227149).
- wifi: mac80211: move filter reconfig to wiphy work (bsc#1227149).
- wifi: mac80211: move key tailroom work to wiphy work (bsc#1227149).
- wifi: mac80211: move link activation work to wiphy work (bsc#1227149).
- wifi: mac80211: move monitor work to wiphy work (bsc#1227149).
- wifi: mac80211: move tspec work to wiphy work (bsc#1227149).
- wifi: mac80211: process and save negotiated TID to Link mapping request (bsc#1227149).
- wifi: mac80211: purge TX queues in flush_queues flow (bsc#1227149).
- wifi: mac80211: reduce iflist_mtx (bsc#1227149).
- wifi: mac80211: reject MLO channel configuration if not supported (bsc#1227149).
- wifi: mac80211: relax RCU check in for_each_vif_active_link() (bsc#1227149).
- wifi: mac80211: remove RX_DROP_UNUSABLE (bsc#1227149).
- wifi: mac80211: remove ampdu_mlme.mtx (bsc#1227149).
- wifi: mac80211: remove chanctx_mtx (bsc#1227149).
- wifi: mac80211: remove key_mtx (bsc#1227149).
- wifi: mac80211: remove link before AP (git-fixes).
- wifi: mac80211: remove local-&gt;mtx (bsc#1227149).
- wifi: mac80211: remove redundant ML element check (bsc#1227149).
- wifi: mac80211: remove shifted rate support (bsc#1227149).
- wifi: mac80211: remove sta_mtx (bsc#1227149).
- wifi: mac80211: remove unnecessary struct forward declaration (bsc#1227149).
- wifi: mac80211: rename ieee80211_tx_status() to ieee80211_tx_status_skb() (bsc#1227149).
- wifi: mac80211: rename struct cfg80211_rx_assoc_resp to cfg80211_rx_assoc_resp_data (bsc#1227149).
- wifi: mac80211: report per-link error during association (bsc#1227149).
- wifi: mac80211: reset negotiated TTLM on disconnect (git-fixes).
- wifi: mac80211: rework RX timestamp flags (bsc#1227149).
- wifi: mac80211: rework ack_frame_id handling a bit (bsc#1227149).
- wifi: mac80211: rx.c: fix sentence grammar (bsc#1227149).
- wifi: mac80211: set wiphy for virtual monitors (bsc#1227149).
- wifi: mac80211: simplify non-chanctx drivers (bsc#1227149).
- wifi: mac80211: split ieee80211_drop_unencrypted_mgmt() return value (bsc#1227149).
- wifi: mac80211: sta_info.c: fix sentence grammar (bsc#1227149).
- wifi: mac80211: support antenna control in injection (bsc#1227149).
- wifi: mac80211: support handling of advertised TID-to-link mapping (bsc#1227149).
- wifi: mac80211: take MBSSID/EHT data also from probe resp (bsc#1227149).
- wifi: mac80211: take wiphy lock for MAC addr change (bsc#1227149).
- wifi: mac80211: tx: clarify conditions in if statement (bsc#1227149).
- wifi: mac80211: update beacon counters per link basis (bsc#1227149).
- wifi: mac80211: update some locking documentation (bsc#1227149).
- wifi: mac80211: update the rx_chains after set_antenna() (bsc#1227149).
- wifi: mac80211: use bandwidth indication element for CSA (bsc#1227149).
- wifi: mac80211: use deflink and fix typo in link ID check (bsc#1227149).
- wifi: mac80211: use wiphy locked debugfs for sdata/link (bsc#1227149).
- wifi: mac80211: use wiphy locked debugfs helpers for agg_status (bsc#1227149).
- wifi: mac80211_hwsim: init peer measurement result (git-fixes).
- wifi: mt7601u: delete dead code checking debugfs returns (bsc#1227149).
- wifi: mt7601u: replace strlcpy() with strscpy() (bsc#1227149).
- wifi: mt76: Annotate struct mt76_rx_tid with __counted_by (bsc#1227149).
- wifi: mt76: Convert to platform remove callback returning void (bsc#1227149).
- wifi: mt76: Remove redundant assignment to variable tidno (bsc#1227149).
- wifi: mt76: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: mt76: Replace strlcpy() with strscpy() (bsc#1227149).
- wifi: mt76: Use PTR_ERR_OR_ZERO() to simplify code (bsc#1227149).
- wifi: mt76: add DMA mapping error check in mt76_alloc_txwi() (bsc#1227149).
- wifi: mt76: add ability to explicitly forbid LED registration with DT (bsc#1227149).
- wifi: mt76: add support for providing eeprom in nvmem cells (bsc#1227149).
- wifi: mt76: add tx_nss histogram to ethtool stats (bsc#1227149).
- wifi: mt76: change txpower init to per-phy (bsc#1227149).
- wifi: mt76: check sta rx control frame to multibss capability (bsc#1227149).
- wifi: mt76: check txs format before getting skb by pid (bsc#1227149).
- wifi: mt76: check vif type before reporting cca and csa (bsc#1227149).
- wifi: mt76: connac: add MBSSID support for mt7996 (bsc#1227149).
- wifi: mt76: connac: add beacon duplicate TX mode support for mt7996 (bsc#1227149).
- wifi: mt76: connac: add beacon protection support for mt7996 (bsc#1227149).
- wifi: mt76: connac: add connac3 mac library (bsc#1227149).
- wifi: mt76: connac: add data field in struct tlv (bsc#1227149).
- wifi: mt76: connac: add eht support for phy mode config (bsc#1227149).
- wifi: mt76: connac: add eht support for tx power (bsc#1227149).
- wifi: mt76: connac: add firmware support for mt7992 (bsc#1227149).
- wifi: mt76: connac: add more unified command IDs (bsc#1227149).
- wifi: mt76: connac: add more unified event IDs (bsc#1227149).
- wifi: mt76: connac: add new definition of tx descriptor (bsc#1227149).
- wifi: mt76: connac: add support for dsp firmware download (bsc#1227149).
- wifi: mt76: connac: add support to set ifs time by mcu command (bsc#1227149).
- wifi: mt76: connac: add thermal protection support for mt7996 (bsc#1227149).
- wifi: mt76: connac: check for null before dereferencing (bsc#1227149).
- wifi: mt76: connac: export functions for mt7925 (bsc#1227149).
- wifi: mt76: connac: introduce helper for mt7925 chipset (bsc#1227149).
- wifi: mt76: connac: set correct muar_idx for mt799x chipsets (bsc#1227149).
- wifi: mt76: connac: set fixed_bw bit in TX descriptor for fixed rate frames (bsc#1227149).
- wifi: mt76: connac: use muar idx 0xe for non-mt799x as well (bsc#1227149).
- wifi: mt76: disable HW AMSDU when using fixed rate (bsc#1227149).
- wifi: mt76: dma: introduce __mt76_dma_queue_reset utility routine (bsc#1227149).
- wifi: mt76: enable UNII-4 channel 177 support (bsc#1227149).
- wifi: mt76: fix race condition related to checking tx queue fill status (bsc#1227149).
- wifi: mt76: fix the issue of missing txpwr settings from ch153 to ch177 (bsc#1227149).
- wifi: mt76: fix typo in mt76_get_of_eeprom_from_nvmem function (bsc#1227149).
- wifi: mt76: increase MT_QFLAG_WED_TYPE size (bsc#1227149).
- wifi: mt76: introduce mt76_queue_is_wed_tx_free utility routine (bsc#1227149).
- wifi: mt76: introduce wed pointer in mt76_queue (bsc#1227149).
- wifi: mt76: limit support of precal loading for mt7915 to MTD only (bsc#1227149).
- wifi: mt76: make mt76_get_of_eeprom static again (bsc#1227149).
- wifi: mt76: mmio: move mt76_mmio_wed_{init,release}_rx_buf in common code (bsc#1227149).
- wifi: mt76: move ampdu_state in mt76_wcid (bsc#1227149).
- wifi: mt76: move mt76_mmio_wed_offload_{enable,disable} in common code (bsc#1227149).
- wifi: mt76: move mt76_net_setup_tc in common code (bsc#1227149).
- wifi: mt76: move rate info in mt76_vif (bsc#1227149).
- wifi: mt76: move wed reset common code in mt76 module (bsc#1227149).
- wifi: mt76: mt7603: add missing register initialization for MT7628 (bsc#1227149).
- wifi: mt76: mt7603: add wpdma tx eof flag for PSE client reset (git-fixes).
- wifi: mt76: mt7603: disable A-MSDU tx support on MT7628 (bsc#1227149).
- wifi: mt76: mt7603: fix beacon interval after disabling a single vif (bsc#1227149).
- wifi: mt76: mt7603: fix tx filter/flush function (bsc#1227149).
- wifi: mt76: mt7603: fix tx queue of loopback packets (git-fixes).
- wifi: mt76: mt7603: rely on shared poll_list field (bsc#1227149).
- wifi: mt76: mt7603: rely on shared sta_poll_list and sta_poll_lock (bsc#1227149).
- wifi: mt76: mt7615: add missing chanctx ops (bsc#1227149).
- wifi: mt76: mt7615: enable BSS_CHANGED_MU_GROUPS support (bsc#1227149).
- wifi: mt76: mt7615: rely on shared poll_list field (bsc#1227149).
- wifi: mt76: mt7615: rely on shared sta_poll_list and sta_poll_lock (bsc#1227149).
- wifi: mt76: mt76_connac3: move lmac queue enumeration in mt76_connac3_mac.h (bsc#1227149).
- wifi: mt76: mt76x02: fix return value check in mt76x02_mac_process_rx (bsc#1227149).
- wifi: mt76: mt76x2u: add netgear wdna3100v3 to device table (bsc#1227149).
- wifi: mt76: mt7915 add tc offloading support (bsc#1227149).
- wifi: mt76: mt7915: accumulate mu-mimo ofdma muru stats (bsc#1227149).
- wifi: mt76: mt7915: add locking for accessing mapped registers (bsc#1227149).
- wifi: mt76: mt7915: add missing chanctx ops (bsc#1227149).
- wifi: mt76: mt7915: add support for MT7981 (bsc#1227149).
- wifi: mt76: mt7915: also MT7981 is 3T3R but nss2 on 5 GHz band (bsc#1227149).
- wifi: mt76: mt7915: disable WFDMA Tx/Rx during SER recovery (bsc#1227149).
- wifi: mt76: mt7915: drop return in mt7915_sta_statistics (bsc#1227149).
- wifi: mt76: mt7915: fix EEPROM offset of TSSI flag on MT7981 (bsc#1227149).
- wifi: mt76: mt7915: fix error recovery with WED enabled (bsc#1227149).
- wifi: mt76: mt7915: fix monitor mode issues (bsc#1227149).
- wifi: mt76: mt7915: move mib_stats structure in mt76.h (bsc#1227149).
- wifi: mt76: mt7915: move poll_list in mt76_wcid (bsc#1227149).
- wifi: mt76: mt7915: move sta_poll_list and sta_poll_lock in mt76_dev (bsc#1227149).
- wifi: mt76: mt7915: report tx retries/failed counts for non-WED path (bsc#1227149).
- wifi: mt76: mt7915: update mpdu density capability (bsc#1227149).
- wifi: mt76: mt7915: update mt798x_wmac_adie_patch_7976 (bsc#1227149).
- wifi: mt76: mt7915: workaround too long expansion sparse warnings (git-fixes).
- wifi: mt76: mt7921: Support temp sensor (bsc#1227149).
- wifi: mt76: mt7921: add 6GHz power type support for clc (bsc#1227149).
- wifi: mt76: mt7921: convert acpisar and clc pointers to void (bsc#1227149).
- wifi: mt76: mt7921: enable set txpower for UNII-4 (bsc#1227149).
- wifi: mt76: mt7921: fix 6GHz disabled by the missing default CLC config (bsc#1227149).
- wifi: mt76: mt7921: fix CLC command timeout when suspend/resume (bsc#1227149).
- wifi: mt76: mt7921: fix a potential association failure upon resuming (bsc#1227149).
- wifi: mt76: mt7921: fix kernel panic by accessing invalid 6GHz channel info (bsc#1227149).
- wifi: mt76: mt7921: fix suspend issue on MediaTek COB platform (bsc#1227149).
- wifi: mt76: mt7921: fix the unfinished command of regd_notifier before suspend (bsc#1227149).
- wifi: mt76: mt7921: fix wrong 6Ghz power type (bsc#1227149).
- wifi: mt76: mt7921: get regulatory information from the clc event (bsc#1227149).
- wifi: mt76: mt7921: get rid of MT7921_RESET_TIMEOUT marco (bsc#1227149).
- wifi: mt76: mt7921: make mt7921_mac_sta_poll static (bsc#1227149).
- wifi: mt76: mt7921: move acpi_sar code in mt792x-lib module (bsc#1227149).
- wifi: mt76: mt7921: move common register definition in mt792x_regs.h (bsc#1227149).
- wifi: mt76: mt7921: move connac nic capability handling to mt7921 (bsc#1227149).
- wifi: mt76: mt7921: move debugfs shared code in mt792x-lib module (bsc#1227149).
- wifi: mt76: mt7921: move dma shared code in mt792x-lib module (bsc#1227149).
- wifi: mt76: mt7921: move hif_ops macro in mt792x.h (bsc#1227149).
- wifi: mt76: mt7921: move init shared code in mt792x-lib module (bsc#1227149).
- wifi: mt76: mt7921: move mac shared code in mt792x-lib module (bsc#1227149).
- wifi: mt76: mt7921: move mt7921_dma_init in pci.c (bsc#1227149).
- wifi: mt76: mt7921: move mt7921u_disconnect mt792x-lib (bsc#1227149).
- wifi: mt76: mt7921: move mt792x_hw_dev in mt792x.h (bsc#1227149).
- wifi: mt76: mt7921: move mt792x_mutex_{acquire/release} in mt792x.h (bsc#1227149).
- wifi: mt76: mt7921: move runtime-pm pci code in mt792x-lib (bsc#1227149).
- wifi: mt76: mt7921: move shared runtime-pm code on mt792x-lib (bsc#1227149).
- wifi: mt76: mt7921: reduce the size of MCU firmware download Rx queue (bsc#1227149).
- wifi: mt76: mt7921: rely on mib_stats shared definition (bsc#1227149).
- wifi: mt76: mt7921: rely on shared poll_list field (bsc#1227149).
- wifi: mt76: mt7921: rely on shared sta_poll_list and sta_poll_lock (bsc#1227149).
- wifi: mt76: mt7921: remove macro duplication in regs.h (bsc#1227149).
- wifi: mt76: mt7921: rename mt7921_dev in mt792x_dev (bsc#1227149).
- wifi: mt76: mt7921: rename mt7921_hif_ops in mt792x_hif_ops (bsc#1227149).
- wifi: mt76: mt7921: rename mt7921_phy in mt792x_phy (bsc#1227149).
- wifi: mt76: mt7921: rename mt7921_sta in mt792x_sta (bsc#1227149).
- wifi: mt76: mt7921: rename mt7921_vif in mt792x_vif (bsc#1227149).
- wifi: mt76: mt7921: support 5.9/6GHz channel config in acpi (bsc#1227149).
- wifi: mt76: mt7921: update the channel usage when the regd domain changed (bsc#1227149).
- wifi: mt76: mt7921e: report tx retries/failed counts in tx free event (bsc#1227149).
- wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (stable-fixes).
- wifi: mt76: mt7925: add Mediatek Wi-Fi7 driver for mt7925 chips (bsc#1227149).
- wifi: mt76: mt7925: add flow to avoid chip bt function fail (bsc#1227149).
- wifi: mt76: mt7925: add support to set ifs time by mcu command (bsc#1227149).
- wifi: mt76: mt7925: ensure 4-byte alignment for suspend &amp; wow command (bsc#1227149).
- wifi: mt76: mt7925: fix SAP no beacon issue in 5Ghz and 6Ghz band (bsc#1227149).
- wifi: mt76: mt7925: fix WoW failed in encrypted mode (bsc#1227149).
- wifi: mt76: mt7925: fix connect to 80211b mode fail in 2Ghz band (bsc#1227149).
- wifi: mt76: mt7925: fix fw download fail (bsc#1227149).
- wifi: mt76: mt7925: fix mcu query command fail (bsc#1227149).
- wifi: mt76: mt7925: fix the wrong data type for scan command (bsc#1227149).
- wifi: mt76: mt7925: fix the wrong header translation config (bsc#1227149).
- wifi: mt76: mt7925: fix typo in mt7925_init_he_caps (bsc#1227149).
- wifi: mt76: mt7925: fix wmm queue mapping (bsc#1227149).
- wifi: mt76: mt7925: remove iftype from mt7925_init_eht_caps signature (bsc#1227149).
- wifi: mt76: mt7925: support temperature sensor (bsc#1227149).
- wifi: mt76: mt7925: update PCIe DMA settings (bsc#1227149).
- wifi: mt76: mt7925e: fix use-after-free in free_irq() (bsc#1227149).
- wifi: mt76: mt792x: add the illegal value check for mtcl table of acpi (bsc#1227149).
- wifi: mt76: mt792x: fix ethtool warning (bsc#1227149).
- wifi: mt76: mt792x: introduce mt792x-lib module (bsc#1227149).
- wifi: mt76: mt792x: introduce mt792x-usb module (bsc#1227149).
- wifi: mt76: mt792x: introduce mt792x_irq_map (bsc#1227149).
- wifi: mt76: mt792x: move MT7921_PM_TIMEOUT and MT7921_HW_SCAN_TIMEOUT in common code (bsc#1227149).
- wifi: mt76: mt792x: move more dma shared code in mt792x_dma (bsc#1227149).
- wifi: mt76: mt792x: move mt7921_load_firmware in mt792x-lib module (bsc#1227149).
- wifi: mt76: mt792x: move mt7921_skb_add_usb_sdio_hdr in mt792x module (bsc#1227149).
- wifi: mt76: mt792x: move shared structure definition in mt792x.h (bsc#1227149).
- wifi: mt76: mt792x: move some common usb code in mt792x module (bsc#1227149).
- wifi: mt76: mt792x: support mt7925 chip init (bsc#1227149).
- wifi: mt76: mt792x: update the country list of EU for ACPI SAR (bsc#1227149).
- wifi: mt76: mt792xu: enable dmashdl support (bsc#1227149).
- wifi: mt76: mt7996: Add mcu commands for getting sta tx statistic (bsc#1227149).
- wifi: mt76: mt7996: Use DECLARE_FLEX_ARRAY() and fix -Warray-bounds warnings (bsc#1227149).
- wifi: mt76: mt7996: add DMA support for mt7992 (bsc#1227149).
- wifi: mt76: mt7996: add TX statistics for EHT mode in debugfs (bsc#1227149).
- wifi: mt76: mt7996: add muru support (bsc#1227149).
- wifi: mt76: mt7996: add sanity checks for background radar trigger (stable-fixes).
- wifi: mt76: mt7996: add support for variants with auxiliary RX path (bsc#1227149).
- wifi: mt76: mt7996: add thermal sensor device support (bsc#1227149).
- wifi: mt76: mt7996: add txpower setting support (bsc#1227149).
- wifi: mt76: mt7996: adjust WFDMA settings to improve performance (bsc#1227149).
- wifi: mt76: mt7996: adjust interface num and wtbl size for mt7992 (bsc#1227149).
- wifi: mt76: mt7996: align the format of fixed rate command (bsc#1227149).
- wifi: mt76: mt7996: check txs format before getting skb by pid (bsc#1227149).
- wifi: mt76: mt7996: disable WFDMA Tx/Rx during SER recovery (bsc#1227149).
- wifi: mt76: mt7996: drop return in mt7996_sta_statistics (bsc#1227149).
- wifi: mt76: mt7996: enable BSS_CHANGED_MU_GROUPS support (bsc#1227149).
- wifi: mt76: mt7996: enable PPDU-TxS to host (bsc#1227149).
- wifi: mt76: mt7996: enable VHT extended NSS BW feature (bsc#1227149).
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands (bsc#1227149).
- wifi: mt76: mt7996: fix alignment of sta info event (bsc#1227149).
- wifi: mt76: mt7996: fix fortify warning (bsc#1227149).
- wifi: mt76: mt7996: fix fw loading timeout (bsc#1227149).
- wifi: mt76: mt7996: fix mt7996_mcu_all_sta_info_event struct packing (bsc#1227149).
- wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature (bsc#1227149).
- wifi: mt76: mt7996: fix size of txpower MCU command (bsc#1227149).
- wifi: mt76: mt7996: fix uninitialized variable in mt7996_irq_tasklet() (bsc#1227149).
- wifi: mt76: mt7996: fix uninitialized variable in parsing txfree (bsc#1227149).
- wifi: mt76: mt7996: get tx_retries and tx_failed from txfree (bsc#1227149).
- wifi: mt76: mt7996: handle IEEE80211_RC_SMPS_CHANGED (bsc#1227149).
- wifi: mt76: mt7996: increase tx token size (bsc#1227149).
- wifi: mt76: mt7996: introduce mt7996_band_valid() (bsc#1227149).
- wifi: mt76: mt7996: mark GCMP IGTK unsupported (bsc#1227149).
- wifi: mt76: mt7996: move radio ctrl commands to proper functions (bsc#1227149).
- wifi: mt76: mt7996: only set vif teardown cmds at remove interface (bsc#1227149).
- wifi: mt76: mt7996: rely on mib_stats shared definition (bsc#1227149).
- wifi: mt76: mt7996: rely on shared poll_list field (bsc#1227149).
- wifi: mt76: mt7996: rely on shared sta_poll_list and sta_poll_lock (bsc#1227149).
- wifi: mt76: mt7996: remove TXS queue setting (bsc#1227149).
- wifi: mt76: mt7996: remove periodic MPDU TXS request (bsc#1227149).
- wifi: mt76: mt7996: rework ampdu params setting (bsc#1227149).
- wifi: mt76: mt7996: rework register offsets for mt7992 (bsc#1227149).
- wifi: mt76: mt7996: set DMA mask to 36 bits for boards with more than 4GB of RAM (bsc#1227149).
- wifi: mt76: mt7996: support more options for mt7996_set_bitrate_mask() (bsc#1227149).
- wifi: mt76: mt7996: support mt7992 eeprom loading (bsc#1227149).
- wifi: mt76: mt7996: support per-band LED control (bsc#1227149).
- wifi: mt76: mt7996: switch to mcu command for TX GI report (bsc#1227149).
- wifi: mt76: mt7996: use u16 for val field in mt7996_mcu_set_rro signature (bsc#1227149).
- wifi: mt76: permit to load precal from NVMEM cell for mt7915 (bsc#1227149).
- wifi: mt76: permit to use alternative cell name to eeprom NVMEM load (bsc#1227149).
- wifi: mt76: reduce spin_lock_bh held up in mt76_dma_rx_cleanup (bsc#1227149).
- wifi: mt76: replace skb_put with skb_put_zero (stable-fixes).
- wifi: mt76: report non-binding skb tx rate when WED is active (bsc#1227149).
- wifi: mt76: set page_pool napi pointer for mmio devices (bsc#1227149).
- wifi: mt76: split get_of_eeprom in subfunction (bsc#1227149).
- wifi: mt76: usb: create a dedicated queue for psd traffic (bsc#1227149).
- wifi: mt76: usb: store usb endpoint in mt76_queue (bsc#1227149).
- wifi: mt76: use atomic iface iteration for pre-TBTT work (bsc#1227149).
- wifi: mt76: use chainmask for power delta calculation (bsc#1227149).
- wifi: mwifiex: Drop unused headers (bsc#1227149).
- wifi: mwifiex: Fix interface type change (git-fixes).
- wifi: mwifiex: Refactor 1-element array into flexible array in struct mwifiex_ie_types_chan_list_param_set (bsc#1227149).
- wifi: mwifiex: Replace one-element array with flexible-array member in struct mwifiex_ie_types_rxba_sync (bsc#1227149).
- wifi: mwifiex: Set WIPHY_FLAG_NETNS_OK flag (bsc#1227149).
- wifi: mwifiex: Use default @max_active for workqueues (bsc#1227149).
- wifi: mwifiex: Use helpers to check multicast addresses (bsc#1227149).
- wifi: mwifiex: Use list_count_nodes() (bsc#1227149).
- wifi: mwifiex: cleanup adapter data (bsc#1227149).
- wifi: mwifiex: cleanup private data structures (bsc#1227149).
- wifi: mwifiex: cleanup struct mwifiex_sdio_mpa_rx (bsc#1227149).
- wifi: mwifiex: drop BUG_ON from TX paths (bsc#1227149).
- wifi: mwifiex: fix comment typos in SDIO module (bsc#1227149).
- wifi: mwifiex: followup PCIE and related cleanups (bsc#1227149).
- wifi: mwifiex: handle possible mwifiex_write_reg() errors (bsc#1227149).
- wifi: mwifiex: handle possible sscanf() errors (bsc#1227149).
- wifi: mwifiex: mwifiex_process_sleep_confirm_resp(): remove unused priv variable (bsc#1227149).
- wifi: mwifiex: prefer strscpy() over strlcpy() (bsc#1227149).
- wifi: mwifiex: simplify PCIE write operations (bsc#1227149).
- wifi: mwifiex: use MODULE_FIRMWARE to add firmware files metadata (bsc#1227149).
- wifi: mwifiex: use cfg80211_ssid_eq() instead of mwifiex_ssid_cmp() (bsc#1227149).
- wifi: mwifiex: use is_zero_ether_addr() instead of ether_addr_equal() (bsc#1227149).
- wifi: mwifiex: use kstrtoX_from_user() in debugfs handlers (bsc#1227149).
- wifi: mwl8k: initialize cmd-&gt;addr[] properly (git-fixes).
- wifi: nl80211: Avoid address calculations via out of bounds array indexing (git-fixes).
- wifi: nl80211: Extend del pmksa support for SAE and OWE security (bsc#1227149).
- wifi: nl80211: Remove unused declaration nl80211_pmsr_dump_results() (bsc#1227149).
- wifi: nl80211: additions to NL80211_CMD_SET_BEACON (bsc#1227149).
- wifi: nl80211: allow reporting wakeup for unprot deauth/disassoc (bsc#1227149).
- wifi: nl80211: do not free NULL coalescing rule (git-fixes).
- wifi: nl80211: fixes to FILS discovery updates (bsc#1227149).
- wifi: nl80211: refactor nl80211_send_mlme_event() arguments (bsc#1227149).
- wifi: p54: Add missing MODULE_FIRMWARE macro (bsc#1227149).
- wifi: p54: Annotate struct p54_cal_database with __counted_by (bsc#1227149).
- wifi: p54: fix GCC format truncation warning with wiphy-&gt;fw_version (bsc#1227149).
- wifi: plfxlc: Drop unused include (bsc#1227149).
- wifi: radiotap: add bandwidth definition of EHT U-SIG (bsc#1227149).
- wifi: remove unused argument of ieee80211_get_tdls_action() (bsc#1227149).
- wifi: rsi: fix restricted __le32 degrades to integer sparse warnings (bsc#1227149).
- wifi: rsi: rsi_91x_coex: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: rsi: rsi_91x_debugfs: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: rsi: rsi_91x_hal: Remove unnecessary conversions (bsc#1227149).
- wifi: rsi: rsi_91x_mac80211: Remove unnecessary conversions (bsc#1227149).
- wifi: rsi: rsi_91x_main: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: rsi: rsi_91x_sdio: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: rsi: rsi_91x_sdio_ops: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: rsi: rsi_91x_usb: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: rsi: rsi_91x_usb_ops: Remove unnecessary (void*) conversions (bsc#1227149).
- wifi: rt2x00: Simplify bool conversion (bsc#1227149).
- wifi: rt2x00: correct MAC_SYS_CTRL register RX mask in R-Calibration (bsc#1227149).
- wifi: rt2x00: disable RTS threshold for rt2800 by default (bsc#1227149).
- wifi: rt2x00: fix MT7620 low RSSI issue (bsc#1227149).
- wifi: rt2x00: fix rt2800 watchdog function (bsc#1227149).
- wifi: rt2x00: fix the typo in comments (bsc#1227149).
- wifi: rt2x00: improve MT7620 register initialization (bsc#1227149).
- wifi: rt2x00: introduce DMA busy check watchdog for rt2800 (bsc#1227149).
- wifi: rt2x00: limit MT7620 TX power based on eeprom calibration (bsc#1227149).
- wifi: rt2x00: make watchdog param per device (bsc#1227149).
- wifi: rt2x00: remove redundant check if u8 array element is less than zero (bsc#1227149).
- wifi: rt2x00: remove useless code in rt2x00queue_create_tx_descriptor() (bsc#1227149).
- wifi: rt2x00: rework MT7620 PA/LNA RF calibration (bsc#1227149).
- wifi: rt2x00: rework MT7620 channel config function (bsc#1227149).
- wifi: rt2x00: silence sparse warnings (bsc#1227149).
- wifi: rt2x00: simplify rt2x00crypto_rx_insert_iv() (bsc#1227149).
- wifi: rtl8xxxu: 8188e: convert usage of priv-&gt;vif to priv-&gt;vifs[0] (bsc#1227149).
- wifi: rtl8xxxu: 8188f: Limit TX power index (git-fixes).
- wifi: rtl8xxxu: Actually use macid in rtl8xxxu_gen2_report_connect (bsc#1227149).
- wifi: rtl8xxxu: Add TP-Link TL-WN823N V2 (bsc#1227149).
- wifi: rtl8xxxu: Add a description about the device ID 0x7392:0xb722 (bsc#1227149).
- wifi: rtl8xxxu: Add beacon functions (bsc#1227149).
- wifi: rtl8xxxu: Add parameter force to rtl8xxxu_refresh_rate_mask (bsc#1227149).
- wifi: rtl8xxxu: Add parameter macid to update_rate_mask (bsc#1227149).
- wifi: rtl8xxxu: Add parameter role to report_connect (bsc#1227149).
- wifi: rtl8xxxu: Add set_tim() callback (bsc#1227149).
- wifi: rtl8xxxu: Add sta_add() and sta_remove() callbacks (bsc#1227149).
- wifi: rtl8xxxu: Add start_ap() callback (bsc#1227149).
- wifi: rtl8xxxu: Allow creating interface in AP mode (bsc#1227149).
- wifi: rtl8xxxu: Allow setting rts threshold to -1 (bsc#1227149).
- wifi: rtl8xxxu: Clean up filter configuration (bsc#1227149).
- wifi: rtl8xxxu: Declare AP mode support for 8188f (bsc#1227149).
- wifi: rtl8xxxu: Enable AP mode for RTL8192EU (bsc#1227149).
- wifi: rtl8xxxu: Enable AP mode for RTL8192FU (bsc#1227149).
- wifi: rtl8xxxu: Enable AP mode for RTL8710BU (RTL8188GU) (bsc#1227149).
- wifi: rtl8xxxu: Enable AP mode for RTL8723BU (bsc#1227149).
- wifi: rtl8xxxu: Enable hw seq for mgmt/non-QoS data frames (bsc#1227149).
- wifi: rtl8xxxu: Fix LED control code of RTL8192FU (bsc#1227149).
- wifi: rtl8xxxu: Fix off by one initial RTS rate (bsc#1227149).
- wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU (stable-fixes).
- wifi: rtl8xxxu: Put the macid in txdesc (bsc#1227149).
- wifi: rtl8xxxu: Remove usage of ieee80211_get_tx_rate() (bsc#1227149).
- wifi: rtl8xxxu: Remove usage of tx_info-&gt;control.rates[0].flags (bsc#1227149).
- wifi: rtl8xxxu: Rename some registers (bsc#1227149).
- wifi: rtl8xxxu: Select correct queue for beacon frames (bsc#1227149).
- wifi: rtl8xxxu: Set maximum number of supported stations (bsc#1227149).
- wifi: rtl8xxxu: Support USB RX aggregation for the newer chips (bsc#1227149).
- wifi: rtl8xxxu: Support new chip RTL8192FU (bsc#1227149).
- wifi: rtl8xxxu: add hw crypto support for AP mode (bsc#1227149).
- wifi: rtl8xxxu: add macids for STA mode (bsc#1227149).
- wifi: rtl8xxxu: add missing number of sec cam entries for all variants (bsc#1227149).
- wifi: rtl8xxxu: check vif before using in rtl8xxxu_tx() (bsc#1227149).
- wifi: rtl8xxxu: convert EN_DESC_ID of TX descriptor to le32 type (bsc#1227149).
- wifi: rtl8xxxu: declare concurrent mode support for 8188f (bsc#1227149).
- wifi: rtl8xxxu: do not parse CFO, if both interfaces are connected in STA mode (bsc#1227149).
- wifi: rtl8xxxu: enable MFP support with security flag of RX descriptor (bsc#1227149).
- wifi: rtl8xxxu: enable channel switch support (bsc#1227149).
- wifi: rtl8xxxu: extend check for matching bssid to both interfaces (bsc#1227149).
- wifi: rtl8xxxu: extend wifi connected check to both interfaces (bsc#1227149).
- wifi: rtl8xxxu: fix error messages (bsc#1227149).
- wifi: rtl8xxxu: fix mixed declarations in rtl8xxxu_set_aifs() (bsc#1227149).
- wifi: rtl8xxxu: make instances of iface limit and combination to be static const (bsc#1227149).
- wifi: rtl8xxxu: make supporting AP mode only on port 0 transparent (bsc#1227149).
- wifi: rtl8xxxu: mark TOTOLINK N150UA V5/N150UA-B as tested (bsc#1227149).
- wifi: rtl8xxxu: prepare supporting two virtual interfaces (bsc#1227149).
- wifi: rtl8xxxu: remove assignment of priv-&gt;vif in rtl8xxxu_bss_info_changed() (bsc#1227149).
- wifi: rtl8xxxu: remove obsolete priv-&gt;vif (bsc#1227149).
- wifi: rtl8xxxu: rtl8xxxu_rx_complete(): remove unnecessary return (bsc#1227149).
- wifi: rtl8xxxu: support multiple interface in start_ap() (bsc#1227149).
- wifi: rtl8xxxu: support multiple interfaces in bss_info_changed() (bsc#1227149).
- wifi: rtl8xxxu: support multiple interfaces in configure_filter() (bsc#1227149).
- wifi: rtl8xxxu: support multiple interfaces in update_beacon_work_callback() (bsc#1227149).
- wifi: rtl8xxxu: support multiple interfaces in watchdog_callback() (bsc#1227149).
- wifi: rtl8xxxu: support multiple interfaces in {add,remove}_interface() (bsc#1227149).
- wifi: rtl8xxxu: support multiple interfaces in set_aifs() (bsc#1227149).
- wifi: rtl8xxxu: support setting bssid register for multiple interfaces (bsc#1227149).
- wifi: rtl8xxxu: support setting linktype for both interfaces (bsc#1227149).
- wifi: rtl8xxxu: support setting mac address register for both interfaces (bsc#1227149).
- wifi: rtl8xxxu: update rate mask per sta (bsc#1227149).
- wifi: rtlwifi: Convert to use PCIe capability accessors (bsc#1227149).
- wifi: rtlwifi: Ignore IEEE80211_CONF_CHANGE_RETRY_LIMITS (bsc#1227149).
- wifi: rtlwifi: Remove bridge vendor/device ids (bsc#1227149).
- wifi: rtlwifi: Remove rtl_intf_ops.read_efuse_byte (bsc#1227149).
- wifi: rtlwifi: Remove unused PCI related defines and struct (bsc#1227149).
- wifi: rtlwifi: Speed up firmware loading for USB (bsc#1227149).
- wifi: rtlwifi: cleanup USB interface (bsc#1227149).
- wifi: rtlwifi: cleanup few rtlxxx_tx_fill_desc() routines (bsc#1227149).
- wifi: rtlwifi: cleanup few rtlxxxx_set_hw_reg() routines (bsc#1227149).
- wifi: rtlwifi: cleanup struct rtl_hal (bsc#1227149).
- wifi: rtlwifi: cleanup struct rtl_phy (bsc#1227149).
- wifi: rtlwifi: cleanup struct rtl_ps_ctl (bsc#1227149).
- wifi: rtlwifi: drop chk_switch_dmdp() from HAL interface (bsc#1227149).
- wifi: rtlwifi: drop fill_fake_txdesc() from HAL interface (bsc#1227149).
- wifi: rtlwifi: drop pre_fill_tx_bd_desc() from HAL interface (bsc#1227149).
- wifi: rtlwifi: drop unused const_amdpci_aspm (bsc#1227149).
- wifi: rtlwifi: remove misused flag from HAL data (bsc#1227149).
- wifi: rtlwifi: remove unreachable code in rtl92d_dm_check_edca_turbo() (bsc#1227149).
- wifi: rtlwifi: remove unused dualmac control leftovers (bsc#1227149).
- wifi: rtlwifi: remove unused timer and related code (bsc#1227149).
- wifi: rtlwifi: rtl8192cu: Fix 2T2R chip type detection (bsc#1227149).
- wifi: rtlwifi: rtl8192cu: Fix TX aggregation (bsc#1227149).
- wifi: rtlwifi: rtl8192de: Do not read register in _rtl92de_query_rxphystatus (bsc#1227149).
- wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power (stable-fixes).
- wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path (stable-fixes).
- wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE (stable-fixes).
- wifi: rtlwifi: rtl8723: Remove unused function rtl8723_cmd_send_packet() (bsc#1227149).
- wifi: rtlwifi: rtl8821ae: Access full PMCS reg and use pci_regs.h (bsc#1227149).
- wifi: rtlwifi: rtl8821ae: Add pdev into _rtl8821ae_clear_pci_pme_status() (bsc#1227149).
- wifi: rtlwifi: rtl8821ae: Remove unnecessary PME_Status bit set (bsc#1227149).
- wifi: rtlwifi: rtl8821ae: Reverse PM Capability exists check (bsc#1227149).
- wifi: rtlwifi: rtl8821ae: Use pci_find_capability() (bsc#1227149).
- wifi: rtlwifi: rtl8821ae: phy: remove some useless code (bsc#1227149).
- wifi: rtlwifi: rtl8821ae: phy: using calculate_bit_shift() (bsc#1227149).
- wifi: rtlwifi: rtl92ee_dm_dynamic_primary_cca_check(): fix typo in function name (bsc#1227149).
- wifi: rtlwifi: rtl_usb: Store the endpoint addresses (bsc#1227149).
- wifi: rtlwifi: rtl_usb: Use sync register writes (bsc#1227149).
- wifi: rtlwifi: set initial values for unexpected cases of USB endpoint priority (bsc#1227149).
- wifi: rtlwifi: simplify LED management (bsc#1227149).
- wifi: rtlwifi: simplify TX command fill callbacks (bsc#1227149).
- wifi: rtlwifi: simplify rtl_action_proc() and rtl_tx_agg_start() (bsc#1227149).
- wifi: rtlwifi: use convenient list_count_nodes() (bsc#1227149).
- wifi: rtlwifi: use eth_broadcast_addr() to assign broadcast address (bsc#1227149).
- wifi: rtlwifi: use helper function rtl_get_hdr() (bsc#1227149).
- wifi: rtlwifi: use unsigned long for bt_coexist_8723 timestamp (bsc#1227149).
- wifi: rtlwifi: use unsigned long for rtl_bssid_entry timestamp (bsc#1227149).
- wifi: rtw88: 8821c: tweak CCK TX filter setting for SRRC regulation (bsc#1227149).
- wifi: rtw88: 8821c: update TX power limit to V67 (bsc#1227149).
- wifi: rtw88: 8822c: update TX power limit to V70 (bsc#1227149).
- wifi: rtw88: 8822ce: refine power parameters for RFE type 5 (bsc#1227149).
- wifi: rtw88: Add support for the SDIO based RTL8723DS chipset (bsc#1227149).
- wifi: rtw88: Fix AP mode incorrect DTIM behavior (bsc#1227149).
- wifi: rtw88: Fix action frame transmission fail before association (bsc#1227149).
- wifi: rtw88: Skip high queue in hci_flush (bsc#1227149).
- wifi: rtw88: Stop high queue during scan (bsc#1227149).
- wifi: rtw88: Use random MAC when efuse MAC invalid (bsc#1227149).
- wifi: rtw88: add missing unwind goto for __rtw_download_firmware() (bsc#1227149).
- wifi: rtw88: debug: add to check if debug mask is enabled (bsc#1227149).
- wifi: rtw88: debug: remove wrapper of rtw_dbg() (bsc#1227149).
- wifi: rtw88: dump firmware debug information in abnormal state (bsc#1227149).
- wifi: rtw88: fix incorrect error codes in rtw_debugfs_copy_from_user (bsc#1227149).
- wifi: rtw88: fix incorrect error codes in rtw_debugfs_set_* (bsc#1227149).
- wifi: rtw88: fix not entering PS mode after AP stops (bsc#1227149).
- wifi: rtw88: fix typo rtw8822cu_probe (bsc#1227149).
- wifi: rtw88: process VO packets without workqueue to avoid PTK rekey failed (bsc#1227149).
- wifi: rtw88: refine register based H2C command (bsc#1227149).
- wifi: rtw88: regd: configure QATAR and UK (bsc#1227149).
- wifi: rtw88: regd: update regulatory map to R64-R42 (bsc#1227149).
- wifi: rtw88: remove unused USB bulkout size set (bsc#1227149).
- wifi: rtw88: remove unused and set but unused leftovers (bsc#1227149).
- wifi: rtw88: rtw8723d: Implement RTL8723DS (SDIO) efuse parsing (bsc#1227149).
- wifi: rtw88: simplify __rtw_tx_work() (bsc#1227149).
- wifi: rtw88: simplify vif iterators (bsc#1227149).
- wifi: rtw88: use cfg80211_ssid_eq() instead of rtw_ssid_equal() (bsc#1227149).
- wifi: rtw88: use kstrtoX_from_user() in debugfs handlers (bsc#1227149).
- wifi: rtw88: use struct instead of macros to set TX desc (bsc#1227149).
- wifi: rtw89: 52c: rfk: disable DPK during MCC (bsc#1227149).
- wifi: rtw89: 52c: rfk: refine MCC channel info notification (bsc#1227149).
- wifi: rtw89: 8851b: add 8851B basic chip_info (bsc#1227149).
- wifi: rtw89: 8851b: add 8851be to Makefile and Kconfig (bsc#1227149).
- wifi: rtw89: 8851b: add BT coexistence support function (bsc#1227149).
- wifi: rtw89: 8851b: add DLE mem and HFC quota (bsc#1227149).
- wifi: rtw89: 8851b: add MAC configurations to chip_info (bsc#1227149).
- wifi: rtw89: 8851b: add NCTL post table (bsc#1227149).
- wifi: rtw89: 8851b: add RF configurations (bsc#1227149).
- wifi: rtw89: 8851b: add TX power related functions (bsc#1227149).
- wifi: rtw89: 8851b: add basic power on function (bsc#1227149).
- wifi: rtw89: 8851b: add set channel function (bsc#1227149).
- wifi: rtw89: 8851b: add set_channel_rf() (bsc#1227149).
- wifi: rtw89: 8851b: add support WoWLAN to 8851B (bsc#1227149).
- wifi: rtw89: 8851b: add to parse efuse content (bsc#1227149).
- wifi: rtw89: 8851b: add to read efuse version to recognize hardware version B (bsc#1227149).
- wifi: rtw89: 8851b: configure CRASH_TRIGGER feature for 8851B (bsc#1227149).
- wifi: rtw89: 8851b: configure GPIO according to RFE type (bsc#1227149).
- wifi: rtw89: 8851b: configure to force 1 TX power value (bsc#1227149).
- wifi: rtw89: 8851b: enable hw_scan support (bsc#1227149).
- wifi: rtw89: 8851b: fill BB related capabilities to chip_info (bsc#1227149).
- wifi: rtw89: 8851b: rfk: Fix spelling mistake KIP_RESOTRE -&gt; KIP_RESTORE (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add AACK (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add DACK (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add DPK (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add IQK (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add LCK track (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add RCK (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add RX DCK (bsc#1227149).
- wifi: rtw89: 8851b: rfk: add TSSI (bsc#1227149).
- wifi: rtw89: 8851b: rfk: update IQK to version 0x8 (bsc#1227149).
- wifi: rtw89: 8851b: update RF radio A parameters to R28 (bsc#1227149).
- wifi: rtw89: 8851b: update TX power tables to R28 (bsc#1227149).
- wifi: rtw89: 8851b: update TX power tables to R34 (bsc#1227149).
- wifi: rtw89: 8851b: update TX power tables to R37 (bsc#1227149).
- wifi: rtw89: 8851be: add 8851BE PCI entry and fill PCI capabilities (bsc#1227149).
- wifi: rtw89: 8852b: fix definition of KIP register number (git-fixes).
- wifi: rtw89: 8852b: update TX power tables to R35 (bsc#1227149).
- wifi: rtw89: 8852b: update TX power tables to R36 (bsc#1227149).
- wifi: rtw89: 8852c: Fix TSSI causes transmit power inaccuracy (bsc#1227149).
- wifi: rtw89: 8852c: Update bandedge parameters for better performance (bsc#1227149).
- wifi: rtw89: 8852c: add quirk to set PCI BER for certain platforms (bsc#1227149).
- wifi: rtw89: 8852c: declare to support two chanctx (bsc#1227149).
- wifi: rtw89: 8852c: read RX gain offset from efuse for 6GHz channels (bsc#1227149).
- wifi: rtw89: 8852c: update RF radio A/B parameters to R63 (bsc#1227149).
- wifi: rtw89: 8852c: update TX power tables to R63 with 6 GHz power type (1 of 3) (bsc#1227149).
- wifi: rtw89: 8852c: update TX power tables to R63 with 6 GHz power type (2 of 3) (bsc#1227149).
- wifi: rtw89: 8852c: update TX power tables to R63 with 6 GHz power type (3 of 3) (bsc#1227149).
- wifi: rtw89: 8852c: update TX power tables to R67 (bsc#1227149).
- wifi: rtw89: 8922a: add 8922A basic chip info (bsc#1227149).
- wifi: rtw89: 8922a: add BTG functions to assist BT coexistence to control TX/RX (bsc#1227149).
- wifi: rtw89: 8922a: add NCTL pre-settings for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: 8922a: add RF read/write v2 (bsc#1227149).
- wifi: rtw89: 8922a: add SER IMR tables (bsc#1227149).
- wifi: rtw89: 8922a: add TX power related ops (bsc#1227149).
- wifi: rtw89: 8922a: add chip_ops related to BB init (bsc#1227149).
- wifi: rtw89: 8922a: add chip_ops to get thermal value (bsc#1227149).
- wifi: rtw89: 8922a: add chip_ops::bb_preinit to enable BB before downloading firmware (bsc#1227149).
- wifi: rtw89: 8922a: add chip_ops::cfg_txrx_path (bsc#1227149).
- wifi: rtw89: 8922a: add chip_ops::rfk_hw_init (bsc#1227149).
- wifi: rtw89: 8922a: add chip_ops::rfk_init_late to do initial RF calibrations later (bsc#1227149).
- wifi: rtw89: 8922a: add chip_ops::{enable,disable}_bb_rf (bsc#1227149).
- wifi: rtw89: 8922a: add coexistence helpers of SW grant (bsc#1227149).
- wifi: rtw89: 8922a: add helper of set_channel (bsc#1227149).
- wifi: rtw89: 8922a: add ieee80211_ops::hw_scan (bsc#1227149).
- wifi: rtw89: 8922a: add more fields to beacon H2C command to support multi-links (bsc#1227149).
- wifi: rtw89: 8922a: add power on/off functions (bsc#1227149).
- wifi: rtw89: 8922a: add register definitions of H2C, C2H, page, RRSR and EDCCA (bsc#1227149).
- wifi: rtw89: 8922a: add set_channel BB part (bsc#1227149).
- wifi: rtw89: 8922a: add set_channel MAC part (bsc#1227149).
- wifi: rtw89: 8922a: add set_channel RF part (bsc#1227149).
- wifi: rtw89: 8922a: configure CRASH_TRIGGER FW feature (bsc#1227149).
- wifi: rtw89: 8922a: correct register definition and merge IO for ctrl_nbtg_bt_tx() (bsc#1227149).
- wifi: rtw89: 8922a: declare to support two chanctx (bsc#1227149).
- wifi: rtw89: 8922a: dump MAC registers when SER occurs (bsc#1227149).
- wifi: rtw89: 8922a: extend and add quota number (bsc#1227149).
- wifi: rtw89: 8922a: hook handlers of TX/RX descriptors to chip_ops (bsc#1227149).
- wifi: rtw89: 8922a: implement AP mode related reg for BE generation (bsc#1227149).
- wifi: rtw89: 8922a: implement {stop,resume}_sch_tx and cfg_ppdu (bsc#1227149).
- wifi: rtw89: 8922a: read efuse content from physical map (bsc#1227149).
- wifi: rtw89: 8922a: read efuse content via efuse map struct from logic map (bsc#1227149).
- wifi: rtw89: 8922a: rfk: implement chip_ops to call RF calibrations (bsc#1227149).
- wifi: rtw89: 8922a: set RX gain along with set_channel operation (bsc#1227149).
- wifi: rtw89: 8922a: set chip_ops FEM and GPIO to NULL (bsc#1227149).
- wifi: rtw89: 8922a: set memory heap address for secure firmware (bsc#1227149).
- wifi: rtw89: 8922a: update BA CAM number to 24 (bsc#1227149).
- wifi: rtw89: 8922a: update the register used in DIG and the DIG flow (bsc#1227149).
- wifi: rtw89: 8922ae: add 8922AE PCI entry and basic info (bsc#1227149).
- wifi: rtw89: 8922ae: add v2 interrupt handlers for 8922AE (bsc#1227149).
- wifi: rtw89: Add EHT rate mask as parameters of RA H2C command (bsc#1227149).
- wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (git-fixes).
- wifi: rtw89: Fix clang -Wimplicit-fallthrough in rtw89_query_sar() (bsc#1227149).
- wifi: rtw89: Introduce Time Averaged SAR (TAS) feature (bsc#1227149).
- wifi: rtw89: Refine active scan behavior in 6 GHz (bsc#1227149).
- wifi: rtw89: Set default CQM config if not present (bsc#1227149).
- wifi: rtw89: TX power stuffs replace confusing naming of _max with _num (bsc#1227149).
- wifi: rtw89: Update EHT PHY beamforming capability (bsc#1227149).
- wifi: rtw89: acpi: process 6 GHz band policy from DSM (bsc#1227149).
- wifi: rtw89: add C2H RA event V1 to support WiFi 7 chips (bsc#1227149).
- wifi: rtw89: add C2H event handlers of RFK log and report (bsc#1227149).
- wifi: rtw89: add CFO XTAL registers field to support 8851B (bsc#1227149).
- wifi: rtw89: add DBCC H2C to notify firmware the status (bsc#1227149).
- wifi: rtw89: add EHT capabilities for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: add EHT radiotap in monitor mode (bsc#1227149).
- wifi: rtw89: add EVM and SNR statistics to debugfs (bsc#1227149).
- wifi: rtw89: add EVM for antenna diversity (bsc#1227149).
- wifi: rtw89: add H2C RA command V1 to support WiFi 7 chips (bsc#1227149).
- wifi: rtw89: add H2C command to download beacon frame for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: add RSSI based antenna diversity (bsc#1227149).
- wifi: rtw89: add RSSI statistics for the case of antenna diversity to debugfs (bsc#1227149).
- wifi: rtw89: add XTAL SI for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: add chip_info::chip_gen to determine chip generation (bsc#1227149).
- wifi: rtw89: add chip_info::txwd_info size to generalize TX WD submit (bsc#1227149).
- wifi: rtw89: add chip_ops::h2c_ba_cam() to configure BA CAM (bsc#1227149).
- wifi: rtw89: add chip_ops::query_rxdesc() and rxd_len as helpers to support newer chips (bsc#1227149).
- wifi: rtw89: add chip_ops::update_beacon to abstract update beacon operation (bsc#1227149).
- wifi: rtw89: add firmware H2C command of BA CAM V1 (bsc#1227149).
- wifi: rtw89: add firmware parser for v1 format (bsc#1227149).
- wifi: rtw89: add firmware suit for BB MCU 0/1 (bsc#1227149).
- wifi: rtw89: add function prototype for coex request duration (bsc#1227149).
- wifi: rtw89: add mac_gen pointer to access mac port registers (bsc#1227149).
- wifi: rtw89: add mlo_dbcc_mode for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: add new H2C command to pause/sleep transmitting by MAC ID (bsc#1227149).
- wifi: rtw89: add new H2C for PS mode in 802.11be chip (bsc#1227149).
- wifi: rtw89: add reserved size as factor of DLE used size (bsc#1227149).
- wifi: rtw89: add subband index of primary channel to struct rtw89_chan (bsc#1227149).
- wifi: rtw89: add to display hardware rates v1 histogram in debugfs (bsc#1227149).
- wifi: rtw89: add to fill TX descriptor for firmware command v2 (bsc#1227149).
- wifi: rtw89: add to fill TX descriptor v2 (bsc#1227149).
- wifi: rtw89: add to parse firmware elements of BB and RF tables (bsc#1227149).
- wifi: rtw89: add to query RX descriptor format v2 (bsc#1227149).
- wifi: rtw89: add tx_wake notify for 8851B (bsc#1227149).
- wifi: rtw89: add wait/completion for abort scan (bsc#1227149).
- wifi: rtw89: adjust init_he_cap() to add EHT cap into iftype_data (bsc#1227149).
- wifi: rtw89: advertise missing extended scan feature (bsc#1227149).
- wifi: rtw89: avoid stringop-overflow warning (bsc#1227149).
- wifi: rtw89: call rtw89_chan_get() by vif chanctx if aware of vif (bsc#1227149).
- wifi: rtw89: chan: MCC take reconfig into account (bsc#1227149).
- wifi: rtw89: chan: add sub-entity swap function to cover replacing (bsc#1227149).
- wifi: rtw89: chan: move handling from add/remove to assign/unassign for MLO (bsc#1227149).
- wifi: rtw89: chan: support MCC on Wi-Fi 7 chips (bsc#1227149).
- wifi: rtw89: chan: tweak bitmap recalc ahead before MLO (bsc#1227149).
- wifi: rtw89: chan: tweak weight recalc ahead before MLO (bsc#1227149).
- wifi: rtw89: change naming of BA CAM from V1 to V0_EXT (bsc#1227149).
- wifi: rtw89: change qutoa to DBCC by default for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: change supported bandwidths of chip_info to bit mask (bsc#1227149).
- wifi: rtw89: cleanup firmware elements parsing (bsc#1227149).
- wifi: rtw89: cleanup private data structures (bsc#1227149).
- wifi: rtw89: cleanup rtw89_iqk_info and related code (bsc#1227149).
- wifi: rtw89: coex: Add Bluetooth RSSI level information (bsc#1227149).
- wifi: rtw89: coex: Add Pre-AGC control to enhance Wi-Fi RX performance (bsc#1227149).
- wifi: rtw89: coex: Add coexistence policy to decrease WiFi packet CRC-ERR (bsc#1227149).
- wifi: rtw89: coex: Fix wrong Wi-Fi role info and FDDT parameter members (bsc#1227149).
- wifi: rtw89: coex: Record down Wi-Fi initial mode information (bsc#1227149).
- wifi: rtw89: coex: Reorder H2C command index to align with firmware (bsc#1227149).
- wifi: rtw89: coex: Set Bluetooth scan low-priority when Wi-Fi link/scan (bsc#1227149).
- wifi: rtw89: coex: Still show hardware grant signal info even Wi-Fi is PS (bsc#1227149).
- wifi: rtw89: coex: To improve Wi-Fi performance while BT is idle (bsc#1227149).
- wifi: rtw89: coex: Translate antenna configuration from ID to string (bsc#1227149).
- wifi: rtw89: coex: Update BTG control related logic (bsc#1227149).
- wifi: rtw89: coex: Update RF parameter control setting logic (bsc#1227149).
- wifi: rtw89: coex: Update coexistence policy for Wi-Fi LPS (bsc#1227149).
- wifi: rtw89: coex: When Bluetooth not available do not set power/gain (bsc#1227149).
- wifi: rtw89: coex: add BTC ctrl_info version 7 and related logic (bsc#1227149).
- wifi: rtw89: coex: add annotation __counted_by() for struct rtw89_btc_btf_set_slot_table (bsc#1227149).
- wifi: rtw89: coex: add annotation __counted_by() to struct rtw89_btc_btf_set_mon_reg (bsc#1227149).
- wifi: rtw89: coex: add init_info H2C command format version 7 (bsc#1227149).
- wifi: rtw89: coex: add return value to ensure H2C command is success or not (bsc#1227149).
- wifi: rtw89: coex: fix configuration for shared antenna for 8922A (bsc#1227149).
- wifi: rtw89: coex: use struct assignment to replace memcpy() to append TDMA content (bsc#1227149).
- wifi: rtw89: configure PPDU max user by chip (bsc#1227149).
- wifi: rtw89: consider RX info for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: consolidate registers of mac port to struct (bsc#1227149).
- wifi: rtw89: correct PHY register offset for PHY-1 (bsc#1227149).
- wifi: rtw89: correct aSIFSTime for 6GHz band (stable-fixes).
- wifi: rtw89: correct the DCFO tracking flow to improve CFO compensation (bsc#1227149).
- wifi: rtw89: debug: add FW log component for scan (bsc#1227149).
- wifi: rtw89: debug: add debugfs entry to disable dynamic mechanism (bsc#1227149).
- wifi: rtw89: debug: add to check if debug mask is enabled (bsc#1227149).
- wifi: rtw89: debug: remove wrapper of rtw89_debug() (bsc#1227149).
- wifi: rtw89: debug: show txpwr table according to chip gen (bsc#1227149).
- wifi: rtw89: debug: txpwr table access only valid page according to chip (bsc#1227149).
- wifi: rtw89: debug: txpwr table supports Wi-Fi 7 chips (bsc#1227149).
- wifi: rtw89: declare EXT NSS BW of VHT capability (bsc#1227149).
- wifi: rtw89: declare MCC in interface combination (bsc#1227149).
- wifi: rtw89: define hardware rate v1 for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: differentiate narrow_bw_ru_dis setting according to chip gen (bsc#1227149).
- wifi: rtw89: disable RTS when broadcast/multicast (bsc#1227149).
- wifi: rtw89: download firmware with five times retry (bsc#1227149).
- wifi: rtw89: drop TIMING_BEACON_ONLY and sync beacon TSF by self (bsc#1227149).
- wifi: rtw89: enlarge supported length of read_reg debugfs entry (bsc#1227149).
- wifi: rtw89: extend PHY status parser to support WiFi 7 chips (bsc#1227149).
- wifi: rtw89: fix HW scan not aborting properly (git-fixes).
- wifi: rtw89: fix HW scan timeout due to TSF sync issue (bsc#1227149).
- wifi: rtw89: fix a width vs precision bug (bsc#1227149).
- wifi: rtw89: fix disabling concurrent mode TX hang issue (bsc#1227149).
- wifi: rtw89: fix misbehavior of TX beacon in concurrent mode (bsc#1227149).
- wifi: rtw89: fix not entering PS mode after AP stops (bsc#1227149).
- wifi: rtw89: fix spelling typo of IQK debug messages (bsc#1227149).
- wifi: rtw89: fix typo of rtw89_fw_h2c_mcc_macid_bitmap() (bsc#1227149).
- wifi: rtw89: fw: add H2C command to reset CMAC table for WiFi 7 (bsc#1227149).
- wifi: rtw89: fw: add H2C command to reset DMAC table for WiFi 7 (bsc#1227149).
- wifi: rtw89: fw: add H2C command to update security CAM v2 (bsc#1227149).
- wifi: rtw89: fw: add checking type for variant type of firmware (bsc#1227149).
- wifi: rtw89: fw: add chip_ops to update CMAC table to associated station (bsc#1227149).
- wifi: rtw89: fw: add definition of H2C command and C2H event for MRC series (bsc#1227149).
- wifi: rtw89: fw: add version field to BB MCU firmware element (bsc#1227149).
- wifi: rtw89: fw: consider checksum length of security data (bsc#1227149).
- wifi: rtw89: fw: download firmware with key data for secure boot (bsc#1227149).
- wifi: rtw89: fw: extend JOIN H2C command to support WiFi 7 chips (bsc#1227149).
- wifi: rtw89: fw: extend program counter dump for Wi-Fi 7 chip (bsc#1227149).
- wifi: rtw89: fw: fill CMAC table to associated station for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: fw: generalize download firmware flow by mac_gen pointers (bsc#1227149).
- wifi: rtw89: fw: implement MRC H2C command functions (bsc#1227149).
- wifi: rtw89: fw: implement supported functions of download firmware for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: fw: load TX power track tables from fw_element (bsc#1227149).
- wifi: rtw89: fw: move polling function of firmware path ready to an individual function (bsc#1227149).
- wifi: rtw89: fw: parse secure section from firmware file (bsc#1227149).
- wifi: rtw89: fw: propagate an argument include_bb for BB MCU firmware (bsc#1227149).
- wifi: rtw89: fw: read firmware secure information from efuse (bsc#1227149).
- wifi: rtw89: fw: refine download flow to support variant firmware suits (bsc#1227149).
- wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband (bsc#1227149).
- wifi: rtw89: fw: update TX AMPDU parameter to CMAC table (bsc#1227149).
- wifi: rtw89: fw: use struct to fill BA CAM H2C commands (bsc#1227149).
- wifi: rtw89: fw: use struct to fill JOIN H2C command (bsc#1227149).
- wifi: rtw89: get data rate mode/NSS/MCS v1 from RX descriptor (bsc#1227149).
- wifi: rtw89: indicate TX power by rate table inside RFE parameter (bsc#1227149).
- wifi: rtw89: indicate TX shape table inside RFE parameter (bsc#1227149).
- wifi: rtw89: initialize antenna for antenna diversity (bsc#1227149).
- wifi: rtw89: initialize multi-channel handling (bsc#1227149).
- wifi: rtw89: introduce infrastructure of firmware elements (bsc#1227149).
- wifi: rtw89: introduce realtek ACPI DSM method (bsc#1227149).
- wifi: rtw89: introduce v1 format of firmware header (bsc#1227149).
- wifi: rtw89: load BB parameters to PHY-1 (bsc#1227149).
- wifi: rtw89: load RFK log format string from firmware file (bsc#1227149).
- wifi: rtw89: load TX power by rate when RFE parms setup (bsc#1227149).
- wifi: rtw89: load TX power related tables from FW elements (bsc#1227149).
- wifi: rtw89: mac: Fix spelling mistakes "notfify" -&gt; "notify" (bsc#1227149).
- wifi: rtw89: mac: add coexistence helpers {cfg/get}_plt (bsc#1227149).
- wifi: rtw89: mac: add feature_init to initialize BA CAM V1 (bsc#1227149).
- wifi: rtw89: mac: add flags to check if CMAC and DMAC are enabled (bsc#1227149).
- wifi: rtw89: mac: add mac_gen_def::band1_offset to map MAC band1 register address (bsc#1227149).
- wifi: rtw89: mac: add registers of MU-EDCA parameters for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: mac: add suffix _ax to MAC functions (bsc#1227149).
- wifi: rtw89: mac: add sys_init and filter option for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: mac: add to access efuse for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: mac: add to get DLE reserved quota (bsc#1227149).
- wifi: rtw89: mac: check queue empty according to chip gen (bsc#1227149).
- wifi: rtw89: mac: correct MUEDCA setting for MAC-1 (bsc#1227149).
- wifi: rtw89: mac: define internal memory address for WiFi 7 chip (bsc#1227149).
- wifi: rtw89: mac: define register address of rx_filter to generalize code (bsc#1227149).
- wifi: rtw89: mac: do bf_monitor only if WiFi 6 chips (bsc#1227149).
- wifi: rtw89: mac: functions to configure hardware engine and quota for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: mac: generalize code to indirectly access WiFi internal memory (bsc#1227149).
- wifi: rtw89: mac: generalize register of MU-EDCA switch according to chip gen (bsc#1227149).
- wifi: rtw89: mac: get TX power control register according to chip gen (bsc#1227149).
- wifi: rtw89: mac: handle C2H receive/done ACK in interrupt context (bsc#1227149).
- wifi: rtw89: mac: implement MRC C2H event handling (bsc#1227149).
- wifi: rtw89: mac: implement to configure TX/RX engines for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: mac: move code related to hardware engine to individual functions (bsc#1227149).
- wifi: rtw89: mac: refine SER setting during WiFi CPU power on (bsc#1227149).
- wifi: rtw89: mac: reset PHY-1 hardware when going to enable/disable (bsc#1227149).
- wifi: rtw89: mac: return held quota of DLE when changing MAC-1 (bsc#1227149).
- wifi: rtw89: mac: set bf_assoc capabilities according to chip gen (bsc#1227149).
- wifi: rtw89: mac: set bfee_ctrl() according to chip gen (bsc#1227149).
- wifi: rtw89: mac: update RTS threshold according to chip gen (bsc#1227149).
- wifi: rtw89: mac: use mac_gen pointer to access about efuse (bsc#1227149).
- wifi: rtw89: mac: use pointer to access functions of hardware engine and quota (bsc#1227149).
- wifi: rtw89: mcc: consider and determine BT duration (bsc#1227149).
- wifi: rtw89: mcc: deal with BT slot change (bsc#1227149).
- wifi: rtw89: mcc: deal with P2P PS change (bsc#1227149).
- wifi: rtw89: mcc: deal with beacon NoA if GO exists (bsc#1227149).
- wifi: rtw89: mcc: decide pattern and calculate parameters (bsc#1227149).
- wifi: rtw89: mcc: fill fundamental configurations (bsc#1227149).
- wifi: rtw89: mcc: fix NoA start time when GO is auxiliary (bsc#1227149).
- wifi: rtw89: mcc: initialize start flow (bsc#1227149).
- wifi: rtw89: mcc: track beacon offset and update when needed (bsc#1227149).
- wifi: rtw89: mcc: trigger FW to start/stop MCC (bsc#1227149).
- wifi: rtw89: mcc: update role bitmap when changed (bsc#1227149).
- wifi: rtw89: modify the register setting and the flow of CFO tracking (bsc#1227149).
- wifi: rtw89: move software DCFO compensation setting to proper position (bsc#1227149).
- wifi: rtw89: only reset BB/RF for existing WiFi 6 chips while starting up (bsc#1227149).
- wifi: rtw89: packet offload wait for FW response (bsc#1227149).
- wifi: rtw89: parse EHT information from RX descriptor and PPDU status packet (bsc#1227149).
- wifi: rtw89: parse TX EHT rate selected by firmware from RA C2H report (bsc#1227149).
- wifi: rtw89: parse and print out RFK log from C2H events (bsc#1227149).
- wifi: rtw89: pause/proceed MCC for ROC and HW scan (bsc#1227149).
- wifi: rtw89: pci: add LTR v2 for WiFi 7 chip (bsc#1227149).
- wifi: rtw89: pci: add PCI generation information to pci_info for each chip (bsc#1227149).
- wifi: rtw89: pci: add new RX ring design to determine full RX ring efficiently (bsc#1227149).
- wifi: rtw89: pci: add pre_deinit to be called after probe complete (bsc#1227149).
- wifi: rtw89: pci: correct TX resource checking for PCI DMA channel of firmware command (git-fixes).
- wifi: rtw89: pci: correct interrupt mitigation register for 8852CE (bsc#1227149).
- wifi: rtw89: pci: define PCI ring address for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: pci: fix interrupt enable mask for HALT C2H of RTL8851B (bsc#1227149).
- wifi: rtw89: pci: generalize code of PCI control DMA IO for WiFi 7 (bsc#1227149).
- wifi: rtw89: pci: generalize interrupt status bits of interrupt handlers (bsc#1227149).
- wifi: rtw89: pci: implement PCI CLK/ASPM/L1SS for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: pci: implement PCI mac_post_init for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: pci: implement PCI mac_pre_init for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: pci: interrupt v2 refine IMR for SER (bsc#1227149).
- wifi: rtw89: pci: reset BDRAM according to chip gen (bsc#1227149).
- wifi: rtw89: pci: stop/start DMA for level 1 recovery according to chip gen (bsc#1227149).
- wifi: rtw89: pci: update SER timer unit and timeout time (bsc#1227149).
- wifi: rtw89: pci: update interrupt mitigation register for 8922AE (bsc#1227149).
- wifi: rtw89: pci: use DBI function for 8852AE/8852BE/8851BE (bsc#1227149).
- wifi: rtw89: pci: use gen_def pointer to configure mac_{pre,post}_init and clear PCI ring index (bsc#1227149).
- wifi: rtw89: pci: validate RX tag for RXQ and RPQ (bsc#1227149).
- wifi: rtw89: phy: add BB wrapper of TX power for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: phy: add parser to support RX gain dynamic setting flow (bsc#1227149).
- wifi: rtw89: phy: add phy_gen_def::cr_base to support WiFi 7 chips (bsc#1227149).
- wifi: rtw89: phy: change naming related BT coexistence functions (bsc#1227149).
- wifi: rtw89: phy: dynamically adjust EDCCA threshold (bsc#1227149).
- wifi: rtw89: phy: extend TX power common stuffs for Wi-Fi 7 chips (bsc#1227149).
- wifi: rtw89: phy: generalize valid bit of BSS color (bsc#1227149).
- wifi: rtw89: phy: ignore special data from BB parameter file (bsc#1227149).
- wifi: rtw89: phy: modify register setting of ENV_MNTR, PHYSTS and DIG (bsc#1227149).
- wifi: rtw89: phy: move bb_gain_info used by WiFi 6 chips to union (bsc#1227149).
- wifi: rtw89: phy: print out RFK log with formatted string (bsc#1227149).
- wifi: rtw89: phy: rate pattern handles HW rate by chip gen (bsc#1227149).
- wifi: rtw89: phy: refine helpers used for raw TX power (bsc#1227149).
- wifi: rtw89: phy: set TX power RU limit according to chip gen (bsc#1227149).
- wifi: rtw89: phy: set TX power by rate according to chip gen (bsc#1227149).
- wifi: rtw89: phy: set TX power limit according to chip gen (bsc#1227149).
- wifi: rtw89: phy: set TX power offset according to chip gen (bsc#1227149).
- wifi: rtw89: phy: set channel_info for WiFi 7 chips (bsc#1227149).
- wifi: rtw89: prepare scan leaf functions for wifi 7 ICs (bsc#1227149).
- wifi: rtw89: process regulatory for 6 GHz power type (bsc#1227149).
- wifi: rtw89: provide functions to configure NoA for beacon update (bsc#1227149).
- wifi: rtw89: recognize log format from firmware file (bsc#1227149).
- wifi: rtw89: reference quota mode when setting Tx power (bsc#1227149).
- wifi: rtw89: refine H2C command that pause transmitting by MAC ID (bsc#1227149).
- wifi: rtw89: refine add_chan H2C command to encode_bits (bsc#1227149).
- wifi: rtw89: refine bandwidth 160MHz uplink OFDMA performance (bsc#1227149).
- wifi: rtw89: refine clearing supported bands to check 2/5 GHz first (bsc#1227149).
- wifi: rtw89: refine element naming used by queue empty check (bsc#1227149).
- wifi: rtw89: refine hardware scan C2H events (bsc#1227149).
- wifi: rtw89: refine packet offload delete flow of 6 GHz probe (bsc#1227149).
- wifi: rtw89: refine packet offload handling under SER (bsc#1227149).
- wifi: rtw89: refine remain on channel flow to improve P2P connection (bsc#1227149).
- wifi: rtw89: refine rtw89_correct_cck_chan() by rtw89_hw_to_nl80211_band() (bsc#1227149).
- wifi: rtw89: refine uplink trigger based control mechanism (bsc#1227149).
- wifi: rtw89: regd: configure Thailand in regulation type (bsc#1227149).
- wifi: rtw89: regd: handle policy of 6 GHz according to BIOS (bsc#1227149).
- wifi: rtw89: regd: judge 6 GHz according to chip and BIOS (bsc#1227149).
- wifi: rtw89: regd: judge UNII-4 according to BIOS and chip (bsc#1227149).
- wifi: rtw89: regd: update regulatory map to R64-R40 (bsc#1227149).
- wifi: rtw89: regd: update regulatory map to R64-R43 (bsc#1227149).
- wifi: rtw89: regd: update regulatory map to R65-R44 (bsc#1227149).
- wifi: rtw89: release bit in rtw89_fw_h2c_del_pkt_offload() (bsc#1227149).
- wifi: rtw89: return failure if needed firmware elements are not recognized (bsc#1227149).
- wifi: rtw89: rfk: add H2C command to trigger DACK (bsc#1227149).
- wifi: rtw89: rfk: add H2C command to trigger DPK (bsc#1227149).
- wifi: rtw89: rfk: add H2C command to trigger IQK (bsc#1227149).
- wifi: rtw89: rfk: add H2C command to trigger RX DCK (bsc#1227149).
- wifi: rtw89: rfk: add H2C command to trigger TSSI (bsc#1227149).
- wifi: rtw89: rfk: add H2C command to trigger TXGAPK (bsc#1227149).
- wifi: rtw89: rfk: add a completion to wait RF calibration report from C2H event (bsc#1227149).
- wifi: rtw89: rfk: disable driver tracking during MCC (bsc#1227149).
- wifi: rtw89: rfk: send channel information to firmware for RF calibrations (bsc#1227149).
- wifi: rtw89: sar: let caller decide the center frequency to query (bsc#1227149).
- wifi: rtw89: scan offload wait for FW done ACK (bsc#1227149).
- wifi: rtw89: ser: L1 add pre-M0 and post-M0 states (bsc#1227149).
- wifi: rtw89: ser: reset total_sta_assoc and tdls_peer when L2 (bsc#1227149).
- wifi: rtw89: set TX power without precondition during setting channel (bsc#1227149).
- wifi: rtw89: set capability of TX antenna diversity (bsc#1227149).
- wifi: rtw89: set entry size of address CAM to H2C field by chip (bsc#1227149).
- wifi: rtw89: show EHT rate in debugfs (bsc#1227149).
- wifi: rtw89: support U-NII-4 channels on 5GHz band (bsc#1227149).
- wifi: rtw89: support firmware log with formatted text (bsc#1227149).
- wifi: rtw89: suppress the log for specific SER called CMDPSR_FRZTO (bsc#1227149).
- wifi: rtw89: tweak H2C TX waiting function for SER (bsc#1227149).
- wifi: rtw89: update DMA function with different generation (bsc#1227149).
- wifi: rtw89: update ps_state register for chips with different generation (bsc#1227149).
- wifi: rtw89: update scan C2H messages for wifi 7 IC (bsc#1227149).
- wifi: rtw89: update suspend/resume for different generation (bsc#1227149).
- wifi: rtw89: use PLCP information to match BSS_COLOR and AID (bsc#1227149).
- wifi: rtw89: use chip_info::small_fifo_size to choose debug_mask (bsc#1227149).
- wifi: rtw89: use flexible array member in rtw89_btc_btf_tlv (bsc#1227149).
- wifi: rtw89: use struct and le32_get_bits to access RX info (bsc#1227149).
- wifi: rtw89: use struct and le32_get_bits() to access RX descriptor (bsc#1227149).
- wifi: rtw89: use struct and le32_get_bits() to access received PHY status IEs (bsc#1227149).
- wifi: rtw89: use struct rtw89_phy_sts_ie0 instead of macro to access PHY IE0 status (bsc#1227149).
- wifi: rtw89: use struct to access RA report (bsc#1227149).
- wifi: rtw89: use struct to access firmware C2H event header (bsc#1227149).
- wifi: rtw89: use struct to access register-based H2C/C2H (bsc#1227149).
- wifi: rtw89: use struct to fill H2C command to download beacon frame (bsc#1227149).
- wifi: rtw89: use struct to parse firmware header (bsc#1227149).
- wifi: rtw89: use struct to set RA H2C command (bsc#1227149).
- wifi: rtw89: wow: move release offload packet earlier for WoWLAN mode (bsc#1227149).
- wifi: rtw89: wow: refine WoWLAN flows of HCI interrupts and low power mode (bsc#1227149).
- wifi: rtw89: wow: set security engine options for 802.11ax chips only (bsc#1227149).
- wifi: rtw89: wow: update WoWLAN reason register for different chips (bsc#1227149).
- wifi: rtw89: wow: update WoWLAN status register for different generation (bsc#1227149).
- wifi: rtw89: wow: update config mac function with different generation (bsc#1227149).
- wifi: ti: wlcore: sdio: Drop unused include (bsc#1227149).
- wifi: virt_wifi: avoid reporting connection success with wrong SSID (git-fixes).
- wifi: virt_wifi: do not use strlen() in const context (git-fixes).
- wifi: wcn36xx: Annotate struct wcn36xx_hal_ind_msg with __counted_by (bsc#1227149).
- wifi: wcn36xx: Convert to platform remove callback returning void (bsc#1227149).
- wifi: wcn36xx: remove unnecessary (void*) conversions (bsc#1227149).
- wifi: wext: avoid extra calls to strlen() in ieee80211_bss() (bsc#1227149).
- wifi: wfx: Use devm_kmemdup to replace devm_kmalloc + memcpy (bsc#1227149).
- wifi: wfx: allow to send frames during ROC (bsc#1227149).
- wifi: wfx: fix power_save setting when AP is stopped (bsc#1227149).
- wifi: wfx: implement wfx_remain_on_channel() (bsc#1227149).
- wifi: wfx: introduce hif_scan_uniq() (bsc#1227149).
- wifi: wfx: move wfx_skb_*() out of the header file (bsc#1227149).
- wifi: wfx: relocate wfx_rate_mask_to_hw() (bsc#1227149).
- wifi: wfx: scan_lock is global to the device (bsc#1227149).
- wifi: wfx: simplify exclusion between scan and Rx filters (bsc#1227149).
- wifi: wil6210: fw: Replace zero-length arrays with DECLARE_FLEX_ARRAY() helper (bsc#1227149).
- wifi: wil6210: wmi: Replace zero-length array with DECLARE_FLEX_ARRAY() helper (bsc#1227149).
- wifi: wilc1000: Increase ASSOC response buffer (bsc#1227149).
- wifi: wilc1000: Remove unused declarations (bsc#1227149).
- wifi: wilc1000: add SPI commands retry mechanism (bsc#1227149).
- wifi: wilc1000: add back-off algorithm to balance tx queue packets (bsc#1227149).
- wifi: wilc1000: add missing read critical sections around vif list traversal (bsc#1227149).
- wifi: wilc1000: always release SDIO host in wilc_sdio_cmd53() (bsc#1227149).
- wifi: wilc1000: cleanup struct wilc_conn_info (bsc#1227149).
- wifi: wilc1000: correct CRC7 calculation (bsc#1227149).
- wifi: wilc1000: fix declarations ordering (bsc#1227149).
- wifi: wilc1000: fix driver_handler when committing initial configuration (bsc#1227149).
- wifi: wilc1000: fix ies_len type in connect path (git-fixes).
- wifi: wilc1000: fix incorrect power down sequence (bsc#1227149).
- wifi: wilc1000: remove AKM suite be32 conversion for external auth request (bsc#1227149).
- wifi: wilc1000: remove setting msg.spi (bsc#1227149).
- wifi: wilc1000: remove use of has_thrpt_enh3 flag (bsc#1227149).
- wifi: wilc1000: set preamble size to auto as default in wilc_init_fw_config() (bsc#1227149).
- wifi: wilc1000: simplify remain on channel support (bsc#1227149).
- wifi: wilc1000: simplify wilc_scan() (bsc#1227149).
- wifi: wilc1000: split deeply nested RCU list traversal in dedicated helper (bsc#1227149).
- wifi: wilc1000: use SRCU instead of RCU for vif list traversal (bsc#1227149).
- wifi: wilc1000: validate chip id during bus probe (bsc#1227149).
- wifi: wl1251: replace deprecated strncpy with strscpy (bsc#1227149).
- wifi: wl18xx: replace deprecated strncpy with strscpy (bsc#1227149).
- wifi: wlcore: boot: replace deprecated strncpy with strscpy (bsc#1227149).
- wifi: wlcore: main: replace deprecated strncpy with strscpy (bsc#1227149).
- wifi: wlcore: sdio: Rate limit wl12xx_sdio_raw_{read,write}() failures warns (bsc#1227149).
- wifi: wlcore: sdio: Use module_sdio_driver macro to simplify the code (bsc#1227149).
- wifi: zd1211rw: fix typo "tranmits" (bsc#1227149).
- wifi: zd1211rw: remove __nocast from zd_addr_t (bsc#1227149).
- wifi: zd1211rw: silence sparse warnings (bsc#1227149).
- wlcore: spi: Remove redundant of_match_ptr() (bsc#1227149).
- work around gcc bugs with 'asm goto' with outputs (git-fixes).
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range (git-fixes).
- x86/Kconfig: Remove CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT (git-fixes).
- x86/amd_nb: Check for invalid SMN reads (git-fixes).
- x86/apic: Force native_apic_mem_read() to use the MOV instruction (git-fixes).
- x86/asm: Fix build of UML with KASAN (git-fixes).
- x86/asm: Remove the __iomem annotation of movdir64b()'s dst argument (git-fixes).
- x86/bhi: Avoid warning in #DB handler due to BHI mitigation :(git-fixes).
- x86/boot: Ignore NMIs during very early boot (git-fixes).
- x86/bugs: Fix the SRSO mitigation on Zen3/4 (git-fixes).
- x86/bugs: Remove default case for fully switched enums (git-fixes).
- x86/calldepth: Rename __x86_return_skl() to call_depth_return_thunk() (git-fixes).
- x86/coco: Require seeding RNG with RDRAND on CoCo systems (git-fixes).
- x86/cpu: Add model number for Intel Arrow Lake mobile processor (git-fixes).
- x86/cpu: Provide default cache line size if not enumerated (git-fixes).
- x86/csum: Fix clang -Wuninitialized in csum_partial() (git-fixes).
- x86/csum: Improve performance of `csum_partial` (git-fixes).
- x86/csum: Remove unnecessary odd handling (git-fixes).
- x86/csum: clean up `csum_partial' further (git-fixes).
- x86/efistub: Add missing boot_params for mixed mode compat entry (git-fixes).
- x86/efistub: Call mixed mode boot services on the firmware's stack (git-fixes).
- x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup (git-fixes).
- x86/head/64: Move the __head definition to &amp;lt;asm/init.h&gt; (git-fixes).
- x86/insn: Add VEX versions of VPDPBUSD, VPDPBUSDS, VPDPWSSD and VPDPWSSDS (git-fixes).
- x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map (git-fixes).
- x86/kconfig: Add as-instr64 macro to properly evaluate AS_WRUSS (git-fixes).
- x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y (git-fixes).
- x86/kexec: Fix bug with call depth tracking (git-fixes).
- x86/kvm/Kconfig: Have KVM_AMD_SEV select ARCH_HAS_CC_PLATFORM (git-fixes).
- x86/mce: Dynamically size space for machine check records (bsc#1222241).
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (git-fixes).
- x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel (git-fixes).
- x86/nmi: Drop unused declaration of proc_nmi_enabled() (git-fixes).
- x86/nmi: Fix the inverse "in NMI handler" check (git-fixes).
- x86/nospec: Refactor UNTRAIN_RET[_*] (git-fixes).
- x86/pm: Work around false positive kmemleak report in msr_build_context() (git-fixes).
- x86/purgatory: Switch to the position-independent small code model (git-fixes).
- x86/resctrl: Read supported bandwidth sources from CPUID (git-fixes).
- x86/resctrl: Remove redundant variable in mbm_config_write_domain() (git-fixes).
- x86/rethunk: Use SYM_CODE_START[_LOCAL]_NOALIGN macros (git-fixes).
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk (git-fixes).
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO (git-fixes).
- x86/sev: Fix position dependent variable references in startup code (git-fixes).
- x86/shstk: Make return uprobe work with shadow stack (git-fixes).
- x86/speculation, objtool: Use absolute relocations for annotations (git-fixes).
- x86/srso: Disentangle rethunk-dependent options (git-fixes).
- x86/srso: Fix unret validation dependencies (git-fixes).
- x86/srso: Improve i-cache locality for alias mitigation (git-fixes).
- x86/srso: Print actual mitigation if requested mitigation isn't possible (git-fixes).
- x86/srso: Remove 'pred_cmd' label (git-fixes).
- x86/srso: Unexport untraining functions (git-fixes).
- x86/tdx: Preserve shared bit on mprotect() (git-fixes).
- x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (bsc#1222015 bsc#1226962).
- x86/uaccess: Fix missed zeroing of ia32 u64 get_user() range checking (git-fixes).
- x86: Stop using weak symbols for __iowrite32_copy() (bsc#1226502)
- xen/x86: add extra pages to unpopulated-alloc if available (git-fixes).
- xfs: Add cond_resched to block unmap range and reflink remap path (bsc#1228211).
- xfs: add lock protection when remove perag from radix tree (git-fixes).
- xfs: fix perag leak when growfs fails (git-fixes).
- xfs: force all buffers to be written during btree bulk load (git-fixes).
- xfs: make xchk_iget safer in the presence of corrupt inode btrees (git-fixes).
- xfs: pass the xfs_defer_pending object to iop_recover (git-fixes).
- xfs: recompute growfsrtfree transaction reservation while growing rt volume (git-fixes).
- xfs: transfer recovered intent item ownership in -&gt;iop_recover (git-fixes).
- xfs: use roundup_pow_of_two instead of ffs during xlog_find_tail (git-fixes).
- xfs: use xfs_defer_pending objects to recover intent items (git-fixes).
- xhci: Apply broken streams quirk to Etron EJ188 xHCI host (stable-fixes).
- xhci: Apply reset resume quirk to Etron EJ188 xHCI host (stable-fixes).
- xhci: Handle TD clearing for multiple streams case (git-fixes).
- xhci: Set correct transferred length for cancelled bulk transfers (stable-fixes).
- xhci: always resume roothubs if xHC was reset during resume (stable-fixes).
- xsk: Add truesize to skb_add_rx_frag() (bsc#1214683 (PREEMPT_RT prerequisite backports)).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="6.4.0" release="9.1" arch="nosrc" src="nosrc/kernel-rt-6.4.0-9.1.nosrc.rpm">
          <filename>kernel-rt-6.4.0-9.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="6.4.0" release="9.1" arch="x86_64" src="x86_64/kernel-rt-6.4.0-9.1.x86_64.rpm">
          <filename>kernel-rt-6.4.0-9.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt-debuginfo" epoch="0" version="6.4.0" release="9.1" arch="x86_64" src="x86_64/kernel-rt-debuginfo-6.4.0-9.1.x86_64.rpm">
          <filename>kernel-rt-debuginfo-6.4.0-9.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt-debugsource" epoch="0" version="6.4.0" release="9.1" arch="x86_64" src="x86_64/kernel-rt-debugsource-6.4.0-9.1.x86_64.rpm">
          <filename>kernel-rt-debugsource-6.4.0-9.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>30</id>
    <title>Security update for curl</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1728989907" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221665" id="1221665" title="VUL-0: CVE-2024-2004: curl: Usage of disabled protocol" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221666" id="1221666" title="VUL-0: CVE-2024-2379: curl: QUIC certificate check bypass with wolfSSL" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221667" id="1221667" title="VUL-0: CVE-2024-2398: curl: HTTP/2 push headers memory-leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221668" id="1221668" title="VUL-0: CVE-2024-2466: curl: TLS certificate check bypass with mbedTLS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227888" id="1227888" title="VUL-0: CVE-2024-6197: curl: freeing stack buffer in utf8asn1str" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228535" id="1228535" title="VUL-0: CVE-2024-7264: curl: ASN.1 date parser overread" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2004" id="CVE-2024-2004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2004" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2379" id="CVE-2024-2379" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2379" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2398" id="CVE-2024-2398" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2398" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2466" id="CVE-2024-2466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2466" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6197" id="CVE-2024-6197" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6197" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264" id="CVE-2024-7264" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264" type="cve" />
    </references>
    <description>This update for curl fixes the following issues:

Security issues fixed:

- CVE-2024-7264: ASN.1 date parser overread (bsc#1228535)
- CVE-2024-6197: Freeing stack buffer in utf8asn1str (bsc#1227888)
- CVE-2024-2379: QUIC certificate check bypass with wolfSSL (bsc#1221666)
- CVE-2024-2466: TLS certificate check bypass with mbedTLS (bsc#1221668)
- CVE-2024-2004: Usage of disabled protocol (bsc#1221665)
- CVE-2024-2398: HTTP/2 push headers memory-leak (bsc#1221667)

Non-security issue fixed:

- Fixed various TLS related issues including FTP over SSL transmission timeouts.
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.6.0" release="3.1" arch="src" src="src/curl-8.6.0-3.1.src.rpm">
          <filename>curl-8.6.0-3.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.6.0" release="3.1" arch="x86_64" src="x86_64/curl-8.6.0-3.1.x86_64.rpm">
          <filename>curl-8.6.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debuginfo" epoch="0" version="8.6.0" release="3.1" arch="x86_64" src="x86_64/curl-debuginfo-8.6.0-3.1.x86_64.rpm">
          <filename>curl-debuginfo-8.6.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debugsource" epoch="0" version="8.6.0" release="3.1" arch="x86_64" src="x86_64/curl-debugsource-8.6.0-3.1.x86_64.rpm">
          <filename>curl-debugsource-8.6.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.6.0" release="3.1" arch="x86_64" src="x86_64/libcurl4-8.6.0-3.1.x86_64.rpm">
          <filename>libcurl4-8.6.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4-debuginfo" epoch="0" version="8.6.0" release="3.1" arch="x86_64" src="x86_64/libcurl4-debuginfo-8.6.0-3.1.x86_64.rpm">
          <filename>libcurl4-debuginfo-8.6.0-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>59</id>
    <title>Security update for mozilla-nss</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1729001218" />
    <references>
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=215997" id="215997" title="https://bugzilla.mozilla.org/show_bug.cgi?id=215997" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=671060" id="671060" title="https://bugzilla.mozilla.org/show_bug.cgi?id=671060" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=676100" id="676100" title="https://bugzilla.mozilla.org/show_bug.cgi?id=676100" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=676118" id="676118" title="https://bugzilla.mozilla.org/show_bug.cgi?id=676118" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=864039" id="864039" title="https://bugzilla.mozilla.org/show_bug.cgi?id=864039" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1325335" id="1325335" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1325335" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1548723" id="1548723" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1548723" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1573097" id="1573097" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1573097" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1615555" id="1615555" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1615555" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1748105" id="1748105" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1748105" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1753026" id="1753026" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1753026" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1757758" id="1757758" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1757758" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1774659" id="1774659" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1774659" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1775046" id="1775046" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1775046" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1780432" id="1780432" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1780432" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1784253" id="1784253" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1784253" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1793811" id="1793811" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1793811" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1813401" id="1813401" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1813401" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1818766" id="1818766" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1818766" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1822450" id="1822450" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1822450" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1822935" id="1822935" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1822935" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1822936" id="1822936" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1822936" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1826451" id="1826451" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1826451" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1826652" id="1826652" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1826652" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1827224" id="1827224" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1827224" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1827303" id="1827303" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1827303" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1827444" id="1827444" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1827444" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1829112" id="1829112" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1829112" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1830415" id="1830415" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1830415" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1830978" id="1830978" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1830978" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1831552" id="1831552" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1831552" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1833270" id="1833270" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1833270" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1834851" id="1834851" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1834851" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1835357" id="1835357" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1835357" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1835425" id="1835425" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1835425" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1835828" id="1835828" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1835828" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1836781" id="1836781" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1836781" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1836925" id="1836925" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1836925" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1837431" id="1837431" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1837431" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1837617" id="1837617" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1837617" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1837987" id="1837987" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1837987" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1839327" id="1839327" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1839327" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1839795" id="1839795" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1839795" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1839992" id="1839992" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1839992" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1840429" id="1840429" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1840429" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1840437" id="1840437" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1840437" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1840505" id="1840505" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1840505" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1840510" id="1840510" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1840510" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1841029" id="1841029" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1841029" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1842928" id="1842928" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1842928" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1842932" id="1842932" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1842932" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1842935" id="1842935" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1842935" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1842937" id="1842937" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1842937" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1847845" id="1847845" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1847845" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1848183" id="1848183" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1848183" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1849077" id="1849077" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1849077" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1849471" id="1849471" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1849471" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1850598" id="1850598" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1850598" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1850982" id="1850982" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1850982" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1851044" id="1851044" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1851044" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1851049" id="1851049" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1851049" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1852011" id="1852011" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1852011" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1852179" id="1852179" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1852179" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1853737" id="1853737" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1853737" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1854438" id="1854438" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1854438" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1854439" id="1854439" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1854439" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1854795" id="1854795" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1854795" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1855318" id="1855318" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1855318" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1858241" id="1858241" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1858241" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1860670" id="1860670" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1860670" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1861265" id="1861265" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1861265" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1861728" id="1861728" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1861728" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1863605" id="1863605" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1863605" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1865450" id="1865450" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1865450" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1867408" id="1867408" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1867408" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1869378" id="1869378" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1869378" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1869408" id="1869408" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1869408" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1869642" id="1869642" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1869642" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1870673" id="1870673" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1870673" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1871152" id="1871152" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1871152" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1871219" id="1871219" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1871219" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1871630" id="1871630" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1871630" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1871631" id="1871631" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1871631" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1873095" id="1873095" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1873095" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1873296" id="1873296" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1873296" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1874017" id="1874017" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1874017" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1874111" id="1874111" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1874111" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1874458" id="1874458" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1874458" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1874937" id="1874937" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1874937" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1875356" id="1875356" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1875356" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1875506" id="1875506" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1875506" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1875965" id="1875965" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1875965" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1876179" id="1876179" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1876179" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1876390" id="1876390" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1876390" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1876800" id="1876800" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1876800" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1877344" id="1877344" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1877344" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1877730" id="1877730" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1877730" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1879513" id="1879513" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1879513" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1879945" id="1879945" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1879945" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1880857" id="1880857" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1880857" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1881027" id="1881027" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1881027" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1884276" id="1884276" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1884276" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1884444" id="1884444" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1884444" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1885404" id="1885404" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1885404" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1887996" id="1887996" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1887996" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1889671" id="1889671" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1889671" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1890069" id="1890069" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1890069" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1893029" id="1893029" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1893029" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1893162" id="1893162" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1893162" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1893334" id="1893334" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1893334" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1893404" id="1893404" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1893404" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1893752" id="1893752" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1893752" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1894572" id="1894572" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1894572" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1895012" id="1895012" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1895012" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1895032" id="1895032" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1895032" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1896353" id="1896353" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1896353" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1897487" id="1897487" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1897487" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1898074" id="1898074" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1898074" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1898627" id="1898627" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1898627" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1898825" id="1898825" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1898825" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1898830" id="1898830" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1898830" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1898858" id="1898858" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1898858" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1899593" id="1899593" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1899593" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1899759" id="1899759" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1899759" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1899883" id="1899883" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1899883" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1900413" id="1900413" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1900413" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1901080" id="1901080" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1901080" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1901932" id="1901932" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1901932" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1905691" id="1905691" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1905691" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214980" id="1214980" title="mozilla-nss: FTBFS because expired certificate since 2023-09-04" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216198" id="1216198" title="VUL-0: CVE-2023-5388: mozilla-nss: timing attack against RSA decryption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222804" id="1222804" title="[FIPS 140-3][NSS] Disable DSA" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222807" id="1222807" title="[FIPS 140-3][NSS] Remove unsafe prime group" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222811" id="1222811" title="[FIPS 140-3][NSS] RNG checks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222813" id="1222813" title="[FIPS 140-3][NSS] TLS 1.2 KDF" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222814" id="1222814" title="[FIPS 140-3][NSS] using only  allowed primitived IKE KDF/HMAC combinations" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222821" id="1222821" title="[FIPS 140-3][NSS] Only use approved hash functions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222822" id="1222822" title="[FIPS 140-3][NSS] Use long enough key material" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222826" id="1222826" title="[FIPS 140-3][NSS] KDF compliance" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222828" id="1222828" title="[FIPS 140-3][NSS] Powerup selftest not in compliance" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222830" id="1222830" title="[FIPS 140-3][NSS] GCM Usage not in compliance" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222833" id="1222833" title="[FIPS 140-3][NSS] block non approved KDFs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222834" id="1222834" title="[FIPS 140-3][NSS] RSA 1024 considerations" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223724" id="1223724" title="[SECURITY][FIPS] Firefox won't start on 15-SP4 and 15-SP5 if master password is set" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224113" id="1224113" title="[FIPS 140-3] [NSS] Consider adding the CKM_ECDH1_COFACTOR_DERIVE to the approved mechanisms list." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224115" id="1224115" title="[FIPS 140-3] [NSS] Consider adding CKM_NSS_AES_KEY_WRAP and CKM_NSS_AES_KEY_WRAP_PAD" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224116" id="1224116" title="[FIPS 140-3] [NSS] NSC_GenerateKey Mechanism" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224118" id="1224118" title="[FIPS 140-3] [NSS] Block ECDH+ANS X9.63" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227918" id="1227918" title="[security][fips] openjdk crash in FIPS mode" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5388" id="CVE-2023-5388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5388" type="cve" />
      <reference href="https://jira.suse.com/browse/PED-6358" id="PED-6358" title="https://jira.suse.com/browse/PED-6358" type="jira" />
    </references>
    <description>This update for mozilla-nss fixes the following issues:

- update to NSS 3.101.2
  - ChaChaXor to return after the function

- update to NSS 3.101.1 
  - missing sqlite header.
  - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.

- update to NSS 3.101
  - add diagnostic assertions for SFTKObject refcount.
  - freeing the slot in DeleteCertAndKey if authentication failed
  - fix formatting issues.
  - Add Firmaprofesional CA Root-A Web to NSS.
  - remove invalid acvp fuzz test vectors.
  - pad short P-384 and P-521 signatures gtests.
  - remove unused FreeBL ECC code.
  - pad short P-384 and P-521 signatures.
  - be less strict about ECDSA private key length.
  - Integrate HACL* P-521.
  - Integrate HACL* P-384.
  - memory leak in create_objects_from_handles.
  - ensure all input is consumed in a few places in mozilla::pkix
  - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  - clean up escape handling
  - Use lib::pkix as default validator instead of the old-one
  - Need to add high level support for PQ signing.
  - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  - Allow for non-full length ecdsa signature when using softoken
  - Modification of .taskcluster.yml due to mozlint indent defects
  - Implement support for PBMAC1 in PKCS#12
  - disable VLA warnings for fuzz builds.
  - remove redundant AllocItem implementation.
  - add PK11_ReadDistrustAfterAttribute.
  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  - Switch to the mozillareleases/image_builder image

- update to NSS 3.100
 - merge pk11_kyberSlotList into pk11_ecSlotList for faster Xyber operations.
 - remove ckcapi.
 - avoid a potential PK11GenericObject memory leak.
 - Remove incomplete ESDH code.
 - Decrypt RSA OAEP encrypted messages.
 - Fix certutil CRLDP URI code.
 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
 - Add ability to encrypt and decrypt CMS messages using ECDH.
 - Correct Templates for key agreement in smime/cmsasn.c.
 - Moving the decodedCert allocation to NSS.
 - Allow developers to speed up repeated local execution of NSS tests that depend on certificates.

- update to NSS 3.99
  - Removing check for message len in ed25519
  - add ed25519 to SECU_ecName2params.
  - add EdDSA wycheproof tests.
  - nss/lib layer code for EDDSA.
  - Adding EdDSA implementation.
  - Exporting Certificate Compression types
  - Updating ACVP docker to rust 1.74
  - Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552
  - Add NSS_CMSRecipient_IsSupported.

- update to NSS 3.98
  - CVE-2023-5388: Timing attack against RSA decryption in TLS
  - Certificate Compression: enabling the check that the compression was advertised
  - Move Windows workers to nss-1/b-win2022-alpha
  - Remove Email trust bit from OISTE WISeKey Global Root GC CA
  - Replace `distutils.spawn.find_executable` with `shutil.which` within `mach` in `nss`
  - Certificate Compression: Updating nss_bogo_shim to support Certificate compression
  - TLS Certificate Compression (RFC 8879) Implementation
  - Add valgrind annotations to freebl kyber operations for constant-time execution tests
  - Set nssckbi version number to 2.66
  - Add Telekom Security roots
  - Add D-Trust 2022 S/MIME roots
  - Remove expired Security Communication RootCA1 root
  - move keys to a slot that supports concatenation in PK11_ConcatSymKeys
  - remove unmaintained tls-interop tests
  - bogo: add support for the -ipv6 and -shim-id shim flags
  - bogo: add support for the -curves shim flag and update Kyber expectations
  - bogo: adjust expectation for a key usage bit test
  - mozpkix: add option to ignore invalid subject alternative names
  - Fix selfserv not stripping `publicname:` from -X value
  - take ownership of ecckilla shims
  - add valgrind annotations to freebl/ec.c
  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  - Update zlib to 1.3.1

- update to NSS 3.97
  - make Xyber768d00 opt-in by policy
  - add libssl support for xyber768d00
  - add PK11_ConcatSymKeys
  - add Kyber and a PKCS#11 KEM interface to softoken
  - add a FreeBL API for Kyber
  - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  - part 1: add a script for vendoring kyber from pq-crystals repo
  - Removing the calls to RSA Blind from loader.*
  - fix worker type for level3 mac tasks
  - RSA Blind implementation
  - Remove DSA selftests
  - read KWP testvectors from JSON
  - Backed out changeset dcb174139e4f
  - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  - Wrap CC shell commands in gyp expansions

- update to NSS 3.96.1
  - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  - add a defensive check for large ssl_DefSend return values
  - Add dependency to the taskcluster script for Darwin
  - Upgrade version of the MacOS worker for the CI

- update to NSS 3.95
  - Bump builtins version number.
  - Remove Email trust bit from Autoridad de Certificacion Firmaprofesional CIF A62634068 root cert.
  - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  - Remove 3 TrustCor Root Certificates from NSS.
  - Remove Camerfirma root certificates from NSS.
  - Remove old Autoridad de Certificacion Firmaprofesional Certificate.
  - Add four Commscope root certificates to NSS.
  - Add TrustAsia Global Root CA G3 and G4 root certificates.
  - Include P-384 and P-521 Scalar Validation from HACL*
  - Include P-256 Scalar Validation from HACL*.
  - After the HACL 256 ECC patch, NSS incorrectly encodes 256 ECC without DER wrapping at the softoken level
  - Add means to provide library parameters to C_Initialize
  - clang format
  - add OSXSAVE and XCR0 tests to AVX2 detection.
  - Typo in ssl3_AppendHandshakeNumber
  - Introducing input check of ssl3_AppendHandshakeNumber
  - Fix Invalid casts in instance.c

- update to NSS 3.94
  - Updated code and commit ID for HACL*
  - update ACVP fuzzed test vector: refuzzed with current NSS
  - Softoken C_ calls should use system FIPS setting to select NSC_ or FC_ variants
  - NSS needs a database tool that can dump the low level representation of the database
  - declare string literals using char in pkixnames_tests.cpp
  - avoid implicit conversion for ByteString
  - update rust version for acvp docker
  - Moving the init function of the mpi_ints before clean-up in ec.c
  - P-256 ECDH and ECDSA from HACL*
  - Add ACVP test vectors to the repository
  - Stop relying on std::basic_string&lt;uint8_t&gt;
  - Transpose the PPC_ABI check from Makefile to gyp

- Update to NSS 3.93:
  - Update zlib in NSS to 1.3.
  - softoken: iterate hashUpdate calls for long inputs.
  - regenerate NameConstraints test certificates (bsc#1214980).

- update to NSS 3.92
  - Set nssckbi version number to 2.62
  - Add 4 Atos TrustedRoot Root CA certificates to NSS
  - Add 4 SSL.com Root CA certificates
  - Add Sectigo E46 and R46 Root CA certificates
  - Add LAWtrust Root CA2 (4096)
  - Remove E-Tugra Certification Authority root
  - Remove Camerfirma Chambers of Commerce Root.
  - Remove Hongkong Post Root CA 1
  - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  - Avoid redefining BYTE_ORDER on hppa Linux

- update to NSS 3.91
  - Implementation of the HW support check for ADX instruction
  - Removing the support of Curve25519
  - Fix comment about the addition of ticketSupportsEarlyData
  - Adding args to enable-legacy-db build
  - dbtests.sh failure in "certutil dump keys with explicit default trust flags"
  - Initialize flags in slot structures
  - Improve the length check of RSA input to avoid heap overflow
  - Followup Fixes
  - avoid processing unexpected inputs by checking for m_exptmod base sign
  - add a limit check on order_k to avoid infinite loop
  - Update HACL* to commit 5f6051d2
  - add SHA3 to cryptohi and softoken
  - HACL SHA3
  - Disabling ASM C25519 for A but X86_64

- update to NSS 3.90.3
  - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  - clean up escape handling.
  - remove redundant AllocItem implementation.
  - Disable ASM support for Curve25519.
  - Disable ASM support for Curve25519 for all but X86_64. 
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.101.2" release="1.1" arch="x86_64" src="x86_64/libfreebl3-3.101.2-1.1.x86_64.rpm">
          <filename>libfreebl3-3.101.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3-debuginfo" epoch="0" version="3.101.2" release="1.1" arch="x86_64" src="x86_64/libfreebl3-debuginfo-3.101.2-1.1.x86_64.rpm">
          <filename>libfreebl3-debuginfo-3.101.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.101.2" release="1.1" arch="x86_64" src="x86_64/libsoftokn3-3.101.2-1.1.x86_64.rpm">
          <filename>libsoftokn3-3.101.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3-debuginfo" epoch="0" version="3.101.2" release="1.1" arch="x86_64" src="x86_64/libsoftokn3-debuginfo-3.101.2-1.1.x86_64.rpm">
          <filename>libsoftokn3-debuginfo-3.101.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.101.2" release="1.1" arch="src" src="src/mozilla-nss-3.101.2-1.1.src.rpm">
          <filename>mozilla-nss-3.101.2-1.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.101.2" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-3.101.2-1.1.x86_64.rpm">
          <filename>mozilla-nss-3.101.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.101.2" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.101.2-1.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.101.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs-debuginfo" epoch="0" version="3.101.2" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-certs-debuginfo-3.101.2-1.1.x86_64.rpm">
          <filename>mozilla-nss-certs-debuginfo-3.101.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-debuginfo" epoch="0" version="3.101.2" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-debuginfo-3.101.2-1.1.x86_64.rpm">
          <filename>mozilla-nss-debuginfo-3.101.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-debugsource" epoch="0" version="3.101.2" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-debugsource-3.101.2-1.1.x86_64.rpm">
          <filename>mozilla-nss-debugsource-3.101.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.101.2" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.101.2-1.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.101.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools-debuginfo" epoch="0" version="3.101.2" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-tools-debuginfo-3.101.2-1.1.x86_64.rpm">
          <filename>mozilla-nss-tools-debuginfo-3.101.2-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>27</id>
    <title>Security update for glib2</title>
    <severity>low</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1725365781" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224044" id="1224044" title="VUL-0: CVE-2024-34397: glib2: signal subscriptions are vulnerable to unicast spoofing" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34397" id="CVE-2024-34397" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34397" type="cve" />
    </references>
    <description>This update for glib2 fixes the following issues:

- Fixed a possible use after free regression introduced by CVE-2024-34397 patch (bsc#1224044).
</description>
    <pkglist>
      <collection>
        <package name="glib2" epoch="0" version="2.76.2" release="5.1" arch="src" src="src/glib2-2.76.2-5.1.src.rpm">
          <filename>glib2-2.76.2-5.1.src.rpm</filename>
        </package>
        <package name="glib2-debugsource" epoch="0" version="2.76.2" release="5.1" arch="x86_64" src="x86_64/glib2-debugsource-2.76.2-5.1.x86_64.rpm">
          <filename>glib2-debugsource-2.76.2-5.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.76.2" release="5.1" arch="x86_64" src="x86_64/glib2-tools-2.76.2-5.1.x86_64.rpm">
          <filename>glib2-tools-2.76.2-5.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools-debuginfo" epoch="0" version="2.76.2" release="5.1" arch="x86_64" src="x86_64/glib2-tools-debuginfo-2.76.2-5.1.x86_64.rpm">
          <filename>glib2-tools-debuginfo-2.76.2-5.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.76.2" release="5.1" arch="x86_64" src="x86_64/libgio-2_0-0-2.76.2-5.1.x86_64.rpm">
          <filename>libgio-2_0-0-2.76.2-5.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0-debuginfo" epoch="0" version="2.76.2" release="5.1" arch="x86_64" src="x86_64/libgio-2_0-0-debuginfo-2.76.2-5.1.x86_64.rpm">
          <filename>libgio-2_0-0-debuginfo-2.76.2-5.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.76.2" release="5.1" arch="x86_64" src="x86_64/libglib-2_0-0-2.76.2-5.1.x86_64.rpm">
          <filename>libglib-2_0-0-2.76.2-5.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0-debuginfo" epoch="0" version="2.76.2" release="5.1" arch="x86_64" src="x86_64/libglib-2_0-0-debuginfo-2.76.2-5.1.x86_64.rpm">
          <filename>libglib-2_0-0-debuginfo-2.76.2-5.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.76.2" release="5.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-2.76.2-5.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-2.76.2-5.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0-debuginfo" epoch="0" version="2.76.2" release="5.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-debuginfo-2.76.2-5.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-debuginfo-2.76.2-5.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.76.2" release="5.1" arch="x86_64" src="x86_64/libgobject-2_0-0-2.76.2-5.1.x86_64.rpm">
          <filename>libgobject-2_0-0-2.76.2-5.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0-debuginfo" epoch="0" version="2.76.2" release="5.1" arch="x86_64" src="x86_64/libgobject-2_0-0-debuginfo-2.76.2-5.1.x86_64.rpm">
          <filename>libgobject-2_0-0-debuginfo-2.76.2-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>35</id>
    <title>Security update for avahi</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1725543499" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216594" id="1216594" title="VUL-0: CVE-2023-38471: avahi: Reachable assertion in dbus_set_host_name" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216598" id="1216598" title="VUL-0: CVE-2023-38469: avahi: CVEs assigned for reachable assertions in avahi" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226586" id="1226586" title="avahi-browse -a fails with &quot;Invalid service type&quot;" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38469" id="CVE-2023-38469" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38469" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38471" id="CVE-2023-38471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-38471" type="cve" />
    </references>
    <description>This update for avahi fixes the following issues:

Security issues fixed:

- CVE-2023-38471: Extract host name using avahi_unescape_label (bsc#1216594).
- CVE-2023-38469: Reject overly long TXT resource records (bsc#1216598).

Non-security issue fixed:

- no longer supply bogus services to callbacks (bsc#1226586).
</description>
    <pkglist>
      <collection>
        <package name="avahi" epoch="0" version="0.8" release="5.1" arch="src" src="src/avahi-0.8-5.1.src.rpm">
          <filename>avahi-0.8-5.1.src.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="5.1" arch="x86_64" src="x86_64/avahi-0.8-5.1.x86_64.rpm">
          <filename>avahi-0.8-5.1.x86_64.rpm</filename>
        </package>
        <package name="avahi-debuginfo" epoch="0" version="0.8" release="5.1" arch="x86_64" src="x86_64/avahi-debuginfo-0.8-5.1.x86_64.rpm">
          <filename>avahi-debuginfo-0.8-5.1.x86_64.rpm</filename>
        </package>
        <package name="avahi-debugsource" epoch="0" version="0.8" release="5.1" arch="x86_64" src="x86_64/avahi-debugsource-0.8-5.1.x86_64.rpm">
          <filename>avahi-debugsource-0.8-5.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="5.1" arch="x86_64" src="x86_64/libavahi-client3-0.8-5.1.x86_64.rpm">
          <filename>libavahi-client3-0.8-5.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3-debuginfo" epoch="0" version="0.8" release="5.1" arch="x86_64" src="x86_64/libavahi-client3-debuginfo-0.8-5.1.x86_64.rpm">
          <filename>libavahi-client3-debuginfo-0.8-5.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="5.1" arch="x86_64" src="x86_64/libavahi-common3-0.8-5.1.x86_64.rpm">
          <filename>libavahi-common3-0.8-5.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3-debuginfo" epoch="0" version="0.8" release="5.1" arch="x86_64" src="x86_64/libavahi-common3-debuginfo-0.8-5.1.x86_64.rpm">
          <filename>libavahi-common3-debuginfo-0.8-5.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="5.1" arch="x86_64" src="x86_64/libavahi-core7-0.8-5.1.x86_64.rpm">
          <filename>libavahi-core7-0.8-5.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7-debuginfo" epoch="0" version="0.8" release="5.1" arch="x86_64" src="x86_64/libavahi-core7-debuginfo-0.8-5.1.x86_64.rpm">
          <filename>libavahi-core7-debuginfo-0.8-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>28</id>
    <title>Security update for python-requests</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1725365492" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224788" id="1224788" title="VUL-0: CVE-2024-35195: python-requests: session object does not verify requests after making first request with verify=False" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35195" id="CVE-2024-35195" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35195" type="cve" />
    </references>
    <description>This update for python-requests fixes the following issues:

- Update to 2.32.2
  * To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, 
    we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing 
    custom HTTPAdapters will need to migrate their code to use this new API. get_connection is 
    considered deprecated in all versions of Requests&gt;=2.32.0.

- Update to 2.32.1
  * Fixed an issue where setting verify=False on the first request from a Session 
    will cause subsequent requests to the same origin to also ignore cert verification, 
    regardless of the value of verify. (bsc#1224788, CVE-2024-35195)
  * verify=True now reuses a global SSLContext which should improve request time 
    variance between first and subsequent requests.
  * Requests now supports optional use of character detection (chardet or charset_normalizer) 
    when repackaged or vendored. This enables pip and other projects to minimize their 
    vendoring surface area.
  * Requests has officially added support for CPython 3.12 and dropped support for CPython 3.7.
  * Starting in Requests 2.33.0, Requests will migrate to a PEP 517 build system using hatchling.
</description>
    <pkglist>
      <collection>
        <package name="python-requests" epoch="0" version="2.32.2" release="1.1" arch="src" src="src/python-requests-2.32.2-1.1.src.rpm">
          <filename>python-requests-2.32.2-1.1.src.rpm</filename>
        </package>
        <package name="python311-requests" epoch="0" version="2.32.2" release="1.1" arch="noarch" src="noarch/python311-requests-2.32.2-1.1.noarch.rpm">
          <filename>python311-requests-2.32.2-1.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>37</id>
    <title>Security update for python-Jinja2</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1725611998" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218722" id="1218722" title="VUL-0: CVE-2024-22195: python-Jinja2: HTML attribute injection when passing user input as keys to xmlattr filter" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223980" id="1223980" title="VUL-0: CVE-2024-34064: python-Jinja2: HTML attribute injection when passing user input as keys to xmlattr filter" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22195" id="CVE-2024-22195" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22195" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34064" id="CVE-2024-34064" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34064" type="cve" />
    </references>
    <description>This update for python-Jinja2 fixes the following issues:

- CVE-2024-34064, CVE-2024-22195: HTML attribute injection when passing user input as keys to xmlattr filter (bsc#1223980, bsc#1218722)
</description>
    <pkglist>
      <collection>
        <package name="python-Jinja2" epoch="0" version="3.1.2" release="6.1" arch="src" src="src/python-Jinja2-3.1.2-6.1.src.rpm">
          <filename>python-Jinja2-3.1.2-6.1.src.rpm</filename>
        </package>
        <package name="python311-Jinja2" epoch="0" version="3.1.2" release="6.1" arch="x86_64" src="x86_64/python311-Jinja2-3.1.2-6.1.x86_64.rpm">
          <filename>python311-Jinja2-3.1.2-6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>60</id>
    <title>Security update for qemu</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1729001229" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221812" id="1221812" title="qemu coredump when virsh migrate postcopy + virsh migrate-postcopy on sle15sp6 kvm host" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227322" id="1227322" title="VUL-0: CVE-2024-4467: qemu: 'qemu-img info' leads to host file read/write" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229007" id="1229007" title="VUL-0: CVE-2024-7409: qemu: denial of service via improper synchronization in QEMU NBD Server during socket closure" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4467" id="CVE-2024-4467" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4467" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7409" id="CVE-2024-7409" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7409" type="cve" />
    </references>
    <description>This update for qemu fixes the following issues:

- Fix bsc#1221812:
  * block: Reschedule query-block during qcow2 invalidation (bsc#1221812)

- Fix bsc#1229007, CVE-2024-7409:
  * nbd/server: CVE-2024-7409: Close stray clients at server-stop (bsc#1229007)
  * nbd/server: CVE-2024-7409: Drop non-negotiating clients (bsc#1229007)
  * nbd/server: CVE-2024-7409: Cap default max-connections to 100 (bsc#1229007)
  * nbd/server: Plumb in new args to nbd_client_add() (bsc#1229007, CVE-2024-7409)
  * nbd: Minor style and typo fixes (bsc#1229007, CVE-2024-7409)

- Update to version 8.2.6:

  Full backport lists (from the various releases) here:
   https://lore.kernel.org/qemu-devel/1721203806.547734.831464.nullmailer@tls.msk.ru/

  Some of the upstream backports are:
   hw/nvme: fix number of PIDs for FDP RUH update
   sphinx/qapidoc: Fix to generate doc for explicit, unboxed arguments
   char-stdio: Restore blocking mode of stdout on exit
   virtio: remove virtio_tswap16s() call in vring_packed_event_read()
   virtio-pci: Fix the failure process in kvm_virtio_pci_vector_use_one()
   block: Parse filenames only when explicitly requested
   iotests/270: Don't store data-file with json: prefix in image
   iotests/244: Don't store data-file with protocol in image
   qcow2: Don't open data_file with BDRV_O_NO_IO (bsc#1227322, CVE-2024-4467)
   target/arm: Fix FJCVTZS vs flush-to-zero
   target/arm: Fix VCMLA Dd, Dn, Dm[idx]
   i386/cpu: fixup number of addressable IDs for processor cores in the physical package
   tests: Update our CI to use CentOS Stream 9 instead of 8
   migration: Fix file migration with fdset
   tcg/loongarch64: Fix tcg_out_movi vs some pcrel pointers
   target/sparc: use signed denominator in sdiv helper
   linux-user: Make TARGET_NR_setgroups affect only the current thread
   accel/tcg: Fix typo causing tb-&gt;page_addr[1] to not be recorded
   stdvga: fix screen blanking
   hw/audio/virtio-snd: Always use little endian audio format
   ui/gtk: Draw guest frame at refresh cycle
   virtio-net: drop too short packets early
   target/i386: fix size of EBP writeback in gen_enter()

</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="8.2.6" release="1.1" arch="src" src="src/qemu-8.2.6-1.1.src.rpm">
          <filename>qemu-8.2.6-1.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-audio-spice-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-audio-spice-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-audio-spice-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-audio-spice-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-block-curl-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-block-curl-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-block-curl-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-block-curl-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-block-iscsi-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-block-iscsi-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-block-iscsi-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-block-iscsi-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-block-rbd-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-block-rbd-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-block-rbd-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-block-rbd-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-block-ssh-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-block-ssh-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-block-ssh-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-block-ssh-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-chardev-spice-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-chardev-spice-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-chardev-spice-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-chardev-spice-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-debugsource" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-debugsource-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-debugsource-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-guest-agent-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-guest-agent-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-guest-agent-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-guest-agent-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-img" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-img-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-img-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-img-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-img-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-img-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="8.2.6" release="1.1" arch="noarch" src="noarch/qemu-ipxe-8.2.6-1.1.noarch.rpm">
          <filename>qemu-ipxe-8.2.6-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-ksm" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-ksm-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-ksm-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-lang" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-lang-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-lang-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-pr-helper" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-pr-helper-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-pr-helper-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-pr-helper-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-pr-helper-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-pr-helper-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="8.2.61.16.3_3_ga95067eb" release="1.1" arch="noarch" src="noarch/qemu-seabios-8.2.61.16.3_3_ga95067eb-1.1.noarch.rpm">
          <filename>qemu-seabios-8.2.61.16.3_3_ga95067eb-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-tools-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-tools-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-tools-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-tools-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-tools-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-ui-opengl-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-ui-opengl-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-ui-opengl-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-ui-opengl-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="8.2.61.16.3_3_ga95067eb" release="1.1" arch="noarch" src="noarch/qemu-vgabios-8.2.61.16.3_3_ga95067eb-1.1.noarch.rpm">
          <filename>qemu-vgabios-8.2.61.16.3_3_ga95067eb-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-x86-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-x86-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-x86-debuginfo" epoch="0" version="8.2.6" release="1.1" arch="x86_64" src="x86_64/qemu-x86-debuginfo-8.2.6-1.1.x86_64.rpm">
          <filename>qemu-x86-debuginfo-8.2.6-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>250</id>
    <title>Security update for tpm2.0-tools, tpm2-0-tss</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1742295491" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223687" id="1223687" title="VUL-0: CVE-2024-29038: tpm2.0-tools: arbitrary quote data may go undetected by tpm2_checkquote" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223689" id="1223689" title="VUL-0: CVE-2024-29039: tpm2.0-tools: pcr selection value is not compared with the attest" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223690" id="1223690" title="VUL-0: CVE-2024-29040: tpm2-0-tss: arbitrary quote data may go undetected by Fapi_VerifyQuote" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29038" id="CVE-2024-29038" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29038" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29039" id="CVE-2024-29039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29039" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29040" id="CVE-2024-29040" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29040" type="cve" />
    </references>
    <description>This update for tpm2.0-tools, tpm2-0-tss fixes the following issues:

tpm2-0-tss:
  Update to version 4.1:
  + Security
    - CVE-2024-29040: arbitrary quote data may go undetected by Fapi_VerifyQuote (bsc#1223690)

  + Fixed
    - fapi: Fix length check on FAPI auth callbacks
    - mu: Correct error message for errors
    - tss2-rc: fix unknown laer handler dropping bits.
    - fapi: Fix deviation from CEL specification (template_value was used instead of template_data).
    - fapi: Fix json syntax error in FAPI profiles which was ignored by json-c.
    - build: fix build fail after make clean.
    - mu: Fix unneeded size check in TPM2B unmarshaling.
    - fapi: Fix missing parameter encryption.
    - build: Fix failed build with --disable-vendor.
    - fapi: Fix flush of persistent handles.
    - fapi: Fix test provisioning with template with self generated certificate disabled.
    - fapi: Fix error in Fapi_GetInfo it TPM supports SHA3 hash algs.
    - fapi: Revert pcr extension for EV_NO_ACTION events.
    - fapi: Fix strange error messages if nv, ext, or policy path does not exits.
    - fapi: Fix segfault caused by wrong allocation of pcr policy.
    - esys: Fix leak in Esys_EvictControl for persistent handles.
    - tss2-tcti: tcti-libtpms: fix test failure on big-endian platform.
    - esys: Add reference counting for Esys_TR_FromTPMPublic.
    - esys: Fix HMAC error if session bind key has an auth value with a trailing 0.
    - fapi: fix usage of self signed certificates in TPM.
    - fapi: Usage of self signed certificates.
    - fapi: A segfault after the error handling of non existing keys.
    - fapi: Fix several leaks.
    - fapi: Fix error handling for policy execution.
    - fapi: Fix usage of persistent handles (should not be flushed)
    - fapi: Fix test provisioning with template (skip test without self generated certificate).
    - fapi: Fix pcr extension for EV_NO_ACTION
    - test: Fix fapi-key-create-policy-signed-keyedhash with P_ECC384 profile
    - tcti_spi_helper_transmit: ensure FIFO is accessed only after TPM reports commandReady bit is set
    - fapi: Fix read large system eventlog (&gt; UINT16_MAX).
    - esys tests: Fix layer check for TPM2_RC_COMMAND_CODE (for /dev/tpmrm0)
    - test: unit: tcti-libtpms: fix test failed at 32-bit platforms.
    - fapi: Fix possible null pointer dereferencing in Fapi_List.
    - sys: Fix size check in Tss2_Sys_GetCapability.
    - esys: Fix leak in Esys_TR_FromTPMPublic.
    - esys: fix unchecked return value in esys crypto.
    - fapi: Fix wrong usage of local variable in provisioning.
    - fapi: Fix memset 0 in ifapi_json_TPMS_POLICYNV_deserialize.
    - fapi: Fix possible out of bound array access in IMA parser.
    - tcti device: Fix possible unmarshalling from uninitialized variable.
    - fapi: Fix error checking authorization of signing key.
    - fapi: Fix cleanup of policy sessions.
    - fapi: Eventlog H-CRTM events and different localities.
    - fapi: Fix missing synchronization of quote and eventlog.
    - faii: Fix invalid free in Fapi_Quote with empty eventlog.

  + Added
    - tcti: LetsTrust-TPM2Go TCTI module spi-ltt2go.
    - mbedtls: add sha512 hmac.
    - fapi: Enable usage of external keys for Fapi_Encrypt.
    - fapi: Support download of AMD certificates.
    - tcti: Add USB TPM (FTDI MPSSE USB to SPI bridge) TCTI module.
    - fapi: The recreation of primaries (except EK) in the owner hierarchy instead the endorsement hierarchy is fixed.
    - rc: New TPM return codes added.
    - fapi: Further Nuvoton certificates added.
    - tpm_types/esys: Add support for Attestable TPM changes in latest TPM spec.
    - tcti: Add '/dev/tcm0' to default conf
    - fapi: New Nuvoton certificates added.
    - esys: Fix leak in Esys_TR_FromTPMPublic.

  + Removed
    - Testing on Ubuntu 18.04 as it's near EOL (May 2023).


tpm2.0-tools:
  Update to version 5.7:
  + Security
    - CVE-2024-29038: arbitrary quote data may go undetected by tpm2_checkquote (bsc#1223687)
    - CVE-2024-29039: pcr selection value is not compared with the attest (bsc#1223689)
  + Fixed
    - Fix eventlog test
    - Fix issues with reading NV indexes
    - Fix context save error on tpm2_create
    - tpm2_sessionconfig: fix handling of --disable-continue session so that the subsequent command will not fail
    - when attempting to context save a flushed session.
    - detection of functions within libcrypto when CRYPTO_LIBS is set and system has install libcrypto.
    - tpm2_send: fix EOF detection on input stream.
    - tpm2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems.
    - tpm2_nvread: fix input handling no nv index.
    - Auth file: Ensure 0-termination when reading auths from a file.
    - configure.ac: fix bashisms. configure scripts need to be runnable with a POSIX-compliant /bin/sh.
    - cirrus.yml fix tss compilation with libtpms for FreeBSD.
    - tpm2_tool.c Fix missing include for basename to enable compilation on netbsd.
    - options: fix TCTI handling to avoid failures for commands that should work with no options.
    - tpm2_getekcertificate.c Fix leak. ek_uri was not freed if get_ek_server_address failed.
  + Added
    - Add the possibility for autoflush (environment variable "TPM2TOOLS_AUTOFLUSH", or -R option)
  + Removed
    - Testing on Ubuntu 18.04 as it's near EOL (May 2023).m2_policy.c fix compilation error caused by format directive for size_t on 32 bit systems.
    - tpm2_nvread: fix input handling no nv index.

  - Update to version 5.6
    + tpm2_eventlog:
      * add H-CRTM event support
      * add support of efivar versions less than 38
      * Add support to check for efivar/efivar.h manually
      * Minor formatting fixes
      * tpm2_eventlog: add support for replay with different StartupLocality
      * Fix pcr extension for EV_NO_ACTION
      * Extend test of yaml string representation
      * Use helper for printing a string dump
      * Fix upper bound on unique data size
      * Fix YAML string formatting
    + tpm2_policy:
      * Add support for parsing forward seal TPM values
      * Use forward seal values in creating policies
      * Move dgst_size in evaluate_populate_pcr_digests()
      * Allow more than 8 PCRs for sealing
      * Move dgst_size in evaluate_populate_pcr_digests
      * Allow more than 8 PCRs for sealing
      * Make __wrap_Esys_PCR_Read() more dynamic to enable testing more PCRs
    + tpm2_encryptdecrypt: Fix pkcs7 padding stripping
    + tpm2_duplicate:
      * Support -a option for attributes
      * Add --key-algorithm option
    + tpm2_encodeobject: Use the correct -O option instead of -C
    + tpm2_unseal: Add qualifier static to enhance the privacy of unseal
      function
    + tpm2_sign:
      * Remove -m option which was added mistakenly
      * Revert sm2 sign and verifysignature
    + tpm2_createek:
      * Correct man page example
      * Fix usage of nonce
      * Fix integrating nonce
    + tpm2_clear: add more details about the action
    + tpm2_startauthsession: allow the file attribute for policy
      authorization.
    + tpm2_getekcertificate: Add AMD EK support
    + tpm2_ecdhzgen: Add public-key parameter
    + tpm2_nvreadpublic: Prevent free of unallocated pointers on failure
    + Bug-fixes:
      * The readthedocs build failed with module 'jinja2' has no
        attribute 'contextfilter' a requirement file was added to fix
        this problem
      * An error caused by the flags -flto -_FORTIFY_SOURCE=3 in kdfa
        implementation. This error can be avoided by switching off the
        optimization with pragma
      * Changed wrong function name of "Esys_Load" to "Esys_Load"
      * Function names beginning with Esys_ are wrongly written as Eys_
      * Reading and writing a serialized persistent ESYS_TR handles
      * cirrus-ci update image-family to freebsd-13-2 from 13-1
    + misc:
      * Change the default Python version to Python3 in the helper's code
      * Skip test which uses the sign operator for comparison in
        abrmd_policynv.sh
      * tools/tr_encode: Add a tool that can encode serialized ESYS_TR
        for persistent handles from the TPM2B_PUBLIC and the raw
        persistent TPM2_HANDLE
      * Add safe directory in config
</description>
    <pkglist>
      <collection>
        <package name="efivar" epoch="0" version="38" release="3.1" arch="src" src="src/efivar-38-3.1.src.rpm">
          <filename>efivar-38-3.1.src.rpm</filename>
        </package>
        <package name="efivar-debugsource" epoch="0" version="38" release="3.1" arch="x86_64" src="x86_64/efivar-debugsource-38-3.1.x86_64.rpm">
          <filename>efivar-debugsource-38-3.1.x86_64.rpm</filename>
        </package>
        <package name="libefivar1" epoch="0" version="38" release="3.1" arch="x86_64" src="x86_64/libefivar1-38-3.1.x86_64.rpm">
          <filename>libefivar1-38-3.1.x86_64.rpm</filename>
        </package>
        <package name="libefivar1-debuginfo" epoch="0" version="38" release="3.1" arch="x86_64" src="x86_64/libefivar1-debuginfo-38-3.1.x86_64.rpm">
          <filename>libefivar1-debuginfo-38-3.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-esys0" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/libtss2-esys0-4.1.0-1.1.x86_64.rpm">
          <filename>libtss2-esys0-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-esys0-debuginfo" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/libtss2-esys0-debuginfo-4.1.0-1.1.x86_64.rpm">
          <filename>libtss2-esys0-debuginfo-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-fapi1" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/libtss2-fapi1-4.1.0-1.1.x86_64.rpm">
          <filename>libtss2-fapi1-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-fapi1-debuginfo" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/libtss2-fapi1-debuginfo-4.1.0-1.1.x86_64.rpm">
          <filename>libtss2-fapi1-debuginfo-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-mu0" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/libtss2-mu0-4.1.0-1.1.x86_64.rpm">
          <filename>libtss2-mu0-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-mu0-debuginfo" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/libtss2-mu0-debuginfo-4.1.0-1.1.x86_64.rpm">
          <filename>libtss2-mu0-debuginfo-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-rc0" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/libtss2-rc0-4.1.0-1.1.x86_64.rpm">
          <filename>libtss2-rc0-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-rc0-debuginfo" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/libtss2-rc0-debuginfo-4.1.0-1.1.x86_64.rpm">
          <filename>libtss2-rc0-debuginfo-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-sys1" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/libtss2-sys1-4.1.0-1.1.x86_64.rpm">
          <filename>libtss2-sys1-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-sys1-debuginfo" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/libtss2-sys1-debuginfo-4.1.0-1.1.x86_64.rpm">
          <filename>libtss2-sys1-debuginfo-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-tcti-device0" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/libtss2-tcti-device0-4.1.0-1.1.x86_64.rpm">
          <filename>libtss2-tcti-device0-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-tcti-device0-debuginfo" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/libtss2-tcti-device0-debuginfo-4.1.0-1.1.x86_64.rpm">
          <filename>libtss2-tcti-device0-debuginfo-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-tctildr0" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/libtss2-tctildr0-4.1.0-1.1.x86_64.rpm">
          <filename>libtss2-tctildr0-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtss2-tctildr0-debuginfo" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/libtss2-tctildr0-debuginfo-4.1.0-1.1.x86_64.rpm">
          <filename>libtss2-tctildr0-debuginfo-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="tpm2-0-tss" epoch="0" version="4.1.0" release="1.1" arch="src" src="src/tpm2-0-tss-4.1.0-1.1.src.rpm">
          <filename>tpm2-0-tss-4.1.0-1.1.src.rpm</filename>
        </package>
        <package name="tpm2-0-tss" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/tpm2-0-tss-4.1.0-1.1.x86_64.rpm">
          <filename>tpm2-0-tss-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="tpm2-0-tss-debugsource" epoch="0" version="4.1.0" release="1.1" arch="x86_64" src="x86_64/tpm2-0-tss-debugsource-4.1.0-1.1.x86_64.rpm">
          <filename>tpm2-0-tss-debugsource-4.1.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="tpm2.0-tools" epoch="0" version="5.7" release="1.1" arch="src" src="src/tpm2.0-tools-5.7-1.1.src.rpm">
          <filename>tpm2.0-tools-5.7-1.1.src.rpm</filename>
        </package>
        <package name="tpm2.0-tools" epoch="0" version="5.7" release="1.1" arch="x86_64" src="x86_64/tpm2.0-tools-5.7-1.1.x86_64.rpm">
          <filename>tpm2.0-tools-5.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="tpm2.0-tools-debuginfo" epoch="0" version="5.7" release="1.1" arch="x86_64" src="x86_64/tpm2.0-tools-debuginfo-5.7-1.1.x86_64.rpm">
          <filename>tpm2.0-tools-debuginfo-5.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="tpm2.0-tools-debugsource" epoch="0" version="5.7" release="1.1" arch="x86_64" src="x86_64/tpm2.0-tools-debugsource-5.7-1.1.x86_64.rpm">
          <filename>tpm2.0-tools-debugsource-5.7-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>36</id>
    <title>Security update for python-urllib3</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1725611719" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226469" id="1226469" title="VUL-0: CVE-2024-37891: python-urllib3: proxy-authorization request header is not stripped during cross-origin redirects" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37891" id="CVE-2024-37891" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37891" type="cve" />
    </references>
    <description>This update for python-urllib3 fixes the following issues:

- CVE-2024-37891: Fixed issue where proxy-authorization request header was not stripped during cross-origin redirects (bsc#1226469)
</description>
    <pkglist>
      <collection>
        <package name="python-urllib3" epoch="0" version="2.1.0" release="2.1" arch="src" src="src/python-urllib3-2.1.0-2.1.src.rpm">
          <filename>python-urllib3-2.1.0-2.1.src.rpm</filename>
        </package>
        <package name="python311-urllib3" epoch="0" version="2.1.0" release="2.1" arch="noarch" src="noarch/python311-urllib3-2.1.0-2.1.noarch.rpm">
          <filename>python311-urllib3-2.1.0-2.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>32</id>
    <title>Security update for glibc</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1725531155" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221482" id="1221482" title="Oracle Fusion Middleware component installation issue." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221940" id="1221940" title="Update in glibc-devel-2.31-150300.52.2 causes performance regression on Sapphire Rapids CPU for glibc compiled benchmarking tests" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222992" id="1222992" title="VUL-0: CVE-2024-2961: glibc: iconv() function in the GNU C Library may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223423" id="1223423" title="VUL-0: CVE-2024-33599: glibc: stack-based buffer overflow in netgroup cache" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223424" id="1223424" title="VUL-0: CVE-2024-33600: glibc: null pointer dereference after failed netgroup cache insertion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223425" id="1223425" title="VUL-0: CVE-2024-33602: glibc: netgroup cache assumes NSS callback uses in-buffer strings" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228041" id="1228041" title="SLES 16 SP0 - s390x: glibc: z13 wcsncmp implementation segfaults if n=1" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961" id="CVE-2024-2961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2961" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599" id="CVE-2024-33599" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33599" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600" id="CVE-2024-33600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33600" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601" id="CVE-2024-33601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33601" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602" id="CVE-2024-33602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-33602" type="cve" />
    </references>
    <description>This update for glibc fixes the following issues:

Fixed security issues:

- CVE-2024-33602: Use time_t for return type of addgetnetgrentX (bsc#1223425)
- CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache (bsc#1223423)
- CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bsc#1223424)
- CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bsc#1223424)
- CVE-2024-33601, CVE-2024-33602: netgroup: Use two buffers in addgetnetgrentX (bsc#1223425)
- CVE-2024-2961: iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (bsc#1222992)

Fixed non-security issues:

- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc (bsc#1221482)
- Fix segfault in wcsncmp (bsc#1228041)
- Also include stat64 in the 32-bit libc_nonshared.a workaround (bsc#1221482)
- Avoid creating ULP prologue for _start routine (bsc#1221940)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package (bsc#1221482)
- malloc: Use __get_nprocs on arena_get2
- linux: Use rseq area unconditionally in sched_getcpu
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.38" release="7.1" arch="src" src="src/glibc-2.38-7.1.src.rpm">
          <filename>glibc-2.38-7.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.38" release="7.1" arch="x86_64" src="x86_64/glibc-2.38-7.1.x86_64.rpm">
          <filename>glibc-2.38-7.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-debuginfo" epoch="0" version="2.38" release="7.1" arch="x86_64" src="x86_64/glibc-debuginfo-2.38-7.1.x86_64.rpm">
          <filename>glibc-debuginfo-2.38-7.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-debugsource" epoch="0" version="2.38" release="7.1" arch="x86_64" src="x86_64/glibc-debugsource-2.38-7.1.x86_64.rpm">
          <filename>glibc-debugsource-2.38-7.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.38" release="7.1" arch="x86_64" src="x86_64/glibc-devel-2.38-7.1.x86_64.rpm">
          <filename>glibc-devel-2.38-7.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel-debuginfo" epoch="0" version="2.38" release="7.1" arch="x86_64" src="x86_64/glibc-devel-debuginfo-2.38-7.1.x86_64.rpm">
          <filename>glibc-devel-debuginfo-2.38-7.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.38" release="7.1" arch="x86_64" src="x86_64/glibc-locale-2.38-7.1.x86_64.rpm">
          <filename>glibc-locale-2.38-7.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.38" release="7.1" arch="x86_64" src="x86_64/glibc-locale-base-2.38-7.1.x86_64.rpm">
          <filename>glibc-locale-base-2.38-7.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base-debuginfo" epoch="0" version="2.38" release="7.1" arch="x86_64" src="x86_64/glibc-locale-base-debuginfo-2.38-7.1.x86_64.rpm">
          <filename>glibc-locale-base-debuginfo-2.38-7.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>72</id>
    <title>Security update for keepalived</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1731333203" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228123" id="1228123" title="VUL-0: CVE-2024-41184: keepalived: integer overflow in vrrp_ipsets_handler" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41184" id="CVE-2024-41184" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41184" type="cve" />
    </references>
    <description>This update for keepalived fixes the following issues:

- CVE-2024-41184: Fixed integer overflow in vrrp_ipsets_handler (bsc#1228123)
</description>
    <pkglist>
      <collection>
        <package name="keepalived" epoch="0" version="2.2.8" release="2.1" arch="src" src="src/keepalived-2.2.8-2.1.src.rpm">
          <filename>keepalived-2.2.8-2.1.src.rpm</filename>
        </package>
        <package name="keepalived" epoch="0" version="2.2.8" release="2.1" arch="x86_64" src="x86_64/keepalived-2.2.8-2.1.x86_64.rpm">
          <filename>keepalived-2.2.8-2.1.x86_64.rpm</filename>
        </package>
        <package name="keepalived-debuginfo" epoch="0" version="2.2.8" release="2.1" arch="x86_64" src="x86_64/keepalived-debuginfo-2.2.8-2.1.x86_64.rpm">
          <filename>keepalived-debuginfo-2.2.8-2.1.x86_64.rpm</filename>
        </package>
        <package name="keepalived-debugsource" epoch="0" version="2.2.8" release="2.1" arch="x86_64" src="x86_64/keepalived-debugsource-2.2.8-2.1.x86_64.rpm">
          <filename>keepalived-debugsource-2.2.8-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>73</id>
    <title>Security update for systemd</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1733495133" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200723" id="1200723" title="SLES15SP4: Splitter Disks are not showing up under /dev/ dir(nvme/splitter/sles15sp4/Denali/P10)." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204968" id="1204968" title="VUL-0: CVE-2022-3821: systemd: buffer overrun in format_timespan() function." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213873" id="1213873" title="100+ disks -&gt; mdadm -&gt; lvm -&gt; mounted in fstab with udisks2 results in recovery prompt at boot" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218110" id="1218110" title="[15-SP6][Beat2][Build 44.1] SAP software does not start automatically after Migration" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221906" id="1221906" title="[15SP6][HA] openQA test fails in pacemaker_cts_cluster_exerciser: cts-lab hangs due to issue of `journalctl --until`" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226414" id="1226414" title="Intermittent reboot Failure on md RAID1 for systemd/udev" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226415" id="1226415" title="data loss: update 15.5 =&gt; 15.6 deletes old journal entries" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228091" id="1228091" title="pesign-obs-integration drops systemd post script" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228223" id="1228223" title="The systemd-devel-32bit package is missing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228809" id="1228809" title="L3: [EAR - NOT FOR USA Citizens] Docker fails to start after upgrading from 20.10.25_ce to 24.0.7_ce" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229518" id="1229518" title="[SLFO] systemd 254 is missing reworked SYSTEMD_READY logic in device mapper udev rules" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3821" id="CVE-2022-3821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3821" type="cve" />
      <reference href="https://jira.suse.com/browse/PED-5659" id="PED-5659" title="https://jira.suse.com/browse/PED-5659" type="jira" />
    </references>
    <description>This update for systemd fixes the following issues:

- Import commit 0512d0d1fc0b54a84964281708036a46ab39c153
  0512d0d1fc cgroup: Rename effective limits internal table (jsc#PED-5659)
  765846b70b cgroup: Restrict effective limits with global resource provision (jsc#PED-5659)
  e29909088b test: Add effective cgroup limits testing (jsc#PED-5659)
  beacac6df0 test: Convert rlimit test to subtest of generic limit testing (jsc#PED-5659)
  e3b789e512 cgroup: Add EffectiveMemoryMax=, EffectiveMemoryHigh= and EffectiveTasksMax= properties (jsc#PED-5659)
  5aa063ae16 bus-print-properties: prettify more unset properties
  a53122c9bd bus-print-properties: ignore CGROUP_LIMIT_MAX for Memory*{Current, Peak}
  8418791441 cgroup: rename TasksMax structure to CGroupTasksMax

- Don't try to restart the udev socket units anymore (bsc#1228809)

  There's currently no way to restart a socket activable service and its socket
  units "atomically" and safely.

- Make the 32bit version of libudev.so available again (bsc#1228223)

  The symlink for building 32bit applications was mistakenly dropped when the
  content of libudev-devel was merged into systemd-devel.

  Provide the 32bit flavor of systemd-devel again, which should restore the plug
  and play support in Wine for 32bit windows applications.

- Import commit up to 5aa182660dff86fe9d5cba61b0c6542bb2f2db23 (merge of v254.17)
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/libsystemd0-254.18-1.1.x86_64.rpm">
          <filename>libsystemd0-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0-debuginfo" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/libsystemd0-debuginfo-254.18-1.1.x86_64.rpm">
          <filename>libsystemd0-debuginfo-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/libudev1-254.18-1.1.x86_64.rpm">
          <filename>libudev1-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1-debuginfo" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/libudev1-debuginfo-254.18-1.1.x86_64.rpm">
          <filename>libudev1-debuginfo-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="254.18" release="1.1" arch="src" src="src/systemd-254.18-1.1.src.rpm">
          <filename>systemd-254.18-1.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/systemd-254.18-1.1.x86_64.rpm">
          <filename>systemd-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/systemd-container-254.18-1.1.x86_64.rpm">
          <filename>systemd-container-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container-debuginfo" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/systemd-container-debuginfo-254.18-1.1.x86_64.rpm">
          <filename>systemd-container-debuginfo-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-coredump" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/systemd-coredump-254.18-1.1.x86_64.rpm">
          <filename>systemd-coredump-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-coredump-debuginfo" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/systemd-coredump-debuginfo-254.18-1.1.x86_64.rpm">
          <filename>systemd-coredump-debuginfo-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-debuginfo" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/systemd-debuginfo-254.18-1.1.x86_64.rpm">
          <filename>systemd-debuginfo-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-debugsource" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/systemd-debugsource-254.18-1.1.x86_64.rpm">
          <filename>systemd-debugsource-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-experimental" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/systemd-experimental-254.18-1.1.x86_64.rpm">
          <filename>systemd-experimental-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-experimental-debuginfo" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/systemd-experimental-debuginfo-254.18-1.1.x86_64.rpm">
          <filename>systemd-experimental-debuginfo-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/systemd-journal-remote-254.18-1.1.x86_64.rpm">
          <filename>systemd-journal-remote-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote-debuginfo" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/systemd-journal-remote-debuginfo-254.18-1.1.x86_64.rpm">
          <filename>systemd-journal-remote-debuginfo-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-portable" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/systemd-portable-254.18-1.1.x86_64.rpm">
          <filename>systemd-portable-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-portable-debuginfo" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/systemd-portable-debuginfo-254.18-1.1.x86_64.rpm">
          <filename>systemd-portable-debuginfo-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/udev-254.18-1.1.x86_64.rpm">
          <filename>udev-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev-debuginfo" epoch="0" version="254.18" release="1.1" arch="x86_64" src="x86_64/udev-debuginfo-254.18-1.1.x86_64.rpm">
          <filename>udev-debuginfo-254.18-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>43</id>
    <title>Security update for selinux-policy</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1726054646" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210717" id="1210717" title="[SELinux] adjust policy for pam_wtmpdb" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215405" id="1215405" title="SELinux is preventing some services from 'read, write' accesses on icastats file" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225984" id="1225984" title="[SELinux] GDM avcs for wtmp.db-journal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227930" id="1227930" title="SELinux is preventing firewalld from 'read, write' accesses on the file icastats_0" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228247" id="1228247" title="VUL-0: CVE-2024-41012: kernel: filelock: Remove locks reliably when fcntl/close race is detected" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229132" id="1229132" title="[Build 9.15] SELinux: pam_wtmpdb module is not allowed to open wtmp database if called by /bin/login" type="bugzilla" />
    </references>
    <description>This update for selinux-policy fixes the following issues:

Update to version 20230523+git25.ad22dd7f:

* Backport wtmpdb label change to have the same wtmpdb label
  as in SL Micro 6.1 (bsc#1229132)
* Add auth_rw_wtmpdb_login_records to domains using auth_manage_login_records
* Add auth_rw_wtmpdb_login_records to modules
* Allow xdm_t to read-write to wtmpdb (bsc#1225984)
* Introduce types for wtmpdb and rw interface
* Introduce wtmp_file_type attribute
* Revert "Add policy for wtmpdb (bsc#1210717)"

Update to version 20230523+git18.f44daf8a:

* Provide type for sysstat lock files (bsc#1228247)

Update to version 20230523+git16.0849f54c:

* allow firewalld access to /dev/random and write HW acceleration logs
  (bsc#1215405, bsc#1227930)
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230523+git25.ad22dd7f" release="1.1" arch="noarch" src="noarch/selinux-policy-20230523+git25.ad22dd7f-1.1.noarch.rpm">
          <filename>selinux-policy-20230523+git25.ad22dd7f-1.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230523+git25.ad22dd7f" release="1.1" arch="src" src="src/selinux-policy-20230523+git25.ad22dd7f-1.1.src.rpm">
          <filename>selinux-policy-20230523+git25.ad22dd7f-1.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230523+git25.ad22dd7f" release="1.1" arch="noarch" src="noarch/selinux-policy-devel-20230523+git25.ad22dd7f-1.1.noarch.rpm">
          <filename>selinux-policy-devel-20230523+git25.ad22dd7f-1.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230523+git25.ad22dd7f" release="1.1" arch="noarch" src="noarch/selinux-policy-targeted-20230523+git25.ad22dd7f-1.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230523+git25.ad22dd7f-1.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>45</id>
    <title>Security update for libxml2</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1726054891" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224282" id="1224282" title="VUL-0: CVE-2024-34459: libxml2: libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34459" id="CVE-2024-34459" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34459" type="cve" />
    </references>
    <description>This update for libxml2 fixes the following issues:

- CVE-2024-34459: Fixed buffer over-read in (bsc#1224282)
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.11.6" release="3.1" arch="x86_64" src="x86_64/libxml2-2-2.11.6-3.1.x86_64.rpm">
          <filename>libxml2-2-2.11.6-3.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2-debuginfo" epoch="0" version="2.11.6" release="3.1" arch="x86_64" src="x86_64/libxml2-2-debuginfo-2.11.6-3.1.x86_64.rpm">
          <filename>libxml2-2-debuginfo-2.11.6-3.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.11.6" release="3.1" arch="src" src="src/libxml2-2.11.6-3.1.src.rpm">
          <filename>libxml2-2.11.6-3.1.src.rpm</filename>
        </package>
        <package name="libxml2-debugsource" epoch="0" version="2.11.6" release="3.1" arch="x86_64" src="x86_64/libxml2-debugsource-2.11.6-3.1.x86_64.rpm">
          <filename>libxml2-debugsource-2.11.6-3.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.11.6" release="3.1" arch="x86_64" src="x86_64/libxml2-tools-2.11.6-3.1.x86_64.rpm">
          <filename>libxml2-tools-2.11.6-3.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-tools-debuginfo" epoch="0" version="2.11.6" release="3.1" arch="x86_64" src="x86_64/libxml2-tools-debuginfo-2.11.6-3.1.x86_64.rpm">
          <filename>libxml2-tools-debuginfo-2.11.6-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>61</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1729001244" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228971" id="1228971" title="Install compile_commands.json in kernel live patching devel package" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1012628" id="1012628" title="Continuous stable update tracker for Tumbleweed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193454" id="1193454" title="Partner-L3: SLES15 SP4: Hardlockups observed while doing smt=off or offlining cores.[Denali][P10][2TB/240c]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205462" id="1205462" title="Switching SMT modes takes a long time" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208783" id="1208783" title="Kernel hard lockup when initializing FW sound device with jackdbus" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213123" id="1213123" title="VUL-0: CVE-2023-37453: kernel: out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214285" id="1214285" title="All threads of hotplugged CPUs onlined by kernel even when SMT mode with fewer threads is set." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215199" id="1215199" title="[trackerbug] 6.4 powerpc base kernel fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220066" id="1220066" title="SLES15 SP6: NVME Subsytem not recovered after NVME subsystem reset (Shearwater/NVME/Denali/P10)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220252" id="1220252" title="VUL-0: CVE-2024-26590: kernel-source,kernel-source-azure,kernel-source-rt: erofs: fix inconsistent per-file compression format" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220877" id="1220877" title="VUL-0: CVE-2023-52581: kernel: netfilter: nf_tables: fix memleak when more than 255 elements expired" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221326" id="1221326" title="VUL-0: CVE-2023-52489: kernel: mm/sparsemem: fix race in accessing memory_section-&gt;usage" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221630" id="1221630" title="VUL-0: CVE-2024-26631: kernel: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221645" id="1221645" title="SLES15 SP6 - [P10] - LPAR crashes and hangs on running ksefltest powerpc/mce/inject-ra-err with parameter &quot;percpu_alloc=page&quot; enabled" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221652" id="1221652" title="VUL-0: CVE-2024-26637: kernel: wifi: ath11k: rely on mac80211 debugfs handling for vif" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221857" id="1221857" title="[NetApp SLES15 SP6 Bug]: nvme connect with --tls_key option succeeds, but fails with --tls option" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222254" id="1222254" title="L3: Unresponsive /run/systemd/userdb/io.systemd.DynamicUser adding 45 second delay to su commands" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222335" id="1222335" title="VUL-0: CVE-2024-26668: kernel: netfilter: nft_limit: reject configurations that cause integer overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222350" id="1222350" title="VUL-0: CVE-2024-26669: kernel: net/sched: flower: Fix chain template offload" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222364" id="1222364" title="VUL-0: CVE-2024-26720: kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222372" id="1222372" title="VUL-0: CVE-2024-26735: kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222387" id="1222387" title="VUL-0: CVE-2024-26677: kernel: rxrpc: Fix delayed ACKs to not set the reference serial number" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222433" id="1222433" title="VUL-0: CVE-2024-26682: kernel: wifi: mac80211: improve CSA/ECSA connection refusal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222434" id="1222434" title="VUL-0: CVE-2024-26683: kernel: wifi: cfg80211: detect stuck ECSA element in probe resp" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222625" id="1222625" title="VUL-0: CVE-2024-27437: kernel: vfio/pci: Disable auto-enable of exclusive INTx IRQ" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222633" id="1222633" title="VUL-0: CVE-2024-26809: kernel: netfilter: nft_set_pipapo: release elements in clone only from destroy path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222634" id="1222634" title="VUL-0: CVE-2024-26808: kernel: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222808" id="1222808" title="VUL-0: CVE-2024-26812: kernel: vfio/pci: Create persistent INTx handler" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222967" id="1222967" title="VUL-0: CVE-2024-26835: kernel: netfilter: nf_tables: table marked as active but no registered hooks during memory pressure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222973" id="1222973" title="VUL-0: CVE-2024-26837: kernel: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223053" id="1223053" title="VUL-0: CVE-2024-26849: kernel: netlink: read past the malformed (too small) attribute" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223074" id="1223074" title="VUL-0: CVE-2024-26851: kernel: netfilter: nf_conntrack_h323: bmp length out of range" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223191" id="1223191" title="powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223395" id="1223395" title="clustermd doesn't do recovery after adding a new disk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223635" id="1223635" title="VUL-0: CVE-2024-26976: kernel: KVM: Always flush async #PF workqueue when vCPU is being destroyed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223720" id="1223720" title="VUL-0: CVE-2024-27010: kernel: net/sched: Fix mirred deadlock on device recursion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223731" id="1223731" title="VUL-0: CVE-2024-26944: kernel: btrfs: zoned: use-after-free in do_zone_finish()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223742" id="1223742" title="VUL-0: CVE-2024-27079: kernel: iommu/vt-d: Fix NULL domain on device release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223763" id="1223763" title="VUL-0: CVE-2024-27049: kernel: wifi: mt76: mt7925e: fix use-after-free in free_irq()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223767" id="1223767" title="VUL-0: CVE-2024-27050: libbpf: use OPTS_SET() macro in bpf_xdp_query()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223777" id="1223777" title="VUL-0: CVE-2024-27024: kernel: net/rds: fix WARNING in rds_conn_connect_if_down" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223803" id="1223803" title="VUL-0: CVE-2024-27011: kernel: netfilter: nf_tables: fix memleak in map from abort path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224105" id="1224105" title="Partner-L3: [SLES15 SP4] [native nvme multipath] Delays observed in device wwn symmlink initialization in scaled environment" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224415" id="1224415" title="VUL-0: CVE-2024-27403: kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224485" id="1224485" title="VUL-0: CVE-2024-35913: kernel: wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224496" id="1224496" title="VUL-0: CVE-2024-35902: kernel: net/rds: fix possible cp null dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224510" id="1224510" title="VUL-0: CVE-2024-35897: kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224535" id="1224535" title="VUL-0: CVE-2024-35939: kernel: dma-direct: Leak pages on dma_set_decrypted() failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224631" id="1224631" title="VUL-0: CVE-2023-52688: kernel: wifi: ath12k: fix the error handler of rfkill config" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224636" id="1224636" title="VUL-0: CVE-2024-35854: kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224690" id="1224690" title="VUL-0: CVE-2023-52668: kernel: btrfs: zoned: fix lock ordering in btrfs_zone_activate()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224694" id="1224694" title="VUL-0: CVE-2024-35855: kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224700" id="1224700" title="VUL-0: CVE-2024-35949: kernel: btrfs: make sure that WRITTEN is set on all metadata blocks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224711" id="1224711" title="VUL-0: CVE-2024-27433: kernel: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225475" id="1225475" title="VUL-0: CVE-2023-52735: kernel: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225582" id="1225582" title="VUL-0: CVE-2023-52859: kernel: perf: hisi: Fix use-after-free when register pmu fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225607" id="1225607" title="[PATCH] printk: console flushing fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225718" id="1225718" title="VUL-0: CVE-2024-36881: kernel: mm/userfaultfd: reset ptes when close() for wr-protected ones" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225751" id="1225751" title="VUL-0: CVE-2024-36907: kernel: SUNRPC: add a missing rpc_stat for TCP TLS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225814" id="1225814" title="VUL-0: CVE-2024-36929: kernel: net: core: reject skb_copy(_expand) for fraglist GSO skbs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225832" id="1225832" title="VUL-0: CVE-2024-36933: kernel: nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225838" id="1225838" title="VUL-0: CVE-2024-36939: kernel: nfs: Handle error of rpc_proc_register() in nfs_net_init()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225903" id="1225903" title="bpf: backport of iterator and callback handling fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226031" id="1226031" title="apparmor stops working due to &quot;aa-logprof   ERROR: Can't parse mount rule mount             &quot;&quot;      -&gt; &quot;/&quot;,&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226127" id="1226127" title="VUL-0: CVE-2024-36970: kernel: wifi: iwlwifi: Use request_module_nowait" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226502" id="1226502" title="Backport arm64 write combining support optimization to SLES 15" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226530" id="1226530" title="[Trackerbug] Mana: Add support for page sizes other than 4KB on ARM64" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226588" id="1226588" title="cachefiles: remove requests from xarray during flushing requests" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226604" id="1226604" title="VUL-0: CVE-2024-36979: kernel: net: bridge: mst: fix vlan use-after-free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226743" id="1226743" title="VUL-0: CVE-2024-38563: kernel: wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226751" id="1226751" title="VUL-0: CVE-2024-38609: kernel: wifi: mt76: connac: check for null before dereferencing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226765" id="1226765" title="VUL-0: CVE-2024-31076: kernel: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226798" id="1226798" title="VUL-0: CVE-2024-36270: kernel: netfilter: tproxy: bail out if IP has been disabled on the device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226801" id="1226801" title="VUL-0: CVE-2024-36286: kernel: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226834" id="1226834" title="VUL-0: CVE-2024-36288: kernel: SUNRPC: Fix loop termination condition in gss_free_in_token_pages()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226874" id="1226874" title="VUL-0: CVE-2024-36489: kernel: tls: fix missing memory barrier in tls_init" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226885" id="1226885" title="VUL-0: CVE-2024-38662: kernel: bpf: allow delete from sockmap/sockhash only if update is allowed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226920" id="1226920" title="Partner-L3: SLES15 SP6 GM [ Brazos ] [ 31TB/192c ]: Brazos 32TB/192c system fails to boot with SLES15 SP6." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227149" id="1227149" title="Bump base code of iwlwifi to 6.9.x (or 6.10.x)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227182" id="1227182" title="Builtin microphone doesn't work on OMEN by HP Gaming Laptop 16-n0xxx" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227383" id="1227383" title="VUL-0: kernel: slab-out-of-bounds in hex_dump_to_buffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227437" id="1227437" title="VUL-0: CVE-2024-39476: kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227492" id="1227492" title="VUL-0: CVE-2024-39486: kernel: drm/drm_file: Fix pid refcounting race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227493" id="1227493" title="VUL-0: CVE-2024-39484: kernel: mmc: davinci: Don't strip remove function when driver is builtin" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227494" id="1227494" title="VUL-0: CVE-2024-39483: kernel: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227618" id="1227618" title="VUL-0: CVE-2024-39488: kernel: arm64: asm-bug: add .align 2 to the end of __BUG_ENTRY" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227620" id="1227620" title="VUL-0: CVE-2024-39493: kernel: crypto: qat - fix ADF_DEV_RESET_SYNC memory leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227623" id="1227623" title="VUL-0: CVE-2024-39489: kernel: ipv6: sr: fix memleak in seg6_hmac_init_algo" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227627" id="1227627" title="VUL-0: CVE-2024-39491: kernel: ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227634" id="1227634" title="SLES 15 SP6 - KVM: s390: unhandled guest LPSWEY instruction" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227706" id="1227706" title="[NetApp SLES15 SP6 RFE]: Add new NVMe queue-depth based I/O scheduler" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227722" id="1227722" title="VUL-0: CVE-2024-39497: kernel: drm/shmem-helper: fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227724" id="1227724" title="VUL-0: CVE-2024-39500: kernel: sock_map: avoid race between sock_map_close and sk_psock_put" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227725" id="1227725" title="VUL-0: CVE-2024-39499: kernel: vmci: prevent speculation leaks by sanitizing event in event_deliver()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227728" id="1227728" title="VUL-0: CVE-2024-39505: kernel: drm/komeda: check for error-valued pointer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227729" id="1227729" title="VUL-0: CVE-2024-39506: kernel: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227732" id="1227732" title="VUL-0: CVE-2024-39508: kernel: io_uring/io-wq: use set_bit() and test_bit() at worker-&gt;flags" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227733" id="1227733" title="VUL-0: CVE-2024-39509: kernel: HID: core: remove unnecessary WARN_ON() in implement()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227734" id="1227734" title="VUL-0: CVE-2024-39510: kernel: cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227747" id="1227747" title="SLES15 SP6 [6.4.0-150600.13-default] perf bench futex/wake-parallel test fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227750" id="1227750" title="VUL-0: CVE-2023-52885: kernel: SUNRPC: Fix UAF in svc_tcp_listen_data_ready()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227754" id="1227754" title="VUL-0: CVE-2024-39501: kernel: drivers: core: synchronize really_probe() and dev_uevent()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227758" id="1227758" title="VUL-0: CVE-2024-40899: kernel: cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227760" id="1227760" title="VUL-0: CVE-2024-40900: kernel: cachefiles: remove requests from xarray during flushing requests" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227761" id="1227761" title="VUL-0: CVE-2024-40905: kernel: ipv6: fix possible race in __fib6_drop_pcpu_from()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227764" id="1227764" title="VUL-0: CVE-2024-40902: kernel: jfs: xattr: fix buffer overflow for invalid xattr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227766" id="1227766" title="VUL-0: CVE-2024-40903: kernel: usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227770" id="1227770" title="VUL-0: CVE-2024-40942: kernel: wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227771" id="1227771" title="VUL-0: CVE-2024-40941: kernel: wifi: iwlwifi: mvm: don't read past the mfuart notifcation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227772" id="1227772" title="VUL-0: CVE-2024-40904: kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227774" id="1227774" title="VUL-0: CVE-2024-40929: kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227781" id="1227781" title="VUL-0: CVE-2024-40920: kernel: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227784" id="1227784" title="VUL-0: CVE-2024-40921: kernel: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227785" id="1227785" title="VUL-0: CVE-2024-40922: kernel: io_uring/rsrc: don't lock while !TASK_RUNNING" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227787" id="1227787" title="VUL-0: CVE-2024-40924: kernel: drm/i915/dpt: make DPT object unshrinkable" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227790" id="1227790" title="VUL-0: CVE-2024-40912: kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227791" id="1227791" title="VUL-0: CVE-2024-40926: kernel: drm/nouveau: don't attempt to schedule hpd_work on headless cards" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227792" id="1227792" title="VUL-0: CVE-2024-40911: kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227796" id="1227796" title="VUL-0: CVE-2024-40934: kernel: HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227798" id="1227798" title="VUL-0: CVE-2024-40909: kernel: bpf: Fix a potential use-after-free in bpf_link_free()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227799" id="1227799" title="VUL-0: CVE-2024-40939: kernel: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227802" id="1227802" title="VUL-0: CVE-2024-40945: kernel: iommu: Return right value in iommu_sva_bind_device()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227808" id="1227808" title="VUL-0: CVE-2024-40954: kernel: net: do not leave a dangling sk pointer, when socket creation fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227810" id="1227810" title="VUL-0: CVE-2024-40956: kernel: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227811" id="1227811" title="VUL-0: CVE-2024-40957: kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227812" id="1227812" title="VUL-0: CVE-2024-40958: kernel: netns: Make get_net_ns() handle zero refcount net" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227815" id="1227815" title="VUL-0: CVE-2024-40962: kernel: btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227816" id="1227816" title="VUL-0: CVE-2024-40927: kernel: xhci: handle TD clearing for multiple streams case" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227818" id="1227818" title="VUL-0: CVE-2024-40964: kernel: ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227820" id="1227820" title="VUL-0: CVE-2024-40984: kernel: ACPICA: Revert &quot;ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227823" id="1227823" title="VUL-0: CVE-2024-40989: kernel: KVM: arm64: Disassociate vcpus from redistributor region on teardown" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227824" id="1227824" title="VUL-0: CVE-2024-40990: kernel: RDMA/mlx5: Add check for srq max_sge attribute" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227826" id="1227826" title="VUL-0: CVE-2024-40992: kernel: RDMA/rxe: Fix responder length checking for UD request packets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227828" id="1227828" title="VUL-0: CVE-2024-40932: kernel: drm/exynos/vidi: fix memory leak in .get_modes()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227829" id="1227829" title="VUL-0: CVE-2024-40994: kernel: ptp: fix integer overflow in max_vclocks_store" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227830" id="1227830" title="VUL-0: CVE-2024-40995: kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227832" id="1227832" title="VUL-0: CVE-2024-40910: kernel: ax25: Fix refcount imbalance on inbound connections" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227833" id="1227833" title="VUL-0: CVE-2024-40936: kernel: cxl/region: fix memregion leaks in devm_cxl_add_region()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227834" id="1227834" title="[TRACKERBUG] Enable the vdpa driver on SLE15SP6 natively" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227839" id="1227839" title="VUL-0: CVE-2024-40913: kernel: cachefiles: defer exposing anon_fd until after copy_to_user() succeeds" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227840" id="1227840" title="VUL-0: CVE-2024-40938: kernel: landlock: fix d_parent walk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227846" id="1227846" title="VUL-0: CVE-2024-40916: kernel: drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227849" id="1227849" title="VUL-0: CVE-2024-40943: kernel: ocfs2: fix races between hole punching and AIO+DIO" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227851" id="1227851" title="VUL-0: CVE-2024-41004: kernel: tracing: build event generation tests only as modules" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227853" id="1227853" title="VUL-0: CVE-2024-40997: kernel: cpufreq: amd-pstate: fix memory leak on CPU EPP exit" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227863" id="1227863" title="VUL-0: CVE-2024-41007: kernel: tcp: avoid too many retransmit packets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227864" id="1227864" title="VUL-0: CVE-2024-40981: kernel: batman-adv: bypass empty buckets in batadv_purge_orig_ref()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227865" id="1227865" title="VUL-0: CVE-2024-40982: kernel: ssb: fix potential NULL pointer dereference in ssb_device_uevent()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227867" id="1227867" title="VUL-0: CVE-2024-41000: kernel: block/ioctl: prefer different overflow check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227869" id="1227869" title="VUL-0: CVE-2024-41001: kernel: io_uring/sqpoll: work around a potential audit memory leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227870" id="1227870" title="VUL-0: CVE-2024-41002: kernel: crypto: hisilicon/sec - fix memory leak for sec resource release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227883" id="1227883" title="VUL-0: CVE-2024-40944: kernel: x86/kexec: Fix bug with call depth tracking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227884" id="1227884" title="VUL-0: CVE-2024-40959: kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227891" id="1227891" title="VUL-0: CVE-2024-40967: kernel: serial: imx: Introduce timeout when waiting on transmitter empty" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227893" id="1227893" title="VUL-0: CVE-2024-40976: kernel: drm/lima: mask irqs in timeout path before hard reset" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227929" id="1227929" title="VUL-0: CVE-2024-40978: kernel: scsi: qedi: Fix crash while reading debugfs attribute" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227950" id="1227950" title="VUL-0: CVE-2024-40977: kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227957" id="1227957" title="VUL-0: CVE-2024-40988: kernel: drm/radeon: fix UBSAN warning in kv_dpm.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227981" id="1227981" title="VUL-0: CVE-2023-52886: kernel: USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228020" id="1228020" title="VUL-0: CVE-2024-41009: kernel: bpf: Fix overrunning reservations in ringbuf" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228021" id="1228021" title="VUL-0: CVE-2024-41010: kernel: bpf: Fix too early release of tcx_entry" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228192" id="1228192" title="libceph: fix race between delayed_work() and ceph_monc_stop()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228235" id="1228235" title="VUL-0: CVE-2024-40987: kernel: drm/amdgpu: fix UBSAN warning in kv_dpm.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228236" id="1228236" title="VUL-0: CVE-2024-40930: kernel: wifi: cfg80211: validate HE operation element parsing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228247" id="1228247" title="VUL-0: CVE-2024-41012: kernel: filelock: Remove locks reliably when fcntl/close race is detected" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228321" id="1228321" title="fstests btrfs/300 fails on kernel 6.4" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228409" id="1228409" title="VUL-0: CVE-2024-41015: kernel: ocfs2: add bounds checking to ocfs2_check_dir_entry()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228410" id="1228410" title="VUL-0: CVE-2024-41016: kernel: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228426" id="1228426" title="VUL-0: CVE-2023-52887: kernel: net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228427" id="1228427" title="VUL-0: CVE-2024-41020: kernel: filelock: fix fcntl/close race recovery compat path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228429" id="1228429" title="VUL-0: CVE-2024-41022: kernel: drm/amdgpu: fix signedness bug in sdma_v4_0_process_trap_irq()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228446" id="1228446" title="VUL-0: CVE-2024-42095: kernel: serial: 8250_omap: Implementation of Errata i2310" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228447" id="1228447" title="VUL-0: CVE-2024-42092: kernel: gpio: davinci: Validate the obtained number of IRQs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228449" id="1228449" title="VUL-0: CVE-2024-42090: kernel: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228450" id="1228450" title="VUL-0: CVE-2024-42089: kernel: ASoC: fsl-asoc-card: set priv-&gt;pdev before using it" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228452" id="1228452" title="VUL-0: CVE-2024-42086: kernel: iio: chemical: bme680: Fix overflows in compensate() functions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228456" id="1228456" title="VUL-0: CVE-2024-42085: kernel: usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228457" id="1228457" title="VUL-0: CVE-2024-42073: kernel: mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228458" id="1228458" title="VUL-0: CVE-2024-41094: kernel: drm/fbdev-dma: Only set smem_start is enable per module option" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228459" id="1228459" title="VUL-0: CVE-2024-41058: kernel: cachefiles: fix slab-use-after-free in fscache_withdraw_volume()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228460" id="1228460" title="VUL-0: CVE-2024-41032: kernel: mm: vmalloc: check if a hash-index is in cpu_possible_mask" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228462" id="1228462" title="VUL-0: CVE-2024-41057: kernel: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228463" id="1228463" title="VUL-0: CVE-2024-42069: kernel: net: mana: Fix possible double free in error handling path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228466" id="1228466" title="VUL-0: CVE-2024-41087: kernel: ata: libata-core: Fix double free on error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228467" id="1228467" title="VUL-0: CVE-2024-41098: kernel: ata: libata-core: Fix null pointer dereference on error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228468" id="1228468" title="VUL-0: CVE-2024-41051: kernel: cachefiles: wait for ondemand_object_worker to finish when dropping object" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228469" id="1228469" title="VUL-0: CVE-2024-41088: kernel: can: mcp251xfd: fix infinite loop when xmit fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228470" id="1228470" title="VUL-0: CVE-2024-42070: kernel: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228472" id="1228472" title="VUL-0: CVE-2024-41084: kernel: cxl/region: Avoid null pointer dereference in region lookup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228479" id="1228479" title="VUL-0: CVE-2024-41096: kernel: PCI/MSI: Fix UAF in msi_capability_init" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228480" id="1228480" title="VUL-0: CVE-2024-41056: kernel: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228481" id="1228481" title="VUL-0: CVE-2024-42074: kernel: ASoC: amd: acp: add a null check for chip_pdev structure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228482" id="1228482" title="VUL-0: CVE-2024-42082: kernel: xdp: Remove WARN() from __xdp_reg_mem_model()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228483" id="1228483" title="VUL-0: CVE-2024-41092: kernel: drm/i915/gt: Fix potential UAF by revoke of fence registers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228484" id="1228484" title="VUL-0: CVE-2024-42076: kernel: net: can: j1939: Initialize unused data in j1939_send_one()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228485" id="1228485" title="VUL-0: CVE-2024-41035: kernel: USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228486" id="1228486" title="VUL-0: CVE-2024-41049: kernel: filelock: fix potential use-after-free in posix_lock_inode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228487" id="1228487" title="VUL-0: CVE-2024-42148: kernel: bnx2x: Fix multiple UBSAN array-index-out-of-bounds" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228489" id="1228489" title="VUL-0: CVE-2024-42230: kernel: powerpc/pseries: Fix scv instruction crash with kexec" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228491" id="1228491" title="VUL-0: CVE-2024-42142: kernel: net/mlx5: E-switch, Create ingress ACL when needed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228492" id="1228492" title="VUL-0: CVE-2024-42132: kernel: bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228493" id="1228493" title="VUL-0: CVE-2024-42106: kernel: inet_diag: Initialize pad field in struct inet_diag_req_v2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228494" id="1228494" title="VUL-0: CVE-2024-42107: kernel: ice: Don't process extts if PTP is disabled" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228495" id="1228495" title="VUL-0: CVE-2024-42101: kernel: drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228496" id="1228496" title="VUL-0: CVE-2024-41036: kernel: net: ks8851: Fix deadlock with the SPI chip variant" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228499" id="1228499" title="VUL-0: CVE-2024-41050: kernel: cachefiles: cyclic allocation of msg_id to avoid reuse" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228500" id="1228500" title="VUL-0: CVE-2024-42138: kernel: mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228501" id="1228501" title="VUL-0: CVE-2024-42110: kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228502" id="1228502" title="VUL-0: CVE-2024-42141: kernel: Bluetooth: ISO: Check socket flag instead of hcon" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228503" id="1228503" title="VUL-0: CVE-2024-42139: kernel: ice: Fix improper extts handling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228505" id="1228505" title="VUL-0: CVE-2024-42109: kernel: netfilter: nf_tables: unconditionally flush pending work before notifier" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228508" id="1228508" title="VUL-0: CVE-2024-41037: kernel: ASoC: SOF: Intel: hda: fix null deref on system suspend entry" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228509" id="1228509" title="VUL-0: CVE-2024-41038: kernel: firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228510" id="1228510" title="VUL-0: CVE-2024-42153: kernel: i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228511" id="1228511" title="VUL-0: CVE-2024-42133: kernel: Bluetooth: Ignore too large handle values in BIG" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228513" id="1228513" title="VUL-0: CVE-2024-41097: kernel: usb: atm: cxacru: fix endpoint checking in cxacru_bind()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228515" id="1228515" title="VUL-0: CVE-2024-41039: kernel: firmware: cs_dsp: Fix overflow checking of wmfw header" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228516" id="1228516" title="VUL-0: CVE-2024-42077: kernel: ocfs2: fix DIO failure due to insufficient transaction credits" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228518" id="1228518" title="VUL-0: CVE-2024-41040: kernel: net/sched: Fix UAF when resolving a clash" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228520" id="1228520" title="VUL-0: CVE-2024-41041: kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228525" id="1228525" title="VUL-0: CVE-2024-41024: kernel: misc: fastrpc: restrict untrusted app to attach to privileged PD" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228527" id="1228527" title="VUL-0: CVE-2024-41025: kernel: misc: fastrpc: fix memory leak in audio daemon attach operation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228530" id="1228530" title="VUL-0: CVE-2024-41044: kernel: ppp: reject claimed-as-LCP but actually malformed packets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228531" id="1228531" title="VUL-0: CVE-2024-41045: kernel: bpf: Defer work in bpf_timer_cancel_and_free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228539" id="1228539" title="VUL-0: CVE-2024-41028: kernel: platform/x86: toshiba_acpi: fix array out-of-bounds access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228561" id="1228561" title="VUL-0: CVE-2024-41059: kernel: hfsplus: fix uninit-value in copy_name" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228563" id="1228563" title="VUL-0: CVE-2024-42137: kernel: Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228564" id="1228564" title="VUL-0: CVE-2024-42114: kernel: wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228565" id="1228565" title="VUL-0: CVE-2024-41048: kernel: skmsg: Skip zero length skb in sk_msg_recvmsg" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228567" id="1228567" title="VUL-0: CVE-2024-41060: kernel: drm/radeon: check bo_va-&gt;bo is non-NULL before using it" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228568" id="1228568" title="VUL-0: CVE-2024-42113: kernel: net: txgbe: initialize num_q_vectors for MSI/INTx interrupts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228572" id="1228572" title="VUL-0: CVE-2024-41061: kernel: drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228576" id="1228576" title="VUL-0: CVE-2024-41062: kernel: bluetooth/l2cap: sync sock recv cb and release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228579" id="1228579" title="VUL-0: CVE-2024-41068: kernel: s390/sclp: Fix sclp_init() cleanup on failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228580" id="1228580" title="VUL-0: CVE-2024-41063: kernel: bluetooth: hci_core: cancel all works upon hci_unregister_dev()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228581" id="1228581" title="VUL-0: CVE-2024-41070: kernel: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228582" id="1228582" title="VUL-0: CVE-2024-42117: kernel: drm/amd/display: ASSERT when failing to find index by plane/stream id" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228584" id="1228584" title="VUL-0: CVE-2024-42119: kernel: drm/amd/display: Skip finding free audio for unknown engine_id" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228586" id="1228586" title="VUL-0: CVE-2024-42064: kernel: drm/amd/display: Skip pipe if the pipe idx not set properly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228588" id="1228588" title="VUL-0: CVE-2024-42120: kernel: drm/amd/display: Check pipe offset before setting vblank" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228590" id="1228590" title="VUL-0: CVE-2024-42121: kernel: drm/amd/display: Check index msg_id before read or write" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228591" id="1228591" title="VUL-0: CVE-2024-42122: kernel: drm/amd/display: Add NULL pointer check for kzalloc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228599" id="1228599" title="VUL-0: CVE-2024-41064: kernel: powerpc/eeh: avoid possible crash when edev-&gt;pdev changes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228615" id="1228615" title="VUL-0: CVE-2024-41079: kernel: nvmet: always initialize cqe.result" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228616" id="1228616" title="VUL-0: CVE-2024-41080: kernel: io_uring: fix possible deadlock in io_register_iowq_max_workers()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228617" id="1228617" title="VUL-0: CVE-2024-41081: kernel: ila: block BH in ila_output()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228625" id="1228625" title="VUL-0: CVE-2024-41071: kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228626" id="1228626" title="VUL-0: CVE-2024-41072: kernel: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228633" id="1228633" title="VUL-0: CVE-2024-42096: kernel: x86: stop playing stack games in profile_pc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228635" id="1228635" title="VUL-0: CVE-2024-41073: kernel: nvme: avoid double free special payload" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228636" id="1228636" title="VUL-0: CVE-2024-41065: kernel: powerpc/pseries: whitelist dtl slub object for copying to userspace" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228640" id="1228640" title="VUL-0: CVE-2024-41066: kernel: ibmvnic: add tx check to prevent skb leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228643" id="1228643" title="VUL-0: CVE-2024-41074: kernel: cachefiles: Set object to close if ondemand_id &lt; 0 in copen" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228644" id="1228644" title="VUL-0: CVE-2024-41069: kernel: ASoC: topology: fix references to freed memory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228646" id="1228646" title="VUL-0: CVE-2024-41075: kernel: cachefiles: add consistency check for copen/cread" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228649" id="1228649" title="VUL-0: CVE-2024-41076: kernel: NFSv4: Fix memory leak in nfs4_set_security_label" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228650" id="1228650" title="VUL-0: CVE-2024-42131: kernel: mm: avoid overflows in dirty throttling logic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228654" id="1228654" title="VUL-0: CVE-2024-42104: kernel: nilfs2: add missing check for inode numbers on directory entries" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228655" id="1228655" title="VUL-0: CVE-2024-41078: kernel: btrfs: qgroup: fix quota root leak after quota disable failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228656" id="1228656" title="VUL-0: CVE-2024-42115: kernel: jffs2: fix potential illegal address access in jffs2_free_inode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228658" id="1228658" title="VUL-0: CVE-2024-41089: kernel: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228660" id="1228660" title="VUL-0: CVE-2024-41093: kernel: drm/amdgpu: avoid using null object of framebuffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228662" id="1228662" title="VUL-0: CVE-2024-41095: kernel: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228665" id="1228665" title="VUL-0: CVE-2024-42105: kernel: nilfs2: fix inode number range checks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228666" id="1228666" title="VUL-0: CVE-2024-42144: kernel: thermal/drivers/mediatek/lvts_thermal: check NULL ptr on lvts_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228667" id="1228667" title="VUL-0: CVE-2024-42228: kernel: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228672" id="1228672" title="VUL-0: CVE-2024-42079: kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228673" id="1228673" title="VUL-0: CVE-2024-42080: kernel: RDMA/restrack: Fix potential invalid address access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228674" id="1228674" title="VUL-0: CVE-2024-42125: kernel: wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228677" id="1228677" title="VUL-0: CVE-2024-42087: kernel: drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228680" id="1228680" title="VUL-0: CVE-2024-42093: kernel: net/dpaa2: Avoid explicit cpumask var allocation on stack" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228687" id="1228687" title="VUL-0: CVE-2024-42130: kernel: nfc/nci: add the inconsistency check between the input data length and count" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228705" id="1228705" title="VUL-0: CVE-2024-42124: kernel: scsi: qedf: Make qedf_execute_tmf() non-preemptible" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228706" id="1228706" title="VUL-0: CVE-2024-42162: kernel: gve: Account for stopped queues when reading NIC stats" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228707" id="1228707" title="VUL-0: CVE-2024-42227: kernel: drm/amd/display: Fix overlapping copy within dml_core_mode_programming" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228708" id="1228708" title="VUL-0: CVE-2024-42229: kernel: crypto: aead,cipher - zeroize key buffer after use" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228709" id="1228709" title="VUL-0: CVE-2024-42226: kernel: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228710" id="1228710" title="VUL-0: CVE-2024-42225: kernel: wifi: mt76: replace skb_put with skb_put_zero" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228718" id="1228718" title="VUL-0: CVE-2024-42126: kernel: powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228720" id="1228720" title="VUL-0: CVE-2024-42158: kernel: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228721" id="1228721" title="VUL-0: CVE-2024-42127: kernel: drm/lima: fix shared irq handling on driver remove" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228722" id="1228722" title="VUL-0: CVE-2024-42156: kernel: s390/pkey: Wipe copies of clear-key structures on failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228723" id="1228723" title="VUL-0: CVE-2024-42224: kernel: net: dsa: mv88e6xxx: Correct check for empty list" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228724" id="1228724" title="VUL-0: CVE-2024-42152: kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228726" id="1228726" title="VUL-0: CVE-2024-42223: kernel: media: dvb-frontends: tda10048: Fix integer overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228727" id="1228727" title="VUL-0: CVE-2024-42157: kernel: s390/pkey: Wipe sensitive data on failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228733" id="1228733" title="VUL-0: CVE-2024-42155: kernel: s390/pkey: wipe copies of protected- and secure-keys" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228737" id="1228737" title="L3: system reboot creating VFs with ICE Driver" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228743" id="1228743" title="VUL-0: CVE-2024-42145: kernel: IB/core: implement a limit on UMAD receive List" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228748" id="1228748" title="VUL-0: REJECTED: CVE-2024-42143: kernel: orangefs: fix out-of-bounds fsid access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228754" id="1228754" title="VUL-0: CVE-2024-42159: kernel: scsi: mpi3mr: sanitise num_phys" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228756" id="1228756" title="VUL-0: CVE-2024-42161: kernel: bpf: avoid uninitialized value in BPF_CORE_READ_BITFIELD" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228757" id="1228757" title="SLES 15 SP6 -  tcp_mem overflows causing side effects such as ssh daemon hang" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228758" id="1228758" title="VUL-0: CVE-2024-42136: kernel: cdrom: rearrange last_media_change check to avoid unintentional overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228764" id="1228764" title="VUL-0: CVE-2024-42147: kernel: crypto: hisilicon/debugfs - fix debugfs uninit process issue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228766" id="1228766" title="VUL-0: CVE-2024-42097: kernel: ALSA: emux: improve patch ioctl data validation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228779" id="1228779" title="VUL-0: CVE-2024-42098: kernel: crypto: ecdh - explicitly zeroize private_key" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228801" id="1228801" title="cgroup/cpuset: Prevent UAF in proc_cpuset_show()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228849" id="1228849" title="[SELinux] various AVC denials related to libvirt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228850" id="1228850" title="qla2xxx: update driver to 10.02.09.300-k" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228857" id="1228857" title="Update Broadcom Emulex lpfc driver to 14.4.0.3" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228959" id="1228959" title="VUL-0: CVE-2024-42232: kernel: libceph: fix race between delayed_work() and ceph_monc_stop()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228964" id="1228964" title="VUL-0: CVE-2024-42236: kernel: usb: gadget: configfs: prevent OOB read/write in usb_string_copy()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228966" id="1228966" title="VUL-0: CVE-2024-42240: kernel: x86/bhi: avoid warning in #DB handler due to BHI mitigation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228967" id="1228967" title="VUL-0: CVE-2024-42244: kernel: USB: serial: mos7840: fix crash on resume" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228973" id="1228973" title="SLES 15 SP6 - net/iucv: fix use after free in iucv_sock_close()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228977" id="1228977" title="VUL-0: CVE-2024-42250: kernel: cachefiles: add missing lock protection when polling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228978" id="1228978" title="VUL-0: CVE-2024-42245: kernel: Revert &quot;sched/fair: Make sure to try to detach at least one movable task&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228979" id="1228979" title="VUL-0: CVE-2024-42239: kernel: bpf: Fail bpf_timer_cancel when callback is being cancelled" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228986" id="1228986" title="VUL-0: CVE-2024-42241: kernel: mm/shmem: disable PMD-sized page cache if needed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228988" id="1228988" title="VUL-0: CVE-2024-42247: kernel: wireguard: allowedips: avoid unaligned 64-bit memory accesses" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228989" id="1228989" title="VUL-0: CVE-2024-42246: kernel: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228991" id="1228991" title="VUL-0: CVE-2024-42238: kernel: firmware: cs_dsp: Return error if block header overflows file" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228992" id="1228992" title="VUL-0: CVE-2024-42237: kernel: firmware: cs_dsp: Validate payload length before processing block" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229005" id="1229005" title="VUL-0: CVE-2024-42253: kernel: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229024" id="1229024" title="update minmax implementation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229042" id="1229042" title="Enable kernel-default-livepatch-devel for TW since it's already enabled on Leap" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229045" id="1229045" title="Sound device not working with kernel 6.4.0-150600.23.17-default" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229046" id="1229046" title="intel sound card not detected after update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229054" id="1229054" title="Error probing device: Error sending ATA command IDENTIFY DEVICE to..." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229056" id="1229056" title="after upgrade to Leap 15.6 suspend/resume kills touchpad" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229086" id="1229086" title="mana: Fix RX buf alloc_size alignment and atomic op panic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229134" id="1229134" title="kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to  strscpy()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229136" id="1229136" title="L3: SLES 15 SP5 kernel soft lockup with timer thread [ ref:_00D1igLOd._500TrFqLno:ref ]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229154" id="1229154" title="mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229156" id="1229156" title="VUL-0: CVE-2024-42259: kernel: drm/i915/gem: fix Virtual Memory mapping boundaries calculation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229160" id="1229160" title="fstests generic/754 fails on xfs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229167" id="1229167" title="KVM: s390: fix validity interception issue when gisa is switched off" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229168" id="1229168" title="kvm: s390: Reject memory region operations for ucontrol VMs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229169" id="1229169" title="s390/sclp: Prevent release of buffer in I/O" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229170" id="1229170" title="s390/uv: Panic for set and remove shared access UVC errors" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229171" id="1229171" title="s390/cpum_cf: Fix endless loop in CF_DIAG event stop" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229172" id="1229172" title="s390/pci: Allow allocation of more than 1 MSI interrupt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229173" id="1229173" title="s390/dasd: fix error checks in dasd_copy_pair_store()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229174" id="1229174" title="s390/pci: Add missing virt_to_phys() for directed DIBV" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229239" id="1229239" title="cachefiles: introduce object ondemand state" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229240" id="1229240" title="cachefiles: extract ondemand info field from cachefiles_object" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229241" id="1229241" title="cachefiles: resend an open request if the read request's object is  closed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229243" id="1229243" title="cachefiles: narrow the scope of triggering EPOLLIN events in ondemand  mode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229244" id="1229244" title="cachefiles: add restore command to recover inflight ondemand read  requests" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229245" id="1229245" title="cachefiles, erofs: Fix NULL deref in when cachefiles is not doing  ondemand-mode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229246" id="1229246" title="cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229247" id="1229247" title="cachefiles: fix slab-use-after-free in  cachefiles_ondemand_daemon_read()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229248" id="1229248" title="cachefiles: remove err_put_fd label in  cachefiles_ondemand_daemon_read()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229249" id="1229249" title="cachefiles: add spin_lock for cachefiles_ondemand_info" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229250" id="1229250" title="cachefiles: never get a new anonymous fd if ondemand_id is valid" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229251" id="1229251" title="cachefiles: defer exposing anon_fd until after copy_to_user()  succeeds" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229252" id="1229252" title="cachefiles: make on-demand read killable" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229253" id="1229253" title="cachefiles: propagate errors from vfs_getxattr() to avoid infinite  loop" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229254" id="1229254" title="cachefiles: stop sending new request when dropping object" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229255" id="1229255" title="cachefiles: cancel all requests for the object that is being dropped" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229256" id="1229256" title="cachefiles: add missing lock protection when polling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229287" id="1229287" title="VUL-0: CVE-2023-52889: kernel: apparmor: Fix null pointer deref when receiving skb during sock creation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229290" id="1229290" title="VUL-0: CVE-2024-43819: kernel: kvm: s390: Reject memory region operations for ucontrol VMs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229291" id="1229291" title="VUL-0: CVE-2024-43847: kernel: wifi: ath12k: fix invalid memory access while processing fragmented packets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229292" id="1229292" title="VUL-0: CVE-2024-43853: kernel: cgroup/cpuset: Prevent UAF in proc_cpuset_show()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229294" id="1229294" title="VUL-0: CVE-2024-43826: kernel: nfs: pass explicit offset/count to trace events" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229296" id="1229296" title="VUL-0: CVE-2024-43818: kernel: ASoC: amd: Adjust error handling in case of absent codec device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229297" id="1229297" title="VUL-0: CVE-2024-43837: kernel: bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229298" id="1229298" title="VUL-0: CVE-2024-43825: kernel: iio: Fix the sorting functionality in iio_gts_build_avail_time_table" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229299" id="1229299" title="VUL-0: CVE-2024-43833: kernel: media: v4l: async: Fix NULL pointer dereference in adding ancillary links" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229301" id="1229301" title="VUL-0: CVE-2024-43839: kernel: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229303" id="1229303" title="VUL-0: CVE-2024-43823: kernel: PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229304" id="1229304" title="VUL-0: CVE-2024-43841: kernel: wifi: virt_wifi: avoid reporting connection success with wrong SSID" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229305" id="1229305" title="VUL-0: CVE-2024-43830: kernel: leds: trigger: Unregister sysfs attributes before calling deactivate()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229307" id="1229307" title="VUL-0: CVE-2024-43849: kernel: soc: qcom: pdr: protect locator_addr with the main mutex" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229309" id="1229309" title="VUL-0: CVE-2024-43831: kernel: media: mediatek: vcodec: Handle invalid decoder vsi" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229312" id="1229312" title="VUL-0: CVE-2024-43817: kernel: net: missing check virtio" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229313" id="1229313" title="VUL-0: CVE-2024-43851: kernel: soc: xilinx: rename cpu_number1 to dummy_cpu_number" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229314" id="1229314" title="VUL-0: CVE-2024-43834: kernel: xdp: fix invalid wait context of page_pool_destroy()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229315" id="1229315" title="VUL-0: CVE-2024-43821: kernel: scsi: lpfc: Fix a possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229316" id="1229316" title="VUL-0: CVE-2024-43850: kernel: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229317" id="1229317" title="VUL-0: CVE-2024-43842: kernel: wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229318" id="1229318" title="VUL-0: CVE-2024-43816: kernel: scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229319" id="1229319" title="VUL-0: CVE-2024-43860: kernel: remoteproc: imx_rproc: Skip over memory region when node value is NULL" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229320" id="1229320" title="VUL-0: CVE-2024-43824: kernel: PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229327" id="1229327" title="SLES15SP6 [P10 Denali] [ 6.4.0-150600.16-default] In shared/dedicated mode core(CPU), both online and offline, is not functioning as intended when considering various SMT modes." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229341" id="1229341" title="VUL-0: CVE-2024-43829: kernel: drm/qxl: Add check for drm_cvt_mode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229342" id="1229342" title="VUL-0: CVE-2024-43855: kernel: md: fix deadlock between mddev_suspend and flush bio" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229344" id="1229344" title="VUL-0: CVE-2024-43840: kernel: bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229345" id="1229345" title="VUL-0: CVE-2024-43854: kernel: block: initialize integrity buffer to zero before writing it to media" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229346" id="1229346" title="VUL-0: CVE-2024-43856: kernel: dma: fix call order in dmam_free_coherent" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229347" id="1229347" title="VUL-0: CVE-2024-42322: kernel: ipvs: properly dereference pe in ip_vs_add_service" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229349" id="1229349" title="VUL-0: CVE-2024-42320: kernel: s390/dasd: fix error checks in dasd_copy_pair_store()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229350" id="1229350" title="VUL-0: CVE-2024-42319: kernel: mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229351" id="1229351" title="VUL-0: CVE-2024-42318: kernel: landlock: Don't lose track of restrictions on cred_transfer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229353" id="1229353" title="VUL-0: CVE-2024-42316: kernel: mm/mglru: fix div-by-zero in vmpressure_calc_level()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229354" id="1229354" title="VUL-0: CVE-2024-42315: kernel: exfat: fix potential deadlock on __exfat_get_dentry_set" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229355" id="1229355" title="VUL-0: CVE-2024-42314: kernel: btrfs: fix extent map use-after-free when adding pages to compressed bio" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229356" id="1229356" title="VUL-0: CVE-2024-42313: kernel: media: venus: fix use after free in vdec_close" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229357" id="1229357" title="VUL-0: CVE-2024-42312: kernel: sysctl: always initialize i_uid/i_gid" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229358" id="1229358" title="VUL-0: CVE-2024-42310: kernel: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229359" id="1229359" title="VUL-0: CVE-2024-42309: kernel: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229360" id="1229360" title="VUL-0: CVE-2024-43846: kernel: lib: objagg: Fix general protection fault" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229365" id="1229365" title="VUL-0: CVE-2024-42303: kernel: media: imx-pxp: Fix ERR_PTR dereference in pxp_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229366" id="1229366" title="VUL-0: CVE-2024-42302: kernel: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229369" id="1229369" title="VUL-0: CVE-2024-42298: kernel: ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229370" id="1229370" title="VUL-0: CVE-2024-42295: kernel: nilfs2: handle inconsistent state in nilfs_btnode_create_block()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229373" id="1229373" title="VUL-0: CVE-2024-42292: kernel: kobject_uevent: Fix OOB access within zap_modalias_env()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229374" id="1229374" title="VUL-0: CVE-2024-42291: kernel: ice: Add a per-VF limit on number of FDIR filters" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229379" id="1229379" title="VUL-0: CVE-2024-42290: kernel: irqchip/imx-irqsteer: Handle runtime power management correctly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229381" id="1229381" title="VUL-0: CVE-2024-42285: kernel: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229382" id="1229382" title="VUL-0: CVE-2024-42284: kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229383" id="1229383" title="VUL-0: CVE-2024-42283: kernel: net: nexthop: Initialize all fields in dumped nexthops" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229386" id="1229386" title="VUL-0: CVE-2024-42281: kernel: bpf: Fix a segment issue when downgrading gso_size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229388" id="1229388" title="VUL-0: CVE-2024-42280: kernel: mISDN: Fix a use after free in hfcmulti_tx()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229390" id="1229390" title="VUL-0: CVE-2024-42279: kernel: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229391" id="1229391" title="VUL-0: CVE-2024-42268: kernel: net/mlx5: Fix missing lock on sync reset reload" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229392" id="1229392" title="VUL-0: CVE-2024-42287: kernel: scsi: qla2xxx: Complete command early within lock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229395" id="1229395" title="VUL-0: CVE-2024-42286: kernel: scsi: qla2xxx: validate nvme_local_port correctly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229398" id="1229398" title="VUL-0: CVE-2024-42288: kernel: scsi: qla2xxx: Fix for possible memory corruption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229399" id="1229399" title="VUL-0: CVE-2024-42289: kernel: scsi: qla2xxx: During vport delete send async logout explicitly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229400" id="1229400" title="VUL-0: CVE-2024-42271: kernel: net/iucv: fix use after free in iucv_sock_close()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229402" id="1229402" title="VUL-0: CVE-2024-42269: kernel: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229403" id="1229403" title="VUL-0: CVE-2024-42278: kernel: ASoC: TAS2781: fix tasdev_load_calibrated_data()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229404" id="1229404" title="VUL-0: CVE-2024-42270: kernel: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229407" id="1229407" title="VUL-0: CVE-2024-42301: kernel: dev/parport: fix the array out-of-bounds risk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229409" id="1229409" title="VUL-0: CVE-2024-42277: kernel: iommu: sprd: avoid NULL deref in sprd_iommu_hw_en" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229410" id="1229410" title="VUL-0: CVE-2024-42276: kernel: nvme-pci: add missing condition check for existence of mapped data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229411" id="1229411" title="VUL-0: CVE-2024-42308: kernel: drm/amd/display: Check for NULL pointer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229413" id="1229413" title="VUL-0: CVE-2024-42311: kernel: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229414" id="1229414" title="VUL-0: CVE-2024-43858: kernel: jfs: Fix array-index-out-of-bounds in diFree" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229417" id="1229417" title="VUL-0: CVE-2024-42274: kernel: revert &quot;ALSA: firewire-lib: operate for period elapse event in process context&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229444" id="1229444" title="L3: TCP segment out of order for IPv6 tunnel [ ref:_00D1igLOd._500TrGL7wX:ref ]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229451" id="1229451" title="net/iucv: fix the allocation size of iucv_path_table array" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229452" id="1229452" title="s390/dasd: fix error recovery leading to data corruption on ESE  devices" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229455" id="1229455" title="fs/netfs/fscache_cookie: add missing &quot;n_accesses&quot; check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229456" id="1229456" title="CVE-2024-44947: kernel: fuse: Initialize beyond-EOF page contents before setting uptodate" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229480" id="1229480" title="VUL-0: CVE-2024-43881: kernel: wifi: ath12k: change DMA direction while mapping reinjected packets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229481" id="1229481" title="VUL-0: CVE-2024-43880: kernel: mlxsw: spectrum_acl_erp: Fix object nesting warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229482" id="1229482" title="VUL-0: CVE-2024-43879: kernel: wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229484" id="1229484" title="VUL-0: CVE-2024-43877: kernel: media: pci: ivtv: Add check for DMA map result" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229485" id="1229485" title="VUL-0: CVE-2024-43876: kernel: PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229486" id="1229486" title="VUL-0: CVE-2024-43875: kernel: PCI: endpoint: Clean up error handling in vpci_scan_bus()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229487" id="1229487" title="VUL-0: CVE-2024-43874: kernel: crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229488" id="1229488" title="VUL-0: CVE-2024-43873: kernel: vhost/vsock: always initialize seqpacket_allow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229489" id="1229489" title="VUL-0: CVE-2024-43872: kernel: RDMA/hns: Fix soft lockup under heavy CEQE load" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229490" id="1229490" title="VUL-0: CVE-2024-43871: kernel: devres: Fix memory leakage caused by driver API devm_free_percpu()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229493" id="1229493" title="VUL-0: CVE-2024-43867: kernel: drm/nouveau: prime: fix refcount underflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229495" id="1229495" title="VUL-0: CVE-2024-43866: kernel: net/mlx5: Always drain health in shutdown callback" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229496" id="1229496" title="VUL-0: CVE-2024-43864: kernel: net/mlx5e: Fix CT entry update leaks of modify header context" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229497" id="1229497" title="VUL-0: CVE-2024-43863: kernel: drm/vmwgfx: Fix a deadlock in dma buf fence polling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229500" id="1229500" title="VUL-0: CVE-2024-43861: kernel: net: usb: qmi_wwan: fix memory leak for not ip packets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229503" id="1229503" title="VUL-0: CVE-2024-43882: kernel: exec: Fix ToCToU between perm check and set-uid/gid usage" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229707" id="1229707" title="VUL-0: CVE-2024-43883: kernel: usb: vhci-hcd: do not drop references before new references are gained" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229739" id="1229739" title="VUL-0: CVE-2024-43884: kernel: Bluetooth: MGMT: add error handling to pair_device()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229743" id="1229743" title="VUL-0: CVE-2024-43889: kernel: padata: fix possible divide-by-0 panic in padata_mt_helper()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229746" id="1229746" title="VUL-0: CVE-2024-43894: kernel: drm/client: fix null pointer dereference in drm_client_modeset_probe" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229747" id="1229747" title="VUL-0: CVE-2024-43885: kernel: btrfs: fix double inode unlock for direct IO sync writes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229752" id="1229752" title="VUL-0: CVE-2024-43897: kernel: net: drop bad gso csum_start and offset in virtio_net_hdr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229754" id="1229754" title="VUL-0: CVE-2024-43899: kernel: drm/amd/display: Fix null pointer deref in dcn20_resource.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229755" id="1229755" title="VUL-0: CVE-2024-43895: kernel: drm/amd/display: skip recompute dsc params if no stream on link" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229756" id="1229756" title="VUL-0: CVE-2024-43900: kernel: media: xc2028: avoid use-after-free in load_firmware_cb()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229759" id="1229759" title="VUL-0: CVE-2024-43893: kernel: serial: core: check uartclk for zero to avoid divide by zero" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229761" id="1229761" title="VUL-0: CVE-2024-43892: kernel: memcg: protect concurrent access to mem_cgroup_idr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229767" id="1229767" title="VUL-0: CVE-2024-43902: kernel: drm/amd/display: add null checker before passing variables" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229781" id="1229781" title="VUL-0: CVE-2024-43903: kernel: drm/amd/display: add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229784" id="1229784" title="VUL-0: CVE-2024-43905: kernel: drm/amd/pm: fix the null pointer dereference for vega10_hwmgr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229785" id="1229785" title="VUL-0: CVE-2024-43906: kernel: drm/admgpu: fix dereferencing null pointer context" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229787" id="1229787" title="VUL-0: CVE-2024-43907: kernel: drm/amdgpu/pm: fix the null pointer dereference in apply_state_adjust_rules" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229788" id="1229788" title="VUL-0: CVE-2024-43908: kernel: drm/amdgpu: fix the null pointer dereference to ras_manager" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229789" id="1229789" title="VUL-0: CVE-2024-43909: kernel: drm/amdgpu/pm: fix the null pointer dereference for smu7" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229792" id="1229792" title="VUL-0: CVE-2024-44938: kernel: jfs: fix shift-out-of-bounds in dbDiscardAG" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229820" id="1229820" title="VUL-0: CVE-2024-44939: kernel: jfs: fix null ptr deref in dtInsertEntry" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229827" id="1229827" title="VUL-0: CVE-2024-43911: kernel: wifi: mac80211: fix NULL dereference at band check in starting tx ba session" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229830" id="1229830" title="VUL-0: CVE-2024-43912: kernel: wifi: nl80211: disallow setting special AP channel widths" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229837" id="1229837" title="VUL-0: CVE-2024-44931: kernel: gpio: prevent potential speculation leaks in gpio_device_get_desc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229940" id="1229940" title="virtiofs: forbid newlines in tags" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230056" id="1230056" title="ceph: periodically flush the cap releases" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35902" id="CVE-2024-35902" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35902" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42278" id="CVE-2024-42278" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42278" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43818" id="CVE-2024-43818" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43818" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42298" id="CVE-2024-42298" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42298" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43884" id="CVE-2024-43884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43884" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26976" id="CVE-2024-26976" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26976" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42302" id="CVE-2024-42302" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42302" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43875" id="CVE-2024-43875" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43875" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43824" id="CVE-2024-43824" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43824" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43823" id="CVE-2024-43823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43823" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43876" id="CVE-2024-43876" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43876" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43872" id="CVE-2024-43872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43872" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42285" id="CVE-2024-42285" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42285" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42274" id="CVE-2024-42274" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42274" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36907" id="CVE-2024-36907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36907" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43840" id="CVE-2024-43840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43840" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43885" id="CVE-2024-43885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43885" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42314" id="CVE-2024-42314" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42314" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43853" id="CVE-2024-43853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43853" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43874" id="CVE-2024-43874" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43874" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43871" id="CVE-2024-43871" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43871" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43856" id="CVE-2024-43856" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43856" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43906" id="CVE-2024-43906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43906" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43903" id="CVE-2024-43903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43903" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43902" id="CVE-2024-43902" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43902" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43895" id="CVE-2024-43895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43895" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43905" id="CVE-2024-43905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43905" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43908" id="CVE-2024-43908" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43908" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43909" id="CVE-2024-43909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43909" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43907" id="CVE-2024-43907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43907" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43894" id="CVE-2024-43894" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43894" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42310" id="CVE-2024-42310" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42310" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42309" id="CVE-2024-42309" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42309" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43867" id="CVE-2024-43867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43867" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43829" id="CVE-2024-43829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43829" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43863" id="CVE-2024-43863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43863" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42315" id="CVE-2024-42315" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42315" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44931" id="CVE-2024-44931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44931" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42311" id="CVE-2024-42311" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42311" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43825" id="CVE-2024-43825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43825" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43858" id="CVE-2024-43858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43858" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44938" id="CVE-2024-44938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44938" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44939" id="CVE-2024-44939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44939" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42292" id="CVE-2024-42292" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42292" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43819" id="CVE-2024-43819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43819" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43830" id="CVE-2024-43830" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43830" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43846" id="CVE-2024-43846" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43846" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27050" id="CVE-2024-27050" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27050" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42280" id="CVE-2024-42280" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42280" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42319" id="CVE-2024-42319" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42319" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39476" id="CVE-2024-39476" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39476" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42303" id="CVE-2024-42303" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42303" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43877" id="CVE-2024-43877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43877" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43833" id="CVE-2024-43833" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43833" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42313" id="CVE-2024-42313" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42313" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43900" id="CVE-2024-43900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43900" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43892" id="CVE-2024-43892" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43892" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43897" id="CVE-2024-43897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43897" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42271" id="CVE-2024-42271" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42271" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43817" id="CVE-2024-43817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43817" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43861" id="CVE-2024-43861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43861" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43826" id="CVE-2024-43826" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43826" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42276" id="CVE-2024-42276" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42276" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43889" id="CVE-2024-43889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43889" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43860" id="CVE-2024-43860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43860" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42320" id="CVE-2024-42320" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42320" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43816" id="CVE-2024-43816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43816" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42287" id="CVE-2024-42287" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42287" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42289" id="CVE-2024-42289" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42289" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42288" id="CVE-2024-42288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42288" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42286" id="CVE-2024-42286" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42286" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43893" id="CVE-2024-43893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43893" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43849" id="CVE-2024-43849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43849" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43851" id="CVE-2024-43851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43851" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42279" id="CVE-2024-42279" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42279" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43883" id="CVE-2024-43883" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43883" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43873" id="CVE-2024-43873" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43873" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43881" id="CVE-2024-43881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43881" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43847" id="CVE-2024-43847" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43847" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43879" id="CVE-2024-43879" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43879" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43912" id="CVE-2024-43912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43912" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43842" id="CVE-2024-43842" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43842" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43841" id="CVE-2024-43841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43841" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26849" id="CVE-2024-26849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26849" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41087" id="CVE-2024-41087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41087" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42250" id="CVE-2024-42250" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42250" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40913" id="CVE-2024-40913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40913" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39510" id="CVE-2024-39510" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39510" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40899" id="CVE-2024-40899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40899" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42259" id="CVE-2024-42259" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42259" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41065" id="CVE-2024-41065" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41065" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42097" id="CVE-2024-42097" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42097" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41037" id="CVE-2024-41037" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41037" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42074" id="CVE-2024-42074" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42074" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42089" id="CVE-2024-42089" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42089" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42141" id="CVE-2024-42141" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42141" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42133" id="CVE-2024-42133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42133" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41063" id="CVE-2024-41063" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41063" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42137" id="CVE-2024-42137" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42137" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41096" id="CVE-2024-41096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41096" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42080" id="CVE-2024-42080" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42080" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41035" id="CVE-2024-41035" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41035" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42244" id="CVE-2024-42244" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42244" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41098" id="CVE-2024-41098" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41098" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42132" id="CVE-2024-42132" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42132" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41045" id="CVE-2024-41045" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41045" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42239" id="CVE-2024-42239" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42239" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41088" id="CVE-2024-41088" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41088" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42136" id="CVE-2024-42136" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42136" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42229" id="CVE-2024-42229" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42229" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42098" id="CVE-2024-42098" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42098" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42117" id="CVE-2024-42117" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42117" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42121" id="CVE-2024-42121" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42121" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42120" id="CVE-2024-42120" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42120" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41061" id="CVE-2024-41061" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41061" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42227" id="CVE-2024-42227" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42227" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42119" id="CVE-2024-42119" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42119" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42064" id="CVE-2024-42064" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42064" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41022" id="CVE-2024-41022" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41022" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42228" id="CVE-2024-42228" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42228" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41093" id="CVE-2024-41093" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41093" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41094" id="CVE-2024-41094" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41094" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41092" id="CVE-2024-41092" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41092" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42127" id="CVE-2024-42127" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42127" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41095" id="CVE-2024-41095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41095" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41089" id="CVE-2024-41089" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41089" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42101" id="CVE-2024-42101" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42101" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42087" id="CVE-2024-42087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42087" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41060" id="CVE-2024-41060" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41060" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41049" id="CVE-2024-41049" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41049" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41039" id="CVE-2024-41039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41039" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41038" id="CVE-2024-41038" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41038" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42238" id="CVE-2024-42238" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42238" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41056" id="CVE-2024-41056" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41056" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42237" id="CVE-2024-42237" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42237" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31076" id="CVE-2024-31076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31076" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42092" id="CVE-2024-42092" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42092" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42253" id="CVE-2024-42253" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42253" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42153" id="CVE-2024-42153" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42153" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42086" id="CVE-2024-42086" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42086" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42115" id="CVE-2024-42115" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42115" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42232" id="CVE-2024-42232" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42232" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42223" id="CVE-2024-42223" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42223" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41025" id="CVE-2024-41025" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41025" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41024" id="CVE-2024-41024" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41024" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42131" id="CVE-2024-42131" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42131" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42069" id="CVE-2024-42069" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42069" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42076" id="CVE-2024-42076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42076" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52887" id="CVE-2023-52887" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52887" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42130" id="CVE-2024-42130" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42130" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42104" id="CVE-2024-42104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42104" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41073" id="CVE-2024-41073" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41073" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41079" id="CVE-2024-41079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41079" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42152" id="CVE-2024-42152" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42152" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42077" id="CVE-2024-42077" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42077" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41016" id="CVE-2024-41016" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41016" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42143" id="CVE-2024-42143" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42143" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42090" id="CVE-2024-42090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42090" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41028" id="CVE-2024-41028" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41028" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42126" id="CVE-2024-42126" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42126" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42230" id="CVE-2024-42230" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42230" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42144" id="CVE-2024-42144" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42144" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41097" id="CVE-2024-41097" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41097" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42085" id="CVE-2024-42085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42085" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42236" id="CVE-2024-42236" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42236" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42226" id="CVE-2024-42226" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42226" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42114" id="CVE-2024-42114" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42114" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41072" id="CVE-2024-41072" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41072" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41071" id="CVE-2024-41071" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41071" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42225" id="CVE-2024-42225" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42225" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42125" id="CVE-2024-42125" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42125" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42240" id="CVE-2024-42240" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42240" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42147" id="CVE-2024-42147" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42147" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35855" id="CVE-2024-35855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35855" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40984" id="CVE-2024-40984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40984" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40964" id="CVE-2024-40964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40964" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39491" id="CVE-2024-39491" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39491" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39509" id="CVE-2024-39509" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39509" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40934" id="CVE-2024-40934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40934" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39483" id="CVE-2024-39483" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39483" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40990" id="CVE-2024-40990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40990" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40992" id="CVE-2024-40992" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40992" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36288" id="CVE-2024-36288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36288" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40904" id="CVE-2024-40904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40904" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39488" id="CVE-2024-39488" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39488" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40910" id="CVE-2024-40910" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40910" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40981" id="CVE-2024-40981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40981" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40962" id="CVE-2024-40962" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40962" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40900" id="CVE-2024-40900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40900" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40997" id="CVE-2024-40997" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40997" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41002" id="CVE-2024-41002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41002" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39493" id="CVE-2024-39493" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39493" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40936" id="CVE-2024-40936" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40936" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39501" id="CVE-2024-39501" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39501" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40987" id="CVE-2024-40987" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40987" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39486" id="CVE-2024-39486" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39486" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40916" id="CVE-2024-40916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40916" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40932" id="CVE-2024-40932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40932" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40924" id="CVE-2024-40924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40924" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39505" id="CVE-2024-39505" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39505" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40976" id="CVE-2024-40976" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40976" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40926" id="CVE-2024-40926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40926" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40988" id="CVE-2024-40988" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40988" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39497" id="CVE-2024-39497" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39497" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39508" id="CVE-2024-39508" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39508" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40922" id="CVE-2024-40922" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40922" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41001" id="CVE-2024-41001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41001" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40945" id="CVE-2024-40945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40945" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40902" id="CVE-2024-40902" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40902" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39484" id="CVE-2024-39484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39484" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36939" id="CVE-2024-36939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36939" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40943" id="CVE-2024-40943" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40943" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40967" id="CVE-2024-40967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40967" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39500" id="CVE-2024-39500" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39500" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40982" id="CVE-2024-40982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40982" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41004" id="CVE-2024-41004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41004" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40903" id="CVE-2024-40903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40903" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39499" id="CVE-2024-39499" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39499" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26637" id="CVE-2024-26637" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26637" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40911" id="CVE-2024-40911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40911" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26683" id="CVE-2024-26683" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26683" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40930" id="CVE-2024-40930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40930" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36970" id="CVE-2024-36970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36970" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40929" id="CVE-2024-40929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40929" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40941" id="CVE-2024-40941" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40941" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35913" id="CVE-2024-35913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35913" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40912" id="CVE-2024-40912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40912" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26682" id="CVE-2024-26682" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26682" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40942" id="CVE-2024-40942" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40942" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38609" id="CVE-2024-38609" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38609" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40977" id="CVE-2024-40977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40977" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27049" id="CVE-2024-27049" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27049" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38563" id="CVE-2024-38563" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38563" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40944" id="CVE-2024-40944" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40944" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40927" id="CVE-2024-40927" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40927" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52885" id="CVE-2023-52885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52885" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52886" id="CVE-2023-52886" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52886" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52668" id="CVE-2023-52668" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52668" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52688" id="CVE-2023-52688" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52688" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42105" id="CVE-2024-42105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42105" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41059" id="CVE-2024-41059" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41059" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41062" id="CVE-2024-41062" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41062" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52489" id="CVE-2023-52489" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52489" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43821" id="CVE-2024-43821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43821" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43911" id="CVE-2024-43911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43911" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42277" id="CVE-2024-42277" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42277" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43880" id="CVE-2024-43880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43880" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43899" id="CVE-2024-43899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43899" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43882" id="CVE-2024-43882" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43882" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43866" id="CVE-2024-43866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43866" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26812" id="CVE-2024-26812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26812" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27010" id="CVE-2024-27010" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27010" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36270" id="CVE-2024-36270" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36270" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36881" id="CVE-2024-36881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36881" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42316" id="CVE-2024-42316" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42316" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43855" id="CVE-2024-43855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43855" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43864" id="CVE-2024-43864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43864" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26631" id="CVE-2024-26631" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26631" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42109" id="CVE-2024-42109" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42109" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41084" id="CVE-2024-41084" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41084" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40905" id="CVE-2024-40905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40905" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39489" id="CVE-2024-39489" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39489" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36489" id="CVE-2024-36489" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36489" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27079" id="CVE-2024-27079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27079" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41020" id="CVE-2024-41020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41020" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35897" id="CVE-2024-35897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35897" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27403" id="CVE-2024-27403" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27403" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27011" id="CVE-2024-27011" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27011" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26668" id="CVE-2024-26668" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26668" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26835" id="CVE-2024-26835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26835" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26808" id="CVE-2024-26808" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26808" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26809" id="CVE-2024-26809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26809" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52581" id="CVE-2023-52581" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52581" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43837" id="CVE-2024-43837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43837" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35939" id="CVE-2024-35939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35939" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42291" id="CVE-2024-42291" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42291" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42268" id="CVE-2024-42268" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42268" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43834" id="CVE-2024-43834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43834" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27433" id="CVE-2024-27433" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27433" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36286" id="CVE-2024-36286" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36286" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26851" id="CVE-2024-26851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26851" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40920" id="CVE-2024-40920" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40920" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40921" id="CVE-2024-40921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40921" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36979" id="CVE-2024-36979" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36979" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26590" id="CVE-2024-26590" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26590" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52859" id="CVE-2023-52859" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52859" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42270" id="CVE-2024-42270" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42270" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42269" id="CVE-2024-42269" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42269" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42284" id="CVE-2024-42284" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42284" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42283" id="CVE-2024-42283" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42283" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42312" id="CVE-2024-42312" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42312" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43854" id="CVE-2024-43854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43854" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42322" id="CVE-2024-42322" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42322" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42308" id="CVE-2024-42308" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42308" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42301" id="CVE-2024-42301" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42301" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42290" id="CVE-2024-42290" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42290" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42318" id="CVE-2024-42318" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42318" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52889" id="CVE-2023-52889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52889" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42295" id="CVE-2024-42295" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42295" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43850" id="CVE-2024-43850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43850" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43831" id="CVE-2024-43831" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43831" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43839" id="CVE-2024-43839" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43839" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41007" id="CVE-2024-41007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41007" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42281" id="CVE-2024-42281" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42281" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26669" id="CVE-2024-26669" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26669" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26677" id="CVE-2024-26677" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26677" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41050" id="CVE-2024-41050" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41050" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41051" id="CVE-2024-41051" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41051" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41074" id="CVE-2024-41074" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41074" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41075" id="CVE-2024-41075" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41075" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41012" id="CVE-2024-41012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41012" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41080" id="CVE-2024-41080" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41080" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42246" id="CVE-2024-42246" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42246" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42159" id="CVE-2024-42159" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42159" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42241" id="CVE-2024-42241" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42241" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42245" id="CVE-2024-42245" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42245" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26735" id="CVE-2024-26735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26735" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26837" id="CVE-2024-26837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26837" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42155" id="CVE-2024-42155" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42155" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42156" id="CVE-2024-42156" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42156" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42157" id="CVE-2024-42157" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42157" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42158" id="CVE-2024-42158" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42158" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38662" id="CVE-2024-38662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38662" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40938" id="CVE-2024-40938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40938" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42247" id="CVE-2024-42247" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42247" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41010" id="CVE-2024-41010" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41010" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42106" id="CVE-2024-42106" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42106" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42095" id="CVE-2024-42095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42095" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41068" id="CVE-2024-41068" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41068" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42138" id="CVE-2024-42138" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42138" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42107" id="CVE-2024-42107" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42107" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42139" id="CVE-2024-42139" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42139" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42110" id="CVE-2024-42110" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42110" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42113" id="CVE-2024-42113" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42113" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42148" id="CVE-2024-42148" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42148" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42142" id="CVE-2024-42142" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42142" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42073" id="CVE-2024-42073" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42073" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42162" id="CVE-2024-42162" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42162" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42082" id="CVE-2024-42082" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42082" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40978" id="CVE-2024-40978" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40978" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41000" id="CVE-2024-41000" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41000" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40995" id="CVE-2024-40995" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40995" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42161" id="CVE-2024-42161" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42161" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41069" id="CVE-2024-41069" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41069" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39506" id="CVE-2024-39506" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39506" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42145" id="CVE-2024-42145" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42145" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40994" id="CVE-2024-40994" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40994" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42124" id="CVE-2024-42124" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42124" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42096" id="CVE-2024-42096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42096" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42224" id="CVE-2024-42224" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42224" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41048" id="CVE-2024-41048" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41048" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40958" id="CVE-2024-40958" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40958" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40939" id="CVE-2024-40939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40939" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36933" id="CVE-2024-36933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36933" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36929" id="CVE-2024-36929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36929" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41044" id="CVE-2024-41044" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41044" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41066" id="CVE-2024-41066" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41066" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42093" id="CVE-2024-42093" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42093" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42122" id="CVE-2024-42122" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42122" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41078" id="CVE-2024-41078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41078" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40989" id="CVE-2024-40989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40989" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41064" id="CVE-2024-41064" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41064" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41036" id="CVE-2024-41036" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41036" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41040" id="CVE-2024-41040" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41040" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35949" id="CVE-2024-35949" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35949" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41081" id="CVE-2024-41081" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41081" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41076" id="CVE-2024-41076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41076" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42079" id="CVE-2024-42079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42079" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41057" id="CVE-2024-41057" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41057" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41058" id="CVE-2024-41058" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41058" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41015" id="CVE-2024-41015" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41015" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40956" id="CVE-2024-40956" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40956" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27437" id="CVE-2024-27437" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27437" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41032" id="CVE-2024-41032" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41032" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40957" id="CVE-2024-40957" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40957" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41041" id="CVE-2024-41041" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41041" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40954" id="CVE-2024-40954" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40954" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42070" id="CVE-2024-42070" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42070" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41070" id="CVE-2024-41070" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41070" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40959" id="CVE-2024-40959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40959" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41009" id="CVE-2024-41009" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41009" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40909" id="CVE-2024-40909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40909" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27024" id="CVE-2024-27024" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27024" type="cve" />
      <reference href="https://jira.suse.com/browse/PED-8491" id="PED-8491" title="https://jira.suse.com/browse/PED-8491" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8954" id="PED-8954" title="https://jira.suse.com/browse/PED-8954" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-10029" id="PED-10029" title="https://jira.suse.com/browse/PED-10029" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-10045" id="PED-10045" title="https://jira.suse.com/browse/PED-10045" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-10055" id="PED-10055" title="https://jira.suse.com/browse/PED-10055" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-10105" id="PED-10105" title="https://jira.suse.com/browse/PED-10105" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-10108" id="PED-10108" title="https://jira.suse.com/browse/PED-10108" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8779" id="PED-8779" title="https://jira.suse.com/browse/PED-8779" type="jira" />
    </references>
    <description>

The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.

This release includes the first live patch.

The following security bugs were fixed:

- CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section-&gt;usage (bsc#1221326).
- CVE-2023-52581: netfilter: nf_tables: fix memleak when more than 255 elements expired (bsc#1220877).
- CVE-2023-52859: perf: hisi: Fix use-after-free when register pmu fails (bsc#1225582).
- CVE-2023-52889: apparmor: Fix null pointer deref when receiving skb during sock creation (bsc#1229287,).
- CVE-2024-26590: erofs: fix inconsistent per-file compression format (bsc#1220252).
- CVE-2024-26631: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
- CVE-2024-26668: netfilter: nft_limit: reject configurations that cause integer overflow (bsc#1222335).
- CVE-2024-26669: kABI fix for net/sched: flower: Fix chain template offload (bsc#1222350).
- CVE-2024-26677: blacklist.conf: Add e7870cf13d20 ("rxrpc: Fix delayed ACKs to not set the reference serial number") (bsc#1222387)
- CVE-2024-26735: ipv6: sr: fix possible use-after-free and null-ptr-deref (bsc#1222372).
- CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
- CVE-2024-26809: netfilter: nft_set_pipapo: release elements in clone only from destroy path (bsc#1222633).
- CVE-2024-26812: kABI: vfio: struct virqfd kABI workaround (bsc#1222808).
- CVE-2024-26835: netfilter: nf_tables: set dormant flag on hook register failure (bsc#1222967).
- CVE-2024-26837: net: bridge: switchdev: Skip MDB replays of deferred events on offload (bsc#1222973).
- CVE-2024-26851: netfilter: nf_conntrack_h323: Add protection for bmp length out of range (bsc#1223074)
- CVE-2024-27010: net/sched: Fix mirred deadlock on device recursion (bsc#1223720).
- CVE-2024-27011: netfilter: nf_tables: fix memleak in map from abort path (bsc#1223803).
- CVE-2024-27024: net/rds: fix WARNING in rds_conn_connect_if_down (bsc#1223777).
- CVE-2024-27079: iommu/vt-d: Fix NULL domain on device release (bsc#1223742).
- CVE-2024-27403: kabi: restore const specifier in flow_offload_route_init() (bsc#1224415).
- CVE-2024-27433: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711).
- CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625).
- CVE-2024-35897: netfilter: nf_tables: discard table flag update with pending basechain deletion (bsc#1224510).
- CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
- CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
- CVE-2024-36286: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
- CVE-2024-36489: tls: fix missing memory barrier in tls_init (bsc#1226874)
- CVE-2024-36881: mm/userfaultfd: reset ptes when close() for wr-protected ones (bsc#1225718).
- CVE-2024-36929: net: core: reject skb_copy(_expand) for fraglist GSO skbs (bsc#1225814).
- CVE-2024-36933: net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (bsc#1225832).
- CVE-2024-36979: net: bridge: mst: fix vlan use-after-free syzbot reported a suspicious rcu usage[1] in bridge's mst code. (bsc#1226604).
- CVE-2024-38662: selftests/bpf: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885).
- CVE-2024-39489: ipv6: sr: fix memleak in seg6_hmac_init_algo (bsc#1227623)
- CVE-2024-39506: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729).
- CVE-2024-40905: ipv6: fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
- CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1227798).
- CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (bsc#1227781).
- CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784).
- CVE-2024-40938: landlock: fix d_parent walk (bsc#1227840).
- CVE-2024-40939: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (bsc#1227799).
- CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
- CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1227810).
- CVE-2024-40957: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (bsc#1227811).
- CVE-2024-40958: netns: Make get_net_ns() handle zero refcount net (bsc#1227812).
- CVE-2024-40959: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (bsc#1227884).
- CVE-2024-40978: scsi: qedi: Fix crash while reading debugfs attribute (bsc#1227929).
- CVE-2024-40989: KVM: arm64: Disassociate vcpus from redistributor region on teardown (bsc#1227823).
- CVE-2024-40994: ptp: fix integer overflow in max_vclocks_store (bsc#1227829).
- CVE-2024-40995: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (bsc#1227830).
- CVE-2024-41000: block/ioctl: prefer different overflow check (bsc#1227867).
- CVE-2024-41007: tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (bsc#1227863).
- CVE-2024-41009: bpf: Fix overrunning reservations in ringbuf (bsc#1228020).
- CVE-2024-41010: bpf: Fix too early release of tcx_entry (bsc#1228021).
- CVE-2024-41012: filelock: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
- CVE-2024-41015: ocfs2: add bounds checking to ocfs2_check_dir_entry() (bsc#1228409).
- CVE-2024-41020: filelock: Fix fcntl/close race recovery compat path (bsc#1228427).
- CVE-2024-41032: mm: vmalloc: check if a hash-index is in cpu_possible_mask (bsc#1228460).
- CVE-2024-41036: net: ks8851: Fix deadlock with the SPI chip variant (bsc#1228496).
- CVE-2024-41040: net/sched: Fix UAF when resolving a clash (bsc#1228518).
- CVE-2024-41041: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (bsc#1228520).
- CVE-2024-41044: ppp: reject claimed-as-LCP but actually malformed packets (bsc#1228530).
- CVE-2024-41048: skmsg: Skip zero length skb in sk_msg_recvmsg (bsc#1228565).
- CVE-2024-41050: cachefiles: cyclic allocation of msg_id to avoid reuse (bsc#1228499).
- CVE-2024-41051: cachefiles: wait for ondemand_object_worker to finish when dropping object (bsc#1228468).
- CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1228462).
- CVE-2024-41058: cachefiles: fix slab-use-after-free in fscache_withdraw_volume() (bsc#1228459).
- CVE-2024-41062: bluetooth/l2cap: sync sock recv cb and release (bsc#1228576).
- CVE-2024-41064: powerpc/eeh: avoid possible crash when edev-&gt;pdev changes (bsc#1228599).
- CVE-2024-41066: ibmvnic: add tx check to prevent skb leak (bsc#1228640).
- CVE-2024-41068: s390/sclp: Fix sclp_init() cleanup on failure (bsc#1228579).
- CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228644).
- CVE-2024-41070: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (bsc#1228581).
- CVE-2024-41074: cachefiles: Set object to close if ondemand_id &lt; 0 in copen (bsc#1228643).
- CVE-2024-41075: cachefiles: add consistency check for copen/cread (bsc#1228646).
- CVE-2024-41076: NFSv4: Fix memory leak in nfs4_set_security_label (bsc#1228649).
- CVE-2024-41078: btrfs: qgroup: fix quota root leak after quota disable failure (bsc#1228655).
- CVE-2024-41080: io_uring: fix possible deadlock in io_register_iowq_max_workers() (bsc#1228616).
- CVE-2024-41081: ila: block BH in ila_output() (bsc#1228617).
- CVE-2024-41084: cxl/region: Avoid null pointer dereference in region lookup (bsc#1228472).
- CVE-2024-42070: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (bsc#1228470).
- CVE-2024-42073: mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (bsc#1228457).
- CVE-2024-42079: gfs2: Fix NULL pointer dereference in gfs2_log_flush (bsc#1228672).
- CVE-2024-42082: xdp: Remove WARN() from __xdp_reg_mem_model() (bsc#1228482).
- CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680).
- CVE-2024-42095: serial: 8250_omap: Fix Errata i2310 with RX FIFO level check (bsc#1228446).
- CVE-2024-42096: x86: stop playing stack games in profile_pc() (bsc#1228633).
- CVE-2024-42106: inet_diag: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493).
- CVE-2024-42107: ice: Do not process extts if PTP is disabled (bsc#1228494).
- CVE-2024-42109: netfilter: nf_tables: unconditionall (bsc#1228505).
- CVE-2024-42110: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (bsc#1228501).
- CVE-2024-42113: net: txgbe: initialize num_q_vectors for MSI/INTx interrupts (bsc#1228568).
- CVE-2024-42122: drm/amd/display: Add NULL pointer check for kzalloc (bsc#1228591).
- CVE-2024-42124: scsi: qedf: Make qedf_execute_tmf() non-preemptible (bsc#1228705).
- CVE-2024-42138: mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (bsc#1228500).
- CVE-2024-42139: ice: Fix improper extts handling (bsc#1228503).
- CVE-2024-42142: net/mlx5: E-switch, Create ingress ACL when needed (bsc#1228491).
- CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743).
- CVE-2024-42148: bnx2x: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487).
- CVE-2024-42155: s390/pkey: Wipe copies of protected- and secure-keys (bsc#1228733).
- CVE-2024-42156: s390/pkey: Wipe copies of clear-key structures on failure (bsc#1228722).
- CVE-2024-42157: s390/pkey: Wipe sensitive data on failure (bsc#1228727 CVE-2024-42157 git-fixes).
- CVE-2024-42158: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
- CVE-2024-42159: scsi: mpi3mr: sanitise num_phys (bsc#1228754).
- CVE-2024-42161: bpf: avoid uninitialized value in BPF_CORE_READ_BITFIELD (bsc#1228756).
- CVE-2024-42162: gve: Account for stopped queues when reading NIC stats (bsc#1228706).
- CVE-2024-42224: net: dsa: mv88e6xxx: Correct check for empty list (bsc#1228723).
- CVE-2024-42241: mm/shmem: disable PMD-sized page cache if needed (bsc#1228986).
- CVE-2024-42245: Revert "sched/fair: Make sure to try to detach at least one movable task" (bsc#1228978).
- CVE-2024-42246: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989).
- CVE-2024-42247: wireguard: allowedips: avoid unaligned 64-bit memory accesses (bsc#1228988).
- CVE-2024-42268: net/mlx5: Fix missing lock on sync reset reload (bsc#1229391).
- CVE-2024-42269: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). (bsc#1229402).
- CVE-2024-42270: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). (bsc#1229404).
- CVE-2024-42277: iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
- CVE-2024-42281: bpf: Fix a segment issue when downgrading gso_size (bsc#1229386).
- CVE-2024-42283: net: nexthop: Initialize all fields in dumped nexthops (bsc#1229383)
- CVE-2024-42284: tipc: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
- CVE-2024-42290: irqchip/imx-irqsteer: Handle runtime power management correctly (bsc#1229379).
- CVE-2024-42291: ice: Add a per-VF limit on number of FDIR filters (bsc#1229374).
- CVE-2024-42295: nilfs2: handle inconsistent state in nilfs_btnode_create_block() (bsc#1229370).
- CVE-2024-42301: dev/parport: fix the array out-of-bounds risk (bsc#1229407).
- CVE-2024-42308: Update DRM patch reference (bsc#1229411)
- CVE-2024-42312: sysctl: always initialize i_uid/i_gid (bsc#1229357)
- CVE-2024-42316: mm/mglru: fix div-by-zero in vmpressure_calc_level()  (bsc#1229353).
- CVE-2024-42318: landlock: Do not lose track of restrictions on cred_transfer (bsc#1229351).
- CVE-2024-42322: ipvs: properly dereference pe in ip_vs_add_service (bsc#1229347)
- CVE-2024-43821: scsi: lpfc: Fix a possible null pointer dereference (bsc#1229315).
- CVE-2024-43831: media: mediatek: vcodec: Handle invalid decoder vsi (bsc#1229309).
- CVE-2024-43834: xdp: fix invalid wait context of page_pool_destroy() (bsc#1229314)
- CVE-2024-43837: bpf: Fix updating attached freplace prog in prog_array map (bsc#1229297).
- CVE-2024-43839: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
- CVE-2024-43850: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove (bsc#1229316).
- CVE-2024-43854: block: initialize integrity buffer to zero before writing it to media (bsc#1229345)
- CVE-2024-43855: md: fix deadlock between mddev_suspend and flush bio (bsc#1229342).
- CVE-2024-43864: net/mlx5e: Fix CT entry update leaks of modify header context (bsc#1229496).
- CVE-2024-43866: net/mlx5: Always drain health in shutdown callback (bsc#1229495).
- CVE-2024-43880: kabi: lib: objagg: Put back removed metod in struct objagg_ops (bsc#1229481).
- CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
- CVE-2024-43899: drm/amd/display: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
- CVE-2024-43911: wifi: mac80211: fix NULL dereference at band check in starting tx ba session  (bsc#1229827).

Additional CVEs were previously fixed and are only mentioned in the metadata.

The following non-security bugs were fixed:

- ACPI/NUMA: Apply SRAT proximity domain to entire CFMWS window (git-fixes).
- ACPI: SBS: manage alarm sysfs attribute through psy core (stable-fixes).
- ACPI: battery: create alarm sysfs attribute atomically (stable-fixes).
- ACPI: processor_idle: use raw_safe_halt() in acpi_idle_play_dead() (git-fixes).
- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).
- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).
- ALSA: hda/realtek - FIxed ALC285 headphone no sound (stable-fixes).
- ALSA: hda/realtek - Fixed ALC256 headphone no sound (stable-fixes).
- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).
- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).
- ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G (stable-fixes).
- ALSA: hda/realtek: Add support for new HP G12 laptops (stable-fixes).
- ALSA: hda/realtek: Enable mute/micmute LEDs on HP Laptop 14-ey0xxx (stable-fixes).
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (git-fixes).
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book3 Ultra (stable-fixes).
- ALSA: hda/realtek: Implement sound init sequence for Samsung Galaxy Book3 Pro 360 (stable-fixes).
- ALSA: hda/realtek: support HP Pavilion Aero 13-bg0xxx Mute LED (stable-fixes).
- ALSA: hda/tas2781: Use correct endian conversion (git-fixes).
- ALSA: hda/tas2781: fix wrong calibrated data order (git-fixes).
- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).
- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).
- ALSA: hda: Conditionally use snooping for AMD HDMI (git-fixes).
- ALSA: hda: conexant: Fix headset auto detect fail in the polling mode (git-fixes).
- ALSA: line6: Fix racy access to midibuf (stable-fixes).
- ALSA: line6: Fix racy access to midibuf (stable-fixes).
- ALSA: seq: Skip event type filtering for UMP events (git-fixes).
- ALSA: seq: ump: Explicitly reset RPN with Null RPN (stable-fixes).
- ALSA: seq: ump: Optimize conversions from SysEx to UMP (git-fixes).
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception (stable-fixes).
- ALSA: seq: ump: Use the common RPN/bank conversion context (stable-fixes).
- ALSA: timer: Relax start tick time check for slave timer elements (git-fixes).
- ALSA: ump: Explicitly reset RPN with Null RPN (stable-fixes).
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception (stable-fixes).
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET (stable-fixes).
- ALSA: usb-audio: Correct surround channels in UAC1 channel map (git-fixes).
- ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes).
- ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes).
- ALSA: usb-audio: Support Yamaha P-125 quirk entry (stable-fixes).
- ALSA: usb: Fix UBSAN warning in parse_audio_unit() (stable-fixes).
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend (stable-fixes).
- ASoC: SOF: Remove libraries from topology lookups (git-fixes).
- ASoC: SOF: Remove libraries from topology lookups (git-fixes).
- ASoC: SOF: amd: Fix for acp init sequence (git-fixes).
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data (stable-fixes).
- ASoC: SOF: mediatek: Add missing board compatible (stable-fixes).
- ASoC: allow module autoloading for table board_ids (stable-fixes).
- ASoC: allow module autoloading for table db1200_pids (stable-fixes).
- ASoC: amd: acp: fix module autoloading (git-fixes).
- ASoC: amd: yc: Add quirk entry for OMEN by HP Gaming Laptop 16-n0xxx (bsc#1227182).
- ASoC: amd: yc: Support mic on HP 14-em0002la (stable-fixes).
- ASoC: amd: yc: Support mic on HP 14-em0002la (stable-fixes).
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 (stable-fixes).
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 (stable-fixes).
- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa883x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa883x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa884x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa884x: Correct Soundwire ports mask (git-fixes).
- ASoC: cs35l45: Checks index of cs35l45_irqs[] (stable-fixes).
- ASoC: cs35l56: Handle OTP read latency over SoundWire (stable-fixes).
- ASoC: cs35l56: Handle OTP read latency over SoundWire (stable-fixes).
- ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value (stable-fixes).
- ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value (stable-fixes).
- ASoC: fsl_micfil: Expand the range of FIFO watermark mask (stable-fixes).
- ASoC: fsl_micfil: Expand the range of FIFO watermark mask (stable-fixes).
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile (stable-fixes).
- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes).
- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes).
- ASoC: nau8822: Lower debug print priority (stable-fixes).
- ASoC: nau8822: Lower debug print priority (stable-fixes).
- Bluetooth: Add device 13d3:3572 IMC Networks Bluetooth Radio (stable-fixes).
- Bluetooth: Fix usage of __hci_cmd_sync_status (git-fixes).
- Bluetooth: L2CAP: Fix deadlock (git-fixes).
- Bluetooth: MGMT: Add error handling to pair_device() (git-fixes).
- Bluetooth: SMP: Fix assumption of Central always being Initiator (git-fixes).
- Bluetooth: bnep: Fix out-of-bound access (stable-fixes).
- Bluetooth: btintel: Fail setup on error (git-fixes).
- Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading (stable-fixes).
- Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables (stable-fixes).
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 (stable-fixes).
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload (stable-fixes).
- Bluetooth: hci_core: Fix LE quote calculation (git-fixes).
- Bluetooth: hci_core: Fix not handling hibernation actions (git-fixes).
- Bluetooth: hci_sync: Fix suspending with wrong filter policy (git-fixes).
- Bluetooth: hci_sync: avoid dup filtering when passive scanning with adv monitor (git-fixes).
- Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (git-fixes).
- Drop libata patch that caused a regression (bsc#1229054)
- HID: wacom: Defer calculation of resolution until resolution_code is known (git-fixes).
- Input: MT - limit max slots (stable-fixes).
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table (bsc#1229056).
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3 (stable-fixes).
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination (stable-fixes).
- KVM: Always flush async #PF workqueue when vCPU is being destroyed (git-fixes).
- KVM: Make KVM_MEM_GUEST_MEMFD mutually exclusive with KVM_MEM_READONLY (git-fixes).
- KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3 (bsc#1194869).
- KVM: PPC: Book3S HV: Handle pending exceptions on guest entry with MSR_EE (bsc#1215199).
- KVM: Protect vcpu-&gt;pid dereference via debugfs with RCU (git-fixes).
- KVM: Reject overly excessive IDs in KVM_CREATE_VCPU (git-fixes).
- KVM: Stop processing *all* memslots when "null" mmu_notifier handler is found (git-fixes).
- KVM: VMX: Move posted interrupt descriptor out of VMX code (git-fixes).
- KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked() (git-fixes).
- KVM: VMX: Switch __vmx_exit() and kvm_x86_vendor_exit() in vmx_exit() (git-fixes).
- KVM: arm64: AArch32: Fix spurious trapping of conditional instructions (git-fixes).
- KVM: arm64: Add missing memory barriers when switching to pKVM's hyp pgd (git-fixes).
- KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode (git-fixes).
- KVM: arm64: Fix AArch32 register narrowing on userspace write (git-fixes).
- KVM: arm64: Fix __pkvm_init_switch_pgd call ABI (git-fixes).
- KVM: arm64: Fix clobbered ELR in sync abort/SError (git-fixes)
- KVM: arm64: GICv4: Do not perform a map to a mapped vLPI (git-fixes).
- KVM: arm64: timers: Correctly handle TGE flip with CNTPOFF_EL2 (git-fixes).
- KVM: arm64: timers: Fix resource leaks in kvm_timer_hyp_init() (git-fixes).
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() (git-fixes).
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler (git-fixes).
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (git-fixes).
- KVM: arm64: vgic-v4: Restore pending state on host userspace write (git-fixes).
- KVM: arm64: vgic: Add a non-locking primitive for kvm_vgic_vcpu_destroy() (git-fixes).
- KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy (git-fixes).
- KVM: arm64: vgic: Simplify kvm_vgic_destroy() (git-fixes).
- KVM: fix kvm_mmu_memory_cache allocation warning (git-fixes).
- KVM: nVMX: Add a helper to get highest pending from Posted Interrupt vector (git-fixes).
- KVM: nVMX: Check for pending posted interrupts when looking for nested events (git-fixes).
- KVM: nVMX: Request immediate exit iff pending nested event needs injection (git-fixes).
- KVM: s390: fix LPSWEY handling (bsc#1227634 git-fixes).
- KVM: s390: fix validity interception issue when gisa is switched off (git-fixes bsc#1229167).
- KVM: x86/mmu: Bug the VM if KVM tries to split a !hugepage SPTE (git-fixes).
- KVM: x86: Limit check IDs for KVM_SET_BOOT_CPU_ID (git-fixes).
- Move upstreamed powerpc patches into sorted section
- Move upstreamed sound patches into sorted section
- Moved upstreamed ASoC patch into sorted section
- NFSD: Support write delegations in LAYOUTGET (git-fixes).
- NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (git-fixes).
- PCI: Add Edimax Vendor ID to pci_ids.h (stable-fixes).
- PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN (git-fixes).
- PCI: loongson: Enable MSI in LS7A Root Complex (stable-fixes).
- RDMA/cache: Release GID table even if leak is detected (git-fixes)
- RDMA/device: Return error earlier if port in not valid (git-fixes)
- RDMA/hns: Check atomic wr length (git-fixes)
- RDMA/hns: Fix insufficient extend DB for VFs. (git-fixes)
- RDMA/hns: Fix mbx timing out before CMD execution is completed (git-fixes)
- RDMA/hns: Fix missing pagesize and alignment check in FRMR (git-fixes)
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0 (git-fixes)
- RDMA/hns: Fix soft lockup under heavy CEQE load (git-fixes)
- RDMA/hns: Fix undifined behavior caused by invalid max_sge (git-fixes)
- RDMA/hns: Fix unmatch exception handling when init eq table fails (git-fixes)
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (git-fixes)
- RDMA/mana_ib: Use virtual address in dma regions for MRs (git-fixes).
- RDMA/mlx4: Fix truncated output warning in alias_GUID.c (git-fixes)
- RDMA/mlx4: Fix truncated output warning in mad.c (git-fixes)
- RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE (git-fixes)
- RDMA/rxe: Do not set BTH_ACK_MASK for UC or UD QPs (git-fixes)
- RDMA: Fix netdev tracker in ib_device_set_netdev (git-fixes)
- Revert "ALSA: firewire-lib: obsolete workqueue for period update" (bsc#1208783).
- Revert "ALSA: firewire-lib: operate for period elapse event in process context" (bsc#1208783).
- Revert "KVM: Prevent module exit until all VMs are freed" (git-fixes).
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" (git-fixes).
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" (git-fixes).
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD" (git-fixes).
- Revert "usb: gadget: uvc: cleanup request when not in correct state" (stable-fixes).
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET" (git-fixes).
- SUNRPC: Fix a race to wake a sync task (git-fixes).
- SUNRPC: add a missing rpc_stat for TCP TLS (git-fixes).
- Squashfs: fix variable overflow triggered by sysbot (git-fixes).
- USB: serial: debug: do not echo input by default (stable-fixes).
- Update config files. Disable vdpa drivers for Alibaba ENI and SolidNET (jsc#PED-8954, bsc#1227834)
- Update config files. Disable CONFIG_KFENCE on ppc64le (bsc#1226920)
- Update patch references for ASoC regression fixes (bsc#1229045 bsc#1229046)
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race (git-fixes).
- apparmor: unpack transition table if dfa is not present (bsc#1226031).
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to (git-fixes)
- arm64: Add Neoverse-V2 part (git-fixes)
- arm64: Fix KASAN random tag seed initialization (git-fixes)
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (git-fixes)
- arm64: barrier: Restore spec_bar() macro (git-fixes)
- arm64: cputype: Add Cortex-A720 definitions (git-fixes)
- arm64: cputype: Add Cortex-A725 definitions (git-fixes)
- arm64: cputype: Add Cortex-X1C definitions (git-fixes)
- arm64: cputype: Add Cortex-X3 definitions (git-fixes)
- arm64: cputype: Add Cortex-X4 definitions (git-fixes)
- arm64: cputype: Add Cortex-X925 definitions (git-fixes)
- arm64: cputype: Add Neoverse-V3 definitions (git-fixes)
- arm64: dts: imx8mp: Add NPU Node (git-fixes)
- arm64: dts: imx8mp: Fix pgc vpu locations (git-fixes)
- arm64: dts: imx8mp: Fix pgc_mlmix location (git-fixes)
- arm64: dts: imx8mp: add HDMI power-domains (git-fixes)
- arm64: errata: Expand speculative SSBS workaround (again) (git-fixes)
- arm64: errata: Expand speculative SSBS workaround (git-fixes)
- arm64: errata: Unify speculative SSBS errata logic (git-fixes). Update config files.
- arm64: jump_label: Ensure patched jump_labels are visible to all CPUs (git-fixes)
- ata: libata-scsi: Do not overwrite valid sense data when CK_COND=1 (stable-fixes).
- ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error (stable-fixes).
- blacklist.conf: Add libata upstream revert entry (bsc#1229054)
- bnxt_re: Fix imm_data endianness (git-fixes)
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG (git-fixes)
- bpf, lpm: Fix check prefixlen before walking trie (git-fixes).
- bpf/tests: Remove duplicate JSGT tests (git-fixes).
- bpf: Add crosstask check to __bpf_get_stack (git-fixes).
- bpf: Detect IP == ksym.end as part of BPF program (git-fixes).
- bpf: Ensure proper register state printing for cond jumps (git-fixes).
- bpf: Fix a few selftest failures due to llvm18 change (git-fixes).
- bpf: Fix a kernel verifier crash in stacksafe() (bsc#1225903).
- bpf: Fix check_stack_write_fixed_off() to correctly spill imm (git-fixes).
- bpf: Fix kfunc callback register type handling (git-fixes).
- bpf: Fix prog_array_map_poke_run map poke update (git-fixes).
- bpf: Fix unnecessary -EBUSY from htab_lock_bucket (git-fixes).
- bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly (git-fixes).
- bpf: Remove unnecessary wait from bpf_map_copy_value() (git-fixes).
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion (git-fixes).
- bpf: do not infer PTR_TO_CTX for programs with unnamed context type (git-fixes).
- bpf: enforce precision of R0 on callback return (git-fixes).
- bpf: extract bpf_ctx_convert_map logic and make it more reusable (git-fixes).
- bpf: fix control-flow graph checking in privileged mode (git-fixes).
- bpf: handle bpf_user_pt_regs_t typedef explicitly for PTR_TO_CTX global arg (git-fixes).
- bpf: hardcode BPF_PROG_PACK_SIZE to 2MB * num_possible_nodes() (git-fixes).
- bpf: kprobe: remove unused declaring of bpf_kprobe_override (git-fixes).
- bpf: simplify btf_get_prog_ctx_type() into btf_is_prog_ctx_type() (git-fixes).
- bpftool: Align output skeleton ELF code (git-fixes).
- bpftool: Fix -Wcast-qual warning (git-fixes).
- bpftool: Silence build warning about calloc() (git-fixes).
- bpftool: mark orphaned programs during prog show (git-fixes).
- btrfs: add a btrfs_finish_ordered_extent helper (git-fixes).
- btrfs: add a is_data_bbio helper (git-fixes).
- btrfs: add an ordered_extent pointer to struct btrfs_bio (git-fixes).
- btrfs: copy dir permission and time when creating a stub subvolume (bsc#1228321).
- btrfs: ensure fast fsync waits for ordered extents after a write failure (git-fixes).
- btrfs: factor out a btrfs_queue_ordered_fn helper (git-fixes).
- btrfs: factor out a can_finish_ordered_extent helper (git-fixes).
- btrfs: fix corruption after buffer fault in during direct IO append write (git-fixes).
- btrfs: fix double inode unlock for direct IO sync writes (git-fixes).
- btrfs: fix extent map use-after-free when adding pages to compressed bio (git-fixes).
- btrfs: fix leak of qgroup extent records after transaction abort (git-fixes).
- btrfs: fix ordered extent split error handling in btrfs_dio_submit_io (git-fixes).
- btrfs: limit write bios to a single ordered extent (git-fixes).
- btrfs: make btrfs_finish_ordered_extent() return void (git-fixes).
- btrfs: merge the two calls to btrfs_add_ordered_extent in run_delalloc_nocow (git-fixes).
- btrfs: open code btrfs_bio_end_io in btrfs_dio_submit_io (git-fixes).
- btrfs: open code end_extent_writepage in end_bio_extent_writepage (git-fixes).
- btrfs: pass a btrfs_inode to btrfs_fdatawrite_range() (git-fixes).
- btrfs: pass a btrfs_inode to btrfs_wait_ordered_range() (git-fixes).
- btrfs: pass an ordered_extent to btrfs_reloc_clone_csums (git-fixes).
- btrfs: pass an ordered_extent to btrfs_submit_compressed_write (git-fixes).
- btrfs: remove btrfs_add_ordered_extent (git-fixes).
- btrfs: rename err to ret in btrfs_direct_write() (git-fixes).
- btrfs: uninline some static inline helpers from tree-log.h (git-fixes).
- btrfs: use a btrfs_inode in the log context (struct btrfs_log_ctx) (git-fixes).
- btrfs: use a btrfs_inode local variable at btrfs_sync_file() (git-fixes).
- btrfs: use bbio-&gt;ordered in btrfs_csum_one_bio (git-fixes).
- btrfs: use btrfs_finish_ordered_extent to complete buffered writes (git-fixes).
- btrfs: use btrfs_finish_ordered_extent to complete compressed writes (git-fixes).
- btrfs: use btrfs_finish_ordered_extent to complete direct writes (git-fixes).
- btrfs: use irq safe locking when running and adding delayed iputs (git-fixes).
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode (bsc#1229245).
- cachefiles: add missing lock protection when polling (bsc#1229256).
- cachefiles: add restore command to recover inflight ondemand read requests (bsc#1229244).
- cachefiles: add spin_lock for cachefiles_ondemand_info (bsc#1229249).
- cachefiles: cancel all requests for the object that is being dropped (bsc#1229255).
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds (bsc#1229251).
- cachefiles: extract ondemand info field from cachefiles_object (bsc#1229240).
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read() (bsc#1229247).
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd() (bsc#1229246).
- cachefiles: introduce object ondemand state (bsc#1229239).
- cachefiles: make on-demand read killable (bsc#1229252).
- cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode (bsc#1229243).
- cachefiles: never get a new anonymous fd if ondemand_id is valid (bsc#1229250).
- cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop (bsc#1229253).
- cachefiles: remove err_put_fd label in cachefiles_ondemand_daemon_read() (bsc#1229248).
- cachefiles: resend an open request if the read request's object is closed (bsc#1229241).
- cachefiles: stop sending new request when dropping object (bsc#1229254).
- can: mcp251xfd: tef: prepare to workaround broken TEF FIFO tail index erratum (stable-fixes).
- can: mcp251xfd: tef: update workaround for erratum DS80000789E 6 of mcp2518fd (stable-fixes).
- ceph: periodically flush the cap releases (bsc#1230056).
- cgroup/cpuset: Prevent UAF in proc_cpuset_show() (bsc#1228801).
- cgroup: Add annotation for holding namespace_sem in current_cgns_cgroup_from_root() (bsc#1222254).
- cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show() (bsc#1222254).
- cgroup: Make operations on the cgroup root_list RCU safe (bsc#1222254).
- cgroup: Remove unnecessary list_empty() (bsc#1222254).
- cgroup: preserve KABI of cgroup_root (bsc#1222254).
- char: xillybus: Check USB endpoints when probing device (git-fixes).
- char: xillybus: Do not destroy workqueue from work item running on it (stable-fixes).
- char: xillybus: Refine workqueue handling (git-fixes).
- clk: en7523: fix rate divider for slic and spi clocks (git-fixes).
- clk: qcom: Park shared RCGs upon registration (git-fixes).
- clk: qcom: camcc-sc7280: Add parent dependency to all camera GDSCs (git-fixes).
- clk: qcom: gcc-sa8775p: Update the GDSC wait_val fields and flags (git-fixes).
- clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock (git-fixes).
- clk: qcom: gpucc-sa8775p: Park RCG's clk source at XO during disable (git-fixes).
- clk: qcom: gpucc-sa8775p: Remove the CLK_IS_CRITICAL and ALWAYS_ON flags (git-fixes).
- clk: qcom: gpucc-sa8775p: Update wait_val fields for GPU GDSC's (git-fixes).
- clk: qcom: gpucc-sm8350: Park RCG's clk source at XO during disable (git-fixes).
- clk: qcom: kpss-xcc: Return of_clk_add_hw_provider to transfer the error (git-fixes).
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider (stable-fixes).
- clocksource/drivers/sh_cmt: Address race condition for clock events (stable-fixes).
- cpu/SMT: Enable SMT only if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes).
- cxl/region: Move cxl_dpa_to_region() work to the region driver (bsc#1228472)
- dev/parport: fix the array out-of-bounds risk (stable-fixes).
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup (stable-fixes).
- dmaengine: dw: Add memory bus width verification (git-fixes).
- dmaengine: dw: Add peripheral bus width verification (git-fixes).
- docs: KVM: Fix register ID of SPSR_FIQ (git-fixes).
- driver core: Fix uevent_show() vs driver detach race (git-fixes).
- drm/admgpu: fix dereferencing null pointer context (stable-fixes).
- drm/amd/display: Add delay to improve LTTPR UHBR interop (stable-fixes).
- drm/amd/display: Add null checker before passing variables (stable-fixes).
- drm/amd/display: Adjust cursor position (git-fixes).
- drm/amd/display: Check for NULL pointer (stable-fixes).
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link (stable-fixes).
- drm/amd/display: avoid using null object of framebuffer (git-fixes).
- drm/amd/display: fix cursor offset on rotation 180 (git-fixes).
- drm/amd/display: fix s2idle entry for DCN3.5+ (stable-fixes).
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr (stable-fixes).
- drm/amdgpu/jpeg2: properly set atomics vmid field (stable-fixes).
- drm/amdgpu/jpeg4: properly set atomics vmid field (stable-fixes).
- drm/amdgpu/pm: Fix the null pointer dereference for smu7 (stable-fixes).
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (stable-fixes).
- drm/amdgpu/pm: Fix the param type of set_power_profile_mode (stable-fixes).
- drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell (stable-fixes).
- drm/amdgpu/sdma5.2: limit wptr workaround to sdma 5.2.1 (git-fixes).
- drm/amdgpu: Actually check flags for all context ops (stable-fixes).
- drm/amdgpu: Add lock around VF RLCG interface (stable-fixes).
- drm/amdgpu: Fix the null pointer dereference to ras_manager (stable-fixes).
- drm/amdgpu: Forward soft recovery errors to userspace (stable-fixes).
- drm/amdgpu: Validate TA binary size (stable-fixes).
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent (stable-fixes).
- drm/amdgpu: fix potential resource leak warning (stable-fixes).
- drm/amdgpu: reset vm state machine after gpu reset(vram lost) (stable-fixes).
- drm/bridge: analogix_dp: properly handle zero sized AUX transactions (stable-fixes).
- drm/client: fix null pointer dereference in drm_client_modeset_probe (git-fixes).
- drm/dp_mst: Skip CSN if topology probing is not done yet (stable-fixes).
- drm/etnaviv: do not block scheduler when GPU is still active (stable-fixes).
- drm/i915/dsi: Make Lenovo Yoga Tab 3 X90F DMI match less strict (git-fixes).
- drm/i915/gem: Adjust vma offset for framebuffer mmap offset (stable-fixes).
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (git-fixes).
- drm/i915/hdcp: Fix HDCP2_STREAM_STATUS macro (git-fixes).
- drm/i915: Fix possible int overflow in skl_ddi_calculate_wrpll() (git-fixes).
- drm/lima: set gp bus_stop bit before hard reset (stable-fixes).
- drm/mediatek/dp: Fix spurious kfree() (git-fixes).
- drm/msm/dp: fix the max supported bpp logic (git-fixes).
- drm/msm/dp: reset the link phy params before link training (git-fixes).
- drm/msm/dpu: capture snapshot on the first commit_done timeout (stable-fixes).
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (git-fixes).
- drm/msm/dpu: do not play tricks with debug macros (git-fixes).
- drm/msm/dpu: drop MSM_ENC_VBLANK support (stable-fixes).
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() (git-fixes).
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions (stable-fixes).
- drm/msm/dpu: take plane rotation into account for wide planes (git-fixes).
- drm/msm/dpu: try multirect based on mdp clock limits (stable-fixes).
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys (stable-fixes).
- drm/msm/mdss: Rename path references to mdp_path (stable-fixes).
- drm/msm/mdss: switch mdss to use devm_of_icc_get() (stable-fixes).
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs (stable-fixes).
- drm/nouveau: prime: fix refcount underflow (git-fixes).
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels (stable-fixes).
- drm/radeon/evergreen_cs: Clean up errors in evergreen_cs.c (bsc#1229024).
- drm/radeon: Remove __counted_by from StateArray.states[] (git-fixes).
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode (stable-fixes).
- drm/virtio: Fix type of dma-fence context variable (git-fixes).
- drm/vmwgfx: Fix a deadlock in dma buf fence polling (git-fixes).
- drm/vmwgfx: Fix overlay when using Screen Targets (git-fixes).
- drm/vmwgfx: Fix prime with external buffers (git-fixes).
- efi/libstub: Zero initialize heap allocated struct screen_info (git-fixes).
- evm: do not copy up 'security.evm' xattr (git-fixes).
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid (stable-fixes).
- fs/netfs/fscache_cookie: add missing "n_accesses" check (bsc#1229455).
- fuse: Initialize beyond-EOF page contents before setting uptodate (bsc#1229456).
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (git-fixes).
- genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (git-fixes).
- genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() (git-fixes).
- gfs2: setattr_chown: Add missing initialization (git-fixes).
- gpio: mlxbf3: Support shutdown() function (git-fixes).
- gpio: prevent potential speculation leaks in gpio_device_get_desc() (stable-fixes).
- gpio: sysfs: extend the critical section for unregistering sysfs devices (stable-fixes).
- gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (git-fixes).
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (git-fixes).
- hwmon: (ltc2992) Avoid division by zero (stable-fixes).
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt() (git-fixes).
- hwmon: (pc87360) Bounds check data-&gt;innr usage (stable-fixes).
- i2c: Fix conditional for substituting empty ACPI functions (stable-fixes).
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions (git-fixes).
- i2c: qcom-geni: Add missing clk_disable_unprepare in geni_i2c_runtime_resume (git-fixes).
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume (git-fixes).
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume (git-fixes).
- i2c: riic: avoid potential division by zero (stable-fixes).
- i2c: smbus: Improve handling of stuck alerts (git-fixes).
- i2c: smbus: Send alert notifications to all devices if source not found (git-fixes).
- i2c: stm32f7: Add atomic_xfer method to driver (stable-fixes).
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer (stable-fixes).
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out (stable-fixes).
- i915/perf: Remove code to update PWR_CLK_STATE for gen12 (git-fixes).
- ice: Fix NULL pointer access, if PF does not support SRIOV_LAG (bsc#1228737).
- io_uring/advise: support 64-bit lengths (git-fixes).
- io_uring: Drop per-ctx dummy_ubuf (git-fixes).
- io_uring: Fix probe of disabled operations (git-fixes).
- io_uring: fix io_match_task must_hold (git-fixes).
- io_uring: tighten task exit cancellations (git-fixes).
- iommu/amd: Convert comma to semicolon (git-fixes).
- iommu/vt-d: Fix identity map bounds in si_domain_init() (git-fixes).
- iommufd/device: Fix hwpt at err_unresv in iommufd_device_do_replace() (git-fixes).
- ip6_tunnel: Fix broken GRO (bsc#1229444).
- ipv6: sr: fix incorrect unregister order (git-fixes).
- irqdomain: Fixed unbalanced fwnode get and put (git-fixes).
- jfs: Fix shift-out-of-bounds in dbDiscardAG (git-fixes).
- jfs: define xtree root and page independently (git-fixes).
- jfs: fix null ptr deref in dtInsertEntry (git-fixes).
- jump_label: Clarify condition in static_key_fast_inc_not_disabled() (git-fixes).
- jump_label: Fix concurrency issues in static_key_slow_dec() (git-fixes).
- jump_label: Fix the fix, brown paper bags galore (git-fixes).
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked() (git-fixes).
- kABI fix of: virtio-crypto: handle config changed by work queue (git-fixes).
- kABI workaround for sound core UMP conversion (stable-fixes).
- kabi fix for KVM: s390: fix LPSWEY handling (bsc#1227634 git-fixes).
- kabi fix for SUNRPC: add a missing rpc_stat for TCP TLS (git-fixes).
- kabi/severities: ignore kABI for FireWire sound local symbols (bsc#1208783)
- kcov: properly check for softirq context (git-fixes).
- kernel-binary: generate and install compile_commands.json (bsc#1228971)
- kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() (bsc#1229134).
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files (git-fixes).
- kprobes: Fix to check symbol prefixes correctly (git-fixes).
- kprobes: Prohibit probing on CFI preamble symbol (git-fixes).
- kvm: s390: Reject memory region operations for ucontrol VMs (git-fixes bsc#1229168).
- libbpf: Add missing LIBBPF_API annotation to libbpf_set_memlock_rlim API (git-fixes).
- libbpf: Apply map_set_def_max_entries() for inner_maps on creation (git-fixes).
- libbpf: Fix faccessat() usage on Android (git-fixes).
- libbpf: Use OPTS_SET() macro in bpf_xdp_query() (git-fixes).
- md-cluster: fix hanging issue while a new disk adding (bsc#1223395).
- md-cluster: fix hanging issue while a new disk adding (bsc#1223395).
- md-cluster: fix no recovery job when adding/re-adding a disk (bsc#1223395).
- md-cluster: fix no recovery job when adding/re-adding a disk (bsc#1223395).
- md-cluster: keeping kabi compatibility for upstream commit 35a0a409fa26 (bsc#1223395).
- md/md-bitmap: fix writing non bitmap pages (git-fixes).
- md/raid1: set max_sectors during early return from choose_slow_rdev() (git-fixes).
- md/raid1: support read error check (git-fixes).
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (git-fixes).
- md/raid5: fix spares errors about rcu usage (git-fixes).
- md/raid5: recheck if reshape has finished with device_lock held (git-fixes).
- md: Do not wait for MD_RECOVERY_NEEDED for HOT_REMOVE_DISK ioctl (git-fixes).
- md: add a mddev_add_trace_msg helper (git-fixes).
- md: add check for sleepers in md_wakeup_thread() (git-fixes).
- md: change the return value type of md_write_start to void (git-fixes).
- md: do not account sync_io if iostats of the disk is disabled (git-fixes).
- md: do not delete safemode_timer in mddev_suspend (git-fixes).
- md: factor out a helper exceed_read_errors() to check read_errors (git-fixes).
- md: fix a suspicious RCU usage warning (git-fixes).
- media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" (git-fixes).
- media: amphion: Remove lock in s_ctrl callback (stable-fixes).
- media: drivers/media/dvb-core: copy user arrays safely (stable-fixes).
- media: pci: cx23885: check cx23885_vdev_init() return (stable-fixes).
- media: uvcvideo: Add quirk for invalid dev_sof in Logitech C920 (git-fixes).
- media: uvcvideo: Disable autosuspend for Insta360 Link (stable-fixes).
- media: uvcvideo: Fix the bandwdith quirk on USB 3.x (stable-fixes).
- media: uvcvideo: Ignore empty TS packets (stable-fixes).
- media: uvcvideo: Quirk for invalid dev_sof in Logitech C922 (stable-fixes).
- media: xc2028: avoid use-after-free in load_firmware_cb() (stable-fixes).
- memcg: protect concurrent access to mem_cgroup_idr (git-fixes).
- memory: stm32-fmc2-ebi: check regmap_read return value (stable-fixes).
- memory: tegra: Skip SID programming if SID registers are not set (stable-fixes).
- minmax: add a few more MIN_T/MAX_T users (bsc#1229024).
- minmax: avoid overly complicated constant expressions in VM code (bsc#1229024).
- minmax: do not use max() in situations that want a C constant expression (bsc#1229024).
- minmax: fix up min3() and max3() too (bsc#1229024).
- minmax: improve macro expansion and type checking (bsc#1229024).
- minmax: make generic MIN() and MAX() macros available everywhere (bsc#1229024).
- minmax: simplify and clarify min_t()/max_t() implementation (bsc#1229024).
- minmax: simplify min()/max()/clamp() implementation (bsc#1229024).
- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).
- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).
- mmc: dw_mmc: allow biu and ciu clocks to defer (git-fixes).
- mmc: mmc_test: Fix NULL dereference on allocation failure (git-fixes).
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail (git-fixes).
- net/iucv: fix the allocation size of iucv_path_table array (git-fixes bsc#1229451).
- net/iucv: fix use after free in iucv_sock_close() (bsc#1228973).
- net/rds: fix possible cp null dereference (git-fixes).
- net/sched: initialize noop_qdisc owner (git-fixes).
- net: drop bad gso csum_start and offset in virtio_net_hdr (git-fixes).
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb() (git-fixes).
- net: fix sk_memory_allocated_{add|sub} vs softirqs (bsc#1228757).
- net: mana: Add support for page sizes other than 4KB on ARM64 (jsc#PED-8491 bsc#1226530).
- net: mana: Fix RX buf alloc_size alignment and atomic op panic (bsc#1229086).
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (bsc#1229154).
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (git-fixes).
- net: missing check virtio (git-fixes).
- net: phy: micrel: Fix the KSZ9131 MDI-X status issue (git-fixes).
- net: phy: realtek: add support for RTL8366S Gigabit PHY (git-fixes).
- net: usb: qmi_wwan: fix memory leak for not ip packets (git-fixes).
- net: usb: sr9700: fix uninitialized variable use in sr_mdio_read (git-fixes).
- netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() (bsc#1228459 bsc#1228462).
- nfc: pn533: Add poll mod list filling check (git-fixes).
- nfs: do not invalidate dentries on transient errors (git-fixes).
- nfs: expose /proc/net/sunrpc/nfs in net namespaces (git-fixes).
- nfs: make the rpc_stat per net namespace (git-fixes).
- nfs: pass explicit offset/count to trace events (git-fixes).
- nfs: propagate readlink errors in nfs_symlink_filler (git-fixes).
- nouveau/firmware: use dma non-coherent allocator (git-fixes).
- nvme-multipath: find NUMA path only for online numa-node (git-fixes).
- nvme-multipath: implement "queue-depth" iopolicy (bsc#1227706).
- nvme-multipath: prepare for "queue-depth" iopolicy (bsc#1227706).
- nvme-pci: Fix the instructions for disabling power management (git-fixes).
- nvme-pci: add missing condition check for existence of mapped data (git-fixes).
- nvme-pci: do not directly handle subsys reset fallout (bsc#1220066).
- nvme-sysfs: add 'tls_configured_key' sysfs attribute (bsc#1221857).
- nvme-sysfs: add 'tls_keyring' attribute (bsc#1221857).
- nvme-tcp: check for invalidated or revoked key (bsc#1221857).
- nvme-tcp: sanitize TLS key handling (bsc#1221857).
- nvme: add a newline to the 'tls_key' sysfs attribute (bsc#1221857).
- nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset (git-fixes).
- nvme: avoid double free special payload (git-fixes).
- nvme: fix NVME_NS_DEAC may incorrectly identifying the disk as EXT_LBA (git-fixes).
- nvme: fixup comment for nvme RDMA Provider Type (git-fixes).
- nvme: split off TLS sysfs attributes into a separate group (bsc#1221857).
- nvme: tcp: remove unnecessary goto statement (bsc#1221857).
- nvme_core: scan namespaces asynchronously (bsc#1224105).
- nvmet-auth: fix nvmet_auth hash error handling (git-fixes).
- nvmet: always initialize cqe.result (git-fixes).
- nvmet: do not return 'reserved' for empty TSAS values (git-fixes).
- nvmet: fix a possible leak when destroy a ctrl during qp establishment (git-fixes).
- nvmet: make 'tsas' attribute idempotent for RDMA (git-fixes).
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (bsc#1228410).
- padata: Fix possible divide-by-0 panic in padata_mt_helper() (git-fixes).
- perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (git-fixes).
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE (git-fixes).
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins (git-fixes).
- pinctrl: single: fix potential NULL dereference in pcs_get_function() (git-fixes).
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register (git-fixes).
- platform/chrome: cros_ec_proto: Lock device when updating MKBP version (git-fixes).
- platform/chrome: cros_ec_proto: Lock device when updating MKBP version (git-fixes).
- platform/surface: aggregator: Fix warning when controller is destroyed in probe (git-fixes).
- platform/x86/amd/hsmp: Add support for ACPI based probing (jsc#PED-8779).
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket (jsc#PED-8779).
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() (jsc#PED-8779).
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors (jsc#PED-8779).
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS (jsc#PED-8779).
- platform/x86/amd/hsmp: Create static func to handle platdev (jsc#PED-8779).
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs (jsc#PED-8779).
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket (jsc#PED-8779).
- platform/x86/amd/hsmp: Move hsmp_test to probe (jsc#PED-8779).
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh (jsc#PED-8779).
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space (jsc#PED-8779).
- platform/x86/amd/hsmp: Restructure sysfs group creation (jsc#PED-8779).
- platform/x86/amd/hsmp: switch to use device_add_groups() (jsc#PED-8779).
- platform/x86/intel/ifs: Initialize union ifs_status to zero (git-fixes).
- platform/x86: lg-laptop: fix %s null argument warning (stable-fixes).
- power: supply: axp288_charger: Fix constant_charge_voltage writes (git-fixes).
- power: supply: axp288_charger: Round constant_charge_voltage writes down (git-fixes).
- power: supply: qcom_battmgr: return EAGAIN when firmware service is not up (git-fixes).
- powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n (bsc#1194869).
- powerpc/io: Avoid clang null pointer arithmetic warnings (bsc#1194869).
- powerpc/kexec: make the update_cpus_node() function public (bsc#1194869).
- powerpc/kexec: split CONFIG_KEXEC_FILE and CONFIG_CRASH_DUMP (bsc#1194869).
- powerpc/kexec_file: fix cpus node update to FDT (bsc#1194869).
- powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp (bsc#1194869).
- powerpc/pseries: Whitelist dtl slub object for copying to userspace (bsc#1194869).
- powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE (bsc#1194869).
- powerpc/topology: Check if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes).
- powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#" (bsc#1194869).
- powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() (bsc#1194869).
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (bsc#1194869).
- printk/panic: Allow cpu backtraces to be written into ringbuffer during panic (bsc#1225607).
- reiserfs: fix uninit-value in comp_keys (git-fixes).
- rtc: nct3018y: fix possible NULL dereference (stable-fixes).
- s390/cpum_cf: Fix endless loop in CF_DIAG event stop (git-fixes bsc#1229171).
- s390/dasd: fix error checks in dasd_copy_pair_store() (git-fixes bsc#1229173).
- s390/dasd: fix error recovery leading to data corruption on ESE devices (git-fixes bsc#1229452).
- s390/pci: Add missing virt_to_phys() for directed DIBV (git-fixes bsc#1229174).
- s390/pci: Allow allocation of more than 1 MSI interrupt (git-fixes bsc#1229172).
- s390/pci: Refactor arch_setup_msi_irqs() (git-fixes bsc#1229172).
- s390/pkey: harmonize pkey s390 debug feature calls (bsc#1228720).
- s390/pkey: introduce dynamic debugging for pkey (bsc#1228720).
- s390/sclp: Prevent release of buffer in I/O (git-fixes bsc#1229169).
- s390/uv: Panic for set and remove shared access UVC errors (git-fixes bsc#1229170).
- samples/bpf: syscall_tp_user: Fix array out-of-bound access (git-fixes).
- samples/bpf: syscall_tp_user: Rename num_progs into nr_tests (git-fixes).
- sbitmap: use READ_ONCE to access map-&gt;word (stable-fixes).
- scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if in PRLI_ISSUE state (bsc#1228857).
- scsi: lpfc: Cancel ELS WQE instead of issuing abort when SLI port is inactive (bsc#1228857).
- scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (bsc#1228857).
- scsi: lpfc: Fix incorrect request len mbox field when setting trunking via sysfs (bsc#1228857).
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (bsc#1228857).
- scsi: lpfc: Relax PRLI issue conditions after GID_FT response (bsc#1228857).
- scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages (bsc#1228857).
- scsi: lpfc: Update lpfc version to 14.4.0.3 (bsc#1228857).
- scsi: qla2xxx: Avoid possible run-time warning with long model_num (bsc#1228850).
- scsi: qla2xxx: Complete command early within lock (bsc#1228850).
- scsi: qla2xxx: Convert comma to semicolon (bsc#1228850).
- scsi: qla2xxx: Drop driver owner assignment (bsc#1228850).
- scsi: qla2xxx: During vport delete send async logout explicitly (bsc#1228850).
- scsi: qla2xxx: Fix debugfs output for fw_resource_count (bsc#1228850).
- scsi: qla2xxx: Fix flash read failure (bsc#1228850).
- scsi: qla2xxx: Fix for possible memory corruption (bsc#1228850).
- scsi: qla2xxx: Fix optrom version displayed in FDMI (bsc#1228850).
- scsi: qla2xxx: Indent help text (bsc#1228850).
- scsi: qla2xxx: Reduce fabric scan duplicate code (bsc#1228850).
- scsi: qla2xxx: Remove unused struct 'scsi_dif_tuple' (bsc#1228850).
- scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds (bsc#1228850).
- scsi: qla2xxx: Unable to act on RSCN for port online (bsc#1228850).
- scsi: qla2xxx: Update version to 10.02.09.300-k (bsc#1228850).
- scsi: qla2xxx: Use QP lock to search for bsg (bsc#1228850).
- scsi: qla2xxx: validate nvme_local_port correctly (bsc#1228850).
- selftest/bpf: Add map_in_maps with BPF_MAP_TYPE_PERF_EVENT_ARRAY values (git-fixes).
- selftests/bpf: Add a test to verify previous stacksafe() fix (bsc#1225903).
- selftests/bpf: Add assert for user stacks in test_task_stack (git-fixes).
- selftests/bpf: Add netkit to tc_redirect selftest (git-fixes).
- selftests/bpf: De-veth-ize the tc_redirect test case (git-fixes).
- selftests/bpf: Disable IPv6 for lwt_redirect test (git-fixes).
- selftests/bpf: Fix erroneous bitmask operation (git-fixes).
- selftests/bpf: Fix issues in setup_classid_environment() (git-fixes).
- selftests/bpf: Fix potential premature unload in bpf_testmod (git-fixes).
- selftests/bpf: Fix pyperf180 compilation failure with clang18 (git-fixes).
- selftests/bpf: Fix the flaky tc_redirect_dtime test (git-fixes).
- selftests/bpf: Fix up xdp bonding test wrt feature flags (git-fixes).
- selftests/bpf: Make linked_list failure test more robust (git-fixes).
- selftests/bpf: Relax time_tai test for equal timestamps in tai_forward (git-fixes).
- selftests/bpf: Skip module_fentry_shadow test when bpf_testmod is not available (git-fixes).
- selftests/bpf: Wait for the netstamp_needed_key static key to be turned on (git-fixes).
- selftests/bpf: fix RELEASE=1 build for tc_opts (git-fixes).
- selftests/bpf: fix bpf_loop_bench for new callback verification scheme (git-fixes).
- selftests/bpf: fix compiler warnings in RELEASE=1 mode (git-fixes).
- selftests/bpf: satisfy compiler by having explicit return in btf test (git-fixes).
- serial: core: check uartclk for zero to avoid divide by zero (stable-fixes).
- soc: qcom: cmd-db: Map shared memory as WC, not WB (git-fixes).
- soc: qcom: pmic_glink: Actually communicate when remote goes down (git-fixes).
- soundwire: stream: fix programming slave ports for non-continous port maps (git-fixes).
- spi: Add empty versions of ACPI functions (stable-fixes).
- spi: microchip-core: fix init function not setting the master and motorola modes (git-fixes).
- spi: microchip-core: switch to use modern name (stable-fixes).
- spi: spi-fsl-lpspi: Fix scldiv calculation (git-fixes).
- spi: spidev: Add missing spi_device_id for bh2228fv (git-fixes).
- squashfs: squashfs_read_data need to check if the length is 0 (git-fixes).
- ssb: Fix division by zero issue in ssb_calc_clock_rate (stable-fixes).
- staging: iio: resolver: ad2s1210: fix use before initialization (stable-fixes).
- staging: ks7010: disable bh on tx_dev_lock (stable-fixes).
- string.h: Introduce memtostr() and memtostr_pad() (bsc#1228849).
- sunrpc: add a struct rpc_stats arg to rpc_create_args (git-fixes).
- swiotlb: do not set total_used to 0 in swiotlb_create_debugfs_files() (git-fixes).
- swiotlb: fix swiotlb_bounce() to do partial sync's correctly (git-fixes).
- syscalls: fix compat_sys_io_pgetevents_time64 usage (git-fixes).
- thermal/drivers/broadcom: Fix race between removal and clock disable (git-fixes).
- thermal: bcm2835: Convert to platform remove callback returning void (stable-fixes).
- thunderbolt: Mark XDomain as unplugged when router is removed (stable-fixes).
- tools/perf: Fix perf bench epoll to enable the run when some CPU's are offline (bsc#1227747).
- tools/perf: Fix perf bench futex to enable the run when some CPU's are offline (bsc#1227747).
- tools/perf: Fix timing issue with parallel threads in perf bench wake-up-parallel (bsc#1227747).
- tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids (git-fixes).
- tools/resolve_btfids: Fix cross-compilation to non-host endianness (git-fixes).
- tools/resolve_btfids: Refactor set sorting with types from btf_ids.h (git-fixes).
- tools/resolve_btfids: fix build with musl libc (git-fixes).
- trace/pid_list: Change gfp flags in pid_list_fill_irq() (git-fixes).
- tracing: Return from tracing_buffers_read() if the file has been closed (bsc#1229136 git-fixes).
- tty: atmel_serial: use the correct RTS flag (git-fixes).
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port (git-fixes).
- usb: cdnsp: fix for Link TRB with TC (git-fixes).
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function (git-fixes).
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() (git-fixes).
- usb: dwc3: core: Skip setting event buffers for host only controllers (stable-fixes).
- usb: dwc3: omap: add missing depopulate in probe error path (git-fixes).
- usb: dwc3: st: add missing depopulate in probe error path (git-fixes).
- usb: dwc3: st: fix probed platform device ref count on probe error path (git-fixes).
- usb: gadget: core: Check for unset descriptor (git-fixes).
- usb: gadget: fsl: Increase size of name buffer for endpoints (stable-fixes).
- usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed (git-fixes).
- usb: gadget: u_serial: Set start_delayed during suspend (git-fixes).
- usb: gadget: uvc: cleanup request when not in correct state (stable-fixes).
- usb: typec: fsa4480: Add support to swap SBU orientation (git-fixes).
- usb: typec: fsa4480: Check if the chip is really there (git-fixes).
- usb: typec: fsa4480: Relax CHIP_ID check (git-fixes).
- usb: typec: fsa4480: add support for Audio Accessory Mode (git-fixes).
- usb: typec: fsa4480: rework mux &amp; switch setup to handle more states (git-fixes).
- usb: vhci-hcd: Do not drop references before new references are gained (stable-fixes).
- vfio/pci: fix potential memory leak in vfio_intx_enable() (git-fixes).
- vhost-scsi: Handle vhost_vq_work_queue failures for events (git-fixes).
- vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler (git-fixes).
- vhost/vsock: always initialize seqpacket_allow (git-fixes).
- vhost: Release worker mutex during flushes (git-fixes).
- vhost: Use virtqueue mutex for swapping worker (git-fixes).
- virt: guest_memfd: fix reference leak on hwpoisoned page (git-fixes).
- virtio-crypto: handle config changed by work queue (git-fixes).
- virtio: reenable config if freezing device failed (git-fixes).
- virtio_net: use u64_stats_t infra to avoid data-races (git-fixes).
- virtiofs: forbid newlines in tags (bsc#1229940).
- wifi: ath12k: fix memory leak in ath12k_dp_rx_peer_frag_setup() (stable-fixes).
- wifi: ath12k: fix soft lockup on suspend (git-fixes).
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion (git-fixes).
- wifi: cfg80211: fix reporting failed MLO links status with cfg80211_connect_done (git-fixes).
- wifi: iwlwifi: fw: fix wgds rev 3 exact size (git-fixes).
- wifi: mac80211: use monitor sdata with driver only if desired (git-fixes).
- wifi: mwifiex: duplicate static structs used in driver instances (git-fixes).
- wifi: nl80211: disallow setting special AP channel widths (stable-fixes).
- wifi: nl80211: do not give key data to userspace (stable-fixes).
- wifi: rtw88: usb: Fix disconnection after beacon loss (stable-fixes).
- wifi: wfx: repair open network AP mode (git-fixes).
- workqueue: Improve scalability of workqueue watchdog touch (bsc#1193454).
- workqueue: wq_watchdog_touch is always called with valid CPU (bsc#1193454).
- x86/asm: Use %c/%n instead of %P operand modifier in asm templates (git-fixes).
- x86/entry/64: Remove obsolete comment on tracing vs. SYSRET (git-fixes).
- x86/mm: Fix pti_clone_entry_text() for i386 (git-fixes).
- x86/mm: Fix pti_clone_pgtable() alignment assumption (git-fixes).
- x86/mtrr: Check if fixed MTRRs exist before saving them (git-fixes).
- x86/numa: Fix SRAT lookup of CFMWS ranges with numa_fill_memblks() (git-fixes).
- x86/numa: Fix the address overlap check in numa_fill_memblks() (git-fixes).
- x86/numa: Fix the sort compare func used in numa_fill_memblks() (git-fixes).
- x86/numa: Introduce numa_fill_memblks() (git-fixes).
- x86/pci: Skip early E820 check for ECAM region (git-fixes).
- x86/xen: Convert comma to semicolon (git-fixes).
- xfs: Fix missing interval for missing_owner in xfs fsmap (git-fixes).
- xfs: Fix the owner setting issue for rmap query in xfs fsmap (git-fixes).
- xfs: allow cross-linking special files without project quota (git-fixes).
- xfs: allow symlinks with short remote targets (bsc#1229160).
- xfs: allow unlinked symlinks and dirs with zero size (git-fixes).
- xfs: attr forks require attr, not attr2 (git-fixes).
- xfs: convert comma to semicolon (git-fixes).
- xfs: do not use current-&gt;journal_info (git-fixes).
- xfs: fix unlink vs cluster buffer instantiation race (git-fixes).
- xfs: honor init_xattrs in xfs_init_new_inode for !ATTR fs (git-fixes).
- xfs: journal geometry is not properly bounds checked (git-fixes).
- xfs: match lock mode in xfs_buffered_write_iomap_begin() (git-fixes).
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery (git-fixes).
- xfs: upgrade the extent counters in xfs_reflink_end_cow_extent later (git-fixes).
- xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code (git-fixes).
- xfs: use consistent uid/gid when grabbing dquots for inodes (git-fixes).
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (git-fixes).
- xprtrdma: Fix rpcrdma_reqs_reset() (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="6.4.0" release="19.1" arch="nosrc" src="nosrc/kernel-default-6.4.0-19.1.nosrc.rpm">
          <filename>kernel-default-6.4.0-19.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="6.4.0" release="19.1" arch="x86_64" src="x86_64/kernel-default-6.4.0-19.1.x86_64.rpm">
          <filename>kernel-default-6.4.0-19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-debuginfo" epoch="0" version="6.4.0" release="19.1" arch="x86_64" src="x86_64/kernel-default-debuginfo-6.4.0-19.1.x86_64.rpm">
          <filename>kernel-default-debuginfo-6.4.0-19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-debugsource" epoch="0" version="6.4.0" release="19.1" arch="x86_64" src="x86_64/kernel-default-debugsource-6.4.0-19.1.x86_64.rpm">
          <filename>kernel-default-debugsource-6.4.0-19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-extra" epoch="0" version="6.4.0" release="19.1" arch="x86_64" src="x86_64/kernel-default-extra-6.4.0-19.1.x86_64.rpm">
          <filename>kernel-default-extra-6.4.0-19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-extra-debuginfo" epoch="0" version="6.4.0" release="19.1" arch="x86_64" src="x86_64/kernel-default-extra-debuginfo-6.4.0-19.1.x86_64.rpm">
          <filename>kernel-default-extra-debuginfo-6.4.0-19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-kvmsmall" epoch="0" version="6.4.0" release="19.1" arch="nosrc" src="nosrc/kernel-kvmsmall-6.4.0-19.1.nosrc.rpm">
          <filename>kernel-kvmsmall-6.4.0-19.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-kvmsmall" epoch="0" version="6.4.0" release="19.1" arch="x86_64" src="x86_64/kernel-kvmsmall-6.4.0-19.1.x86_64.rpm">
          <filename>kernel-kvmsmall-6.4.0-19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-kvmsmall-debuginfo" epoch="0" version="6.4.0" release="19.1" arch="x86_64" src="x86_64/kernel-kvmsmall-debuginfo-6.4.0-19.1.x86_64.rpm">
          <filename>kernel-kvmsmall-debuginfo-6.4.0-19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-kvmsmall-debugsource" epoch="0" version="6.4.0" release="19.1" arch="x86_64" src="x86_64/kernel-kvmsmall-debugsource-6.4.0-19.1.x86_64.rpm">
          <filename>kernel-kvmsmall-debugsource-6.4.0-19.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="6.4.0" release="17.1.1.51" arch="src" src="src/kernel-default-base-6.4.0-17.1.1.51.src.rpm">
          <filename>kernel-default-base-6.4.0-17.1.1.51.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="6.4.0" release="17.1.1.51" arch="x86_64" src="x86_64/kernel-default-base-6.4.0-17.1.1.51.x86_64.rpm">
          <filename>kernel-default-base-6.4.0-17.1.1.51.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>44</id>
    <title>Security update for expat</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1728989899" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221289" id="1221289" title="VUL-0: CVE-2024-28757: expat: libexpat: XML Entity Expansion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229930" id="1229930" title="VUL-0: CVE-2024-45490: expat: reject negative len for XML_ParseBuffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229931" id="1229931" title="VUL-0: CVE-2024-45491: expat: detect integer overflow in dtdCopy" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229932" id="1229932" title="VUL-0: CVE-2024-45492: expat: detect integer overflow in function nextScaffoldPart" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28757" id="CVE-2024-28757" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28757" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45490" id="CVE-2024-45490" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45490" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45491" id="CVE-2024-45491" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45491" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45492" id="CVE-2024-45492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45492" type="cve" />
    </references>
    <description>This update for expat fixes the following issues:

- CVE-2024-45492: detect integer overflow in function nextScaffoldPart (bsc#1229932) 
- CVE-2024-45491: detect integer overflow in dtdCopy (bsc#1229931)
- CVE-2024-45490: reject negative len for XML_ParseBuffer (bsc#1229930)
- CVE-2024-28757: XML Entity Expansion attack when there is isolated use of external parsers (bsc#1221289) 
</description>
    <pkglist>
      <collection>
        <package name="expat" epoch="0" version="2.5.0" release="3.1" arch="src" src="src/expat-2.5.0-3.1.src.rpm">
          <filename>expat-2.5.0-3.1.src.rpm</filename>
        </package>
        <package name="expat-debugsource" epoch="0" version="2.5.0" release="3.1" arch="x86_64" src="x86_64/expat-debugsource-2.5.0-3.1.x86_64.rpm">
          <filename>expat-debugsource-2.5.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libexpat1" epoch="0" version="2.5.0" release="3.1" arch="x86_64" src="x86_64/libexpat1-2.5.0-3.1.x86_64.rpm">
          <filename>libexpat1-2.5.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libexpat1-debuginfo" epoch="0" version="2.5.0" release="3.1" arch="x86_64" src="x86_64/libexpat1-debuginfo-2.5.0-3.1.x86_64.rpm">
          <filename>libexpat1-debuginfo-2.5.0-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>62</id>
    <title>Security update for runc</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1729001246" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192051" id="1192051" title="docker and podman block faccessat2 syscall" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214960" id="1214960" title="ssh slowness when many entries in /proc/mounts (created by containers) ref:_00D1igLOd._5005qVSkHB:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221050" id="1221050" title="runc: runtime/cgo: pthread_create failed: Operation not permitted in bci-base 15.6" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230092" id="1230092" title="VUL-0: CVE-2024-45310: runc: runc can be tricked into creating empty files/directories on host" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45310" id="CVE-2024-45310" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45310" type="cve" />
    </references>
    <description>This update for runc fixes the following issues:

Update to runc v1.1.14. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.14&gt;.

- CVE-2024-45310: Fixed that runc can be tricked into creating empty files/directories on host ( bsc#1230092)

Update to runc v1.1.13. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.13&gt;.

- Fixed a performance issue when running lots of containers, caused by systemd getting
  too many mount notifications. bsc#1214960
- Fixed -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050
</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.1.14" release="1.1" arch="src" src="src/runc-1.1.14-1.1.src.rpm">
          <filename>runc-1.1.14-1.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.1.14" release="1.1" arch="x86_64" src="x86_64/runc-1.1.14-1.1.x86_64.rpm">
          <filename>runc-1.1.14-1.1.x86_64.rpm</filename>
        </package>
        <package name="runc-debuginfo" epoch="0" version="1.1.14" release="1.1" arch="x86_64" src="x86_64/runc-debuginfo-1.1.14-1.1.x86_64.rpm">
          <filename>runc-debuginfo-1.1.14-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>63</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1729001257" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228971" id="1228971" title="Install compile_commands.json in kernel live patching devel package" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1012628" id="1012628" title="Continuous stable update tracker for Tumbleweed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1193454" id="1193454" title="Partner-L3: SLES15 SP4: Hardlockups observed while doing smt=off or offlining cores.[Denali][P10][2TB/240c]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194869" id="1194869" title="[TRACKERBUG] 5.14 powerpc base kernel fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205462" id="1205462" title="Switching SMT modes takes a long time" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208783" id="1208783" title="Kernel hard lockup when initializing FW sound device with jackdbus" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213123" id="1213123" title="VUL-0: CVE-2023-37453: kernel: out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214285" id="1214285" title="All threads of hotplugged CPUs onlined by kernel even when SMT mode with fewer threads is set." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215199" id="1215199" title="[trackerbug] 6.4 powerpc base kernel fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220066" id="1220066" title="SLES15 SP6: NVME Subsytem not recovered after NVME subsystem reset (Shearwater/NVME/Denali/P10)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220252" id="1220252" title="VUL-0: CVE-2024-26590: kernel-source,kernel-source-azure,kernel-source-rt: erofs: fix inconsistent per-file compression format" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220877" id="1220877" title="VUL-0: CVE-2023-52581: kernel: netfilter: nf_tables: fix memleak when more than 255 elements expired" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221326" id="1221326" title="VUL-0: CVE-2023-52489: kernel: mm/sparsemem: fix race in accessing memory_section-&gt;usage" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221630" id="1221630" title="VUL-0: CVE-2024-26631: kernel: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221645" id="1221645" title="SLES15 SP6 - [P10] - LPAR crashes and hangs on running ksefltest powerpc/mce/inject-ra-err with parameter &quot;percpu_alloc=page&quot; enabled" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221652" id="1221652" title="VUL-0: CVE-2024-26637: kernel: wifi: ath11k: rely on mac80211 debugfs handling for vif" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221857" id="1221857" title="[NetApp SLES15 SP6 Bug]: nvme connect with --tls_key option succeeds, but fails with --tls option" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222254" id="1222254" title="Unresponsive /run/systemd/userdb/io.systemd.DynamicUser adding 45 second delay to su commands" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222335" id="1222335" title="VUL-0: CVE-2024-26668: kernel: netfilter: nft_limit: reject configurations that cause integer overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222350" id="1222350" title="VUL-0: CVE-2024-26669: kernel: net/sched: flower: Fix chain template offload" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222364" id="1222364" title="VUL-0: CVE-2024-26720: kernel: mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222372" id="1222372" title="VUL-0: CVE-2024-26735: kernel: ipv6: sr: fix possible use-after-free and null-ptr-deref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222387" id="1222387" title="VUL-0: CVE-2024-26677: kernel: rxrpc: Fix delayed ACKs to not set the reference serial number" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222433" id="1222433" title="VUL-0: CVE-2024-26682: kernel: wifi: mac80211: improve CSA/ECSA connection refusal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222434" id="1222434" title="VUL-0: CVE-2024-26683: kernel: wifi: cfg80211: detect stuck ECSA element in probe resp" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222625" id="1222625" title="VUL-0: CVE-2024-27437: kernel: vfio/pci: Disable auto-enable of exclusive INTx IRQ" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222633" id="1222633" title="VUL-0: CVE-2024-26809: kernel: netfilter: nft_set_pipapo: release elements in clone only from destroy path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222634" id="1222634" title="VUL-0: CVE-2024-26808: kernel: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222808" id="1222808" title="VUL-0: CVE-2024-26812: kernel: vfio/pci: Create persistent INTx handler" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222967" id="1222967" title="VUL-0: CVE-2024-26835: kernel: netfilter: nf_tables: table marked as active but no registered hooks during memory pressure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222973" id="1222973" title="VUL-0: CVE-2024-26837: kernel: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223053" id="1223053" title="VUL-0: CVE-2024-26849: kernel: netlink: read past the malformed (too small) attribute" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223074" id="1223074" title="VUL-0: CVE-2024-26851: kernel: netfilter: nf_conntrack_h323: bmp length out of range" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223191" id="1223191" title="powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223395" id="1223395" title="clustermd doesn't do recovery after adding a new disk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223635" id="1223635" title="VUL-0: CVE-2024-26976: kernel: KVM: Always flush async #PF workqueue when vCPU is being destroyed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223720" id="1223720" title="VUL-0: CVE-2024-27010: kernel: net/sched: Fix mirred deadlock on device recursion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223731" id="1223731" title="VUL-0: CVE-2024-26944: kernel: btrfs: zoned: use-after-free in do_zone_finish()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223742" id="1223742" title="VUL-0: CVE-2024-27079: kernel: iommu/vt-d: Fix NULL domain on device release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223763" id="1223763" title="VUL-0: CVE-2024-27049: kernel: wifi: mt76: mt7925e: fix use-after-free in free_irq()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223767" id="1223767" title="VUL-0: CVE-2024-27050: libbpf: use OPTS_SET() macro in bpf_xdp_query()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223777" id="1223777" title="VUL-0: CVE-2024-27024: kernel: net/rds: fix WARNING in rds_conn_connect_if_down" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223803" id="1223803" title="VUL-0: CVE-2024-27011: kernel: netfilter: nf_tables: fix memleak in map from abort path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224105" id="1224105" title="[SLES15 SP4] [native nvme multipath] Delays observed in device wwn symmlink initialization in scaled environment" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224415" id="1224415" title="VUL-0: CVE-2024-27403: kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224485" id="1224485" title="VUL-0: CVE-2024-35913: kernel: wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224496" id="1224496" title="VUL-0: CVE-2024-35902: kernel: net/rds: fix possible cp null dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224510" id="1224510" title="VUL-0: CVE-2024-35897: kernel: netfilter: nf_tables: discard table flag update with pending basechain deletion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224535" id="1224535" title="VUL-0: CVE-2024-35939: kernel: dma-direct: Leak pages on dma_set_decrypted() failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224631" id="1224631" title="VUL-0: CVE-2023-52688: kernel: wifi: ath12k: fix the error handler of rfkill config" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224636" id="1224636" title="VUL-0: CVE-2024-35854: kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224690" id="1224690" title="VUL-0: CVE-2023-52668: kernel: btrfs: zoned: fix lock ordering in btrfs_zone_activate()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224694" id="1224694" title="VUL-0: CVE-2024-35855: kernel: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224700" id="1224700" title="VUL-0: CVE-2024-35949: kernel: btrfs: make sure that WRITTEN is set on all metadata blocks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224711" id="1224711" title="VUL-0: CVE-2024-27433: kernel: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225475" id="1225475" title="VUL-0: CVE-2023-52735: kernel: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225582" id="1225582" title="VUL-0: CVE-2023-52859: kernel: perf: hisi: Fix use-after-free when register pmu fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225607" id="1225607" title="[PATCH] printk: console flushing fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225718" id="1225718" title="VUL-0: CVE-2024-36881: kernel: mm/userfaultfd: reset ptes when close() for wr-protected ones" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225751" id="1225751" title="VUL-0: CVE-2024-36907: kernel: SUNRPC: add a missing rpc_stat for TCP TLS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225814" id="1225814" title="VUL-0: CVE-2024-36929: kernel: net: core: reject skb_copy(_expand) for fraglist GSO skbs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225832" id="1225832" title="VUL-0: CVE-2024-36933: kernel: nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225838" id="1225838" title="VUL-0: CVE-2024-36939: kernel: nfs: Handle error of rpc_proc_register() in nfs_net_init()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225903" id="1225903" title="bpf: backport of iterator and callback handling fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226031" id="1226031" title="apparmor stops working due to &quot;aa-logprof   ERROR: Can't parse mount rule mount             &quot;&quot;      -&gt; &quot;/&quot;,&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226127" id="1226127" title="VUL-0: CVE-2024-36970: kernel: wifi: iwlwifi: Use request_module_nowait" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226502" id="1226502" title="Backport arm64 write combining support optimization to SLES 15" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226530" id="1226530" title="[Trackerbug] Mana: Add support for page sizes other than 4KB on ARM64" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226588" id="1226588" title="cachefiles: remove requests from xarray during flushing requests" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226604" id="1226604" title="VUL-0: CVE-2024-36979: kernel: net: bridge: mst: fix vlan use-after-free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226743" id="1226743" title="VUL-0: CVE-2024-38563: kernel: wifi: mt76: mt7996: fix potential memory leakage when reading chip temperature" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226751" id="1226751" title="VUL-0: CVE-2024-38609: kernel: wifi: mt76: connac: check for null before dereferencing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226765" id="1226765" title="VUL-0: CVE-2024-31076: kernel: genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226798" id="1226798" title="VUL-0: CVE-2024-36270: kernel: netfilter: tproxy: bail out if IP has been disabled on the device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226801" id="1226801" title="VUL-0: CVE-2024-36286: kernel: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226834" id="1226834" title="VUL-0: CVE-2024-36288: kernel: SUNRPC: Fix loop termination condition in gss_free_in_token_pages()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226874" id="1226874" title="VUL-0: CVE-2024-36489: kernel: tls: fix missing memory barrier in tls_init" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226885" id="1226885" title="VUL-0: CVE-2024-38662: kernel: bpf: allow delete from sockmap/sockhash only if update is allowed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226920" id="1226920" title="Partner-L3: SLES15 SP6 GM [ Brazos ] [ 31TB/192c ]: Brazos 32TB/192c system fails to boot with SLES15 SP6." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227149" id="1227149" title="Bump base code of iwlwifi to 6.9.x (or 6.10.x)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227182" id="1227182" title="Builtin microphone doesn't work on OMEN by HP Gaming Laptop 16-n0xxx" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227383" id="1227383" title="VUL-0: kernel: slab-out-of-bounds in hex_dump_to_buffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227437" id="1227437" title="VUL-0: CVE-2024-39476: kernel: md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227492" id="1227492" title="VUL-0: CVE-2024-39486: kernel: drm/drm_file: Fix pid refcounting race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227493" id="1227493" title="VUL-0: CVE-2024-39484: kernel: mmc: davinci: Don't strip remove function when driver is builtin" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227494" id="1227494" title="VUL-0: CVE-2024-39483: kernel: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227618" id="1227618" title="VUL-0: CVE-2024-39488: kernel: arm64: asm-bug: add .align 2 to the end of __BUG_ENTRY" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227620" id="1227620" title="VUL-0: CVE-2024-39493: kernel: crypto: qat - fix ADF_DEV_RESET_SYNC memory leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227623" id="1227623" title="VUL-0: CVE-2024-39489: kernel: ipv6: sr: fix memleak in seg6_hmac_init_algo" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227627" id="1227627" title="VUL-0: CVE-2024-39491: kernel: ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227634" id="1227634" title="SLES 15 SP6 - KVM: s390: unhandled guest LPSWEY instruction" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227706" id="1227706" title="[NetApp SLES15 SP6 RFE]: Add new NVMe queue-depth based I/O scheduler" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227722" id="1227722" title="VUL-0: CVE-2024-39497: kernel: drm/shmem-helper: fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227724" id="1227724" title="VUL-0: CVE-2024-39500: kernel: sock_map: avoid race between sock_map_close and sk_psock_put" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227725" id="1227725" title="VUL-0: CVE-2024-39499: kernel: vmci: prevent speculation leaks by sanitizing event in event_deliver()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227728" id="1227728" title="VUL-0: CVE-2024-39505: kernel: drm/komeda: check for error-valued pointer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227729" id="1227729" title="VUL-0: CVE-2024-39506: kernel: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227732" id="1227732" title="VUL-0: CVE-2024-39508: kernel: io_uring/io-wq: use set_bit() and test_bit() at worker-&gt;flags" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227733" id="1227733" title="VUL-0: CVE-2024-39509: kernel: HID: core: remove unnecessary WARN_ON() in implement()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227734" id="1227734" title="VUL-0: CVE-2024-39510: kernel: cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227747" id="1227747" title="SLES15 SP6 [6.4.0-150600.13-default] perf bench futex/wake-parallel test fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227750" id="1227750" title="VUL-0: CVE-2023-52885: kernel: SUNRPC: Fix UAF in svc_tcp_listen_data_ready()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227754" id="1227754" title="VUL-0: CVE-2024-39501: kernel: drivers: core: synchronize really_probe() and dev_uevent()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227758" id="1227758" title="VUL-0: CVE-2024-40899: kernel: cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227760" id="1227760" title="VUL-0: CVE-2024-40900: kernel: cachefiles: remove requests from xarray during flushing requests" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227761" id="1227761" title="VUL-0: CVE-2024-40905: kernel: ipv6: fix possible race in __fib6_drop_pcpu_from()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227764" id="1227764" title="VUL-0: CVE-2024-40902: kernel: jfs: xattr: fix buffer overflow for invalid xattr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227766" id="1227766" title="VUL-0: CVE-2024-40903: kernel: usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227770" id="1227770" title="VUL-0: CVE-2024-40942: kernel: wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227771" id="1227771" title="VUL-0: CVE-2024-40941: kernel: wifi: iwlwifi: mvm: don't read past the mfuart notifcation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227772" id="1227772" title="VUL-0: CVE-2024-40904: kernel: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227774" id="1227774" title="VUL-0: CVE-2024-40929: kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227781" id="1227781" title="VUL-0: CVE-2024-40920: kernel: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227784" id="1227784" title="VUL-0: CVE-2024-40921: kernel: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227785" id="1227785" title="VUL-0: CVE-2024-40922: kernel: io_uring/rsrc: don't lock while !TASK_RUNNING" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227787" id="1227787" title="VUL-0: CVE-2024-40924: kernel: drm/i915/dpt: make DPT object unshrinkable" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227790" id="1227790" title="VUL-0: CVE-2024-40912: kernel: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227791" id="1227791" title="VUL-0: CVE-2024-40926: kernel: drm/nouveau: don't attempt to schedule hpd_work on headless cards" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227792" id="1227792" title="VUL-0: CVE-2024-40911: kernel: wifi: cfg80211: Lock wiphy in cfg80211_get_station" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227796" id="1227796" title="VUL-0: CVE-2024-40934: kernel: HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227798" id="1227798" title="VUL-0: CVE-2024-40909: kernel: bpf: Fix a potential use-after-free in bpf_link_free()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227799" id="1227799" title="VUL-0: CVE-2024-40939: kernel: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227802" id="1227802" title="VUL-0: CVE-2024-40945: kernel: iommu: Return right value in iommu_sva_bind_device()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227808" id="1227808" title="VUL-0: CVE-2024-40954: kernel: net: do not leave a dangling sk pointer, when socket creation fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227810" id="1227810" title="VUL-0: CVE-2024-40956: kernel: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227811" id="1227811" title="VUL-0: CVE-2024-40957: kernel: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227812" id="1227812" title="VUL-0: CVE-2024-40958: kernel: netns: Make get_net_ns() handle zero refcount net" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227815" id="1227815" title="VUL-0: CVE-2024-40962: kernel: btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227816" id="1227816" title="VUL-0: CVE-2024-40927: kernel: xhci: handle TD clearing for multiple streams case" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227818" id="1227818" title="VUL-0: CVE-2024-40964: kernel: ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227820" id="1227820" title="VUL-0: CVE-2024-40984: kernel: ACPICA: Revert &quot;ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227823" id="1227823" title="VUL-0: CVE-2024-40989: kernel: KVM: arm64: Disassociate vcpus from redistributor region on teardown" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227824" id="1227824" title="VUL-0: CVE-2024-40990: kernel: RDMA/mlx5: Add check for srq max_sge attribute" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227826" id="1227826" title="VUL-0: CVE-2024-40992: kernel: RDMA/rxe: Fix responder length checking for UD request packets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227828" id="1227828" title="VUL-0: CVE-2024-40932: kernel: drm/exynos/vidi: fix memory leak in .get_modes()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227829" id="1227829" title="VUL-0: CVE-2024-40994: kernel: ptp: fix integer overflow in max_vclocks_store" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227830" id="1227830" title="VUL-0: CVE-2024-40995: kernel: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227832" id="1227832" title="VUL-0: CVE-2024-40910: kernel: ax25: Fix refcount imbalance on inbound connections" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227833" id="1227833" title="VUL-0: CVE-2024-40936: kernel: cxl/region: fix memregion leaks in devm_cxl_add_region()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227834" id="1227834" title="[TRACKERBUG] Enable the vdpa driver on SLE15SP6 natively" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227839" id="1227839" title="VUL-0: CVE-2024-40913: kernel: cachefiles: defer exposing anon_fd until after copy_to_user() succeeds" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227840" id="1227840" title="VUL-0: CVE-2024-40938: kernel: landlock: fix d_parent walk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227846" id="1227846" title="VUL-0: CVE-2024-40916: kernel: drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227849" id="1227849" title="VUL-0: CVE-2024-40943: kernel: ocfs2: fix races between hole punching and AIO+DIO" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227851" id="1227851" title="VUL-0: CVE-2024-41004: kernel: tracing: build event generation tests only as modules" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227853" id="1227853" title="VUL-0: CVE-2024-40997: kernel: cpufreq: amd-pstate: fix memory leak on CPU EPP exit" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227863" id="1227863" title="VUL-0: CVE-2024-41007: kernel: tcp: avoid too many retransmit packets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227864" id="1227864" title="VUL-0: CVE-2024-40981: kernel: batman-adv: bypass empty buckets in batadv_purge_orig_ref()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227865" id="1227865" title="VUL-0: CVE-2024-40982: kernel: ssb: fix potential NULL pointer dereference in ssb_device_uevent()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227867" id="1227867" title="VUL-0: CVE-2024-41000: kernel: block/ioctl: prefer different overflow check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227869" id="1227869" title="VUL-0: CVE-2024-41001: kernel: io_uring/sqpoll: work around a potential audit memory leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227870" id="1227870" title="VUL-0: CVE-2024-41002: kernel: crypto: hisilicon/sec - fix memory leak for sec resource release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227883" id="1227883" title="VUL-0: CVE-2024-40944: kernel: x86/kexec: Fix bug with call depth tracking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227884" id="1227884" title="VUL-0: CVE-2024-40959: kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227891" id="1227891" title="VUL-0: CVE-2024-40967: kernel: serial: imx: Introduce timeout when waiting on transmitter empty" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227893" id="1227893" title="VUL-0: CVE-2024-40976: kernel: drm/lima: mask irqs in timeout path before hard reset" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227929" id="1227929" title="VUL-0: CVE-2024-40978: kernel: scsi: qedi: Fix crash while reading debugfs attribute" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227950" id="1227950" title="VUL-0: CVE-2024-40977: kernel: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227957" id="1227957" title="VUL-0: CVE-2024-40988: kernel: drm/radeon: fix UBSAN warning in kv_dpm.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227981" id="1227981" title="VUL-0: CVE-2023-52886: kernel: USB: core: Fix race by not overwriting udev-&gt;descriptor in hub_port_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228020" id="1228020" title="VUL-0: CVE-2024-41009: kernel: bpf: Fix overrunning reservations in ringbuf" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228021" id="1228021" title="VUL-0: CVE-2024-41010: kernel: bpf: Fix too early release of tcx_entry" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228192" id="1228192" title="libceph: fix race between delayed_work() and ceph_monc_stop()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228235" id="1228235" title="VUL-0: CVE-2024-40987: kernel: drm/amdgpu: fix UBSAN warning in kv_dpm.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228236" id="1228236" title="VUL-0: CVE-2024-40930: kernel: wifi: cfg80211: validate HE operation element parsing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228247" id="1228247" title="VUL-0: CVE-2024-41012: kernel: filelock: Remove locks reliably when fcntl/close race is detected" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228321" id="1228321" title="fstests btrfs/300 fails on kernel 6.4" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228409" id="1228409" title="VUL-0: CVE-2024-41015: kernel: ocfs2: add bounds checking to ocfs2_check_dir_entry()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228410" id="1228410" title="VUL-0: CVE-2024-41016: kernel: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228426" id="1228426" title="VUL-0: CVE-2023-52887: kernel: net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228427" id="1228427" title="VUL-0: CVE-2024-41020: kernel: filelock: fix fcntl/close race recovery compat path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228429" id="1228429" title="VUL-0: CVE-2024-41022: kernel: drm/amdgpu: fix signedness bug in sdma_v4_0_process_trap_irq()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228446" id="1228446" title="VUL-0: CVE-2024-42095: kernel: serial: 8250_omap: Implementation of Errata i2310" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228447" id="1228447" title="VUL-0: CVE-2024-42092: kernel: gpio: davinci: Validate the obtained number of IRQs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228449" id="1228449" title="VUL-0: CVE-2024-42090: kernel: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228450" id="1228450" title="VUL-0: CVE-2024-42089: kernel: ASoC: fsl-asoc-card: set priv-&gt;pdev before using it" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228452" id="1228452" title="VUL-0: CVE-2024-42086: kernel: iio: chemical: bme680: Fix overflows in compensate() functions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228456" id="1228456" title="VUL-0: CVE-2024-42085: kernel: usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228457" id="1228457" title="VUL-0: CVE-2024-42073: kernel: mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228458" id="1228458" title="VUL-0: CVE-2024-41094: kernel: drm/fbdev-dma: Only set smem_start is enable per module option" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228459" id="1228459" title="VUL-0: CVE-2024-41058: kernel: cachefiles: fix slab-use-after-free in fscache_withdraw_volume()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228460" id="1228460" title="VUL-0: CVE-2024-41032: kernel: mm: vmalloc: check if a hash-index is in cpu_possible_mask" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228462" id="1228462" title="VUL-0: CVE-2024-41057: kernel: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228463" id="1228463" title="VUL-0: CVE-2024-42069: kernel: net: mana: Fix possible double free in error handling path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228466" id="1228466" title="VUL-0: CVE-2024-41087: kernel: ata: libata-core: Fix double free on error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228468" id="1228468" title="VUL-0: CVE-2024-41051: kernel: cachefiles: wait for ondemand_object_worker to finish when dropping object" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228469" id="1228469" title="VUL-0: CVE-2024-41088: kernel: can: mcp251xfd: fix infinite loop when xmit fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228470" id="1228470" title="VUL-0: CVE-2024-42070: kernel: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228472" id="1228472" title="VUL-0: CVE-2024-41084: kernel: cxl/region: Avoid null pointer dereference in region lookup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228479" id="1228479" title="VUL-0: CVE-2024-41096: kernel: PCI/MSI: Fix UAF in msi_capability_init" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228480" id="1228480" title="VUL-0: CVE-2024-41056: kernel: firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228481" id="1228481" title="VUL-0: CVE-2024-42074: kernel: ASoC: amd: acp: add a null check for chip_pdev structure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228482" id="1228482" title="VUL-0: CVE-2024-42082: kernel: xdp: Remove WARN() from __xdp_reg_mem_model()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228483" id="1228483" title="VUL-0: CVE-2024-41092: kernel: drm/i915/gt: Fix potential UAF by revoke of fence registers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228484" id="1228484" title="VUL-0: CVE-2024-42076: kernel: net: can: j1939: Initialize unused data in j1939_send_one()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228485" id="1228485" title="VUL-0: CVE-2024-41035: kernel: USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228486" id="1228486" title="VUL-0: CVE-2024-41049: kernel: filelock: fix potential use-after-free in posix_lock_inode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228487" id="1228487" title="VUL-0: CVE-2024-42148: kernel: bnx2x: Fix multiple UBSAN array-index-out-of-bounds" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228489" id="1228489" title="VUL-0: CVE-2024-42230: kernel: powerpc/pseries: Fix scv instruction crash with kexec" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228491" id="1228491" title="VUL-0: CVE-2024-42142: kernel: net/mlx5: E-switch, Create ingress ACL when needed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228492" id="1228492" title="VUL-0: CVE-2024-42132: kernel: bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228493" id="1228493" title="VUL-0: CVE-2024-42106: kernel: inet_diag: Initialize pad field in struct inet_diag_req_v2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228494" id="1228494" title="VUL-0: CVE-2024-42107: kernel: ice: Don't process extts if PTP is disabled" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228495" id="1228495" title="VUL-0: CVE-2024-42101: kernel: drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228496" id="1228496" title="VUL-0: CVE-2024-41036: kernel: net: ks8851: Fix deadlock with the SPI chip variant" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228499" id="1228499" title="VUL-0: CVE-2024-41050: kernel: cachefiles: cyclic allocation of msg_id to avoid reuse" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228500" id="1228500" title="VUL-0: CVE-2024-42138: kernel: mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228501" id="1228501" title="VUL-0: CVE-2024-42110: kernel: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228502" id="1228502" title="VUL-0: CVE-2024-42141: kernel: Bluetooth: ISO: Check socket flag instead of hcon" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228503" id="1228503" title="VUL-0: CVE-2024-42139: kernel: ice: Fix improper extts handling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228505" id="1228505" title="VUL-0: CVE-2024-42109: kernel: netfilter: nf_tables: unconditionally flush pending work before notifier" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228508" id="1228508" title="VUL-0: CVE-2024-41037: kernel: ASoC: SOF: Intel: hda: fix null deref on system suspend entry" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228509" id="1228509" title="VUL-0: CVE-2024-41038: kernel: firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228510" id="1228510" title="VUL-0: CVE-2024-42153: kernel: i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228511" id="1228511" title="VUL-0: CVE-2024-42133: kernel: Bluetooth: Ignore too large handle values in BIG" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228513" id="1228513" title="VUL-0: CVE-2024-41097: kernel: usb: atm: cxacru: fix endpoint checking in cxacru_bind()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228515" id="1228515" title="VUL-0: CVE-2024-41039: kernel: firmware: cs_dsp: Fix overflow checking of wmfw header" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228516" id="1228516" title="VUL-0: CVE-2024-42077: kernel: ocfs2: fix DIO failure due to insufficient transaction credits" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228518" id="1228518" title="VUL-0: CVE-2024-41040: kernel: net/sched: Fix UAF when resolving a clash" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228520" id="1228520" title="VUL-0: CVE-2024-41041: kernel: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228525" id="1228525" title="VUL-0: CVE-2024-41024: kernel: misc: fastrpc: restrict untrusted app to attach to privileged PD" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228527" id="1228527" title="VUL-0: CVE-2024-41025: kernel: misc: fastrpc: fix memory leak in audio daemon attach operation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228530" id="1228530" title="VUL-0: CVE-2024-41044: kernel: ppp: reject claimed-as-LCP but actually malformed packets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228531" id="1228531" title="VUL-0: CVE-2024-41045: kernel: bpf: Defer work in bpf_timer_cancel_and_free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228539" id="1228539" title="VUL-0: CVE-2024-41028: kernel: platform/x86: toshiba_acpi: fix array out-of-bounds access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228561" id="1228561" title="VUL-0: CVE-2024-41059: kernel: hfsplus: fix uninit-value in copy_name" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228563" id="1228563" title="VUL-0: CVE-2024-42137: kernel: Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228564" id="1228564" title="VUL-0: CVE-2024-42114: kernel: wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228565" id="1228565" title="VUL-0: CVE-2024-41048: kernel: skmsg: Skip zero length skb in sk_msg_recvmsg" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228567" id="1228567" title="VUL-0: CVE-2024-41060: kernel: drm/radeon: check bo_va-&gt;bo is non-NULL before using it" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228568" id="1228568" title="VUL-0: CVE-2024-42113: kernel: net: txgbe: initialize num_q_vectors for MSI/INTx interrupts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228572" id="1228572" title="VUL-0: CVE-2024-41061: kernel: drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228576" id="1228576" title="VUL-0: CVE-2024-41062: kernel: bluetooth/l2cap: sync sock recv cb and release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228579" id="1228579" title="VUL-0: CVE-2024-41068: kernel: s390/sclp: Fix sclp_init() cleanup on failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228580" id="1228580" title="VUL-0: CVE-2024-41063: kernel: bluetooth: hci_core: cancel all works upon hci_unregister_dev()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228581" id="1228581" title="VUL-0: CVE-2024-41070: kernel: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228582" id="1228582" title="VUL-0: CVE-2024-42117: kernel: drm/amd/display: ASSERT when failing to find index by plane/stream id" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228584" id="1228584" title="VUL-0: CVE-2024-42119: kernel: drm/amd/display: Skip finding free audio for unknown engine_id" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228586" id="1228586" title="VUL-0: CVE-2024-42064: kernel: drm/amd/display: Skip pipe if the pipe idx not set properly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228588" id="1228588" title="VUL-0: CVE-2024-42120: kernel: drm/amd/display: Check pipe offset before setting vblank" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228590" id="1228590" title="VUL-0: CVE-2024-42121: kernel: drm/amd/display: Check index msg_id before read or write" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228591" id="1228591" title="VUL-0: CVE-2024-42122: kernel: drm/amd/display: Add NULL pointer check for kzalloc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228599" id="1228599" title="VUL-0: CVE-2024-41064: kernel: powerpc/eeh: avoid possible crash when edev-&gt;pdev changes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228615" id="1228615" title="VUL-0: CVE-2024-41079: kernel: nvmet: always initialize cqe.result" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228616" id="1228616" title="VUL-0: CVE-2024-41080: kernel: io_uring: fix possible deadlock in io_register_iowq_max_workers()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228617" id="1228617" title="VUL-0: CVE-2024-41081: kernel: ila: block BH in ila_output()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228625" id="1228625" title="VUL-0: CVE-2024-41071: kernel: wifi: mac80211: Avoid address calculations via out of bounds array indexing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228626" id="1228626" title="VUL-0: CVE-2024-41072: kernel: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228633" id="1228633" title="VUL-0: CVE-2024-42096: kernel: x86: stop playing stack games in profile_pc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228635" id="1228635" title="VUL-0: CVE-2024-41073: kernel: nvme: avoid double free special payload" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228636" id="1228636" title="VUL-0: CVE-2024-41065: kernel: powerpc/pseries: whitelist dtl slub object for copying to userspace" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228640" id="1228640" title="VUL-0: CVE-2024-41066: kernel: ibmvnic: add tx check to prevent skb leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228643" id="1228643" title="VUL-0: CVE-2024-41074: kernel: cachefiles: Set object to close if ondemand_id &lt; 0 in copen" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228644" id="1228644" title="VUL-0: CVE-2024-41069: kernel: ASoC: topology: fix references to freed memory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228646" id="1228646" title="VUL-0: CVE-2024-41075: kernel: cachefiles: add consistency check for copen/cread" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228649" id="1228649" title="VUL-0: CVE-2024-41076: kernel: NFSv4: Fix memory leak in nfs4_set_security_label" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228650" id="1228650" title="VUL-0: CVE-2024-42131: kernel: mm: avoid overflows in dirty throttling logic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228654" id="1228654" title="VUL-0: CVE-2024-42104: kernel: nilfs2: add missing check for inode numbers on directory entries" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228655" id="1228655" title="VUL-0: CVE-2024-41078: kernel: btrfs: qgroup: fix quota root leak after quota disable failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228656" id="1228656" title="VUL-0: CVE-2024-42115: kernel: jffs2: fix potential illegal address access in jffs2_free_inode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228658" id="1228658" title="VUL-0: CVE-2024-41089: kernel: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228660" id="1228660" title="VUL-0: CVE-2024-41093: kernel: drm/amdgpu: avoid using null object of framebuffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228662" id="1228662" title="VUL-0: CVE-2024-41095: kernel: drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228665" id="1228665" title="VUL-0: CVE-2024-42105: kernel: nilfs2: fix inode number range checks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228666" id="1228666" title="VUL-0: CVE-2024-42144: kernel: thermal/drivers/mediatek/lvts_thermal: check NULL ptr on lvts_data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228667" id="1228667" title="VUL-0: CVE-2024-42228: kernel: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228672" id="1228672" title="VUL-0: CVE-2024-42079: kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228673" id="1228673" title="VUL-0: CVE-2024-42080: kernel: RDMA/restrack: Fix potential invalid address access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228674" id="1228674" title="VUL-0: CVE-2024-42125: kernel: wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228677" id="1228677" title="VUL-0: CVE-2024-42087: kernel: drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228680" id="1228680" title="VUL-0: CVE-2024-42093: kernel: net/dpaa2: Avoid explicit cpumask var allocation on stack" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228687" id="1228687" title="VUL-0: CVE-2024-42130: kernel: nfc/nci: add the inconsistency check between the input data length and count" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228705" id="1228705" title="VUL-0: CVE-2024-42124: kernel: scsi: qedf: Make qedf_execute_tmf() non-preemptible" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228706" id="1228706" title="VUL-0: CVE-2024-42162: kernel: gve: Account for stopped queues when reading NIC stats" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228707" id="1228707" title="VUL-0: CVE-2024-42227: kernel: drm/amd/display: Fix overlapping copy within dml_core_mode_programming" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228708" id="1228708" title="VUL-0: CVE-2024-42229: kernel: crypto: aead,cipher - zeroize key buffer after use" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228709" id="1228709" title="VUL-0: CVE-2024-42226: kernel: usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228710" id="1228710" title="VUL-0: CVE-2024-42225: kernel: wifi: mt76: replace skb_put with skb_put_zero" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228718" id="1228718" title="VUL-0: CVE-2024-42126: kernel: powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228720" id="1228720" title="VUL-0: CVE-2024-42158: kernel: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228721" id="1228721" title="VUL-0: CVE-2024-42127: kernel: drm/lima: fix shared irq handling on driver remove" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228722" id="1228722" title="VUL-0: CVE-2024-42156: kernel: s390/pkey: Wipe copies of clear-key structures on failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228723" id="1228723" title="VUL-0: CVE-2024-42224: kernel: net: dsa: mv88e6xxx: Correct check for empty list" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228724" id="1228724" title="VUL-0: CVE-2024-42152: kernel: nvmet: fix a possible leak when destroy a ctrl during qp establishment" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228726" id="1228726" title="VUL-0: CVE-2024-42223: kernel: media: dvb-frontends: tda10048: Fix integer overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228727" id="1228727" title="VUL-0: CVE-2024-42157: kernel: s390/pkey: Wipe sensitive data on failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228733" id="1228733" title="VUL-0: CVE-2024-42155: kernel: s390/pkey: wipe copies of protected- and secure-keys" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228737" id="1228737" title="system reboot creating VFs with ICE Driver" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228743" id="1228743" title="VUL-0: CVE-2024-42145: kernel: IB/core: implement a limit on UMAD receive List" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228748" id="1228748" title="VUL-0: REJECTED: CVE-2024-42143: kernel: orangefs: fix out-of-bounds fsid access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228754" id="1228754" title="VUL-0: CVE-2024-42159: kernel: scsi: mpi3mr: sanitise num_phys" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228756" id="1228756" title="VUL-0: CVE-2024-42161: kernel: bpf: avoid uninitialized value in BPF_CORE_READ_BITFIELD" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228757" id="1228757" title="SLES 15 SP6 -  tcp_mem overflows causing side effects such as ssh daemon hang" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228758" id="1228758" title="VUL-0: CVE-2024-42136: kernel: cdrom: rearrange last_media_change check to avoid unintentional overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228764" id="1228764" title="VUL-0: CVE-2024-42147: kernel: crypto: hisilicon/debugfs - fix debugfs uninit process issue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228766" id="1228766" title="VUL-0: CVE-2024-42097: kernel: ALSA: emux: improve patch ioctl data validation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228779" id="1228779" title="VUL-0: CVE-2024-42098: kernel: crypto: ecdh - explicitly zeroize private_key" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228801" id="1228801" title="cgroup/cpuset: Prevent UAF in proc_cpuset_show()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228849" id="1228849" title="[SELinux] various AVC denials related to libvirt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228850" id="1228850" title="qla2xxx: update driver to 10.02.09.300-k" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228857" id="1228857" title="Update Broadcom Emulex lpfc driver to 14.4.0.3" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228959" id="1228959" title="VUL-0: CVE-2024-42232: kernel: libceph: fix race between delayed_work() and ceph_monc_stop()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228964" id="1228964" title="VUL-0: CVE-2024-42236: kernel: usb: gadget: configfs: prevent OOB read/write in usb_string_copy()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228966" id="1228966" title="VUL-0: CVE-2024-42240: kernel: x86/bhi: avoid warning in #DB handler due to BHI mitigation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228967" id="1228967" title="VUL-0: CVE-2024-42244: kernel: USB: serial: mos7840: fix crash on resume" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228973" id="1228973" title="SLES 15 SP6 - net/iucv: fix use after free in iucv_sock_close()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228977" id="1228977" title="VUL-0: CVE-2024-42250: kernel: cachefiles: add missing lock protection when polling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228978" id="1228978" title="VUL-0: CVE-2024-42245: kernel: Revert &quot;sched/fair: Make sure to try to detach at least one movable task&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228979" id="1228979" title="VUL-0: CVE-2024-42239: kernel: bpf: Fail bpf_timer_cancel when callback is being cancelled" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228986" id="1228986" title="VUL-0: CVE-2024-42241: kernel: mm/shmem: disable PMD-sized page cache if needed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228988" id="1228988" title="VUL-0: CVE-2024-42247: kernel: wireguard: allowedips: avoid unaligned 64-bit memory accesses" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228989" id="1228989" title="VUL-0: CVE-2024-42246: kernel: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228991" id="1228991" title="VUL-0: CVE-2024-42238: kernel: firmware: cs_dsp: Return error if block header overflows file" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228992" id="1228992" title="VUL-0: CVE-2024-42237: kernel: firmware: cs_dsp: Validate payload length before processing block" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229005" id="1229005" title="VUL-0: CVE-2024-42253: kernel: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229024" id="1229024" title="update minmax implementation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229025" id="1229025" title="SLERT-15SP6: /proc/sys/kernel/printk does not exist" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229042" id="1229042" title="Enable kernel-default-livepatch-devel for TW since it's already enabled on Leap" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229045" id="1229045" title="Sound device not working with kernel 6.4.0-150600.23.17-default" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229046" id="1229046" title="intel sound card not detected after update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229054" id="1229054" title="Error probing device: Error sending ATA command IDENTIFY DEVICE to..." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229056" id="1229056" title="after upgrade to Leap 15.6 suspend/resume kills touchpad" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229086" id="1229086" title="mana: Fix RX buf alloc_size alignment and atomic op panic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229134" id="1229134" title="kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to  strscpy()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229136" id="1229136" title="L3: SLES 15 SP5 kernel soft lockup with timer thread [ ref:_00D1igLOd._500TrFqLno:ref ]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229154" id="1229154" title="mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229156" id="1229156" title="VUL-0: CVE-2024-42259: kernel: drm/i915/gem: fix Virtual Memory mapping boundaries calculation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229160" id="1229160" title="fstests generic/754 fails on xfs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229167" id="1229167" title="KVM: s390: fix validity interception issue when gisa is switched off" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229168" id="1229168" title="kvm: s390: Reject memory region operations for ucontrol VMs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229169" id="1229169" title="s390/sclp: Prevent release of buffer in I/O" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229170" id="1229170" title="s390/uv: Panic for set and remove shared access UVC errors" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229171" id="1229171" title="s390/cpum_cf: Fix endless loop in CF_DIAG event stop" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229172" id="1229172" title="s390/pci: Allow allocation of more than 1 MSI interrupt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229173" id="1229173" title="s390/dasd: fix error checks in dasd_copy_pair_store()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229174" id="1229174" title="s390/pci: Add missing virt_to_phys() for directed DIBV" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229239" id="1229239" title="cachefiles: introduce object ondemand state" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229240" id="1229240" title="cachefiles: extract ondemand info field from cachefiles_object" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229241" id="1229241" title="cachefiles: resend an open request if the read request's object is  closed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229243" id="1229243" title="cachefiles: narrow the scope of triggering EPOLLIN events in ondemand  mode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229244" id="1229244" title="cachefiles: add restore command to recover inflight ondemand read  requests" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229245" id="1229245" title="cachefiles, erofs: Fix NULL deref in when cachefiles is not doing  ondemand-mode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229246" id="1229246" title="cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229247" id="1229247" title="cachefiles: fix slab-use-after-free in  cachefiles_ondemand_daemon_read()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229248" id="1229248" title="cachefiles: remove err_put_fd label in  cachefiles_ondemand_daemon_read()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229249" id="1229249" title="cachefiles: add spin_lock for cachefiles_ondemand_info" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229250" id="1229250" title="cachefiles: never get a new anonymous fd if ondemand_id is valid" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229251" id="1229251" title="cachefiles: defer exposing anon_fd until after copy_to_user()  succeeds" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229252" id="1229252" title="cachefiles: make on-demand read killable" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229253" id="1229253" title="cachefiles: propagate errors from vfs_getxattr() to avoid infinite  loop" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229254" id="1229254" title="cachefiles: stop sending new request when dropping object" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229255" id="1229255" title="cachefiles: cancel all requests for the object that is being dropped" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229256" id="1229256" title="cachefiles: add missing lock protection when polling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229287" id="1229287" title="VUL-0: CVE-2023-52889: kernel: apparmor: Fix null pointer deref when receiving skb during sock creation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229290" id="1229290" title="VUL-0: CVE-2024-43819: kernel: kvm: s390: Reject memory region operations for ucontrol VMs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229291" id="1229291" title="VUL-0: CVE-2024-43847: kernel: wifi: ath12k: fix invalid memory access while processing fragmented packets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229292" id="1229292" title="VUL-0: CVE-2024-43853: kernel: cgroup/cpuset: Prevent UAF in proc_cpuset_show()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229294" id="1229294" title="VUL-0: CVE-2024-43826: kernel: nfs: pass explicit offset/count to trace events" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229296" id="1229296" title="VUL-0: CVE-2024-43818: kernel: ASoC: amd: Adjust error handling in case of absent codec device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229297" id="1229297" title="VUL-0: CVE-2024-43837: kernel: bpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229298" id="1229298" title="VUL-0: CVE-2024-43825: kernel: iio: Fix the sorting functionality in iio_gts_build_avail_time_table" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229299" id="1229299" title="VUL-0: CVE-2024-43833: kernel: media: v4l: async: Fix NULL pointer dereference in adding ancillary links" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229301" id="1229301" title="VUL-0: CVE-2024-43839: kernel: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229303" id="1229303" title="VUL-0: CVE-2024-43823: kernel: PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229304" id="1229304" title="VUL-0: CVE-2024-43841: kernel: wifi: virt_wifi: avoid reporting connection success with wrong SSID" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229305" id="1229305" title="VUL-0: CVE-2024-43830: kernel: leds: trigger: Unregister sysfs attributes before calling deactivate()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229307" id="1229307" title="VUL-0: CVE-2024-43849: kernel: soc: qcom: pdr: protect locator_addr with the main mutex" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229309" id="1229309" title="VUL-0: CVE-2024-43831: kernel: media: mediatek: vcodec: Handle invalid decoder vsi" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229312" id="1229312" title="VUL-0: CVE-2024-43817: kernel: net: missing check virtio" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229313" id="1229313" title="VUL-0: CVE-2024-43851: kernel: soc: xilinx: rename cpu_number1 to dummy_cpu_number" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229314" id="1229314" title="VUL-0: CVE-2024-43834: kernel: xdp: fix invalid wait context of page_pool_destroy()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229315" id="1229315" title="VUL-0: CVE-2024-43821: kernel: scsi: lpfc: Fix a possible null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229316" id="1229316" title="VUL-0: CVE-2024-43850: kernel: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229317" id="1229317" title="VUL-0: CVE-2024-43842: kernel: wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229318" id="1229318" title="VUL-0: CVE-2024-43816: kernel: scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229319" id="1229319" title="VUL-0: CVE-2024-43860: kernel: remoteproc: imx_rproc: Skip over memory region when node value is NULL" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229320" id="1229320" title="VUL-0: CVE-2024-43824: kernel: PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229327" id="1229327" title="SLES15SP6 [P10 Denali] [ 6.4.0-150600.16-default] In shared/dedicated mode core(CPU), both online and offline, is not functioning as intended when considering various SMT modes." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229341" id="1229341" title="VUL-0: CVE-2024-43829: kernel: drm/qxl: Add check for drm_cvt_mode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229342" id="1229342" title="VUL-0: CVE-2024-43855: kernel: md: fix deadlock between mddev_suspend and flush bio" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229344" id="1229344" title="VUL-0: CVE-2024-43840: kernel: bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229345" id="1229345" title="VUL-0: CVE-2024-43854: kernel: block: initialize integrity buffer to zero before writing it to media" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229346" id="1229346" title="VUL-0: CVE-2024-43856: kernel: dma: fix call order in dmam_free_coherent" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229347" id="1229347" title="VUL-0: CVE-2024-42322: kernel: ipvs: properly dereference pe in ip_vs_add_service" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229349" id="1229349" title="VUL-0: CVE-2024-42320: kernel: s390/dasd: fix error checks in dasd_copy_pair_store()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229350" id="1229350" title="VUL-0: CVE-2024-42319: kernel: mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229351" id="1229351" title="VUL-0: CVE-2024-42318: kernel: landlock: Don't lose track of restrictions on cred_transfer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229353" id="1229353" title="VUL-0: CVE-2024-42316: kernel: mm/mglru: fix div-by-zero in vmpressure_calc_level()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229354" id="1229354" title="VUL-0: CVE-2024-42315: kernel: exfat: fix potential deadlock on __exfat_get_dentry_set" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229355" id="1229355" title="VUL-0: CVE-2024-42314: kernel: btrfs: fix extent map use-after-free when adding pages to compressed bio" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229356" id="1229356" title="VUL-0: CVE-2024-42313: kernel: media: venus: fix use after free in vdec_close" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229357" id="1229357" title="VUL-0: CVE-2024-42312: kernel: sysctl: always initialize i_uid/i_gid" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229358" id="1229358" title="VUL-0: CVE-2024-42310: kernel: drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229359" id="1229359" title="VUL-0: CVE-2024-42309: kernel: drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229360" id="1229360" title="VUL-0: CVE-2024-43846: kernel: lib: objagg: Fix general protection fault" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229365" id="1229365" title="VUL-0: CVE-2024-42303: kernel: media: imx-pxp: Fix ERR_PTR dereference in pxp_probe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229366" id="1229366" title="VUL-0: CVE-2024-42302: kernel: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229369" id="1229369" title="VUL-0: CVE-2024-42298: kernel: ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229370" id="1229370" title="VUL-0: CVE-2024-42295: kernel: nilfs2: handle inconsistent state in nilfs_btnode_create_block()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229373" id="1229373" title="VUL-0: CVE-2024-42292: kernel: kobject_uevent: Fix OOB access within zap_modalias_env()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229374" id="1229374" title="VUL-0: CVE-2024-42291: kernel: ice: Add a per-VF limit on number of FDIR filters" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229379" id="1229379" title="VUL-0: CVE-2024-42290: kernel: irqchip/imx-irqsteer: Handle runtime power management correctly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229381" id="1229381" title="VUL-0: CVE-2024-42285: kernel: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229382" id="1229382" title="VUL-0: CVE-2024-42284: kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229383" id="1229383" title="VUL-0: CVE-2024-42283: kernel: net: nexthop: Initialize all fields in dumped nexthops" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229386" id="1229386" title="VUL-0: CVE-2024-42281: kernel: bpf: Fix a segment issue when downgrading gso_size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229388" id="1229388" title="VUL-0: CVE-2024-42280: kernel: mISDN: Fix a use after free in hfcmulti_tx()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229390" id="1229390" title="VUL-0: CVE-2024-42279: kernel: spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229391" id="1229391" title="VUL-0: CVE-2024-42268: kernel: net/mlx5: Fix missing lock on sync reset reload" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229392" id="1229392" title="VUL-0: CVE-2024-42287: kernel: scsi: qla2xxx: Complete command early within lock" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229395" id="1229395" title="VUL-0: CVE-2024-42286: kernel: scsi: qla2xxx: validate nvme_local_port correctly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229398" id="1229398" title="VUL-0: CVE-2024-42288: kernel: scsi: qla2xxx: Fix for possible memory corruption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229399" id="1229399" title="VUL-0: CVE-2024-42289: kernel: scsi: qla2xxx: During vport delete send async logout explicitly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229400" id="1229400" title="VUL-0: CVE-2024-42271: kernel: net/iucv: fix use after free in iucv_sock_close()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229402" id="1229402" title="VUL-0: CVE-2024-42269: kernel: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229403" id="1229403" title="VUL-0: CVE-2024-42278: kernel: ASoC: TAS2781: fix tasdev_load_calibrated_data()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229404" id="1229404" title="VUL-0: CVE-2024-42270: kernel: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229407" id="1229407" title="VUL-0: CVE-2024-42301: kernel: dev/parport: fix the array out-of-bounds risk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229409" id="1229409" title="VUL-0: CVE-2024-42277: kernel: iommu: sprd: avoid NULL deref in sprd_iommu_hw_en" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229410" id="1229410" title="VUL-0: CVE-2024-42276: kernel: nvme-pci: add missing condition check for existence of mapped data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229411" id="1229411" title="VUL-0: CVE-2024-42308: kernel: drm/amd/display: Check for NULL pointer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229413" id="1229413" title="VUL-0: CVE-2024-42311: kernel: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229414" id="1229414" title="VUL-0: CVE-2024-43858: kernel: jfs: Fix array-index-out-of-bounds in diFree" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229417" id="1229417" title="VUL-0: CVE-2024-42274: kernel: revert &quot;ALSA: firewire-lib: operate for period elapse event in process context&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229444" id="1229444" title="L3: TCP segment out of order for IPv6 tunnel [ ref:_00D1igLOd._500TrGL7wX:ref ]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229451" id="1229451" title="net/iucv: fix the allocation size of iucv_path_table array" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229452" id="1229452" title="s390/dasd: fix error recovery leading to data corruption on ESE  devices" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229455" id="1229455" title="fs/netfs/fscache_cookie: add missing &quot;n_accesses&quot; check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229456" id="1229456" title="CVE-2024-44947: kernel: fuse: Initialize beyond-EOF page contents before setting uptodate" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229480" id="1229480" title="VUL-0: CVE-2024-43881: kernel: wifi: ath12k: change DMA direction while mapping reinjected packets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229481" id="1229481" title="VUL-0: CVE-2024-43880: kernel: mlxsw: spectrum_acl_erp: Fix object nesting warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229482" id="1229482" title="VUL-0: CVE-2024-43879: kernel: wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229484" id="1229484" title="VUL-0: CVE-2024-43877: kernel: media: pci: ivtv: Add check for DMA map result" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229485" id="1229485" title="VUL-0: CVE-2024-43876: kernel: PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229486" id="1229486" title="VUL-0: CVE-2024-43875: kernel: PCI: endpoint: Clean up error handling in vpci_scan_bus()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229487" id="1229487" title="VUL-0: CVE-2024-43874: kernel: crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229488" id="1229488" title="VUL-0: CVE-2024-43873: kernel: vhost/vsock: always initialize seqpacket_allow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229489" id="1229489" title="VUL-0: CVE-2024-43872: kernel: RDMA/hns: Fix soft lockup under heavy CEQE load" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229490" id="1229490" title="VUL-0: CVE-2024-43871: kernel: devres: Fix memory leakage caused by driver API devm_free_percpu()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229493" id="1229493" title="VUL-0: CVE-2024-43867: kernel: drm/nouveau: prime: fix refcount underflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229495" id="1229495" title="VUL-0: CVE-2024-43866: kernel: net/mlx5: Always drain health in shutdown callback" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229496" id="1229496" title="VUL-0: CVE-2024-43864: kernel: net/mlx5e: Fix CT entry update leaks of modify header context" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229497" id="1229497" title="VUL-0: CVE-2024-43863: kernel: drm/vmwgfx: Fix a deadlock in dma buf fence polling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229500" id="1229500" title="VUL-0: CVE-2024-43861: kernel: net: usb: qmi_wwan: fix memory leak for not ip packets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229503" id="1229503" title="VUL-0: CVE-2024-43882: kernel: exec: Fix ToCToU between perm check and set-uid/gid usage" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229707" id="1229707" title="VUL-0: CVE-2024-43883: kernel: usb: vhci-hcd: do not drop references before new references are gained" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229739" id="1229739" title="VUL-0: CVE-2024-43884: kernel: Bluetooth: MGMT: add error handling to pair_device()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229743" id="1229743" title="VUL-0: CVE-2024-43889: kernel: padata: fix possible divide-by-0 panic in padata_mt_helper()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229746" id="1229746" title="VUL-0: CVE-2024-43894: kernel: drm/client: fix null pointer dereference in drm_client_modeset_probe" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229747" id="1229747" title="VUL-0: CVE-2024-43885: kernel: btrfs: fix double inode unlock for direct IO sync writes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229752" id="1229752" title="VUL-0: CVE-2024-43897: kernel: net: drop bad gso csum_start and offset in virtio_net_hdr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229754" id="1229754" title="VUL-0: CVE-2024-43899: kernel: drm/amd/display: Fix null pointer deref in dcn20_resource.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229755" id="1229755" title="VUL-0: CVE-2024-43895: kernel: drm/amd/display: skip recompute dsc params if no stream on link" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229756" id="1229756" title="VUL-0: CVE-2024-43900: kernel: media: xc2028: avoid use-after-free in load_firmware_cb()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229759" id="1229759" title="VUL-0: CVE-2024-43893: kernel: serial: core: check uartclk for zero to avoid divide by zero" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229761" id="1229761" title="VUL-0: CVE-2024-43892: kernel: memcg: protect concurrent access to mem_cgroup_idr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229767" id="1229767" title="VUL-0: CVE-2024-43902: kernel: drm/amd/display: add null checker before passing variables" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229781" id="1229781" title="VUL-0: CVE-2024-43903: kernel: drm/amd/display: add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229784" id="1229784" title="VUL-0: CVE-2024-43905: kernel: drm/amd/pm: fix the null pointer dereference for vega10_hwmgr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229785" id="1229785" title="VUL-0: CVE-2024-43906: kernel: drm/admgpu: fix dereferencing null pointer context" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229787" id="1229787" title="VUL-0: CVE-2024-43907: kernel: drm/amdgpu/pm: fix the null pointer dereference in apply_state_adjust_rules" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229788" id="1229788" title="VUL-0: CVE-2024-43908: kernel: drm/amdgpu: fix the null pointer dereference to ras_manager" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229789" id="1229789" title="VUL-0: CVE-2024-43909: kernel: drm/amdgpu/pm: fix the null pointer dereference for smu7" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229792" id="1229792" title="VUL-0: CVE-2024-44938: kernel: jfs: fix shift-out-of-bounds in dbDiscardAG" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229820" id="1229820" title="VUL-0: CVE-2024-44939: kernel: jfs: fix null ptr deref in dtInsertEntry" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229827" id="1229827" title="VUL-0: CVE-2024-43911: kernel: wifi: mac80211: fix NULL dereference at band check in starting tx ba session" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229830" id="1229830" title="VUL-0: CVE-2024-43912: kernel: wifi: nl80211: disallow setting special AP channel widths" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229837" id="1229837" title="VUL-0: CVE-2024-44931: kernel: gpio: prevent potential speculation leaks in gpio_device_get_desc()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229940" id="1229940" title="virtiofs: forbid newlines in tags" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230056" id="1230056" title="ceph: periodically flush the cap releases" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35902" id="CVE-2024-35902" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35902" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42278" id="CVE-2024-42278" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42278" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43818" id="CVE-2024-43818" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43818" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42298" id="CVE-2024-42298" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42298" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43884" id="CVE-2024-43884" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43884" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26976" id="CVE-2024-26976" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26976" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42302" id="CVE-2024-42302" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42302" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43875" id="CVE-2024-43875" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43875" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43824" id="CVE-2024-43824" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43824" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43823" id="CVE-2024-43823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43823" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43876" id="CVE-2024-43876" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43876" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43872" id="CVE-2024-43872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43872" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42285" id="CVE-2024-42285" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42285" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42274" id="CVE-2024-42274" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42274" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36907" id="CVE-2024-36907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36907" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43840" id="CVE-2024-43840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43840" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43885" id="CVE-2024-43885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43885" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42314" id="CVE-2024-42314" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42314" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43853" id="CVE-2024-43853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43853" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43874" id="CVE-2024-43874" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43874" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43871" id="CVE-2024-43871" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43871" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43856" id="CVE-2024-43856" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43856" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43906" id="CVE-2024-43906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43906" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43903" id="CVE-2024-43903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43903" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43902" id="CVE-2024-43902" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43902" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43895" id="CVE-2024-43895" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43895" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43905" id="CVE-2024-43905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43905" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43908" id="CVE-2024-43908" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43908" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43909" id="CVE-2024-43909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43909" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43907" id="CVE-2024-43907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43907" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43894" id="CVE-2024-43894" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43894" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42310" id="CVE-2024-42310" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42310" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42309" id="CVE-2024-42309" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42309" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43867" id="CVE-2024-43867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43867" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43829" id="CVE-2024-43829" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43829" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43863" id="CVE-2024-43863" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43863" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42315" id="CVE-2024-42315" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42315" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44931" id="CVE-2024-44931" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44931" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42311" id="CVE-2024-42311" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42311" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43825" id="CVE-2024-43825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43825" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43858" id="CVE-2024-43858" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43858" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44938" id="CVE-2024-44938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44938" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44939" id="CVE-2024-44939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44939" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42292" id="CVE-2024-42292" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42292" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43819" id="CVE-2024-43819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43819" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43830" id="CVE-2024-43830" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43830" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43846" id="CVE-2024-43846" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43846" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27050" id="CVE-2024-27050" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27050" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42280" id="CVE-2024-42280" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42280" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42319" id="CVE-2024-42319" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42319" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39476" id="CVE-2024-39476" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39476" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42303" id="CVE-2024-42303" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42303" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43877" id="CVE-2024-43877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43877" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43833" id="CVE-2024-43833" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43833" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42313" id="CVE-2024-42313" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42313" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43900" id="CVE-2024-43900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43900" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43892" id="CVE-2024-43892" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43892" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43897" id="CVE-2024-43897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43897" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42271" id="CVE-2024-42271" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42271" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43817" id="CVE-2024-43817" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43817" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43861" id="CVE-2024-43861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43861" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43826" id="CVE-2024-43826" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43826" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42276" id="CVE-2024-42276" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42276" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43889" id="CVE-2024-43889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43889" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43860" id="CVE-2024-43860" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43860" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42320" id="CVE-2024-42320" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42320" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43816" id="CVE-2024-43816" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43816" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42287" id="CVE-2024-42287" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42287" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42289" id="CVE-2024-42289" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42289" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42288" id="CVE-2024-42288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42288" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42286" id="CVE-2024-42286" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42286" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43893" id="CVE-2024-43893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43893" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43849" id="CVE-2024-43849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43849" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43851" id="CVE-2024-43851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43851" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42279" id="CVE-2024-42279" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42279" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43883" id="CVE-2024-43883" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43883" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43873" id="CVE-2024-43873" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43873" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43881" id="CVE-2024-43881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43881" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43847" id="CVE-2024-43847" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43847" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43879" id="CVE-2024-43879" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43879" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43912" id="CVE-2024-43912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43912" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43842" id="CVE-2024-43842" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43842" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43841" id="CVE-2024-43841" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43841" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26849" id="CVE-2024-26849" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26849" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41087" id="CVE-2024-41087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41087" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42250" id="CVE-2024-42250" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42250" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40913" id="CVE-2024-40913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40913" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39510" id="CVE-2024-39510" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39510" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40899" id="CVE-2024-40899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40899" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42259" id="CVE-2024-42259" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42259" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41065" id="CVE-2024-41065" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41065" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42097" id="CVE-2024-42097" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42097" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41037" id="CVE-2024-41037" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41037" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42074" id="CVE-2024-42074" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42074" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42089" id="CVE-2024-42089" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42089" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42141" id="CVE-2024-42141" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42141" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42133" id="CVE-2024-42133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42133" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41063" id="CVE-2024-41063" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41063" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42137" id="CVE-2024-42137" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42137" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41096" id="CVE-2024-41096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41096" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42080" id="CVE-2024-42080" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42080" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41035" id="CVE-2024-41035" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41035" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42244" id="CVE-2024-42244" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42244" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41098" id="CVE-2024-41098" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41098" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42132" id="CVE-2024-42132" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42132" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41045" id="CVE-2024-41045" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41045" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42239" id="CVE-2024-42239" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42239" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41088" id="CVE-2024-41088" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41088" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42136" id="CVE-2024-42136" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42136" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42229" id="CVE-2024-42229" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42229" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42098" id="CVE-2024-42098" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42098" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42117" id="CVE-2024-42117" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42117" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42121" id="CVE-2024-42121" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42121" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42120" id="CVE-2024-42120" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42120" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41061" id="CVE-2024-41061" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41061" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42227" id="CVE-2024-42227" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42227" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42119" id="CVE-2024-42119" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42119" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42064" id="CVE-2024-42064" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42064" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41022" id="CVE-2024-41022" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41022" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42228" id="CVE-2024-42228" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42228" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41093" id="CVE-2024-41093" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41093" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41094" id="CVE-2024-41094" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41094" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41092" id="CVE-2024-41092" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41092" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42127" id="CVE-2024-42127" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42127" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41095" id="CVE-2024-41095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41095" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41089" id="CVE-2024-41089" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41089" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42101" id="CVE-2024-42101" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42101" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42087" id="CVE-2024-42087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42087" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41060" id="CVE-2024-41060" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41060" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41049" id="CVE-2024-41049" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41049" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41039" id="CVE-2024-41039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41039" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41038" id="CVE-2024-41038" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41038" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42238" id="CVE-2024-42238" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42238" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41056" id="CVE-2024-41056" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41056" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42237" id="CVE-2024-42237" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42237" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31076" id="CVE-2024-31076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31076" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42092" id="CVE-2024-42092" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42092" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42253" id="CVE-2024-42253" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42253" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42153" id="CVE-2024-42153" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42153" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42086" id="CVE-2024-42086" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42086" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42115" id="CVE-2024-42115" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42115" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42232" id="CVE-2024-42232" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42232" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42223" id="CVE-2024-42223" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42223" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41025" id="CVE-2024-41025" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41025" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41024" id="CVE-2024-41024" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41024" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42131" id="CVE-2024-42131" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42131" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42069" id="CVE-2024-42069" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42069" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42076" id="CVE-2024-42076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42076" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52887" id="CVE-2023-52887" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52887" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42130" id="CVE-2024-42130" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42130" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42104" id="CVE-2024-42104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42104" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41073" id="CVE-2024-41073" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41073" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41079" id="CVE-2024-41079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41079" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42152" id="CVE-2024-42152" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42152" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42077" id="CVE-2024-42077" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42077" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41016" id="CVE-2024-41016" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41016" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42143" id="CVE-2024-42143" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42143" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42090" id="CVE-2024-42090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42090" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41028" id="CVE-2024-41028" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41028" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42126" id="CVE-2024-42126" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42126" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42230" id="CVE-2024-42230" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42230" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42144" id="CVE-2024-42144" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42144" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41097" id="CVE-2024-41097" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41097" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42085" id="CVE-2024-42085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42085" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42236" id="CVE-2024-42236" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42236" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42226" id="CVE-2024-42226" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42226" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42114" id="CVE-2024-42114" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42114" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41072" id="CVE-2024-41072" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41072" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41071" id="CVE-2024-41071" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41071" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42225" id="CVE-2024-42225" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42225" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42125" id="CVE-2024-42125" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42125" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42240" id="CVE-2024-42240" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42240" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42147" id="CVE-2024-42147" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42147" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35855" id="CVE-2024-35855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35855" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40984" id="CVE-2024-40984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40984" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40964" id="CVE-2024-40964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40964" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39491" id="CVE-2024-39491" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39491" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39509" id="CVE-2024-39509" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39509" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40934" id="CVE-2024-40934" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40934" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39483" id="CVE-2024-39483" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39483" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40990" id="CVE-2024-40990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40990" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40992" id="CVE-2024-40992" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40992" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36288" id="CVE-2024-36288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36288" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40904" id="CVE-2024-40904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40904" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39488" id="CVE-2024-39488" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39488" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40910" id="CVE-2024-40910" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40910" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40981" id="CVE-2024-40981" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40981" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40962" id="CVE-2024-40962" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40962" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40900" id="CVE-2024-40900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40900" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40997" id="CVE-2024-40997" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40997" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41002" id="CVE-2024-41002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41002" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39493" id="CVE-2024-39493" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39493" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40936" id="CVE-2024-40936" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40936" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39501" id="CVE-2024-39501" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39501" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40987" id="CVE-2024-40987" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40987" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39486" id="CVE-2024-39486" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39486" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40916" id="CVE-2024-40916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40916" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40932" id="CVE-2024-40932" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40932" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40924" id="CVE-2024-40924" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40924" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39505" id="CVE-2024-39505" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39505" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40976" id="CVE-2024-40976" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40976" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40926" id="CVE-2024-40926" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40926" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40988" id="CVE-2024-40988" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40988" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39497" id="CVE-2024-39497" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39497" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39508" id="CVE-2024-39508" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39508" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40922" id="CVE-2024-40922" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40922" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41001" id="CVE-2024-41001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41001" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40945" id="CVE-2024-40945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40945" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40902" id="CVE-2024-40902" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40902" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39484" id="CVE-2024-39484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39484" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36939" id="CVE-2024-36939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36939" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40943" id="CVE-2024-40943" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40943" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40967" id="CVE-2024-40967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40967" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39500" id="CVE-2024-39500" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39500" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40982" id="CVE-2024-40982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40982" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41004" id="CVE-2024-41004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41004" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40903" id="CVE-2024-40903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40903" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39499" id="CVE-2024-39499" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39499" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26637" id="CVE-2024-26637" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26637" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40911" id="CVE-2024-40911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40911" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26683" id="CVE-2024-26683" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26683" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40930" id="CVE-2024-40930" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40930" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36970" id="CVE-2024-36970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36970" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40929" id="CVE-2024-40929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40929" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40941" id="CVE-2024-40941" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40941" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35913" id="CVE-2024-35913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35913" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40912" id="CVE-2024-40912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40912" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26682" id="CVE-2024-26682" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26682" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40942" id="CVE-2024-40942" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40942" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38609" id="CVE-2024-38609" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38609" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40977" id="CVE-2024-40977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40977" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27049" id="CVE-2024-27049" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27049" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38563" id="CVE-2024-38563" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38563" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40944" id="CVE-2024-40944" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40944" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40927" id="CVE-2024-40927" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40927" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52885" id="CVE-2023-52885" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52885" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52886" id="CVE-2023-52886" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52886" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52668" id="CVE-2023-52668" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52668" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52688" id="CVE-2023-52688" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52688" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42105" id="CVE-2024-42105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42105" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41059" id="CVE-2024-41059" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41059" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41062" id="CVE-2024-41062" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41062" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52489" id="CVE-2023-52489" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52489" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43821" id="CVE-2024-43821" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43821" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43911" id="CVE-2024-43911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43911" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42277" id="CVE-2024-42277" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42277" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43880" id="CVE-2024-43880" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43880" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43899" id="CVE-2024-43899" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43899" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43882" id="CVE-2024-43882" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43882" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43866" id="CVE-2024-43866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43866" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26812" id="CVE-2024-26812" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26812" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27010" id="CVE-2024-27010" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27010" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36270" id="CVE-2024-36270" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36270" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36881" id="CVE-2024-36881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36881" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42316" id="CVE-2024-42316" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42316" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43855" id="CVE-2024-43855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43855" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43864" id="CVE-2024-43864" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43864" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26631" id="CVE-2024-26631" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26631" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42109" id="CVE-2024-42109" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42109" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41084" id="CVE-2024-41084" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41084" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40905" id="CVE-2024-40905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40905" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39489" id="CVE-2024-39489" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39489" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36489" id="CVE-2024-36489" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36489" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27079" id="CVE-2024-27079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27079" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41020" id="CVE-2024-41020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41020" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35897" id="CVE-2024-35897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35897" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27403" id="CVE-2024-27403" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27403" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27011" id="CVE-2024-27011" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27011" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26668" id="CVE-2024-26668" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26668" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26835" id="CVE-2024-26835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26835" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26808" id="CVE-2024-26808" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26808" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26809" id="CVE-2024-26809" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26809" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52581" id="CVE-2023-52581" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52581" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43837" id="CVE-2024-43837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43837" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35939" id="CVE-2024-35939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35939" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42291" id="CVE-2024-42291" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42291" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42268" id="CVE-2024-42268" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42268" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43834" id="CVE-2024-43834" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43834" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27433" id="CVE-2024-27433" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27433" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36286" id="CVE-2024-36286" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36286" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26851" id="CVE-2024-26851" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26851" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40920" id="CVE-2024-40920" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40920" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40921" id="CVE-2024-40921" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40921" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36979" id="CVE-2024-36979" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36979" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26590" id="CVE-2024-26590" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26590" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52859" id="CVE-2023-52859" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52859" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42270" id="CVE-2024-42270" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42270" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42269" id="CVE-2024-42269" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42269" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42284" id="CVE-2024-42284" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42284" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42283" id="CVE-2024-42283" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42283" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42312" id="CVE-2024-42312" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42312" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43854" id="CVE-2024-43854" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43854" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42322" id="CVE-2024-42322" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42322" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42308" id="CVE-2024-42308" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42308" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42301" id="CVE-2024-42301" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42301" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42290" id="CVE-2024-42290" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42290" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42318" id="CVE-2024-42318" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42318" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52889" id="CVE-2023-52889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52889" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42295" id="CVE-2024-42295" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42295" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43850" id="CVE-2024-43850" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43850" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43831" id="CVE-2024-43831" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43831" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43839" id="CVE-2024-43839" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43839" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41007" id="CVE-2024-41007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41007" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42281" id="CVE-2024-42281" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42281" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26669" id="CVE-2024-26669" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26669" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26677" id="CVE-2024-26677" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26677" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41050" id="CVE-2024-41050" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41050" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41051" id="CVE-2024-41051" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41051" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41074" id="CVE-2024-41074" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41074" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41075" id="CVE-2024-41075" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41075" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41012" id="CVE-2024-41012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41012" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41080" id="CVE-2024-41080" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41080" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42246" id="CVE-2024-42246" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42246" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42159" id="CVE-2024-42159" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42159" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42241" id="CVE-2024-42241" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42241" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42245" id="CVE-2024-42245" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42245" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26735" id="CVE-2024-26735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26735" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26837" id="CVE-2024-26837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26837" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42155" id="CVE-2024-42155" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42155" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42156" id="CVE-2024-42156" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42156" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42157" id="CVE-2024-42157" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42157" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42158" id="CVE-2024-42158" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42158" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38662" id="CVE-2024-38662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38662" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40938" id="CVE-2024-40938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40938" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42247" id="CVE-2024-42247" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42247" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41010" id="CVE-2024-41010" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41010" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42106" id="CVE-2024-42106" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42106" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42095" id="CVE-2024-42095" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42095" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41068" id="CVE-2024-41068" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41068" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42138" id="CVE-2024-42138" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42138" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42107" id="CVE-2024-42107" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42107" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42139" id="CVE-2024-42139" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42139" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42110" id="CVE-2024-42110" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42110" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42113" id="CVE-2024-42113" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42113" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42148" id="CVE-2024-42148" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42148" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42142" id="CVE-2024-42142" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42142" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42073" id="CVE-2024-42073" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42073" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42162" id="CVE-2024-42162" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42162" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42082" id="CVE-2024-42082" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42082" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40978" id="CVE-2024-40978" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40978" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41000" id="CVE-2024-41000" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41000" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40995" id="CVE-2024-40995" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40995" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42161" id="CVE-2024-42161" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42161" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41069" id="CVE-2024-41069" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41069" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39506" id="CVE-2024-39506" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39506" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42145" id="CVE-2024-42145" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42145" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40994" id="CVE-2024-40994" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40994" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42124" id="CVE-2024-42124" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42124" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42096" id="CVE-2024-42096" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42096" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42224" id="CVE-2024-42224" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42224" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41048" id="CVE-2024-41048" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41048" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40958" id="CVE-2024-40958" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40958" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40939" id="CVE-2024-40939" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40939" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36933" id="CVE-2024-36933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36933" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36929" id="CVE-2024-36929" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36929" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41044" id="CVE-2024-41044" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41044" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41066" id="CVE-2024-41066" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41066" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42093" id="CVE-2024-42093" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42093" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42122" id="CVE-2024-42122" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42122" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41078" id="CVE-2024-41078" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41078" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40989" id="CVE-2024-40989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40989" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41064" id="CVE-2024-41064" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41064" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41036" id="CVE-2024-41036" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41036" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41040" id="CVE-2024-41040" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41040" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35949" id="CVE-2024-35949" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35949" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41081" id="CVE-2024-41081" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41081" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41076" id="CVE-2024-41076" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41076" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42079" id="CVE-2024-42079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42079" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41057" id="CVE-2024-41057" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41057" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41058" id="CVE-2024-41058" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41058" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41015" id="CVE-2024-41015" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41015" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40956" id="CVE-2024-40956" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40956" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27437" id="CVE-2024-27437" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27437" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41032" id="CVE-2024-41032" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41032" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40957" id="CVE-2024-40957" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40957" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41041" id="CVE-2024-41041" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41041" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40954" id="CVE-2024-40954" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40954" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42070" id="CVE-2024-42070" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42070" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41070" id="CVE-2024-41070" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41070" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40959" id="CVE-2024-40959" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40959" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41009" id="CVE-2024-41009" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41009" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40909" id="CVE-2024-40909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40909" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27024" id="CVE-2024-27024" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27024" type="cve" />
      <reference href="https://jira.suse.com/browse/PED-8491" id="PED-8491" title="https://jira.suse.com/browse/PED-8491" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8954" id="PED-8954" title="https://jira.suse.com/browse/PED-8954" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-10029" id="PED-10029" title="https://jira.suse.com/browse/PED-10029" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-10045" id="PED-10045" title="https://jira.suse.com/browse/PED-10045" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-10055" id="PED-10055" title="https://jira.suse.com/browse/PED-10055" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-10105" id="PED-10105" title="https://jira.suse.com/browse/PED-10105" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-10108" id="PED-10108" title="https://jira.suse.com/browse/PED-10108" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8779" id="PED-8779" title="https://jira.suse.com/browse/PED-8779" type="jira" />
    </references>
    <description>

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

- CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section-&gt;usage (bsc#1221326).
- CVE-2023-52581: netfilter: nf_tables: fix memleak when more than 255 elements expired (bsc#1220877).
- CVE-2023-52859: perf: hisi: Fix use-after-free when register pmu fails (bsc#1225582).
- CVE-2023-52889: apparmor: Fix null pointer deref when receiving skb during sock creation (bsc#1229287).
- CVE-2024-26590: erofs: fix inconsistent per-file compression format (bsc#1220252).
- CVE-2024-26631: ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630).
- CVE-2024-26668: netfilter: nft_limit: reject configurations that cause integer overflow (bsc#1222335).
- CVE-2024-26669: kABI fix for net/sched: flower: Fix chain template offload (bsc#1222350).
- CVE-2024-26677: Blacklist e7870cf13d20 (" Fix delayed ACKs to not set the reference serial number") (bsc#1222387)
- CVE-2024-26735: ipv6: sr: fix possible use-after-free and null-ptr-deref (bsc#1222372).
- CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
- CVE-2024-26809: netfilter: nft_set_pipapo: release elements in clone only from destroy path (bsc#1222633).
- CVE-2024-26812: kABI: vfio: struct virqfd kABI workaround (bsc#1222808).
- CVE-2024-26835: netfilter: nf_tables: set dormant flag on hook register failure (bsc#1222967).
- CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973).
- CVE-2024-26851: netfilter: nf_conntrack_h323: Add protection for bmp length out of range (bsc#1223074)
- CVE-2024-27010: net/sched: Fix mirred deadlock on device recursion (bsc#1223720).
- CVE-2024-27011: netfilter: nf_tables: fix memleak in map from abort path (bsc#1223803).
- CVE-2024-27024: net/rds: fix WARNING in rds_conn_connect_if_down (bsc#1223777).
- CVE-2024-27079: iommu/vt-d: Fix NULL domain on device release (bsc#1223742).
- CVE-2024-27403: kabi: restore const specifier in flow_offload_route_init() (bsc#1224415).
- CVE-2024-27433: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe() (bsc#1224711).
- CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625).
- CVE-2024-35897: netfilter: nf_tables: discard table flag update with pending basechain deletion (bsc#1224510).
- CVE-2024-35939: Fixed leak pages on dma_set_decrypted() failure (bsc#1224535).
- CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
- CVE-2024-36286: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801)
- CVE-2024-36489: tls: fix missing memory barrier in tls_init (bsc#1226874)
- CVE-2024-36881: mm/userfaultfd: Fix reset ptes when close() for wr-protected (bsc#1225718).
- CVE-2024-36929: net: core: reject skb_copy(_expand) for fraglist GSO skbs (bsc#1225814).
- CVE-2024-36933: net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (bsc#1225832).
- CVE-2024-36979: net: bridge: mst: fix vlan use-after-free (bsc#1226604).
- CVE-2024-38662: selftests/bpf: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885).
- CVE-2024-39489: ipv6: sr: fix memleak in seg6_hmac_init_algo (bsc#1227623)
- CVE-2024-39506: liquidio: adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729).
- CVE-2024-40905: ipv6: fix possible race in __fib6_drop_pcpu_from() (bsc#1227761)
- CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1227798).
- CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (bsc#1227781).
- CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784).
- CVE-2024-40938: landlock: fix d_parent walk (bsc#1227840).
- CVE-2024-40939: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (bsc#1227799).
- CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808)
- CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1227810).
- CVE-2024-40957: seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (bsc#1227811).
- CVE-2024-40958: netns: Make get_net_ns() handle zero refcount net (bsc#1227812).
- CVE-2024-40959: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (bsc#1227884).
- CVE-2024-40978: scsi: qedi: Fix crash while reading debugfs attribute (bsc#1227929).
- CVE-2024-40989: KVM: arm64: Disassociate vcpus from redistributor region on teardown (bsc#1227823).
- CVE-2024-40994: ptp: fix integer overflow in max_vclocks_store (bsc#1227829).
- CVE-2024-40995: net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (bsc#1227830).
- CVE-2024-41000: block/ioctl: prefer different overflow check (bsc#1227867).
- CVE-2024-41007: tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (bsc#1227863).
- CVE-2024-41009: bpf: Fix overrunning reservations in ringbuf (bsc#1228020).
- CVE-2024-41010: bpf: Fix too early release of tcx_entry (bsc#1228021).
- CVE-2024-41012: filelock: Remove locks reliably when fcntl/close race is detected (bsc#1228247).
- CVE-2024-41015: ocfs2: add bounds checking to ocfs2_check_dir_entry() (bsc#1228409).
- CVE-2024-41020: filelock: Fix fcntl/close race recovery compat path (bsc#1228427).
- CVE-2024-41032: mm: vmalloc: check if a hash-index is in cpu_possible_mask (bsc#1228460).
- CVE-2024-41036: net: ks8851: Fix deadlock with the SPI chip variant (bsc#1228496).
- CVE-2024-41040: net/sched: Fix UAF when resolving a clash (bsc#1228518).
- CVE-2024-41041: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (bsc#1228520).
- CVE-2024-41044: ppp: reject claimed-as-LCP but actually malformed packets (bsc#1228530).
- CVE-2024-41048: skmsg: Skip zero length skb in sk_msg_recvmsg (bsc#1228565).
- CVE-2024-41050: cachefiles: cyclic allocation of msg_id to avoid reuse (bsc#1228499).
- CVE-2024-41051: cachefiles: wait for ondemand_object_worker to finish when dropping object (bsc#1228468).
- CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1228462).
- CVE-2024-41058: cachefiles: fix slab-use-after-free in fscache_withdraw_volume() (bsc#1228459).
- CVE-2024-41062: bluetooth/l2cap: sync sock recv cb and release (bsc#1228576).
- CVE-2024-41064: powerpc/eeh: avoid possible crash when edev-&gt;pdev changes (bsc#1228599).
- CVE-2024-41066: ibmvnic: add tx check to prevent skb leak (bsc#1228640).
- CVE-2024-41068: s390/sclp: Fix sclp_init() cleanup on failure (bsc#1228579).
- CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228644).
- CVE-2024-41070: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (bsc#1228581).
- CVE-2024-41074: cachefiles: Set object to close if ondemand_id &lt; 0 in copen (bsc#1228643).
- CVE-2024-41075: cachefiles: add consistency check for copen/cread (bsc#1228646).
- CVE-2024-41076: NFSv4: Fix memory leak in nfs4_set_security_label (bsc#1228649).
- CVE-2024-41078: btrfs: qgroup: fix quota root leak after quota disable failure (bsc#1228655).
- CVE-2024-41080: io_uring: fix possible deadlock in io_register_iowq_max_workers() (bsc#1228616).
- CVE-2024-41081: ila: block BH in ila_output() (bsc#1228617).
- CVE-2024-41084: cxl/region: Avoid null pointer dereference in region lookup (bsc#1228472).
- CVE-2024-42070: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (bsc#1228470).
- CVE-2024-42073: mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (bsc#1228457).
- CVE-2024-42079: gfs2: Fix NULL pointer dereference in gfs2_log_flush (bsc#1228672).
- CVE-2024-42082: xdp: Remove WARN() from __xdp_reg_mem_model() (bsc#1228482).
- CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680).
- CVE-2024-42095: serial: 8250_omap: Fix Errata i2310 with RX FIFO level check (bsc#1228446).
- CVE-2024-42096: x86: stop playing stack games in profile_pc() (bsc#1228633).
- CVE-2024-42106: inet_diag: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493).
- CVE-2024-42107: ice: Do not process extts if PTP is disabled (bsc#1228494).
- CVE-2024-42109: netfilter: nf_tables: unconditionally flush pending work before notifier (bsc#1228505).
- CVE-2024-42110: net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (bsc#1228501).
- CVE-2024-42113: net: txgbe: initialize num_q_vectors for MSI/INTx interrupts (bsc#1228568).
- CVE-2024-42122: drm/amd/display: Add NULL pointer check for kzalloc (bsc#1228591).
- CVE-2024-42124: scsi: qedf: Make qedf_execute_tmf() non-preemptible (bsc#1228705).
- CVE-2024-42138: mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (bsc#1228500).
- CVE-2024-42139: ice: Fix improper extts handling (bsc#1228503).
- CVE-2024-42142: net/mlx5: E-switch, Create ingress ACL when needed (bsc#1228491).
- CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743).
- CVE-2024-42148: bnx2x: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487).
- CVE-2024-42155: s390/pkey: Wipe copies of protected- and secure-keys (bsc#1228733).
- CVE-2024-42156: s390/pkey: Wipe copies of clear-key structures on failure (bsc#1228722).
- CVE-2024-42157: s390/pkey: Wipe sensitive data on failure (bsc#1228727).
- CVE-2024-42158: s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720).
- CVE-2024-42159: scsi: mpi3mr: fix sanitise num_phys (bsc#1228754).
- CVE-2024-42161: bpf: avoid uninitialized value in BPF_CORE_READ_BITFIELD (bsc#1228756).
- CVE-2024-42162: gve: Account for stopped queues when reading NIC stats (bsc#1228706).
- CVE-2024-42224: net: dsa: mv88e6xxx: Correct check for empty list (bsc#1228723).
- CVE-2024-42241: mm/shmem: disable PMD-sized page cache if needed (bsc#1228986).
- CVE-2024-42245: Revert "sched/fair: Make sure to try to detach at least one movable task" (bsc#1228978).
- CVE-2024-42246: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989).
- CVE-2024-42247: wireguard: allowedips: avoid unaligned 64-bit memory accesses (bsc#1228988).
- CVE-2024-42268: net/mlx5: Fix missing lock on sync reset reload (bsc#1229391).
- CVE-2024-42269: netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init() (bsc#1229402).
- CVE-2024-42270: netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init() (bsc#1229404).
- CVE-2024-42277: iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409).
- CVE-2024-42281: bpf: Fix a segment issue when downgrading gso_size (bsc#1229386).
- CVE-2024-42283: net: nexthop: Initialize all fields in dumped nexthops (bsc#1229383)
- CVE-2024-42284: tipc: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382)
- CVE-2024-42290: irqchip/imx-irqsteer: Handle runtime power management correctly (bsc#1229379).
- CVE-2024-42291: ice: Add a per-VF limit on number of FDIR filters (bsc#1229374).
- CVE-2024-42295: nilfs2: handle inconsistent state in nilfs_btnode_create_block() (bsc#1229370).
- CVE-2024-42301: dev/parport: fix the array out-of-bounds risk (bsc#1229407).
- CVE-2024-42312: sysctl: always initialize i_uid/i_gid (bsc#1229357)
- CVE-2024-42316: mm/mglru: fix div-by-zero in vmpressure_calc_level() (bsc#1229353).
- CVE-2024-42318: landlock: Do not lose track of restrictions on cred_transfer (bsc#1229351).
- CVE-2024-42322: ipvs: properly dereference pe in ip_vs_add_service (bsc#1229347)
- CVE-2024-43821: scsi: lpfc: Fix a possible null pointer dereference (bsc#1229315).
- CVE-2024-43831: media: mediatek: vcodec: Handle invalid decoder vsi (bsc#1229309).
- CVE-2024-43834: xdp: fix invalid wait context of page_pool_destroy() (bsc#1229314)
- CVE-2024-43837: bpf: Fix updating attached freplace prog in prog_array map (bsc#1229297).
- CVE-2024-43839: bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301).
- CVE-2024-43850: soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove (bsc#1229316).
- CVE-2024-43854: block: initialize integrity buffer to zero before writing it to media (bsc#1229345)
- CVE-2024-43855: md: fix deadlock between mddev_suspend and flush bio (bsc#1229342).
- CVE-2024-43864: net/mlx5e: Fix CT entry update leaks of modify header context (bsc#1229496).
- CVE-2024-43866: net/mlx5: Always drain health in shutdown callback (bsc#1229495).
- CVE-2024-43880: kabi: lib: objagg: Put back removed metod in struct objagg_ops (bsc#1229481).
- CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
- CVE-2024-43899: drm/amd/display: Fix null pointer deref in dcn20_resource.c (bsc#1229754).
- CVE-2024-43911: wifi: mac80211: fix NULL dereference at band check in starting tx ba session (bsc#1229827).

The following non-security bugs were fixed:

- ACPI/NUMA: Apply SRAT proximity domain to entire CFMWS window (git-fixes).
- ACPI: SBS: manage alarm sysfs attribute through psy core (stable-fixes).
- ACPI: battery: create alarm sysfs attribute atomically (stable-fixes).
- ACPI: processor_idle: use raw_safe_halt() in acpi_idle_play_dead() (git-fixes).
- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).
- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).
- ALSA: hda/realtek - FIxed ALC285 headphone no sound (stable-fixes).
- ALSA: hda/realtek - Fixed ALC256 headphone no sound (stable-fixes).
- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).
- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).
- ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G (stable-fixes).
- ALSA: hda/realtek: Add support for new HP G12 laptops (stable-fixes).
- ALSA: hda/realtek: Enable mute/micmute LEDs on HP Laptop 14-ey0xxx (stable-fixes).
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (git-fixes).
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book3 Ultra (stable-fixes).
- ALSA: hda/realtek: Implement sound init sequence for Samsung Galaxy Book3 Pro 360 (stable-fixes).
- ALSA: hda/realtek: support HP Pavilion Aero 13-bg0xxx Mute LED (stable-fixes).
- ALSA: hda/tas2781: Use correct endian conversion (git-fixes).
- ALSA: hda/tas2781: fix wrong calibrated data order (git-fixes).
- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).
- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).
- ALSA: hda: Conditionally use snooping for AMD HDMI (git-fixes).
- ALSA: hda: conexant: Fix headset auto detect fail in the polling mode (git-fixes).
- ALSA: line6: Fix racy access to midibuf (stable-fixes).
- ALSA: line6: Fix racy access to midibuf (stable-fixes).
- ALSA: seq: Skip event type filtering for UMP events (git-fixes).
- ALSA: seq: ump: Explicitly reset RPN with Null RPN (stable-fixes).
- ALSA: seq: ump: Optimize conversions from SysEx to UMP (git-fixes).
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception (stable-fixes).
- ALSA: seq: ump: Use the common RPN/bank conversion context (stable-fixes).
- ALSA: timer: Relax start tick time check for slave timer elements (git-fixes).
- ALSA: ump: Explicitly reset RPN with Null RPN (stable-fixes).
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception (stable-fixes).
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET (stable-fixes).
- ALSA: usb-audio: Correct surround channels in UAC1 channel map (git-fixes).
- ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes).
- ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes).
- ALSA: usb-audio: Support Yamaha P-125 quirk entry (stable-fixes).
- ALSA: usb: Fix UBSAN warning in parse_audio_unit() (stable-fixes).
- ASoC: SOF: Intel: hda-dsp: Make sure that no irq handler is pending before suspend (stable-fixes).
- ASoC: SOF: Remove libraries from topology lookups (git-fixes).
- ASoC: SOF: Remove libraries from topology lookups (git-fixes).
- ASoC: SOF: amd: Fix for acp init sequence (git-fixes).
- ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data (stable-fixes).
- ASoC: SOF: mediatek: Add missing board compatible (stable-fixes).
- ASoC: allow module autoloading for table board_ids (stable-fixes).
- ASoC: allow module autoloading for table db1200_pids (stable-fixes).
- ASoC: amd: acp: fix module autoloading (git-fixes).
- ASoC: amd: yc: Add quirk entry for OMEN by HP Gaming Laptop 16-n0xxx (bsc#1227182).
- ASoC: amd: yc: Support mic on HP 14-em0002la (stable-fixes).
- ASoC: amd: yc: Support mic on HP 14-em0002la (stable-fixes).
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 (stable-fixes).
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 (stable-fixes).
- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa883x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa883x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa884x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa884x: Correct Soundwire ports mask (git-fixes).
- ASoC: cs35l45: Checks index of cs35l45_irqs[] (stable-fixes).
- ASoC: cs35l56: Handle OTP read latency over SoundWire (stable-fixes).
- ASoC: cs35l56: Handle OTP read latency over SoundWire (stable-fixes).
- ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value (stable-fixes).
- ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value (stable-fixes).
- ASoC: fsl_micfil: Expand the range of FIFO watermark mask (stable-fixes).
- ASoC: fsl_micfil: Expand the range of FIFO watermark mask (stable-fixes).
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile (stable-fixes).
- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes).
- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes).
- ASoC: nau8822: Lower debug print priority (stable-fixes).
- ASoC: nau8822: Lower debug print priority (stable-fixes).
- Bluetooth: Add device 13d3:3572 IMC Networks Bluetooth Radio (stable-fixes).
- Bluetooth: Fix usage of __hci_cmd_sync_status (git-fixes).
- Bluetooth: L2CAP: Fix deadlock (git-fixes).
- Bluetooth: MGMT: Add error handling to pair_device() (git-fixes).
- Bluetooth: SMP: Fix assumption of Central always being Initiator (git-fixes).
- Bluetooth: bnep: Fix out-of-bound access (stable-fixes).
- Bluetooth: btintel: Fail setup on error (git-fixes).
- Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading (stable-fixes).
- Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables (stable-fixes).
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 (stable-fixes).
- Bluetooth: hci_conn: Check non NULL function before calling for HFP offload (stable-fixes).
- Bluetooth: hci_core: Fix LE quote calculation (git-fixes).
- Bluetooth: hci_core: Fix not handling hibernation actions (git-fixes).
- Bluetooth: hci_sync: Fix suspending with wrong filter policy (git-fixes).
- Bluetooth: hci_sync: avoid dup filtering when passive scanning with adv monitor (git-fixes).
- Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (git-fixes).
- Drop libata patch that caused a regression (bsc#1229054)
- Fix build errors without patches.kabi (bsc#1226502)
- HID: wacom: Defer calculation of resolution until resolution_code is known (git-fixes).
- Input: MT - limit max slots (stable-fixes).
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table (bsc#1229056).
- Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3 (stable-fixes).
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination (stable-fixes).
- KVM: Always flush async #PF workqueue when vCPU is being destroyed (git-fixes).
- KVM: Make KVM_MEM_GUEST_MEMFD mutually exclusive with KVM_MEM_READONLY (git-fixes).
- KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3 (bsc#1194869).
- KVM: PPC: Book3S HV: Handle pending exceptions on guest entry with MSR_EE (bsc#1215199).
- KVM: Protect vcpu-&gt;pid dereference via debugfs with RCU (git-fixes).
- KVM: Reject overly excessive IDs in KVM_CREATE_VCPU (git-fixes).
- KVM: Stop processing *all* memslots when "null" mmu_notifier handler is found (git-fixes).
- KVM: VMX: Move posted interrupt descriptor out of VMX code (git-fixes).
- KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked() (git-fixes).
- KVM: VMX: Switch __vmx_exit() and kvm_x86_vendor_exit() in vmx_exit() (git-fixes).
- KVM: arm64: AArch32: Fix spurious trapping of conditional instructions (git-fixes).
- KVM: arm64: Add missing memory barriers when switching to pKVM's hyp pgd (git-fixes).
- KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode (git-fixes).
- KVM: arm64: Fix AArch32 register narrowing on userspace write (git-fixes).
- KVM: arm64: Fix __pkvm_init_switch_pgd call ABI (git-fixes).
- KVM: arm64: Fix clobbered ELR in sync abort/SError (git-fixes)
- KVM: arm64: GICv4: Do not perform a map to a mapped vLPI (git-fixes).
- KVM: arm64: timers: Correctly handle TGE flip with CNTPOFF_EL2 (git-fixes).
- KVM: arm64: timers: Fix resource leaks in kvm_timer_hyp_init() (git-fixes).
- KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() (git-fixes).
- KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler (git-fixes).
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (git-fixes).
- KVM: arm64: vgic-v4: Restore pending state on host userspace write (git-fixes).
- KVM: arm64: vgic: Add a non-locking primitive for kvm_vgic_vcpu_destroy() (git-fixes).
- KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy (git-fixes).
- KVM: arm64: vgic: Simplify kvm_vgic_destroy() (git-fixes).
- KVM: fix kvm_mmu_memory_cache allocation warning (git-fixes).
- KVM: nVMX: Add a helper to get highest pending from Posted Interrupt vector (git-fixes).
- KVM: nVMX: Check for pending posted interrupts when looking for nested events (git-fixes).
- KVM: nVMX: Request immediate exit iff pending nested event needs injection (git-fixes).
- KVM: s390: fix LPSWEY handling (bsc#1227634 git-fixes).
- KVM: s390: fix validity interception issue when gisa is switched off (git-fixes bsc#1229167).
- KVM: x86/mmu: Bug the VM if KVM tries to split a !hugepage SPTE (git-fixes).
- KVM: x86: Limit check IDs for KVM_SET_BOOT_CPU_ID (git-fixes).
- Move upstreamed powerpc patches into sorted section
- Move upstreamed sound patches into sorted section
- Moved upstreamed ASoC patch into sorted section
- NFSD: Support write delegations in LAYOUTGET (git-fixes).
- NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (git-fixes).
- PCI: Add Edimax Vendor ID to pci_ids.h (stable-fixes).
- PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN (git-fixes).
- PCI: loongson: Enable MSI in LS7A Root Complex (stable-fixes).
- RDMA/cache: Release GID table even if leak is detected (git-fixes)
- RDMA/device: Return error earlier if port in not valid (git-fixes)
- RDMA/hns: Check atomic wr length (git-fixes)
- RDMA/hns: Fix insufficient extend DB for VFs. (git-fixes)
- RDMA/hns: Fix mbx timing out before CMD execution is completed (git-fixes)
- RDMA/hns: Fix missing pagesize and alignment check in FRMR (git-fixes)
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0 (git-fixes)
- RDMA/hns: Fix soft lockup under heavy CEQE load (git-fixes)
- RDMA/hns: Fix undifined behavior caused by invalid max_sge (git-fixes)
- RDMA/hns: Fix unmatch exception handling when init eq table fails (git-fixes)
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (git-fixes)
- RDMA/mana_ib: Use virtual address in dma regions for MRs (git-fixes).
- RDMA/mlx4: Fix truncated output warning in alias_GUID.c (git-fixes)
- RDMA/mlx4: Fix truncated output warning in mad.c (git-fixes)
- RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE (git-fixes)
- RDMA/rxe: Do not set BTH_ACK_MASK for UC or UD QPs (git-fixes)
- RDMA: Fix netdev tracker in ib_device_set_netdev (git-fixes)
- README.BRANCH: Add Petr Tesarik as branch maintainer
- Revert "ALSA: firewire-lib: obsolete workqueue for period update" (bsc#1208783).
- Revert "ALSA: firewire-lib: operate for period elapse event in process context" (bsc#1208783).
- Revert "KVM: Prevent module exit until all VMs are freed" (git-fixes).
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" (git-fixes).
- Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" (git-fixes).
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD" (git-fixes).
- Revert "usb: gadget: uvc: cleanup request when not in correct state" (stable-fixes).
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET" (git-fixes).
- SUNRPC: Fix a race to wake a sync task (git-fixes).
- SUNRPC: add a missing rpc_stat for TCP TLS (git-fixes).
- Squashfs: fix variable overflow triggered by sysbot (git-fixes).
- USB: serial: debug: do not echo input by default (stable-fixes).
- Update config files. Disable vdpa drivers for Alibaba ENI and SolidNET (jsc#PED-8954, bsc#1227834)
- Update config files. Disable CONFIG_KFENCE on ppc64le (bsc#1226920)
- Update patch refefernce for MFD patch (jsc#PED-10029)
- Update patch reference for MD patch (jsc#PED-10029 jsc#PED-10045)
- Update patch reference for SPI patch (jsc#PED-10105)
- Update patch reference for iwlwifi fix (jsc#PED-10055)
- Update patch reference of USB patch (jsc#PED-10108)
- Update patch references for ASoC regression fixes (bsc#1229045 bsc#1229046)
- afs: fix __afs_break_callback() / afs_drop_open_mmap() race (git-fixes).
- apparmor: unpack transition table if dfa is not present (bsc#1226031).
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to (git-fixes)
- arm64: Add Neoverse-V2 part (git-fixes)
- arm64: Fix KASAN random tag seed initialization (git-fixes)
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (git-fixes)
- arm64: barrier: Restore spec_bar() macro (git-fixes)
- arm64: cputype: Add Cortex-A720 definitions (git-fixes)
- arm64: cputype: Add Cortex-A725 definitions (git-fixes)
- arm64: cputype: Add Cortex-X1C definitions (git-fixes)
- arm64: cputype: Add Cortex-X3 definitions (git-fixes)
- arm64: cputype: Add Cortex-X4 definitions (git-fixes)
- arm64: cputype: Add Cortex-X925 definitions (git-fixes)
- arm64: cputype: Add Neoverse-V3 definitions (git-fixes)
- arm64: dts: imx8mp: Add NPU Node (git-fixes)
- arm64: dts: imx8mp: Fix pgc vpu locations (git-fixes)
- arm64: dts: imx8mp: Fix pgc_mlmix location (git-fixes)
- arm64: dts: imx8mp: add HDMI power-domains (git-fixes)
- arm64: errata: Expand speculative SSBS workaround (again) (git-fixes)
- arm64: errata: Expand speculative SSBS workaround (git-fixes)
- arm64: errata: Unify speculative SSBS errata logic (git-fixes). Update config files.
- arm64: jump_label: Ensure patched jump_labels are visible to all CPUs (git-fixes)
- ata: libata-scsi: Do not overwrite valid sense data when CK_COND=1 (stable-fixes).
- ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error (stable-fixes).
- blacklist.conf: Add libata upstream revert entry (bsc#1229054)
- blacklist.conf: printk/sysctl: breaks kernel without pre-requisite patches (bsc#1229025)
- bnxt_re: Fix imm_data endianness (git-fixes)
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG (git-fixes)
- bpf, lpm: Fix check prefixlen before walking trie (git-fixes).
- bpf/tests: Remove duplicate JSGT tests (git-fixes).
- bpf: Add crosstask check to __bpf_get_stack (git-fixes).
- bpf: Detect IP == ksym.end as part of BPF program (git-fixes).
- bpf: Ensure proper register state printing for cond jumps (git-fixes).
- bpf: Fix a few selftest failures due to llvm18 change (git-fixes).
- bpf: Fix a kernel verifier crash in stacksafe() (bsc#1225903).
- bpf: Fix check_stack_write_fixed_off() to correctly spill imm (git-fixes).
- bpf: Fix kfunc callback register type handling (git-fixes).
- bpf: Fix prog_array_map_poke_run map poke update (git-fixes).
- bpf: Fix unnecessary -EBUSY from htab_lock_bucket (git-fixes).
- bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly (git-fixes).
- bpf: Remove unnecessary wait from bpf_map_copy_value() (git-fixes).
- bpf: Set uattr-&gt;batch.count as zero before batched update or deletion (git-fixes).
- bpf: do not infer PTR_TO_CTX for programs with unnamed context type (git-fixes).
- bpf: enforce precision of R0 on callback return (git-fixes).
- bpf: extract bpf_ctx_convert_map logic and make it more reusable (git-fixes).
- bpf: fix control-flow graph checking in privileged mode (git-fixes).
- bpf: handle bpf_user_pt_regs_t typedef explicitly for PTR_TO_CTX global arg (git-fixes).
- bpf: hardcode BPF_PROG_PACK_SIZE to 2MB * num_possible_nodes() (git-fixes).
- bpf: kprobe: remove unused declaring of bpf_kprobe_override (git-fixes).
- bpf: simplify btf_get_prog_ctx_type() into btf_is_prog_ctx_type() (git-fixes).
- bpftool: Align output skeleton ELF code (git-fixes).
- bpftool: Fix -Wcast-qual warning (git-fixes).
- bpftool: Silence build warning about calloc() (git-fixes).
- bpftool: mark orphaned programs during prog show (git-fixes).
- btrfs: add a btrfs_finish_ordered_extent helper (git-fixes).
- btrfs: add a is_data_bbio helper (git-fixes).
- btrfs: add an ordered_extent pointer to struct btrfs_bio (git-fixes).
- btrfs: copy dir permission and time when creating a stub subvolume (bsc#1228321).
- btrfs: ensure fast fsync waits for ordered extents after a write failure (git-fixes).
- btrfs: factor out a btrfs_queue_ordered_fn helper (git-fixes).
- btrfs: factor out a can_finish_ordered_extent helper (git-fixes).
- btrfs: fix corruption after buffer fault in during direct IO append write (git-fixes).
- btrfs: fix double inode unlock for direct IO sync writes (git-fixes).
- btrfs: fix extent map use-after-free when adding pages to compressed bio (git-fixes).
- btrfs: fix leak of qgroup extent records after transaction abort (git-fixes).
- btrfs: fix ordered extent split error handling in btrfs_dio_submit_io (git-fixes).
- btrfs: limit write bios to a single ordered extent (git-fixes).
- btrfs: make btrfs_finish_ordered_extent() return void (git-fixes).
- btrfs: merge the two calls to btrfs_add_ordered_extent in run_delalloc_nocow (git-fixes).
- btrfs: open code btrfs_bio_end_io in btrfs_dio_submit_io (git-fixes).
- btrfs: open code end_extent_writepage in end_bio_extent_writepage (git-fixes).
- btrfs: pass a btrfs_inode to btrfs_fdatawrite_range() (git-fixes).
- btrfs: pass a btrfs_inode to btrfs_wait_ordered_range() (git-fixes).
- btrfs: pass an ordered_extent to btrfs_reloc_clone_csums (git-fixes).
- btrfs: pass an ordered_extent to btrfs_submit_compressed_write (git-fixes).
- btrfs: remove btrfs_add_ordered_extent (git-fixes).
- btrfs: rename err to ret in btrfs_direct_write() (git-fixes).
- btrfs: uninline some static inline helpers from tree-log.h (git-fixes).
- btrfs: use a btrfs_inode in the log context (struct btrfs_log_ctx) (git-fixes).
- btrfs: use a btrfs_inode local variable at btrfs_sync_file() (git-fixes).
- btrfs: use bbio-&gt;ordered in btrfs_csum_one_bio (git-fixes).
- btrfs: use btrfs_finish_ordered_extent to complete buffered writes (git-fixes).
- btrfs: use btrfs_finish_ordered_extent to complete compressed writes (git-fixes).
- btrfs: use btrfs_finish_ordered_extent to complete direct writes (git-fixes).
- btrfs: use irq safe locking when running and adding delayed iputs (git-fixes).
- cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode (bsc#1229245).
- cachefiles: add missing lock protection when polling (bsc#1229256).
- cachefiles: add restore command to recover inflight ondemand read requests (bsc#1229244).
- cachefiles: add spin_lock for cachefiles_ondemand_info (bsc#1229249).
- cachefiles: cancel all requests for the object that is being dropped (bsc#1229255).
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds (bsc#1229251).
- cachefiles: extract ondemand info field from cachefiles_object (bsc#1229240).
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read() (bsc#1229247).
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd() (bsc#1229246).
- cachefiles: introduce object ondemand state (bsc#1229239).
- cachefiles: make on-demand read killable (bsc#1229252).
- cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode (bsc#1229243).
- cachefiles: never get a new anonymous fd if ondemand_id is valid (bsc#1229250).
- cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop (bsc#1229253).
- cachefiles: remove err_put_fd label in cachefiles_ondemand_daemon_read() (bsc#1229248).
- cachefiles: resend an open request if the read request's object is closed (bsc#1229241).
- cachefiles: stop sending new request when dropping object (bsc#1229254).
- can: mcp251xfd: tef: prepare to workaround broken TEF FIFO tail index erratum (stable-fixes).
- can: mcp251xfd: tef: update workaround for erratum DS80000789E 6 of mcp2518fd (stable-fixes).
- ceph: periodically flush the cap releases (bsc#1230056).
- cgroup/cpuset: Prevent UAF in proc_cpuset_show() (bsc#1228801).
- cgroup: Add annotation for holding namespace_sem in current_cgns_cgroup_from_root() (bsc#1222254).
- cgroup: Eliminate the need for cgroup_mutex in proc_cgroup_show() (bsc#1222254).
- cgroup: Make operations on the cgroup root_list RCU safe (bsc#1222254).
- cgroup: Remove unnecessary list_empty() (bsc#1222254).
- cgroup: preserve KABI of cgroup_root (bsc#1222254).
- char: xillybus: Check USB endpoints when probing device (git-fixes).
- char: xillybus: Do not destroy workqueue from work item running on it (stable-fixes).
- char: xillybus: Refine workqueue handling (git-fixes).
- check-for-config-changes: ignore also GCC_ASM_GOTO_OUTPUT_BROKEN Mainline commit f2f6a8e88717 ("init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND") replaced GCC_ASM_GOTO_OUTPUT_WORKAROUND with GCC_ASM_GOTO_OUTPUT_BROKEN. Ignore both when checking config changes.
- clk: en7523: fix rate divider for slic and spi clocks (git-fixes).
- clk: qcom: Park shared RCGs upon registration (git-fixes).
- clk: qcom: camcc-sc7280: Add parent dependency to all camera GDSCs (git-fixes).
- clk: qcom: gcc-sa8775p: Update the GDSC wait_val fields and flags (git-fixes).
- clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock (git-fixes).
- clk: qcom: gpucc-sa8775p: Park RCG's clk source at XO during disable (git-fixes).
- clk: qcom: gpucc-sa8775p: Remove the CLK_IS_CRITICAL and ALWAYS_ON flags (git-fixes).
- clk: qcom: gpucc-sa8775p: Update wait_val fields for GPU GDSC's (git-fixes).
- clk: qcom: gpucc-sm8350: Park RCG's clk source at XO during disable (git-fixes).
- clk: qcom: kpss-xcc: Return of_clk_add_hw_provider to transfer the error (git-fixes).
- clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider (stable-fixes).
- clocksource/drivers/sh_cmt: Address race condition for clock events (stable-fixes).
- config.sh: generate and install compile_commands.json (bsc#1228971) This file contains the command line options used to compile every C file. It's useful for the livepatching team.
- cpu/SMT: Enable SMT only if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes).
- cxl/region: Move cxl_dpa_to_region() work to the region driver (bsc#1228472)
- dev/parport: fix the array out-of-bounds risk (stable-fixes).
- device property: Add cleanup.h based fwnode_handle_put() scope based cleanup (stable-fixes).
- dmaengine: dw: Add memory bus width verification (git-fixes).
- dmaengine: dw: Add peripheral bus width verification (git-fixes).
- docs: KVM: Fix register ID of SPSR_FIQ (git-fixes).
- driver core: Fix uevent_show() vs driver detach race (git-fixes).
- drm/admgpu: fix dereferencing null pointer context (stable-fixes).
- drm/amd/display: Add delay to improve LTTPR UHBR interop (stable-fixes).
- drm/amd/display: Add null checker before passing variables (stable-fixes).
- drm/amd/display: Adjust cursor position (git-fixes).
- drm/amd/display: Check for NULL pointer (stable-fixes).
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link (stable-fixes).
- drm/amd/display: avoid using null object of framebuffer (git-fixes).
- drm/amd/display: fix cursor offset on rotation 180 (git-fixes).
- drm/amd/display: fix s2idle entry for DCN3.5+ (stable-fixes).
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr (stable-fixes).
- drm/amdgpu/jpeg2: properly set atomics vmid field (stable-fixes).
- drm/amdgpu/jpeg4: properly set atomics vmid field (stable-fixes).
- drm/amdgpu/pm: Fix the null pointer dereference for smu7 (stable-fixes).
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (stable-fixes).
- drm/amdgpu/pm: Fix the param type of set_power_profile_mode (stable-fixes).
- drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell (stable-fixes).
- drm/amdgpu/sdma5.2: limit wptr workaround to sdma 5.2.1 (git-fixes).
- drm/amdgpu: Actually check flags for all context ops (stable-fixes).
- drm/amdgpu: Add lock around VF RLCG interface (stable-fixes).
- drm/amdgpu: Fix the null pointer dereference to ras_manager (stable-fixes).
- drm/amdgpu: Forward soft recovery errors to userspace (stable-fixes).
- drm/amdgpu: Validate TA binary size (stable-fixes).
- drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent (stable-fixes).
- drm/amdgpu: fix potential resource leak warning (stable-fixes).
- drm/amdgpu: reset vm state machine after gpu reset(vram lost) (stable-fixes).
- drm/bridge: analogix_dp: properly handle zero sized AUX transactions (stable-fixes).
- drm/client: fix null pointer dereference in drm_client_modeset_probe (git-fixes).
- drm/dp_mst: Skip CSN if topology probing is not done yet (stable-fixes).
- drm/etnaviv: do not block scheduler when GPU is still active (stable-fixes).
- drm/i915/dsi: Make Lenovo Yoga Tab 3 X90F DMI match less strict (git-fixes).
- drm/i915/gem: Adjust vma offset for framebuffer mmap offset (stable-fixes).
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (git-fixes).
- drm/i915/hdcp: Fix HDCP2_STREAM_STATUS macro (git-fixes).
- drm/i915: Fix possible int overflow in skl_ddi_calculate_wrpll() (git-fixes).
- drm/lima: set gp bus_stop bit before hard reset (stable-fixes).
- drm/mediatek/dp: Fix spurious kfree() (git-fixes).
- drm/msm/dp: fix the max supported bpp logic (git-fixes).
- drm/msm/dp: reset the link phy params before link training (git-fixes).
- drm/msm/dpu: capture snapshot on the first commit_done timeout (stable-fixes).
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (git-fixes).
- drm/msm/dpu: do not play tricks with debug macros (git-fixes).
- drm/msm/dpu: drop MSM_ENC_VBLANK support (stable-fixes).
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() (git-fixes).
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions (stable-fixes).
- drm/msm/dpu: take plane rotation into account for wide planes (git-fixes).
- drm/msm/dpu: try multirect based on mdp clock limits (stable-fixes).
- drm/msm/dpu: use drmm-managed allocation for dpu_encoder_phys (stable-fixes).
- drm/msm/mdss: Rename path references to mdp_path (stable-fixes).
- drm/msm/mdss: switch mdss to use devm_of_icc_get() (stable-fixes).
- drm/msm: Reduce fallout of fence signaling vs reclaim hangs (stable-fixes).
- drm/nouveau: prime: fix refcount underflow (git-fixes).
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels (stable-fixes).
- drm/radeon/evergreen_cs: Clean up errors in evergreen_cs.c (bsc#1229024).
- drm/radeon: Remove __counted_by from StateArray.states[] (git-fixes).
- drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode (stable-fixes).
- drm/virtio: Fix type of dma-fence context variable (git-fixes).
- drm/vmwgfx: Fix a deadlock in dma buf fence polling (git-fixes).
- drm/vmwgfx: Fix overlay when using Screen Targets (git-fixes).
- drm/vmwgfx: Fix prime with external buffers (git-fixes).
- efi/libstub: Zero initialize heap allocated struct screen_info (git-fixes).
- evm: do not copy up 'security.evm' xattr (git-fixes).
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid (stable-fixes).
- fs/netfs/fscache_cookie: add missing "n_accesses" check (bsc#1229455).
- fuse: Initialize beyond-EOF page contents before setting uptodate (bsc#1229456).
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (git-fixes).
- genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (git-fixes).
- genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() (git-fixes).
- gfs2: setattr_chown: Add missing initialization (git-fixes).
- gpio: mlxbf3: Support shutdown() function (git-fixes).
- gpio: prevent potential speculation leaks in gpio_device_get_desc() (stable-fixes).
- gpio: sysfs: extend the critical section for unregistering sysfs devices (stable-fixes).
- gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (git-fixes).
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (git-fixes).
- hwmon: (ltc2992) Avoid division by zero (stable-fixes).
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt() (git-fixes).
- hwmon: (pc87360) Bounds check data-&gt;innr usage (stable-fixes).
- i2c: Fix conditional for substituting empty ACPI functions (stable-fixes).
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions (git-fixes).
- i2c: qcom-geni: Add missing clk_disable_unprepare in geni_i2c_runtime_resume (git-fixes).
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume (git-fixes).
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume (git-fixes).
- i2c: riic: avoid potential division by zero (stable-fixes).
- i2c: smbus: Improve handling of stuck alerts (git-fixes).
- i2c: smbus: Send alert notifications to all devices if source not found (git-fixes).
- i2c: stm32f7: Add atomic_xfer method to driver (stable-fixes).
- i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer (stable-fixes).
- i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out (stable-fixes).
- i915/perf: Remove code to update PWR_CLK_STATE for gen12 (git-fixes).
- ice: Fix NULL pointer access, if PF does not support SRIOV_LAG (bsc#1228737).
- io_uring/advise: support 64-bit lengths (git-fixes).
- io_uring: Drop per-ctx dummy_ubuf (git-fixes).
- io_uring: Fix probe of disabled operations (git-fixes).
- io_uring: fix io_match_task must_hold (git-fixes).
- io_uring: tighten task exit cancellations (git-fixes).
- iommu/amd: Convert comma to semicolon (git-fixes).
- iommu/vt-d: Fix identity map bounds in si_domain_init() (git-fixes).
- iommufd/device: Fix hwpt at err_unresv in iommufd_device_do_replace() (git-fixes).
- ip6_tunnel: Fix broken GRO (bsc#1229444).
- ipv6: sr: fix incorrect unregister order (git-fixes).
- irqdomain: Fixed unbalanced fwnode get and put (git-fixes).
- jfs: Fix shift-out-of-bounds in dbDiscardAG (git-fixes).
- jfs: define xtree root and page independently (git-fixes).
- jfs: fix null ptr deref in dtInsertEntry (git-fixes).
- jump_label: Clarify condition in static_key_fast_inc_not_disabled() (git-fixes).
- jump_label: Fix concurrency issues in static_key_slow_dec() (git-fixes).
- jump_label: Fix the fix, brown paper bags galore (git-fixes).
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked() (git-fixes).
- kABI fix of: virtio-crypto: handle config changed by work queue (git-fixes).
- kABI workaround for sound core UMP conversion (stable-fixes).
- kabi fix for KVM: s390: fix LPSWEY handling (bsc#1227634 git-fixes).
- kabi fix for SUNRPC: add a missing rpc_stat for TCP TLS (git-fixes).
- kabi/severities: ignore kABI for FireWire sound local symbols (bsc#1208783)
- kabi/severity: add nvme common code The nvme common code is also allowed to change the data structures, there are only internal users.
- kcov: properly check for softirq context (git-fixes).
- kernel-binary: generate and install compile_commands.json (bsc#1228971)
- kernfs: Convert kernfs_path_from_node_locked() from strlcpy() to strscpy() (bsc#1229134).
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files (git-fixes).
- kprobes: Fix to check symbol prefixes correctly (git-fixes).
- kprobes: Prohibit probing on CFI preamble symbol (git-fixes).
- kvm: s390: Reject memory region operations for ucontrol VMs (git-fixes bsc#1229168).
- libbpf: Add missing LIBBPF_API annotation to libbpf_set_memlock_rlim API (git-fixes).
- libbpf: Apply map_set_def_max_entries() for inner_maps on creation (git-fixes).
- libbpf: Fix faccessat() usage on Android (git-fixes).
- libbpf: Use OPTS_SET() macro in bpf_xdp_query() (git-fixes).
- md-cluster: fix hanging issue while a new disk adding (bsc#1223395).
- md-cluster: fix hanging issue while a new disk adding (bsc#1223395).
- md-cluster: fix no recovery job when adding/re-adding a disk (bsc#1223395).
- md-cluster: fix no recovery job when adding/re-adding a disk (bsc#1223395).
- md-cluster: keeping kabi compatibility for upstream commit 35a0a409fa26 (bsc#1223395).
- md/md-bitmap: fix writing non bitmap pages (git-fixes).
- md/raid1: set max_sectors during early return from choose_slow_rdev() (git-fixes).
- md/raid1: support read error check (git-fixes).
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (git-fixes).
- md/raid5: fix spares errors about rcu usage (git-fixes).
- md/raid5: recheck if reshape has finished with device_lock held (git-fixes).
- md: Do not wait for MD_RECOVERY_NEEDED for HOT_REMOVE_DISK ioctl (git-fixes).
- md: add a mddev_add_trace_msg helper (git-fixes).
- md: add check for sleepers in md_wakeup_thread() (git-fixes).
- md: change the return value type of md_write_start to void (git-fixes).
- md: do not account sync_io if iostats of the disk is disabled (git-fixes).
- md: do not delete safemode_timer in mddev_suspend (git-fixes).
- md: factor out a helper exceed_read_errors() to check read_errors (git-fixes).
- md: fix a suspicious RCU usage warning (git-fixes).
- media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" (git-fixes).
- media: amphion: Remove lock in s_ctrl callback (stable-fixes).
- media: drivers/media/dvb-core: copy user arrays safely (stable-fixes).
- media: pci: cx23885: check cx23885_vdev_init() return (stable-fixes).
- media: uvcvideo: Add quirk for invalid dev_sof in Logitech C920 (git-fixes).
- media: uvcvideo: Disable autosuspend for Insta360 Link (stable-fixes).
- media: uvcvideo: Fix the bandwdith quirk on USB 3.x (stable-fixes).
- media: uvcvideo: Ignore empty TS packets (stable-fixes).
- media: uvcvideo: Quirk for invalid dev_sof in Logitech C922 (stable-fixes).
- media: xc2028: avoid use-after-free in load_firmware_cb() (stable-fixes).
- memcg: protect concurrent access to mem_cgroup_idr (git-fixes).
- memory: stm32-fmc2-ebi: check regmap_read return value (stable-fixes).
- memory: tegra: Skip SID programming if SID registers are not set (stable-fixes).
- minmax: add a few more MIN_T/MAX_T users (bsc#1229024).
- minmax: avoid overly complicated constant expressions in VM code (bsc#1229024).
- minmax: do not use max() in situations that want a C constant expression (bsc#1229024).
- minmax: fix up min3() and max3() too (bsc#1229024).
- minmax: improve macro expansion and type checking (bsc#1229024).
- minmax: make generic MIN() and MAX() macros available everywhere (bsc#1229024).
- minmax: simplify and clarify min_t()/max_t() implementation (bsc#1229024).
- minmax: simplify min()/max()/clamp() implementation (bsc#1229024).
- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).
- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).
- mmc: dw_mmc: allow biu and ciu clocks to defer (git-fixes).
- mmc: mmc_test: Fix NULL dereference on allocation failure (git-fixes).
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail (git-fixes).
- net/iucv: fix the allocation size of iucv_path_table array (git-fixes bsc#1229451).
- net/iucv: fix use after free in iucv_sock_close() (bsc#1228973).
- net/rds: fix possible cp null dereference (git-fixes).
- net/sched: initialize noop_qdisc owner (git-fixes).
- net: drop bad gso csum_start and offset in virtio_net_hdr (git-fixes).
- net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb() (git-fixes).
- net: fix sk_memory_allocated_{add|sub} vs softirqs (bsc#1228757).
- net: mana: Add support for page sizes other than 4KB on ARM64 (jsc#PED-8491 bsc#1226530).
- net: mana: Fix RX buf alloc_size alignment and atomic op panic (bsc#1229086).
- net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (bsc#1229154).
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (git-fixes).
- net: missing check virtio (git-fixes).
- net: phy: micrel: Fix the KSZ9131 MDI-X status issue (git-fixes).
- net: phy: realtek: add support for RTL8366S Gigabit PHY (git-fixes).
- net: usb: qmi_wwan: fix memory leak for not ip packets (git-fixes).
- net: usb: sr9700: fix uninitialized variable use in sr_mdio_read (git-fixes).
- netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() (bsc#1228459 bsc#1228462).
- nfc: pn533: Add poll mod list filling check (git-fixes).
- nfs: do not invalidate dentries on transient errors (git-fixes).
- nfs: expose /proc/net/sunrpc/nfs in net namespaces (git-fixes).
- nfs: make the rpc_stat per net namespace (git-fixes).
- nfs: pass explicit offset/count to trace events (git-fixes).
- nfs: propagate readlink errors in nfs_symlink_filler (git-fixes).
- nouveau/firmware: use dma non-coherent allocator (git-fixes).
- nvme-multipath: find NUMA path only for online numa-node (git-fixes).
- nvme-multipath: implement "queue-depth" iopolicy (bsc#1227706).
- nvme-multipath: prepare for "queue-depth" iopolicy (bsc#1227706).
- nvme-pci: Fix the instructions for disabling power management (git-fixes).
- nvme-pci: add missing condition check for existence of mapped data (git-fixes).
- nvme-pci: do not directly handle subsys reset fallout (bsc#1220066).
- nvme-sysfs: add 'tls_configured_key' sysfs attribute (bsc#1221857).
- nvme-sysfs: add 'tls_keyring' attribute (bsc#1221857).
- nvme-tcp: check for invalidated or revoked key (bsc#1221857).
- nvme-tcp: sanitize TLS key handling (bsc#1221857).
- nvme: add a newline to the 'tls_key' sysfs attribute (bsc#1221857).
- nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset (git-fixes).
- nvme: avoid double free special payload (git-fixes).
- nvme: fix NVME_NS_DEAC may incorrectly identifying the disk as EXT_LBA (git-fixes).
- nvme: fixup comment for nvme RDMA Provider Type (git-fixes).
- nvme: split off TLS sysfs attributes into a separate group (bsc#1221857).
- nvme: tcp: remove unnecessary goto statement (bsc#1221857).
- nvme_core: scan namespaces asynchronously (bsc#1224105).
- nvmet-auth: fix nvmet_auth hash error handling (git-fixes).
- nvmet: always initialize cqe.result (git-fixes).
- nvmet: do not return 'reserved' for empty TSAS values (git-fixes).
- nvmet: fix a possible leak when destroy a ctrl during qp establishment (git-fixes).
- nvmet: make 'tsas' attribute idempotent for RDMA (git-fixes).
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (bsc#1228410).
- padata: Fix possible divide-by-0 panic in padata_mt_helper() (git-fixes).
- perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (git-fixes).
- pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE (git-fixes).
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins (git-fixes).
- pinctrl: single: fix potential NULL dereference in pcs_get_function() (git-fixes).
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev register (git-fixes).
- platform/chrome: cros_ec_proto: Lock device when updating MKBP version (git-fixes).
- platform/chrome: cros_ec_proto: Lock device when updating MKBP version (git-fixes).
- platform/surface: aggregator: Fix warning when controller is destroyed in probe (git-fixes).
- platform/x86/amd/hsmp: Add support for ACPI based probing (jsc#PED-8779).
- platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket (jsc#PED-8779).
- platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() (jsc#PED-8779).
- platform/x86/amd/hsmp: Check HSMP support on AMD family of processors (jsc#PED-8779).
- platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS (jsc#PED-8779).
- platform/x86/amd/hsmp: Create static func to handle platdev (jsc#PED-8779).
- platform/x86/amd/hsmp: Define a struct to hold mailbox regs (jsc#PED-8779).
- platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket (jsc#PED-8779).
- platform/x86/amd/hsmp: Move hsmp_test to probe (jsc#PED-8779).
- platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh (jsc#PED-8779).
- platform/x86/amd/hsmp: Remove extra parenthesis and add a space (jsc#PED-8779).
- platform/x86/amd/hsmp: Restructure sysfs group creation (jsc#PED-8779).
- platform/x86/amd/hsmp: switch to use device_add_groups() (jsc#PED-8779).
- platform/x86/intel/ifs: Initialize union ifs_status to zero (git-fixes).
- platform/x86: lg-laptop: fix %s null argument warning (stable-fixes).
- power: supply: axp288_charger: Fix constant_charge_voltage writes (git-fixes).
- power: supply: axp288_charger: Round constant_charge_voltage writes down (git-fixes).
- power: supply: qcom_battmgr: return EAGAIN when firmware service is not up (git-fixes).
- powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n (bsc#1194869).
- powerpc/io: Avoid clang null pointer arithmetic warnings (bsc#1194869).
- powerpc/kexec: make the update_cpus_node() function public (bsc#1194869).
- powerpc/kexec: split CONFIG_KEXEC_FILE and CONFIG_CRASH_DUMP (bsc#1194869).
- powerpc/kexec_file: fix cpus node update to FDT (bsc#1194869).
- powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp (bsc#1194869).
- powerpc/pseries: Whitelist dtl slub object for copying to userspace (bsc#1194869).
- powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE (bsc#1194869).
- powerpc/topology: Check if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes).
- powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#" (bsc#1194869).
- powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() (bsc#1194869).
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (bsc#1194869).
- printk/panic: Allow cpu backtraces to be written into ringbuffer during panic (bsc#1225607).
- reiserfs: fix uninit-value in comp_keys (git-fixes).
- rtc: nct3018y: fix possible NULL dereference (stable-fixes).
- s390/cpum_cf: Fix endless loop in CF_DIAG event stop (git-fixes bsc#1229171).
- s390/dasd: fix error checks in dasd_copy_pair_store() (git-fixes bsc#1229173).
- s390/dasd: fix error recovery leading to data corruption on ESE devices (git-fixes bsc#1229452).
- s390/pci: Add missing virt_to_phys() for directed DIBV (git-fixes bsc#1229174).
- s390/pci: Allow allocation of more than 1 MSI interrupt (git-fixes bsc#1229172).
- s390/pci: Refactor arch_setup_msi_irqs() (git-fixes bsc#1229172).
- s390/pkey: harmonize pkey s390 debug feature calls (bsc#1228720).
- s390/pkey: introduce dynamic debugging for pkey (bsc#1228720).
- s390/sclp: Prevent release of buffer in I/O (git-fixes bsc#1229169).
- s390/uv: Panic for set and remove shared access UVC errors (git-fixes bsc#1229170).
- samples/bpf: syscall_tp_user: Fix array out-of-bound access (git-fixes).
- samples/bpf: syscall_tp_user: Rename num_progs into nr_tests (git-fixes).
- sbitmap: use READ_ONCE to access map-&gt;word (stable-fixes).
- scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if in PRLI_ISSUE state (bsc#1228857).
- scsi: lpfc: Cancel ELS WQE instead of issuing abort when SLI port is inactive (bsc#1228857).
- scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (bsc#1228857).
- scsi: lpfc: Fix incorrect request len mbox field when setting trunking via sysfs (bsc#1228857).
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (bsc#1228857).
- scsi: lpfc: Relax PRLI issue conditions after GID_FT response (bsc#1228857).
- scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages (bsc#1228857).
- scsi: lpfc: Update lpfc version to 14.4.0.3 (bsc#1228857).
- scsi: qla2xxx: Avoid possible run-time warning with long model_num (bsc#1228850).
- scsi: qla2xxx: Complete command early within lock (bsc#1228850).
- scsi: qla2xxx: Convert comma to semicolon (bsc#1228850).
- scsi: qla2xxx: Drop driver owner assignment (bsc#1228850).
- scsi: qla2xxx: During vport delete send async logout explicitly (bsc#1228850).
- scsi: qla2xxx: Fix debugfs output for fw_resource_count (bsc#1228850).
- scsi: qla2xxx: Fix flash read failure (bsc#1228850).
- scsi: qla2xxx: Fix for possible memory corruption (bsc#1228850).
- scsi: qla2xxx: Fix optrom version displayed in FDMI (bsc#1228850).
- scsi: qla2xxx: Indent help text (bsc#1228850).
- scsi: qla2xxx: Reduce fabric scan duplicate code (bsc#1228850).
- scsi: qla2xxx: Remove unused struct 'scsi_dif_tuple' (bsc#1228850).
- scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds (bsc#1228850).
- scsi: qla2xxx: Unable to act on RSCN for port online (bsc#1228850).
- scsi: qla2xxx: Update version to 10.02.09.300-k (bsc#1228850).
- scsi: qla2xxx: Use QP lock to search for bsg (bsc#1228850).
- scsi: qla2xxx: validate nvme_local_port correctly (bsc#1228850).
- selftest/bpf: Add map_in_maps with BPF_MAP_TYPE_PERF_EVENT_ARRAY values (git-fixes).
- selftests/bpf: Add a test to verify previous stacksafe() fix (bsc#1225903).
- selftests/bpf: Add assert for user stacks in test_task_stack (git-fixes).
- selftests/bpf: Add netkit to tc_redirect selftest (git-fixes).
- selftests/bpf: De-veth-ize the tc_redirect test case (git-fixes).
- selftests/bpf: Disable IPv6 for lwt_redirect test (git-fixes).
- selftests/bpf: Fix erroneous bitmask operation (git-fixes).
- selftests/bpf: Fix issues in setup_classid_environment() (git-fixes).
- selftests/bpf: Fix potential premature unload in bpf_testmod (git-fixes).
- selftests/bpf: Fix pyperf180 compilation failure with clang18 (git-fixes).
- selftests/bpf: Fix the flaky tc_redirect_dtime test (git-fixes).
- selftests/bpf: Fix up xdp bonding test wrt feature flags (git-fixes).
- selftests/bpf: Make linked_list failure test more robust (git-fixes).
- selftests/bpf: Relax time_tai test for equal timestamps in tai_forward (git-fixes).
- selftests/bpf: Skip module_fentry_shadow test when bpf_testmod is not available (git-fixes).
- selftests/bpf: Wait for the netstamp_needed_key static key to be turned on (git-fixes).
- selftests/bpf: fix RELEASE=1 build for tc_opts (git-fixes).
- selftests/bpf: fix bpf_loop_bench for new callback verification scheme (git-fixes).
- selftests/bpf: fix compiler warnings in RELEASE=1 mode (git-fixes).
- selftests/bpf: satisfy compiler by having explicit return in btf test (git-fixes).
- serial: core: check uartclk for zero to avoid divide by zero (stable-fixes).
- soc: qcom: cmd-db: Map shared memory as WC, not WB (git-fixes).
- soc: qcom: pmic_glink: Actually communicate when remote goes down (git-fixes).
- soundwire: stream: fix programming slave ports for non-continous port maps (git-fixes).
- spi: Add empty versions of ACPI functions (stable-fixes).
- spi: microchip-core: fix init function not setting the master and motorola modes (git-fixes).
- spi: microchip-core: switch to use modern name (stable-fixes).
- spi: spi-fsl-lpspi: Fix scldiv calculation (git-fixes).
- spi: spidev: Add missing spi_device_id for bh2228fv (git-fixes).
- squashfs: squashfs_read_data need to check if the length is 0 (git-fixes).
- ssb: Fix division by zero issue in ssb_calc_clock_rate (stable-fixes).
- staging: iio: resolver: ad2s1210: fix use before initialization (stable-fixes).
- staging: ks7010: disable bh on tx_dev_lock (stable-fixes).
- string.h: Introduce memtostr() and memtostr_pad() (bsc#1228849).
- sunrpc: add a struct rpc_stats arg to rpc_create_args (git-fixes).
- swiotlb: do not set total_used to 0 in swiotlb_create_debugfs_files() (git-fixes).
- swiotlb: fix swiotlb_bounce() to do partial sync's correctly (git-fixes).
- syscalls: fix compat_sys_io_pgetevents_time64 usage (git-fixes).
- thermal/drivers/broadcom: Fix race between removal and clock disable (git-fixes).
- thermal: bcm2835: Convert to platform remove callback returning void (stable-fixes).
- thunderbolt: Mark XDomain as unplugged when router is removed (stable-fixes).
- tools/perf: Fix perf bench epoll to enable the run when some CPU's are offline (bsc#1227747).
- tools/perf: Fix perf bench futex to enable the run when some CPU's are offline (bsc#1227747).
- tools/perf: Fix timing issue with parallel threads in perf bench wake-up-parallel (bsc#1227747).
- tools/resolve_btfids: Fix comparison of distinct pointer types warning in resolve_btfids (git-fixes).
- tools/resolve_btfids: Fix cross-compilation to non-host endianness (git-fixes).
- tools/resolve_btfids: Refactor set sorting with types from btf_ids.h (git-fixes).
- tools/resolve_btfids: fix build with musl libc (git-fixes).
- trace/pid_list: Change gfp flags in pid_list_fill_irq() (git-fixes).
- tracing: Return from tracing_buffers_read() if the file has been closed (bsc#1229136 git-fixes).
- tty: atmel_serial: use the correct RTS flag (git-fixes).
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port (git-fixes).
- usb: cdnsp: fix for Link TRB with TC (git-fixes).
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function (git-fixes).
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() (git-fixes).
- usb: dwc3: core: Skip setting event buffers for host only controllers (stable-fixes).
- usb: dwc3: omap: add missing depopulate in probe error path (git-fixes).
- usb: dwc3: st: add missing depopulate in probe error path (git-fixes).
- usb: dwc3: st: fix probed platform device ref count on probe error path (git-fixes).
- usb: gadget: core: Check for unset descriptor (git-fixes).
- usb: gadget: fsl: Increase size of name buffer for endpoints (stable-fixes).
- usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed (git-fixes).
- usb: gadget: u_serial: Set start_delayed during suspend (git-fixes).
- usb: gadget: uvc: cleanup request when not in correct state (stable-fixes).
- usb: typec: fsa4480: Add support to swap SBU orientation (git-fixes).
- usb: typec: fsa4480: Check if the chip is really there (git-fixes).
- usb: typec: fsa4480: Relax CHIP_ID check (git-fixes).
- usb: typec: fsa4480: add support for Audio Accessory Mode (git-fixes).
- usb: typec: fsa4480: rework mux &amp; switch setup to handle more states (git-fixes).
- usb: vhci-hcd: Do not drop references before new references are gained (stable-fixes).
- vfio/pci: fix potential memory leak in vfio_intx_enable() (git-fixes).
- vhost-scsi: Handle vhost_vq_work_queue failures for events (git-fixes).
- vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler (git-fixes).
- vhost/vsock: always initialize seqpacket_allow (git-fixes).
- vhost: Release worker mutex during flushes (git-fixes).
- vhost: Use virtqueue mutex for swapping worker (git-fixes).
- virt: guest_memfd: fix reference leak on hwpoisoned page (git-fixes).
- virtio-crypto: handle config changed by work queue (git-fixes).
- virtio: reenable config if freezing device failed (git-fixes).
- virtio_net: use u64_stats_t infra to avoid data-races (git-fixes).
- virtiofs: forbid newlines in tags (bsc#1229940).
- wifi: ath12k: fix memory leak in ath12k_dp_rx_peer_frag_setup() (stable-fixes).
- wifi: ath12k: fix soft lockup on suspend (git-fixes).
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion (git-fixes).
- wifi: cfg80211: fix reporting failed MLO links status with cfg80211_connect_done (git-fixes).
- wifi: iwlwifi: fw: fix wgds rev 3 exact size (git-fixes).
- wifi: mac80211: use monitor sdata with driver only if desired (git-fixes).
- wifi: mwifiex: duplicate static structs used in driver instances (git-fixes).
- wifi: nl80211: disallow setting special AP channel widths (stable-fixes).
- wifi: nl80211: do not give key data to userspace (stable-fixes).
- wifi: rtw88: usb: Fix disconnection after beacon loss (stable-fixes).
- wifi: wfx: repair open network AP mode (git-fixes).
- workqueue: Improve scalability of workqueue watchdog touch (bsc#1193454).
- workqueue: wq_watchdog_touch is always called with valid CPU (bsc#1193454).
- x86/asm: Use %c/%n instead of %P operand modifier in asm templates (git-fixes).
- x86/entry/64: Remove obsolete comment on tracing vs. SYSRET (git-fixes).
- x86/mm: Fix pti_clone_entry_text() for i386 (git-fixes).
- x86/mm: Fix pti_clone_pgtable() alignment assumption (git-fixes).
- x86/mtrr: Check if fixed MTRRs exist before saving them (git-fixes).
- x86/numa: Fix SRAT lookup of CFMWS ranges with numa_fill_memblks() (git-fixes).
- x86/numa: Fix the address overlap check in numa_fill_memblks() (git-fixes).
- x86/numa: Fix the sort compare func used in numa_fill_memblks() (git-fixes).
- x86/numa: Introduce numa_fill_memblks() (git-fixes).
- x86/pci: Skip early E820 check for ECAM region (git-fixes).
- x86/xen: Convert comma to semicolon (git-fixes).
- xfs: Fix missing interval for missing_owner in xfs fsmap (git-fixes).
- xfs: Fix the owner setting issue for rmap query in xfs fsmap (git-fixes).
- xfs: allow cross-linking special files without project quota (git-fixes).
- xfs: allow symlinks with short remote targets (bsc#1229160).
- xfs: allow unlinked symlinks and dirs with zero size (git-fixes).
- xfs: attr forks require attr, not attr2 (git-fixes).
- xfs: convert comma to semicolon (git-fixes).
- xfs: do not use current-&gt;journal_info (git-fixes).
- xfs: fix unlink vs cluster buffer instantiation race (git-fixes).
- xfs: honor init_xattrs in xfs_init_new_inode for !ATTR fs (git-fixes).
- xfs: journal geometry is not properly bounds checked (git-fixes).
- xfs: match lock mode in xfs_buffered_write_iomap_begin() (git-fixes).
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery (git-fixes).
- xfs: upgrade the extent counters in xfs_reflink_end_cow_extent later (git-fixes).
- xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code (git-fixes).
- xfs: use consistent uid/gid when grabbing dquots for inodes (git-fixes).
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (git-fixes).
- xprtrdma: Fix rpcrdma_reqs_reset() (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="6.4.0" release="10.1" arch="nosrc" src="nosrc/kernel-rt-6.4.0-10.1.nosrc.rpm">
          <filename>kernel-rt-6.4.0-10.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="6.4.0" release="10.1" arch="x86_64" src="x86_64/kernel-rt-6.4.0-10.1.x86_64.rpm">
          <filename>kernel-rt-6.4.0-10.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt-debuginfo" epoch="0" version="6.4.0" release="10.1" arch="x86_64" src="x86_64/kernel-rt-debuginfo-6.4.0-10.1.x86_64.rpm">
          <filename>kernel-rt-debuginfo-6.4.0-10.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt-debugsource" epoch="0" version="6.4.0" release="10.1" arch="x86_64" src="x86_64/kernel-rt-debugsource-6.4.0-10.1.x86_64.rpm">
          <filename>kernel-rt-debugsource-6.4.0-10.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>42</id>
    <title>Recommended update for perl-Bootloader</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1725961419" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215064" id="1215064" title="kernel-rt postinst script fails" type="bugzilla" />
    </references>
    <description>This update for perl-Bootloader fixes the following issues:

- bootloader_entry script can have an optional 'force-default' argument (bsc#1215064)

  This fixes the %post section for kernel-rt.

</description>
    <pkglist>
      <collection>
        <package name="perl-Bootloader" epoch="0" version="1.6" release="3.1" arch="src" src="src/perl-Bootloader-1.6-3.1.src.rpm">
          <filename>perl-Bootloader-1.6-3.1.src.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="1.6" release="3.1" arch="x86_64" src="x86_64/perl-Bootloader-1.6-3.1.x86_64.rpm">
          <filename>perl-Bootloader-1.6-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>48</id>
    <title>Security update for git</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1726221790" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=779536" id="779536" title="Some Bash completions do not work" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1042640" id="1042640" title="VUL-1: CVE-2005-4900: git: hardening against practical SHA1 attacks (SHATTERED)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1061041" id="1061041" title="VUL-0: CVE-2017-14867: git: cvsserver command injection" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1069468" id="1069468" title="Packages should no longer use /var/adm/fillup-templates" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1082023" id="1082023" title="git send-email fails to authenticate with SMTP server" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216545" id="1216545" title="git-web package update overrides custom app armor profile in /etc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218588" id="1218588" title="git instaweb returns &quot;No such projects found&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218664" id="1218664" title="`git instaweb` on OpenSUSE Tumbleweed: /etc/gitweb-common.conf is not being read" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224168" id="1224168" title="VUL-0: CVE-2024-32002: git: recursive clones on case-insensitive filesystems that support symbolic links are susceptible to case confusion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224170" id="1224170" title="VUL-0: CVE-2024-32004: git: arbitrary code execution during local clones" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224171" id="1224171" title="VUL-0: CVE-2024-32020: git: file overwriting vulnerability during local clones" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224172" id="1224172" title="VUL-0: CVE-2024-32021: git: git may create hardlinks to arbitrary user-readable files" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224173" id="1224173" title="VUL-0: CVE-2024-32465: git: arbitrary code execution during clone operations" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4900" id="CVE-2005-4900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4900" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14867" id="CVE-2017-14867" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14867" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32002" id="CVE-2024-32002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32002" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32004" id="CVE-2024-32004" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32004" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32020" id="CVE-2024-32020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32020" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32021" id="CVE-2024-32021" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32021" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32465" id="CVE-2024-32465" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32465" type="cve" />
      <reference href="https://jira.suse.com/browse/SLE-17838" id="SLE-17838" title="https://jira.suse.com/browse/SLE-17838" type="jira" />
    </references>
    <description>This update for git fixes the following issues:

git was updated to 2.45.1:

 * CVE-2024-32002: recursive clones on case-insensitive
   filesystems that support symbolic links are susceptible to case
   confusion (bsc#1224168)
 * CVE-2024-32004: arbitrary code execution during local clones
   (bsc#1224170)
 * CVE-2024-32020: file overwriting vulnerability during local
   clones (bsc#1224171)
 * CVE-2024-32021: git may create hardlinks to arbitrary user-
   readable files (bsc#1224172)
 * CVE-2024-32465: arbitrary code execution during clone operations
   (bsc#1224173)

Update to 2.45.0:

  * Improved efficiency managing repositories with many references
    ("git init --ref-format=reftable")
  * "git checkout -p" and friends learned that that "@" is a
    synonym for "HEAD"
  * cli improvements handling refs
  * Expanded a number of commands and options, UI improvements
  * status.showUntrackedFiles now accepts "true"
  * git-cherry-pick(1) now automatically drops redundant commits
    with new --empty option
  * The userdiff patterns for C# has been updated.

Update to 2.44.0:

  * "git checkout -B &lt;branch&gt;" now longer allows switching to a
    branch that is in use on another worktree. The users need to
    use "--ignore-other-worktrees" option.
  * Faster server-side rebases with git replay
  * Faster pack generation with multi-pack reuse
  * rebase auto-squashing now works in non-interactive mode
  * pathspec now understands attr, e.g. ':(attr:~binary) for
    selecting non-binaries, or builtin_objectmode for selecting
    items by file mode or other properties
  * Many other cli UI and internal improvements and extensions

- Do not replace apparmor configuration, fixes bsc#1216545

Update to 2.43.2:

  * https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.2.txt
  * Update to a new feature recently added, "git show-ref --exists".
  * Rename detection logic ignored the final line of a file if it
    is an incomplete line.
  * "git diff --no-rename A B" did not disable rename detection but
    did not trigger an error from the command line parser.
  * "git diff --no-index file1 file2" segfaulted while invoking the
    external diff driver, which has been corrected.
  * A failed "git tag -s" did not necessarily result in an error
    depending on the crypto backend, which has been corrected.
  * "git stash" sometimes was silent even when it failed due to
    unwritable index file, which has been corrected.
  * Recent conversion to allow more than 0/1 in GIT_FLUSH broke the
    mechanism by flipping what yes/no means by mistake, which has
    been corrected.

Update to 2.43.1:

  * https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.1.txt

- gitweb AppArmor profile: allow reading etc/gitweb-common.conf
  (bsc#1218664)

- git moved to /usr/libexec/git/git, update AppArmor profile
  accordingly (bsc#1218588)

Update to 2.43.0:

 * The "--rfc" option of "git format-patch" used to be a valid way to
   override an earlier "--subject-prefix=&lt;something&gt;" on the command
   line and replace it with "[RFC PATCH]", but from this release, it
   merely prefixes the string "RFC " in front of the given subject
   prefix.  If you are negatively affected by this change, please use
   "--subject-prefix=PATCH --rfc" as a replacement.
 * In Git 2.42, "git rev-list --stdin" learned to take non-revisions
   (like "--not") from the standard input, but the way such a "--not" was
   handled was quite confusing, which has been rethought.  The updated
   rule is that "--not" given from the command line only affects revs
   given from the command line that comes but not revs read from the
   standard input, and "--not" read from the standard input affects
   revs given from the standard input and not revs given from the
   command line.
 * A message written in olden time prevented a branch from getting
   checked out, saying it is already checked out elsewhere. But these
   days, we treat a branch that is being bisected or rebased just like
   a branch that is checked out and protect it from getting modified
   with the same codepath.  The message has been rephrased to say that
   the branch is "in use" to avoid confusion.
 * Hourly and other schedules of "git maintenance" jobs are randomly
   distributed now.
 * "git cmd -h" learned to signal which options can be negated by
   listing such options like "--[no-]opt".
 * The way authentication related data other than passwords (e.g.,
   oauth token and password expiration data) are stored in libsecret
   keyrings has been rethought.
 * Update the libsecret and wincred credential helpers to correctly
   match which credential to erase; they erased the wrong entry in
   some cases.
 * Git GUI updates.
 * "git format-patch" learned a new "--description-file" option that
   lets cover letter description to be fed; this can be used on
   detached HEAD where there is no branch description available, and
   also can override the branch description if there is one.
 * Use of the "--max-pack-size" option to allow multiple packfiles to
   be created is now supported even when we are sending unreachable
   objects to cruft packs.
 * "git format-patch --rfc --subject-prefix=&lt;foo&gt;" used to ignore the
   "--subject-prefix" option and used "[RFC PATCH]"; now we will add
   "RFC" prefix to whatever subject prefix is specified.
 * "git log --format" has been taught the %(decorate) placeholder for
   further customization over what the "--decorate" option offers.
 * The default log message created by "git revert", when reverting a
   commit that records a revert, has been tweaked, to encourage people
   to describe complex "revert of revert of revert" situations better in
   their own words.
 * The command-line completion support (in contrib/) learned to
   complete "git commit --trailer=" for possible trailer keys.
 * "git update-index" learned the "--show-index-version" option to
   inspect the index format version used by the on-disk index file.
 * "git diff" learned the "diff.statNameWidth" configuration variable,
   to give the default width for the name part in the "--stat" output.
 * "git range-diff --notes=foo" compared "log --notes=foo --notes" of
   the two ranges, instead of using just the specified notes tree,
   which has been corrected to use only the specified notes tree.
 * The command line completion script (in contrib/) can be told to
   complete aliases by including ": git &lt;cmd&gt; ;" in the alias to tell
   it that the alias should be completed in a similar way to how "git
   &lt;cmd&gt;" is completed.  The parsing code for the alias has been
   loosened to allow ';' without an extra space before it.
 * "git for-each-ref" and friends learned to apply mailmap to
   authorname and other fields in a more flexible way than using
   separate placeholder letters like %a[eElL] every time we want to
   come up with small variants.
 * "git repack" machinery learned to pay attention to the "--filter="
   option.
 * "git repack" learned the "--max-cruft-size" option to prevent cruft
   packs from growing without bounds.
 * "git merge-tree" learned to take strategy backend specific options
   via the "-X" option, like "git merge" does.
 * "git log" and friends learned the "--dd" option that is a
   short-hand for "--diff-merges=first-parent -p".
 * The attribute subsystem learned to honor the "attr.tree"
   configuration variable that specifies which tree to read the
   .gitattributes files from.
 * "git merge-file" learns a mode to read three variants of the
   contents to be merged from blob objects.
 * see https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.0.txt

Update 2.42.1:

  * Fix "git diff" exit code handling
</description>
    <pkglist>
      <collection>
        <package name="git" epoch="0" version="2.45.1" release="1.1" arch="src" src="src/git-2.45.1-1.1.src.rpm">
          <filename>git-2.45.1-1.1.src.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.45.1" release="1.1" arch="x86_64" src="x86_64/git-2.45.1-1.1.x86_64.rpm">
          <filename>git-2.45.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.45.1" release="1.1" arch="x86_64" src="x86_64/git-core-2.45.1-1.1.x86_64.rpm">
          <filename>git-core-2.45.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="git-core-debuginfo" epoch="0" version="2.45.1" release="1.1" arch="x86_64" src="x86_64/git-core-debuginfo-2.45.1-1.1.x86_64.rpm">
          <filename>git-core-debuginfo-2.45.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="git-debuginfo" epoch="0" version="2.45.1" release="1.1" arch="x86_64" src="x86_64/git-debuginfo-2.45.1-1.1.x86_64.rpm">
          <filename>git-debuginfo-2.45.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="git-debugsource" epoch="0" version="2.45.1" release="1.1" arch="x86_64" src="x86_64/git-debugsource-2.45.1-1.1.x86_64.rpm">
          <filename>git-debugsource-2.45.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.45.1" release="1.1" arch="x86_64" src="x86_64/perl-Git-2.45.1-1.1.x86_64.rpm">
          <filename>perl-Git-2.45.1-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>47</id>
    <title>Security update for libarchive</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1726220446" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225971" id="1225971" title="VUL-0: CVE-2024-20696: libarchive: heap based out-of-bounds write" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225972" id="1225972" title="VUL-0: CVE-2024-20697: libarchive: Out of bounds Remote Code Execution Vulnerability" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20696" id="CVE-2024-20696" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20696" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20697" id="CVE-2024-20697" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20697" type="cve" />
    </references>
    <description>This update for libarchive fixes the following issues:

- CVE-2024-20696: Fixed out-of-bounds access in in copy_from_lzss_window_to_unp() (bsc#1225971)
- CVE-2024-20697: Fixed heap based buffer overflow in rar e8 filter (bsc#1225972)
</description>
    <pkglist>
      <collection>
        <package name="libarchive" epoch="0" version="3.6.2" release="3.1" arch="src" src="src/libarchive-3.6.2-3.1.src.rpm">
          <filename>libarchive-3.6.2-3.1.src.rpm</filename>
        </package>
        <package name="libarchive-debugsource" epoch="0" version="3.6.2" release="3.1" arch="x86_64" src="x86_64/libarchive-debugsource-3.6.2-3.1.x86_64.rpm">
          <filename>libarchive-debugsource-3.6.2-3.1.x86_64.rpm</filename>
        </package>
        <package name="libarchive13" epoch="0" version="3.6.2" release="3.1" arch="x86_64" src="x86_64/libarchive13-3.6.2-3.1.x86_64.rpm">
          <filename>libarchive13-3.6.2-3.1.x86_64.rpm</filename>
        </package>
        <package name="libarchive13-debuginfo" epoch="0" version="3.6.2" release="3.1" arch="x86_64" src="x86_64/libarchive13-debuginfo-3.6.2-3.1.x86_64.rpm">
          <filename>libarchive13-debuginfo-3.6.2-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>74</id>
    <title>Security update for krb5</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1733495134" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220770" id="1220770" title="VUL-0: CVE-2024-26458: krb5: memory leak at /krb5/src/lib/rpc/pmap_rmt.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220771" id="1220771" title="VUL-0: CVE-2024-26461: krb5: memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220772" id="1220772" title="VUL-0: CVE-2024-26462: krb5: memory leak at /krb5/src/kdc/ndr.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227186" id="1227186" title="VUL-0: CVE-2024-37370: krb5: confidential GSS krb5 wrap tokens with invalid plaintext Extra Count fields are errouneously accepted during unwrap" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227187" id="1227187" title="VUL-0: CVE-2024-37371: krb5: invalid memory read when processing message tokens with invalid length fields" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458" id="CVE-2024-26458" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26458" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461" id="CVE-2024-26461" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26461" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26462" id="CVE-2024-26462" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26462" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37370" id="CVE-2024-37370" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37370" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371" id="CVE-2024-37371" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37371" type="cve" />
    </references>
    <description>This update for krb5 fixes the following issues:

- CVE-2024-37370: Confidential GSS krb5 wrap tokens with invalid plaintext Extra Count fields were erroneously accepted during unwrap (bsc#1227186)
- CVE-2024-37371: Fixed invalid memory read when processing message tokens with invalid length fields (bsc#1227187)
- CVE-2024-26458: Fixed memory leak at /krb5/src/lib/rpc/pmap_rmt.c (bsc#1220770)
- CVE-2024-26461: Fixed memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c (bsc#1220771)
- CVE-2024-26462: Fixed memory leak at /krb5/src/kdc/ndr.c (bsc#1220772)
</description>
    <pkglist>
      <collection>
        <package name="krb5" epoch="0" version="1.20.1" release="5.1" arch="src" src="src/krb5-1.20.1-5.1.src.rpm">
          <filename>krb5-1.20.1-5.1.src.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.20.1" release="5.1" arch="x86_64" src="x86_64/krb5-1.20.1-5.1.x86_64.rpm">
          <filename>krb5-1.20.1-5.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-debuginfo" epoch="0" version="1.20.1" release="5.1" arch="x86_64" src="x86_64/krb5-debuginfo-1.20.1-5.1.x86_64.rpm">
          <filename>krb5-debuginfo-1.20.1-5.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-debugsource" epoch="0" version="1.20.1" release="5.1" arch="x86_64" src="x86_64/krb5-debugsource-1.20.1-5.1.x86_64.rpm">
          <filename>krb5-debugsource-1.20.1-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>75</id>
    <title>Security update for gtk3</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1733495134" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228120" id="1228120" title="VUL-0: CVE-2024-6655: gtk2,gtk3,gtk4: library injection from current working directory" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6655" id="CVE-2024-6655" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6655" type="cve" />
    </references>
    <description>This update for gtk3 fixes the following issues:

- CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120).
</description>
    <pkglist>
      <collection>
        <package name="gtk3" epoch="0" version="3.24.37+70" release="6.1" arch="src" src="src/gtk3-3.24.37+70-6.1.src.rpm">
          <filename>gtk3-3.24.37+70-6.1.src.rpm</filename>
        </package>
        <package name="gtk3-data" epoch="0" version="3.24.37+70" release="6.1" arch="noarch" src="noarch/gtk3-data-3.24.37+70-6.1.noarch.rpm">
          <filename>gtk3-data-3.24.37+70-6.1.noarch.rpm</filename>
        </package>
        <package name="gtk3-debugsource" epoch="0" version="3.24.37+70" release="6.1" arch="x86_64" src="x86_64/gtk3-debugsource-3.24.37+70-6.1.x86_64.rpm">
          <filename>gtk3-debugsource-3.24.37+70-6.1.x86_64.rpm</filename>
        </package>
        <package name="gtk3-schema" epoch="0" version="3.24.37+70" release="6.1" arch="noarch" src="noarch/gtk3-schema-3.24.37+70-6.1.noarch.rpm">
          <filename>gtk3-schema-3.24.37+70-6.1.noarch.rpm</filename>
        </package>
        <package name="gtk3-tools" epoch="0" version="3.24.37+70" release="6.1" arch="x86_64" src="x86_64/gtk3-tools-3.24.37+70-6.1.x86_64.rpm">
          <filename>gtk3-tools-3.24.37+70-6.1.x86_64.rpm</filename>
        </package>
        <package name="gtk3-tools-debuginfo" epoch="0" version="3.24.37+70" release="6.1" arch="x86_64" src="x86_64/gtk3-tools-debuginfo-3.24.37+70-6.1.x86_64.rpm">
          <filename>gtk3-tools-debuginfo-3.24.37+70-6.1.x86_64.rpm</filename>
        </package>
        <package name="libgtk-3-0" epoch="0" version="3.24.37+70" release="6.1" arch="x86_64" src="x86_64/libgtk-3-0-3.24.37+70-6.1.x86_64.rpm">
          <filename>libgtk-3-0-3.24.37+70-6.1.x86_64.rpm</filename>
        </package>
        <package name="libgtk-3-0-debuginfo" epoch="0" version="3.24.37+70" release="6.1" arch="x86_64" src="x86_64/libgtk-3-0-debuginfo-3.24.37+70-6.1.x86_64.rpm">
          <filename>libgtk-3-0-debuginfo-3.24.37+70-6.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-Gtk-3_0" epoch="0" version="3.24.37+70" release="6.1" arch="x86_64" src="x86_64/typelib-1_0-Gtk-3_0-3.24.37+70-6.1.x86_64.rpm">
          <filename>typelib-1_0-Gtk-3_0-3.24.37+70-6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>76</id>
    <title>Security update for python-setuptools</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1731333212" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228105" id="1228105" title="VUL-0: CVE-2024-6345: python-setuptools: code execution via download functions in the package_index module in pypa/setuptools" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6345" id="CVE-2024-6345" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6345" type="cve" />
    </references>
    <description>This update for python-setuptools fixes the following issues:

- CVE-2024-6345: Fixed code execution via download functions in the package_index module in pypa/setuptools (bsc#1228105)
</description>
    <pkglist>
      <collection>
        <package name="python-setuptools" epoch="0" version="69.0.2" release="2.1" arch="src" src="src/python-setuptools-69.0.2-2.1.src.rpm">
          <filename>python-setuptools-69.0.2-2.1.src.rpm</filename>
        </package>
        <package name="python311-setuptools" epoch="0" version="69.0.2" release="2.1" arch="noarch" src="noarch/python311-setuptools-69.0.2-2.1.noarch.rpm">
          <filename>python311-setuptools-69.0.2-2.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>49</id>
    <title>Security update for kubevirt</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1726666729" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220512" id="1220512" title="VM log files flooded with taint messages" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221538" id="1221538" title="[KubeVirt] Missing qemu-hw-usb-host package in virt-launcher container image" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223965" id="1223965" title="VUL-0: CVE-2024-33394: kubevirt: clusterRole with list secrets premission" type="bugzilla" />
    </references>
    <description>This update for kubevirt fixes the following issues:

- Update to version 1.3.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.0
- Fix DV error report via VM printable status
- Fix permission error in storage migration tests
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.3.1-150600.5.9.1

- Use the images based on SLE15 SP6 BCI
- Bump to the latest tag 1.2.2-150600.5.6.1
  bsc#1221538; bsc#1220512; bsc#1223965

- Update to version 1.2.2
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.2
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.2.0
- Pack configuration files for libvirt

</description>
    <pkglist>
      <collection>
        <package name="kubevirt" epoch="0" version="1.3.1" release="1.1" arch="src" src="src/kubevirt-1.3.1-1.1.src.rpm">
          <filename>kubevirt-1.3.1-1.1.src.rpm</filename>
        </package>
        <package name="kubevirt-manifests" epoch="0" version="1.3.1" release="1.1" arch="x86_64" src="x86_64/kubevirt-manifests-1.3.1-1.1.x86_64.rpm">
          <filename>kubevirt-manifests-1.3.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl" epoch="0" version="1.3.1" release="1.1" arch="x86_64" src="x86_64/kubevirt-virtctl-1.3.1-1.1.x86_64.rpm">
          <filename>kubevirt-virtctl-1.3.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="kubevirt-virtctl-debuginfo" epoch="0" version="1.3.1" release="1.1" arch="x86_64" src="x86_64/kubevirt-virtctl-debuginfo-1.3.1-1.1.x86_64.rpm">
          <filename>kubevirt-virtctl-debuginfo-1.3.1-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>160</id>
    <title>Security update for containerized-data-importer</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1734950902" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224119" id="1224119" title="VUL-0: CVE-2024-3727: containerized-data-importer: containers/image: digest type does not guarantee valid type" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" id="CVE-2024-3727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3727" type="cve" />
    </references>
    <description>This update for containerized-data-importer fixes the following issues:

- Update to version 1.60.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1
- Add registry path for SLE15 SP7
- Bump to the latest tag 1.60.1-150600.3.9.1

- Use the images based on SLE15 SP6 BCI
- Bump to the latest tag 1.59.0-150600.3.6.1

- Update to version 1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.59.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.58.1

</description>
    <pkglist>
      <collection>
        <package name="containerized-data-importer" epoch="0" version="1.60.1" release="1.1" arch="src" src="src/containerized-data-importer-1.60.1-1.1.src.rpm">
          <filename>containerized-data-importer-1.60.1-1.1.src.rpm</filename>
        </package>
        <package name="containerized-data-importer-manifests" epoch="0" version="1.60.1" release="1.1" arch="x86_64" src="x86_64/containerized-data-importer-manifests-1.60.1-1.1.x86_64.rpm">
          <filename>containerized-data-importer-manifests-1.60.1-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>64</id>
    <title>Security update for docker</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1729001266" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210141" id="1210141" title="docker.socket systemd configurations dosn't exist" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214855" id="1214855" title="umarshalling volume options for volume: unexpected end of JSON input" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215323" id="1215323" title="[trackerbug] docker 24.0.6-ce update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217513" id="1217513" title="VUL-0: docker: mitigate power-based side channel attacks (advisory GHSA-jq35-85cj-fj4p)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219267" id="1219267" title="VUL-0: CVE-2024-23651: docker: race condition in mount" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219268" id="1219268" title="VUL-0: CVE-2024-23652: docker: arbitrary deletion of files" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219438" id="1219438" title="VUL-0: CVE-2024-23653: buildkit: BuildKit API doesn't validate entitlement on container creation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220339" id="1220339" title="docker-24.0.7 makes docker overlay files world writable [ref:_00D1igLOd._500Tr634Oc:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221916" id="1221916" title="L3: SLES15-SP4: Docker buildx build fails to COPY from build stage using nested links" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223409" id="1223409" title="[trackerbug] docker 25.0.5 update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228324" id="1228324" title="VUL-0: CVE-2024-41110: docker: Authz zero length regression" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23651" id="CVE-2024-23651" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23651" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23652" id="CVE-2024-23652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23652" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23653" id="CVE-2024-23653" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23653" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110" id="CVE-2024-41110" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110" type="cve" />
    </references>
    <description>This update for docker fixes the following issues:

Security fixes:

- CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts (bsc#1219267)
- CVE-2024-23652: Fixed insufficient validation of parent directory on mount (bsc#1219268)
- CVE-2024-23653: Fixed insufficient validation on entitlement on container creation via buildkit (bsc#1219438)
- CVE-2024-41110: A Authz zero length regression that could lead to authentication bypass was fixed (bsc#1228324)

Other changes:

- Update to Docker 25.0.6-ce.
- Fix BuildKit's symlink resolution logic to correctly handle non-lexical
  symlinks. (bsc#1221916)
- Write volume options atomically so sudden system crashes won't result in
  future Docker starts failing due to empty files. (bsc#1214855)
- Fixed world writable docker overlay files (bsc#1220339)
</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="25.0.6_ce" release="1.1" arch="src" src="src/docker-25.0.6_ce-1.1.src.rpm">
          <filename>docker-25.0.6_ce-1.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="25.0.6_ce" release="1.1" arch="x86_64" src="x86_64/docker-25.0.6_ce-1.1.x86_64.rpm">
          <filename>docker-25.0.6_ce-1.1.x86_64.rpm</filename>
        </package>
        <package name="docker-debuginfo" epoch="0" version="25.0.6_ce" release="1.1" arch="x86_64" src="x86_64/docker-debuginfo-25.0.6_ce-1.1.x86_64.rpm">
          <filename>docker-debuginfo-25.0.6_ce-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>65</id>
    <title>Security update for rust-keylime</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1729001276" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223234" id="1223234" title="VUL-0: CVE-2024-32650: rust-keylime: rust-rustls: Infinite loop in rustls::conn::ConnectionCommon:complete_io() with proper client input" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229952" id="1229952" title="VUL-0: CVE-2024-43806: rust-keylime: rustix: rustix::fs::Dir iterator with the linux_raw backend can cause memory explosion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230029" id="1230029" title="VUL-0: rust-keylime: rust-shlex: Multiple issues involving quote API ( RUSTSEC-2024-0006, GHSA-r7qv-8r2h-pg27)" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32650" id="CVE-2024-32650" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32650" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43806" id="CVE-2024-43806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43806" type="cve" />
    </references>
    <description>This update for rust-keylime fixes the following issues:

- Update vendored crates (CVE-2024-43806, bsc#1229952, bsc#1230029)
  * rustix 0.37.25
  * rustix 0.38.34
  * shlex  1.3.0

- Update to version 0.2.6+13:
  * Enable test functional/iak-idevid-persisted-and-protected
  * build(deps): bump uuid from 1.7.0 to 1.10.0
  * build(deps): bump openssl from 0.10.64 to 0.10.66
  * keylime-agent/src/revocation: Fix comment indentation
  * keylime/crypto: Fix indentation of documentation comment
  * build(deps): bump thiserror from 1.0.59 to 1.0.63
  * build(deps): bump serde_json from 1.0.116 to 1.0.120
  * dependabot: Extend to also monitor workflow actions
  * ci: Disable Packit CI on CentOS Stream 9
  * ci: use CODECOV_TOKEN when submitting coverage data
  * revocation: Use into() for unfallible transformation
  * secure_mount: Fix possible infinite loop
  * error: Rename enum variants to avoid clippy warning

- Update to version 0.2.6~0:
  * Bump version to 0.2.6
  * build(deps): bump libc from 0.2.153 to 0.2.155
  * build(deps): bump serde from 1.0.196 to 1.0.203
  * rpm/fedora: Update rust macro usage
  * config: Support hostnames in registrar_ip option
  * added use of persisted IAK and IDevID and authorisation values
  * config changes
  * Adding /agent/info API to agent
  * Fix leftover 'unnecessary qualification' warnings on tests

- Update to version 0.2.5~4:
  * Fix 'unnecessary qualification' warnings
  * fix IAK template to match IDevID
  * rpm: fix COPR RPMs build for centos-stream-10
  * Build COPR RPMs for centos-stream-10

- Update to version 0.2.5~0:
  * Bump version to 0.2.5
  * cargo: Relax required version for pest crate
  * build(deps): bump log from 0.4.20 to 0.4.21
  * build(deps): bump thiserror from 1.0.56 to 1.0.59

- actix-web update moves rustls as feature (bsc#1223234, CVE-2024-32650)

- Update to version 0.2.4~39:
  * build(deps): bump openssl from 0.10.63 to 0.10.64
  * build(deps): bump h2 from 0.3.24 to 0.3.26
  * build(deps): bump serde_json from 1.0.107 to 1.0.116
  * build(deps): bump actix-web from 4.4.1 to 4.5.1
  * crypto: Enable TLS 1.3
  * build(deps): bump tempfile from 3.9.0 to 3.10.1
  * build(deps): bump mio from 0.8.4 to 0.8.11
  * enable hex values to be used for tpm_ownerpassword
  * config: Support IPv6 with or without brackets
  * keylime: Implement a simple IP parser to remove brackets
  * crypto: Implement CertificateBuilder to generate certificates
  * tests: Fix coverage download by supporting arbitrary URL
  * cargo: Add testing feature to keylime library
  * Set X509 SAN with local DNSname/IP/IPv6
  * Include newest Node20 versions for Github actions
  * tpm: Add unit test for uncovered public functions
  * crypto: Implement ECC key generation support
  * crypto: Add test for match_cert_to_template()
  * Fix minor typo, format and remove end whitespaces
  * crypto: Make error types less specific
  * tests/run.sh: Run tarpaulin with a single thread
  * payloads: Remove explicit drop of channel transmitter
  * crypto: Move to keylime library
  * crypto: Add specific type for every possible error
  * tpm: Rename origin of error as source in structures
  * list_parser: Add source for error for backtrace
  * algorithms: Make errors more specific
  * typo fix for default path to measured boot log file
  * README: remove mentions of libarchive as a dependency
  * Dockerfile.wolfi: Update clang to version 17
  * docker: Remove libarchive as a dependency
  * rpm: Remove libarchive from dependencies
  * cargo: Replace compress-tools with zip crate
  * cargo: Bump ahash to version 0.8.7
  * build(deps): bump serde from 1.0.195 to 1.0.196
  * build(deps): bump libc from 0.2.152 to 0.2.153
  * build(deps): bump reqwest from 0.11.23 to 0.11.24
  * docker: Install configuration file in the correct path
  * config: Make IAK/IDevID disabled by default

- Update to version 0.2.4+git.1706692574.a744517:
  * Bump version to 0.2.4
  * build(deps): bump uuid from 1.4.1 to 1.7.0
  * keylime-agent.conf: Allow setting event logs paths
  * Mutable log paths: allow IMA and MBA log paths to be overridden by keylime configuration.
  * workflows: Update checkout action to version 4
  * build(deps): bump serde from 1.0.188 to 1.0.195
  * build(deps): bump pest_derive from 2.7.0 to 2.7.6
  * build(deps): bump openssl from 0.10.62 to 0.10.63
  * build(deps): bump config from 0.13.3 to 0.13.4
  * build(deps): bump base64 from 0.21.4 to 0.21.7
  * build(deps): bump tempfile from 3.8.0 to 3.9.0
  * build(deps): bump pest from 2.7.0 to 2.7.6
  * build(deps): bump actix-web from 4.4.0 to 4.4.1
  * build(deps): bump reqwest from 0.11.22 to 0.11.23
  * build(deps): bump h2 from 0.3.17 to 0.3.24
  * build(deps): bump shlex from 1.1.0 to 1.3.0
  * cargo: Bump tss-esapi to version 7.4.0
  * workflows: Fix keylime-bot token usage
  * tpm: Add error context for every possible error
  * tpm: Add AlgorithmError to TpmError
  * detect idevid template from certificates
  * build(deps): bump wiremock from 0.5.18 to 0.5.22
  * build(deps): bump thiserror from 1.0.48 to 1.0.56
  * Make use of workspace dependencies
  * build(deps): bump openssl from 0.10.57 to 0.10.62
  * packit: Bump Fedora version used for code coverage

- Update to version 0.2.3+git.1701075380.a5dc985:
  * build(deps): bump actix-rt from 2.8.0 to 2.9.0
  * Bump version to 0.2.3
  * build(deps): bump reqwest from 0.11.20 to 0.11.22
  * Bump configuration version and fix enable_iak_idevid
  * Enable test functional/iak-idevid-register-with-certificates
  * Update packit plan with new tests
  * Add certificates and certificate checking for IDevID and IAK keys (#669)

- Update to version 0.2.2+git.1697658634.9c7c6fa:
  * build(deps): bump rustix from 0.37.11 to 0.37.25
  * build(deps): bump tempfile from 3.6.0 to 3.8.0
  * build(deps): bump base64 from 0.21.0 to 0.21.4
  * build(deps): bump serde_json from 1.0.96 to 1.0.107
  * build(deps): bump openssl from 0.10.55 to 0.10.57
  * cargo: Bump serde to version 1.0.188
  * tests: Fix tarpaulin issues with dropped -v option
  * build(deps): bump signal-hook from 0.3.15 to 0.3.17
  * build(deps): bump actix-web from 4.3.1 to 4.4.0
  * build(deps): bump thiserror from 1.0.40 to 1.0.48
  * Remove private_in_public
  * Initial PR to add support for IDevID and IAK
  * build(deps): bump uuid from 1.3.1 to 1.4.1
  * build(deps): bump log from 0.4.17 to 0.4.20
  * build(deps): bump reqwest from 0.11.16 to 0.11.20
  * Do not use too specific version on cargo audit workflow
  * Add workflow to run cargo-audit security audit
  * README: update dependencies for Debian and Ubuntu
  * Use latest versions of checkout/upload-artifacts
  * docker: Add 'keylime' system user
  * Use "currently" for swtpm emulator warning (#632)
  * Update container workflow actions versions
  * Build container image and push to quay.io
  * README: update requirements

- Update to version 0.2.2+git.1689256829.3d2b627:
  * Bump version to 0.2.2
  * build(deps): bump tempfile from 3.5.0 to 3.6.0
  * removing SIGINT stop signals from Dockerfiles and systemd service, as well as adding SIGTERM to IMA emulator as shutdown signal

- Update to version 0.2.1+git.1689167094.67ce0cf:
  * cargo: Bump serde to version 1.0.166
  * build(deps): bump libc from 0.2.142 to 0.2.147
  * adding release Dockerfiles in 3 flavours: fedora, distroless and wolfi
  * hash: add more configurable hash algorithm for public key digest
  * cargo: Update clap to version 4.3.11
  * cargo: Bump tokio crate version to 1.28.2
  * Add an example of IMA policy
  * main: Gracefully shutdown on SIGTERM or SIGINT
  * cargo: Bump proc-macro2 crate version
  * revocation: Parse revocation actions flexibly
  * crypto: Add unit tests for x509 functions
  * crypto: Make internal functions private
  * config: Add unit test for the list to files mapping
  * config: Make trusted_client_ca to accept lists
  * lib: Implement parser for lists from config file
  * build(deps): bump openssl from 0.10.48 to 0.10.55
  * Add secure mount sanity test to packit testing.
  * [packit] Do not let COPR project expire

- Recommends the IMA Policy subpackage only if SELinux is configured

- Update to version 0.2.1+git.1685699835.3c9d17c:
  * Remove MOUNT_SECURE bool
  * rpm: Remove unused directory and add dependency for mount
  * keylime-agent/src: update API version to 2.1 to consistent with https://github.com/keylime/keylime/blob/master/docs/rest_apis.rst
  * docker/fedora/keylime_rust.Dockerfile: add the logic of cloning and compiling rust-keylime
  * [tests] Update test coverage task name regexp
  * [tests] Simply coverage file URL parsing

</description>
    <pkglist>
      <collection>
        <package name="rust-keylime" epoch="0" version="0.2.6+13" release="1.1" arch="src" src="src/rust-keylime-0.2.6+13-1.1.src.rpm">
          <filename>rust-keylime-0.2.6+13-1.1.src.rpm</filename>
        </package>
        <package name="rust-keylime" epoch="0" version="0.2.6+13" release="1.1" arch="x86_64" src="x86_64/rust-keylime-0.2.6+13-1.1.x86_64.rpm">
          <filename>rust-keylime-0.2.6+13-1.1.x86_64.rpm</filename>
        </package>
        <package name="rust-keylime-debuginfo" epoch="0" version="0.2.6+13" release="1.1" arch="x86_64" src="x86_64/rust-keylime-debuginfo-0.2.6+13-1.1.x86_64.rpm">
          <filename>rust-keylime-debuginfo-0.2.6+13-1.1.x86_64.rpm</filename>
        </package>
        <package name="rust-keylime-debugsource" epoch="0" version="0.2.6+13" release="1.1" arch="x86_64" src="x86_64/rust-keylime-debugsource-0.2.6+13-1.1.x86_64.rpm">
          <filename>rust-keylime-debugsource-0.2.6+13-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>54</id>
    <title>Security update for ucode-intel</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1727788121" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230400" id="1230400" title="VUL-0: CVE-2024-23984,CVE-2024-24968: ucode-intel: 20240910 release" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23984" id="CVE-2024-23984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23984" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24968" id="CVE-2024-24968" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24968" type="cve" />
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Intel CPU Microcode was updated to the 20240910 release (bsc#1230400)

  - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access.
  - CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may allow an privileged user to potentially enable a denial of service via local access

  ### New Platforms:

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | TWL            | N0       | 06-be-00/19 |          | 0000001a | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E

  ### Updated Platforms:

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000035 | 00000036 | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 00000035 | 00000036 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000433 | 00000434 | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 00000433 | 00000434 | Core Gen12
  | ADL-N          | N0       | 06-be-00/11 | 00000017 | 0000001a | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | MTL            | C0       | 06-aa-04/e6 | 0000001e | 0000001f | Core Ultra Processor
  | RPL-E/HX/S     | B0       | 06-b7-01/32 | 00000123 | 00000129 | Core Gen13/Gen14
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004121 | 00004122 | Core Gen13
  | RPL-HX/S       | C0       | 06-bf-02/07 | 00000035 | 00000036 | Core Gen13/Gen14
  | RPL-S          | H0       | 06-bf-05/07 | 00000035 | 00000036 | Core Gen13/Gen14
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004121 | 00004122 | Core Gen13

</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20240910" release="1.1" arch="src" src="src/ucode-intel-20240910-1.1.src.rpm">
          <filename>ucode-intel-20240910-1.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-intel" epoch="0" version="20240910" release="1.1" arch="x86_64" src="x86_64/ucode-intel-20240910-1.1.x86_64.rpm">
          <filename>ucode-intel-20240910-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>50</id>
    <title>Security update for libpcap</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1726752130" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230020" id="1230020" title="VUL-0: CVE-2023-7256: libpcap: double free via addrinfo in sock_initaddress()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230034" id="1230034" title="VUL-0: CVE-2024-8006: libpcap: null pointer dereference in pcap_findalldevs_ex()" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7256" id="CVE-2023-7256" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-7256" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8006" id="CVE-2024-8006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8006" type="cve" />
    </references>
    <description>This update for libpcap fixes the following issues:

- CVE-2024-8006: Fixed NULL pointer dereference in pcap_findalldevs_ex() (bsc#1230034)
- CVE-2023-7256: Fixed double free via addrinfo in sock_initaddress() (bsc#1230020)
</description>
    <pkglist>
      <collection>
        <package name="libpcap" epoch="0" version="1.10.4" release="3.1" arch="src" src="src/libpcap-1.10.4-3.1.src.rpm">
          <filename>libpcap-1.10.4-3.1.src.rpm</filename>
        </package>
        <package name="libpcap-debugsource" epoch="0" version="1.10.4" release="3.1" arch="x86_64" src="x86_64/libpcap-debugsource-1.10.4-3.1.x86_64.rpm">
          <filename>libpcap-debugsource-1.10.4-3.1.x86_64.rpm</filename>
        </package>
        <package name="libpcap1" epoch="0" version="1.10.4" release="3.1" arch="x86_64" src="x86_64/libpcap1-1.10.4-3.1.x86_64.rpm">
          <filename>libpcap1-1.10.4-3.1.x86_64.rpm</filename>
        </package>
        <package name="libpcap1-debuginfo" epoch="0" version="1.10.4" release="3.1" arch="x86_64" src="x86_64/libpcap1-debuginfo-1.10.4-3.1.x86_64.rpm">
          <filename>libpcap1-debuginfo-1.10.4-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>52</id>
    <title>Security update for orc</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1727165268" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228184" id="1228184" title="VUL-0: CVE-2024-40897: orc: Stack-based buffer overflow in the Orc compiler when formatting error messages for certain input files" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40897" id="CVE-2024-40897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40897" type="cve" />
    </references>
    <description>This update for orc fixes the following issues:

- CVE-2024-40897: Fixed a stack-based buffer overflow when formatting error messages (bsc#1228184)
</description>
    <pkglist>
      <collection>
        <package name="liborc-0_4-0" epoch="0" version="0.4.34" release="2.1" arch="x86_64" src="x86_64/liborc-0_4-0-0.4.34-2.1.x86_64.rpm">
          <filename>liborc-0_4-0-0.4.34-2.1.x86_64.rpm</filename>
        </package>
        <package name="liborc-0_4-0-debuginfo" epoch="0" version="0.4.34" release="2.1" arch="x86_64" src="x86_64/liborc-0_4-0-debuginfo-0.4.34-2.1.x86_64.rpm">
          <filename>liborc-0_4-0-debuginfo-0.4.34-2.1.x86_64.rpm</filename>
        </package>
        <package name="orc" epoch="0" version="0.4.34" release="2.1" arch="src" src="src/orc-0.4.34-2.1.src.rpm">
          <filename>orc-0.4.34-2.1.src.rpm</filename>
        </package>
        <package name="orc-debugsource" epoch="0" version="0.4.34" release="2.1" arch="x86_64" src="x86_64/orc-debugsource-0.4.34-2.1.x86_64.rpm">
          <filename>orc-debugsource-0.4.34-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>66</id>
    <title>Recommended update for cockpit</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1729001287" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221336" id="1221336" title="&quot;Learn More&quot; links to Red Hat page" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226050" id="1226050" title="cockpit-309-5.3.x86_64 in SL Micro 6.0 Help / Transactional Update redirects to missing web page" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227441" id="1227441" title="Broken branding in cockpit" type="bugzilla" />
    </references>
    <description>This update for cockpit fixes the following issues:

- Updated documentation to point at new links (bsc#1226050)
- Removed additional hardcoded RH refs (bsc#1221336)
- Use SUSE ID as branding instead of sle-micro (bsc#1227441)
</description>
    <pkglist>
      <collection>
        <package name="cockpit" epoch="0" version="309" release="7.1" arch="src" src="src/cockpit-309-7.1.src.rpm">
          <filename>cockpit-309-7.1.src.rpm</filename>
        </package>
        <package name="cockpit" epoch="0" version="309" release="7.1" arch="x86_64" src="x86_64/cockpit-309-7.1.x86_64.rpm">
          <filename>cockpit-309-7.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-bridge" epoch="0" version="309" release="7.1" arch="x86_64" src="x86_64/cockpit-bridge-309-7.1.x86_64.rpm">
          <filename>cockpit-bridge-309-7.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-bridge-debuginfo" epoch="0" version="309" release="7.1" arch="x86_64" src="x86_64/cockpit-bridge-debuginfo-309-7.1.x86_64.rpm">
          <filename>cockpit-bridge-debuginfo-309-7.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-debuginfo" epoch="0" version="309" release="7.1" arch="x86_64" src="x86_64/cockpit-debuginfo-309-7.1.x86_64.rpm">
          <filename>cockpit-debuginfo-309-7.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-debugsource" epoch="0" version="309" release="7.1" arch="x86_64" src="x86_64/cockpit-debugsource-309-7.1.x86_64.rpm">
          <filename>cockpit-debugsource-309-7.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-networkmanager" epoch="0" version="309" release="7.1" arch="noarch" src="noarch/cockpit-networkmanager-309-7.1.noarch.rpm">
          <filename>cockpit-networkmanager-309-7.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-selinux" epoch="0" version="309" release="7.1" arch="noarch" src="noarch/cockpit-selinux-309-7.1.noarch.rpm">
          <filename>cockpit-selinux-309-7.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-storaged" epoch="0" version="309" release="7.1" arch="noarch" src="noarch/cockpit-storaged-309-7.1.noarch.rpm">
          <filename>cockpit-storaged-309-7.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-system" epoch="0" version="309" release="7.1" arch="noarch" src="noarch/cockpit-system-309-7.1.noarch.rpm">
          <filename>cockpit-system-309-7.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-ws" epoch="0" version="309" release="7.1" arch="x86_64" src="x86_64/cockpit-ws-309-7.1.x86_64.rpm">
          <filename>cockpit-ws-309-7.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-ws-debuginfo" epoch="0" version="309" release="7.1" arch="x86_64" src="x86_64/cockpit-ws-debuginfo-309-7.1.x86_64.rpm">
          <filename>cockpit-ws-debuginfo-309-7.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>77</id>
    <title>Recommended update for audit</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1731333212" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215377" id="1215377" title="[Build 20230914-1] plugin /usr/sbin/sedispatch terminated unexpectedly" type="bugzilla" />
    </references>
    <description>This update for audit fixes the following issues:

- Fix plugin termination when using systemd service units (bsc#1215377)
</description>
    <pkglist>
      <collection>
        <package name="audit" epoch="0" version="3.0.9" release="4.1" arch="src" src="src/audit-3.0.9-4.1.src.rpm">
          <filename>audit-3.0.9-4.1.src.rpm</filename>
        </package>
        <package name="audit-debugsource" epoch="0" version="3.0.9" release="4.1" arch="x86_64" src="x86_64/audit-debugsource-3.0.9-4.1.x86_64.rpm">
          <filename>audit-debugsource-3.0.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.9" release="4.1" arch="x86_64" src="x86_64/libaudit1-3.0.9-4.1.x86_64.rpm">
          <filename>libaudit1-3.0.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="libaudit1-debuginfo" epoch="0" version="3.0.9" release="4.1" arch="x86_64" src="x86_64/libaudit1-debuginfo-3.0.9-4.1.x86_64.rpm">
          <filename>libaudit1-debuginfo-3.0.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.9" release="4.1" arch="x86_64" src="x86_64/libauparse0-3.0.9-4.1.x86_64.rpm">
          <filename>libauparse0-3.0.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="libauparse0-debuginfo" epoch="0" version="3.0.9" release="4.1" arch="x86_64" src="x86_64/libauparse0-debuginfo-3.0.9-4.1.x86_64.rpm">
          <filename>libauparse0-debuginfo-3.0.9-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>78</id>
    <title>Recommended update for perl-Bootloader</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1733495134" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215064" id="1215064" title="kernel-rt postinst script fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221470" id="1221470" title="update-bootloader and pbl --install don't report install failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230070" id="1230070" title="slem6.1,ppc64le only,  &quot;transactional-update -n bootloader&quot; command gets error &quot;/usr/sbin/grub2-install: error: the chosen partition is not a PReP partition&quot;" type="bugzilla" />
      <reference href="https://github.com/openSUSE/perl-bootloader#156" id="openSUSE/perl-bootloader#156" title="https://github.com/openSUSE/perl-bootloader#156" type="github" />
      <reference href="https://github.com/openSUSE/perl-bootloader#158" id="openSUSE/perl-bootloader#158" title="https://github.com/openSUSE/perl-bootloader#158" type="github" />
      <reference href="https://github.com/openSUSE/perl-bootloader#167" id="openSUSE/perl-bootloader#167" title="https://github.com/openSUSE/perl-bootloader#167" type="github" />
      <reference href="https://github.com/openSUSE/perl-bootloader#176" id="openSUSE/perl-bootloader#176" title="https://github.com/openSUSE/perl-bootloader#176" type="github" />
    </references>
    <description>This update for perl-Bootloader fixes the following issues:

- handle missing grub_installdevice on powerpc (bsc#1230070)
- log grub2-install errors correctly (bsc#1221470)
- skip warning about unsupported options when in compat mode
- bootloader_entry script can have an optional 'force-default' argument (bsc#1215064)
</description>
    <pkglist>
      <collection>
        <package name="perl-Bootloader" epoch="0" version="1.8.2" release="1.1" arch="src" src="src/perl-Bootloader-1.8.2-1.1.src.rpm">
          <filename>perl-Bootloader-1.8.2-1.1.src.rpm</filename>
        </package>
        <package name="perl-Bootloader" epoch="0" version="1.8.2" release="1.1" arch="x86_64" src="x86_64/perl-Bootloader-1.8.2-1.1.x86_64.rpm">
          <filename>perl-Bootloader-1.8.2-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>87</id>
    <title>Security update for python311</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1731673920" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229596" id="1229596" title="VUL-0: CVE-2024-7592: python, cpython: Uncontrolled CPU resource consumption when in http.cookies module" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229704" id="1229704" title="VUL-0: CVE-2024-8088: python310,python311,python312,python39: denial of service in zipfile" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230227" id="1230227" title="VUL-0: CVE-2024-6232: python,python-base,python3,python3-base,python310,python311,python312,python36,python39: python: cpython: tarfile: ReDos via excessive backtracking while parsing header values" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6232" id="CVE-2024-6232" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6232" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7592" id="CVE-2024-7592" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7592" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8088" id="CVE-2024-8088" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8088" type="cve" />
    </references>
    <description>This update for python311 fixes the following issues:

- CVE-2024-8088: Fixed a denial of service in zipfile (bsc#1229704)
- CVE-2024-6232: Fixed a ReDos via excessive backtracking while parsing header values (bsc#1230227)
- CVE-2024-7592: Fixed a denial of service in the http.cookies module (bsc#1229596)
</description>
    <pkglist>
      <collection>
        <package name="python311" epoch="0" version="3.11.8" release="4.1" arch="src" src="src/python311-3.11.8-4.1.src.rpm">
          <filename>python311-3.11.8-4.1.src.rpm</filename>
        </package>
        <package name="python311" epoch="0" version="3.11.8" release="4.1" arch="x86_64" src="x86_64/python311-3.11.8-4.1.x86_64.rpm">
          <filename>python311-3.11.8-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses" epoch="0" version="3.11.8" release="4.1" arch="x86_64" src="x86_64/python311-curses-3.11.8-4.1.x86_64.rpm">
          <filename>python311-curses-3.11.8-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses-debuginfo" epoch="0" version="3.11.8" release="4.1" arch="x86_64" src="x86_64/python311-curses-debuginfo-3.11.8-4.1.x86_64.rpm">
          <filename>python311-curses-debuginfo-3.11.8-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debuginfo" epoch="0" version="3.11.8" release="4.1" arch="x86_64" src="x86_64/python311-debuginfo-3.11.8-4.1.x86_64.rpm">
          <filename>python311-debuginfo-3.11.8-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debugsource" epoch="0" version="3.11.8" release="4.1" arch="x86_64" src="x86_64/python311-debugsource-3.11.8-4.1.x86_64.rpm">
          <filename>python311-debugsource-3.11.8-4.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0" epoch="0" version="3.11.8" release="4.1" arch="x86_64" src="x86_64/libpython3_11-1_0-3.11.8-4.1.x86_64.rpm">
          <filename>libpython3_11-1_0-3.11.8-4.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0-debuginfo" epoch="0" version="3.11.8" release="4.1" arch="x86_64" src="x86_64/libpython3_11-1_0-debuginfo-3.11.8-4.1.x86_64.rpm">
          <filename>libpython3_11-1_0-debuginfo-3.11.8-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base" epoch="0" version="3.11.8" release="4.1" arch="x86_64" src="x86_64/python311-base-3.11.8-4.1.x86_64.rpm">
          <filename>python311-base-3.11.8-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base-debuginfo" epoch="0" version="3.11.8" release="4.1" arch="x86_64" src="x86_64/python311-base-debuginfo-3.11.8-4.1.x86_64.rpm">
          <filename>python311-base-debuginfo-3.11.8-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-core" epoch="0" version="3.11.8" release="4.1" arch="src" src="src/python311-core-3.11.8-4.1.src.rpm">
          <filename>python311-core-3.11.8-4.1.src.rpm</filename>
        </package>
        <package name="python311-core-debugsource" epoch="0" version="3.11.8" release="4.1" arch="x86_64" src="x86_64/python311-core-debugsource-3.11.8-4.1.x86_64.rpm">
          <filename>python311-core-debugsource-3.11.8-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>88</id>
    <title>Recommended update for salt</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1731673921" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219041" id="1219041" title="SLE-Micro 5.5 Error message when starting venv-salt-minion:  SELinux is preventing su from using the transition access on a process" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220357" id="1220357" title="SLE Micro: Different behavior for Salt SSH minions when classic Salt or venv-salt-minion is already installed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226141" id="1226141" title="Image inspection fails on built container image with code 2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229109" id="1229109" title="python3-salt is missing a 'def...' code for salt-cloud Window" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229539" id="1229539" title="venv-salt-minion service fails to start on  the minion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230322" id="1230322" title="Exceptions with salt reactor" type="bugzilla" />
    </references>
    <description>This update for salt fixes the following issues:

- Fix failing x509 tests with OpenSSL &lt; 1.1
- Avoid explicit reading of /etc/salt/minion (bsc#1220357)
- Allow NamedLoaderContexts to be returned from loader
- Revert the change making reactor less blocking (bsc#1230322)
- Use --cachedir for extension_modules in salt-call (bsc#1226141)
- Prevent using SyncWrapper with no reason
- Fix the SELinux context for Salt Minion service (bsc#1219041)
- Set contextvars as a build requirement for package
- Increase warn_until_date date for code we still support
- The test_debian test now uses port 80 for ubuntu keyserver
- Fix too frequent systemd service restart in test_system test
- Avoid crash on wrong output of systemctl version (bsc#1229539)
- Improve error handling with different OpenSSL versions
- Remove redundant run_func from salt.master.MWorker._handle_aes
- Fix cloud minion configuration for multiple masters (bsc#1229109)
- Use Pygit2 id instead of deprecated oid in gitfs
- Fix few failing tests to work with both Salt and Salt bundle
- Skip testing unsupported OpenSSL crypto algorithms
</description>
    <pkglist>
      <collection>
        <package name="python3-salt" epoch="0" version="3006.0" release="8.1" arch="x86_64" src="x86_64/python3-salt-3006.0-8.1.x86_64.rpm">
          <filename>python3-salt-3006.0-8.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="8.1" arch="src" src="src/salt-3006.0-8.1.src.rpm">
          <filename>salt-3006.0-8.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="8.1" arch="x86_64" src="x86_64/salt-3006.0-8.1.x86_64.rpm">
          <filename>salt-3006.0-8.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-master" epoch="0" version="3006.0" release="8.1" arch="x86_64" src="x86_64/salt-master-3006.0-8.1.x86_64.rpm">
          <filename>salt-master-3006.0-8.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="8.1" arch="x86_64" src="x86_64/salt-minion-3006.0-8.1.x86_64.rpm">
          <filename>salt-minion-3006.0-8.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="8.1" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-8.1.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-8.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>118</id>
    <title>Security update for libdb-4_8</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1733488669" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174414" id="1174414" title="VUL-1: CVE-2019-2708: libdb-4_5,libdb-4_8: libdb: data store execution leads to partial DoS" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2708" id="CVE-2019-2708" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2708" type="cve" />
    </references>
    <description>This update for libdb-4_8 fixes the following issues:

CVE-2019-2708: Fixed data store execution leading to partial DoS (bsc#1174414)

Changes:

* libdb: Data store execution leads to partial DoS
* Backport the upsteam commits:

  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]

</description>
    <pkglist>
      <collection>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="7.1" arch="src" src="src/libdb-4_8-4.8.30-7.1.src.rpm">
          <filename>libdb-4_8-4.8.30-7.1.src.rpm</filename>
        </package>
        <package name="libdb-4_8" epoch="0" version="4.8.30" release="7.1" arch="x86_64" src="x86_64/libdb-4_8-4.8.30-7.1.x86_64.rpm">
          <filename>libdb-4_8-4.8.30-7.1.x86_64.rpm</filename>
        </package>
        <package name="libdb-4_8-debuginfo" epoch="0" version="4.8.30" release="7.1" arch="x86_64" src="x86_64/libdb-4_8-debuginfo-4.8.30-7.1.x86_64.rpm">
          <filename>libdb-4_8-debuginfo-4.8.30-7.1.x86_64.rpm</filename>
        </package>
        <package name="libdb-4_8-debugsource" epoch="0" version="4.8.30" release="7.1" arch="x86_64" src="x86_64/libdb-4_8-debugsource-4.8.30-7.1.x86_64.rpm">
          <filename>libdb-4_8-debugsource-4.8.30-7.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>89</id>
    <title>Security update for tiff</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1731673942" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228924" id="1228924" title="VUL-0: CVE-2024-7006: tiff: NULL pointer dereference in tif_dirinfo.c" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7006" id="CVE-2024-7006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7006" type="cve" />
    </references>
    <description>This update for tiff fixes the following issues:

* CVE-2024-7006: Fix pointer deref in tif_dirinfo.c [bsc#1228924]
</description>
    <pkglist>
      <collection>
        <package name="libtiff6" epoch="0" version="4.6.0" release="4.1" arch="x86_64" src="x86_64/libtiff6-4.6.0-4.1.x86_64.rpm">
          <filename>libtiff6-4.6.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff6-debuginfo" epoch="0" version="4.6.0" release="4.1" arch="x86_64" src="x86_64/libtiff6-debuginfo-4.6.0-4.1.x86_64.rpm">
          <filename>libtiff6-debuginfo-4.6.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.6.0" release="4.1" arch="src" src="src/tiff-4.6.0-4.1.src.rpm">
          <filename>tiff-4.6.0-4.1.src.rpm</filename>
        </package>
        <package name="tiff-debugsource" epoch="0" version="4.6.0" release="4.1" arch="x86_64" src="x86_64/tiff-debugsource-4.6.0-4.1.x86_64.rpm">
          <filename>tiff-debugsource-4.6.0-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>80</id>
    <title>Recommended update for regionServiceClientConfigEC2</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1738573367" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217536" id="1217536" title="[TRACKERBUG] Update region certs to accommodate 4096 length on EC2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218656" id="1218656" title="Update region certs to accommodate 4096 length on EC2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228363" id="1228363" title="IPv6 access to regionsrv running in us-west2" type="bugzilla" />
    </references>
    <description>This update for regionServiceClientConfigEC2 contains the following fixes:

- Update to version 4.3.0 (bsc#1228363)
  + The IPv6 cert was switched up for the region server running in us-west-2
    and as such the SSL handshake was failing. Drop the incorrect cert
    and add the correct cert.

- Switch the patch syntax away form the deprecated shorthand macro

- Version 4.2.0
  Replace certs (length 4096): 
  rgnsrv-ec2-cn-north1  -&gt; 54.223.148.145 expires in 8 years 
  rgnsrv-ec2-us-west2-2 -&gt; 54.245.101.47  expires in 9 years

  Sidenote: We have one server with a short cert (2048) left;
  34.197.223.242 expires in 2027

- Version 4.1.1
  Add patch to not serve IPv6 addresses on SLES12
  Related to bsc#1218656 

- Update to version 4.1.1 (bsc#1217536)
  + Replace 54.247.166.75.pem and 54.253.118.149.pem old soon to expired certs 
    with new generated ones that expire in 8 years and have longer length (4096)

</description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigEC2" epoch="0" version="4.3.0" release="1.1" arch="noarch" src="noarch/regionServiceClientConfigEC2-4.3.0-1.1.noarch.rpm">
          <filename>regionServiceClientConfigEC2-4.3.0-1.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigEC2" epoch="0" version="4.3.0" release="1.1" arch="src" src="src/regionServiceClientConfigEC2-4.3.0-1.1.src.rpm">
          <filename>regionServiceClientConfigEC2-4.3.0-1.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>136</id>
    <title>Security update for sevctl</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1738573415" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218499" id="1218499" title="VUL-0: CVE-2023-50711: TRACKERBUG: vmm-sys-util: out of bounds memory accesses" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218502" id="1218502" title="VUL-0: CVE-2023-50711: sevctl: vmm-sys-util: out of bounds memory accesses" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229953" id="1229953" title="VUL-0: CVE-2024-43806: sevctl: rustix: rustix::fs::Dir iterator with the linux_raw backend can cause memory explosion" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50711" id="CVE-2023-50711" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50711" type="cve" />
    </references>
    <description>This update for sevctl fixes the following issues:

Security issue fixed:

- CVE-2023-50711: Fixed out of bounds memory accesses in a vendored dependency (bsc#1218502)

Non-security issue fixed:

- Update vendored dependencies and re-enable cargo update obs service (bsc#1229953)
</description>
    <pkglist>
      <collection>
        <package name="sevctl" epoch="0" version="0.4.3" release="2.1" arch="src" src="src/sevctl-0.4.3-2.1.src.rpm">
          <filename>sevctl-0.4.3-2.1.src.rpm</filename>
        </package>
        <package name="sevctl" epoch="0" version="0.4.3" release="2.1" arch="x86_64" src="x86_64/sevctl-0.4.3-2.1.x86_64.rpm">
          <filename>sevctl-0.4.3-2.1.x86_64.rpm</filename>
        </package>
        <package name="sevctl-debuginfo" epoch="0" version="0.4.3" release="2.1" arch="x86_64" src="x86_64/sevctl-debuginfo-0.4.3-2.1.x86_64.rpm">
          <filename>sevctl-debuginfo-0.4.3-2.1.x86_64.rpm</filename>
        </package>
        <package name="sevctl-debugsource" epoch="0" version="0.4.3" release="2.1" arch="x86_64" src="x86_64/sevctl-debugsource-0.4.3-2.1.x86_64.rpm">
          <filename>sevctl-debugsource-0.4.3-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>137</id>
    <title>Security update for opensc</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1738573415" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230071" id="1230071" title="VUL-0: CVE-2024-45615: opensc: pkcs15init: Usage of uninitialized values in libopensc and pkcs15init" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230072" id="1230072" title="VUL-0: CVE-2024-45616: opensc: Uninitialized values after incorrect check or usage of APDU response values in libopensc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230073" id="1230073" title="VUL-0: CVE-2024-45617: opensc: Uninitialized values after incorrect or missing checking return values of functions in libopensc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230074" id="1230074" title="VUL-0: CVE-2024-45618: opensc: Uninitialized values after incorrect or missing checking return values of functions in pkcs15init" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230075" id="1230075" title="VUL-0: CVE-2024-45619: opensc: Incorrect handling length of buffers or files in libopensc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230076" id="1230076" title="VUL-0: CVE-2024-45620: opensc: Incorrect handling of the length of buffers or files in pkcs15init" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230364" id="1230364" title="VUL-0: CVE-2024-8443: opensc: heap buffer overflow in OpenPGP driver when generating key" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8443" id="CVE-2024-8443" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8443" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45615" id="CVE-2024-45615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45615" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45616" id="CVE-2024-45616" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45616" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45617" id="CVE-2024-45617" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45617" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45618" id="CVE-2024-45618" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45618" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45619" id="CVE-2024-45619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45619" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45620" id="CVE-2024-45620" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45620" type="cve" />
    </references>
    <description>This update for opensc fixes the following issues:

- CVE-2024-8443: Fixed heap buffer overflow in OpenPGP driver when generating key (bsc#1230364)
- CVE-2024-45620: Fixed incorrect handling of the length of buffers or files in pkcs15init (bsc#1230076)
- CVE-2024-45619: Fixed incorrect handling length of buffers or files in libopensc (bsc#1230075)
- CVE-2024-45618: Fixed uninitialized values after incorrect or missing checking return values of functions in pkcs15init (bsc#1230074)
- CVE-2024-45617: Fixed uninitialized values after incorrect or missing checking return values of functions in libopensc (bsc#1230073)
- CVE-2024-45616: Fixed uninitialized values after incorrect check or usage of APDU response values in libopensc (bsc#1230072)
- CVE-2024-45615: Fixed uninitialized values in libopensc and pkcs15init (bsc#1230071)
</description>
    <pkglist>
      <collection>
        <package name="opensc" epoch="0" version="0.24.0" release="3.1" arch="src" src="src/opensc-0.24.0-3.1.src.rpm">
          <filename>opensc-0.24.0-3.1.src.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.24.0" release="3.1" arch="x86_64" src="x86_64/opensc-0.24.0-3.1.x86_64.rpm">
          <filename>opensc-0.24.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="opensc-debuginfo" epoch="0" version="0.24.0" release="3.1" arch="x86_64" src="x86_64/opensc-debuginfo-0.24.0-3.1.x86_64.rpm">
          <filename>opensc-debuginfo-0.24.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="opensc-debugsource" epoch="0" version="0.24.0" release="3.1" arch="x86_64" src="x86_64/opensc-debugsource-0.24.0-3.1.x86_64.rpm">
          <filename>opensc-debugsource-0.24.0-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>81</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1738573459" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1012628" id="1012628" title="Continuous stable update tracker for Tumbleweed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1183045" id="1183045" title="mount command hangs on reserved scsi disk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215199" id="1215199" title="[trackerbug] 6.4 powerpc base kernel fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216223" id="1216223" title="L3: ibmvfc max_xfer_size is missing ref:_00D1igLOd._5005qXBPNc:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216776" id="1216776" title="kvm - qla2xxx IO errors and aborts in the host cause multipath failed devices in the guest" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220382" id="1220382" title="Partner-L3: x86/mm/ident_map: Use gbpages only where full GB page should be mapped." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221527" id="1221527" title="[SLES][Xen] Unexpected call trace pertinent to CPA detected W^X violation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221610" id="1221610" title="VUL-0: CVE-2023-52610: kernel: net/sched: act_ct: fix skb leak and crash on ooo frags" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221650" id="1221650" title="VUL-0: CVE-2024-26640: kernel: tcp: add sanity checks to rx zerocopy" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222629" id="1222629" title="VUL-0: CVE-2024-26804: kernel: net: ip_tunnel: prevent perpetual headroom growth" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223600" id="1223600" title="L3: RT kernel - IRQ appears on isolated cores when it shouldn't appear based on the irqbalance and kernel args configuration" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223848" id="1223848" title="L3: KVM passthrough disks are detected as 0 byte disks on guest" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225487" id="1225487" title="VUL-0: CVE-2023-52752: kernel: smb: client: fix use-after-free bug in cifs_debug_data_proc_show()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225812" id="1225812" title="VUL-0: CVE-2024-36953: kernel: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225903" id="1225903" title="bpf: backport of iterator and callback handling fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226003" id="1226003" title="L3: Xen refuses to boot in AMD Ryzen Pro system - ref:_00D1igLOd._500Tr64Tw1:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226507" id="1226507" title="[INTEL 15SP6 BUG][VROC] MD: Long delay for container drive removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226606" id="1226606" title="VUL-0: CVE-2024-38538: kernel: net: bridge: xmit: make sure we have at least eth header len bytes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226666" id="1226666" title="ASR signed driver does not load on SUSE" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226846" id="1226846" title="VUL-0: CVE-2024-38596: kernel: af_unix: fix data races in unix_release_sock/unix_stream_sendmsg" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226860" id="1226860" title="VUL-0: CVE-2024-38632: kernel: vfio/pci: fix potential memory leak in vfio_intx_enable()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227487" id="1227487" title="powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227694" id="1227694" title="Multiple kernel warnings when using dasd_mod.dasd=ipldev if not IPLing from DASD" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227726" id="1227726" title="NFS 4.0 Server generating NFS4ERR_BAD_SEQID on lock attempts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227819" id="1227819" title="VUL-0: CVE-2024-40983: kernel: tipc: force a dst refcount before doing decryption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227885" id="1227885" title="VUL-0: CVE-2024-40965: kernel: i2c: lpi2c: Avoid calling clk_get_rate during transfer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227890" id="1227890" title="VUL-0: CVE-2024-40973: kernel: media: mtk-vcodec: potential null pointer deference in SCP" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227962" id="1227962" title="perf fails with errors: 0x4319b368 [0x8]: failed to process type: 68 [Cannot allocate memory]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228090" id="1228090" title="Backport arm64: PCI: Extend ACS configurability" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228140" id="1228140" title="continuously growing values in /proc/sys/fs/file-nr with the linux-5.14.21-150500.55.65 kernel during special NFS load tests" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228244" id="1228244" title="[NetApp SLES15 SP6 Bug]: NVMe device inconsistency seen during repeated old NS unmap &amp; new NS map using reused NSID" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228507" id="1228507" title="VUL-0: CVE-2024-42154: kernel: tcp_metrics: validate source addr length" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228771" id="1228771" title="IPMI during the early boot is causing a panic on NVIDIA Grace Hopper nodes (Arm)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229001" id="1229001" title="VUL-0: CVE-2024-42243: kernel: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229004" id="1229004" title="VUL-0: CVE-2024-42252: kernel: closures: change BUG_ON() to WARN_ON()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229019" id="1229019" title="KVM:Starting KVM error &quot;ensure all devices within the iommu_group are bound to their vfio bus driver&quot; after kernel update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229086" id="1229086" title="mana: Fix RX buf alloc_size alignment and atomic op panic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229167" id="1229167" title="KVM: s390: fix validity interception issue when gisa is switched off" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229169" id="1229169" title="s390/sclp: Prevent release of buffer in I/O" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229289" id="1229289" title="VUL-0: CVE-2024-43835: kernel: virtio_net: Fix napi_skb_cache_put warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229334" id="1229334" title="VUL-0: CVE-2024-42265: kernel: protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229362" id="1229362" title="VUL-0: CVE-2024-42306: kernel: udf: Avoid using corrupted block bitmap buffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229363" id="1229363" title="VUL-0: CVE-2024-42305: kernel: ext4: check dot and dotdot of dx_root before making dir indexed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229364" id="1229364" title="VUL-0: CVE-2024-42304: kernel: ext4: make sure the first directory block is not a hole" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229371" id="1229371" title="VUL-0: CVE-2024-42294: kernel: block: fix deadlock between sd_remove &amp; sd_release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229380" id="1229380" title="VUL-0: CVE-2024-43832: kernel: s390/uv: Don't call folio_wait_writeback() without a folio reference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229389" id="1229389" title="VUL-0: CVE-2024-43845: kernel: udf: Fix bogus checksum computation in udf_rename()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229394" id="1229394" title="VUL-0: CVE-2024-43828: kernel: ext4: fix infinite loop when replaying fast_commit" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229429" id="1229429" title="Update Broadcom Emulex lpfc driver for SLES15 SP7 to 14.4.0.4" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229443" id="1229443" title="Partner-L3: Backport x86/kaslr fix impacting ML/HPC workloads" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229452" id="1229452" title="s390/dasd: fix error recovery leading to data corruption on ESE  devices" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229455" id="1229455" title="fs/netfs/fscache_cookie: add missing &quot;n_accesses&quot; check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229456" id="1229456" title="CVE-2024-44947: kernel: fuse: Initialize beyond-EOF page contents before setting uptodate" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229494" id="1229494" title="VUL-0: CVE-2024-43870: kernel: perf: Fix event leak upon exit" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229585" id="1229585" title="Crash due to invalid per cpu cache freelist" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229753" id="1229753" title="VUL-0: CVE-2024-43898: kernel: ext4: sanity check for NULL pointer after ext4_force_shutdown" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229764" id="1229764" title="VUL-0: CVE-2024-43890: kernel: tracing: fix overflow in get_free_elt()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229768" id="1229768" title="VUL-0: CVE-2024-43904: kernel: drm/amd/display: add null checks for 'stream' and 'plane' before dereferencing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229790" id="1229790" title="VUL-0: CVE-2024-43914: kernel: md/raid5: avoid BUG_ON() while continue reshape after reassembling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229810" id="1229810" title="VUL-0: CVE-2024-44935: kernel: sctp: Fix null-ptr-deref in reuseport_add_sock()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229899" id="1229899" title="VUL-0: CVE-2024-44944: kernel: Netfilter Conntrack Type Confusion Information Disclosure Vulnerability" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229928" id="1229928" title="Error: Unable to start qat_crypto service with XEN" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230015" id="1230015" title="VUL-0: CVE-2024-44946: kernel: kcm: Serialise kcm_sendmsg() for the same socket." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230119" id="1230119" title="[HPE Bug] SLES15 SP6 cannot be installed with DL380a Gen12 (2P, SRF-SP) + NVidia L40 GPU in slot17" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230123" id="1230123" title="fuse: use unsigned type for getxattr/listxattr size truncation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230124" id="1230124" title="fuse: fix memory leak in fuse_create_open" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230125" id="1230125" title="fuse: update stats for pages in dropped aux writeback list" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230169" id="1230169" title="VUL-0: CVE-2024-45002: kernel: rtla/osnoise: Prevent NULL dereference in error handling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230170" id="1230170" title="VUL-0: CVE-2024-45000: kernel: fs/netfs/fscache_cookie: add missing &quot;n_accesses&quot; check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230171" id="1230171" title="VUL-0: CVE-2024-44998: kernel: atm: idt77252: prevent use after free in dequeue_rx()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230173" id="1230173" title="VUL-0: CVE-2024-45005: kernel: KVM: s390: fix validity interception issue when gisa is switched off" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230174" id="1230174" title="VUL-0: CVE-2024-44948: kernel: x86/mtrr: Check if fixed MTRRs exist before saving them" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230175" id="1230175" title="VUL-0: CVE-2024-45007: kernel: char: xillybus: Don't destroy workqueue from work item running on it" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230176" id="1230176" title="VUL-0: CVE-2024-44954: kernel: ALSA: line6: Fix racy access to midibuf" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230178" id="1230178" title="VUL-0: CVE-2024-44952: kernel: driver core: Fix uevent_show() vs driver detach race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230180" id="1230180" title="VUL-0: CVE-2024-44950: kernel: serial: sc16is7xx: fix invalid FIFO access with special register set" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230181" id="1230181" title="VUL-0: CVE-2024-44951: kernel: serial: sc16is7xx: fix TX fifo corruption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230185" id="1230185" title="VUL-0: CVE-2024-44987: kernel: ipv6: prevent UAF in ip6_send_skb()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230191" id="1230191" title="VUL-0: CVE-2024-44960: kernel: usb: gadget: core: Check for unset descriptor" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230192" id="1230192" title="VUL-0: CVE-2024-44988: kernel: net: dsa: mv88e6xxx: Fix out-of-bound access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230193" id="1230193" title="VUL-0: CVE-2024-44989: kernel: bonding: fix xfrm real_dev null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230194" id="1230194" title="VUL-0: CVE-2024-44990: kernel: bonding: fix null pointer deref in bond_ipsec_offload_ok" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230195" id="1230195" title="VUL-0: CVE-2024-44991: kernel: tcp: prevent concurrent execution of tcp_sk_exit_batch" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230200" id="1230200" title="VUL-0: CVE-2024-44969: kernel: s390/sclp: Prevent release of buffer in I/O" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230204" id="1230204" title="VUL-0: CVE-2024-44982: kernel: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230206" id="1230206" title="VUL-0: CVE-2024-44985: kernel: ipv6: prevent possible UAF in ip6_xmit()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230207" id="1230207" title="VUL-0: CVE-2024-44961: kernel: drm/amdgpu: Forward soft recovery errors to userspace" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230209" id="1230209" title="VUL-0: CVE-2024-44970: kernel: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230211" id="1230211" title="VUL-0: CVE-2024-44971: kernel: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230213" id="1230213" title="VUL-0: CVE-2024-44962: kernel: Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230217" id="1230217" title="VUL-0: CVE-2024-44977: kernel: drm/amdgpu: Validate TA binary size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230221" id="1230221" title="VUL-0: CVE-2024-44965: kernel: x86/mm: Fix pti_clone_pgtable() alignment assumption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230224" id="1230224" title="VUL-0: CVE-2024-44967: kernel: drm/mgag200: Bind I2C lifetime to DRM device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230230" id="1230230" title="VUL-0: CVE-2024-44986: kernel: ipv6: fix possible UAF in ip6_finish_output2()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230232" id="1230232" title="VUL-0: CVE-2024-44997: kernel: net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230233" id="1230233" title="VUL-0: CVE-2024-44999: kernel: gtp: pull network headers in gtp_dev_xmit()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230240" id="1230240" title="VUL-0: CVE-2024-44984: kernel: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230244" id="1230244" title="VUL-0: CVE-2024-45001: kernel: net: mana: Fix RX buf alloc_size alignment and atomic op panic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230245" id="1230245" title="VUL-0: CVE-2024-45003: kernel: vfs: Don't evict inode under the inode lru traversing context" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230247" id="1230247" title="VUL-0: CVE-2024-45006: kernel: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230248" id="1230248" title="VUL-0: CVE-2024-45008: kernel: Input: MT - limit max slots" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230269" id="1230269" title="VUL-0: CVE-2023-52916: kernel: media: aspeed: Fix memory overwrite if timing is 1600x900" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230270" id="1230270" title="VUL-0: CVE-2023-52915: kernel: media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230295" id="1230295" title="SLES15 SP6 - [P10][DD2.0][SHARED] - Hard lockups and Soft lockups are seen and LPAR hangs while running stress-ng (queued_spin_lock)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230340" id="1230340" title="VUL-0: CVE-2024-26759: kernel: mm/swap: fix race when skipping swapcache" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230413" id="1230413" title="[Build :35534:dtb-armv7l] ndctl create-namespace fails with new kernel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230426" id="1230426" title="SLES 15 SP6 - s390/dasd: Remove DMA alignment" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230430" id="1230430" title="VUL-0: CVE-2024-45017: kernel: net/mlx5: Fix IPsec RoCE MPV trace call" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230431" id="1230431" title="VUL-0: CVE-2024-45018: kernel: netfilter: flowtable: initialise extack before use" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230432" id="1230432" title="VUL-0: CVE-2024-45019: kernel: net/mlx5e: Take state lock during tx timeout reporter" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230433" id="1230433" title="VUL-0: CVE-2024-45020: kernel: bpf: Fix a kernel verifier crash in stacksafe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230434" id="1230434" title="VUL-0: CVE-2024-45021: kernel: memcg_write_event_control(): fix a user-triggerable oops" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230435" id="1230435" title="VUL-0: CVE-2024-45022: kernel: mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230440" id="1230440" title="VUL-0: CVE-2024-45011: kernel: char: xillybus: Check USB endpoints when probing device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230441" id="1230441" title="VUL-0: CVE-2024-45012: kernel: nouveau/firmware: use dma non-coherent allocator" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230442" id="1230442" title="VUL-0: CVE-2024-45013: kernel: nvme: move stopping keep-alive into nvme_uninit_ctrl()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230444" id="1230444" title="VUL-0: CVE-2024-45015: kernel: drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230450" id="1230450" title="VUL-0: CVE-2024-45028: kernel: mmc: mmc_test: Fix NULL dereference on allocation failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230451" id="1230451" title="VUL-0: CVE-2024-45029: kernel: i2c: tegra: Do not mark ACPI devices as irq safe" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230454" id="1230454" title="VUL-0: CVE-2024-45026: kernel: s390/dasd: fix error recovery leading to data corruption on ESE devices" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230455" id="1230455" title="VUL-0: CVE-2024-45023: kernel: md/raid1: Fix data corruption for degraded array with slow disk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230457" id="1230457" title="VUL-0: CVE-2024-45030: kernel: igb: cope with large MAX_SKB_FRAGS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230459" id="1230459" title="VUL-0: CVE-2024-46672: kernel: wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230506" id="1230506" title="VUL-0: CVE-2024-46673: kernel: scsi: aacraid: Fix double-free on probe failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230507" id="1230507" title="VUL-0: CVE-2024-46674: kernel: usb: dwc3: st: fix probed platform device ref count on probe error path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230511" id="1230511" title="VUL-0: CVE-2024-46694: kernel: drm/amd/display: avoid using null object of framebuffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230515" id="1230515" title="VUL-0: CVE-2024-46685: kernel: pinctrl: single: fix potential NULL dereference in pcs_get_function()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230517" id="1230517" title="VUL-0: CVE-2024-46686: kernel: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230518" id="1230518" title="VUL-0: CVE-2024-46687: kernel: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230519" id="1230519" title="VUL-0: CVE-2024-46695: kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230520" id="1230520" title="VUL-0: CVE-2024-46692: kernel: firmware: qcom: scm: Mark get_wq_ctx() as atomic call" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230521" id="1230521" title="VUL-0: CVE-2024-46693: kernel: soc: qcom: pmic_glink: Fix race during initialization" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230524" id="1230524" title="VUL-0: CVE-2024-46689: kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230526" id="1230526" title="VUL-0: CVE-2024-46691: kernel: usb: typec: ucsi: Move unregister out of atomic section" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230533" id="1230533" title="VUL-0: CVE-2024-46675: kernel: usb: dwc3: core: Prevent USB core invalid event buffer address access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230535" id="1230535" title="VUL-0: CVE-2024-46676: kernel: nfc: pn533: Add poll mod list filling check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230539" id="1230539" title="VUL-0: CVE-2024-46709: kernel: drm/vmwgfx: Fix prime with external buffers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230540" id="1230540" title="VUL-0: CVE-2024-46710: kernel: drm/vmwgfx: Prevent unmapping active read buffers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230549" id="1230549" title="VUL-0: CVE-2024-46677: kernel: gtp: fix a potential NULL pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230556" id="1230556" title="VUL-0: CVE-2024-46679: kernel: ethtool: check device is present when getting link settings" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230562" id="1230562" title="s390/mm: Convert gmap_make_secure to use a folio" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230563" id="1230563" title="s390/mm: Convert make_page_secure to use a folio" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230564" id="1230564" title="s390: allow pte_offset_map_lock() to fail" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230580" id="1230580" title="VUL-0: CVE-2024-46706: kernel: tty: serial: fsl_lpuart: mark last busy before uart_add_one_port" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230582" id="1230582" title="VUL-0: CVE-2024-46707: kernel: KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230589" id="1230589" title="VUL-0: CVE-2024-46702: kernel: thunderbolt: Mark XDomain as unplugged when router is removed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230602" id="1230602" title="fscache: delete fscache_cookie_lru_timer when fscache exits to avoid  UAF" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230699" id="1230699" title="VUL-0: CVE-2024-46714: kernel: drm/amd/display: Skip wbscl_set_scaler_filter if filter is null" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230700" id="1230700" title="VUL-0: CVE-2024-46715: kernel: driver: iio: add missing checks on iio_info's callback access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230701" id="1230701" title="VUL-0: CVE-2024-46730: kernel: drm/amd/display: Ensure array index tg_inst won't be -1" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230702" id="1230702" title="VUL-0: CVE-2024-46723: kernel: drm/amdgpu: fix ucode out-of-bounds read warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230703" id="1230703" title="VUL-0: CVE-2024-46728: kernel: drm/amd/display: Check index for aux_rd_interval before using" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230704" id="1230704" title="VUL-0: CVE-2024-46729: kernel: drm/amd/display: Fix incorrect size calculation for loop" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230705" id="1230705" title="VUL-0: CVE-2024-46725: kernel: drm/amdgpu: Fix out-of-bounds write warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230706" id="1230706" title="VUL-0: CVE-2024-46726: kernel: drm/amd/display: Ensure index calculation will not overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230709" id="1230709" title="VUL-0: CVE-2024-46731: kernel: drm/amd/pm: fix the Out-of-bounds read warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230711" id="1230711" title="VUL-0: CVE-2024-46732: kernel: drm/amd/display: Assign linear_pitch_alignment even for VM" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230712" id="1230712" title="VUL-0: CVE-2024-46722: kernel: drm/amdgpu: fix mc_data out-of-bounds read warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230715" id="1230715" title="VUL-0: CVE-2024-46716: kernel: dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230719" id="1230719" title="VUL-0: CVE-2024-46717: kernel: net/mlx5e: SHAMPO, Fix incorrect page release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230722" id="1230722" title="VUL-0: CVE-2024-46719: kernel: usb: typec: ucsi: Fix null pointer dereference in trace" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230724" id="1230724" title="VUL-0: CVE-2024-46720: kernel: drm/amdgpu: fix dereference after null check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230725" id="1230725" title="VUL-0: CVE-2024-46724: kernel: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230726" id="1230726" title="VUL-0: CVE-2024-46734: kernel: btrfs: fix race between direct IO write and fsync when using same fd" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230727" id="1230727" title="VUL-0: CVE-2024-46735: kernel: ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230730" id="1230730" title="VUL-0: CVE-2024-46737: kernel: nvmet-tcp: fix kernel crash if commands allocation fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230731" id="1230731" title="VUL-0: CVE-2024-46738: kernel: VMCI: Fix use-after-free when removing resource in vmci_resource_remove()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230732" id="1230732" title="VUL-0: CVE-2024-46739: kernel: uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230747" id="1230747" title="VUL-0: CVE-2024-46744: kernel: Squashfs: sanity check symbolic link size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230748" id="1230748" title="VUL-0: CVE-2024-46745: kernel: Input: uinput - reject requests with unreasonable number of slots" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230749" id="1230749" title="VUL-0: CVE-2024-46741: kernel: misc: fastrpc: Fix double free of 'buf' in error path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230751" id="1230751" title="VUL-0: CVE-2024-46746: kernel: HID: amd_sfh: free driver_data after destroying hid device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230752" id="1230752" title="VUL-0: CVE-2024-46747: kernel: HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230753" id="1230753" title="VUL-0: CVE-2024-46760: kernel: wifi: rtw88: usb: schedule rx work after everything is set up" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230756" id="1230756" title="VUL-0: CVE-2024-46743: kernel: of/irq: Prevent device address out-of-bounds read in interrupt map walk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230761" id="1230761" title="VUL-0: CVE-2024-46761: kernel: pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230766" id="1230766" title="VUL-0: CVE-2024-46771: kernel: can: bcm: Remove proc entry when dev is unregistered." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230767" id="1230767" title="VUL-0: CVE-2024-46774: kernel: powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230768" id="1230768" title="VUL-0: CVE-2024-46781: kernel: nilfs2: fix missing cleanup on rollforward recovery error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230771" id="1230771" title="VUL-0: CVE-2024-46784: kernel: net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230772" id="1230772" title="VUL-0: CVE-2024-46772: kernel: drm/amd/display: Check denominator crb_pipes before used" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230775" id="1230775" title="VUL-0: CVE-2024-46776: kernel: drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230776" id="1230776" title="VUL-0: CVE-2024-46778: kernel: drm/amd/display: Check UnboundedRequestEnabled's value" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230780" id="1230780" title="VUL-0: CVE-2024-46749: kernel: Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230783" id="1230783" title="VUL-0: CVE-2024-46750: kernel: PCI: Add missing bridge lock to pci_bus_lock()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230786" id="1230786" title="VUL-0: CVE-2024-46751: kernel: btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230787" id="1230787" title="VUL-0: CVE-2024-46767: kernel: net: phy: Fix missing of_node_put() for leds" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230791" id="1230791" title="VUL-0: CVE-2024-46773: kernel: drm/amd/display: Check denominator pbn_div before used" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230794" id="1230794" title="VUL-0: CVE-2024-46752: kernel: btrfs: replace BUG_ON() with error handling at update_ref_for_cow()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230796" id="1230796" title="VUL-0: CVE-2024-46753: kernel: btrfs: handle errors from btrfs_dec_ref() properly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230802" id="1230802" title="VUL-0: CVE-2024-46755: kernel: wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230806" id="1230806" title="VUL-0: CVE-2024-46756: kernel: hwmon: (w83627ehf) Fix underflows seen when writing limit attributes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230808" id="1230808" title="VUL-0: CVE-2024-46780: kernel: nilfs2: protect references to superblock parameters exposed in sysfs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230809" id="1230809" title="VUL-0: CVE-2024-46757: kernel: hwmon: (nct6775-core) Fix underflows seen when writing limit attributes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230810" id="1230810" title="VUL-0: CVE-2024-46783: kernel: tcp_bpf: fix return value of tcp_bpf_sendmsg()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230812" id="1230812" title="VUL-0: CVE-2024-46758: kernel: hwmon: (lm95234) Fix underflows seen when writing limit attributes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230813" id="1230813" title="VUL-0: CVE-2024-46786: kernel: fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230814" id="1230814" title="VUL-0: CVE-2024-46759: kernel: hwmon: (adc128d818) Fix underflows seen when writing limit attributes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230815" id="1230815" title="VUL-0: CVE-2024-46787: kernel: userfaultfd: fix checks for huge PMDs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230821" id="1230821" title="VUL-0: CVE-2024-46791: kernel: can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230825" id="1230825" title="VUL-0: CVE-2024-46794: kernel: x86/tdx: Fix data leak in mmio_read()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230830" id="1230830" title="VUL-0: CVE-2024-46798: kernel: ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230831" id="1230831" title="VUL-0: CVE-2024-46797: kernel: powerpc/qspinlock: Fix deadlock in MCS queue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230854" id="1230854" title="xfstests btrfs/319 fails on kernel 6.4" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230948" id="1230948" title="gfs2: fatal assertion failed during fio writes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231008" id="1231008" title="cachefiles: Fix non-taking of sb_writers around set/removexattr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231035" id="1231035" title="SLES 15 SP6 - inkernel crypto xctr(aes) alg: skcipher: failed to allocate transform for ctr(aes): -2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231120" id="1231120" title="VUL-0: CVE-2024-46822: kernel: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231146" id="1231146" title="kthread: Fix task state in kthread worker if being frozen" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231182" id="1231182" title="ceph: remove the incorrect Fw reference check when dirtying pages" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231183" id="1231183" title="cachefiles: fix dentry leak in cachefiles_open_file()" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52610" id="CVE-2023-52610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52610" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52752" id="CVE-2023-52752" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52752" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52915" id="CVE-2023-52915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52915" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52916" id="CVE-2023-52916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52916" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26640" id="CVE-2024-26640" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26640" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26759" id="CVE-2024-26759" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26759" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26804" id="CVE-2024-26804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26804" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36953" id="CVE-2024-36953" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36953" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38538" id="CVE-2024-38538" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38538" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38596" id="CVE-2024-38596" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38596" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38632" id="CVE-2024-38632" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38632" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40965" id="CVE-2024-40965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40965" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40973" id="CVE-2024-40973" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40973" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40983" id="CVE-2024-40983" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40983" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42154" id="CVE-2024-42154" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42154" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42243" id="CVE-2024-42243" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42243" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42252" id="CVE-2024-42252" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42252" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42265" id="CVE-2024-42265" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42265" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42294" id="CVE-2024-42294" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42294" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42304" id="CVE-2024-42304" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42304" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42305" id="CVE-2024-42305" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42305" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42306" id="CVE-2024-42306" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42306" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43828" id="CVE-2024-43828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43828" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43832" id="CVE-2024-43832" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43832" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43835" id="CVE-2024-43835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43835" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43845" id="CVE-2024-43845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43845" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43870" id="CVE-2024-43870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43870" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43890" id="CVE-2024-43890" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43890" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43898" id="CVE-2024-43898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43898" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43904" id="CVE-2024-43904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43904" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43914" id="CVE-2024-43914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43914" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44935" id="CVE-2024-44935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44935" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44944" id="CVE-2024-44944" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44944" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44946" id="CVE-2024-44946" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44946" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44947" id="CVE-2024-44947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44947" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44948" id="CVE-2024-44948" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44948" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44950" id="CVE-2024-44950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44950" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44951" id="CVE-2024-44951" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44951" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44952" id="CVE-2024-44952" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44952" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44954" id="CVE-2024-44954" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44954" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44960" id="CVE-2024-44960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44960" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44961" id="CVE-2024-44961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44961" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44962" id="CVE-2024-44962" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44962" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44965" id="CVE-2024-44965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44965" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44967" id="CVE-2024-44967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44967" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44969" id="CVE-2024-44969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44969" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44970" id="CVE-2024-44970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44970" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44971" id="CVE-2024-44971" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44971" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44977" id="CVE-2024-44977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44977" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44982" id="CVE-2024-44982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44982" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44984" id="CVE-2024-44984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44984" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44985" id="CVE-2024-44985" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44985" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44986" id="CVE-2024-44986" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44986" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44987" id="CVE-2024-44987" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44987" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44988" id="CVE-2024-44988" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44988" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44989" id="CVE-2024-44989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44989" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44990" id="CVE-2024-44990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44990" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44991" id="CVE-2024-44991" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44991" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44997" id="CVE-2024-44997" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44997" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44998" id="CVE-2024-44998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44998" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44999" id="CVE-2024-44999" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44999" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45000" id="CVE-2024-45000" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45000" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45001" id="CVE-2024-45001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45001" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45002" id="CVE-2024-45002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45002" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45003" id="CVE-2024-45003" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45003" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45005" id="CVE-2024-45005" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45005" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45006" id="CVE-2024-45006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45006" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45007" id="CVE-2024-45007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45007" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45008" id="CVE-2024-45008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45008" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45011" id="CVE-2024-45011" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45011" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45012" id="CVE-2024-45012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45012" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45013" id="CVE-2024-45013" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45013" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45015" id="CVE-2024-45015" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45015" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45017" id="CVE-2024-45017" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45017" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45018" id="CVE-2024-45018" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45018" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45019" id="CVE-2024-45019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45019" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45020" id="CVE-2024-45020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45020" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45021" id="CVE-2024-45021" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45021" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45022" id="CVE-2024-45022" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45022" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45023" id="CVE-2024-45023" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45023" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45026" id="CVE-2024-45026" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45026" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45028" id="CVE-2024-45028" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45028" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45029" id="CVE-2024-45029" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45029" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45030" id="CVE-2024-45030" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45030" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46672" id="CVE-2024-46672" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46672" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46673" id="CVE-2024-46673" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46673" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46674" id="CVE-2024-46674" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46674" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46675" id="CVE-2024-46675" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46675" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46676" id="CVE-2024-46676" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46676" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46677" id="CVE-2024-46677" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46677" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46679" id="CVE-2024-46679" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46679" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46685" id="CVE-2024-46685" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46685" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46686" id="CVE-2024-46686" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46686" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46687" id="CVE-2024-46687" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46687" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46689" id="CVE-2024-46689" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46689" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46691" id="CVE-2024-46691" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46691" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46692" id="CVE-2024-46692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46692" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46693" id="CVE-2024-46693" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46693" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46694" id="CVE-2024-46694" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46694" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46695" id="CVE-2024-46695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46695" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46702" id="CVE-2024-46702" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46702" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46706" id="CVE-2024-46706" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46706" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46707" id="CVE-2024-46707" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46707" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46709" id="CVE-2024-46709" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46709" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46710" id="CVE-2024-46710" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46710" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46714" id="CVE-2024-46714" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46714" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46715" id="CVE-2024-46715" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46715" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46716" id="CVE-2024-46716" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46716" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46717" id="CVE-2024-46717" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46717" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46719" id="CVE-2024-46719" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46719" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46720" id="CVE-2024-46720" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46720" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46722" id="CVE-2024-46722" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46722" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46723" id="CVE-2024-46723" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46723" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46724" id="CVE-2024-46724" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46724" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46725" id="CVE-2024-46725" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46725" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46726" id="CVE-2024-46726" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46726" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46728" id="CVE-2024-46728" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46728" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46729" id="CVE-2024-46729" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46729" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46730" id="CVE-2024-46730" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46730" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46731" id="CVE-2024-46731" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46731" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46732" id="CVE-2024-46732" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46732" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46734" id="CVE-2024-46734" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46734" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46735" id="CVE-2024-46735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46735" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46737" id="CVE-2024-46737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46737" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46738" id="CVE-2024-46738" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46738" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46739" id="CVE-2024-46739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46739" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46741" id="CVE-2024-46741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46741" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46743" id="CVE-2024-46743" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46743" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46744" id="CVE-2024-46744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46744" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46745" id="CVE-2024-46745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46745" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46746" id="CVE-2024-46746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46746" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46747" id="CVE-2024-46747" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46747" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46749" id="CVE-2024-46749" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46749" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46750" id="CVE-2024-46750" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46750" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46751" id="CVE-2024-46751" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46751" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46752" id="CVE-2024-46752" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46752" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46753" id="CVE-2024-46753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46753" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46755" id="CVE-2024-46755" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46755" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46756" id="CVE-2024-46756" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46756" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46757" id="CVE-2024-46757" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46757" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46758" id="CVE-2024-46758" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46758" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46759" id="CVE-2024-46759" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46759" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46760" id="CVE-2024-46760" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46760" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46761" id="CVE-2024-46761" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46761" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46767" id="CVE-2024-46767" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46767" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46771" id="CVE-2024-46771" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46771" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46772" id="CVE-2024-46772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46772" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46773" id="CVE-2024-46773" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46773" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46774" id="CVE-2024-46774" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46774" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46776" id="CVE-2024-46776" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46776" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46778" id="CVE-2024-46778" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46778" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46780" id="CVE-2024-46780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46780" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46781" id="CVE-2024-46781" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46781" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46783" id="CVE-2024-46783" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46783" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46784" id="CVE-2024-46784" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46784" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46786" id="CVE-2024-46786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46786" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46787" id="CVE-2024-46787" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46787" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46791" id="CVE-2024-46791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46791" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46794" id="CVE-2024-46794" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46794" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46797" id="CVE-2024-46797" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46797" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46798" id="CVE-2024-46798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46798" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46822" id="CVE-2024-46822" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46822" type="cve" />
      <reference href="https://jira.suse.com/browse/PED-10954" id="PED-10954" title="https://jira.suse.com/browse/PED-10954" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-9899" id="PED-9899" title="https://jira.suse.com/browse/PED-9899" type="jira" />
    </references>
    <description>The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
- CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
- CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
- CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
- CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
- CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
- CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
- CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
- CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
- CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
- CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
- CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
- CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
- CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
- CVE-2024-42265: protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions (bsc#1229334).
- CVE-2024-42294: block: fix deadlock between sd_remove &amp; sd_release (bsc#1229371).
- CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
- CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
- CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
- CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
- CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
- CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
- CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
- CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
- CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
- CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
- CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
- CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
- CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
- CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
- CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
- CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
- CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
- CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
- CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
- CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
- CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
- CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
- CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
- CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
- CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
- CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
- CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
- CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
- CVE-2024-45017: net/mlx5: Fix IPsec RoCE MPV trace call (bsc#1230430).
- CVE-2024-45018: netfilter: flowtable: initialise extack before use (bsc#1230431).
- CVE-2024-45019: net/mlx5e: Take state lock during tx timeout reporter (bsc#1230432).
- CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434).
- CVE-2024-45022: mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 (bsc#1230435).
- CVE-2024-45023: md/raid1: Fix data corruption for degraded array with slow disk (bsc#1230455).
- CVE-2024-45029: i2c: tegra: Do not mark ACPI devices as irq safe (bsc#1230451).
- CVE-2024-45030: igb: cope with large MAX_SKB_FRAGS (bsc#1230457).
- CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506).
- CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549).
- CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556).
- CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517).
- CVE-2024-46687: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk() (bsc#1230518).
- CVE-2024-46691: usb: typec: ucsi: Move unregister out of atomic section (bsc#1230526).
- CVE-2024-46692: firmware: qcom: scm: Mark get_wq_ctx() as atomic call (bsc#1230520).
- CVE-2024-46693: kABI workaround for soc-qcom pmic_glink changes (bsc#1230521).
- CVE-2024-46710: drm/vmwgfx: Prevent unmapping active read buffers (bsc#1230540).
- CVE-2024-46717: net/mlx5e: SHAMPO, Fix incorrect page release (bsc#1230719).
- CVE-2024-46729: drm/amd/display: Fix incorrect size calculation for loop (bsc#1230704).
- CVE-2024-46735: ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery() (bsc#1230727).
- CVE-2024-46743: of/irq: Prevent device address out-of-bounds read in interrupt map walk (bsc#1230756).
- CVE-2024-46751: btrfs: do not BUG_ON() when 0 reference count at btrfs_lookup_extent_info() (bsc#1230786).
- CVE-2024-46752: btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() (bsc#1230794).
- CVE-2024-46753: btrfs: handle errors from btrfs_dec_ref() properly (bsc#1230796).
- CVE-2024-46772: drm/amd/display: Check denominator crb_pipes before used (bsc#1230772).
- CVE-2024-46783: tcp_bpf: fix return value of tcp_bpf_sendmsg() (bsc#1230810).
- CVE-2024-46787: userfaultfd: fix checks for huge PMDs (bsc#1230815).
- CVE-2024-46794: x86/tdx: Fix data leak in mmio_read() (bsc#1230825).
- CVE-2024-46822: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (bsc#1231120).

The following non-security bugs were fixed:

- ABI: testing: fix admv8818 attr description (git-fixes).
- ACPI: CPPC: Add helper to get the highest performance value (stable-fixes).
- ACPI: CPPC: Fix MASK_VAL() usage (git-fixes).
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() (git-fixes).
- ACPI: processor: Fix memory leaks in error paths of processor_add() (stable-fixes).
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() (stable-fixes).
- ACPI: sysfs: validate return type of _STR method (git-fixes).
- ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE (stable-fixes).
- ACPICA: executer/exsystem: Do not nag user about every Stall() violating the spec (git-fixes).
- ALSA: control: Apply sanity check of input values for user elements (stable-fixes).
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices (stable-fixes).
- ALSA: hda/realtek - Fix inactive headset mic jack for ASUS Vivobook 15 X1504VAP (stable-fixes).
- ALSA: hda/realtek: Enable Mute Led for HP Victus 15-fb1xxx (stable-fixes).
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx (stable-fixes).
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145 (stable-fixes).
- ALSA: hda/realtek: extend quirks for Clevo V5[46]0 (stable-fixes).
- ALSA: hda: Add input value sanity checks to HDMI channel map controls (stable-fixes).
- ALSA: hda: add HDMI codec ID for Intel PTL (stable-fixes).
- ALSA: hda: cs35l41: fix module autoloading (git-fixes).
- ARM: 9406/1: Fix callchain_trace() return value (git-fixes).
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK) (stable-fixes).
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read() (git-fixes).
- ASoC: cs42l42: Convert comma to semicolon (git-fixes).
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object (git-fixes).
- ASoC: intel: fix module autoloading (stable-fixes).
- ASoC: meson: Remove unused declartion in header file (git-fixes).
- ASoC: meson: axg-card: fix 'use-after-free' (git-fixes).
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error (git-fixes).
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error (git-fixes).
- ASoC: soc-ac97: Fix the incorrect description (git-fixes).
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode (git-fixes).
- ASoC: tas2781-i2c: Get the right GPIO line (git-fixes).
- ASoC: tda7419: fix module autoloading (stable-fixes).
- ASoC: tegra: Fix CBB error during probe() (git-fixes).
- ASoC: topology: Properly initialize soc_enum values (stable-fixes).
- ASoc: SOF: topology: Clear SOF link platform name upon unload (git-fixes).
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment (stable-fixes).
- Bluetooth: MGMT: Ignore keys being loaded with invalid type (git-fixes).
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush() (stable-fixes).
- Bluetooth: btusb: Fix not handling ZPL/short-transfer (git-fixes).
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED (git-fixes).
- Bluetooth: hci_event: Use HCI error defines instead of magic values (stable-fixes).
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (stable-fixes).
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL (git-fixes).
- Detect memory allocation failure in annotated_source__alloc_histograms (bsc#1227962).
- Documentation: ioctl: document 0x07 ioctl code (git-fixes).
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic (git-fixes).
- Drivers: hv: vmbus: Fix the misplaced function description (git-fixes).
- Drop mm patches that caused regressions (bsc#1230413)
- HID: amd_sfh: free driver_data after destroying hid device (stable-fixes).
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (stable-fixes).
- HID: multitouch: Add support for GT7868Q (stable-fixes).
- HID: wacom: Do not warn about dropped packets for first packet (git-fixes).
- HID: wacom: Support sequence numbers smaller than 16-bit (git-fixes).
- IB/core: Fix ib_cache_setup_one error flow cleanup (git-fixes)
- Input: adp5588-keys - fix check on return code (git-fixes).
- Input: ads7846 - ratelimit the spi_sync error message (stable-fixes).
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update (stable-fixes).
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync (git-fixes).
- Input: ps2-gpio - use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).
- Input: synaptics - enable SMBus for HP Elitebook 840 G2 (stable-fixes).
- Input: tsc2004/5 - do not hard code interrupt trigger (git-fixes).
- Input: tsc2004/5 - fix reset handling on probe (git-fixes).
- Input: tsc2004/5 - use device core to create driver-specific device attributes (git-fixes).
- Input: uinput - reject requests with unreasonable number of slots (stable-fixes).
- KEYS: prevent NULL pointer dereference in find_asymmetric_key() (git-fixes).
- KVM: SVM: Do not advertise Bus Lock Detect to guest if SVM support is missing (git-fixes).
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE (git-fixes).
- KVM: arm64: Block unsafe FF-A calls from the host (git-fixes).
- KVM: arm64: Disallow copying MTE to guest memory while KVM is dirty logging (git-fixes).
- KVM: arm64: Do not pass a TLBI level hint when zapping table entries (git-fixes).
- KVM: arm64: Do not re-initialize the KVM lock (git-fixes).
- KVM: arm64: Invalidate EL1&amp;0 TLB entries for all VMIDs in nvhe hyp init (git-fixes).
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (git-fixes).
- KVM: arm64: Release pfn, i.e. put page, if copying MTE tags hits ZONE_DEVICE (git-fixes).
- KVM: arm64: nvhe: Ignore SVE hint in SMCCC function ID (git-fixes).
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (git-fixes).
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS (git-fixes).
- Move fixes into sorted section (bsc#1230119)
- Move s390 kabi patch into the kabi section
- Move upstreamed SCSI patches into sorted section
- Move upstreamed input patch into sorted section
- Move upstreamed kaslr patch into sorted section
- Move upstreamed nvme patches into sorted section
- NFS: never reuse a NFSv4.0 lock-owner (bsc#1227726).
- NFSD: Fix frame size warning in svc_export_parse() (git-fixes).
- NFSD: Rewrite synopsis of nfsd_percpu_counters_init() (git-fixes).
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations (git-fixes).
- PCI: Add missing bridge lock to pci_bus_lock() (stable-fixes).
- PCI: Wait for Link before restoring Downstream Buses (git-fixes).
- PCI: al: Check IORESOURCE_BUS existence during probe (stable-fixes).
- PCI: dra7xx: Fix error handling when IRQ request fails in probe (git-fixes).
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ (git-fixes).
- PCI: dwc: Expose dw_pcie_ep_exit() to module (git-fixes).
- PCI: imx6: Fix missing call to phy_power_off() in error handling (git-fixes).
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (stable-fixes).
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk() (git-fixes).
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() (git-fixes).
- PCI: qcom-ep: Enable controller resources like PHY only after refclk is available (git-fixes).
- PCI: xilinx-nwl: Clean up clock on probe failure/removal (git-fixes).
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler (git-fixes).
- PKCS#7: Check codeSigning EKU of certificates in PKCS#7 (bsc#1226666).
- RDMA/core: Remove unused declaration rdma_resolve_ip_route() (git-fixes)
- RDMA/cxgb4: Added NULL check for lookup_atid (git-fixes)
- RDMA/efa: Properly handle unexpected AQ completions (git-fixes)
- RDMA/erdma: Return QP state in erdma_query_qp (git-fixes)
- RDMA/hns: Do not modify rq next block addr in HIP09 QPC (git-fixes)
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS (git-fixes)
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 (git-fixes)
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler (git-fixes)
- RDMA/hns: Fix ah error counter in sw stat not increasing (git-fixes)
- RDMA/hns: Fix restricted __le16 degrades to integer issue (git-fixes)
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (git-fixes)
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range() (git-fixes)
- RDMA/hns: Optimize hem allocation performance (git-fixes)
- RDMA/irdma: fix error message in irdma_modify_qp_roce() (git-fixes)
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (git-fixes)
- RDMA/mlx5: Drop redundant work canceling from clean_keys() (git-fixes)
- RDMA/mlx5: Fix MR cache temp entries cleanup (git-fixes)
- RDMA/mlx5: Fix counter update on MR cache mkey creation (git-fixes)
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache (git-fixes)
- RDMA/mlx5: Obtain upper net device only when needed (git-fixes)
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds (git-fixes)
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer (git-fixes)
- Restore dropped fields for bluetooth MGMT/SMP structs (git-fixes).
- Squashfs: sanity check symbolic link size (git-fixes).
- USB: class: CDC-ACM: fix race between get_serial and set_serial (git-fixes).
- USB: serial: kobil_sct: restore initial terminal settings (git-fixes).
- USB: serial: option: add MeiG Smart SRM825L (git-fixes).
- USB: serial: option: add MeiG Smart SRM825L (stable-fixes).
- USB: serial: pl2303: add device id for Macrosilicon MS3020 (stable-fixes).
- USB: usbtmc: prevent kernel-usb-infoleak (git-fixes).
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (git-fixes).
- afs: Do not cross .backup mountpoint from backup volume (git-fixes).
- afs: Revert "afs: Hide silly-rename files from userspace" (git-fixes).
- arm64/mm: Modify range-based tlbi to decrement scale (bsc#1229585)
- arm64/mm: Update tlb invalidation routines for FEAT_LPA2 (bsc#1229585)
- arm64: acpi: Move get_cpu_for_acpi_id() to a header (git-fixes).
- arm64: dts: allwinner: h616: Add r_i2c pinctrl nodes (git-fixes).
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB (git-fixes).
- arm64: dts: imx8-ss-dma: Fix adc0 closing brace location (git-fixes).
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity (git-fixes).
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1 (git-fixes).
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency (git-fixes).
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E (git-fixes).
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma (git-fixes).
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma (git-fixes).
- arm64: signal: Fix some under-bracketed UAPI macros (git-fixes).
- arm64: tlb: Allow range operation for MAX_TLBI_RANGE_PAGES (bsc#1229585)
- arm64: tlb: Fix TLBI RANGE operand (bsc#1229585)
- arm64: tlb: Improve __TLBI_VADDR_RANGE() (bsc#1229585)
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting (git-fixes).
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data (git-fixes).
- ata: libata: Fix memory leak for error path in ata_host_alloc() (git-fixes).
- ata: pata_macio: Use WARN instead of BUG (stable-fixes).
- blk-mq: add helper for checking if one CPU is mapped to specified hctx (bsc#1223600).
- blk-mq: do not schedule block kworker on isolated CPUs (bsc#1223600).
- bpf, events: Use prog to emit ksymbol event for main program (git-fixes).
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (git-fixes).
- btrfs: fix race between direct IO write and fsync when using same fd (git-fixes).
- btrfs: send: allow cloning non-aligned extent if it ends at i_size (bsc#1230854).
- bus: integrator-lm: fix OF node leak in probe() (git-fixes).
- cachefiles: Fix non-taking of sb_writers around set/removexattr (bsc#1231008).
- cachefiles: fix dentry leak in cachefiles_open_file() (bsc#1231183).
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry() (git-fixes).
- can: bcm: Remove proc entry when dev is unregistered (git-fixes).
- can: j1939: use correct function name in comment (git-fixes).
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR (stable-fixes).
- can: m_can: Release irq on error in m_can_open (git-fixes).
- can: m_can: enable NAPI before enabling interrupts (git-fixes).
- can: m_can: m_can_close(): stop clocks after device has been shut down (git-fixes).
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open (git-fixes).
- can: mcp251xfd: clarify the meaning of timestamp (stable-fixes).
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode (git-fixes).
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function (stable-fixes).
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration (stable-fixes).
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop() (stable-fixes).
- can: mcp251xfd: properly indent labels (stable-fixes).
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd (stable-fixes).
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum (stable-fixes).
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller (git-fixes).
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller (stable-fixes).
- ceph: remove the incorrect Fw reference check when dirtying pages (bsc#1231182).
- clk: Add a devm variant of clk_rate_exclusive_get() (bsc#1227885).
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get() (bsc#1227885).
- clk: qcom: clk-alpha-pll: Fix the pll post div mask (git-fixes).
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API (git-fixes).
- clk: qcom: clk-alpha-pll: Fix zonda set_rate failure when PLL is disabled (git-fixes).
- clk: qcom: gcc-sc8280xp: do not use parking clk_ops for QUPs (git-fixes).
- clk: qcom: gcc-sm8550: Do not park the USB RCG at registration time (git-fixes).
- clk: qcom: gcc-sm8550: Do not use parking clk_ops for QUPs (git-fixes).
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs (git-fixes).
- clk: ti: dra7-atl: Fix leak of of_nodes (git-fixes).
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime (git-fixes).
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX (git-fixes).
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init() (git-fixes).
- cpufreq: amd-pstate: Enable amd-pstate preferred core support (stable-fixes).
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance (git-fixes).
- cpufreq: scmi: Avoid overflow of target_freq in fast switch (stable-fixes).
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately (git-fixes).
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure (git-fixes).
- crypto: ccp - do not request interrupt on cmd completion when irqs disabled (git-fixes).
- crypto: iaa - Fix potential use after free bug (git-fixes).
- crypto: qat - fix unintentional re-enabling of error interrupts (stable-fixes).
- crypto: xor - fix template benchmarking (git-fixes).
- cxl/core: Fix incorrect vendor debug UUID define (git-fixes).
- cxl/pci: Fix to record only non-zero ranges (git-fixes).
- devres: Initialize an uninitialized struct member (stable-fixes).
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler (git-fixes).
- dma-debug: avoid deadlock between dma debug vs printk and netconsole (stable-fixes).
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor (stable-fixes).
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks (stable-fixes).
- driver core: Fix a potential null-ptr-deref in module_add_driver() (git-fixes).
- driver core: Fix error handling in driver API device_rename() (git-fixes).
- driver: iio: add missing checks on iio_info's callback access (stable-fixes).
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (git-fixes).
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (git-fixes).
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind() (git-fixes).
- drm/amd/amdgpu: Check tbo resource pointer (stable-fixes).
- drm/amd/amdgpu: Properly tune the size of struct (git-fixes).
- drm/amd/display: Add array index check for hdcp ddc access (stable-fixes).
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func (git-fixes).
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing (stable-fixes).
- drm/amd/display: Assign linear_pitch_alignment even for VM (stable-fixes).
- drm/amd/display: Avoid overflow from uint32_t to uint8_t (stable-fixes).
- drm/amd/display: Avoid race between dcn10_set_drr() and dc_state_destruct() (git-fixes).
- drm/amd/display: Check BIOS images before it is used (stable-fixes).
- drm/amd/display: Check HDCP returned status (stable-fixes).
- drm/amd/display: Check UnboundedRequestEnabled's value (stable-fixes).
- drm/amd/display: Check denominator pbn_div before used (stable-fixes).
- drm/amd/display: Check gpio_id before used as array index (stable-fixes).
- drm/amd/display: Check index for aux_rd_interval before using (stable-fixes).
- drm/amd/display: Check msg_id before processing transcation (stable-fixes).
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] (stable-fixes).
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX (stable-fixes).
- drm/amd/display: Defer handling mst up request in resume (stable-fixes).
- drm/amd/display: Disable error correction if it's not supported (stable-fixes).
- drm/amd/display: Do not use fsleep for PSR exit waits on dmub replay (stable-fixes).
- drm/amd/display: Ensure array index tg_inst won't be -1 (stable-fixes).
- drm/amd/display: Ensure index calculation will not overflow (stable-fixes).
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create (stable-fixes).
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy (stable-fixes).
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info (stable-fixes).
- drm/amd/display: Fix FEC_READY write on DP LT (stable-fixes).
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box (stable-fixes).
- drm/amd/display: Fix pipe addition logic in calc_blocks_to_ungate DCN35 (stable-fixes).
- drm/amd/display: Handle the case which quad_part is equal 0 (stable-fixes).
- drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection (stable-fixes).
- drm/amd/display: Replace dm_execute_dmub_cmd with dc_wake_and_execute_dmub_cmd (git-fixes).
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc (stable-fixes).
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration (stable-fixes).
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null (stable-fixes).
- drm/amd/display: Solve mst monitors blank out problem after resume (git-fixes).
- drm/amd/display: Spinlock before reading event (stable-fixes).
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (stable-fixes).
- drm/amd/display: Wake DMCUB before sending a command for replay feature (stable-fixes).
- drm/amd/display: added NULL check at start of dc_validate_stream (stable-fixes).
- drm/amd/display: handle nulled pipe context in DCE110's set_drr() (git-fixes).
- drm/amd/display: use preferred link settings for dp signal only (stable-fixes).
- drm/amd/pm: Fix negative array index read (stable-fixes).
- drm/amd/pm: check negtive return for table entries (stable-fixes).
- drm/amd/pm: check specific index for aldebaran (stable-fixes).
- drm/amd/pm: check specific index for smu13 (stable-fixes).
- drm/amd/pm: fix the Out-of-bounds read warning (stable-fixes).
- drm/amd/pm: fix uninitialized variable warning (stable-fixes).
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr (stable-fixes).
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt (stable-fixes).
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr (stable-fixes).
- drm/amd/pm: fix warning using uninitialized value of max_vid_step (stable-fixes).
- drm/amd: Add gfx12 swizzle mode defs (stable-fixes).
- drm/amdgpu/atomfirmware: Silence UBSAN warning (stable-fixes).
- drm/amdgpu/display: handle gfx12 in amdgpu_dm_plane_format_mod_supported (stable-fixes).
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs (stable-fixes).
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc (stable-fixes).
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response (stable-fixes).
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10 (stable-fixes).
- drm/amdgpu/swsmu: always force a state reprogram on init (stable-fixes).
- drm/amdgpu: Fix get each xcp macro (git-fixes).
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (stable-fixes).
- drm/amdgpu: Fix out-of-bounds write warning (stable-fixes).
- drm/amdgpu: Fix smatch static checker warning (stable-fixes).
- drm/amdgpu: Fix the uninitialized variable warning (stable-fixes).
- drm/amdgpu: Fix the warning division or modulo by zero (stable-fixes).
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr (stable-fixes).
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_info_ioctl (stable-fixes).
- drm/amdgpu: Handle sg size limit for contiguous allocation (stable-fixes).
- drm/amdgpu: Set no_hw_access when VF request full GPU fails (stable-fixes).
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb (stable-fixes).
- drm/amdgpu: add lock in kfd_process_dequeue_from_device (stable-fixes).
- drm/amdgpu: add missing error handling in function amdgpu_gmc_flush_gpu_tlb_pasid (stable-fixes).
- drm/amdgpu: add skip_hw_access checks for sriov (stable-fixes).
- drm/amdgpu: align pp_power_profile_mode with kernel docs (stable-fixes).
- drm/amdgpu: avoid reading vf2pf info size from FB (stable-fixes).
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 (stable-fixes).
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts (stable-fixes).
- drm/amdgpu: fix a possible null pointer dereference (git-fixes).
- drm/amdgpu: fix contiguous handling for IB parsing v2 (git-fixes).
- drm/amdgpu: fix dereference after null check (stable-fixes).
- drm/amdgpu: fix mc_data out-of-bounds read warning (stable-fixes).
- drm/amdgpu: fix overflowed array index read warning (stable-fixes).
- drm/amdgpu: fix overflowed constant warning in mmhub_set_clockgating() (stable-fixes).
- drm/amdgpu: fix the waring dereferencing hive (stable-fixes).
- drm/amdgpu: fix ucode out-of-bounds read warning (stable-fixes).
- drm/amdgpu: fix uninitialized scalar variable warning (stable-fixes).
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes (stable-fixes).
- drm/amdgpu: properly handle vbios fake edid sizing (git-fixes).
- drm/amdgpu: reject gang submit on reserved VMIDs (stable-fixes).
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4 (stable-fixes).
- drm/amdgpu: update type of buf size to u32 for eeprom functions (stable-fixes).
- drm/amdgu: fix Unintentional integer overflow for mall size (stable-fixes).
- drm/amdkfd: Check debug trap enable before write dbg_ev_file (stable-fixes).
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device (stable-fixes).
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid() (git-fixes).
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (stable-fixes).
- drm/drm-bridge: Drop conditionals around of_node pointers (stable-fixes).
- drm/fb-helper: Do not schedule_work() to flush frame buffer during panic() (stable-fixes).
- drm/gpuvm: fix missing dependency to DRM_EXEC (git-fixes).
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused (git-fixes).
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused (git-fixes).
- drm/i915/guc: prevent a possible int overflow in wq offsets (git-fixes).
- drm/i915: Do not attempt to load the GSC multiple times (git-fixes).
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process (stable-fixes).
- drm/mediatek: Set sensible cursor width/height values to fix crash (stable-fixes).
- drm/mediatek: ovl_adaptor: Add missing of_node_put() (git-fixes).
- drm/meson: plane: Add error handling (stable-fixes).
- drm/msm/a5xx: disable preemption in submits by default (git-fixes).
- drm/msm/a5xx: fix races in preemption evaluation stage (git-fixes).
- drm/msm/a5xx: properly clear preemption records on resume (git-fixes).
- drm/msm/a5xx: workaround early ring-buffer emptiness check (git-fixes).
- drm/msm/adreno: Fix error return if missing firmware-name (stable-fixes).
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450 (git-fixes).
- drm/msm: Fix incorrect file name output in adreno_request_fw() (git-fixes).
- drm/msm: fix %s null argument error (git-fixes).
- drm/nouveau/fb: restore init() for ramgp102 (git-fixes).
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets (git-fixes).
- drm/radeon: fix null pointer dereference in radeon_add_common_modes (git-fixes).
- drm/radeon: properly handle vbios fake edid sizing (git-fixes).
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode (git-fixes).
- drm/rockchip: vop: Allow 4096px width scaling (git-fixes).
- drm/rockchip: vop: clear DMA stop bit on RK3066 (git-fixes).
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066 (git-fixes).
- drm/stm: Fix an error handling path in stm_drm_platform_probe() (git-fixes).
- drm/stm: ltdc: check memory returned by devm_kzalloc() (git-fixes).
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl (git-fixes).
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get (git-fixes).
- drm: komeda: Fix an issue related to normalized zpos (stable-fixes).
- drm: omapdrm: Add missing check for alloc_ordered_workqueue (git-fixes).
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo (stable-fixes).
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate() (git-fixes).
- erofs: fix incorrect symlink detection in fast symlink (git-fixes).
- exfat: fix memory leak in exfat_load_bitmap() (git-fixes).
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe() (git-fixes).
- firmware: arm_scmi: Fix double free in OPTEE transport (git-fixes).
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp() (git-fixes).
- firmware_loader: Block path traversal (git-fixes).
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF (bsc#1230602).
- fuse: fix memory leak in fuse_create_open (bsc#1230124).
- fuse: update stats for pages in dropped aux writeback list (bsc#1230125).
- fuse: use unsigned type for getxattr/listxattr size truncation (bsc#1230123).
- gpio: modepin: Enable module autoloading (git-fixes).
- gpio: rockchip: fix OF node leak in probe() (git-fixes).
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes (stable-fixes).
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING (stable-fixes).
- hwmon: (k10temp) Check return value of amd_smn_read() (stable-fixes).
- hwmon: (lm95234) Fix underflows seen when writing limit attributes (stable-fixes).
- hwmon: (max16065) Fix overflows seen when writing limits (git-fixes).
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (stable-fixes).
- hwmon: (ntc_thermistor) fix module autoloading (git-fixes).
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2 (git-fixes).
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (stable-fixes).
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init (git-fixes).
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume (git-fixes).
- hwrng: mtk - Use devm_pm_runtime_enable (git-fixes).
- i2c: aspeed: Update the stop sw state when the bus recovery occurs (git-fixes).
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled (git-fixes).
- i2c: isch: Add missed 'else' (git-fixes).
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs (git-fixes).
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition (git-fixes).
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup (stable-fixes).
- iio: adc: ad7124: fix chip ID mismatch (git-fixes).
- iio: adc: ad7124: fix config comparison (git-fixes).
- iio: adc: ad7606: fix oversampling gpio array (git-fixes).
- iio: adc: ad7606: fix standby gpio state to match the documentation (git-fixes).
- iio: adc: ad7606: remove frstdata check for serial mode (git-fixes).
- iio: buffer-dmaengine: fix releasing dma channel on error (git-fixes).
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes (git-fixes).
- iio: fix scale application in iio_convert_raw_to_processed_unlocked (git-fixes).
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors (git-fixes).
- ipmi: docs: do not advertise deprecated sysfs entries (git-fixes).
- ipmi:ssif: Improve detecting during probing (bsc#1228771)
- ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230206)
- jfs: fix out-of-bounds in dbNextAG() and diAlloc() (git-fixes).
- kABI workaround for cros_ec stuff (git-fixes).
- kABI: Split kABI out of 'io_uring/kbuf: get rid of bl-&gt;is_ready'
- kABI: Split kABI out of 'io_uring: Re-add dummy_ubuf for kABI purposes'
- kABI: Split kABI out of io_uring/kbuf: protect io_buffer_list teardown with a reference 
- kabi: dm_blk_ioctl: implement path failover for SG_IO (bsc#1183045, bsc#1216776).
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated (stable-fixes).
- kthread: Fix task state in kthread worker if being frozen (bsc#1231146).
- leds: spi-byte: Call of_node_put() on error path (stable-fixes).
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (stable-fixes).
- lirc: rc_dev_get_from_fd(): fix file leak (git-fixes).
- mailbox: bcm2835: Fix timeout during suspend mode (git-fixes).
- mailbox: rockchip: fix a typo in module autoloading (git-fixes).
- media: i2c: ar0521: Use cansleep version of gpiod_set_value() (git-fixes).
- media: ov5675: Fix power on/off delay timings (git-fixes).
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE (git-fixes).
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse (stable-fixes).
- media: qcom: camss: Remove use_count guard in stop_streaming (git-fixes).
- media: sun4i_csi: Implement link validate for sun4i_csi subdev (git-fixes).
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags (git-fixes).
- media: uvcvideo: Enforce alignment of frame and interval (stable-fixes).
- media: venus: fix use after free bug in venus_remove due to race condition (git-fixes).
- media: vicodec: allow en/decoder cmd w/o CAPTURE (git-fixes).
- media: vivid: do not set HDMI TX controls if there are no HDMI outputs (stable-fixes).
- media: vivid: fix wrong sizeimage value for mplane (stable-fixes).
- memory: mtk-smi: Use devm_clk_get_enabled() (git-fixes).
- memory: tegra186-emc: drop unused to_tegra186_emc() (git-fixes).
- minmax: reduce min/max macro expansion in atomisp driver (git-fixes).
- misc: fastrpc: Fix double free of 'buf' in error path (git-fixes).
- mmc: core: apply SD quirks earlier during probe (git-fixes).
- mmc: cqhci: Fix checking of CQHCI_HALT state (git-fixes).
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K (git-fixes).
- mmc: sdhci-of-aspeed: fix module autoloading (git-fixes).
- module: Fix KCOV-ignored file name (git-fixes).
- mtd: powernv: Add check devm_kasprintf() returned value (git-fixes).
- mtd: slram: insert break after errors in parsing the map (git-fixes).
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (git-fixes).
- net: phy: Fix missing of_node_put() for leds (git-fixes).
- net: phy: vitesse: repair vsc73xx autonegotiation (stable-fixes).
- net: tighten bad gso csum offset check in virtio_net_hdr (git-fixes).
- net: usb: qmi_wwan: add MeiG Smart SRM825L (stable-fixes).
- nfsd: Do not leave work of closing files to a work queue (bsc#1228140).
- nilfs2: determine empty node blocks as corrupted (git-fixes).
- nilfs2: fix missing cleanup on rollforward recovery error (git-fixes).
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (git-fixes).
- nilfs2: fix potential oob read in nilfs_btree_check_delete() (git-fixes).
- nilfs2: fix state management in error path of log writing function (git-fixes).
- nilfs2: protect references to superblock parameters exposed in sysfs (git-fixes).
- nouveau: fix the fwsec sb verification register (git-fixes).
- nvme-multipath: avoid hang on inaccessible namespaces (bsc#1228244).
- nvme-multipath: system fails to create generic nvme device (bsc#1228244).
- nvme-pci: Add sleep quirk for Samsung 990 Evo (git-fixes).
- nvme-pci: allocate tagset on reset if necessary (git-fixes).
- nvme-tcp: fix link failure for TCP auth (git-fixes).
- nvme/pci: Add APST quirk for Lenovo N60z laptop (git-fixes).
- nvme: clear caller pointer on identify failure (git-fixes).
- nvme: fix namespace removal list (git-fixes).
- nvmet-rdma: fix possible bad dereference when freeing rsps (git-fixes).
- nvmet-tcp: do not continue for invalid icreq (git-fixes).
- nvmet-tcp: fix kernel crash if commands allocation fails (git-fixes).
- nvmet-trace: avoid dereferencing pointer too early (git-fixes).
- nvmet: Identify-Active Namespace ID List command should reject invalid nsid (git-fixes).
- ocfs2: cancel dqi_sync_work before freeing oinfo (git-fixes).
- ocfs2: fix null-ptr-deref when journal load failed (git-fixes).
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (git-fixes).
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks (git-fixes).
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (stable-fixes).
- pcmcia: Use resource_size function on resource object (stable-fixes).
- perf annotate: Introduce global annotation_options (git-fixes).
- perf annotate: Split branch stack cycles information out of 'struct annotation_line' (git-fixes).
- perf annotate: Use global annotation_options (git-fixes).
- perf arch events: Fix duplicate RISC-V SBI firmware event name (git-fixes).
- perf intel-pt: Fix aux_watermark calculation for 64-bit size (git-fixes).
- perf intel-pt: Fix exclude_guest setting (git-fixes).
- perf machine thread: Remove exited threads by default (git-fixes).
- perf maps: Move symbol maps functions to maps.c (git-fixes).
- perf pmu: Assume sysfs events are always the same case (git-fixes).
- perf pmus: Fixes always false when compare duplicates aliases (git-fixes).
- perf record: Lazy load kernel symbols (git-fixes).
- perf report: Convert to the global annotation_options (git-fixes).
- perf report: Fix condition in sort__sym_cmp() (git-fixes).
- perf stat: Fix the hard-coded metrics calculation on the hybrid (git-fixes).
- perf test: Make test_arm_callgraph_fp.sh more robust (git-fixes).
- perf tool: fix dereferencing NULL al-&gt;maps (git-fixes).
- perf tools: Add/use PMU reverse lookup from config to name (git-fixes).
- perf tools: Use pmus to describe type from attribute (git-fixes).
- perf top: Convert to the global annotation_options (git-fixes).
- perf/core: Fix missing wakeup when waiting for context reference (git-fixes).
- perf/x86/intel/cstate: Add pkg C2 residency counter for Sierra Forest (git-fixes).
- perf/x86/intel/cstate: Fix Alderlake/Raptorlake/Meteorlake (git-fixes).
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake (git-fixes).
- perf/x86/intel/pt: Fix a topa_entry base address calculation (git-fixes).
- perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation (git-fixes).
- perf/x86/intel/pt: Fix topa_entry base length (git-fixes).
- perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR (git-fixes).
- perf/x86/intel/uncore: Support HBM and CXL PMON counters (bsc#1230119).
- perf/x86/intel: Add a distinct name for Granite Rapids (git-fixes).
- perf/x86/intel: Factor out the initialization code for SPR (git fixes).
- perf/x86/intel: Limit the period on Haswell (git-fixes).
- perf/x86/intel: Use the common uarch name for the shared functions (git fixes).
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units (bsc#1230119).
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units (bsc#1230119).
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units (bsc#1230119).
- perf/x86/uncore: Cleanup unused unit structure (bsc#1230119).
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree (bsc#1230119).
- perf/x86/uncore: Save the unit control address of all units (bsc#1230119).
- perf/x86/uncore: Support per PMU cpumask (bsc#1230119).
- perf/x86: Fix smp_processor_id()-in-preemptible warnings (git-fixes).
- perf/x86: Serialize set_attr_rdpmc() (git-fixes).
- perf: Fix default aux_watermark calculation (git-fixes).
- perf: Fix event leak upon exit (git-fixes).
- perf: Fix perf_aux_size() for greater-than 32-bit size (git-fixes).
- perf: Prevent passing zero nr_pages to rb_alloc_aux() (git-fixes).
- perf: script: add raw|disasm arguments to --insn-trace option (git-fixes).
- phy: zynqmp: Take the phy mutex in xlate (stable-fixes).
- pinctrl: at91: make it work with current gpiolib (stable-fixes).
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID (stable-fixes).
- pinctrl: single: fix missing error code in pcs_probe() (git-fixes).
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex (stable-fixes).
- platform/surface: aggregator_registry: Add Support for Surface Pro 10 (stable-fixes).
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3 (stable-fixes).
- platform/x86: dell-smbios: Fix error path in dell_smbios_init() (git-fixes).
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array (git-fixes).
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (git-fixes).
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).
- power: supply: Drop use_cnt check from power_supply_property_is_writeable() (git-fixes).
- power: supply: axp20x_battery: Remove design from min and max voltage (git-fixes).
- power: supply: hwmon: Fix missing temp1_max_alarm attribute (git-fixes).
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense (git-fixes).
- powercap/intel_rapl: Add support for AMD family 1Ah (stable-fixes).
- powerpc/qspinlock: Fix deadlock in MCS queue (bac#1230295 ltc#206656).
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode (stable-fixes).
- r8152: add vendor/device ID pair for D-Link DUB-E250 (git-fixes).
- regmap: maple: work around gcc-14.1 false-positive warning (stable-fixes).
- regmap: spi: Fix potential off-by-one when calculating reserved size (stable-fixes).
- regulator: Return actual error in of_regulator_bulk_get_all() (git-fixes).
- regulator: core: Fix regulator_is_supported_voltage() kerneldoc return value (git-fixes).
- regulator: core: Fix short description for _regulator_check_status_enabled() (git-fixes).
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR (git-fixes).
- regulator: rt5120: Convert comma to semicolon (git-fixes).
- regulator: wm831x-isink: Convert comma to semicolon (git-fixes).
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M (git-fixes).
- remoteproc: imx_rproc: Initialize workqueue earlier (git-fixes).
- remoteproc: k3-r5: Fix error handling when power-up failed (git-fixes).
- reset: berlin: fix OF node leak in probe() error path (git-fixes).
- reset: k210: fix OF node leak in probe() error path (git-fixes).
- resource: fix region_intersects() vs add_memory_driver_managed() (git-fixes).
- rtc: at91sam9: fix OF node leak in probe() error path (git-fixes).
- s390/dasd: Fix redundant /proc/dasd* entries removal (bsc#1227694).
- s390/dasd: Remove DMA alignment (LTC#208933 bsc#1230426 git-fixes).
- s390/mm: Convert gmap_make_secure to use a folio (git-fixes bsc#1230562).
- s390/mm: Convert make_page_secure to use a folio (git-fixes bsc#1230563).
- s390: allow pte_offset_map_lock() to fail (git-fixes bsc#1230564).
- scripts: kconfig: merge_config: config files: add a trailing newline (stable-fixes).
- scripts: sphinx-pre-install: remove unnecessary double check for $cur_version (git-fixes).
- scsi: ibmvfc: Add max_sectors module parameter (bsc#1216223).
- scsi: lpfc: Change diagnostic log flag during receipt of unknown ELS cmds (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Copyright updates for 14.4.0.4 patches (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Fix overflow build issue (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Fix unintentional double clearing of vmid_flag (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Remove redundant vport assignment when building an abort request (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Update PRLO handling in direct attached topology (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Update lpfc version to 14.4.0.4 (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (bsc#1229429 jsc#PED-9899).
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics() (bsc#1223848).
- selftests: lib: remove strscpy test (git-fixes).
- selinux,smack: do not bypass permissions check in inode_setsecctx hook (stable-fixes).
- soc: fsl: cpm1: tsa: Fix tsa_write8() (git-fixes).
- soc: versatile: integrator: fix OF node leak in probe() error path (git-fixes).
- spi: atmel-quadspi: Avoid overwriting delay register settings (git-fixes).
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time (git-fixes).
- spi: bcm63xx: Enable module autoloading (stable-fixes).
- spi: bcm63xx: Fix module autoloading (git-fixes).
- spi: meson-spicc: convert comma to semicolon (git-fixes).
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug (git-fixes).
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ (git-fixes).
- spi: ppc4xx: handle irq_of_parse_and_map() errors (git-fixes).
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling (git-fixes).
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE (git-fixes).
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time (git-fixes).
- spi: spidev: Add an entry for elgin,jg10309-01 (stable-fixes).
- spi: spidev: Add missing spi_device_id for jg10309-01 (git-fixes).
- staging: iio: frequency: ad9834: Validate frequency parameter value (git-fixes).
- supported.conf: mark adiantum and xctr crypto modules as supported (bsc#1231035)
- thunderbolt: Fix XDomain rx_lanes_show and tx_lanes_show (git-fixes).
- thunderbolt: Fix calculation of consumed USB3 bandwidth on a path (git-fixes).
- thunderbolt: Fix rollback in tb_port_lane_bonding_enable() for lane 1 (git-fixes).
- thunderbolt: There are only 5 basic router registers in pre-USB4 routers (git-fixes).
- tomoyo: fallback to realpath if symlink's pathname does not exist (git-fixes).
- tools/perf: Fix the string match for "/tmp/perf-$PID.map" files in dso__load (git-fixes).
- tpm: Clean up TPM space after command failure (git-fixes).
- tracing: Avoid possible softlockup in tracing_iter_reset() (git-fixes).
- tty: rp2: Fix reset with non forgiving PCIe host bridges (git-fixes).
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (git-fixes).
- usb: cdnsp: Fix incorrect usb_request status (git-fixes).
- usb: dwc2: Skip clock gating on Broadcom SoCs (git-fixes).
- usb: dwc2: drd: fix clock gating on USB role switch (git-fixes).
- usb: dwc3: Avoid waking up gadget during startxfer (git-fixes).
- usb: dwc3: core: Prevent USB core invalid event buffer address access (git-fixes).
- usb: dwc3: core: Prevent USB core invalid event buffer address access (stable-fixes).
- usb: dwc3: core: update LC timer as per USB Spec V3.2 (stable-fixes).
- usb: gadget: aspeed_udc: validate endpoint index for ast udc (stable-fixes).
- usb: typec: ucsi: Fix null pointer dereference in trace (stable-fixes).
- usb: typec: ucsi: Wait 20ms before reading CCI after a reset (git-fixes).
- usb: uas: set host status byte on data completion error (stable-fixes).
- usbip: Do not submit special requests twice (stable-fixes).
- usbnet: ipheth: add CDC NCM support (git-fixes).
- usbnet: ipheth: do not stop RX on failing RX callback (git-fixes).
- usbnet: ipheth: drop RX URBs with no payload (git-fixes).
- usbnet: ipheth: fix carrier detection in modes 1 and 4 (git-fixes).
- usbnet: ipheth: fix risk of NULL pointer deallocation (git-fixes).
- usbnet: ipheth: race between ipheth_close and error handling (stable-fixes).
- usbnet: ipheth: remove extraneous rx URB length check (git-fixes).
- usbnet: ipheth: transmit URBs without trailing padding (git-fixes).
- usbnet: modern method to get random MAC (git-fixes).
- virtio-net: synchronize probe with ndo_set_features (git-fixes).
- virtio_net: Fix napi_skb_cache_put warning (git-fixes).
- virtio_net: fixing XDP for fully checksummed packets handling (git-fixes).
- watchdog: imx_sc_wdt: Do not disable WDT in suspend (git-fixes).
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem() (stable-fixes).
- wifi: ath12k: fix BSS chan info request WMI command (git-fixes).
- wifi: ath12k: fix firmware crash due to invalid peer nss (stable-fixes).
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he() (git-fixes).
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he() (stable-fixes).
- wifi: ath12k: initialize 'ret' in ath12k_dp_rxdma_ring_sel_config_wcn7850() (stable-fixes).
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem() (stable-fixes).
- wifi: ath12k: match WMI BSS chan info structure with firmware definition (git-fixes).
- wifi: ath9k: Remove error checks when creating debugfs entries (git-fixes).
- wifi: brcmfmac: introducing fwil query functions (git-fixes).
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 (stable-fixes).
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() (git-fixes).
- wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority (git-fixes).
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors (git-fixes).
- wifi: cfg80211: make hash table duplicates more survivable (stable-fixes).
- wifi: cfg80211: restrict operation during radar detection (stable-fixes).
- wifi: iwlwifi: clear trans-&gt;state earlier upon error (stable-fixes).
- wifi: iwlwifi: lower message level for FW buffer destination (stable-fixes).
- wifi: iwlwifi: mvm: do not wait for tx queues if firmware is dead (stable-fixes).
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room() (stable-fixes).
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation (stable-fixes).
- wifi: iwlwifi: mvm: increase the time between ranging measurements (git-fixes).
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped (stable-fixes).
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check (stable-fixes).
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD (stable-fixes).
- wifi: mac80211: do not use rate mask for offchannel TX either (git-fixes).
- wifi: mac80211: fix the comeback long retry times (git-fixes).
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap() (stable-fixes).
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (git-fixes).
- wifi: mt76: connac: fix checksum offload fields of connac3 RXD (git-fixes).
- wifi: mt76: mt7603: fix mixed declarations and code (git-fixes).
- wifi: mt76: mt7615: check devm_kasprintf() returned value (git-fixes).
- wifi: mt76: mt7915: check devm_kasprintf() returned value (git-fixes).
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986 (git-fixes).
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality (git-fixes).
- wifi: mt76: mt7921: Check devm_kasprintf() returned value (git-fixes).
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change (stable-fixes).
- wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage (git-fixes).
- wifi: mt76: mt7925: fix a potential array-index-out-of-bounds issue for clc (git-fixes).
- wifi: mt76: mt7996: fix EHT beamforming capability check (git-fixes).
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities (git-fixes).
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he (git-fixes).
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel (git-fixes).
- wifi: mt76: mt7996: fix uninitialized TLV data (git-fixes).
- wifi: mt76: mt7996: fix wmm set of station interface to 3 (git-fixes).
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna (git-fixes).
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (stable-fixes).
- wifi: rtw88: 8822c: Fix reported RX band width (git-fixes).
- wifi: rtw88: always wait for both firmware loading attempts (git-fixes).
- wifi: rtw88: remove CPT execution branch never used (git-fixes).
- wifi: rtw88: usb: schedule rx work after everything is set up (stable-fixes).
- wifi: rtw89: ser: avoid multiple deinit on same CAM (stable-fixes).
- wifi: rtw89: wow: prevent to send unexpected H2C during download Firmware (stable-fixes).
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param (git-fixes).
- x86/hyperv: fix kexec crash due to VP assist page corruption (git-fixes).
- x86/kaslr: Expose and use the end of the physical memory address space (bsc#1229443).
- x86/kexec: Add EFI config table identity mapping for kexec kernel (bsc#1220382).
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped (bsc#1220382).
- x86/mm: Use lookup_address_in_pgd_attr() in show_fault_oops() (bsc#1221527).
- x86/pat: Fix W^X violation false-positives when running as Xen PV guest (bsc#1221527).
- x86/pat: Introduce lookup_address_in_pgd_attr() (bsc#1221527).
- x86/pat: Restructure _lookup_address_cpa() (bsc#1221527).
- xen/swiotlb: add alignment check for dma buffers (bsc#1229928).
- xen/swiotlb: fix allocated size (git-fixes).
- xen: add capability to remap non-RAM pages to different PFNs (bsc#1226003).
- xen: allow mapping ACPI data using a different physical address (bsc#1226003).
- xen: introduce generic helper checking for memory map conflicts (bsc#1226003).
- xen: move checks for e820 conflicts further up (bsc#1226003).
- xen: move max_pfn in xen_memory_setup() out of function scope (bsc#1226003).
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory (bsc#1226003).
- xen: use correct end address of kernel for conflict checking (bsc#1226003).
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints (git-fixes).
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them (git-fixes).
- xz: cleanup CRC32 edits from 2018 (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-default" epoch="0" version="6.4.0" release="20.1" arch="nosrc" src="nosrc/kernel-default-6.4.0-20.1.nosrc.rpm">
          <filename>kernel-default-6.4.0-20.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default" epoch="0" version="6.4.0" release="20.1" arch="x86_64" src="x86_64/kernel-default-6.4.0-20.1.x86_64.rpm">
          <filename>kernel-default-6.4.0-20.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-debuginfo" epoch="0" version="6.4.0" release="20.1" arch="x86_64" src="x86_64/kernel-default-debuginfo-6.4.0-20.1.x86_64.rpm">
          <filename>kernel-default-debuginfo-6.4.0-20.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-debugsource" epoch="0" version="6.4.0" release="20.1" arch="x86_64" src="x86_64/kernel-default-debugsource-6.4.0-20.1.x86_64.rpm">
          <filename>kernel-default-debugsource-6.4.0-20.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-extra" epoch="0" version="6.4.0" release="20.1" arch="x86_64" src="x86_64/kernel-default-extra-6.4.0-20.1.x86_64.rpm">
          <filename>kernel-default-extra-6.4.0-20.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-extra-debuginfo" epoch="0" version="6.4.0" release="20.1" arch="x86_64" src="x86_64/kernel-default-extra-debuginfo-6.4.0-20.1.x86_64.rpm">
          <filename>kernel-default-extra-debuginfo-6.4.0-20.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-kvmsmall" epoch="0" version="6.4.0" release="20.1" arch="nosrc" src="nosrc/kernel-kvmsmall-6.4.0-20.1.nosrc.rpm">
          <filename>kernel-kvmsmall-6.4.0-20.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-kvmsmall" epoch="0" version="6.4.0" release="20.1" arch="x86_64" src="x86_64/kernel-kvmsmall-6.4.0-20.1.x86_64.rpm">
          <filename>kernel-kvmsmall-6.4.0-20.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-kvmsmall-debuginfo" epoch="0" version="6.4.0" release="20.1" arch="x86_64" src="x86_64/kernel-kvmsmall-debuginfo-6.4.0-20.1.x86_64.rpm">
          <filename>kernel-kvmsmall-debuginfo-6.4.0-20.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-kvmsmall-debugsource" epoch="0" version="6.4.0" release="20.1" arch="x86_64" src="x86_64/kernel-kvmsmall-debugsource-6.4.0-20.1.x86_64.rpm">
          <filename>kernel-kvmsmall-debugsource-6.4.0-20.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="6.4.0" release="17.1.1.51" arch="src" src="src/kernel-default-base-6.4.0-17.1.1.51.src.rpm">
          <filename>kernel-default-base-6.4.0-17.1.1.51.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-default-base" epoch="0" version="6.4.0" release="17.1.1.51" arch="x86_64" src="x86_64/kernel-default-base-6.4.0-17.1.1.51.x86_64.rpm">
          <filename>kernel-default-base-6.4.0-17.1.1.51.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>82</id>
    <title>Recommended update for suseconnect-ng, zypp-plugin, libsolv, zypper, libzypp</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1731333221" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=222971" id="222971" title="Activate System fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1007273" id="1007273" title="[libsolv] yast removes empty lines from some EULAs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1175678" id="1175678" title="complete packages --unneeded featureset (mostly &quot;apt-mark auto&quot;)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218171" id="1218171" title="zypper &quot;lr&quot; URI doesnt always match what zypper &quot;ref&quot; or &quot;dup&quot; will use" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219004" id="1219004" title="DMS migration failed - SFSC 01089771 - ref:_00D1igLOd._500Tr40Ob8:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221525" id="1221525" title="AutoYaST not upgrading all packages for SLES12 to SLES15 offline upgrade" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221963" id="1221963" title="zypper.conf option `showAlias`is not repected in search commands." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222086" id="1222086" title="zypper as non-root always reports repositories are out-of-date (regression)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222398" id="1222398" title="Permission are at 0700 for repositories under '/var/cache/zypp/raw/', cause non root user zypper cmd failing with &quot;Can't create metadata cache directory&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223094" id="1223094" title="`zypper ref` tries to refresh CD/DVD although metadata are present in the cache." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223107" id="1223107" title="Register RMT server failed to verify certificate during installation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223430" id="1223430" title="Zypper: Repo key fails to import, key url is rewritten by --gpg-auto-import-keys refresh" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223766" id="1223766" title="Zypper should return error code 7 instead of 4." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224771" id="1224771" title="zypper - show rpm install size (Payload Size) before installing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225267" id="1225267" title="openSUSE-release and sles-release can be removed and updated even with zypper lock applied" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226014" id="1226014" title="&quot;zypper ps -s&quot; is confused by snaps" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226030" id="1226030" title="libzypp: ssl_clientkey not removed from repo url" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226128" id="1226128" title="service suseconnect-keepalive.service does not work by default with proxies that require user authentication" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226493" id="1226493" title="zypper sh (zypper shell) hangs forever waiting for return on ^C" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227205" id="1227205" title="[Build 20240629] openQA test fails in zypper_extend (echo lr | zypper shell)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227625" id="1227625" title="in %post  (core dumped) ZYPP_READONLY_HACK=1 zypper refresh-services" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227793" id="1227793" title="zypper update 34493 breaks zypper in PublicCloud" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228138" id="1228138" title="[Build ] openQA test fails in installation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228206" id="1228206" title="Lots of “Retrieving: https://download.opensuse.org/geopip ……..[not found]” in zypper refresh since early July 2024" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228208" id="1228208" title="SUSE:Maintenance:34494   Medium not attached" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228420" id="1228420" title="libzypp 17.35.4 breaks yast2-* build" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228647" id="1228647" title="RpmDb issues after zypper source-install with single_rpmtrans backend" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228787" id="1228787" title="2 statically linked binaries in libzypp-17.35.2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229014" id="1229014" title="test fails in registration. The requested URL returned error: 401" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230229" id="1230229" title="SLE Micro: SUSEConnect does not forkward --root argument to zypper" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230267" id="1230267" title="[ZYPP-CODE15] Tracker bug for new revisions of the zypp stack due to code refactoring and renewal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230912" id="1230912" title="zypper hangs if no network connection" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231043" id="1231043" title="L3: SUMA 4.3 on Azure, Channel URL &quot;SMT cloud server&quot;  Valid Metadata not found after update" type="bugzilla" />
      <reference href="https://jira.suse.com/browse/OBS-301" id="OBS-301" title="https://jira.suse.com/browse/OBS-301" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-7982" id="PED-7982" title="https://jira.suse.com/browse/PED-7982" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8014" id="PED-8014" title="https://jira.suse.com/browse/PED-8014" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8018" id="PED-8018" title="https://jira.suse.com/browse/PED-8018" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8153" id="PED-8153" title="https://jira.suse.com/browse/PED-8153" type="jira" />
    </references>
    <description>This update for suseconnect-ng, zypp-plugin, libsolv, zypper, libzypp fixes the following issues:

libsolv version 0.7.30:

  - removed dependency on external find program in the repo2solv tool
  - bindings: fix return value of repodata.add_solv()
  - new SOLVER_FLAG_FOCUS_NEW flag
  - add a conflict to older libsolv-tools to libsolv-tools-base
  - report unsupported compression in solv_xfopen() with errno
  - fix return value of repodata.add_solv() in the bindings
  - fix SHA-224 oid in solv_pgpvrfy
  - improve updating of installed multiversion packages
  - fix decision introspection going into an endless loop in some
    cases
  - added experimental lua bindings
  - split libsolv-tools into libsolv-tools-base [jsc#PED-8153]
  - removed dependency on external find program in the repo2solv tool
  - bindings: fix return value of repodata.add_solv()
  - new SOLVER_FLAG_FOCUS_NEW flag
  - add a conflict to older libsolv-tools to libsolv-tools-base
  - report unsupported compression in solv_xfopen() with errno
  - fix return value of repodata.add_solv() in the bindings
  - fix SHA-224 oid in solv_pgpvrfy
  - improve updating of installed multiversion packages
  - fix decision introspection going into an endless loop in some
    cases
  - added experimental lua bindings
  - split libsolv-tools into libsolv-tools-base [jsc#PED-8153]

libzypp update to 17.35.12:

  - PluginFrame: Send unescaped colons in header values
    (bsc#1231043)
    According to the STOMP protocol it would be correct to escape a
    colon in a header-value, but it breaks plugin receivers which do
    not expect this. The first colon separates header-name from
    header-value, so escaping in the header-value is not needed
    anyway.
    Escaping in the header-value affects especially the urlresolver
    plugins. The input URL is passed in a header, but sent back as
    raw data in the frames body. If the plugin receiver does not
    correctly unescape the URL we may get back a "https\c//" which is
    not usable.
  - Do not ignore return value of std::remove_if in MediaSyncFacade
    (fixes #579)
  - Fix hang in curl code with no network connection (bsc#1230912)
  - Deprecate librpmDb::db_const_iterator default ctor (bsc#1230267)
    It's preferred to explicitly tell the root directory of the
    system whose database you want to query.
  - API refactoring. Prevent zypper from using now private libzypp
    symbols (bsc#1230267)
  - Conflicts: zypper &lt;= 1.14.76
  - single_rpmtrans: fix installation of .src.rpms (bsc#1228647)
  - Make sure not to statically linked installed tools (bsc#1228787)
  - MediaPluginType must be resolved to a valid MediaHandler
    (bsc#1228208)
  - Export CredentialManager for legacy YAST versions (bsc#1228420)
  - Export asSolvable for YAST (bsc#1228420)
  - Fix 4 typos in zypp.conf.
  - Fix typo in the geoip update pipeline (bsc#1228206)
  - Export RepoVariablesStringReplacer for yast2 (bsc#1228138)
  - Translation: updated .pot file.
  - Conflict with python zypp-plugin &lt; 0.6.4 (bsc#1227793)
    Older zypp-plugins reject stomp headers including a '-'. Like the
    'content-length' header we may send.
  - Fix int overflow in Provider (fixes #559)
    This patch fixes an issue in safe_strtonum which caused
    timestamps to overflow in the Provider message parser.
  - Fix error reporting on repoindex.xml parse error (bsc#1227625)
  - Keep UrlResolverPlugin API public (fixes #560)
  - Blacklist /snap executables for 'zypper ps' (bsc#1226014)
  - Fix handling of buddies when applying locks (bsc#1225267)
    Buddy pairs (like -release package and product) internally share
    the same status object. When applying locks from query results
    the locked bit must be set if either item is locked.
  - Install zypp/APIConfig.h legacy include (fixes #557)
  - Update soname due to RepoManager refactoring and cleanup.
  - Workaround broken libsolv-tools-base requirements (fixes
    openSUSE/zypper#551)
  - Strip ssl_clientkey from repo urls (bsc#1226030)
  - Remove protobuf build dependency.
  - Lazily attach medium during refresh workflows (bsc#1223094)
  - Refactor RepoManager and add Service workflows.
  - zypp-tui: Make sure translated texts use the correct textdomain
    (fixes #551)
  - Skip libproxy1 requires for tumbleweed.
  - don't require libproxy1 on tumbleweed, it is optional now
  - Fix versioning scheme
  - add one more missing export for libyui-qt-pkg
  - Revert eintrSafeCall behavior to setting errno to 0.
  - fix up requires_eq usage for libsolv-tools-base
  - add one more missing export for PackageKit
  - switch to reduced size libsolv-tools-base (jsc#PED-8153)
  - Fixed check for outdated repo metadata as non-root user
    (bsc#1222086)
  - Add ZYPP_API for exported functions and switch to
    visibility=hidden (jsc#PED-8153)
  - Dynamically resolve libproxy (jsc#PED-8153)
  - Fix download from gpgkey URL (bsc#1223430, fixes openSUSE/zypper#546)
  - Don't try to refresh volatile media as long as raw metadata are
    present (bsc#1223094)
  - Fix creation of sibling cache dirs with too restrictive mode
    (bsc#1222398)
    Some install workflows in YAST may lead to too restrictive (0700)
    raw cache directories in case of newly created repos. Later
    commands running with user privileges may not be able to access
    these repos.
  - Update RepoStatus fromCookieFile according to the files mtime
    (bsc#1222086)
  - TmpFile: Don't call chmod if makeSibling failed.
  - Fixup New VendorSupportOption flag VendorSupportSuperseded
    (jsc#OBS-301, jsc#PED-8014)
    Fixed the name of the keyword to "support_superseded" as it was
    agreed on in jsc#OBS-301.
  - Add resolver option 'removeUnneeded' to file weak remove jobs
    for unneeded packages (bsc#1175678)
  - Add resolver option 'removeOrphaned' for distupgrade
    (bsc#1221525)
  - New VendorSupportOption flag VendorSupportSuperseded
    (jsc#OBS-301, jsc#PED-8014)
  - Tests: fix vsftpd.conf where SUSE and Fedora use different
    defaults (fixes #522)
  - Add default stripe minimum (#529)
  - Don't expose std::optional where YAST/PK explicitly use c++11.
  - Digest: Avoid using the deprecated OPENSSL_config.
  - ProblemSolution::skipsPatchesOnly overload to handout the
    patches.
  - Remove https-&gt;http redirection exceptions for
    download.opensuse.org.

suseconnect-ng updated to 1.12:

    - Set the filesystem root on zypper when given (bsc#1230229,bsc#1229014)
    - Added uname as collector
    - Added SAP workload detection
    - Added detection of container runtimes
    - Multiple fixes on ARM64 detection
    - Use `read_values` for the CPU collector on Z
    - Fixed data collection for ppc64le
    - Grab the home directory from /etc/passwd if needed (bsc#1226128)
    - Build zypper-migration and zypper-packages-search as standalone
      binaries rather then one single binary
    - Add --gpg-auto-import-keys flag before action in zypper command (bsc#1219004)
    - Include /etc/products.d in directories whose content are backed
      up and restored if a zypper-migration rollback happens. (bsc#1219004)
    - Add the ability to upload the system uptime logs, produced by the
      suse-uptime-tracker daemon, to SCC/RMT as part of keepalive report.
      (jsc#PED-7982) (jsc#PED-8018)
    - Add support for third party packages in SUSEConnect
    - Refactor existing system information collection implementation
    - Fix certificate import for Yast when using a registration proxy with
      self-signed SSL certificate (bsc#1223107)

zypp-plugin updated to 0.6.4:

  - Fix stomp header regex to include '-' (bsc#1227793)

zypper updated to 1.14.77:

  - API refactoring. Prevent zypper from using now private libzypp
    symbols (bsc#1230267)
  - BuildRequires:  libzypp-devel &gt;= 17.35.10.
  - Fix wrong numbers used in CommitSummary skipped/failed messages.
  - Show rpm install size before installing (bsc#1224771)
    If filesystem snapshots are taken before the installation (e.g.
    by snapper) no disk space is freed by removing old packages. In
    this case the install size of all packages is a hint how much
    additional disk space is needed by the new packages static
    content.
  - Fix readline setup to handle Ctrl-C and Ctrl-D corrrectly
    (bsc#1227205)
  - Let_readline_abort_on_Ctrl-C (bsc#1226493)
  - packages: add '--system' to show @System packages (bsc#222971)
  - Fixed check for outdated repo metadata as non-root user
    (bsc#1222086)
  - BuildRequires:  libzypp-devel &gt;= 17.33.0.
  - Delay zypp lock until command options are parsed (bsc#1223766)
  - Unify message format(fixes #485)
  - switch cmake build type to RelWithDebInfo
  - modernize spec file (remove Authors section, use proper macros,
    remove redundant clean section, don't mark man pages as doc)
  - switch to -O2 -fvisibility=hidden -fpie:
    * PIC is not needed as no shared lib is built
    * fstack-protector-strong is default on modern dists and would
      be downgraded by fstack-protector
    * default visibility hidden allows better optimisation
    * O2 is reducing inlining bloat
    -&gt; 18% reduced binary size
  - remove procps requires (was only for ZMD which is dropped)
    (jsc#PED-8153)
  - Do not try to refresh repo metadata as non-root user
    (bsc#1222086)
    Instead show refresh stats and hint how to update them.
  - man: Explain how to protect orphaned packages by collecting
    them in a plaindir repo.
  - packages: Add --autoinstalled and --userinstalled options to
    list them.
  - Don't print 'reboot required' message if download-only or
    dry-run (fixes #529)
    Instead point out that a reboot would be required if the option
    was not used.
  - Resepect zypper.conf option `showAlias` search commands
    (bsc#1221963)
    Repository::asUserString (or Repository::label) respects the
    zypper.conf option, while name/alias return the property.
  - dup: New option --remove-orphaned to remove all orphaned
    packages in dup (bsc#1221525)
  - info,summary: Support VendorSupportOption flag
    VendorSupportSuperseded (jsc#OBS-301, jsc#PED-8014)
  - BuildRequires:  libzypp-devel &gt;= 17.32.0.
    API cleanup and changes for VendorSupportSuperseded.
  - Show active dry-run/download-only at the commit propmpt.
  - patch: Add --skip-not-applicable-patches option (closes #514)
  - Fix printing detailed solver problem description.
    The problem description() is one rule out possibly many in
    completeProblemInfo() the solver has chosen to represent the
    problem. So either description or completeProblemInfo should be
    printed, but not both.
  - Fix bash-completion to work with right adjusted numbers in the
    1st column too (closes #505)
  - Set libzypp shutdown request signal on Ctrl+C (fixes #522)
  - lr REPO: In the detailed view show all baseurls not just the
    first one (bsc#1218171)
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.30" release="1.1" arch="src" src="src/libsolv-0.7.30-1.1.src.rpm">
          <filename>libsolv-0.7.30-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-debugsource" epoch="0" version="0.7.30" release="1.1" arch="x86_64" src="x86_64/libsolv-debugsource-0.7.30-1.1.x86_64.rpm">
          <filename>libsolv-debugsource-0.7.30-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.30" release="1.1" arch="x86_64" src="x86_64/libsolv-tools-base-0.7.30-1.1.x86_64.rpm">
          <filename>libsolv-tools-base-0.7.30-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base-debuginfo" epoch="0" version="0.7.30" release="1.1" arch="x86_64" src="x86_64/libsolv-tools-base-debuginfo-0.7.30-1.1.x86_64.rpm">
          <filename>libsolv-tools-base-debuginfo-0.7.30-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.35.12" release="1.1" arch="src" src="src/libzypp-17.35.12-1.1.src.rpm">
          <filename>libzypp-17.35.12-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.35.12" release="1.1" arch="x86_64" src="x86_64/libzypp-17.35.12-1.1.x86_64.rpm">
          <filename>libzypp-17.35.12-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp-debuginfo" epoch="0" version="17.35.12" release="1.1" arch="x86_64" src="x86_64/libzypp-debuginfo-17.35.12-1.1.x86_64.rpm">
          <filename>libzypp-debuginfo-17.35.12-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp-debugsource" epoch="0" version="17.35.12" release="1.1" arch="x86_64" src="x86_64/libzypp-debugsource-17.35.12-1.1.x86_64.rpm">
          <filename>libzypp-debugsource-17.35.12-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.12.0" release="1.1" arch="src" src="src/suseconnect-ng-1.12.0-1.1.src.rpm">
          <filename>suseconnect-ng-1.12.0-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.12.0" release="1.1" arch="x86_64" src="x86_64/suseconnect-ng-1.12.0-1.1.x86_64.rpm">
          <filename>suseconnect-ng-1.12.0-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="python311-zypp-plugin" epoch="0" version="0.6.4" release="1.1" arch="noarch" src="noarch/python311-zypp-plugin-0.6.4-1.1.noarch.rpm">
          <filename>python311-zypp-plugin-0.6.4-1.1.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypp-plugin" epoch="0" version="0.6.4" release="1.1" arch="src" src="src/zypp-plugin-0.6.4-1.1.src.rpm">
          <filename>zypp-plugin-0.6.4-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.77" release="1.1" arch="src" src="src/zypper-1.14.77-1.1.src.rpm">
          <filename>zypper-1.14.77-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.77" release="1.1" arch="x86_64" src="x86_64/zypper-1.14.77-1.1.x86_64.rpm">
          <filename>zypper-1.14.77-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-debuginfo" epoch="0" version="1.14.77" release="1.1" arch="x86_64" src="x86_64/zypper-debuginfo-1.14.77-1.1.x86_64.rpm">
          <filename>zypper-debuginfo-1.14.77-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-debugsource" epoch="0" version="1.14.77" release="1.1" arch="x86_64" src="x86_64/zypper-debugsource-1.14.77-1.1.x86_64.rpm">
          <filename>zypper-debugsource-1.14.77-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.77" release="1.1" arch="noarch" src="noarch/zypper-needs-restarting-1.14.77-1.1.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.77-1.1.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>83</id>
    <title>Security update for patch</title>
    <severity>low</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1738573474" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1167721" id="1167721" title="VUL-1: CVE-2019-20633: patch: double free vulnerability in the function another_hunk() via a crafted patch file" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20633" id="CVE-2019-20633" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20633" type="cve" />
    </references>
    <description>This update for patch fixes the following issues:

- CVE-2019-20633: Fix double-free/OOB read in pch.c (bsc#1167721)
</description>
    <pkglist>
      <collection>
        <package name="patch" epoch="0" version="2.7.6" release="3.1" arch="src" src="src/patch-2.7.6-3.1.src.rpm">
          <filename>patch-2.7.6-3.1.src.rpm</filename>
        </package>
        <package name="patch" epoch="0" version="2.7.6" release="3.1" arch="x86_64" src="x86_64/patch-2.7.6-3.1.x86_64.rpm">
          <filename>patch-2.7.6-3.1.x86_64.rpm</filename>
        </package>
        <package name="patch-debuginfo" epoch="0" version="2.7.6" release="3.1" arch="x86_64" src="x86_64/patch-debuginfo-2.7.6-3.1.x86_64.rpm">
          <filename>patch-debuginfo-2.7.6-3.1.x86_64.rpm</filename>
        </package>
        <package name="patch-debugsource" epoch="0" version="2.7.6" release="3.1" arch="x86_64" src="x86_64/patch-debugsource-2.7.6-3.1.x86_64.rpm">
          <filename>patch-debugsource-2.7.6-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>93</id>
    <title>Security update for qemu</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1738573512" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224132" id="1224132" title="VUL-0: CVE-2024-4693: qemu: virtio-pci: improper release of configure vector leads to guest triggerable crash" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229007" id="1229007" title="VUL-0: CVE-2024-7409: qemu: denial of service via improper synchronization in QEMU NBD Server during socket closure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229929" id="1229929" title="slem6.1, ppc64le only, zypper ref command gets return code 139 after registering the system" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230140" id="1230140" title="QEMU is missing fix for ppc64 emulation, causing corruption in userspace" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230834" id="1230834" title="VUL-0: CVE-2024-8354: kvm,qemu: usb: assertion failure in usb_ep_get()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230915" id="1230915" title="VUL-0: CVE-2024-8612: qemu: qemu-kvm: information leak in virtio devices" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231519" id="1231519" title="[sles15sp7][27.1]KVM_SET_USER_MEMORY_REGION Failure During SLES VM Installation on AArch64 Using Virt-Install" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4693" id="CVE-2024-4693" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4693" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7409" id="CVE-2024-7409" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7409" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8354" id="CVE-2024-8354" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8354" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8612" id="CVE-2024-8612" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8612" type="cve" />
    </references>
    <description>This update for qemu fixes the following issues:

- Bugfixes and CVEs:
  * hw/usb/hcd-ohci: Fix #1510, #303: pid not IN or OUT (bsc#1230834, CVE-2024-8354)
  * softmmu: Support concurrent bounce buffers (bsc#1230915, CVE-2024-8612)
  * system/physmem: Per-AddressSpace bounce buffering (bsc#1230915, CVE-2024-8612)
  * system/physmem: Propagate AddressSpace to MapClient helpers (bsc#1230915, CVE-2024-8612)
  * system/physmem: Replace qemu_mutex_lock() calls with QEMU_LOCK_GUARD (bsc#1230915, CVE-2024-8612)

- Update version to 8.2.7
  * Full changelog here:
     https://lore.kernel.org/qemu-devel/d9ff276f-f1ba-4e90-8343-a7a0dc2bf305@tls.msk.ru/
  * Fixes:
     bsc#1229007, CVE-2024-7409
     bsc#1224132, CVE-2024-4693
  * Some backports:
     gitlab: fix logic for changing docker tag on stable branches
     ui/sdl2: set swap interval explicitly when OpenGL is enabled
     hw/intc/arm_gic: fix spurious level triggered interrupts
     hw/audio/virtio-sound: fix heap buffer overflow
     tests/docker: update debian i686 and mipsel images to bookworm
     tests/docker: remove debian-armel-cross
     hw/display/vhost-user-gpu.c: fix vhost_user_gpu_chr_read()
     crypto: check gnutls &amp; gcrypt support the requested pbkdf hash
     crypto: run qcrypto_pbkdf2_count_iters in a new thread
     softmmu/physmem: fix memory leak in dirty_memory_extend()
     target/ppc: Fix migration of CPUs with TLB_EMB TLB type
     gitlab: migrate the s390x custom machine to 22.04
     target/hppa: Fix PSW V-bit packaging in cpu_hppa_get for hppa64
     hw/audio/virtio-snd: fix invalid param check
     virtio-pci: Fix the use of an uninitialized irqfd
- Fix bsc#1231519:
  * accel/kvm: check for KVM_CAP_READONLY_MEM on VM (bsc#1231519)
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="8.2.7" release="1.1" arch="src" src="src/qemu-8.2.7-1.1.src.rpm">
          <filename>qemu-8.2.7-1.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-audio-spice-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-audio-spice-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-audio-spice-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-audio-spice-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-block-curl-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-block-curl-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-block-curl-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-block-curl-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-block-iscsi-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-block-iscsi-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-block-iscsi-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-block-iscsi-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-block-rbd-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-block-rbd-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-block-rbd-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-block-rbd-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-block-ssh-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-block-ssh-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-block-ssh-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-block-ssh-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-chardev-spice-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-chardev-spice-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-chardev-spice-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-chardev-spice-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-debugsource" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-debugsource-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-debugsource-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-guest-agent-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-guest-agent-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-guest-agent-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-guest-agent-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-img" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-img-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-img-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-img-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-img-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-img-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="8.2.7" release="1.1" arch="noarch" src="noarch/qemu-ipxe-8.2.7-1.1.noarch.rpm">
          <filename>qemu-ipxe-8.2.7-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-ksm" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-ksm-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-ksm-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-lang" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-lang-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-lang-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-pr-helper" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-pr-helper-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-pr-helper-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-pr-helper-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-pr-helper-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-pr-helper-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="8.2.71.16.3_3_ga95067eb" release="1.1" arch="noarch" src="noarch/qemu-seabios-8.2.71.16.3_3_ga95067eb-1.1.noarch.rpm">
          <filename>qemu-seabios-8.2.71.16.3_3_ga95067eb-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-tools-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-tools-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-tools-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-tools-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-tools-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-ui-opengl-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-ui-opengl-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-ui-opengl-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-ui-opengl-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="8.2.71.16.3_3_ga95067eb" release="1.1" arch="noarch" src="noarch/qemu-vgabios-8.2.71.16.3_3_ga95067eb-1.1.noarch.rpm">
          <filename>qemu-vgabios-8.2.71.16.3_3_ga95067eb-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-x86-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-x86-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-x86-debuginfo" epoch="0" version="8.2.7" release="1.1" arch="x86_64" src="x86_64/qemu-x86-debuginfo-8.2.7-1.1.x86_64.rpm">
          <filename>qemu-x86-debuginfo-8.2.7-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>84</id>
    <title>Security update for the Linux Kernel</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1738573512" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1012628" id="1012628" title="Continuous stable update tracker for Tumbleweed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1183045" id="1183045" title="mount command hangs on reserved scsi disk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215199" id="1215199" title="[trackerbug] 6.4 powerpc base kernel fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216223" id="1216223" title="L3: ibmvfc max_xfer_size is missing ref:_00D1igLOd._5005qXBPNc:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216776" id="1216776" title="kvm - qla2xxx IO errors and aborts in the host cause multipath failed devices in the guest" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220382" id="1220382" title="Partner-L3: x86/mm/ident_map: Use gbpages only where full GB page should be mapped." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221527" id="1221527" title="[SLES][Xen] Unexpected call trace pertinent to CPA detected W^X violation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221610" id="1221610" title="VUL-0: CVE-2023-52610: kernel: net/sched: act_ct: fix skb leak and crash on ooo frags" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221650" id="1221650" title="VUL-0: CVE-2024-26640: kernel: tcp: add sanity checks to rx zerocopy" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222629" id="1222629" title="VUL-0: CVE-2024-26804: kernel: net: ip_tunnel: prevent perpetual headroom growth" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223600" id="1223600" title="L3: RT kernel - IRQ appears on isolated cores when it shouldn't appear based on the irqbalance and kernel args configuration" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223848" id="1223848" title="L3: KVM passthrough disks are detected as 0 byte disks on guest" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225487" id="1225487" title="VUL-0: CVE-2023-52752: kernel: smb: client: fix use-after-free bug in cifs_debug_data_proc_show()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225812" id="1225812" title="VUL-0: CVE-2024-36953: kernel: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225903" id="1225903" title="bpf: backport of iterator and callback handling fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226003" id="1226003" title="L3: Xen refuses to boot in AMD Ryzen Pro system - ref:_00D1igLOd._500Tr64Tw1:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226507" id="1226507" title="[INTEL 15SP6 BUG][VROC] MD: Long delay for container drive removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226606" id="1226606" title="VUL-0: CVE-2024-38538: kernel: net: bridge: xmit: make sure we have at least eth header len bytes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226666" id="1226666" title="ASR signed driver does not load on SUSE" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226846" id="1226846" title="VUL-0: CVE-2024-38596: kernel: af_unix: fix data races in unix_release_sock/unix_stream_sendmsg" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226860" id="1226860" title="VUL-0: CVE-2024-38632: kernel: vfio/pci: fix potential memory leak in vfio_intx_enable()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227487" id="1227487" title="powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227694" id="1227694" title="Multiple kernel warnings when using dasd_mod.dasd=ipldev if not IPLing from DASD" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227726" id="1227726" title="NFS 4.0 Server generating NFS4ERR_BAD_SEQID on lock attempts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227819" id="1227819" title="VUL-0: CVE-2024-40983: kernel: tipc: force a dst refcount before doing decryption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227885" id="1227885" title="VUL-0: CVE-2024-40965: kernel: i2c: lpi2c: Avoid calling clk_get_rate during transfer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227890" id="1227890" title="VUL-0: CVE-2024-40973: kernel: media: mtk-vcodec: potential null pointer deference in SCP" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227962" id="1227962" title="perf fails with errors: 0x4319b368 [0x8]: failed to process type: 68 [Cannot allocate memory]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228090" id="1228090" title="Backport arm64: PCI: Extend ACS configurability" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228140" id="1228140" title="continuously growing values in /proc/sys/fs/file-nr with the linux-5.14.21-150500.55.65 kernel during special NFS load tests" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228244" id="1228244" title="[NetApp SLES15 SP6 Bug]: NVMe device inconsistency seen during repeated old NS unmap &amp; new NS map using reused NSID" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228507" id="1228507" title="VUL-0: CVE-2024-42154: kernel: tcp_metrics: validate source addr length" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228771" id="1228771" title="IPMI during the early boot is causing a panic on NVIDIA Grace Hopper nodes (Arm)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229001" id="1229001" title="VUL-0: CVE-2024-42243: kernel: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229004" id="1229004" title="VUL-0: CVE-2024-42252: kernel: closures: change BUG_ON() to WARN_ON()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229019" id="1229019" title="KVM:Starting KVM error &quot;ensure all devices within the iommu_group are bound to their vfio bus driver&quot; after kernel update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229086" id="1229086" title="mana: Fix RX buf alloc_size alignment and atomic op panic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229167" id="1229167" title="KVM: s390: fix validity interception issue when gisa is switched off" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229169" id="1229169" title="s390/sclp: Prevent release of buffer in I/O" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229289" id="1229289" title="VUL-0: CVE-2024-43835: kernel: virtio_net: Fix napi_skb_cache_put warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229334" id="1229334" title="VUL-0: CVE-2024-42265: kernel: protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229362" id="1229362" title="VUL-0: CVE-2024-42306: kernel: udf: Avoid using corrupted block bitmap buffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229363" id="1229363" title="VUL-0: CVE-2024-42305: kernel: ext4: check dot and dotdot of dx_root before making dir indexed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229364" id="1229364" title="VUL-0: CVE-2024-42304: kernel: ext4: make sure the first directory block is not a hole" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229371" id="1229371" title="VUL-0: CVE-2024-42294: kernel: block: fix deadlock between sd_remove &amp; sd_release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229380" id="1229380" title="VUL-0: CVE-2024-43832: kernel: s390/uv: Don't call folio_wait_writeback() without a folio reference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229389" id="1229389" title="VUL-0: CVE-2024-43845: kernel: udf: Fix bogus checksum computation in udf_rename()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229394" id="1229394" title="VUL-0: CVE-2024-43828: kernel: ext4: fix infinite loop when replaying fast_commit" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229429" id="1229429" title="Update Broadcom Emulex lpfc driver for SLES15 SP7 to 14.4.0.4" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229443" id="1229443" title="Partner-L3: Backport x86/kaslr fix impacting ML/HPC workloads" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229452" id="1229452" title="s390/dasd: fix error recovery leading to data corruption on ESE  devices" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229455" id="1229455" title="fs/netfs/fscache_cookie: add missing &quot;n_accesses&quot; check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229456" id="1229456" title="CVE-2024-44947: kernel: fuse: Initialize beyond-EOF page contents before setting uptodate" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229494" id="1229494" title="VUL-0: CVE-2024-43870: kernel: perf: Fix event leak upon exit" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229585" id="1229585" title="Crash due to invalid per cpu cache freelist" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229753" id="1229753" title="VUL-0: CVE-2024-43898: kernel: ext4: sanity check for NULL pointer after ext4_force_shutdown" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229764" id="1229764" title="VUL-0: CVE-2024-43890: kernel: tracing: fix overflow in get_free_elt()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229768" id="1229768" title="VUL-0: CVE-2024-43904: kernel: drm/amd/display: add null checks for 'stream' and 'plane' before dereferencing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229790" id="1229790" title="VUL-0: CVE-2024-43914: kernel: md/raid5: avoid BUG_ON() while continue reshape after reassembling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229810" id="1229810" title="VUL-0: CVE-2024-44935: kernel: sctp: Fix null-ptr-deref in reuseport_add_sock()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229899" id="1229899" title="VUL-0: CVE-2024-44944: kernel: Netfilter Conntrack Type Confusion Information Disclosure Vulnerability" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229928" id="1229928" title="Error: Unable to start qat_crypto service with XEN" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230015" id="1230015" title="VUL-0: CVE-2024-44946: kernel: kcm: Serialise kcm_sendmsg() for the same socket." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230119" id="1230119" title="[HPE Bug] SLES15 SP6 cannot be installed with DL380a Gen12 (2P, SRF-SP) + NVidia L40 GPU in slot17" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230123" id="1230123" title="fuse: use unsigned type for getxattr/listxattr size truncation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230124" id="1230124" title="fuse: fix memory leak in fuse_create_open" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230125" id="1230125" title="fuse: update stats for pages in dropped aux writeback list" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230169" id="1230169" title="VUL-0: CVE-2024-45002: kernel: rtla/osnoise: Prevent NULL dereference in error handling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230170" id="1230170" title="VUL-0: CVE-2024-45000: kernel: fs/netfs/fscache_cookie: add missing &quot;n_accesses&quot; check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230171" id="1230171" title="VUL-0: CVE-2024-44998: kernel: atm: idt77252: prevent use after free in dequeue_rx()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230173" id="1230173" title="VUL-0: CVE-2024-45005: kernel: KVM: s390: fix validity interception issue when gisa is switched off" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230174" id="1230174" title="VUL-0: CVE-2024-44948: kernel: x86/mtrr: Check if fixed MTRRs exist before saving them" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230175" id="1230175" title="VUL-0: CVE-2024-45007: kernel: char: xillybus: Don't destroy workqueue from work item running on it" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230176" id="1230176" title="VUL-0: CVE-2024-44954: kernel: ALSA: line6: Fix racy access to midibuf" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230178" id="1230178" title="VUL-0: CVE-2024-44952: kernel: driver core: Fix uevent_show() vs driver detach race" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230180" id="1230180" title="VUL-0: CVE-2024-44950: kernel: serial: sc16is7xx: fix invalid FIFO access with special register set" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230181" id="1230181" title="VUL-0: CVE-2024-44951: kernel: serial: sc16is7xx: fix TX fifo corruption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230185" id="1230185" title="VUL-0: CVE-2024-44987: kernel: ipv6: prevent UAF in ip6_send_skb()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230191" id="1230191" title="VUL-0: CVE-2024-44960: kernel: usb: gadget: core: Check for unset descriptor" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230192" id="1230192" title="VUL-0: CVE-2024-44988: kernel: net: dsa: mv88e6xxx: Fix out-of-bound access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230193" id="1230193" title="VUL-0: CVE-2024-44989: kernel: bonding: fix xfrm real_dev null pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230194" id="1230194" title="VUL-0: CVE-2024-44990: kernel: bonding: fix null pointer deref in bond_ipsec_offload_ok" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230195" id="1230195" title="VUL-0: CVE-2024-44991: kernel: tcp: prevent concurrent execution of tcp_sk_exit_batch" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230200" id="1230200" title="VUL-0: CVE-2024-44969: kernel: s390/sclp: Prevent release of buffer in I/O" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230204" id="1230204" title="VUL-0: CVE-2024-44982: kernel: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230206" id="1230206" title="VUL-0: CVE-2024-44985: kernel: ipv6: prevent possible UAF in ip6_xmit()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230207" id="1230207" title="VUL-0: CVE-2024-44961: kernel: drm/amdgpu: Forward soft recovery errors to userspace" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230209" id="1230209" title="VUL-0: CVE-2024-44970: kernel: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230211" id="1230211" title="VUL-0: CVE-2024-44971: kernel: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230213" id="1230213" title="VUL-0: CVE-2024-44962: kernel: Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230217" id="1230217" title="VUL-0: CVE-2024-44977: kernel: drm/amdgpu: Validate TA binary size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230221" id="1230221" title="VUL-0: CVE-2024-44965: kernel: x86/mm: Fix pti_clone_pgtable() alignment assumption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230224" id="1230224" title="VUL-0: CVE-2024-44967: kernel: drm/mgag200: Bind I2C lifetime to DRM device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230230" id="1230230" title="VUL-0: CVE-2024-44986: kernel: ipv6: fix possible UAF in ip6_finish_output2()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230232" id="1230232" title="VUL-0: CVE-2024-44997: kernel: net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230233" id="1230233" title="VUL-0: CVE-2024-44999: kernel: gtp: pull network headers in gtp_dev_xmit()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230240" id="1230240" title="VUL-0: CVE-2024-44984: kernel: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230244" id="1230244" title="VUL-0: CVE-2024-45001: kernel: net: mana: Fix RX buf alloc_size alignment and atomic op panic" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230245" id="1230245" title="VUL-0: CVE-2024-45003: kernel: vfs: Don't evict inode under the inode lru traversing context" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230247" id="1230247" title="VUL-0: CVE-2024-45006: kernel: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230248" id="1230248" title="VUL-0: CVE-2024-45008: kernel: Input: MT - limit max slots" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230269" id="1230269" title="VUL-0: CVE-2023-52916: kernel: media: aspeed: Fix memory overwrite if timing is 1600x900" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230270" id="1230270" title="VUL-0: CVE-2023-52915: kernel: media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230295" id="1230295" title="SLES15 SP6 - [P10][DD2.0][SHARED] - Hard lockups and Soft lockups are seen and LPAR hangs while running stress-ng (queued_spin_lock)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230340" id="1230340" title="VUL-0: CVE-2024-26759: kernel: mm/swap: fix race when skipping swapcache" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230413" id="1230413" title="[Build :35534:dtb-armv7l] ndctl create-namespace fails with new kernel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230426" id="1230426" title="SLES 15 SP6 - s390/dasd: Remove DMA alignment" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230430" id="1230430" title="VUL-0: CVE-2024-45017: kernel: net/mlx5: Fix IPsec RoCE MPV trace call" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230431" id="1230431" title="VUL-0: CVE-2024-45018: kernel: netfilter: flowtable: initialise extack before use" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230432" id="1230432" title="VUL-0: CVE-2024-45019: kernel: net/mlx5e: Take state lock during tx timeout reporter" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230433" id="1230433" title="VUL-0: CVE-2024-45020: kernel: bpf: Fix a kernel verifier crash in stacksafe()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230434" id="1230434" title="VUL-0: CVE-2024-45021: kernel: memcg_write_event_control(): fix a user-triggerable oops" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230435" id="1230435" title="VUL-0: CVE-2024-45022: kernel: mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230440" id="1230440" title="VUL-0: CVE-2024-45011: kernel: char: xillybus: Check USB endpoints when probing device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230441" id="1230441" title="VUL-0: CVE-2024-45012: kernel: nouveau/firmware: use dma non-coherent allocator" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230442" id="1230442" title="VUL-0: CVE-2024-45013: kernel: nvme: move stopping keep-alive into nvme_uninit_ctrl()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230444" id="1230444" title="VUL-0: CVE-2024-45015: kernel: drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230450" id="1230450" title="VUL-0: CVE-2024-45028: kernel: mmc: mmc_test: Fix NULL dereference on allocation failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230451" id="1230451" title="VUL-0: CVE-2024-45029: kernel: i2c: tegra: Do not mark ACPI devices as irq safe" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230454" id="1230454" title="VUL-0: CVE-2024-45026: kernel: s390/dasd: fix error recovery leading to data corruption on ESE devices" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230455" id="1230455" title="VUL-0: CVE-2024-45023: kernel: md/raid1: Fix data corruption for degraded array with slow disk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230457" id="1230457" title="VUL-0: CVE-2024-45030: kernel: igb: cope with large MAX_SKB_FRAGS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230459" id="1230459" title="VUL-0: CVE-2024-46672: kernel: wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230506" id="1230506" title="VUL-0: CVE-2024-46673: kernel: scsi: aacraid: Fix double-free on probe failure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230507" id="1230507" title="VUL-0: CVE-2024-46674: kernel: usb: dwc3: st: fix probed platform device ref count on probe error path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230511" id="1230511" title="VUL-0: CVE-2024-46694: kernel: drm/amd/display: avoid using null object of framebuffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230515" id="1230515" title="VUL-0: CVE-2024-46685: kernel: pinctrl: single: fix potential NULL dereference in pcs_get_function()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230517" id="1230517" title="VUL-0: CVE-2024-46686: kernel: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230518" id="1230518" title="VUL-0: CVE-2024-46687: kernel: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230519" id="1230519" title="VUL-0: CVE-2024-46695: kernel: selinux,smack: don't bypass permissions check in inode_setsecctx hook" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230520" id="1230520" title="VUL-0: CVE-2024-46692: kernel: firmware: qcom: scm: Mark get_wq_ctx() as atomic call" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230521" id="1230521" title="VUL-0: CVE-2024-46693: kernel: soc: qcom: pmic_glink: Fix race during initialization" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230524" id="1230524" title="VUL-0: CVE-2024-46689: kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230526" id="1230526" title="VUL-0: CVE-2024-46691: kernel: usb: typec: ucsi: Move unregister out of atomic section" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230533" id="1230533" title="VUL-0: CVE-2024-46675: kernel: usb: dwc3: core: Prevent USB core invalid event buffer address access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230535" id="1230535" title="VUL-0: CVE-2024-46676: kernel: nfc: pn533: Add poll mod list filling check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230539" id="1230539" title="VUL-0: CVE-2024-46709: kernel: drm/vmwgfx: Fix prime with external buffers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230540" id="1230540" title="VUL-0: CVE-2024-46710: kernel: drm/vmwgfx: Prevent unmapping active read buffers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230549" id="1230549" title="VUL-0: CVE-2024-46677: kernel: gtp: fix a potential NULL pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230556" id="1230556" title="VUL-0: CVE-2024-46679: kernel: ethtool: check device is present when getting link settings" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230562" id="1230562" title="s390/mm: Convert gmap_make_secure to use a folio" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230563" id="1230563" title="s390/mm: Convert make_page_secure to use a folio" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230564" id="1230564" title="s390: allow pte_offset_map_lock() to fail" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230580" id="1230580" title="VUL-0: CVE-2024-46706: kernel: tty: serial: fsl_lpuart: mark last busy before uart_add_one_port" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230582" id="1230582" title="VUL-0: CVE-2024-46707: kernel: KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230589" id="1230589" title="VUL-0: CVE-2024-46702: kernel: thunderbolt: Mark XDomain as unplugged when router is removed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230602" id="1230602" title="fscache: delete fscache_cookie_lru_timer when fscache exits to avoid  UAF" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230699" id="1230699" title="VUL-0: CVE-2024-46714: kernel: drm/amd/display: Skip wbscl_set_scaler_filter if filter is null" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230700" id="1230700" title="VUL-0: CVE-2024-46715: kernel: driver: iio: add missing checks on iio_info's callback access" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230701" id="1230701" title="VUL-0: CVE-2024-46730: kernel: drm/amd/display: Ensure array index tg_inst won't be -1" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230702" id="1230702" title="VUL-0: CVE-2024-46723: kernel: drm/amdgpu: fix ucode out-of-bounds read warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230703" id="1230703" title="VUL-0: CVE-2024-46728: kernel: drm/amd/display: Check index for aux_rd_interval before using" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230704" id="1230704" title="VUL-0: CVE-2024-46729: kernel: drm/amd/display: Fix incorrect size calculation for loop" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230705" id="1230705" title="VUL-0: CVE-2024-46725: kernel: drm/amdgpu: Fix out-of-bounds write warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230706" id="1230706" title="VUL-0: CVE-2024-46726: kernel: drm/amd/display: Ensure index calculation will not overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230709" id="1230709" title="VUL-0: CVE-2024-46731: kernel: drm/amd/pm: fix the Out-of-bounds read warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230711" id="1230711" title="VUL-0: CVE-2024-46732: kernel: drm/amd/display: Assign linear_pitch_alignment even for VM" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230712" id="1230712" title="VUL-0: CVE-2024-46722: kernel: drm/amdgpu: fix mc_data out-of-bounds read warning" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230715" id="1230715" title="VUL-0: CVE-2024-46716: kernel: dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230719" id="1230719" title="VUL-0: CVE-2024-46717: kernel: net/mlx5e: SHAMPO, Fix incorrect page release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230722" id="1230722" title="VUL-0: CVE-2024-46719: kernel: usb: typec: ucsi: Fix null pointer dereference in trace" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230724" id="1230724" title="VUL-0: CVE-2024-46720: kernel: drm/amdgpu: fix dereference after null check" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230725" id="1230725" title="VUL-0: CVE-2024-46724: kernel: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230726" id="1230726" title="VUL-0: CVE-2024-46734: kernel: btrfs: fix race between direct IO write and fsync when using same fd" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230727" id="1230727" title="VUL-0: CVE-2024-46735: kernel: ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230730" id="1230730" title="VUL-0: CVE-2024-46737: kernel: nvmet-tcp: fix kernel crash if commands allocation fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230731" id="1230731" title="VUL-0: CVE-2024-46738: kernel: VMCI: Fix use-after-free when removing resource in vmci_resource_remove()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230732" id="1230732" title="VUL-0: CVE-2024-46739: kernel: uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230747" id="1230747" title="VUL-0: CVE-2024-46744: kernel: Squashfs: sanity check symbolic link size" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230748" id="1230748" title="VUL-0: CVE-2024-46745: kernel: Input: uinput - reject requests with unreasonable number of slots" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230749" id="1230749" title="VUL-0: CVE-2024-46741: kernel: misc: fastrpc: Fix double free of 'buf' in error path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230751" id="1230751" title="VUL-0: CVE-2024-46746: kernel: HID: amd_sfh: free driver_data after destroying hid device" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230752" id="1230752" title="VUL-0: CVE-2024-46747: kernel: HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230753" id="1230753" title="VUL-0: CVE-2024-46760: kernel: wifi: rtw88: usb: schedule rx work after everything is set up" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230756" id="1230756" title="VUL-0: CVE-2024-46743: kernel: of/irq: Prevent device address out-of-bounds read in interrupt map walk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230761" id="1230761" title="VUL-0: CVE-2024-46761: kernel: pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230766" id="1230766" title="VUL-0: CVE-2024-46771: kernel: can: bcm: Remove proc entry when dev is unregistered." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230767" id="1230767" title="VUL-0: CVE-2024-46774: kernel: powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230768" id="1230768" title="VUL-0: CVE-2024-46781: kernel: nilfs2: fix missing cleanup on rollforward recovery error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230771" id="1230771" title="VUL-0: CVE-2024-46784: kernel: net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230772" id="1230772" title="VUL-0: CVE-2024-46772: kernel: drm/amd/display: Check denominator crb_pipes before used" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230775" id="1230775" title="VUL-0: CVE-2024-46776: kernel: drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230776" id="1230776" title="VUL-0: CVE-2024-46778: kernel: drm/amd/display: Check UnboundedRequestEnabled's value" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230780" id="1230780" title="VUL-0: CVE-2024-46749: kernel: Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230783" id="1230783" title="VUL-0: CVE-2024-46750: kernel: PCI: Add missing bridge lock to pci_bus_lock()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230786" id="1230786" title="VUL-0: CVE-2024-46751: kernel: btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230787" id="1230787" title="VUL-0: CVE-2024-46767: kernel: net: phy: Fix missing of_node_put() for leds" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230791" id="1230791" title="VUL-0: CVE-2024-46773: kernel: drm/amd/display: Check denominator pbn_div before used" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230794" id="1230794" title="VUL-0: CVE-2024-46752: kernel: btrfs: replace BUG_ON() with error handling at update_ref_for_cow()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230796" id="1230796" title="VUL-0: CVE-2024-46753: kernel: btrfs: handle errors from btrfs_dec_ref() properly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230802" id="1230802" title="VUL-0: CVE-2024-46755: kernel: wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230806" id="1230806" title="VUL-0: CVE-2024-46756: kernel: hwmon: (w83627ehf) Fix underflows seen when writing limit attributes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230808" id="1230808" title="VUL-0: CVE-2024-46780: kernel: nilfs2: protect references to superblock parameters exposed in sysfs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230809" id="1230809" title="VUL-0: CVE-2024-46757: kernel: hwmon: (nct6775-core) Fix underflows seen when writing limit attributes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230810" id="1230810" title="VUL-0: CVE-2024-46783: kernel: tcp_bpf: fix return value of tcp_bpf_sendmsg()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230812" id="1230812" title="VUL-0: CVE-2024-46758: kernel: hwmon: (lm95234) Fix underflows seen when writing limit attributes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230813" id="1230813" title="VUL-0: CVE-2024-46786: kernel: fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230814" id="1230814" title="VUL-0: CVE-2024-46759: kernel: hwmon: (adc128d818) Fix underflows seen when writing limit attributes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230815" id="1230815" title="VUL-0: CVE-2024-46787: kernel: userfaultfd: fix checks for huge PMDs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230821" id="1230821" title="VUL-0: CVE-2024-46791: kernel: can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230825" id="1230825" title="VUL-0: CVE-2024-46794: kernel: x86/tdx: Fix data leak in mmio_read()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230830" id="1230830" title="VUL-0: CVE-2024-46798: kernel: ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230831" id="1230831" title="VUL-0: CVE-2024-46797: kernel: powerpc/qspinlock: Fix deadlock in MCS queue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230854" id="1230854" title="xfstests btrfs/319 fails on kernel 6.4" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230948" id="1230948" title="gfs2: fatal assertion failed during fio writes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231008" id="1231008" title="cachefiles: Fix non-taking of sb_writers around set/removexattr" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231035" id="1231035" title="SLES 15 SP6 - inkernel crypto xctr(aes) alg: skcipher: failed to allocate transform for ctr(aes): -2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231120" id="1231120" title="VUL-0: CVE-2024-46822: kernel: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231146" id="1231146" title="kthread: Fix task state in kthread worker if being frozen" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231182" id="1231182" title="ceph: remove the incorrect Fw reference check when dirtying pages" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231183" id="1231183" title="cachefiles: fix dentry leak in cachefiles_open_file()" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52610" id="CVE-2023-52610" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52610" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52752" id="CVE-2023-52752" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52752" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52915" id="CVE-2023-52915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52915" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52916" id="CVE-2023-52916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52916" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26640" id="CVE-2024-26640" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26640" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26759" id="CVE-2024-26759" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26759" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26804" id="CVE-2024-26804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26804" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36953" id="CVE-2024-36953" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36953" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38538" id="CVE-2024-38538" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38538" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38596" id="CVE-2024-38596" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38596" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38632" id="CVE-2024-38632" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38632" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40965" id="CVE-2024-40965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40965" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40973" id="CVE-2024-40973" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40973" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40983" id="CVE-2024-40983" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40983" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42154" id="CVE-2024-42154" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42154" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42243" id="CVE-2024-42243" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42243" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42252" id="CVE-2024-42252" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42252" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42265" id="CVE-2024-42265" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42265" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42294" id="CVE-2024-42294" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42294" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42304" id="CVE-2024-42304" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42304" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42305" id="CVE-2024-42305" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42305" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42306" id="CVE-2024-42306" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-42306" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43828" id="CVE-2024-43828" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43828" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43832" id="CVE-2024-43832" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43832" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43835" id="CVE-2024-43835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43835" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43845" id="CVE-2024-43845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43845" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43870" id="CVE-2024-43870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43870" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43890" id="CVE-2024-43890" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43890" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43898" id="CVE-2024-43898" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43898" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43904" id="CVE-2024-43904" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43904" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43914" id="CVE-2024-43914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43914" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44935" id="CVE-2024-44935" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44935" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44944" id="CVE-2024-44944" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44944" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44946" id="CVE-2024-44946" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44946" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44947" id="CVE-2024-44947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44947" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44948" id="CVE-2024-44948" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44948" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44950" id="CVE-2024-44950" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44950" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44951" id="CVE-2024-44951" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44951" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44952" id="CVE-2024-44952" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44952" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44954" id="CVE-2024-44954" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44954" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44960" id="CVE-2024-44960" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44960" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44961" id="CVE-2024-44961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44961" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44962" id="CVE-2024-44962" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44962" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44965" id="CVE-2024-44965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44965" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44967" id="CVE-2024-44967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44967" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44969" id="CVE-2024-44969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44969" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44970" id="CVE-2024-44970" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44970" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44971" id="CVE-2024-44971" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44971" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44977" id="CVE-2024-44977" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44977" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44982" id="CVE-2024-44982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44982" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44984" id="CVE-2024-44984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44984" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44985" id="CVE-2024-44985" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44985" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44986" id="CVE-2024-44986" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44986" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44987" id="CVE-2024-44987" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44987" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44988" id="CVE-2024-44988" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44988" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44989" id="CVE-2024-44989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44989" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44990" id="CVE-2024-44990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44990" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44991" id="CVE-2024-44991" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44991" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44997" id="CVE-2024-44997" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44997" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44998" id="CVE-2024-44998" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44998" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44999" id="CVE-2024-44999" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44999" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45000" id="CVE-2024-45000" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45000" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45001" id="CVE-2024-45001" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45001" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45002" id="CVE-2024-45002" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45002" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45003" id="CVE-2024-45003" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45003" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45005" id="CVE-2024-45005" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45005" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45006" id="CVE-2024-45006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45006" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45007" id="CVE-2024-45007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45007" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45008" id="CVE-2024-45008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45008" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45011" id="CVE-2024-45011" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45011" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45012" id="CVE-2024-45012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45012" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45013" id="CVE-2024-45013" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45013" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45015" id="CVE-2024-45015" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45015" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45017" id="CVE-2024-45017" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45017" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45018" id="CVE-2024-45018" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45018" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45019" id="CVE-2024-45019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45019" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45020" id="CVE-2024-45020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45020" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45021" id="CVE-2024-45021" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45021" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45022" id="CVE-2024-45022" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45022" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45023" id="CVE-2024-45023" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45023" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45026" id="CVE-2024-45026" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45026" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45028" id="CVE-2024-45028" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45028" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45029" id="CVE-2024-45029" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45029" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45030" id="CVE-2024-45030" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45030" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46672" id="CVE-2024-46672" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46672" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46673" id="CVE-2024-46673" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46673" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46674" id="CVE-2024-46674" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46674" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46675" id="CVE-2024-46675" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46675" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46676" id="CVE-2024-46676" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46676" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46677" id="CVE-2024-46677" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46677" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46679" id="CVE-2024-46679" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46679" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46685" id="CVE-2024-46685" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46685" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46686" id="CVE-2024-46686" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46686" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46687" id="CVE-2024-46687" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46687" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46689" id="CVE-2024-46689" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46689" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46691" id="CVE-2024-46691" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46691" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46692" id="CVE-2024-46692" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46692" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46693" id="CVE-2024-46693" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46693" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46694" id="CVE-2024-46694" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46694" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46695" id="CVE-2024-46695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46695" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46702" id="CVE-2024-46702" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46702" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46706" id="CVE-2024-46706" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46706" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46707" id="CVE-2024-46707" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46707" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46709" id="CVE-2024-46709" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46709" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46710" id="CVE-2024-46710" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46710" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46714" id="CVE-2024-46714" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46714" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46715" id="CVE-2024-46715" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46715" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46716" id="CVE-2024-46716" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46716" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46717" id="CVE-2024-46717" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46717" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46719" id="CVE-2024-46719" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46719" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46720" id="CVE-2024-46720" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46720" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46722" id="CVE-2024-46722" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46722" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46723" id="CVE-2024-46723" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46723" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46724" id="CVE-2024-46724" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46724" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46725" id="CVE-2024-46725" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46725" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46726" id="CVE-2024-46726" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46726" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46728" id="CVE-2024-46728" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46728" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46729" id="CVE-2024-46729" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46729" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46730" id="CVE-2024-46730" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46730" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46731" id="CVE-2024-46731" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46731" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46732" id="CVE-2024-46732" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46732" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46734" id="CVE-2024-46734" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46734" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46735" id="CVE-2024-46735" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46735" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46737" id="CVE-2024-46737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46737" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46738" id="CVE-2024-46738" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46738" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46739" id="CVE-2024-46739" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46739" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46741" id="CVE-2024-46741" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46741" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46743" id="CVE-2024-46743" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46743" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46744" id="CVE-2024-46744" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46744" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46745" id="CVE-2024-46745" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46745" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46746" id="CVE-2024-46746" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46746" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46747" id="CVE-2024-46747" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46747" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46749" id="CVE-2024-46749" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46749" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46750" id="CVE-2024-46750" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46750" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46751" id="CVE-2024-46751" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46751" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46752" id="CVE-2024-46752" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46752" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46753" id="CVE-2024-46753" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46753" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46755" id="CVE-2024-46755" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46755" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46756" id="CVE-2024-46756" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46756" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46757" id="CVE-2024-46757" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46757" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46758" id="CVE-2024-46758" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46758" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46759" id="CVE-2024-46759" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46759" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46760" id="CVE-2024-46760" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46760" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46761" id="CVE-2024-46761" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46761" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46767" id="CVE-2024-46767" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46767" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46771" id="CVE-2024-46771" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46771" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46772" id="CVE-2024-46772" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46772" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46773" id="CVE-2024-46773" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46773" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46774" id="CVE-2024-46774" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46774" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46776" id="CVE-2024-46776" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46776" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46778" id="CVE-2024-46778" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46778" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46780" id="CVE-2024-46780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46780" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46781" id="CVE-2024-46781" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46781" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46783" id="CVE-2024-46783" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46783" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46784" id="CVE-2024-46784" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46784" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46786" id="CVE-2024-46786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46786" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46787" id="CVE-2024-46787" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46787" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46791" id="CVE-2024-46791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46791" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46794" id="CVE-2024-46794" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46794" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46797" id="CVE-2024-46797" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46797" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46798" id="CVE-2024-46798" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46798" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46822" id="CVE-2024-46822" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46822" type="cve" />
      <reference href="https://jira.suse.com/browse/PED-10954" id="PED-10954" title="https://jira.suse.com/browse/PED-10954" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-1706" id="PED-1706" title="https://jira.suse.com/browse/PED-1706" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-9899" id="PED-9899" title="https://jira.suse.com/browse/PED-9899" type="jira" />
    </references>
    <description>

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

- CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610).
- CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
- CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269).
- CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650).
- CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340).
- CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629).
- CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606).
- CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846).
- CVE-2024-40965: i2c: lpi2c: Avoid calling clk_get_rate during transfer (bsc#1227885).
- CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890).
- CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819).
- CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507).
- CVE-2024-42243: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (bsc#1229001).
- CVE-2024-42252: closures: Change BUG_ON() to WARN_ON() (bsc#1229004).
- CVE-2024-42265: protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions (bsc#1229334).
- CVE-2024-42294: block: fix deadlock between sd_remove &amp; sd_release (bsc#1229371).
- CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364).
- CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363).
- CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362).
- CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394).
- CVE-2024-43832: s390/uv: Do not call folio_wait_writeback() without a folio reference (bsc#1229380).
- CVE-2024-43845: udf: Fix bogus checksum computation in udf_rename() (bsc#1229389).
- CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764).
- CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753).
- CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790).
- CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810).
- CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899).
- CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015).
- CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180).
- CVE-2024-44951: serial: sc16is7xx: fix TX fifo corruption (bsc#1230181).
- CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209).
- CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211).
- CVE-2024-44984: bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (bsc#1230240).
- CVE-2024-44985: ipv6: prevent possible UAF in ip6_xmit() (bsc#1230206).
- CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
- CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192).
- CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193).
- CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194).
- CVE-2024-44991: tcp: prevent concurrent execution of tcp_sk_exit_batch (bsc#1230195).
- CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171).
- CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233).
- CVE-2024-45002: rtla/osnoise: Prevent NULL dereference in error handling (bsc#1230169).
- CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245).
- CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442).
- CVE-2024-45017: net/mlx5: Fix IPsec RoCE MPV trace call (bsc#1230430).
- CVE-2024-45018: netfilter: flowtable: initialise extack before use (bsc#1230431).
- CVE-2024-45019: net/mlx5e: Take state lock during tx timeout reporter (bsc#1230432).
- CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434).
- CVE-2024-45022: mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 (bsc#1230435).
- CVE-2024-45023: md/raid1: Fix data corruption for degraded array with slow disk (bsc#1230455).
- CVE-2024-45029: i2c: tegra: Do not mark ACPI devices as irq safe (bsc#1230451).
- CVE-2024-45030: igb: cope with large MAX_SKB_FRAGS (bsc#1230457).
- CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506).
- CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549).
- CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556).
- CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517).
- CVE-2024-46687: btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk() (bsc#1230518).
- CVE-2024-46691: usb: typec: ucsi: Move unregister out of atomic section (bsc#1230526).
- CVE-2024-46692: firmware: qcom: scm: Mark get_wq_ctx() as atomic call (bsc#1230520).
- CVE-2024-46693: kABI workaround for soc-qcom pmic_glink changes (bsc#1230521).
- CVE-2024-46710: drm/vmwgfx: Prevent unmapping active read buffers (bsc#1230540).
- CVE-2024-46717: net/mlx5e: SHAMPO, Fix incorrect page release (bsc#1230719).
- CVE-2024-46729: drm/amd/display: Fix incorrect size calculation for loop (bsc#1230704).
- CVE-2024-46735: ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery() (bsc#1230727).
- CVE-2024-46743: of/irq: Prevent device address out-of-bounds read in interrupt map walk (bsc#1230756).
- CVE-2024-46751: btrfs: do not BUG_ON() when 0 reference count at btrfs_lookup_extent_info() (bsc#1230786).
- CVE-2024-46752: btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() (bsc#1230794).
- CVE-2024-46753: btrfs: handle errors from btrfs_dec_ref() properly (bsc#1230796).
- CVE-2024-46772: drm/amd/display: Check denominator crb_pipes before used (bsc#1230772).
- CVE-2024-46783: tcp_bpf: fix return value of tcp_bpf_sendmsg() (bsc#1230810).
- CVE-2024-46787: userfaultfd: fix checks for huge PMDs (bsc#1230815).
- CVE-2024-46794: x86/tdx: Fix data leak in mmio_read() (bsc#1230825).
- CVE-2024-46822: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (bsc#1231120).

The following non-security bugs were fixed:

- ABI: testing: fix admv8818 attr description (git-fixes).
- ACPI: CPPC: Add helper to get the highest performance value (stable-fixes).
- ACPI: CPPC: Fix MASK_VAL() usage (git-fixes).
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() (git-fixes).
- ACPI: processor: Fix memory leaks in error paths of processor_add() (stable-fixes).
- ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() (stable-fixes).
- ACPI: sysfs: validate return type of _STR method (git-fixes).
- ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE (stable-fixes).
- ACPICA: executer/exsystem: Do not nag user about every Stall() violating the spec (git-fixes).
- ALSA: control: Apply sanity check of input values for user elements (stable-fixes).
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices (stable-fixes).
- ALSA: hda/realtek - Fix inactive headset mic jack for ASUS Vivobook 15 X1504VAP (stable-fixes).
- ALSA: hda/realtek: Enable Mute Led for HP Victus 15-fb1xxx (stable-fixes).
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx (stable-fixes).
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145 (stable-fixes).
- ALSA: hda/realtek: extend quirks for Clevo V5[46]0 (stable-fixes).
- ALSA: hda: Add input value sanity checks to HDMI channel map controls (stable-fixes).
- ALSA: hda: add HDMI codec ID for Intel PTL (stable-fixes).
- ALSA: hda: cs35l41: fix module autoloading (git-fixes).
- ARM: 9406/1: Fix callchain_trace() return value (git-fixes).
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK) (stable-fixes).
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read() (git-fixes).
- ASoC: cs42l42: Convert comma to semicolon (git-fixes).
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object (git-fixes).
- ASoC: intel: fix module autoloading (stable-fixes).
- ASoC: meson: Remove unused declartion in header file (git-fixes).
- ASoC: meson: axg-card: fix 'use-after-free' (git-fixes).
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error (git-fixes).
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error (git-fixes).
- ASoC: soc-ac97: Fix the incorrect description (git-fixes).
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode (git-fixes).
- ASoC: tas2781-i2c: Get the right GPIO line (git-fixes).
- ASoC: tda7419: fix module autoloading (stable-fixes).
- ASoC: tegra: Fix CBB error during probe() (git-fixes).
- ASoC: topology: Properly initialize soc_enum values (stable-fixes).
- ASoc: SOF: topology: Clear SOF link platform name upon unload (git-fixes).
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment (stable-fixes).
- Bluetooth: MGMT: Ignore keys being loaded with invalid type (git-fixes).
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush() (stable-fixes).
- Bluetooth: btusb: Fix not handling ZPL/short-transfer (git-fixes).
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED (git-fixes).
- Bluetooth: hci_event: Use HCI error defines instead of magic values (stable-fixes).
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (stable-fixes).
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL (git-fixes).
- Detect memory allocation failure in annotated_source__alloc_histograms (bsc#1227962).
- Documentation: ioctl: document 0x07 ioctl code (git-fixes).
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic (git-fixes).
- Drivers: hv: vmbus: Fix the misplaced function description (git-fixes).
- Drop mm patches that caused regressions (bsc#1230413)
- Enable livepatching related packages on -RT (jsc#PED-1706)
- HID: amd_sfh: free driver_data after destroying hid device (stable-fixes).
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (stable-fixes).
- HID: multitouch: Add support for GT7868Q (stable-fixes).
- HID: wacom: Do not warn about dropped packets for first packet (git-fixes).
- HID: wacom: Support sequence numbers smaller than 16-bit (git-fixes).
- IB/core: Fix ib_cache_setup_one error flow cleanup (git-fixes)
- Input: adp5588-keys - fix check on return code (git-fixes).
- Input: ads7846 - ratelimit the spi_sync error message (stable-fixes).
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update (stable-fixes).
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync (git-fixes).
- Input: ps2-gpio - use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).
- Input: synaptics - enable SMBus for HP Elitebook 840 G2 (stable-fixes).
- Input: tsc2004/5 - do not hard code interrupt trigger (git-fixes).
- Input: tsc2004/5 - fix reset handling on probe (git-fixes).
- Input: tsc2004/5 - use device core to create driver-specific device attributes (git-fixes).
- Input: uinput - reject requests with unreasonable number of slots (stable-fixes).
- KEYS: prevent NULL pointer dereference in find_asymmetric_key() (git-fixes).
- KVM: SVM: Do not advertise Bus Lock Detect to guest if SVM support is missing (git-fixes).
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE (git-fixes).
- KVM: arm64: Block unsafe FF-A calls from the host (git-fixes).
- KVM: arm64: Disallow copying MTE to guest memory while KVM is dirty logging (git-fixes).
- KVM: arm64: Do not pass a TLBI level hint when zapping table entries (git-fixes).
- KVM: arm64: Do not re-initialize the KVM lock (git-fixes).
- KVM: arm64: Invalidate EL1&amp;0 TLB entries for all VMIDs in nvhe hyp init (git-fixes).
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (git-fixes).
- KVM: arm64: Release pfn, i.e. put page, if copying MTE tags hits ZONE_DEVICE (git-fixes).
- KVM: arm64: nvhe: Ignore SVE hint in SMCCC function ID (git-fixes).
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (git-fixes).
- KVM: x86: Acquire kvm-&gt;srcu when handling KVM_SET_VCPU_EVENTS (git-fixes).
- Merge branch 'ALP-current' (0e26fa94003b) into 'ALP-current-RT'
- Move fixes into sorted section (bsc#1230119)
- Move s390 kabi patch into the kabi section
- Move upstreamed SCSI patches into sorted section
- Move upstreamed input patch into sorted section
- Move upstreamed kaslr patch into sorted section
- Move upstreamed nvme patches into sorted section
- NFS: never reuse a NFSv4.0 lock-owner (bsc#1227726).
- NFSD: Fix frame size warning in svc_export_parse() (git-fixes).
- NFSD: Rewrite synopsis of nfsd_percpu_counters_init() (git-fixes).
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations (git-fixes).
- No -rt specific changes this merge.
- PCI: Add missing bridge lock to pci_bus_lock() (stable-fixes).
- PCI: Wait for Link before restoring Downstream Buses (git-fixes).
- PCI: al: Check IORESOURCE_BUS existence during probe (stable-fixes).
- PCI: dra7xx: Fix error handling when IRQ request fails in probe (git-fixes).
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ (git-fixes).
- PCI: dwc: Expose dw_pcie_ep_exit() to module (git-fixes).
- PCI: imx6: Fix missing call to phy_power_off() in error handling (git-fixes).
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (stable-fixes).
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk() (git-fixes).
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() (git-fixes).
- PCI: qcom-ep: Enable controller resources like PHY only after refclk is available (git-fixes).
- PCI: xilinx-nwl: Clean up clock on probe failure/removal (git-fixes).
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler (git-fixes).
- PKCS#7: Check codeSigning EKU of certificates in PKCS#7 (bsc#1226666).
- RDMA/core: Remove unused declaration rdma_resolve_ip_route() (git-fixes)
- RDMA/cxgb4: Added NULL check for lookup_atid (git-fixes)
- RDMA/efa: Properly handle unexpected AQ completions (git-fixes)
- RDMA/erdma: Return QP state in erdma_query_qp (git-fixes)
- RDMA/hns: Do not modify rq next block addr in HIP09 QPC (git-fixes)
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS (git-fixes)
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 (git-fixes)
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler (git-fixes)
- RDMA/hns: Fix ah error counter in sw stat not increasing (git-fixes)
- RDMA/hns: Fix restricted __le16 degrades to integer issue (git-fixes)
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (git-fixes)
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range() (git-fixes)
- RDMA/hns: Optimize hem allocation performance (git-fixes)
- RDMA/irdma: fix error message in irdma_modify_qp_roce() (git-fixes)
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (git-fixes)
- RDMA/mlx5: Drop redundant work canceling from clean_keys() (git-fixes)
- RDMA/mlx5: Fix MR cache temp entries cleanup (git-fixes)
- RDMA/mlx5: Fix counter update on MR cache mkey creation (git-fixes)
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache (git-fixes)
- RDMA/mlx5: Obtain upper net device only when needed (git-fixes)
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds (git-fixes)
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer (git-fixes)
- Replace git-fixes tag by bsc#1226507, patches.suse/md-Don-t-wait-for-MD_RECOVERY_NEEDED-for-HOT_REMOVE_DISK-ioctl-a1fd.patch (bsc#1226507).
- Resort io_uring kABI patches These ended up in the wrong section. Push them to the right place, next to the other io_uring kabi patches.
- Restore dropped fields for bluetooth MGMT/SMP structs (git-fixes).
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" (git-fixes).
- Revert "PCI: Extend ACS configurability (bsc#1228090)." (bsc#1229019) This reverts commit 571e4310e81312c847a5caee7e45e66aeea2a169. It breaks ACS on certain platforms. Even 6.11 is affected. So drop for now and investigate.
- Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs" (stable-fixes).
- Revert "media: tuners: fix error return code of hybrid_tuner_request_state()" (git-fixes).
- Revert "mm, kmsan: fix infinite recursion due to RCU critical section" This reverts commit 16ad73a9f4c2888f3bc28513f5e9a88d753f8741.
- Revert "mm/sparsemem: fix race in accessing memory_section-&gt;usage" This reverts commit 6aa8957889611fbe7f06353f917cfb3d9620a680.
- Revert "mm: prevent derefencing NULL ptr in pfn_section_valid()" This reverts commit 35f619d3c421219e07bc89d2d6a37fbff25519fe.
- Split kabi part of dm_blk_ioctl-implement-path-failover-for-SG_IO.patch
- Squashfs: sanity check symbolic link size (git-fixes).
- USB: class: CDC-ACM: fix race between get_serial and set_serial (git-fixes).
- USB: serial: kobil_sct: restore initial terminal settings (git-fixes).
- USB: serial: option: add MeiG Smart SRM825L (git-fixes).
- USB: serial: option: add MeiG Smart SRM825L (stable-fixes).
- USB: serial: pl2303: add device id for Macrosilicon MS3020 (stable-fixes).
- USB: usbtmc: prevent kernel-usb-infoleak (git-fixes).
- Update patches.suse/af_unix-Fix-data-races-around-sk-sk_shutdown.patch (git-fixes bsc#1226846).
- Update patches.suse/gfs2-Fix-NULL-pointer-dereference-in-gfs2_log_flush.patch (bsc#1230948)
- Update patches.suse/powerpc-pseries-make-max-polling-consistent-for-long.patch (bsc#1215199 jsc#PED-10954).
- Update patches.suse/security-integrity-fix-pointer-to-ESL-data-and-.patch (bsc#1012628 jsc#PED-5085 jsc#PED-10954).
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (git-fixes).
- afs: Do not cross .backup mountpoint from backup volume (git-fixes).
- afs: Revert "afs: Hide silly-rename files from userspace" (git-fixes).
- arm64/mm: Modify range-based tlbi to decrement scale (bsc#1229585)
- arm64/mm: Update tlb invalidation routines for FEAT_LPA2 (bsc#1229585)
- arm64: acpi: Move get_cpu_for_acpi_id() to a header (git-fixes).
- arm64: dts: allwinner: h616: Add r_i2c pinctrl nodes (git-fixes).
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB (git-fixes).
- arm64: dts: imx8-ss-dma: Fix adc0 closing brace location (git-fixes).
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity (git-fixes).
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1 (git-fixes).
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency (git-fixes).
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E (git-fixes).
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma (git-fixes).
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma (git-fixes).
- arm64: signal: Fix some under-bracketed UAPI macros (git-fixes).
- arm64: tlb: Allow range operation for MAX_TLBI_RANGE_PAGES (bsc#1229585)
- arm64: tlb: Fix TLBI RANGE operand (bsc#1229585)
- arm64: tlb: Improve __TLBI_VADDR_RANGE() (bsc#1229585)
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting (git-fixes).
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data (git-fixes).
- ata: libata: Fix memory leak for error path in ata_host_alloc() (git-fixes).
- ata: pata_macio: Use WARN instead of BUG (stable-fixes).
- blacklist.conf: ("KVM: arm64: Use TLBI_TTL_UNKNOWN in __kvm_tlb_flush_vmid_range()") (bsc#1229585)
- blk-mq: add helper for checking if one CPU is mapped to specified hctx (bsc#1223600).
- blk-mq: do not schedule block kworker on isolated CPUs (bsc#1223600).
- bpf, events: Use prog to emit ksymbol event for main program (git-fixes).
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (git-fixes).
- btrfs: fix race between direct IO write and fsync when using same fd (git-fixes).
- btrfs: send: allow cloning non-aligned extent if it ends at i_size (bsc#1230854).
- bus: integrator-lm: fix OF node leak in probe() (git-fixes).
- cachefiles: Fix non-taking of sb_writers around set/removexattr (bsc#1231008).
- cachefiles: fix dentry leak in cachefiles_open_file() (bsc#1231183).
- can: bcm: Clear bo-&gt;bcm_proc_read after remove_proc_entry() (git-fixes).
- can: bcm: Remove proc entry when dev is unregistered (git-fixes).
- can: j1939: use correct function name in comment (git-fixes).
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR (stable-fixes).
- can: m_can: Release irq on error in m_can_open (git-fixes).
- can: m_can: enable NAPI before enabling interrupts (git-fixes).
- can: m_can: m_can_close(): stop clocks after device has been shut down (git-fixes).
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open (git-fixes).
- can: mcp251xfd: clarify the meaning of timestamp (stable-fixes).
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode (git-fixes).
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function (stable-fixes).
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration (stable-fixes).
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop() (stable-fixes).
- can: mcp251xfd: properly indent labels (stable-fixes).
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd (stable-fixes).
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum (stable-fixes).
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller (git-fixes).
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller (stable-fixes).
- ceph: remove the incorrect Fw reference check when dirtying pages (bsc#1231182).
- clk: Add a devm variant of clk_rate_exclusive_get() (bsc#1227885).
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get() (bsc#1227885).
- clk: qcom: clk-alpha-pll: Fix the pll post div mask (git-fixes).
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API (git-fixes).
- clk: qcom: clk-alpha-pll: Fix zonda set_rate failure when PLL is disabled (git-fixes).
- clk: qcom: gcc-sc8280xp: do not use parking clk_ops for QUPs (git-fixes).
- clk: qcom: gcc-sm8550: Do not park the USB RCG at registration time (git-fixes).
- clk: qcom: gcc-sm8550: Do not use parking clk_ops for QUPs (git-fixes).
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs (git-fixes).
- clk: ti: dra7-atl: Fix leak of of_nodes (git-fixes).
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime (git-fixes).
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX (git-fixes).
- clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init() (git-fixes).
- cpufreq: amd-pstate: Enable amd-pstate preferred core support (stable-fixes).
- cpufreq: amd-pstate: fix the highest frequency issue which limits performance (git-fixes).
- cpufreq: scmi: Avoid overflow of target_freq in fast switch (stable-fixes).
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately (git-fixes).
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure (git-fixes).
- crypto: ccp - do not request interrupt on cmd completion when irqs disabled (git-fixes).
- crypto: iaa - Fix potential use after free bug (git-fixes).
- crypto: qat - fix unintentional re-enabling of error interrupts (stable-fixes).
- crypto: xor - fix template benchmarking (git-fixes).
- cxl/core: Fix incorrect vendor debug UUID define (git-fixes).
- cxl/pci: Fix to record only non-zero ranges (git-fixes).
- devres: Initialize an uninitialized struct member (stable-fixes).
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler (git-fixes).
- dma-debug: avoid deadlock between dma debug vs printk and netconsole (stable-fixes).
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor (stable-fixes).
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks (stable-fixes).
- driver core: Fix a potential null-ptr-deref in module_add_driver() (git-fixes).
- driver core: Fix error handling in driver API device_rename() (git-fixes).
- driver: iio: add missing checks on iio_info's callback access (stable-fixes).
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (git-fixes).
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (git-fixes).
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind() (git-fixes).
- drm/amd/amdgpu: Check tbo resource pointer (stable-fixes).
- drm/amd/amdgpu: Properly tune the size of struct (git-fixes).
- drm/amd/display: Add array index check for hdcp ddc access (stable-fixes).
- drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func (git-fixes).
- drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing (stable-fixes).
- drm/amd/display: Assign linear_pitch_alignment even for VM (stable-fixes).
- drm/amd/display: Avoid overflow from uint32_t to uint8_t (stable-fixes).
- drm/amd/display: Avoid race between dcn10_set_drr() and dc_state_destruct() (git-fixes).
- drm/amd/display: Check BIOS images before it is used (stable-fixes).
- drm/amd/display: Check HDCP returned status (stable-fixes).
- drm/amd/display: Check UnboundedRequestEnabled's value (stable-fixes).
- drm/amd/display: Check denominator pbn_div before used (stable-fixes).
- drm/amd/display: Check gpio_id before used as array index (stable-fixes).
- drm/amd/display: Check index for aux_rd_interval before using (stable-fixes).
- drm/amd/display: Check msg_id before processing transcation (stable-fixes).
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] (stable-fixes).
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX (stable-fixes).
- drm/amd/display: Defer handling mst up request in resume (stable-fixes).
- drm/amd/display: Disable error correction if it's not supported (stable-fixes).
- drm/amd/display: Do not use fsleep for PSR exit waits on dmub replay (stable-fixes).
- drm/amd/display: Ensure array index tg_inst won't be -1 (stable-fixes).
- drm/amd/display: Ensure index calculation will not overflow (stable-fixes).
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create (stable-fixes).
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within decide_fallback_link_setting_max_bw_policy (stable-fixes).
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within construct_integrated_info (stable-fixes).
- drm/amd/display: Fix FEC_READY write on DP LT (stable-fixes).
- drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box (stable-fixes).
- drm/amd/display: Fix pipe addition logic in calc_blocks_to_ungate DCN35 (stable-fixes).
- drm/amd/display: Handle the case which quad_part is equal 0 (stable-fixes).
- drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection (stable-fixes).
- drm/amd/display: Replace dm_execute_dmub_cmd with dc_wake_and_execute_dmub_cmd (git-fixes).
- drm/amd/display: Run DC_LOG_DC after checking link-&gt;link_enc (stable-fixes).
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration (stable-fixes).
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null (stable-fixes).
- drm/amd/display: Solve mst monitors blank out problem after resume (git-fixes).
- drm/amd/display: Spinlock before reading event (stable-fixes).
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (stable-fixes).
- drm/amd/display: Wake DMCUB before sending a command for replay feature (stable-fixes).
- drm/amd/display: added NULL check at start of dc_validate_stream (stable-fixes).
- drm/amd/display: handle nulled pipe context in DCE110's set_drr() (git-fixes).
- drm/amd/display: use preferred link settings for dp signal only (stable-fixes).
- drm/amd/pm: Fix negative array index read (stable-fixes).
- drm/amd/pm: check negtive return for table entries (stable-fixes).
- drm/amd/pm: check specific index for aldebaran (stable-fixes).
- drm/amd/pm: check specific index for smu13 (stable-fixes).
- drm/amd/pm: fix the Out-of-bounds read warning (stable-fixes).
- drm/amd/pm: fix uninitialized variable warning (stable-fixes).
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr (stable-fixes).
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt (stable-fixes).
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr (stable-fixes).
- drm/amd/pm: fix warning using uninitialized value of max_vid_step (stable-fixes).
- drm/amd: Add gfx12 swizzle mode defs (stable-fixes).
- drm/amdgpu/atomfirmware: Silence UBSAN warning (stable-fixes).
- drm/amdgpu/display: handle gfx12 in amdgpu_dm_plane_format_mod_supported (stable-fixes).
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs (stable-fixes).
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc (stable-fixes).
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response (stable-fixes).
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10 (stable-fixes).
- drm/amdgpu/swsmu: always force a state reprogram on init (stable-fixes).
- drm/amdgpu: Fix get each xcp macro (git-fixes).
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (stable-fixes).
- drm/amdgpu: Fix out-of-bounds write warning (stable-fixes).
- drm/amdgpu: Fix smatch static checker warning (stable-fixes).
- drm/amdgpu: Fix the uninitialized variable warning (stable-fixes).
- drm/amdgpu: Fix the warning division or modulo by zero (stable-fixes).
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr (stable-fixes).
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_info_ioctl (stable-fixes).
- drm/amdgpu: Handle sg size limit for contiguous allocation (stable-fixes).
- drm/amdgpu: Set no_hw_access when VF request full GPU fails (stable-fixes).
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb (stable-fixes).
- drm/amdgpu: add lock in kfd_process_dequeue_from_device (stable-fixes).
- drm/amdgpu: add missing error handling in function amdgpu_gmc_flush_gpu_tlb_pasid (stable-fixes).
- drm/amdgpu: add skip_hw_access checks for sriov (stable-fixes).
- drm/amdgpu: align pp_power_profile_mode with kernel docs (stable-fixes).
- drm/amdgpu: avoid reading vf2pf info size from FB (stable-fixes).
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 (stable-fixes).
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts (stable-fixes).
- drm/amdgpu: fix a possible null pointer dereference (git-fixes).
- drm/amdgpu: fix contiguous handling for IB parsing v2 (git-fixes).
- drm/amdgpu: fix dereference after null check (stable-fixes).
- drm/amdgpu: fix mc_data out-of-bounds read warning (stable-fixes).
- drm/amdgpu: fix overflowed array index read warning (stable-fixes).
- drm/amdgpu: fix overflowed constant warning in mmhub_set_clockgating() (stable-fixes).
- drm/amdgpu: fix the waring dereferencing hive (stable-fixes).
- drm/amdgpu: fix ucode out-of-bounds read warning (stable-fixes).
- drm/amdgpu: fix uninitialized scalar variable warning (stable-fixes).
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes (stable-fixes).
- drm/amdgpu: properly handle vbios fake edid sizing (git-fixes).
- drm/amdgpu: reject gang submit on reserved VMIDs (stable-fixes).
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4 (stable-fixes).
- drm/amdgpu: update type of buf size to u32 for eeprom functions (stable-fixes).
- drm/amdgu: fix Unintentional integer overflow for mall size (stable-fixes).
- drm/amdkfd: Check debug trap enable before write dbg_ev_file (stable-fixes).
- drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device (stable-fixes).
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid() (git-fixes).
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (stable-fixes).
- drm/drm-bridge: Drop conditionals around of_node pointers (stable-fixes).
- drm/fb-helper: Do not schedule_work() to flush frame buffer during panic() (stable-fixes).
- drm/gpuvm: fix missing dependency to DRM_EXEC (git-fixes).
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused (git-fixes).
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused (git-fixes).
- drm/i915/guc: prevent a possible int overflow in wq offsets (git-fixes).
- drm/i915: Do not attempt to load the GSC multiple times (git-fixes).
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process (stable-fixes).
- drm/mediatek: Set sensible cursor width/height values to fix crash (stable-fixes).
- drm/mediatek: ovl_adaptor: Add missing of_node_put() (git-fixes).
- drm/meson: plane: Add error handling (stable-fixes).
- drm/msm/a5xx: disable preemption in submits by default (git-fixes).
- drm/msm/a5xx: fix races in preemption evaluation stage (git-fixes).
- drm/msm/a5xx: properly clear preemption records on resume (git-fixes).
- drm/msm/a5xx: workaround early ring-buffer emptiness check (git-fixes).
- drm/msm/adreno: Fix error return if missing firmware-name (stable-fixes).
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450 (git-fixes).
- drm/msm: Fix incorrect file name output in adreno_request_fw() (git-fixes).
- drm/msm: fix %s null argument error (git-fixes).
- drm/nouveau/fb: restore init() for ramgp102 (git-fixes).
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets (git-fixes).
- drm/radeon: fix null pointer dereference in radeon_add_common_modes (git-fixes).
- drm/radeon: properly handle vbios fake edid sizing (git-fixes).
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode (git-fixes).
- drm/rockchip: vop: Allow 4096px width scaling (git-fixes).
- drm/rockchip: vop: clear DMA stop bit on RK3066 (git-fixes).
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066 (git-fixes).
- drm/stm: Fix an error handling path in stm_drm_platform_probe() (git-fixes).
- drm/stm: ltdc: check memory returned by devm_kzalloc() (git-fixes).
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl (git-fixes).
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get (git-fixes).
- drm: komeda: Fix an issue related to normalized zpos (stable-fixes).
- drm: omapdrm: Add missing check for alloc_ordered_workqueue (git-fixes).
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo (stable-fixes).
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate() (git-fixes).
- erofs: fix incorrect symlink detection in fast symlink (git-fixes).
- exfat: fix memory leak in exfat_load_bitmap() (git-fixes).
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe() (git-fixes).
- firmware: arm_scmi: Fix double free in OPTEE transport (git-fixes).
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp() (git-fixes).
- firmware_loader: Block path traversal (git-fixes).
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF (bsc#1230602).
- fuse: fix memory leak in fuse_create_open (bsc#1230124).
- fuse: update stats for pages in dropped aux writeback list (bsc#1230125).
- fuse: use unsigned type for getxattr/listxattr size truncation (bsc#1230123).
- gpio: modepin: Enable module autoloading (git-fixes).
- gpio: rockchip: fix OF node leak in probe() (git-fixes).
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes (stable-fixes).
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING (stable-fixes).
- hwmon: (k10temp) Check return value of amd_smn_read() (stable-fixes).
- hwmon: (lm95234) Fix underflows seen when writing limit attributes (stable-fixes).
- hwmon: (max16065) Fix overflows seen when writing limits (git-fixes).
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (stable-fixes).
- hwmon: (ntc_thermistor) fix module autoloading (git-fixes).
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev &gt;= 1.2 (git-fixes).
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (stable-fixes).
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init (git-fixes).
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume (git-fixes).
- hwrng: mtk - Use devm_pm_runtime_enable (git-fixes).
- i2c: aspeed: Update the stop sw state when the bus recovery occurs (git-fixes).
- i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled (git-fixes).
- i2c: isch: Add missed 'else' (git-fixes).
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes).
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs (git-fixes).
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition (git-fixes).
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup (stable-fixes).
- iio: adc: ad7124: fix chip ID mismatch (git-fixes).
- iio: adc: ad7124: fix config comparison (git-fixes).
- iio: adc: ad7606: fix oversampling gpio array (git-fixes).
- iio: adc: ad7606: fix standby gpio state to match the documentation (git-fixes).
- iio: adc: ad7606: remove frstdata check for serial mode (git-fixes).
- iio: buffer-dmaengine: fix releasing dma channel on error (git-fixes).
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes (git-fixes).
- iio: fix scale application in iio_convert_raw_to_processed_unlocked (git-fixes).
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors (git-fixes).
- ipmi: docs: do not advertise deprecated sysfs entries (git-fixes).
- ipmi:ssif: Improve detecting during probing (bsc#1228771)
- ipmi:ssif: Improve detecting during probing (bsc#1228771) Move patch into the sorted section.
- ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230206)
- jfs: fix out-of-bounds in dbNextAG() and diAlloc() (git-fixes).
- kABI workaround for cros_ec stuff (git-fixes).
- kABI: Workaround kABI change in patches.suse/iommu-dma-Trace-bounce-buffer-usage-when-mapping-buf.patch (git-fixes).
- kabi: dm_blk_ioctl: implement path failover for SG_IO (bsc#1183045, bsc#1216776).
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated (stable-fixes).
- kthread: Fix task state in kthread worker if being frozen (bsc#1231146).
- leds: spi-byte: Call of_node_put() on error path (stable-fixes).
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (stable-fixes).
- lirc: rc_dev_get_from_fd(): fix file leak (git-fixes).
- mailbox: bcm2835: Fix timeout during suspend mode (git-fixes).
- mailbox: rockchip: fix a typo in module autoloading (git-fixes).
- media: i2c: ar0521: Use cansleep version of gpiod_set_value() (git-fixes).
- media: ov5675: Fix power on/off delay timings (git-fixes).
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE (git-fixes).
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse (stable-fixes).
- media: qcom: camss: Remove use_count guard in stop_streaming (git-fixes).
- media: sun4i_csi: Implement link validate for sun4i_csi subdev (git-fixes).
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags (git-fixes).
- media: uvcvideo: Enforce alignment of frame and interval (stable-fixes).
- media: venus: fix use after free bug in venus_remove due to race condition (git-fixes).
- media: vicodec: allow en/decoder cmd w/o CAPTURE (git-fixes).
- media: vivid: do not set HDMI TX controls if there are no HDMI outputs (stable-fixes).
- media: vivid: fix wrong sizeimage value for mplane (stable-fixes).
- memory: mtk-smi: Use devm_clk_get_enabled() (git-fixes).
- memory: tegra186-emc: drop unused to_tegra186_emc() (git-fixes).
- minmax: reduce min/max macro expansion in atomisp driver (git-fixes).
- misc: fastrpc: Fix double free of 'buf' in error path (git-fixes).
- mmc: core: apply SD quirks earlier during probe (git-fixes).
- mmc: cqhci: Fix checking of CQHCI_HALT state (git-fixes).
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K (git-fixes).
- mmc: sdhci-of-aspeed: fix module autoloading (git-fixes).
- module: Fix KCOV-ignored file name (git-fixes).
- mtd: powernv: Add check devm_kasprintf() returned value (git-fixes).
- mtd: slram: insert break after errors in parsing the map (git-fixes).
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (git-fixes).
- net: phy: Fix missing of_node_put() for leds (git-fixes).
- net: phy: vitesse: repair vsc73xx autonegotiation (stable-fixes).
- net: tighten bad gso csum offset check in virtio_net_hdr (git-fixes).
- net: usb: qmi_wwan: add MeiG Smart SRM825L (stable-fixes).
- nfsd: Do not leave work of closing files to a work queue (bsc#1228140).
- nilfs2: determine empty node blocks as corrupted (git-fixes).
- nilfs2: fix missing cleanup on rollforward recovery error (git-fixes).
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (git-fixes).
- nilfs2: fix potential oob read in nilfs_btree_check_delete() (git-fixes).
- nilfs2: fix state management in error path of log writing function (git-fixes).
- nilfs2: protect references to superblock parameters exposed in sysfs (git-fixes).
- nouveau: fix the fwsec sb verification register (git-fixes).
- nvme-multipath: avoid hang on inaccessible namespaces (bsc#1228244).
- nvme-multipath: system fails to create generic nvme device (bsc#1228244).
- nvme-pci: Add sleep quirk for Samsung 990 Evo (git-fixes).
- nvme-pci: allocate tagset on reset if necessary (git-fixes).
- nvme-tcp: fix link failure for TCP auth (git-fixes).
- nvme/pci: Add APST quirk for Lenovo N60z laptop (git-fixes).
- nvme: clear caller pointer on identify failure (git-fixes).
- nvme: fix namespace removal list (git-fixes).
- nvmet-rdma: fix possible bad dereference when freeing rsps (git-fixes).
- nvmet-tcp: do not continue for invalid icreq (git-fixes).
- nvmet-tcp: fix kernel crash if commands allocation fails (git-fixes).
- nvmet-trace: avoid dereferencing pointer too early (git-fixes).
- nvmet: Identify-Active Namespace ID List command should reject invalid nsid (git-fixes).
- ocfs2: cancel dqi_sync_work before freeing oinfo (git-fixes).
- ocfs2: fix null-ptr-deref when journal load failed (git-fixes).
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (git-fixes).
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks (git-fixes).
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (stable-fixes).
- pcmcia: Use resource_size function on resource object (stable-fixes).
- perf annotate: Introduce global annotation_options (git-fixes).
- perf annotate: Split branch stack cycles information out of 'struct annotation_line' (git-fixes).
- perf annotate: Use global annotation_options (git-fixes).
- perf arch events: Fix duplicate RISC-V SBI firmware event name (git-fixes).
- perf intel-pt: Fix aux_watermark calculation for 64-bit size (git-fixes).
- perf intel-pt: Fix exclude_guest setting (git-fixes).
- perf machine thread: Remove exited threads by default (git-fixes).
- perf maps: Move symbol maps functions to maps.c (git-fixes).
- perf pmu: Assume sysfs events are always the same case (git-fixes).
- perf pmus: Fixes always false when compare duplicates aliases (git-fixes).
- perf record: Lazy load kernel symbols (git-fixes).
- perf report: Convert to the global annotation_options (git-fixes).
- perf report: Fix condition in sort__sym_cmp() (git-fixes).
- perf stat: Fix the hard-coded metrics calculation on the hybrid (git-fixes).
- perf test: Make test_arm_callgraph_fp.sh more robust (git-fixes).
- perf tool: fix dereferencing NULL al-&gt;maps (git-fixes).
- perf tools: Add/use PMU reverse lookup from config to name (git-fixes).
- perf tools: Use pmus to describe type from attribute (git-fixes).
- perf top: Convert to the global annotation_options (git-fixes).
- perf/core: Fix missing wakeup when waiting for context reference (git-fixes).
- perf/x86/intel/cstate: Add pkg C2 residency counter for Sierra Forest (git-fixes).
- perf/x86/intel/cstate: Fix Alderlake/Raptorlake/Meteorlake (git-fixes).
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake (git-fixes).
- perf/x86/intel/pt: Fix a topa_entry base address calculation (git-fixes).
- perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation (git-fixes).
- perf/x86/intel/pt: Fix topa_entry base length (git-fixes).
- perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR (git-fixes).
- perf/x86/intel/uncore: Support HBM and CXL PMON counters (bsc#1230119).
- perf/x86/intel: Add a distinct name for Granite Rapids (git-fixes).
- perf/x86/intel: Factor out the initialization code for SPR (git fixes).
- perf/x86/intel: Limit the period on Haswell (git-fixes).
- perf/x86/intel: Use the common uarch name for the shared functions (git fixes).
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units (bsc#1230119).
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units (bsc#1230119).
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units (bsc#1230119).
- perf/x86/uncore: Cleanup unused unit structure (bsc#1230119).
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree (bsc#1230119).
- perf/x86/uncore: Save the unit control address of all units (bsc#1230119).
- perf/x86/uncore: Support per PMU cpumask (bsc#1230119).
- perf/x86: Fix smp_processor_id()-in-preemptible warnings (git-fixes).
- perf/x86: Serialize set_attr_rdpmc() (git-fixes).
- perf: Fix default aux_watermark calculation (git-fixes).
- perf: Fix event leak upon exit (git-fixes).
- perf: Fix perf_aux_size() for greater-than 32-bit size (git-fixes).
- perf: Prevent passing zero nr_pages to rb_alloc_aux() (git-fixes).
- perf: script: add raw|disasm arguments to --insn-trace option (git-fixes).
- phy: zynqmp: Take the phy mutex in xlate (stable-fixes).
- pinctrl: at91: make it work with current gpiolib (stable-fixes).
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID (stable-fixes).
- pinctrl: single: fix missing error code in pcs_probe() (git-fixes).
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex (stable-fixes).
- platform/surface: aggregator_registry: Add Support for Surface Pro 10 (stable-fixes).
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3 (stable-fixes).
- platform/x86: dell-smbios: Fix error path in dell_smbios_init() (git-fixes).
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array (git-fixes).
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (git-fixes).
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).
- power: supply: Drop use_cnt check from power_supply_property_is_writeable() (git-fixes).
- power: supply: axp20x_battery: Remove design from min and max voltage (git-fixes).
- power: supply: hwmon: Fix missing temp1_max_alarm attribute (git-fixes).
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense (git-fixes).
- powercap/intel_rapl: Add support for AMD family 1Ah (stable-fixes).
- powerpc/qspinlock: Fix deadlock in MCS queue (bac#1230295 ltc#206656).
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode (stable-fixes).
- r8152: add vendor/device ID pair for D-Link DUB-E250 (git-fixes).
- regmap: maple: work around gcc-14.1 false-positive warning (stable-fixes).
- regmap: spi: Fix potential off-by-one when calculating reserved size (stable-fixes).
- regulator: Return actual error in of_regulator_bulk_get_all() (git-fixes).
- regulator: core: Fix regulator_is_supported_voltage() kerneldoc return value (git-fixes).
- regulator: core: Fix short description for _regulator_check_status_enabled() (git-fixes).
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR (git-fixes).
- regulator: rt5120: Convert comma to semicolon (git-fixes).
- regulator: wm831x-isink: Convert comma to semicolon (git-fixes).
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M (git-fixes).
- remoteproc: imx_rproc: Initialize workqueue earlier (git-fixes).
- remoteproc: k3-r5: Fix error handling when power-up failed (git-fixes).
- reset: berlin: fix OF node leak in probe() error path (git-fixes).
- reset: k210: fix OF node leak in probe() error path (git-fixes).
- resource: fix region_intersects() vs add_memory_driver_managed() (git-fixes).
- rpm/check-for-config-changes: Exclude ARCH_USING_PATCHABLE_FUNCTION_ENTRY gcc version dependent, at least on ppc
- rtc: at91sam9: fix OF node leak in probe() error path (git-fixes).
- s390/dasd: Fix redundant /proc/dasd* entries removal (bsc#1227694).
- s390/dasd: Remove DMA alignment (LTC#208933 bsc#1230426 git-fixes).
- s390/mm: Convert gmap_make_secure to use a folio (git-fixes bsc#1230562).
- s390/mm: Convert make_page_secure to use a folio (git-fixes bsc#1230563).
- s390: allow pte_offset_map_lock() to fail (git-fixes bsc#1230564).
- scripts: kconfig: merge_config: config files: add a trailing newline (stable-fixes).
- scripts: sphinx-pre-install: remove unnecessary double check for $cur_version (git-fixes).
- scsi: ibmvfc: Add max_sectors module parameter (bsc#1216223).
- scsi: lpfc: Change diagnostic log flag during receipt of unknown ELS cmds (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Copyright updates for 14.4.0.4 patches (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Fix overflow build issue (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Fix unintentional double clearing of vmid_flag (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Remove redundant vport assignment when building an abort request (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Update PRLO handling in direct attached topology (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Update lpfc version to 14.4.0.4 (bsc#1229429 jsc#PED-9899).
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (bsc#1229429 jsc#PED-9899).
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics() (bsc#1223848).
- selftests: lib: remove strscpy test (git-fixes).
- selinux,smack: do not bypass permissions check in inode_setsecctx hook (stable-fixes).
- soc: fsl: cpm1: tsa: Fix tsa_write8() (git-fixes).
- soc: versatile: integrator: fix OF node leak in probe() error path (git-fixes).
- spi: atmel-quadspi: Avoid overwriting delay register settings (git-fixes).
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time (git-fixes).
- spi: bcm63xx: Enable module autoloading (stable-fixes).
- spi: bcm63xx: Fix module autoloading (git-fixes).
- spi: meson-spicc: convert comma to semicolon (git-fixes).
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug (git-fixes).
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ (git-fixes).
- spi: ppc4xx: handle irq_of_parse_and_map() errors (git-fixes).
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling (git-fixes).
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE (git-fixes).
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time (git-fixes).
- spi: spidev: Add an entry for elgin,jg10309-01 (stable-fixes).
- spi: spidev: Add missing spi_device_id for jg10309-01 (git-fixes).
- staging: iio: frequency: ad9834: Validate frequency parameter value (git-fixes).
- supported.conf: mark adiantum and xctr crypto modules as supported (bsc#1231035)
- thunderbolt: Fix XDomain rx_lanes_show and tx_lanes_show (git-fixes).
- thunderbolt: Fix calculation of consumed USB3 bandwidth on a path (git-fixes).
- thunderbolt: Fix rollback in tb_port_lane_bonding_enable() for lane 1 (git-fixes).
- thunderbolt: There are only 5 basic router registers in pre-USB4 routers (git-fixes).
- tomoyo: fallback to realpath if symlink's pathname does not exist (git-fixes).
- tools/perf: Fix the string match for "/tmp/perf-$PID.map" files in dso__load (git-fixes).
- tpm: Clean up TPM space after command failure (git-fixes).
- tracing: Avoid possible softlockup in tracing_iter_reset() (git-fixes).
- tty: rp2: Fix reset with non forgiving PCIe host bridges (git-fixes).
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (git-fixes).
- usb: cdnsp: Fix incorrect usb_request status (git-fixes).
- usb: dwc2: Skip clock gating on Broadcom SoCs (git-fixes).
- usb: dwc2: drd: fix clock gating on USB role switch (git-fixes).
- usb: dwc3: Avoid waking up gadget during startxfer (git-fixes).
- usb: dwc3: core: Prevent USB core invalid event buffer address access (git-fixes).
- usb: dwc3: core: Prevent USB core invalid event buffer address access (stable-fixes).
- usb: dwc3: core: update LC timer as per USB Spec V3.2 (stable-fixes).
- usb: gadget: aspeed_udc: validate endpoint index for ast udc (stable-fixes).
- usb: typec: ucsi: Fix null pointer dereference in trace (stable-fixes).
- usb: typec: ucsi: Wait 20ms before reading CCI after a reset (git-fixes).
- usb: uas: set host status byte on data completion error (stable-fixes).
- usbip: Do not submit special requests twice (stable-fixes).
- usbnet: ipheth: add CDC NCM support (git-fixes).
- usbnet: ipheth: do not stop RX on failing RX callback (git-fixes).
- usbnet: ipheth: drop RX URBs with no payload (git-fixes).
- usbnet: ipheth: fix carrier detection in modes 1 and 4 (git-fixes).
- usbnet: ipheth: fix risk of NULL pointer deallocation (git-fixes).
- usbnet: ipheth: race between ipheth_close and error handling (stable-fixes).
- usbnet: ipheth: remove extraneous rx URB length check (git-fixes).
- usbnet: ipheth: transmit URBs without trailing padding (git-fixes).
- usbnet: modern method to get random MAC (git-fixes).
- virtio-net: synchronize probe with ndo_set_features (git-fixes).
- virtio_net: Fix napi_skb_cache_put warning (git-fixes).
- virtio_net: fixing XDP for fully checksummed packets handling (git-fixes).
- watchdog: imx_sc_wdt: Do not disable WDT in suspend (git-fixes).
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem() (stable-fixes).
- wifi: ath12k: fix BSS chan info request WMI command (git-fixes).
- wifi: ath12k: fix firmware crash due to invalid peer nss (stable-fixes).
- wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he() (git-fixes).
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he() (stable-fixes).
- wifi: ath12k: initialize 'ret' in ath12k_dp_rxdma_ring_sel_config_wcn7850() (stable-fixes).
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem() (stable-fixes).
- wifi: ath12k: match WMI BSS chan info structure with firmware definition (git-fixes).
- wifi: ath9k: Remove error checks when creating debugfs entries (git-fixes).
- wifi: brcmfmac: introducing fwil query functions (git-fixes).
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 (stable-fixes).
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() (git-fixes).
- wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority (git-fixes).
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors (git-fixes).
- wifi: cfg80211: make hash table duplicates more survivable (stable-fixes).
- wifi: cfg80211: restrict operation during radar detection (stable-fixes).
- wifi: iwlwifi: clear trans-&gt;state earlier upon error (stable-fixes).
- wifi: iwlwifi: lower message level for FW buffer destination (stable-fixes).
- wifi: iwlwifi: mvm: do not wait for tx queues if firmware is dead (stable-fixes).
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room() (stable-fixes).
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation (stable-fixes).
- wifi: iwlwifi: mvm: increase the time between ranging measurements (git-fixes).
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped (stable-fixes).
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check (stable-fixes).
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD (stable-fixes).
- wifi: mac80211: do not use rate mask for offchannel TX either (git-fixes).
- wifi: mac80211: fix the comeback long retry times (git-fixes).
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap() (stable-fixes).
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (git-fixes).
- wifi: mt76: connac: fix checksum offload fields of connac3 RXD (git-fixes).
- wifi: mt76: mt7603: fix mixed declarations and code (git-fixes).
- wifi: mt76: mt7615: check devm_kasprintf() returned value (git-fixes).
- wifi: mt76: mt7915: check devm_kasprintf() returned value (git-fixes).
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986 (git-fixes).
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality (git-fixes).
- wifi: mt76: mt7921: Check devm_kasprintf() returned value (git-fixes).
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change (stable-fixes).
- wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage (git-fixes).
- wifi: mt76: mt7925: fix a potential array-index-out-of-bounds issue for clc (git-fixes).
- wifi: mt76: mt7996: fix EHT beamforming capability check (git-fixes).
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities (git-fixes).
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he (git-fixes).
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel (git-fixes).
- wifi: mt76: mt7996: fix uninitialized TLV data (git-fixes).
- wifi: mt76: mt7996: fix wmm set of station interface to 3 (git-fixes).
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna (git-fixes).
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (stable-fixes).
- wifi: rtw88: 8822c: Fix reported RX band width (git-fixes).
- wifi: rtw88: always wait for both firmware loading attempts (git-fixes).
- wifi: rtw88: remove CPT execution branch never used (git-fixes).
- wifi: rtw88: usb: schedule rx work after everything is set up (stable-fixes).
- wifi: rtw89: ser: avoid multiple deinit on same CAM (stable-fixes).
- wifi: rtw89: wow: prevent to send unexpected H2C during download Firmware (stable-fixes).
- wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param (git-fixes).
- x86/hyperv: fix kexec crash due to VP assist page corruption (git-fixes).
- x86/kaslr: Expose and use the end of the physical memory address space (bsc#1229443).
- x86/kexec: Add EFI config table identity mapping for kexec kernel (bsc#1220382).
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped (bsc#1220382).
- x86/mm: Use lookup_address_in_pgd_attr() in show_fault_oops() (bsc#1221527).
- x86/pat: Fix W^X violation false-positives when running as Xen PV guest (bsc#1221527).
- x86/pat: Introduce lookup_address_in_pgd_attr() (bsc#1221527).
- x86/pat: Restructure _lookup_address_cpa() (bsc#1221527).
- xen/swiotlb: add alignment check for dma buffers (bsc#1229928).
- xen/swiotlb: fix allocated size (git-fixes).
- xen: add capability to remap non-RAM pages to different PFNs (bsc#1226003).
- xen: allow mapping ACPI data using a different physical address (bsc#1226003).
- xen: introduce generic helper checking for memory map conflicts (bsc#1226003).
- xen: move checks for e820 conflicts further up (bsc#1226003).
- xen: move max_pfn in xen_memory_setup() out of function scope (bsc#1226003).
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory (bsc#1226003).
- xen: use correct end address of kernel for conflict checking (bsc#1226003).
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints (git-fixes).
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them (git-fixes).
- xz: cleanup CRC32 edits from 2018 (git-fixes).
</description>
    <pkglist>
      <collection>
        <package name="kernel-rt" epoch="0" version="6.4.0" release="11.1" arch="nosrc" src="nosrc/kernel-rt-6.4.0-11.1.nosrc.rpm">
          <filename>kernel-rt-6.4.0-11.1.nosrc.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt" epoch="0" version="6.4.0" release="11.1" arch="x86_64" src="x86_64/kernel-rt-6.4.0-11.1.x86_64.rpm">
          <filename>kernel-rt-6.4.0-11.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt-debuginfo" epoch="0" version="6.4.0" release="11.1" arch="x86_64" src="x86_64/kernel-rt-debuginfo-6.4.0-11.1.x86_64.rpm">
          <filename>kernel-rt-debuginfo-6.4.0-11.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-rt-debugsource" epoch="0" version="6.4.0" release="11.1" arch="x86_64" src="x86_64/kernel-rt-debugsource-6.4.0-11.1.x86_64.rpm">
          <filename>kernel-rt-debugsource-6.4.0-11.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>119</id>
    <title>Recommended update for gcc13</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1738573540" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231833" id="1231833" title="gcc: fixed timezone parsing in libstdc++" type="bugzilla" />
    </references>
    <description>This update for gcc13 fixes the following issues:

- Fix for parsing tzdata 2024b [gcc#116657]

</description>
    <pkglist>
      <collection>
        <package name="gcc13" epoch="0" version="13.3.0+git8781" release="2.1" arch="src" src="src/gcc13-13.3.0+git8781-2.1.src.rpm">
          <filename>gcc13-13.3.0+git8781-2.1.src.rpm</filename>
        </package>
        <package name="gcc13-debugsource" epoch="0" version="13.3.0+git8781" release="2.1" arch="x86_64" src="x86_64/gcc13-debugsource-13.3.0+git8781-2.1.x86_64.rpm">
          <filename>gcc13-debugsource-13.3.0+git8781-2.1.x86_64.rpm</filename>
        </package>
        <package name="libatomic1" epoch="0" version="13.3.0+git8781" release="2.1" arch="x86_64" src="x86_64/libatomic1-13.3.0+git8781-2.1.x86_64.rpm">
          <filename>libatomic1-13.3.0+git8781-2.1.x86_64.rpm</filename>
        </package>
        <package name="libatomic1-debuginfo" epoch="0" version="13.3.0+git8781" release="2.1" arch="x86_64" src="x86_64/libatomic1-debuginfo-13.3.0+git8781-2.1.x86_64.rpm">
          <filename>libatomic1-debuginfo-13.3.0+git8781-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1" epoch="0" version="13.3.0+git8781" release="2.1" arch="x86_64" src="x86_64/libgcc_s1-13.3.0+git8781-2.1.x86_64.rpm">
          <filename>libgcc_s1-13.3.0+git8781-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgcc_s1-debuginfo" epoch="0" version="13.3.0+git8781" release="2.1" arch="x86_64" src="x86_64/libgcc_s1-debuginfo-13.3.0+git8781-2.1.x86_64.rpm">
          <filename>libgcc_s1-debuginfo-13.3.0+git8781-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgomp1" epoch="0" version="13.3.0+git8781" release="2.1" arch="x86_64" src="x86_64/libgomp1-13.3.0+git8781-2.1.x86_64.rpm">
          <filename>libgomp1-13.3.0+git8781-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgomp1-debuginfo" epoch="0" version="13.3.0+git8781" release="2.1" arch="x86_64" src="x86_64/libgomp1-debuginfo-13.3.0+git8781-2.1.x86_64.rpm">
          <filename>libgomp1-debuginfo-13.3.0+git8781-2.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6" epoch="0" version="13.3.0+git8781" release="2.1" arch="x86_64" src="x86_64/libstdc++6-13.3.0+git8781-2.1.x86_64.rpm">
          <filename>libstdc++6-13.3.0+git8781-2.1.x86_64.rpm</filename>
        </package>
        <package name="libstdc++6-debuginfo" epoch="0" version="13.3.0+git8781" release="2.1" arch="x86_64" src="x86_64/libstdc++6-debuginfo-13.3.0+git8781-2.1.x86_64.rpm">
          <filename>libstdc++6-debuginfo-13.3.0+git8781-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>213</id>
    <title>Security update for unbound</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1739449743" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231284" id="1231284" title="VUL-0: CVE-2024-8508: unbound: handling of upstream responses with very large RRsets and where name compression is needed for downstream replies leads to degraded performance and, eventually, denial of service" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8508" id="CVE-2024-8508" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8508" type="cve" />
    </references>
    <description>This update for unbound fixes the following issues:

- Update to 1.22.0:
  Features:
  * Add iter-scrub-ns, iter-scrub-cname and max-global-quota
    configuration options.
  * Merge patch to fix for glue that is outside of zone, with
    `harden-unverified-glue`, from Karthik Umashankar (Microsoft).
    Enabling this option protects the Unbound resolver against bad
    glue, that is unverified out of zone glue, by resolving them.
    It uses the records as last resort if there is no other working
    glue.
  * Add redis-command-timeout: 20 and redis-connect-timeout: 200,
    that can set the timeout separately for commands and the
    connection set up to the redis server. If they are not
    specified, the redis-timeout value is used.
  * Log timestamps in ISO8601 format with timezone. This adds the
    option `log-time-iso: yes` that logs in ISO8601 format.
  * DNS over QUIC. This adds `quic-port: 853` and `quic-size: 8m`
    that enable dnsoverquic, and the counters `num.query.quic` and
    `mem.quic` in the statistics output. The feature needs to be
    enabled by compiling with libngtcp2, with
    `--with-libngtcp2=path` and libngtcp2 needs openssl+quic, pass
    that with `--with-ssl=path` to compile unbound as well.

  Bug Fixes:
  * unbound-control-setup hangs while testing for openssl presence
    starting from version 1.21.0.
  * Fix error: "memory exhausted" when defining more than 9994
    local-zones.
  * Fix documentation for cache_fill_missing function.
  * Fix Loads of logs: "validation failure: key for validation
    &lt;domain&gt;. is marked as invalid because of a previous" for
    non-DNSSEC signed zone.
  * Fix that when rpz is applied the message does not get picked up
    by the validator. That stops validation failures for the
    message.
  * Fix that stub-zone and forward-zone clauses do not exhaust
    memory for long content.
  * Fix to print port number in logs for auth zone transfer
    activities.
  * b.root renumbering.
  * Add new IANA trust anchor.
  * Fix config file read for dnstap-sample-rate.
  * Fix alloc-size and calloc-transposed-args compiler warnings.
  * Fix to limit NSEC and NSEC3 TTL when aggressive nsec is enabled
    (RFC9077).
  * Fix dns64 with prefetch that the prefetch is stored in cache.
  * Attempt to further fix doh_downstream_buffer_size.tdir
    flakiness.
  * More clear text for prefetch and minimal-responses in the
    unbound.conf man page.
  * Fix cache update when serve expired is used. Expired records
    are favored over resolution and validation failures when
    serve-expired is used.
  * Fix negative cache NSEC3 parameter compares for zero length
    NSEC3 salt.
  * Fix unbound-control-setup hangs sometimes depending on the
    openssl version.
  * Fix Cannot override tcp-upstream and tls-upstream with
    forward-tcp-upstream and forward-tls-upstream.
  * Fix to limit NSEC TTL for messages from cachedb. Fix to limit
    the prefetch ttl for messages after a CNAME with short TTL.
  * Fix to disable detection of quic configured ports when quic is
    not compiled in.
  * Fix harden-unverified-glue for AAAA cache_fill_missing lookups.
  * Fix contrib/aaaa-filter-iterator for change in call
    signature for cache_fill_missing.
  * Fix to display warning if quic-port is set but dnsoverquic is
    not enabled when compiled.
  * Fix dnsoverquic to extend the number of streams when one is
    closed.
  * Fix for dnstap with dnscrypt and dnstap without dnsoverquic.
  * Fix for dnsoverquic and dnstap to use the correct dnstap
    environment.

- Update to 1.21.1:
  Security Fixes:
  * CVE-2024-8508: unbounded name compression could lead to
    denial of service. (bsc#1231284)
</description>
    <pkglist>
      <collection>
        <package name="libunbound8" epoch="0" version="1.22.0" release="1.1" arch="x86_64" src="x86_64/libunbound8-1.22.0-1.1.x86_64.rpm">
          <filename>libunbound8-1.22.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libunbound8-debuginfo" epoch="0" version="1.22.0" release="1.1" arch="x86_64" src="x86_64/libunbound8-debuginfo-1.22.0-1.1.x86_64.rpm">
          <filename>libunbound8-debuginfo-1.22.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="unbound" epoch="0" version="1.22.0" release="1.1" arch="src" src="src/unbound-1.22.0-1.1.src.rpm">
          <filename>unbound-1.22.0-1.1.src.rpm</filename>
        </package>
        <package name="unbound-anchor" epoch="0" version="1.22.0" release="1.1" arch="x86_64" src="x86_64/unbound-anchor-1.22.0-1.1.x86_64.rpm">
          <filename>unbound-anchor-1.22.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="unbound-anchor-debuginfo" epoch="0" version="1.22.0" release="1.1" arch="x86_64" src="x86_64/unbound-anchor-debuginfo-1.22.0-1.1.x86_64.rpm">
          <filename>unbound-anchor-debuginfo-1.22.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="unbound-debugsource" epoch="0" version="1.22.0" release="1.1" arch="x86_64" src="x86_64/unbound-debugsource-1.22.0-1.1.x86_64.rpm">
          <filename>unbound-debugsource-1.22.0-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>94</id>
    <title>Recommended update for pam</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1738573541" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1194818" id="1194818" title="Cursor can escape TTY login prompt" type="bugzilla" />
    </references>
    <description>This update for pam fixes the following issue:

- Prevent cursor escape from the login prompt (bsc#1194818)
</description>
    <pkglist>
      <collection>
        <package name="pam" epoch="0" version="1.6.0" release="3.1" arch="src" src="src/pam-1.6.0-3.1.src.rpm">
          <filename>pam-1.6.0-3.1.src.rpm</filename>
        </package>
        <package name="pam" epoch="0" version="1.6.0" release="3.1" arch="x86_64" src="x86_64/pam-1.6.0-3.1.x86_64.rpm">
          <filename>pam-1.6.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="pam-debuginfo" epoch="0" version="1.6.0" release="3.1" arch="x86_64" src="x86_64/pam-debuginfo-1.6.0-3.1.x86_64.rpm">
          <filename>pam-debuginfo-1.6.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="pam-debugsource" epoch="0" version="1.6.0" release="3.1" arch="x86_64" src="x86_64/pam-debugsource-1.6.0-3.1.x86_64.rpm">
          <filename>pam-debugsource-1.6.0-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>95</id>
    <title>Security update for podman</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1738573561" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231208" id="1231208" title="VUL-0: CVE-2024-9407: buildah: Buildah: Podman: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231230" id="1231230" title="VUL-0: CVE-2024-9341: buildah,podman: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231499" id="1231499" title="VUL-0: CVE-2024-9675: buildah,podman: buildah: cache arbitrary directory mount" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231698" id="1231698" title="VUL-0: CVE-2024-9676: buildah,podman,skopeo: github.com/containers/storage: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS)" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104" id="CVE-2024-6104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9341" id="CVE-2024-9341" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9341" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9407" id="CVE-2024-9407" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9407" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9675" id="CVE-2024-9675" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9675" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9676" id="CVE-2024-9676" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9676" type="cve" />
    </references>
    <description>This update for podman fixes the following issues:

- CVE-2024-9676: Fixed a denial of service via a symlink traversal in the containers/storage library (bsc#1231698)
- CVE-2024-9341: Fixed FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (bsc#1231230)
- CVE-2024-9675: Fixed caching of arbitrary directory mount (bsc#1231499)
- CVE-2024-9407: Fixed improper input validation in bind-propagation option of Dockerfile RUN --mount instruction (bsc#1231208)
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.9.5" release="2.1" arch="src" src="src/podman-4.9.5-2.1.src.rpm">
          <filename>podman-4.9.5-2.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="2.1" arch="x86_64" src="x86_64/podman-4.9.5-2.1.x86_64.rpm">
          <filename>podman-4.9.5-2.1.x86_64.rpm</filename>
        </package>
        <package name="podman-debuginfo" epoch="0" version="4.9.5" release="2.1" arch="x86_64" src="x86_64/podman-debuginfo-4.9.5-2.1.x86_64.rpm">
          <filename>podman-debuginfo-4.9.5-2.1.x86_64.rpm</filename>
        </package>
        <package name="podman-docker" epoch="0" version="4.9.5" release="2.1" arch="noarch" src="noarch/podman-docker-4.9.5-2.1.noarch.rpm">
          <filename>podman-docker-4.9.5-2.1.noarch.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="2.1" arch="x86_64" src="x86_64/podman-remote-4.9.5-2.1.x86_64.rpm">
          <filename>podman-remote-4.9.5-2.1.x86_64.rpm</filename>
        </package>
        <package name="podman-remote-debuginfo" epoch="0" version="4.9.5" release="2.1" arch="x86_64" src="x86_64/podman-remote-debuginfo-4.9.5-2.1.x86_64.rpm">
          <filename>podman-remote-debuginfo-4.9.5-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>201</id>
    <title>Security update for openssl-3</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1738573562" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220262" id="1220262" title="VUL-0: CVE-2023-50782: openssl: consider backporting implicit rejection in PKCS#1 v1.5" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230698" id="1230698" title="VUL-0: CVE-2024-41996: openssl-1_1,openssl-3: DHEATATTACK: Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers to trigger expensive server-side DHE" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50782" id="CVE-2023-50782" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50782" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41996" id="CVE-2024-41996" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41996" type="cve" />
    </references>
    <description>This update for openssl-3 fixes the following issues:

- CVE-2024-41996: Fixed a denial of service in the Diffie-Hellman Key Agreement Protocol (bsc#1230698).
- CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-3-devel" epoch="0" version="3.1.4" release="7.1" arch="x86_64" src="x86_64/libopenssl-3-devel-3.1.4-7.1.x86_64.rpm">
          <filename>libopenssl-3-devel-3.1.4-7.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider" epoch="0" version="3.1.4" release="7.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-3.1.4-7.1.x86_64.rpm">
          <filename>libopenssl-3-fips-provider-3.1.4-7.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider-debuginfo" epoch="0" version="3.1.4" release="7.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-debuginfo-3.1.4-7.1.x86_64.rpm">
          <filename>libopenssl-3-fips-provider-debuginfo-3.1.4-7.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.1.4" release="7.1" arch="x86_64" src="x86_64/libopenssl3-3.1.4-7.1.x86_64.rpm">
          <filename>libopenssl3-3.1.4-7.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3-debuginfo" epoch="0" version="3.1.4" release="7.1" arch="x86_64" src="x86_64/libopenssl3-debuginfo-3.1.4-7.1.x86_64.rpm">
          <filename>libopenssl3-debuginfo-3.1.4-7.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="7.1" arch="src" src="src/openssl-3-3.1.4-7.1.src.rpm">
          <filename>openssl-3-3.1.4-7.1.src.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="7.1" arch="x86_64" src="x86_64/openssl-3-3.1.4-7.1.x86_64.rpm">
          <filename>openssl-3-3.1.4-7.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debuginfo" epoch="0" version="3.1.4" release="7.1" arch="x86_64" src="x86_64/openssl-3-debuginfo-3.1.4-7.1.x86_64.rpm">
          <filename>openssl-3-debuginfo-3.1.4-7.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debugsource" epoch="0" version="3.1.4" release="7.1" arch="x86_64" src="x86_64/openssl-3-debugsource-3.1.4-7.1.x86_64.rpm">
          <filename>openssl-3-debugsource-3.1.4-7.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>144</id>
    <title>Security update for Mesa</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1738573603" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222040" id="1222040" title="VUL-0: CVE-2023-45913: Mesa: NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222041" id="1222041" title="VUL-0: CVE-2023-45919: Mesa: buffer over-read in glXQueryServerString()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222042" id="1222042" title="VUL-0: CVE-2023-45922: Mesa: segmentation violation in __glXGetDrawableAttribute()" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45913" id="CVE-2023-45913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45913" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45919" id="CVE-2023-45919" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45919" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45922" id="CVE-2023-45922" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45922" type="cve" />
    </references>
    <description>This update for Mesa fixes the following issues:

- CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040).
- CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041).
- CVE-2023-45922: Fixed segmentation violation in __glXGetDrawableAttribute() (bsc#1222042).
</description>
    <pkglist>
      <collection>
        <package name="Mesa" epoch="0" version="23.3.4" release="8.1" arch="src" src="src/Mesa-23.3.4-8.1.src.rpm">
          <filename>Mesa-23.3.4-8.1.src.rpm</filename>
        </package>
        <package name="Mesa" epoch="0" version="23.3.4" release="8.1" arch="x86_64" src="x86_64/Mesa-23.3.4-8.1.x86_64.rpm">
          <filename>Mesa-23.3.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-debugsource" epoch="0" version="23.3.4" release="8.1" arch="x86_64" src="x86_64/Mesa-debugsource-23.3.4-8.1.x86_64.rpm">
          <filename>Mesa-debugsource-23.3.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-libEGL1" epoch="0" version="23.3.4" release="8.1" arch="x86_64" src="x86_64/Mesa-libEGL1-23.3.4-8.1.x86_64.rpm">
          <filename>Mesa-libEGL1-23.3.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-libEGL1-debuginfo" epoch="0" version="23.3.4" release="8.1" arch="x86_64" src="x86_64/Mesa-libEGL1-debuginfo-23.3.4-8.1.x86_64.rpm">
          <filename>Mesa-libEGL1-debuginfo-23.3.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-libGL1" epoch="0" version="23.3.4" release="8.1" arch="x86_64" src="x86_64/Mesa-libGL1-23.3.4-8.1.x86_64.rpm">
          <filename>Mesa-libGL1-23.3.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-libGL1-debuginfo" epoch="0" version="23.3.4" release="8.1" arch="x86_64" src="x86_64/Mesa-libGL1-debuginfo-23.3.4-8.1.x86_64.rpm">
          <filename>Mesa-libGL1-debuginfo-23.3.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-libglapi0" epoch="0" version="23.3.4" release="8.1" arch="x86_64" src="x86_64/Mesa-libglapi0-23.3.4-8.1.x86_64.rpm">
          <filename>Mesa-libglapi0-23.3.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-libglapi0-debuginfo" epoch="0" version="23.3.4" release="8.1" arch="x86_64" src="x86_64/Mesa-libglapi0-debuginfo-23.3.4-8.1.x86_64.rpm">
          <filename>Mesa-libglapi0-debuginfo-23.3.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="libgbm1" epoch="0" version="23.3.4" release="8.1" arch="x86_64" src="x86_64/libgbm1-23.3.4-8.1.x86_64.rpm">
          <filename>libgbm1-23.3.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="libgbm1-debuginfo" epoch="0" version="23.3.4" release="8.1" arch="x86_64" src="x86_64/libgbm1-debuginfo-23.3.4-8.1.x86_64.rpm">
          <filename>libgbm1-debuginfo-23.3.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-dri" epoch="0" version="23.3.4" release="8.1" arch="x86_64" src="x86_64/Mesa-dri-23.3.4-8.1.x86_64.rpm">
          <filename>Mesa-dri-23.3.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-dri-debuginfo" epoch="0" version="23.3.4" release="8.1" arch="x86_64" src="x86_64/Mesa-dri-debuginfo-23.3.4-8.1.x86_64.rpm">
          <filename>Mesa-dri-debuginfo-23.3.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-drivers" epoch="0" version="23.3.4" release="8.1" arch="src" src="src/Mesa-drivers-23.3.4-8.1.src.rpm">
          <filename>Mesa-drivers-23.3.4-8.1.src.rpm</filename>
        </package>
        <package name="Mesa-drivers-debugsource" epoch="0" version="23.3.4" release="8.1" arch="x86_64" src="x86_64/Mesa-drivers-debugsource-23.3.4-8.1.x86_64.rpm">
          <filename>Mesa-drivers-debugsource-23.3.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-gallium" epoch="0" version="23.3.4" release="8.1" arch="x86_64" src="x86_64/Mesa-gallium-23.3.4-8.1.x86_64.rpm">
          <filename>Mesa-gallium-23.3.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-gallium-debuginfo" epoch="0" version="23.3.4" release="8.1" arch="x86_64" src="x86_64/Mesa-gallium-debuginfo-23.3.4-8.1.x86_64.rpm">
          <filename>Mesa-gallium-debuginfo-23.3.4-8.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>138</id>
    <title>Security update for curl</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1733848122" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232528" id="1232528" title="VUL-0: CVE-2024-9681: curl: HSTS subdomain overwrites parent cache entry" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9681" id="CVE-2024-9681" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9681" type="cve" />
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry (bsc#1232528)
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.6.0" release="4.1" arch="src" src="src/curl-8.6.0-4.1.src.rpm">
          <filename>curl-8.6.0-4.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.6.0" release="4.1" arch="x86_64" src="x86_64/curl-8.6.0-4.1.x86_64.rpm">
          <filename>curl-8.6.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debuginfo" epoch="0" version="8.6.0" release="4.1" arch="x86_64" src="x86_64/curl-debuginfo-8.6.0-4.1.x86_64.rpm">
          <filename>curl-debuginfo-8.6.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debugsource" epoch="0" version="8.6.0" release="4.1" arch="x86_64" src="x86_64/curl-debugsource-8.6.0-4.1.x86_64.rpm">
          <filename>curl-debugsource-8.6.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.6.0" release="4.1" arch="x86_64" src="x86_64/libcurl4-8.6.0-4.1.x86_64.rpm">
          <filename>libcurl4-8.6.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4-debuginfo" epoch="0" version="8.6.0" release="4.1" arch="x86_64" src="x86_64/libcurl4-debuginfo-8.6.0-4.1.x86_64.rpm">
          <filename>libcurl4-debuginfo-8.6.0-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>145</id>
    <title>Recommended update for regionServiceClientConfigGCE</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1734540146" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217538" id="1217538" title="[TRACKERBUG] Update region certs to accommodate 4096 length on GCE" type="bugzilla" />
    </references>
    <description>This update for regionServiceClientConfigGCE contains the following fixes:

- Version 4.2.0 (jsc#PCT-361)
  + Add IPv6 certs to supprt access of the update infrastructure via
    IPv6 on GCE instances.

- Update to version 4.1.0 (bsc#1217538)
  + Replace 162.222.182.90 and 35.187.193.56 (length 4096):
    rgnsrv-gce-asia-northeast1 -&gt; 162.222.182.90 expires in 9 years 
    rgnsrv-gce-us-central1 -&gt; 35.187.193.56 expires in 10 years 

- Update to version 4.0.1 (bsc#1217538)
  + Replace 130.211.242.136.pem and 130.211.88.88.pem certs 
    expiring in 8 years and new length of 4096
    These certs will replace the current certs that 
    expire soon  

</description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigGCE" epoch="0" version="4.2.0" release="1.1" arch="noarch" src="noarch/regionServiceClientConfigGCE-4.2.0-1.1.noarch.rpm">
          <filename>regionServiceClientConfigGCE-4.2.0-1.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigGCE" epoch="0" version="4.2.0" release="1.1" arch="src" src="src/regionServiceClientConfigGCE-4.2.0-1.1.src.rpm">
          <filename>regionServiceClientConfigGCE-4.2.0-1.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>146</id>
    <title>Security update for skopeo</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1734540146" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231698" id="1231698" title="VUL-0: CVE-2024-9676: buildah,podman,skopeo: github.com/containers/storage: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS)" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9676" id="CVE-2024-9676" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9676" type="cve" />
    </references>
    <description>This update for skopeo fixes the following issues:

- CVE-2024-9676: Fixed symlink traversal vulnerability in the containers/storage library that could have let to a denial-of-service attack (bsc#1231698).
</description>
    <pkglist>
      <collection>
        <package name="skopeo" epoch="0" version="1.14.4" release="2.1" arch="src" src="src/skopeo-1.14.4-2.1.src.rpm">
          <filename>skopeo-1.14.4-2.1.src.rpm</filename>
        </package>
        <package name="skopeo" epoch="0" version="1.14.4" release="2.1" arch="x86_64" src="x86_64/skopeo-1.14.4-2.1.x86_64.rpm">
          <filename>skopeo-1.14.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="skopeo-debuginfo" epoch="0" version="1.14.4" release="2.1" arch="x86_64" src="x86_64/skopeo-debuginfo-1.14.4-2.1.x86_64.rpm">
          <filename>skopeo-debuginfo-1.14.4-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>120</id>
    <title>Security update for expat</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1733488669" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232579" id="1232579" title="VUL-0: CVE-2024-50602: TRACKERBUG: libexpat: DoS via XML_ResumeParser" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50602" id="CVE-2024-50602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50602" type="cve" />
    </references>
    <description>This update for expat fixes the following issues:

- CVE-2024-50602: Fixed possible denial-of-service vulnerability inside XML_ResumeParser (bsc#1232579).
</description>
    <pkglist>
      <collection>
        <package name="expat" epoch="0" version="2.5.0" release="4.1" arch="src" src="src/expat-2.5.0-4.1.src.rpm">
          <filename>expat-2.5.0-4.1.src.rpm</filename>
        </package>
        <package name="expat-debugsource" epoch="0" version="2.5.0" release="4.1" arch="x86_64" src="x86_64/expat-debugsource-2.5.0-4.1.x86_64.rpm">
          <filename>expat-debugsource-2.5.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libexpat1" epoch="0" version="2.5.0" release="4.1" arch="x86_64" src="x86_64/libexpat1-2.5.0-4.1.x86_64.rpm">
          <filename>libexpat1-2.5.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libexpat1-debuginfo" epoch="0" version="2.5.0" release="4.1" arch="x86_64" src="x86_64/libexpat1-debuginfo-2.5.0-4.1.x86_64.rpm">
          <filename>libexpat1-debuginfo-2.5.0-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>121</id>
    <title>Security update for libarchive</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1733488782" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225972" id="1225972" title="VUL-0: CVE-2024-20697: libarchive: Out of bounds Remote Code Execution Vulnerability" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231544" id="1231544" title="VUL-0: CVE-2024-48957: libarchive: libarchive: out-of-bounds access in execute_filter_audio in archive_read_support_format_rar.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231624" id="1231624" title="VUL-0: CVE-2024-48958: libarchive: libarchive: out-of-bounds access via a crafted archive file in execute_filter_delta function" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20697" id="CVE-2024-20697" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20697" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26256" id="CVE-2024-26256" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26256" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-48957" id="CVE-2024-48957" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-48957" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-48958" id="CVE-2024-48958" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-48958" type="cve" />
    </references>
    <description>This update for libarchive fixes the following issues:

- CVE-2024-48958: Fixed out-of-bounds access in execute_filter_delta (bsc#1231624).
- CVE-2024-20697: Fixed out-of-bounds remote code execution vulnerability (bsc#1225972).
- CVE-2024-48957: Fixed out-of-bounds access in execute_filter_audio (bsc#1231544).
</description>
    <pkglist>
      <collection>
        <package name="libarchive" epoch="0" version="3.6.2" release="4.1" arch="src" src="src/libarchive-3.6.2-4.1.src.rpm">
          <filename>libarchive-3.6.2-4.1.src.rpm</filename>
        </package>
        <package name="libarchive-debugsource" epoch="0" version="3.6.2" release="4.1" arch="x86_64" src="x86_64/libarchive-debugsource-3.6.2-4.1.x86_64.rpm">
          <filename>libarchive-debugsource-3.6.2-4.1.x86_64.rpm</filename>
        </package>
        <package name="libarchive13" epoch="0" version="3.6.2" release="4.1" arch="x86_64" src="x86_64/libarchive13-3.6.2-4.1.x86_64.rpm">
          <filename>libarchive13-3.6.2-4.1.x86_64.rpm</filename>
        </package>
        <package name="libarchive13-debuginfo" epoch="0" version="3.6.2" release="4.1" arch="x86_64" src="x86_64/libarchive13-debuginfo-3.6.2-4.1.x86_64.rpm">
          <filename>libarchive13-debuginfo-3.6.2-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>107</id>
    <title>Security update for libndp</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1732882051" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225771" id="1225771" title="VUL-0: CVE-2024-5564: libndp: buffer overflow in route information length field" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5564" id="CVE-2024-5564" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5564" type="cve" />
    </references>
    <description>This update for libndp fixes the following issues:

- CVE-2024-5564: Fixed buffer overflow in route information length field (bsc#1225771).
</description>
    <pkglist>
      <collection>
        <package name="libndp" epoch="0" version="1.8" release="3.1" arch="src" src="src/libndp-1.8-3.1.src.rpm">
          <filename>libndp-1.8-3.1.src.rpm</filename>
        </package>
        <package name="libndp-debugsource" epoch="0" version="1.8" release="3.1" arch="x86_64" src="x86_64/libndp-debugsource-1.8-3.1.x86_64.rpm">
          <filename>libndp-debugsource-1.8-3.1.x86_64.rpm</filename>
        </package>
        <package name="libndp0" epoch="0" version="1.8" release="3.1" arch="x86_64" src="x86_64/libndp0-1.8-3.1.x86_64.rpm">
          <filename>libndp0-1.8-3.1.x86_64.rpm</filename>
        </package>
        <package name="libndp0-debuginfo" epoch="0" version="1.8" release="3.1" arch="x86_64" src="x86_64/libndp0-debuginfo-1.8-3.1.x86_64.rpm">
          <filename>libndp0-debuginfo-1.8-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>139</id>
    <title>Security update for wpa_supplicant</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1733848122" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219975" id="1219975" title="VUL-0: CVE-2023-52160: wpa_supplicant: Bypassing WiFi Authentication" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52160" id="CVE-2023-52160" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52160" type="cve" />
    </references>
    <description>This update for wpa_supplicant fixes the following issues:

- CVE-2023-52160: Fixed WiFi authentication bypass (bsc#1219975).
</description>
    <pkglist>
      <collection>
        <package name="wpa_supplicant" epoch="0" version="2.10" release="5.1" arch="src" src="src/wpa_supplicant-2.10-5.1.src.rpm">
          <filename>wpa_supplicant-2.10-5.1.src.rpm</filename>
        </package>
        <package name="wpa_supplicant" epoch="0" version="2.10" release="5.1" arch="x86_64" src="x86_64/wpa_supplicant-2.10-5.1.x86_64.rpm">
          <filename>wpa_supplicant-2.10-5.1.x86_64.rpm</filename>
        </package>
        <package name="wpa_supplicant-debuginfo" epoch="0" version="2.10" release="5.1" arch="x86_64" src="x86_64/wpa_supplicant-debuginfo-2.10-5.1.x86_64.rpm">
          <filename>wpa_supplicant-debuginfo-2.10-5.1.x86_64.rpm</filename>
        </package>
        <package name="wpa_supplicant-debugsource" epoch="0" version="2.10" release="5.1" arch="x86_64" src="x86_64/wpa_supplicant-debugsource-2.10-5.1.x86_64.rpm">
          <filename>wpa_supplicant-debugsource-2.10-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>122</id>
    <title>Security update for cups</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1733488764" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219503" id="1219503" title="cups 2.4.7 in Tumbleweed snapshot 20240131 requires &quot;group(ntadmin)&quot; and pulls in samba as the only provider." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225365" id="1225365" title="VUL-0: CVE-2024-35235: cups: Listen port arbitrary chmod 0140777" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4504" id="CVE-2023-4504" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4504" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32324" id="CVE-2023-32324" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32324" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32360" id="CVE-2023-32360" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32360" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34241" id="CVE-2023-34241" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34241" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35235" id="CVE-2024-35235" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35235" type="cve" />
    </references>
    <description>This update for cups fixes the following issues:

- Version upgrade to 2.4.11:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.11 brings several bug fixes regarding IPP response
  validation, processing PPD values, Web UI support
  (checkbox support, modifying printers) and others fixes.
  Detailed list (from CHANGES.md):
  * Updated the maximum file descriptor limit
    for `cupsd` to 64k-1 (Issue #989)
  * Fixed `lpoptions -d` with a discovered
    but not added printer (Issue #833)
  * Fixed incorrect error message for HTTP/IPP errors (Issue #893)
  * Fixed JobPrivateAccess and SubscriptionPrivateAccess support
    for "all" (Issue #990)
  * Fixed issues with cupsGetDestMediaByXxx (Issue #993)
  * Fixed adding and modifying of printers
    via the web interface (Issue #998)
  * Fixed HTTP PeerCred authentication
    for domain users (Issue #1001)
  * Fixed checkbox support (Issue #1008)
  * Fixed printer state notifications (Issue #1013)
  * Fixed IPP Everywhere printer setup (Issue #1033)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  In particular CUPS 2.4.11 contains those commit regarding
  IPP response validation and processing PPD values:
  * "Quote PPD localized strings"
    https://github.com/OpenPrinting/cups/commit/1e6ca5913eceee906038bc04cc7ccfbe2923bdfd
    plus a cleanup to "Fix warnings for unused vars"
    https://github.com/OpenPrinting/cups/commit/2abe1ba8a66864aa82cd9836b37e57103b8e1a3b

- Version upgrade to 2.4.10:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.10 brings two fixes:
  * Fixed error handling when reading a mixed 1setOf attribute.
  * Fixed scheduler start if there is only domain socket
    to listen on (Issue #985) which is fix for regression
    after fix for CVE-2024-35235 in scenarios where is
    no other listeners in cupsd.conf than domain socket
    created on demand by systemd, launchd or upstart.
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.9:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.9 brings security fix for CVE-2024-35235 and
  several bug fixes regarding CUPS Web User Interface,
  PPD generation and HTTP protocol implementation.
  Detailed list (from CHANGES.md):
  * Fixed domain socket handling (CVE-2024-35235)
  * Fixed creating of `cupsUrfSupported` PPD keyword
    (Issue #952)
  * Fixed searching for destinations in web ui (Issue #954)
  * Fixed TLS negotiation using OpenSSL with servers
    that require the TLS SNI extension.
  * Really raised `cups_enum_dests()` timeout for listing
    available IPP printers (Issue #751)...
  * Fixed `Host` header regression (Issue #967)
  * Fixed DNS-SD lookups of local services with Avahi
    (Issue #970)
  * Fixed listing jobs in destinations in web ui.
    (Apple issue #6204)
  * Fixed showing search query in web ui help page.
    (Issue #977)
  Issues are those at https://github.com/OpenPrinting/cups/issues
  Apple issues are those at https://github.com/apple/cups/issues

- Update to version 2.4.8:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.8 brings many bug fixes which aggregated over the last
  half a year. It brings the important fix for race conditions
  and errors which can happen when installing permanent
  IPP Everywhere printer, support for PAM modules password-auth
  and system-auth and new option for lpstat which can show only
  the successful jobs.
  Detailed list (from CHANGES.md):
  * Added warning if the device has to be asked for
    'all,media-col-database' separately (Issue #829)
  * Added new value for 'lpstat' option '-W' - successfull - for
    getting successfully printed jobs (Issue #830)
  * Added support for PAM modules password-auth
    and system-auth (Issue #892)
  * Updated IPP Everywhere printer creation error
    reporting (Issue #347)
  * Updated and documented the MIME typing buffering
    limit (Issue #925)
  * Raised 'cups_enum_dests()' timeout for listing
    available IPP printers (Issue #751)
  * Now report an error for temporary printer defaults
    with lpadmin (Issue #237)
  * Fixed mapping of PPD InputSlot, MediaType,
    and OutputBin values (Issue #238)
  * Fixed "document-unprintable-error" handling (Issue #391)
  * Fixed the web interface not showing an error
    for a non-existent printer (Issue #423)
  * Fixed printing of jobs with job name longer than 255 chars
    on older printers (Issue #644)
  * Really backported fix for Issue #742
  * Fixed 'cupsCopyDestInfo' device connection
    detection (Issue #586)
  * Fixed "Upgrade" header handling when there is
    no TLS support (Issue #775)
  * Fixed memory leak when unloading a job (Issue #813)
  * Fixed memory leak when creating color profiles (Issue #815)
  * Fixed a punch finishing bug in the IPP Everywhere
    support (Issue #821)
  * Fixed crash in 'scan_ps()' if incoming argument
    is NULL (Issue #831)
  * Fixed setting job state reasons for successful
    jobs (Issue #832)
  * Fixed infinite loop in IPP backend if hostname
    is IP address with Kerberos (Issue #838)
  * Added additional check on socket if 'revents' from 'poll()'
    returns POLLHUP together with POLLIN or POLLOUT
    in 'httpAddrConnect2()' (Issue #839)
  * Fixed crash in 'ppdEmitString()' if 'size' is NULL (Issue #850)
  * Fixed reporting 'media-source-supported' when
    sharing printer  which has numbers as strings instead of
    keywords as 'InputSlot' values (Issue #859)
  * Fixed IPP backend to support the "print-scaling" option
    with IPP printers (Issue #862)
  * Fixed potential race condition for the creation
    of temporary queues (Issue #871)
  * Fixed 'httpGets' timeout handling (Issue #879)
  * Fixed checking for required attributes during
    PPD generation (Issue #890)
  * Fixed encoding of IPv6 addresses in HTTP requests (Issue #903)
  * Fixed sending response headers to client (Issue #927)
  * Fixed CGI program initialization and validation
    of form checkbox and text fields.
  Issues are those at https://github.com/OpenPrinting/cups/issues

- Version upgrade to 2.4.7:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.7 is released to ship the fix for CVE-2023-4504
  and several other changes, among them it is
  adding OpenSSL support for cupsHashData function and bug fixes.
  Detailed list:
  * CVE-2023-4504 - Fixed Heap-based buffer overflow when
    reading Postscript in PPD files
  * Added OpenSSL support for cupsHashData (Issue #762)
  * Fixed delays in lpd backend (Issue #741)
  * Fixed extensive logging in scheduler (Issue #604)
  * Fixed hanging of lpstat on IBM AIX (Issue #773)
  * Fixed hanging of lpstat on Solaris (Issue #156)
  * Fixed printing to stderr if we can't open cups-files.conf
    (Issue #777)
  * Fixed purging job files via cancel -x (Issue #742)
  * Fixed RFC 1179 port reserving behavior in LPD backend
    (Issue #743)
  * Fixed a bug in the PPD command interpretation code
    (Issue #768)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.6:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.6 is released to ship the fix for CVE-2023-34241
  and two other bug fixes.
  Detailed list:
  * Fix linking error on old MacOS (Issue #715)
  * Fix printing multiple files on specific printers (Issue #643)
  * Fix use-after-free when logging warnings in case of failures
    in cupsdAcceptClient() (fixes CVE-2023-34241)
  Issues are those at https://github.com/OpenPrinting/cups/issues
- Version upgrade to 2.4.5:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.5 is a hotfix release for a bug which corrupted
  locally saved certificates, which broke secured printing
  via TLS after the first print job.
- Version upgrade to 2.4.4:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.4 release is created as a hotfix for segfault
  in cupsGetNamedDest(), when caller tries to find
  the default destination and the default destination
  is not set on the machine.
- Version upgrade to 2.4.3:
  See https://github.com/openprinting/cups/releases
  CUPS 2.4.3 brings fix for CVE-2023-32324, several improvements
  and many bug fixes. CUPS now implements fallback for printers
  with broken firmware, which is not capable of answering
  to IPP request get-printer-attributes with all,
  media-col-database - this enables driverless support for
  bunch of printers which don't follow IPP Everywhere standard.
  Aside from the CVE fix the most important fixes are around color
  settings, printer application support fixes and OpenSSL support.
  Detailed list of changes:
  * Added a title with device uri for found network printers
    (Issues #402, #393)
  * Added new media sizes defined by IANA (Issues #501)
  * Added quirk for GoDEX label printers (Issue #440)
  * Fixed --enable-libtool-unsupported (Issue #394)
  * Fixed configuration on RISC-V machines (Issue #404)
  * Fixed the device_uri invalid pointer for driverless printers
    with .local hostname (Issue #419)
  * Fixed an OpenSSL crash bug (Issue #409)
  * Fixed a potential SNMP OID value overflow issue (Issue #431)
  * Fixed an OpenSSL certificate loading issue (Issue #465)
  * Fixed Brazilian Portuguese translations (Issue #288)
  * Fixed cupsd default keychain location when building
    with OpenSSL (Issue #529)
  * Fixed default color settings for CMYK printers as well
    (Issue #500)
  * Fixed duplicate PPD2IPP media-type names (Issue #688)
  * Fixed possible heap buffer overflow in _cups_strlcpy()
    (fixes CVE-2023-32324)
  * Fixed InputSlot heuristic for photo sizes smaller than 5x7"
    if there is no media-source in the request (Issue #569)
  * Fixed invalid memory access during generating IPP Everywhere
    queue (Issue #466)
  * Fixed lprm if no destination is provided (Issue #457)
  * Fixed memory leaks in create_local_bg_thread() (Issue #466)
  * Fixed media size tolerance in ippeveprinter (Issue #487)
  * Fixed passing command name without path into ippeveprinter
    (Issue #629)
  * Fixed saving strings file path in printers.conf (Issue #710)
  * Fixed TLS certificate generation bugs (Issue #652)
  * ippDeleteValues would not delete the last value (Issue #556)
  * Ignore some of IPP defaults if the application sends
    its PPD alternative (Issue #484)
  * Make Letter the default size in ippevepcl (Issue #543)
  * Now accessing Admin page in Web UI requires authentication
    (Issue #518)
  * Now look for default printer on network if needed (Issue #452)
  * Now we poll media-col-database separately if we fail at first
    (Issue #599)
  * Now report fax attributes and values as needed (Issue #459)
  * Now localize HTTP responses using the Content-Language value
    (Issue #426)
  * Raised file size limit for importing PPD via Web UI
    (Issue #433)
  * Raised maximum listen backlog size to INT MAX (Issue #626)
  * Update print-color-mode if the printer is modified
    via ColorModel PPD option (Issue #451)
  * Use localhost when printing via printer application
    (Issue #353)
  * Write defaults into /etc/cups/lpoptions if we're root
    (Issue #456)
  Issues are those at https://github.com/OpenPrinting/cups/issues
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.4.11" release="1.1" arch="src" src="src/cups-2.4.11-1.1.src.rpm">
          <filename>cups-2.4.11-1.1.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.4.11" release="1.1" arch="x86_64" src="x86_64/cups-config-2.4.11-1.1.x86_64.rpm">
          <filename>cups-config-2.4.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="cups-debugsource" epoch="0" version="2.4.11" release="1.1" arch="x86_64" src="x86_64/cups-debugsource-2.4.11-1.1.x86_64.rpm">
          <filename>cups-debugsource-2.4.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.4.11" release="1.1" arch="x86_64" src="x86_64/libcups2-2.4.11-1.1.x86_64.rpm">
          <filename>libcups2-2.4.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2-debuginfo" epoch="0" version="2.4.11" release="1.1" arch="x86_64" src="x86_64/libcups2-debuginfo-2.4.11-1.1.x86_64.rpm">
          <filename>libcups2-debuginfo-2.4.11-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>147</id>
    <title>Security update for containerd</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1734540146" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1200528" id="1200528" title="VUL-0: CVE-2022-1996: go-restful: CORS bypass" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217070" id="1217070" title="VUL-0: CVE-2023-47108: TRACKERBUG: otelgrpc: DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221400" id="1221400" title="VUL-0: CVE-2023-45288: go1.21,go1.22: net/http, x/net/http2: close connections when receiving too many headers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224323" id="1224323" title="VUL-0: containerd: mitigate power-based side channel attacks (advisory GHSA-jq35-85cj-fj4p)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228553" id="1228553" title="VUL-0: CVE-2023-45142: TRACKERBUG: otelhttp,otelhttptrace,otelrestful: DoS vulnerability" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1996" id="CVE-2022-1996" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1996" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45142" id="CVE-2023-45142" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45142" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288" id="CVE-2023-45288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47108" id="CVE-2023-47108" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47108" type="cve" />
    </references>
    <description>This update for containerd fixes the following issues:

- Update to containerd v1.7.21. Upstream release notes:
  https://github.com/containerd/containerd/releases/tag/v1.7.21
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553

- Update to containerd v1.7.17. Upstream release notes:
  https://github.com/containerd/containerd/releases/tag/v1.7.17

- Update to containerd v1.7.16. Upstream release notes:
  https://github.com/containerd/containerd/releases/tag/v1.7.16
  CVE-2023-45288 bsc#1221400

- Update to containerd v1.7.15. Upstream release notes:
  https://github.com/containerd/containerd/releases/tag/v1.7.15

- Update to containerd v1.7.14. Upstream release notes:
  https://github.com/containerd/containerd/releases/tag/v1.7.14

- Update to containerd v1.7.13. Upstream release notes:
  https://github.com/containerd/containerd/releases/tag/v1.7.13

- Update to containerd v1.7.12. Upstream release notes:
  https://github.com/containerd/containerd/releases/tag/v1.7.12

- Update to containerd v1.7.11. Upstream release notes:
  https://github.com/containerd/containerd/releases/tag/v1.7.11
  GHSA-jq35-85cj-fj4p bsc#1224323
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.7.21" release="1.1" arch="src" src="src/containerd-1.7.21-1.1.src.rpm">
          <filename>containerd-1.7.21-1.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.21" release="1.1" arch="x86_64" src="x86_64/containerd-1.7.21-1.1.x86_64.rpm">
          <filename>containerd-1.7.21-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>189</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1737126207" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233313" id="1233313" title="VUL-0: ucode-intel: 20241112 release" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21820" id="CVE-2024-21820" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21820" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21853" id="CVE-2024-21853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21853" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23918" id="CVE-2024-23918" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23918" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23984" id="CVE-2024-23984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23984" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24968" id="CVE-2024-24968" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24968" type="cve" />
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Intel CPU Microcode was updated to the 20241112 release (bsc#1233313)

  - CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially enable denial of service via local access.
  - CVE-2024-23918: Improper conditions check in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
  - CVE-2024-21820: Incorrect default permissions in some Intel Xeon processor memory controller configurations when using Intel SGX may allow a privileged user to potentially enable escalation of privilege via local access.
  - CVE-2024-24968: Improper finite state machines (FSMs) in hardware logic in some Intel Processors may allow an privileged user to potentially enable a denial of service via local access.
  - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local access.
  - Update for functional issues.

  Updated Platforms:

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000036 | 00000037 | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 00000036 | 00000037 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000434 | 00000435 | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 00000434 | 00000435 | Core Gen12
  | EMR-SP         | A0       | 06-cf-01/87 | 21000230 | 21000283 | Xeon Scalable Gen5
  | EMR-SP         | A1       | 06-cf-02/87 | 21000230 | 21000283 | Xeon Scalable Gen5
  | MTL            | C0       | 06-aa-04/e6 | 0000001f | 00000020 | Core™ Ultra Processor
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004122 | 00004123 | Core Gen13
  | RPL-HX/S       | C0       | 06-bf-02/07 | 00000036 | 00000037 | Core Gen13/Gen14
  | RPL-S          | H0       | 06-bf-05/07 | 00000036 | 00000037 | Core Gen13/Gen14
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004122 | 00004123 | Core Gen13
  | SPR-SP         | E3       | 06-8f-06/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b0005c0 | 2b000603 | Xeon Scalable Gen4

  New Disclosures Updated in Prior Releases:

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ICL-D          | B0       | 06-6c-01/10 | 010002b0 | N/A      | Xeon D-17xx/D-18xx, D-27xx/D-28xx
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003e7 | N/A      | Xeon Scalable Gen3

- Intel CPU Microcode was updated to the 20241029 release
  Update for functional issues.

  Updated Platforms:

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | RPL-E/HX/S     | B0       | 06-b7-01/32 | 00000129 | 0000012b | Core Gen13/Gen14
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20241112" release="1.1" arch="src" src="src/ucode-intel-20241112-1.1.src.rpm">
          <filename>ucode-intel-20241112-1.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-intel" epoch="0" version="20241112" release="1.1" arch="x86_64" src="x86_64/ucode-intel-20241112-1.1.x86_64.rpm">
          <filename>ucode-intel-20241112-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>125</id>
    <title>Security update for python-requests</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1733488765" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224788" id="1224788" title="VUL-0: CVE-2024-35195: python-requests: session object does not verify requests after making first request with verify=False" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226321" id="1226321" title="HTTPie SSL certificate problems with python-requests 2.32.3 (fine with 2.32.2)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231500" id="1231500" title="registercloudguest throws SSL error on registration call" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35195" id="CVE-2024-35195" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35195" type="cve" />
    </references>
    <description>This update for python-requests contains the following fixes:

- Add patch to fix to inject the default CA bundles if they are not specified.
    (bsc#1226321, bsc#1231500)

- Remove Requires on python-py, it should have been removed earlier. 

- update to 2.32.3:
  * Fixed bug breaking the ability to specify custom SSLContexts
    in sub-classes of HTTPAdapter.
  * Fixed issue where Requests started failing to run on Python
    versions compiled without the `ssl` module.

  * To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0,
    we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing
    custom HTTPAdapters will need to migrate their code to use this new API. get_connection is
  * Fixed an issue where setting verify=False on the first request from a Session
    will cause subsequent requests to the same origin to also ignore cert verification,
  * verify=True now reuses a global SSLContext which should improve request time
  * Requests now supports optional use of character detection (chardet or charset_normalizer)
    when repackaged or vendored. This enables pip and other projects to minimize their
</description>
    <pkglist>
      <collection>
        <package name="python-requests" epoch="0" version="2.32.3" release="1.1" arch="src" src="src/python-requests-2.32.3-1.1.src.rpm">
          <filename>python-requests-2.32.3-1.1.src.rpm</filename>
        </package>
        <package name="python311-requests" epoch="0" version="2.32.3" release="1.1" arch="noarch" src="noarch/python311-requests-2.32.3-1.1.noarch.rpm">
          <filename>python311-requests-2.32.3-1.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>140</id>
    <title>Security update for glib2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1733848122" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233282" id="1233282" title="VUL-0: CVE-2024-52533: glib2: single byte buffer overflow in set_connect_msg()" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52533" id="CVE-2024-52533" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52533" type="cve" />
    </references>
    <description>This update for glib2 fixes the following issues:

- CVE-2024-52533: Fix a single byte buffer overflow (bsc#1233282).
</description>
    <pkglist>
      <collection>
        <package name="glib2" epoch="0" version="2.76.2" release="6.1" arch="src" src="src/glib2-2.76.2-6.1.src.rpm">
          <filename>glib2-2.76.2-6.1.src.rpm</filename>
        </package>
        <package name="glib2-debugsource" epoch="0" version="2.76.2" release="6.1" arch="x86_64" src="x86_64/glib2-debugsource-2.76.2-6.1.x86_64.rpm">
          <filename>glib2-debugsource-2.76.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.76.2" release="6.1" arch="x86_64" src="x86_64/glib2-tools-2.76.2-6.1.x86_64.rpm">
          <filename>glib2-tools-2.76.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools-debuginfo" epoch="0" version="2.76.2" release="6.1" arch="x86_64" src="x86_64/glib2-tools-debuginfo-2.76.2-6.1.x86_64.rpm">
          <filename>glib2-tools-debuginfo-2.76.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.76.2" release="6.1" arch="x86_64" src="x86_64/libgio-2_0-0-2.76.2-6.1.x86_64.rpm">
          <filename>libgio-2_0-0-2.76.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0-debuginfo" epoch="0" version="2.76.2" release="6.1" arch="x86_64" src="x86_64/libgio-2_0-0-debuginfo-2.76.2-6.1.x86_64.rpm">
          <filename>libgio-2_0-0-debuginfo-2.76.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.76.2" release="6.1" arch="x86_64" src="x86_64/libglib-2_0-0-2.76.2-6.1.x86_64.rpm">
          <filename>libglib-2_0-0-2.76.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0-debuginfo" epoch="0" version="2.76.2" release="6.1" arch="x86_64" src="x86_64/libglib-2_0-0-debuginfo-2.76.2-6.1.x86_64.rpm">
          <filename>libglib-2_0-0-debuginfo-2.76.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.76.2" release="6.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-2.76.2-6.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-2.76.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0-debuginfo" epoch="0" version="2.76.2" release="6.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-debuginfo-2.76.2-6.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-debuginfo-2.76.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.76.2" release="6.1" arch="x86_64" src="x86_64/libgobject-2_0-0-2.76.2-6.1.x86_64.rpm">
          <filename>libgobject-2_0-0-2.76.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0-debuginfo" epoch="0" version="2.76.2" release="6.1" arch="x86_64" src="x86_64/libgobject-2_0-0-debuginfo-2.76.2-6.1.x86_64.rpm">
          <filename>libgobject-2_0-0-debuginfo-2.76.2-6.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>141</id>
    <title>Security update for python-tornado6</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1733848123" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233668" id="1233668" title="VUL-0: CVE-2024-52804: python-tornado,python-tornado6: algorithm used for parsing HTTP cookies can have quadratic complexity and lead to excessive CPU consumption" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52804" id="CVE-2024-52804" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52804" type="cve" />
    </references>
    <description>This update for python-tornado6 fixes the following issues:

- CVE-2024-52804: Avoid quadratic performance of cookie parsing (bsc#1233668).
</description>
    <pkglist>
      <collection>
        <package name="python-tornado6" epoch="0" version="6.4" release="2.1" arch="src" src="src/python-tornado6-6.4-2.1.src.rpm">
          <filename>python-tornado6-6.4-2.1.src.rpm</filename>
        </package>
        <package name="python-tornado6-debugsource" epoch="0" version="6.4" release="2.1" arch="x86_64" src="x86_64/python-tornado6-debugsource-6.4-2.1.x86_64.rpm">
          <filename>python-tornado6-debugsource-6.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-tornado6" epoch="0" version="6.4" release="2.1" arch="x86_64" src="x86_64/python311-tornado6-6.4-2.1.x86_64.rpm">
          <filename>python311-tornado6-6.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-tornado6-debuginfo" epoch="0" version="6.4" release="2.1" arch="x86_64" src="x86_64/python311-tornado6-debuginfo-6.4-2.1.x86_64.rpm">
          <filename>python311-tornado6-debuginfo-6.4-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>128</id>
    <title>Security update for wget</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1733488843" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233773" id="1233773" title="VUL-0: CVE-2024-10524: wget: SSRF via shorthand HTTP URL" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10524" id="CVE-2024-10524" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10524" type="cve" />
    </references>
    <description>This update for wget fixes the following issues:

- CVE-2024-10524: Drop support for shorthand URLs (bsc#1233773).
</description>
    <pkglist>
      <collection>
        <package name="wget" epoch="0" version="1.24.5" release="2.1" arch="src" src="src/wget-1.24.5-2.1.src.rpm">
          <filename>wget-1.24.5-2.1.src.rpm</filename>
        </package>
        <package name="wget" epoch="0" version="1.24.5" release="2.1" arch="x86_64" src="x86_64/wget-1.24.5-2.1.x86_64.rpm">
          <filename>wget-1.24.5-2.1.x86_64.rpm</filename>
        </package>
        <package name="wget-debuginfo" epoch="0" version="1.24.5" release="2.1" arch="x86_64" src="x86_64/wget-debuginfo-1.24.5-2.1.x86_64.rpm">
          <filename>wget-debuginfo-1.24.5-2.1.x86_64.rpm</filename>
        </package>
        <package name="wget-debugsource" epoch="0" version="1.24.5" release="2.1" arch="x86_64" src="x86_64/wget-debugsource-1.24.5-2.1.x86_64.rpm">
          <filename>wget-debugsource-1.24.5-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>218</id>
    <title>Security update for kernel-firmware</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1740489888" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219458" id="1219458" title="[DELL SLES15SP6 BUG]: observed: 4xxx 0000:0b:00.0: Direct firmware load for qat_402xx_mmp.bin failed with error -2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229069" id="1229069" title="VUL-0: CVE-2023-31315: kernel-firmware: Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229272" id="1229272" title="Package loss with WIFI with the Realtek BT firmware update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230007" id="1230007" title="[Possibly firmware bug] openSUSE Tumbleweed doesen't boot properly after 20240830 snapshot" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230596" id="1230596" title="Wifi not working with Qualcomm WCN785x on current version of kernel-firmware-ath12k" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234027" id="1234027" title="Unable to connect to WiFi on openSUSE Leap 15.6" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31315" id="CVE-2023-31315" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31315" type="cve" />
    </references>
    <description>This update for kernel-firmware fixes the following issues:

- Update to version 20241128 (git commit ea71da6f0690):
  * i915: Update Xe2LPD DMC to v2.24
  * cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  * iwlwifi: add Bz-gf FW for core89-91 release
  * amdgpu: update smu 13.0.10 firmware
  * amdgpu: update sdma 6.0.3 firmware
  * amdgpu: update psp 13.0.10 firmware
  * amdgpu: update gc 11.0.3 firmware
  * amdgpu: add smu 13.0.14 firmware
  * amdgpu: add sdma 4.4.5 firmware
  * amdgpu: add psp 13.0.14 firmware
  * amdgpu: add gc 9.4.4 firmware
  * amdgpu: update vcn 3.1.2 firmware
  * amdgpu: update psp 13.0.5 firmware
  * amdgpu: update psp 13.0.8 firmware
  * amdgpu: update vega20 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update psp 14.0.4 firmware
  * amdgpu: update gc 11.5.2 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update vcn 4.0.0 firmware
  * amdgpu: update smu 13.0.0 firmware
  * amdgpu: update psp 13.0.0 firmware
  * amdgpu: update gc 11.0.0 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update psp 13.0.11 firmware
  * amdgpu: update gc 11.0.4 firmware
  * amdgpu: update vcn 4.0.2 firmware
  * amdgpu: update psp 13.0.4 firmware
  * amdgpu: update gc 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update vpe 6.1.1 firmware
  * amdgpu: update vcn 4.0.6 firmware
  * amdgpu: update psp 14.0.1 firmware
  * amdgpu: update gc 11.5.1 firmware
  * amdgpu: update vcn 4.0.5 firmware
  * amdgpu: update psp 14.0.0 firmware
  * amdgpu: update gc 11.5.0 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update arcturus firmware
  * amdgpu: update renoir firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update sdma 4.4.2 firmware
  * amdgpu: update psp 13.0.6 firmware
  * amdgpu: update gc 9.4.3 firmware
  * amdgpu: update vcn 4.0.4 firmware
  * amdgpu: update psp 13.0.7 firmware
  * amdgpu: update gc 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware

- Update to version 20241125 (git commit 508d770ee6f3):
  * ice: update ice DDP wireless_edge package to 1.3.20.0
  * ice: update ice DDP comms package to 1.3.52.0
  * ice: update ice DDP package to ice-1.3.41.0
  * amdgpu: update DMCUB to v9.0.10.0 for DCN314
  * amdgpu: update DMCUB to v9.0.10.0 for DCN351

- Update to version 20241121 (git commit 48bb90cceb88):
  * linux-firmware: Update AMD cpu microcode
  * xe: Update GUC to v70.36.0 for BMG, LNL
  * i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL

- Update to version 20241119 (git commit 60cdfe1831e8):
  * iwlwifi: add Bz-gf FW for core91-69 release

- Update to version 20241113 (git commit 1727aceef4d2):
  * qcom: venus-5.4: add venus firmware file for qcs615
  * qcom: update venus firmware file for SC7280
  * QCA: Add 22 bluetooth firmware nvm files for QCA2066

- Update to version 20241112 (git commit c57a0a42468b):
  * mediatek MT7922: update bluetooth firmware to 20241106163512
  * mediatek MT7921: update bluetooth firmware to 20241106151414
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device
  * qcom: Add QDU100 firmware image files.
  * qcom: Update aic100 firmware files
  * dedup-firmware.sh: fix infinite loop for --verbose
  * rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7
  * cnm: update chips&amp;media wave521c firmware.
  * mediatek MT7920: update bluetooth firmware to 20241104091246
  * linux-firmware: update firmware for MT7920 WiFi device
  * copy-firmware.sh: Run check_whence.py only if in a git repo
  * cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  * amdgpu: update DMCUB to v9.0.10.0 for DCN351
  * rtw89: 8852a: update fw to v0.13.36.2
  * rtw88: Add firmware v52.14.0 for RTL8812AU
  * i915: Update Xe2LPD DMC to v2.23
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  * linux-firmware: update firmware for MT7925 WiFi device
  * WHENCE: Add sof-tolg for mt8195
  *  linux-firmware: Update firmware file for Intel BlazarI core
  * qcom: Add link for QCS6490 GPU firmware
  * qcom: update gpu firmwares for qcs615 chipset
  * cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops
  * mediatek: Add sof-tolg for mt8195

- Update to version 20241029 (git commit 048795eef350):
  * ath11k: move WCN6750 firmware to the device-specific subdir
  * xe: Update LNL GSC to v104.0.0.1263
  * i915: Update MTL/ARL GSC to v102.1.15.1926

- Update to version 20241028 (git commit 987607d681cb):
  * amdgpu: DMCUB updates for various AMDGPU ASICs
  * i915: Add Xe3LPD DMC
  * cnm: update chips&amp;media wave521c firmware.
  * linux-firmware: Add firmware for Cirrus CS35L41
  * linux-firmware: Update firmware file for Intel BlazarU core
  * Makefile: error out of 'install' if COPYOPTS is set

- Update to version 20241018 (git commit 2f0464118f40):
  * check_whence.py: skip some validation if git ls-files fails
  * qcom: Add Audio firmware for X1E80100 CRD/QCPs
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * brcm: replace NVRAM for Jetson TX1
  * rtlwifi: Update firmware for RTL8192FU to v7.3
  * make: separate installation and de-duplication targets
  * check_whence.py: check the permissions
  * Remove execute bit from firmware files
  * configure: remove unused file
  * rtl_nic: add firmware rtl8125d-1

- Update to version 20241014 (git commit 99f9c7ed1f4a):
  * iwlwifi: add gl/Bz FW for core91-69 release
  * iwlwifi: update ty/So/Ma firmwares for core91-69 release
  * iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release
  * cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop
  * cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops
  * cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops
  * linux-firmware: update firmware for en8811h 2.5G ethernet phy
  * QCA: Add Bluetooth firmwares for WCN785x with UART transport

- Update to version 20241011 (git commit 808cba847c70):
  * mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher
  * ath12k: WCN7850 hw2.0: update board-2.bin (bsc#1230596)
  * ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1
  * ath12k: QCN9274 hw2.0: add board-2.bin
  * copy-firmware.sh: rename variables in symlink hanlding
  * copy-firmware.sh: remove no longer reachable test -L
  * copy-firmware.sh: remove no longer reachable test -f
  * copy-firmware.sh: call ./check_whence.py before parsing the file
  * copy-firmware.sh: warn if the destination folder is not empty
  * copy-firmware.sh: add err() helper
  * copy-firmware.sh: fix indentation
  * copy-firmware.sh: reset and consistently handle destdir
  * Revert "copy-firmware: Support additional compressor options"
  * copy-firmware.sh: flesh out and fix dedup-firmware.sh
  * Style update yaml files
  * editorconfig: add initial config file
  * check_whence.py: annotate replacement strings as raw
  * check_whence.py: LC_ALL=C sort -u the filelist
  * check_whence.py: ban link-to-a-link
  * check_whence.py: use consistent naming
  * Add a link from TAS2XXX1EB3.bin -&gt; ti/tas2781/TAS2XXX1EB30.bin
  * tas2781: Upload dsp firmware for ASUS laptop 1EB30 &amp; 1EB31

- Update to version 20241010 (git commit d4e688aa74a0):
  * rtlwifi: Add firmware v39.0 for RTL8192DU
  * Revert "ath12k: WCN7850 hw2.0: update board-2.bin"
    (replaced with a newer firmware in this package instead)

- Update to version 20241004 (git commit bbb77872a8a7):
  * amdgpu: DMCUB DCN35 update
  * brcm: Add BCM4354 NVRAM for Jetson TX1
  * brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram

- Update to version 20241001 (git commit 51e5af813eaf):
  * linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920)
  * linux-firmware: add firmware for MT7920
  * amdgpu: update raven firmware
  * amdgpu: update SMU 13.0.10 firmware
  * amdgpu: update PSP 13.0.10 firmware
  * amdgpu: update GC 11.0.3 firmware
  * amdgpu: update VCN 3.1.2 firmware
  * amdgpu: update PSP 13.0.5 firmware
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update vega12 firmware
  * amdgpu: update PSP 14.0.4 firmware
  * amdgpu: update GC 11.5.2 firmware
  * amdgpu: update vega10 firmware
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: update PSP 13.0.0 firmware
  * amdgpu: update GC 11.0.0 firmware
  * amdgpu: update picasso firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update green sardine firmware
  * amdgpu: update VCN 4.0.2 firmware
  * amdgpu: update PSP 13.0.4 firmware
  * amdgpu: update GC 11.0.1 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update VCN 4.0.6 firmware
  * amdgpu: update PSP 14.0.1 firmware
  * amdgpu: update GC 11.5.1 firmware
  * amdgpu: update VCN 4.0.5 firmware
  * amdgpu: update PSP 14.0.0 firmware
  * amdgpu: update GC 11.5.0 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update renoir firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update SMU 13.0.6 firmware
  * amdgpu: update SDMA 4.4.2 firmware
  * amdgpu: update PSP 13.0.6 firmware
  * amdgpu: update GC 9.4.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update VCN 4.0.4 firmware
  * amdgpu: update PSP 13.0.7 firmware
  * amdgpu: update GC 11.0.2 firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update aldebaran firmware
  * qcom: update gpu firmwares for qcm6490 chipset
  * mt76: mt7996: add firmware files for mt7992 chipset
  * mt76: mt7996: add firmware files for mt7996 chipset variants
  * qcom: add gpu firmwares for sa8775p chipset
  * rtw89: 8922a: add fw format-2 v0.35.42.1

- Update to version 20240913 (git commit bcbdd1670bc3):
  * amdgpu: update DMCUB to v0.0.233.0 DCN351
  * copy-firmware: Handle links to uncompressed files
  * WHENCE: Fix battmgr.jsn entry type

- Update to version 20240912 (git commit 47c72fee8fe3):
  * amdgpu: Add VPE 6.1.3 microcode
  * amdgpu: add SDMA 6.1.2 microcode
  * amdgpu: Add support for PSP 14.0.4
  * amdgpu: add GC 11.5.2 microcode
  * qcom: qcm6490: add ADSP and CDSP firmware
  * linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  * linux-firmware: Update firmware file for Intel BlazarU core
  * linux-firmware: Update firmware file for Intel Bluetooth Solar core

- Update to version 20240911 (git commit 59def907425d):
  * rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 (bsc#1229272)

- Update to version 20240910 (git commit 2a7b69a3fa30):
  * realtek: rt1320: Add patch firmware of MCU
  * i915: Update MTL DMC v2.23
  * cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops

- Update to version 20240903 (git commit 96af55bd3d0b):
  * amdgpu: Revert sienna cichlid dmcub firmware update (bsc#1230007)
  * iwlwifi: add Bz FW for core89-58 release
  * rtl_nic: add firmware rtl8126a-3
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)

- Update to version 20240830 (git commit d6c600d46981):
  * amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351
  * qcom: vpu: restore compatibility with kernels before 6.6

- Update to version 20240826 (git commit bec4fd18cc57):
  (including ath11k f/w updates for bsc#1234027)
  * amdgpu: DMCUB updates forvarious AMDGPU ASICs
  * rtw89: 8922a: add fw format-1 v0.35.41.0
  * linux-firmware: update firmware for MT7925 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  * rtl_bt: Add firmware and config files for RTL8922A
  * rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part
  * rtl_bt: de-dupe identical config.bin files
  * rename rtl8723bs_config-OBDA8723.bin -&gt; rtl_bt/rtl8723bs_config.bin
  * linux-firmware: Update AMD SEV firmware
  * linux-firmware: update firmware for MT7996
  * Revert "i915: Update MTL DMC v2.22"
  * ath12k: WCN7850 hw2.0: update board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41
  * ath11k: WCN6855 hw2.0: update board-2.bin
  * ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3
  * ath11k: QCA2066 hw2.1: add board-2.bin
  * ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1
  * qcom: vpu: add video firmware for sa8775p
  * amdgpu: DMCUB updates for various AMDGPU ASICs

- Update to version 20240809 (git commit 36db650dae03):
  * qcom: update path for video firmware for vpu-1/2/3.0
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642
  * rtw89: 8852c: add fw format-1 v0.27.97.0
  * rtw89: 8852bt: add firmware 0.29.91.0
  * amdgpu: Update ISP FW for isp v4.1.1
  * mediatek: Update mt8195 SOF firmware
  * amdgpu: DMCUB updates for DCN314
  * xe: First GuC release v70.29.2 for BMG
  * xe: Add GuC v70.29.2 for LNL
  * i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL
  * i915: Update MTL DMC v2.22
  * i915: update MTL GSC to v102.0.10.1878
  * xe: Add BMG HuC 8.2.10
  * xe: Add GSC 104.0.0.1161 for LNL
  * xe: Add LNL HuC 9.4.13
  * i915: update DG2 HuC to v7.10.16
  * amdgpu: Update ISP FW for isp v4.1.1
  * QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641
</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware" epoch="0" version="20241128" release="1.1" arch="src" src="src/kernel-firmware-20241128-1.1.src.rpm">
          <filename>kernel-firmware-20241128-1.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-all" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-all-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-all-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-amdgpu" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-amdgpu-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-amdgpu-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath10k" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-ath10k-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-ath10k-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath11k" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-ath11k-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-ath11k-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath12k" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-ath12k-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-ath12k-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-atheros" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-atheros-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-atheros-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bluetooth" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-bluetooth-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-bluetooth-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bnx2" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-bnx2-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-bnx2-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-brcm" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-brcm-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-brcm-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-chelsio" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-chelsio-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-chelsio-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-dpaa2" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-dpaa2-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-dpaa2-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-i915" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-i915-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-i915-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-intel" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-intel-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-intel-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-iwlwifi" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-iwlwifi-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-iwlwifi-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-liquidio" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-liquidio-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-liquidio-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-marvell" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-marvell-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-marvell-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-media" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-media-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-media-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mediatek" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-mediatek-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-mediatek-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mellanox" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-mellanox-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-mellanox-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mwifiex" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-mwifiex-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-mwifiex-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-network" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-network-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-network-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nfp" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-nfp-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-nfp-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nvidia" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-nvidia-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-nvidia-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-platform" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-platform-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-platform-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-prestera" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-prestera-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-prestera-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qcom" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-qcom-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-qcom-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qlogic" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-qlogic-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-qlogic-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-radeon" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-radeon-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-radeon-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-realtek" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-realtek-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-realtek-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-serial" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-serial-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-serial-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-sound" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-sound-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-sound-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ti" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-ti-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-ti-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ueagle" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-ueagle-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-ueagle-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-usb-network" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/kernel-firmware-usb-network-20241128-1.1.noarch.rpm">
          <filename>kernel-firmware-usb-network-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-amd" epoch="0" version="20241128" release="1.1" arch="noarch" src="noarch/ucode-amd-20241128-1.1.noarch.rpm">
          <filename>ucode-amd-20241128-1.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>183</id>
    <title>Recommended update for regionServiceClientConfigAzure</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1736516133" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217537" id="1217537" title="[TRACKERBUG] Update region certs to accommodate 4096 length on Azure" type="bugzilla" />
    </references>
    <description>This update for regionServiceClientConfigAzure fixes the following issues:

- Update to version 2.2.0 (jsc#PCT-360)
  + Add IPv6 certs to enable IPv6 access of the update infrastructure
  + Add patch to remove IPv6 on SLE 12, no IPv6 support in SLE 12
    in the Public Cloud

- Update to version 2.1.0 (bsc#1217537)
  + Replace certs 23.100.36.229.pem and 40.121.202.140.pem (4096 length):
    rgnsrv-azure-westus -&gt; 23.100.36.229.pem expires 9 years
    rgnsrv-azure-eastus  -&gt; 40.121.202.140.pem expires 10 years
 
- Update to version 2.0.1 (bsc#1217537)
  + Replacing 104.45.31.195.pem 191.237.254.253.pem certs 
    expiring in 8 years and new length of 4096
    These certs will replace the current certs that 
    expire soon 

</description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigAzure" epoch="0" version="2.2.0" release="1.1" arch="noarch" src="noarch/regionServiceClientConfigAzure-2.2.0-1.1.noarch.rpm">
          <filename>regionServiceClientConfigAzure-2.2.0-1.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigAzure" epoch="0" version="2.2.0" release="1.1" arch="src" src="src/regionServiceClientConfigAzure-2.2.0-1.1.src.rpm">
          <filename>regionServiceClientConfigAzure-2.2.0-1.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>149</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1734540184" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227181" id="1227181" title="open-vm-tools version 12.4.5 has been released - please rebase" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231826" id="1231826" title="open-vm-tools 12.5.0 was released - please rebase" type="bugzilla" />
    </references>
    <description>This update for open-vm-tools fixes the following issues:

Update to 12.5.0 (bsc#1231826):

- There are no new features in the open-vm-tools 12.5.0 release.

- This is primarily a maintenance release that addresses a few
  critical problems.
  For a more complete list of issues resolved in this release,
  see the Resolved Issues section of the Release Notes.

- For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0

- Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md

- The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog

Update to 12.4.5 (build 23787635) (bsc#1227181):

  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:

    - A number of issues flagged by Coverity and ShellCheck have been
      addressed.
    - A vmtoolsd process hang related to nested logging from an RPC Channel
      error has been fixed.

- For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.

- For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5

- Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md

- The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog

</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.5.0" release="1.1" arch="x86_64" src="x86_64/libvmtools0-12.5.0-1.1.x86_64.rpm">
          <filename>libvmtools0-12.5.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libvmtools0-debuginfo" epoch="0" version="12.5.0" release="1.1" arch="x86_64" src="x86_64/libvmtools0-debuginfo-12.5.0-1.1.x86_64.rpm">
          <filename>libvmtools0-debuginfo-12.5.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.5.0" release="1.1" arch="src" src="src/open-vm-tools-12.5.0-1.1.src.rpm">
          <filename>open-vm-tools-12.5.0-1.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.5.0" release="1.1" arch="x86_64" src="x86_64/open-vm-tools-12.5.0-1.1.x86_64.rpm">
          <filename>open-vm-tools-12.5.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools-debuginfo" epoch="0" version="12.5.0" release="1.1" arch="x86_64" src="x86_64/open-vm-tools-debuginfo-12.5.0-1.1.x86_64.rpm">
          <filename>open-vm-tools-debuginfo-12.5.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools-debugsource" epoch="0" version="12.5.0" release="1.1" arch="x86_64" src="x86_64/open-vm-tools-debugsource-12.5.0-1.1.x86_64.rpm">
          <filename>open-vm-tools-debugsource-12.5.0-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>175</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1736422291" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232753" id="1232753" title="[SELinux] macros do not create the /etc/selinux/.autorelabel file" type="bugzilla" />
    </references>
    <description>This update for selinux-policy fixes the following issues:

- Trigger a full relabel on transactional systems upon module
  installation.
  This is rather expensive and will hopefully be replaced
  by a more fine grained solution later on (bsc#1232753)
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230523+git25.ad22dd7f" release="2.1" arch="noarch" src="noarch/selinux-policy-20230523+git25.ad22dd7f-2.1.noarch.rpm">
          <filename>selinux-policy-20230523+git25.ad22dd7f-2.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230523+git25.ad22dd7f" release="2.1" arch="src" src="src/selinux-policy-20230523+git25.ad22dd7f-2.1.src.rpm">
          <filename>selinux-policy-20230523+git25.ad22dd7f-2.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230523+git25.ad22dd7f" release="2.1" arch="noarch" src="noarch/selinux-policy-devel-20230523+git25.ad22dd7f-2.1.noarch.rpm">
          <filename>selinux-policy-devel-20230523+git25.ad22dd7f-2.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230523+git25.ad22dd7f" release="2.1" arch="noarch" src="noarch/selinux-policy-targeted-20230523+git25.ad22dd7f-2.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230523+git25.ad22dd7f-2.1.noarch.rpm</filename>
        </package>
        <package name="cockpit" epoch="0" version="309" release="7.2" arch="src" src="src/cockpit-309-7.2.src.rpm">
          <filename>cockpit-309-7.2.src.rpm</filename>
        </package>
        <package name="cockpit" epoch="0" version="309" release="7.2" arch="x86_64" src="x86_64/cockpit-309-7.2.x86_64.rpm">
          <filename>cockpit-309-7.2.x86_64.rpm</filename>
        </package>
        <package name="cockpit-bridge" epoch="0" version="309" release="7.2" arch="x86_64" src="x86_64/cockpit-bridge-309-7.2.x86_64.rpm">
          <filename>cockpit-bridge-309-7.2.x86_64.rpm</filename>
        </package>
        <package name="cockpit-bridge-debuginfo" epoch="0" version="309" release="7.2" arch="x86_64" src="x86_64/cockpit-bridge-debuginfo-309-7.2.x86_64.rpm">
          <filename>cockpit-bridge-debuginfo-309-7.2.x86_64.rpm</filename>
        </package>
        <package name="cockpit-debuginfo" epoch="0" version="309" release="7.2" arch="x86_64" src="x86_64/cockpit-debuginfo-309-7.2.x86_64.rpm">
          <filename>cockpit-debuginfo-309-7.2.x86_64.rpm</filename>
        </package>
        <package name="cockpit-debugsource" epoch="0" version="309" release="7.2" arch="x86_64" src="x86_64/cockpit-debugsource-309-7.2.x86_64.rpm">
          <filename>cockpit-debugsource-309-7.2.x86_64.rpm</filename>
        </package>
        <package name="cockpit-networkmanager" epoch="0" version="309" release="7.2" arch="noarch" src="noarch/cockpit-networkmanager-309-7.2.noarch.rpm">
          <filename>cockpit-networkmanager-309-7.2.noarch.rpm</filename>
        </package>
        <package name="cockpit-selinux" epoch="0" version="309" release="7.2" arch="noarch" src="noarch/cockpit-selinux-309-7.2.noarch.rpm">
          <filename>cockpit-selinux-309-7.2.noarch.rpm</filename>
        </package>
        <package name="cockpit-storaged" epoch="0" version="309" release="7.2" arch="noarch" src="noarch/cockpit-storaged-309-7.2.noarch.rpm">
          <filename>cockpit-storaged-309-7.2.noarch.rpm</filename>
        </package>
        <package name="cockpit-system" epoch="0" version="309" release="7.2" arch="noarch" src="noarch/cockpit-system-309-7.2.noarch.rpm">
          <filename>cockpit-system-309-7.2.noarch.rpm</filename>
        </package>
        <package name="cockpit-ws" epoch="0" version="309" release="7.2" arch="x86_64" src="x86_64/cockpit-ws-309-7.2.x86_64.rpm">
          <filename>cockpit-ws-309-7.2.x86_64.rpm</filename>
        </package>
        <package name="cockpit-ws-debuginfo" epoch="0" version="309" release="7.2" arch="x86_64" src="x86_64/cockpit-ws-debuginfo-309-7.2.x86_64.rpm">
          <filename>cockpit-ws-debuginfo-309-7.2.x86_64.rpm</filename>
        </package>
        <package name="swtpm" epoch="0" version="0.8.0" release="1.87" arch="src" src="src/swtpm-0.8.0-1.87.src.rpm">
          <filename>swtpm-0.8.0-1.87.src.rpm</filename>
        </package>
        <package name="swtpm" epoch="0" version="0.8.0" release="1.87" arch="x86_64" src="x86_64/swtpm-0.8.0-1.87.x86_64.rpm">
          <filename>swtpm-0.8.0-1.87.x86_64.rpm</filename>
        </package>
        <package name="swtpm-debuginfo" epoch="0" version="0.8.0" release="1.87" arch="x86_64" src="x86_64/swtpm-debuginfo-0.8.0-1.87.x86_64.rpm">
          <filename>swtpm-debuginfo-0.8.0-1.87.x86_64.rpm</filename>
        </package>
        <package name="swtpm-debugsource" epoch="0" version="0.8.0" release="1.87" arch="x86_64" src="x86_64/swtpm-debugsource-0.8.0-1.87.x86_64.rpm">
          <filename>swtpm-debugsource-0.8.0-1.87.x86_64.rpm</filename>
        </package>
        <package name="swtpm-selinux" epoch="0" version="0.8.0" release="1.87" arch="noarch" src="noarch/swtpm-selinux-0.8.0-1.87.noarch.rpm">
          <filename>swtpm-selinux-0.8.0-1.87.noarch.rpm</filename>
        </package>
        <package name="container-selinux" epoch="0" version="2.211.0" release="2.101" arch="noarch" src="noarch/container-selinux-2.211.0-2.101.noarch.rpm">
          <filename>container-selinux-2.211.0-2.101.noarch.rpm</filename>
        </package>
        <package name="container-selinux" epoch="0" version="2.211.0" release="2.101" arch="src" src="src/container-selinux-2.211.0-2.101.src.rpm">
          <filename>container-selinux-2.211.0-2.101.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>163</id>
    <title>Security update for haproxy</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1736158200" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233973" id="1233973" title="VUL-0: CVE-2024-53008: haproxy: HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non-compliant back-end server" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53008" id="CVE-2024-53008" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53008" type="cve" />
    </references>
    <description>This update for haproxy fixes the following issues:

Update to version 2.8.11+git0.01c1056a4:

- VUL-0: CVE-2024-53008: haproxy: HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non-compliant back-end server (bsc#1233973)
- BUG/MINOR: cfgparse-listen: fix option httpslog override warning message
- BUG/MEDIUM: promex: Wait to have the request before sending the response
- BUG/MEDIUM: cache/stats: Wait to have the request before sending the response
- BUG/MEDIUM: queue: implement a flag to check for the dequeuing
- BUG/MINOR: clock: validate that now_offset still applies to the current date
- BUG/MINOR: clock: make time jump corrections a bit more accurate
- BUG/MINOR: polling: fix time reporting when using busy polling
- BUG/MAJOR: mux-h1: Wake SC to perform 0-copy forwarding in CLOSING state
- BUG/MEDIUM: pattern: prevent UAF on reused pattern expr
- BUG/MINOR: pattern: prevent const sample from being tampered in pat_match_beg()
- BUG/MEDIUM: clock: detect and cover jumps during execution
- REGTESTS: fix random failures with wrong_ip_port_logging.vtc under load
- DOC: configuration: place the HAPROXY_HTTP_LOG_FMT example on the correct line
- BUG/MINOR: pattern: do not leave a leading comma on "set" error messages
- BUG/MINOR: pattern: pat_ref_set: return 0 if err was found
- BUG/MINOR: pattern: pat_ref_set: fix UAF reported by coverity
- BUG/MINOR: stconn: Request to send something to be woken up when the pipe is full
- BUG/MEDIUM: mux-pt/mux-h1: Release the pipe on connection error on sending path
- BUG/MEDIUM: clock: also update the date offset on time jumps
- DOC: config: correct the table for option tcplog
- BUG/MINOR: h3: properly reject too long header responses
- BUG/MINOR: proto_uxst: delete fd from fdtab if listen() fails
- BUG/MINOR: mux-quic: do not send too big MAX_STREAMS ID
- REGTESTS: mcli: test the pipelined commands on master CLI
- BUG/MEDIUM: mworker/cli: fix pipelined modes on master CLI
- MINOR: channel: implement ci_insert() function
- BUG/MINOR: proto_tcp: keep error msg if listen() fails
- BUG/MINOR: proto_tcp: delete fd from fdtab if listen() fails
- BUG/MINOR: quic/trace: make quic_conn_enc_level_init() emit NEW not CLOSE
- BUG/MINOR: trace/quic: make "qconn" selectable as a lockon criterion
- BUG/MINOR: trace: automatically start in waiting mode with "start &lt;evt&gt;"
- BUG/MEDIUM: trace: fix null deref in lockon mechanism since TRACE_ENABLED()
- BUG/MINOR: trace/quic: permit to lock on frontend/connect/session etc
- BUG/MINOR: trace/quic: enable conn/session pointer recovery from quic_conn
- BUG/MINOR: fcgi-app: handle a possible strdup() failure
- BUG/MEDIUM: mux-h2: Propagate term flags to SE on error in h2s_wake_one_stream
- BUG/MEDIUM: h2: Only report early HTX EOM for tunneled streams
- BUG/MEDIUM: http-ana: Report error on write error waiting for the response
- BUG/MEDIUM: quic: prevent conn freeze on 0RTT undeciphered content
- BUG/MEDIUM: stconn: Report error on SC on send if a previous SE error was set
- BUG/MEDIUM: mux-h1: Properly handle empty message when an error is triggered
- BUG/MEDIUM: cli: Always release back endpoint between two commands on the mcli
- BUG/MEDIUM: stream: Prevent mux upgrades if client connection is no longer ready
- BUG/MEDIUM: init: fix fd_hard_limit default in compute_ideal_maxconn
- MEDIUM: init: set default for fd_hard_limit via DEFAULT_MAXFD (take #2)
- BUG/MEDIUM: queue: deal with a rare TOCTOU in assign_server_and_queue()
- MINOR: queue: add a function to check for TOCTOU after queueing
- BUG/MEDIUM: jwt: Clear SSL error queue on error when checking the signature
- BUG/MINOR: quic: Lack of precision when computing K (cubic only cc)
- BUG/MINOR: cli: Atomically inc the global request counter between CLI commands
- BUG/MINOR: server: Don't warn fallback IP is used during init-addr resolution
- BUG/MINOR: stick-table: fix crash for src_inc_gpc() without stkcounter
- DOC: config: improve the http-keep-alive section
- DOC: configuration: issuers-chain-path not compatible with OCSP
- BUG/MEDIUM: ssl_sock: fix deadlock in ssl_sock_load_ocsp() on error path
- BUG/MEDIUM: debug/cli: fix "show threads" crashing with low thread counts
- BUG/MINOR: session: Eval L4/L5 rules defined in the default section
- BUG/MEDIUM: bwlim: Be sure to never set the analyze expiration date in past
- BUG/MEDIUM: spoe: Be sure to create a SPOE applet if none on the current thread
- BUG/MEDIUM: h1: Reject empty Transfer-encoding header
- BUG/MINOR: h1: Reject empty coding name as last transfer-encoding value
- BUG/MINOR: h1: Fail to parse empty transfer coding names
- BUG/MINOR: jwt: fix variable initialisation
- DOC: configuration: update maxconn description
- BUG/MINOR: jwt: don't try to load files with HMAC algorithm
- MEDIUM: ssl: initialize the SSL stack explicitely
- DOC: configuration: more details about the master-worker mode
- BUG/MEDIUM: quic: fix possible exit from qc_check_dcid() without unlocking
- BUG/MINOR: quic: fix race-condition on trace for CID retrieval
- BUG/MINOR: quic: fix race condition in qc_check_dcid()
- BUG/MEDIUM: quic: fix race-condition in quic_get_cid_tid()
- BUG/MEDIUM: h3: ensure the ":scheme" pseudo header is totally valid
- BUG/MEDIUM: h3: ensure the ":method" pseudo header is totally valid
- MINOR: activity: make the memory profiling hash size configurable at build time
- BUG/MINOR: hlua: report proper context upon error in hlua_cli_io_handler_fct()
- BUG/MINOR: quic: fix BUG_ON() on Tx pkt alloc failure
- BUG/MINOR: mux-quic: fix crash on qcs SD alloc failure
- BUG/MINOR: h3: fix crash on STOP_SENDING receive after GOAWAY emission
- DOC: api/event_hdl: small updates, fix an example and add some precisions
- SCRIPTS: git-show-backports: do not truncate git-show output
- DOC: configuration: fix alphabetical order of bind options
- DOC: management: rename show stats domain cli "dns" to "resolvers"
- DOC/MINOR: management: add missed -dR and -dv options
- BUG/MINOR: proxy: fix header_unique_id leak on deinit()
- BUG/MINOR: proxy: fix source interface and usesrc leaks on deinit()
- BUG/MINOR: proxy: fix dyncookie_key leak on deinit()
- BUG/MINOR: proxy: fix check_{command,path} leak on deinit()
- BUG/MINOR: proxy: fix log_tag leak on deinit()
- BUG/MINOR: proxy: fix server_id_hdr_name leak on deinit()
- BUG/MINOR: quic: fix computed length of emitted STREAM frames
- [RELEASE] Released version 2.8.10
- BUG/MEDIUM: quic: don't blindly rely on unaligned accesses
- BUG/MAJOR: connection: fix server used_conns with H2 + reuse safe
- BUG/MEDIUM: http_ana: ignore NTLM for reuse aggressive/always and no H1
- BUG/MAJOR: server: do not delete srv referenced by session
- MINOR: session: rename private conns elements
- BUG/MEDIUM: quic: fix connection freeze on post handshake
- BUG/MEDIUM: server: fix dynamic servers initial settings
- BUG/MEDIUM: ssl: wrong priority whem limiting ECDSA ciphers in ECDSA+RSA configuration
- CLEANUP: hlua: simplify ambiguous lua_insert() usage in hlua_ctx_resume()
- BUG/MINOR: hlua: fix leak in hlua_ckch_set() error path
- BUG/MINOR: hlua: prevent LJMP in hlua_traceback()
- BUG/MINOR: hlua: fix unsafe hlua_pusherror() usage
- BUG/MINOR: hlua: don't use lua_pushfstring() when we don't expect LJMP
- CLEANUP: hlua: use hlua_pusherror() where relevant
- BUG/MINOR: quic: prevent crash on qc_kill_conn()
- BUG/MINOR: hlua: use CertCache.set() from various hlua contexts
- BUG/MINOR: tools: fix possible null-deref in env_expand() on out-of-memory
- BUG/MINOR: tcpcheck: report correct error in tcp-check rule parser
- BUG/MINOR: cfgparse: remove the correct option on httpcheck send-state warning
- BUG/MINOR: activity: fix Delta_calls and Delta_bytes count
- BUG/MINOR: ssl/ocsp: init callback func ptr as NULL
- CLEANUP: ssl/ocsp: readable ifdef in ssl_sock_load_ocsp
- BUILD: fd: errno is also needed without poll()
- CI: scripts: fix build of vtest regarding option -C
- REGTESTS: acl_cli_spaces: avoid a warning caused by undefined logs
- DOC: config: fix incorrect section reference about custom log format
- DOC: quic: specify that connection migration is not supported
- BUG/MINOR: server: Don't reset resolver options on a new default-server line
- BUG/MINOR: http-htx: Support default path during scheme based normalization
- BUG/MINOR: quic: adjust restriction for stateless reset emission
- MEDIUM: config: prevent communication with privileged ports
- BUILD: quic: fix unused variable warning when threads are disabled
- BUG/MEDIUM: mux-quic: Create sedesc in same time of the QUIC stream
- BUG/MEDIUM: quic_tls: prevent LibreSSL &lt; 4.0 from negotiating CHACHA20_POLY1305
- BUG/MAJOR: quic: Crash with TLS_AES_128_CCM_SHA256 (libressl only)
- BUG/MINOR: connection: parse PROXY TLV for LOCAL mode
- DOC: configuration: update the crt-list documentation
- CLEANUP: ssl/cli: remove unused code in dump_crtlist_conf
- BUG/MINOR: stats: Don't state the 303 redirect response is chunked
- BUG/MINOR: htpp-ana/stats: Specify that HTX redirect messages have a C-L header
- BUG/MEDIUM: fd: prevent memory waste in fdtab array
- BUILD: stick-tables: better mark the stktable_data as 32-bit aligned
- BUG/MEDIUM: h1: Reject CONNECT request if the target has a scheme
- BUG/MINOR: h1: Check authority for non-CONNECT methods only if a scheme is found
- BUG/MEDIUM: stick-tables: properly mark stktable_data as packed
- BUG/MEDIUM: htx: mark htx_sl as packed since it may be realigned
- BUG/MINOR: qpack: fix error code reported on QPACK decoding failure
- BUG/MINOR: mux-quic: fix error code on shutdown for non HTTP/3
- BUG/MINOR: log: smp_rgs array issues with inherited global log directives
- BUG/MINOR: log: keep the ref in dup_logger()
- MINOR: log: add dup_logsrv() helper function
- DOC: lua: fix filters.txt file location
- BUG/MINOR: haproxy: only tid 0 must not sleep if got signal
- BUILD: clock: improve check for pthread_getcpuclockid()
- BUG/MINOR: mworker: reintroduce way to disable seamless reload with -x /dev/null
- BUG/MINOR: h1: fix detection of upper bytes in the URI
- BUG/MINOR: backend: use cum_sess counters instead of cum_conn
- BUG/MINOR: fd: my_closefrom() on Linux could skip contiguous series of sockets
- BUG/MINOR: sock: handle a weird condition with connect()
- BUG/MINOR: stconn: Fix sc_mux_strm() return value
- BUG/MEDIUM: cache: Vary not working properly on anything other than accept-encoding
- BUG/MINOR: server: fix slowstart behavior
- BUG/MEDIUM: peers: Fix exit condition when max-updates-at-once is reached
- BUG/MEDIUM: spoe: Always retry when an applet fails to send a frame
- BUG/MEDIUM: applet: Fix applet API to put input data in a buffer
- BUG/MEDIUM: evports: do not clear returned events list on signal
- BUG/MEDIUM: stconn: Don't forward channel data if input data must be filtered
- BUG/MEDIUM: grpc: Fix several unaligned 32/64 bits accesses
- MINOR: net_helper: Add support for floats/doubles.
- CI: revert kernel addr randomization introduced in 3a0fc864
- BUG/MEDIUM: peers/trace: fix crash when listing event types
- BUG/MINOR: debug: make sure DEBUG_STRICT=0 does work as documented
- BUG/MINOR: http-ana: Fix TX_L7_RETRY and TX_D_L7_RETRY values
- BUG/MEDIUM: http-ana: Deliver 502 on keep-alive for fressh server connection
- CLEANUP: log: lf_text_len() returns a pointer not an integer
- BUG/MINOR: log: invalid snprintf() usage in sess_build_logline()
- BUG/MINOR: tools/log: invalid encode_{chunk,string} usage
- BUG/MINOR: log: fix lf_text_len() truncate inconsistency
- BUG/MINOR: listener: always assign distinct IDs to shards
- BUG/MINOR: cli: Report an error to user if command or payload is too big
- [RELEASE] Released version 2.8.9
- BUILD: proxy: Replace free_logformat_list() to manually release log-format
- [RELEASE] Released version 2.8.8
- BUG/MINOR: proxy: fix logformat expression leak in use_backend rules
- BUG/MINOR: backend: properly handle redispatch 0
- BUG/MINOR: server: ignore 'enabled' for dynamic servers
- BUG/MEDIUM: cli: Warn if pipelined commands are delimited by a \n
- MINOR: cli: Remove useless loop on commands to find unescaped semi-colon
- MINOR: server: allow cookie for dynamic servers
- BUG/MINOR: server: fix persistence cookie for dynamic servers
- BUG/MINOR: ssl: Detect more 'ocsp-update' incompatibilities
- BUG/MINOR: ssl: Wrong ocsp-update "incompatibility" error message
- BUG/MINOR: server: 'source' interface ignored from 'default-server' directive
- OPTIM: http_ext: avoid useless copy in http_7239_extract_{ipv4,ipv6}
- BUG/MEDIUM: mux-fcgi: Properly handle EOM flag on end-of-trailers HTX block
- BUG/MINOR: mux-quic: close all QCS before freeing QCC tasklet
- BUG/MEDIUM: ssl: Fix crash in ocsp-update log function
- BUG/MINOR: session: ensure conn owner is set after insert into session
- BUG/MEDIUM: spoe: Return an invalid frame on recv if size is too small
- CI: temporarily adjust kernel entropy to work with ASAN/clang
- BUG/MINOR: spoe: Be sure to be able to quickly close IDLE applets on soft-stop
- BUG/MEDIUM: spoe: Don't rely on stream's expiration to detect processing timeout
- BUG/MINOR: listener: Don't schedule frontend without task in listener_release()
- BUG/MINOR: listener: Wake proxy's mngmt task up if necessary on session release
- BUG/MEDIUM: hlua: streams don't support mixing lua-load with lua-load-per-thread (2nd try)
- MINOR: hlua: use accessors for stream hlua ctx
- DEBUG: lua: precisely identify if stream is stuck inside lua or not
- BUG/MINOR: hlua: fix missing lock in hlua_filter_delete()
- BUG/MINOR: hlua: missing lock in hlua_filter_new()
- BUG/MINOR: hlua: segfault when loading the same filter from different contexts
- BUG/MINOR: ssl: fix possible ctx memory leak in sample_conv_aes_gcm()
- DOC: configuration: clarify ciphersuites usage (V2)
- BUILD: solaris: fix compilation errors
- BUG/MINOR: cfgparse: report proper location for log-format-sd errors
- BUG/MINOR: ssl/cli: typo in new ssl crl-file CLI description
- CI: skip scheduled builds on forks
- BUG/MINOR: sink: fix a race condition in the TCP log forwarding code
- BUG/MINOR: hlua: don't call ha_alert() in hlua_event_subscribe()
- BUG/MAJOR: hlua: improper lock usage with hlua_ctx_resume()
- BUG/MEDIUM: hlua: improper lock usage with SET_SAFE_LJMP()
- BUG/MINOR: hlua: improper lock usage in hlua_filter_new()
- BUG/MINOR: hlua: improper lock usage in hlua_filter_callback()
- BUG/MINOR: hlua: fix possible crash in hlua_filter_new() under load
- BUG/MINOR: hlua: don't use lua_tostring() from unprotected contexts
- BUG/MINOR: hlua: fix unsafe lua_tostring() usage with empty stack
- BUG/MINOR: tools: seed the statistical PRNG slightly better
- MINOR: hlua: Be able to disable logging from lua
- BUG/MINOR: hlua: Fix log level to the right value when set via TXN:set_loglevel
- BUG/MINOR: config/quic: Alert about PROXY protocol use on a QUIC listener
- DOC: configuration: clarify ciphersuites usage
- LICENSE: http_ext: fix GPL license version
- LICENSE: event_hdl: fix GPL license version
- BUG/MINOR: ssl/cli: duplicate cleaning code in cli_parse_del_crtlist
- BUG/MINOR: ist: only store NUL byte on succeeded alloc
- BUG/MINOR: quic: fix output of show quic
- BUG/MAJOR: server: fix stream crash due to deleted server
- BUG/MINOR: stats: drop srv refcount on early release
- BUG/MINOR: ist: allocate nul byte on istdup
- MINOR: quic: warn on bind on multiple addresses if no IP_PKTINFO support
- DOC: quic: fix recommandation for bind on multiple address
- BUG/MEDIUM: quic: fix transient send error with listener socket
- BUG/MEDIUM: hlua: Don't loop if a lua socket does not consume received data
- BUG/MEDIUM: hlua: Be able to garbage collect uninitialized lua sockets
- BUG/MEDIUM: applet: Immediately free appctx on early error
- DOC: quic: Missing tuning setting in "Global parameters"
- BUG/MINOR: qpack: reject invalid dynamic table capacity
- BUG/MINOR: qpack: reject invalid increment count decoding
- BUG/MINOR: quic: reject HANDSHAKE_DONE as server
- BUG/MINOR: quic: reject unknown frame type
- BUG/MAJOR: promex: fix crash on deleted server
- MINOR: connection: add sample fetches to report per-connection glitches
- MINOR: mux-h2: implement MUX_CTL_GET_GLITCHES
- MINOR: connection: add a new mux_ctl to report number of connection glitches
- MEDIUM: mux-h2: allow to set the glitches threshold to kill a connection
- MINOR: mux-h2: always use h2c_report_glitch()
- MINOR: mux-h2: count late reduction of INITIAL_WINDOW_SIZE as a glitch
- MINOR: mux-h2: count excess of CONTINUATION frames as a glitch
- BUG/MINOR: mux-h2: count rejected DATA frames against the connection's flow control
- MINOR: mux-h2: add a counter of "glitches" on a connection
- [RELEASE] Released version 2.8.7
- BUG/MAJOR: ssl/ocsp: crash with ocsp when old process exit or using ocsp CLI
- [RELEASE] Released version 2.8.6
- DEV: makefile: fix POSIX compatibility for "range" target
- DEV: makefile: add a new "range" target to iteratively build all commits
- CI: Update to actions/cache@v4
- DOC: internal: update missing data types in peers-v2.0.txt
- DOC: install: recommend pcre2
- DOC: httpclient: add dedicated httpclient section
- DOC: configuration: clarify http-request wait-for-body
- BUILD: address a few remaining calloc(size, n) cases
- BUG/MINOR: ext-check: cannot use without preserve-env
- MINOR: ext-check: add an option to preserve environment variables
- BUG/MINOR: diag: run the final diags before quitting when using -c
- BUG/MINOR: diag: always show the version before dumping a diag warning
- MINOR: errors: ha_alert() and ha_warning() uses warn_exec_path()
- MINOR: quic: Add a counter for reordered packets
- MINOR: quic: Dynamic packet reordering threshold
- MINOR: quic: Update K CUBIC calculation (RFC 9438)
- BUG/MEDIUM: quic: Wrong K CUBIC calculation.
- MINOR: quic: Stop using 1024th of a second.
- BUG/MINOR: quic: fix possible integer wrap around in cubic window calculation
- CLEANUP: quic: Code clarifications for QUIC CUBIC (RFC 9438)
- BUG/MINOR: quic: Wrong ack ranges handling when reaching the limit.
- BUG/MEDIUM: quic: fix crash on invalid qc_stream_buf_free() BUG_ON
- BUG/MEDIUM: qpack: allow 6xx..9xx status codes
- BUG/MEDIUM: h3: do not crash on invalid response status code
- MINOR: h3: add traces for stream sending function
- BUG/MEDIUM: quic: remove unsent data from qc_stream_desc buf
- MINOR: quic: extract qc_stream_buf free in a dedicated function
- MINOR: quic: Stop hardcoding a scale shifting value (CUBIC_BETA_SCALE_FACTOR_SHIFT)
- CLEANUP: quic: Remove unused CUBIC_BETA_SCALE_FACTOR_SHIFT macro.
- BUG/MEDIUM: mux-quic: report early error on stream
- BUG/MINOR: h3: fix checking on NULL Tx buffer
- BUG/MEDIUM: ssl: Fix crash when calling "update ssl ocsp-response" when an update is ongoing
- REGTESTS: ssl: Add OCSP related tests
- REGTESTS: ssl: Fix empty line in cli command input
- BUG/MINOR: ssl: Reenable ocsp auto-update after an "add ssl crt-list"
- BUG/MINOR: ssl: Destroy ckch instances before the store during deinit
- BUG/MEDIUM: ocsp: Separate refcount per instance and per store
- MINOR: ssl: Use OCSP_CERTID instead of ckch_store in ckch_store_build_certid
- BUG/MINOR: ssl: Clear the ckch instance when deleting a crt-list line
- BUG/MINOR: ssl: Duplicate ocsp update mode when dup'ing ckch
- BUG/MINOR: ssl: Fix error message after ssl_sock_load_ocsp call
- BUG/MAJOR: ssl_sock: Always clear retry flags in read/write functions
- BUG/MEDIUM: h1: always reject the NUL character in header values
- BUG/MINOR: h1-htx: properly initialize the err_pos field
- BUG/MEDIUM: h1: Don't support LF only to mark the end of a chunk size
- BUG/MINOR: h1: Don't support LF only at the end of chunks
- BUG/MEDIUM: stconn: Don't check pending shutdown to wake an applet up
- BUG/MEDIUM: stconn: Allow expiration update when READ/WRITE event is pending
- BUG/MEDIUM: pool: fix rare risk of deadlock in pool_flush()
- BUG/MINOR: jwt: fix jwt_verify crash on 32-bit archs
- BUG/MEDIUM: cli: fix once for all the problem of missing trailing LFs
- BUG/MINOR: vars/cli: fix missing LF after "get var" output
- BUG/MEDIUM: cli: some err/warn msg dumps add LR into CSV output on stat's CLI
- REGTESTS: add a test to ensure map-ordering is preserved
- MINOR: mux-h2/traces: add a missing trace on connection WU with negative inc
- BUG/MEDIUM: mux-h2: refine connection vs stream error on headers
- MINOR: mux-h2/traces: clarify the "rejected H2 request" event
- MINOR: mux-h2/traces: explicitly show the error/refused stream states
- MINOR: mux-h2/traces: also suggest invalid header upon parsing error
- MINOR: debug: make BUG_ON() catch build errors even without DEBUG_STRICT
- MINOR: debug: make ABORT_NOW() store the caller's line number when using abort
- MINOR: debug: make sure calls to ha_crash_now() are never merged
- MINOR: compiler: add a new DO_NOT_FOLD() macro to prevent code folding
- BUG/MEDIUM: quic: keylog callback not called (USE_OPENSSL_COMPAT)
- BUG/MINOR: mux-h2: also count streams for refused ones
- BUG/MINOR: mux-quic: do not prevent non-STREAM sending on flow control
- DOC: configuration: corrected description of keyword tune.ssl.ocsp-update.mindelay
- MINOR: mux-h2: support limiting the total number of H2 streams per connection
- BUG/MEDIUM: spoe: Never create new spoe applet if there is no server up
- BUG/MEDIUM: stconn: Forward shutdown on write timeout only if it is forwardable
- BUG/MEDIUM: h3: fix incorrect snd_buf return value
- CLEANUP: quic: Remaining useless code into server part
- BUG/MINOR: h3: close connection on sending alloc errors
- BUG/MINOR: h3: properly handle alloc failure on finalize
- BUG/MINOR: h3: close connection on header list too big
- MINOR: h3: check connection error during sending
- BUG/MINOR: quic: Missing call to TLS message callbacks
- BUG/MINOR: quic: Wrong keylog callback setting.
- BUG/MINOR: mux-quic: always report error to SC on RESET_STREAM emission
- BUG/MEDIUM: stats: unhandled switching rules with TCP frontend
- MINOR: stats: store the parent proxy in stats ctx (http)
- DOC: config: Update documentation about local haproxy response
- BUG/MINOR: resolvers: default resolvers fails when network not configured
- BUG/MEDIUM: mux-h2: Report too large HEADERS frame only when rxbuf is empty
- BUG/MEDIUM: quic: QUIC CID removed from tree without locking
- BUG/MEDIUM: quic: Possible buffer overflow when building TLS records
- BUG/MINOR: mworker/cli: fix set severity-output support
- DOC: configuration: typo req.ssl_hello_type
- [RELEASE] Released version 2.8.5
- BUG/MEDIUM: proxy: always initialize the default settings after init
- BUG/MINOR: lua: Wrong OCSP CID after modifying an SSL certficate (LUA)
- BUG/MINOR: ssl: Wrong OCSP CID after modifying an SSL certficate
- MINOR: ssl/cli: Add ha_(warning|alert) msgs to CLI ckch callback
- BUG/MINOR: ssl: Double free of OCSP Certificate ID
- BUG/MINOR: quic: Packet number spaces too lately initialized
- BUG/MINOR: quic: Missing QUIC connection path member initialization
- BUG/MINOR: quic: Possible leak of TX packets under heavy load
- BUG/MEDIUM: quic: Possible crash during retransmissions and heavy load
- BUG/MINOR: cache: Remove incomplete entries from the cache when stream is closed
- BUG/MEDIUM: peers: fix partial message decoding
- DOC: Clarify the differences between field() and word()
- BUG/MINOR: sample: Make the `word` converter compatible with `-m found`
- REGTESTS: sample: Test the behavior of consecutive delimiters for the field converter
- DOC: config: fix monitor-fail typo
- DOC: config: add matrix entry for "max-session-srv-conns"
- DOC: config: specify supported sections for "max-session-srv-conns"
- BUG/MINOR: cfgparse-listen: fix warning being reported as an alert
- BUG/MINOR: config: Stopped parsing upon unmatched environment variables
- BUG/MINOR: quic_tp: fix preferred_address decoding
- DOC: config: fix missing characters in set-spoe-group action
- BUG/MINOR: h3: always reject PUSH_PROMISE
- BUG/MINOR: h3: fix TRAILERS encoding
- BUG/MEDIUM: master/cli: Properly pin the master CLI on thread 1 / group 1
- BUG/MINOR: compression: possible NULL dereferences in comp_prepare_compress_request()
- BUG/MINOR: quic: fix CONNECTION_CLOSE_APP encoding
- DOC: lua: fix Proxy.get_mode() output
- DOC: lua: add sticktable class reference from Proxy.stktable
- REGTESTS: connection: disable http_reuse_be_transparent.vtc if !TPROXY
- DOC: config: fix timeout check inheritance restrictions
- DOC: 51d: updated 51Degrees repo URL for v3.2.10
- BUG/MINOR: server: do not leak default-server in defaults sections
- BUG/MINOR: quic: Possible RX packet memory leak under heavy load
- BUG/MEDIUM: quic: Possible crash for connections to be killed
- BUG/MINOR: sock: mark abns sockets as non-suspendable and always unbind them
- BUG/MINOR: startup: set GTUNE_SOCKET_TRANSFER correctly
- REGTESTS: http: add a test to validate chunked responses delivery
- BUG/MINOR: proxy/stktable: missing frees on proxy cleanup
- MINOR: stktable: add stktable_deinit function
- BUG/MINOR: stream/cli: report correct stream age in "show sess"
- BUG/MEDIUM: mux-fcgi: fail earlier on malloc in takeover()
- BUG/MEDIUM: mux-h1: fail earlier on malloc in takeover()
- BUG/MEDIUM: mux-h2: fail earlier on malloc in takeover()
- BUG/MAJOR: quic: complete thread migration before tcp-rules
- [RELEASE] Released version 2.8.4
- BUG/MINOR: stconn: Report read activity on non-indep streams for partial sends
- BUG/MINOR: stconn/applet: Report send activity only if there was output data
- BUG/MINOR: stconn: Use HTX-aware channel's functions to get info on buffer
- BUG/MINOR: stconn: Fix streamer detection for HTX streams
- MINOR: channel: Add functions to get info on buffers and deal with HTX streams
- MINOR: htx: Use a macro for overhead induced by HTX
- BUG/MEDIUM: stconn: Update fsb date on partial sends
- BUG/MEDIUM: stream: Don't call mux .ctl() callback if not implemented
- BUG/MEDIUM: mworker: set the master variable earlier
- BUG/MEDIUM: applet: Report a send activity everytime data were sent
- BUG/MEDIUM: stconn: Report a send activity everytime data were sent
- REGTESTS: http: Improve script testing abortonclose option
- BUG/MEDIUM: stream: Properly handle abortonclose when set on backend only
- MEDIUM: mux-h1: Handle MUX_SUBS_RECV flag in h1_ctl() and susbscribe for reads
- MINOR: connection: Add a CTL flag to notify mux it should wait for reads again
- BUG/MINOR: stconn: Handle abortonclose if backend connection was already set up
- BUG/MEDIUM: connection: report connection errors even when no mux is installed
- DOC: quic: Wrong syntax for "quic-cc-algo" keyword.
- BUG/MINOR: sink: don't learn srv port from srv addr
- BUG/MEDIUM: applet: Remove appctx from buffer wait list on release
- DOC: config: use the word 'backend' instead of 'proxy' in 'track' description
- BUG/MINOR: quic: fix retry token check inconsistency
- DOC: management: -q is quiet all the time
- BUG/MEDIUM: stconn: Don't update stream expiration date if already expired
- BUG/MEDIUM: quic: Avoid some crashes upon TX packet allocation failures
- BUG/MEDIUM: quic: Possible crashes when sending too short Initial packets
- BUG/MEDIUM: quic: Avoid trying to send ACK frames from an empty ack ranges tree
- BUG/MINOR: quic: idle timer task requeued in the past
- BUG/MEDIUM: pool: fix releasable pool calculation when overloaded
- BUG/MEDIUM: freq-ctr: Don't report overshoot for long inactivity period
- BUG/MINOR: mux-h1: Properly handle http-request and http-keep-alive timeouts
- BUG/MINOR: stick-table/cli: Check for invalid ipv4 key
- BUG/MEDIUM: quic: fix sslconns on quic_conn alloc failure
- BUG/MEDIUM: quic: fix actconn on quic_conn alloc failure
- CLEANUP: htx: Properly indent htx_reserve_max_data() function
- BUG/MINOR: stconn: Sanitize report for read activity
- BUG/MEDIUM: Don't apply a max value on room_needed in sc_need_room()
- BUG/MEDIUM: stconn: Don't report rcv/snd expiration date if SC cannot epxire
- BUG/MEDIUM: pattern: don't trim pools under lock in pat_ref_purge_range()
- BUG/MINOR: cfgparse/stktable: fix error message on stktable_init() failure
- BUG/MINOR: stktable: missing free in parse_stick_table()
- BUG/MINOR: tcpcheck: Report hexstring instead of binary one on check failure
- BUG/MEDIUM: ssl: segfault when cipher is NULL
- BUG/MINOR: mux-quic: fix early close if unset client timeout
- BUG/MINOR: ssl: suboptimal certificate selection with TLSv1.3 and dual ECDSA/RSA
- MEDIUM: quic: count quic_conn for global sslconns
- MEDIUM: quic: count quic_conn instance for maxconn
- MINOR: frontend: implement a dedicated actconn increment function
- BUG/MINOR: ssl: use a thread-safe sslconns increment
- BUG/MINOR: quic: do not consider idle timeout on CLOSING state
- BUG/MEDIUM: server: "proto" not working for dynamic servers
- MINOR: connection: add conn_pr_mode_to_proto_mode() helper func
- DEBUG: mux-h2/flags: fix list of h2c flags used by the flags decoder
- MINOR: lua: Add flags to configure logging behaviour
- BUG/MINOR: ssl: load correctly @system-ca when ca-base is define
- DOC: internal: filters: fix reference to entities.pdf
- BUG/MINOR: mux-h2: update tracked counters with req cnt/req err
- BUG/MINOR: mux-h2: commit the current stream ID even on reject
- BUG/MEDIUM: peers: Fix synchro for huge number of tables
- BUG/MEDIUM: peers: Be sure to always refresh recconnect timer in sync task
- BUG/MINOR: trace: fix trace parser error reporting
- BUG/MINOR: mux-h2: fix http-request and http-keep-alive timeouts again
- BUG/MEDIUM: mux-h2: Don't report an error on shutr if a shutw is pending
- BUG/MINOR: mux-h2: make up other blocked streams upon removal from list
- BUG/MINOR: mux-h1: Send a 400-bad-request on shutdown before the first request
- BUG/MEDIUM: quic-conn: free unsent frames on retransmit to prevent crash
- BUG/MINOR: mux-quic: fix free on qcs-new fail alloc
- BUG/MINOR: h3: strengthen host/authority header parsing
- BUG/MINOR: mux-quic: support initial 0 max-stream-data
- BUG/MEDIUM: mux-quic: fix RESET_STREAM on send-only stream
- BUG/MINOR: quic: reject packet with no frame
- BUG/MINOR: quic: Avoid crashing with unsupported cryptographic algos
- BUG/MEDIUM: stconn: Fix comparison sign in sc_need_room()
- BUG/MINOR: hq-interop: simplify parser requirement
- BUG/MEDIUM: h1: Ignore C-L value in the H1 parser if T-E is also set
- BUG/MINOR: mux-h1: Ignore C-L when sending H1 messages if T-E is also set
- BUG/MINOR: mux-h1: Handle read0 in rcv_pipe() only when data receipt was tried
- BUG/MEDIUM: hlua: Initialize appctx used by a lua socket on connect only
- MINOR: hlua: Test the hlua struct first when the lua socket is connecting
- MINOR: hlua: Save the lua socket's server in its context
- MINOR: hlua: Save the lua socket's timeout in its context
- MINOR: hlua: Don't preform operations on a not connected socket
- MINOR: hlua: Set context's appctx when the lua socket is created
- BUG/MEDIUM: http-ana: Try to handle response before handling server abort
- BUG/MEDIUM: quic_conn: let the scheduler kill the task when needed
- BUG/MEDIUM: actions: always apply a longest match on prefix lookup
- BUG/MINOR: mux-quic: remove full demux flag on ncbuf release
- BUG/MEDIUM: server/cli: don't delete a dynamic server that has streams
- MINOR: pattern: fix pat_{parse,match}_ip() function comments
- BUG/MINOR: server: add missing free for server-&gt;rdr_pfx
- BUG/MAJOR: mux-h2: Report a protocol error for any DATA frame before headers
- BUG/MINOR: freq_ctr: fix possible negative rate with the scaled API
- BUG/MEDIUM: master/cli: Pin the master CLI on the first thread of the group 1
- BUG/MINOR: promex: fix backend_agg_check_status
- BUG/MEDIUM: mux-fcgi: Don't swap trash and dbuf when handling STDERR records
- BUG/MINOR: hlua/init: coroutine may not resume itself
- BUG/MEDIUM: hlua: don't pass stale nargs argument to lua_resume()
- CI: musl: drop shopt in workflow invocation
- CI: musl: highlight section if there are coredumps
- Revert "BUG/MEDIUM: quic: missing check of dcid for init pkt including a token"
- BUG/MEDIUM: hlua: streams don't support mixing lua-load with lua-load-per-thread
- MINOR: hlua: add hlua_stream_ctx_prepare helper function
- BUILD: quic: fix build on centos 8 and USE_QUIC_OPENSSL_COMPAT
- BUG/MINOR: quic: ssl_quic_initial_ctx() uses error count not error code
- BUG/MINOR: quic: allow-0rtt warning must only be emitted with quic bind
- BUILD: Makefile: add USE_QUIC_OPENSSL_COMPAT to make help
- MINOR: quic+openssl_compat: Emit an alert for "allow-0rtt" option
- MINOR: quic+openssl_compat: Do not start without "limited-quic"
- MINOR: quic: Warning for OpenSSL wrapper QUIC bindings without "limited-quic"
- BUG/MINOR: quic+openssl_compat: Non initialized TLS encryption levels
- DOC: quic: Add "limited-quic" new tuning setting
- MINOR: quic: Add "limited-quic" new tuning setting
- MINOR: quic: SSL context initialization with QUIC OpenSSL wrapper.
- MINOR: quic: Add a quic_openssl_compat struct to quic_conn struct
- MINOR: quic: Call the keylog callback for QUIC openssl wrapper from SSL_CTX_keylog()
- MINOR: quic: Initialize TLS contexts for QUIC openssl wrapper
- MINOR: quic: Export some KDF functions (QUIC-TLS)
- MINOR: quic: Add a compilation option for the QUIC OpenSSL wrapper
- MINOR: quic: Do not enable 0RTT with SSL_set_quic_early_data_enabled()
- MINOR: quic: Set the QUIC connection as extra data before calling SSL_set_quic_method()
- MINOR: quic: Do not enable O-RTT with USE_QUIC_OPENSSL_COMPAT
- MINOR: quic: Include QUIC opensssl wrapper header from TLS stacks compatibility header
- MINOR: quic: QUIC openssl wrapper implementation
- BUG/MINOR: quic: Wrong cluster secret initialization
- BUG/MINOR: quic: Leak of frames to send.
- BUILD: bug: make BUG_ON() void to avoid a rare warning
</description>
    <pkglist>
      <collection>
        <package name="haproxy" epoch="0" version="2.8.11+git0.01c1056a4" release="1.1" arch="src" src="src/haproxy-2.8.11+git0.01c1056a4-1.1.src.rpm">
          <filename>haproxy-2.8.11+git0.01c1056a4-1.1.src.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.8.11+git0.01c1056a4" release="1.1" arch="x86_64" src="x86_64/haproxy-2.8.11+git0.01c1056a4-1.1.x86_64.rpm">
          <filename>haproxy-2.8.11+git0.01c1056a4-1.1.x86_64.rpm</filename>
        </package>
        <package name="haproxy-debuginfo" epoch="0" version="2.8.11+git0.01c1056a4" release="1.1" arch="x86_64" src="x86_64/haproxy-debuginfo-2.8.11+git0.01c1056a4-1.1.x86_64.rpm">
          <filename>haproxy-debuginfo-2.8.11+git0.01c1056a4-1.1.x86_64.rpm</filename>
        </package>
        <package name="haproxy-debugsource" epoch="0" version="2.8.11+git0.01c1056a4" release="1.1" arch="x86_64" src="x86_64/haproxy-debugsource-2.8.11+git0.01c1056a4-1.1.x86_64.rpm">
          <filename>haproxy-debugsource-2.8.11+git0.01c1056a4-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>162</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1735886491" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231185" id="1231185" title="SUSEConnect creates .docker/config.json credentials in Azure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231328" id="1231328" title="Upgrade from 15SP3 or earlier to 15SP5 or later with Package Hub registered fails when using zypper-migration." type="bugzilla" />
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Update version to 1.13:
  - Integrating uptime-tracker
  - Honor auto-import-gpg-keys flag on migration (bsc#1231328)
  - Only send labels if targeting SCC
  - Skip the docker auth generation on RMT (bsc#1231185)
  - Add --set-labels to register command to set labels at registration time on SCC
  - Add a new function to display suse-uptime-tracker version
  - Integrate with uptime-tracker ( https://github.com/SUSE/uptime-tracker/ )
  - Add a command to show the info being gathered
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.13.0" release="1.1" arch="src" src="src/suseconnect-ng-1.13.0-1.1.src.rpm">
          <filename>suseconnect-ng-1.13.0-1.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.13.0" release="1.1" arch="x86_64" src="x86_64/suseconnect-ng-1.13.0-1.1.x86_64.rpm">
          <filename>suseconnect-ng-1.13.0-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>155</id>
    <title>Security update for avahi</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1734622998" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212476" id="1212476" title="patch shebang line match the python version required in the package" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226586" id="1226586" title="avahi-browse -a fails with &quot;Invalid service type&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233420" id="1233420" title="VUL-0: CVE-2024-52616: avahi: Avahi Wide-Area DNS Predictable Transaction IDs" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52616" id="CVE-2024-52616" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52616" type="cve" />
    </references>
    <description>This update for avahi fixes the following issues:

- CVE-2024-52616: Properly randomize query id of DNS packets (bsc#1233420).

Bug fixes:

- No longer supply bogus services to callbacks (bsc#1226586).
- Tag hardening patches as PATCH-FEATURE-OPENSUSE
- Remove dependency on /usr/bin/python3 using %python3_fix_shebang macro (bsc#1212476).
</description>
    <pkglist>
      <collection>
        <package name="avahi" epoch="0" version="0.8" release="6.1" arch="src" src="src/avahi-0.8-6.1.src.rpm">
          <filename>avahi-0.8-6.1.src.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="6.1" arch="x86_64" src="x86_64/avahi-0.8-6.1.x86_64.rpm">
          <filename>avahi-0.8-6.1.x86_64.rpm</filename>
        </package>
        <package name="avahi-debuginfo" epoch="0" version="0.8" release="6.1" arch="x86_64" src="x86_64/avahi-debuginfo-0.8-6.1.x86_64.rpm">
          <filename>avahi-debuginfo-0.8-6.1.x86_64.rpm</filename>
        </package>
        <package name="avahi-debugsource" epoch="0" version="0.8" release="6.1" arch="x86_64" src="x86_64/avahi-debugsource-0.8-6.1.x86_64.rpm">
          <filename>avahi-debugsource-0.8-6.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="6.1" arch="x86_64" src="x86_64/libavahi-client3-0.8-6.1.x86_64.rpm">
          <filename>libavahi-client3-0.8-6.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3-debuginfo" epoch="0" version="0.8" release="6.1" arch="x86_64" src="x86_64/libavahi-client3-debuginfo-0.8-6.1.x86_64.rpm">
          <filename>libavahi-client3-debuginfo-0.8-6.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="6.1" arch="x86_64" src="x86_64/libavahi-common3-0.8-6.1.x86_64.rpm">
          <filename>libavahi-common3-0.8-6.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3-debuginfo" epoch="0" version="0.8" release="6.1" arch="x86_64" src="x86_64/libavahi-common3-debuginfo-0.8-6.1.x86_64.rpm">
          <filename>libavahi-common3-debuginfo-0.8-6.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="6.1" arch="x86_64" src="x86_64/libavahi-core7-0.8-6.1.x86_64.rpm">
          <filename>libavahi-core7-0.8-6.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7-debuginfo" epoch="0" version="0.8" release="6.1" arch="x86_64" src="x86_64/libavahi-core7-debuginfo-0.8-6.1.x86_64.rpm">
          <filename>libavahi-core7-debuginfo-0.8-6.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>164</id>
    <title>Security update for pam</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1736158200" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233078" id="1233078" title="VUL-0: CVE-2024-10963: pam: improper hostname interpretation in pam_access leads to access control bypass" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10963" id="CVE-2024-10963" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10963" type="cve" />
    </references>
    <description>This update for pam fixes the following issues:

- CVE-2024-10963: Fixed improper hostname interpretation in pam_access that could lead to access control bypass (bsc#1233078).
</description>
    <pkglist>
      <collection>
        <package name="pam" epoch="0" version="1.6.0" release="4.1" arch="src" src="src/pam-1.6.0-4.1.src.rpm">
          <filename>pam-1.6.0-4.1.src.rpm</filename>
        </package>
        <package name="pam" epoch="0" version="1.6.0" release="4.1" arch="x86_64" src="x86_64/pam-1.6.0-4.1.x86_64.rpm">
          <filename>pam-1.6.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="pam-debuginfo" epoch="0" version="1.6.0" release="4.1" arch="x86_64" src="x86_64/pam-debuginfo-1.6.0-4.1.x86_64.rpm">
          <filename>pam-debuginfo-1.6.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="pam-debugsource" epoch="0" version="1.6.0" release="4.1" arch="x86_64" src="x86_64/pam-debugsource-1.6.0-4.1.x86_64.rpm">
          <filename>pam-debugsource-1.6.0-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>165</id>
    <title>Security update for libsoup</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1736158200" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233285" id="1233285" title="VUL-0: CVE-2024-52530: libsoup,libsoup2: HTTP request smuggling via stripping null bytes from the ends of header names" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233287" id="1233287" title="VUL-0: CVE-2024-52532: libsoup,libsoup2: libsoup: infinite loop while reading websocket data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233292" id="1233292" title="VUL-0: CVE-2024-52531: libsoup,libsoup2: libsoup: buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52530" id="CVE-2024-52530" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52530" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52531" id="CVE-2024-52531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52531" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52532" id="CVE-2024-52532" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52532" type="cve" />
    </references>
    <description>This update for libsoup fixes the following issues:

- CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285).
- CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict (bsc#1233292).
- CVE-2024-52532: Fixed infinite loop while reading websocket data (bsc#1233287).
</description>
    <pkglist>
      <collection>
        <package name="libsoup" epoch="0" version="3.4.2" release="5.1" arch="src" src="src/libsoup-3.4.2-5.1.src.rpm">
          <filename>libsoup-3.4.2-5.1.src.rpm</filename>
        </package>
        <package name="libsoup-3_0-0" epoch="0" version="3.4.2" release="5.1" arch="x86_64" src="x86_64/libsoup-3_0-0-3.4.2-5.1.x86_64.rpm">
          <filename>libsoup-3_0-0-3.4.2-5.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-3_0-0-debuginfo" epoch="0" version="3.4.2" release="5.1" arch="x86_64" src="x86_64/libsoup-3_0-0-debuginfo-3.4.2-5.1.x86_64.rpm">
          <filename>libsoup-3_0-0-debuginfo-3.4.2-5.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-debugsource" epoch="0" version="3.4.2" release="5.1" arch="x86_64" src="x86_64/libsoup-debugsource-3.4.2-5.1.x86_64.rpm">
          <filename>libsoup-debugsource-3.4.2-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>212</id>
    <title>Recommended update for audit</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1739448422" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215377" id="1215377" title="[Build 20230914-1] plugin /usr/sbin/sedispatch terminated unexpectedly" type="bugzilla" />
    </references>
    <description>This update for audit fixes the following issues:

- Fix plugin termination when using systemd service units (bsc#1215377)
</description>
    <pkglist>
      <collection>
        <package name="audit" epoch="0" version="3.0.9" release="4.1" arch="src" src="src/audit-3.0.9-4.1.src.rpm">
          <filename>audit-3.0.9-4.1.src.rpm</filename>
        </package>
        <package name="audit-debugsource" epoch="0" version="3.0.9" release="4.1" arch="x86_64" src="x86_64/audit-debugsource-3.0.9-4.1.x86_64.rpm">
          <filename>audit-debugsource-3.0.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="libaudit1" epoch="0" version="3.0.9" release="4.1" arch="x86_64" src="x86_64/libaudit1-3.0.9-4.1.x86_64.rpm">
          <filename>libaudit1-3.0.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="libaudit1-debuginfo" epoch="0" version="3.0.9" release="4.1" arch="x86_64" src="x86_64/libaudit1-debuginfo-3.0.9-4.1.x86_64.rpm">
          <filename>libaudit1-debuginfo-3.0.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="libauparse0" epoch="0" version="3.0.9" release="4.1" arch="x86_64" src="x86_64/libauparse0-3.0.9-4.1.x86_64.rpm">
          <filename>libauparse0-3.0.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="libauparse0-debuginfo" epoch="0" version="3.0.9" release="4.1" arch="x86_64" src="x86_64/libauparse0-debuginfo-3.0.9-4.1.x86_64.rpm">
          <filename>libauparse0-debuginfo-3.0.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="audit" epoch="0" version="3.0.9" release="6.1" arch="x86_64" src="x86_64/audit-3.0.9-6.1.x86_64.rpm">
          <filename>audit-3.0.9-6.1.x86_64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins" epoch="0" version="3.0.9" release="6.1" arch="x86_64" src="x86_64/audit-audispd-plugins-3.0.9-6.1.x86_64.rpm">
          <filename>audit-audispd-plugins-3.0.9-6.1.x86_64.rpm</filename>
        </package>
        <package name="audit-audispd-plugins-debuginfo" epoch="0" version="3.0.9" release="6.1" arch="x86_64" src="x86_64/audit-audispd-plugins-debuginfo-3.0.9-6.1.x86_64.rpm">
          <filename>audit-audispd-plugins-debuginfo-3.0.9-6.1.x86_64.rpm</filename>
        </package>
        <package name="audit-debuginfo" epoch="0" version="3.0.9" release="6.1" arch="x86_64" src="x86_64/audit-debuginfo-3.0.9-6.1.x86_64.rpm">
          <filename>audit-debuginfo-3.0.9-6.1.x86_64.rpm</filename>
        </package>
        <package name="audit-secondary" epoch="0" version="3.0.9" release="6.1" arch="src" src="src/audit-secondary-3.0.9-6.1.src.rpm">
          <filename>audit-secondary-3.0.9-6.1.src.rpm</filename>
        </package>
        <package name="audit-secondary-debugsource" epoch="0" version="3.0.9" release="6.1" arch="x86_64" src="x86_64/audit-secondary-debugsource-3.0.9-6.1.x86_64.rpm">
          <filename>audit-secondary-debugsource-3.0.9-6.1.x86_64.rpm</filename>
        </package>
        <package name="python3-audit" epoch="0" version="3.0.9" release="6.1" arch="x86_64" src="x86_64/python3-audit-3.0.9-6.1.x86_64.rpm">
          <filename>python3-audit-3.0.9-6.1.x86_64.rpm</filename>
        </package>
        <package name="python3-audit-debuginfo" epoch="0" version="3.0.9" release="6.1" arch="x86_64" src="x86_64/python3-audit-debuginfo-3.0.9-6.1.x86_64.rpm">
          <filename>python3-audit-debuginfo-3.0.9-6.1.x86_64.rpm</filename>
        </package>
        <package name="system-group-audit" epoch="0" version="3.0.9" release="6.1" arch="x86_64" src="x86_64/system-group-audit-3.0.9-6.1.x86_64.rpm">
          <filename>system-group-audit-3.0.9-6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>166</id>
    <title>Security update for curl</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1736158590" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234068" id="1234068" title="VUL-0: CVE-2024-11053: curl: curl could leak the password used for the first host to the followed-to host under certain circumstances" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053" id="CVE-2024-11053" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11053" type="cve" />
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2024-11053: Fixed password leak used for the first host to the followed-to host under certain circumstances (bsc#1234068)
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.6.0" release="5.1" arch="src" src="src/curl-8.6.0-5.1.src.rpm">
          <filename>curl-8.6.0-5.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.6.0" release="5.1" arch="x86_64" src="x86_64/curl-8.6.0-5.1.x86_64.rpm">
          <filename>curl-8.6.0-5.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debuginfo" epoch="0" version="8.6.0" release="5.1" arch="x86_64" src="x86_64/curl-debuginfo-8.6.0-5.1.x86_64.rpm">
          <filename>curl-debuginfo-8.6.0-5.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debugsource" epoch="0" version="8.6.0" release="5.1" arch="x86_64" src="x86_64/curl-debugsource-8.6.0-5.1.x86_64.rpm">
          <filename>curl-debugsource-8.6.0-5.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.6.0" release="5.1" arch="x86_64" src="x86_64/libcurl4-8.6.0-5.1.x86_64.rpm">
          <filename>libcurl4-8.6.0-5.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4-debuginfo" epoch="0" version="8.6.0" release="5.1" arch="x86_64" src="x86_64/libcurl4-debuginfo-8.6.0-5.1.x86_64.rpm">
          <filename>libcurl4-debuginfo-8.6.0-5.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>156</id>
    <title>Security update for buildkit</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1734622998" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219267" id="1219267" title="VUL-0: CVE-2024-23651: docker: race condition in mount" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219268" id="1219268" title="VUL-0: CVE-2024-23652: docker: arbitrary deletion of files" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219438" id="1219438" title="VUL-0: CVE-2024-23653: buildkit: BuildKit API doesn't validate entitlement on container creation" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23651" id="CVE-2024-23651" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23651" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23652" id="CVE-2024-23652" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23652" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23653" id="CVE-2024-23653" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23653" type="cve" />
    </references>
    <description>This update for buildkit fixes the following issues:

- Update to version 0.12.5:
  * update runc to v1.1.12
  * exec: add extra validation for submount sources (fixes CVE-2024-23651, bsc#1219267)
  * oci: fix error handling on submount calls
  * executor: recheck mount stub path within root after container run (fixes CVE-2024-23652, bsc#1219268)
  * llbsolver: make sure interactive container API validates entitlements (fixes CVE-2024-23653, bsc#1219438)
  * gateway: pass executor with build and not access worker directly
  * pb: add extra validation to protobuf types
  * sourcepolicy: add validations for nil values
  * exporter: add validation for platforms key value
  * exporter: add validation for invalid platorm
  * exporter: validate null config metadata from gateway
  * ci: disable push if not upstream repo
  * hack: use git context only for upstream repo
  * hack/test: allow ALPINE_VERSION to be set from env
  * hack: align syntax
  * vendor: github.com/cyphar/filepath-securejoin v0.2.4
  * tracing: allow the `Resource` to be set externally

- Update to version 0.12.4:
  * Fix possible concurrent map access on remote cache export
  * Fix hang on debug server listener
  * Fix possible deadlock in History API under high number of parallel builds
  * Fix possible panic on handling deleted records in History API
  * Fix possible data corruption in zstd library

- Update to version 0.12.3:
  * Fix possible duplicate source files in provenance attestation for chained builds
  * Fix possible negative step time in progressbar for step shared with other build request
  * Fix properly closing history and cache DB on shutdown to avoid corruption
  * Fix incorrect error handling for invalid HTTP source URLs
  * Fix fallback cases for ambiguous insecure configuration provided for registry used as push target.
  * Fix possible data race with parallel image config resolves
  * Fix regression in v0.12 for clients waiting on buildkitd to become available
  * Fix Cgroup NS handling for hosts supporting only CgroupV1

- Update to version 0.12.2:
  * Fix possible discarded network error when exporting result to client
  * Avoid unnecessary memory allocations when writing build progress

- Update to version 0.12.1:
  * executor: fix resource sampler goroutine leak
  * [v0.11] make tracing socket forward error non-fatal
  * integration: missing env var to check feature compat
  * test: update pinned busybox image to 1.36
  * test: update pinned alpine image to 3.18
  * vendor: github.com/docker/docker 8e51b8b59cb8 (master, v25.0.0-dev)
  * executor/resource: stub out NewSysSampler on Windows
  * vendor: github.com/docker/cli v24.0.4
  * testutil: move CheckContainerdVersion to a separate package
  * llbsolver: fix policy rule ordering
  * filesync: fix backward compatibility with encoding + and %
  * hack: allow to set GO_VERSION during tests
  * test: always disable tls for dockerd worker
  * buildctl: set max backoff delay to 1 second
  * contenthash: data race
  * filesync: escape special query characters
  * applier: add hack to support docker zstd layers
  * Fix various nits
  * pullprogress data race
  * use sampler lock instead
  * Fix ResolveImageConfig to evaluate source policy
  * sampler data race fix
  * update cgroup parent test to work with cgroupns
  * Revert "specify a `ResponseHeaderTimeout` value"
  * oci: make sure cgroupns is enabled if supported
  * bash lint fix
  * rename BUILDFLAGS to GOBUILDFLAGS
  * allow ENOTSUP for PSI cgroup files
  * containerimage: use platform matcher to detect platform to unpack
  * exporter: silently skip unpacking unknown reference
  * improve error handling in ReadFile
  * dockerfile: arg for controlling go build flags
  * dockerfile: arg to enable go race detection
  * Add support for health start interval
  * Re-vendor moby/moby
  * filesync: mark if options have been encoded to detect old versions
  * dockerfile: heredoc should use 0644 permissions
  * docs: update README to reference OpenTelemetry instead of OpenTracing
  * gateway: restore original filename in ReadFile error message
  * Dockerfile: update containerd to v1.7.2
  * Use system.ToSlash() instead of filepath.ToSlash()
  * Revert most changes to client/llb
  * Remove Architecture
  * Default to linux in client
  * Ensure we use proper path separators
  * Set default platform
  * Add nil pointer check in dispatchWorkdir
  * Remove nil pointer check and extra NormalizePath
  * Rename variable, remove superfluous check
  * Use current OS as a default
  * Handle file paths base on target platform
  * exporter: unlazy references in parallel
  * exporter: simplify unlazy references to reduce duplication
  * exporter: allow unpack on multi-platform images
  * tests: add unpack to scratch export test
  * overlay: set whiteout timestamps to 1970-01-01 (not to SOURCE_DATE_EPOCH)
  * dockerfile: graduate `ADD --checksum=&lt;checksum&gt;` from labs
  * dockerfile: graduate `ADD &lt;git ref&gt;` from labs
  * dockerfile: mod-outdated target to check modules updates
  * dockerfile: use xx in dnsname stage
  * dockerfile: install musl-dev to fix compilation issue
  * dockerfile: update Alpine to 3.18
  * vendor: update fsutil to 36ef4d8
  * export(local): split opt
  * buildctl: Provide --wait option
  * containerimage: support SOURCE_DATE_EPOCH for CreatedAt
  * move flightcontrol to use generics
  * containerimage: keep layer labels for exported images
  * shell: start shell from cmd, not entrypoint
  * sbom: propogate image-resolve-mode for generator image
  * client: add extra debug to tests
  * handle missing provenance for non-evaluated result
  * tests: add provenance test for duplicate platform
  * tests: add provenance test for when context directory does not exist
  * forward: make BridgeClient public for lint
  * gateway: enable named contexts for gateway frontend
  * vendor: update vt100 with resize panic fix
  * docs: dockerfile: remove "known issues" related to AuFS
  * docs: add running instruction to CONTRIBUTING.md
  * tests: add worker close method to interface
  * add and check for gateway.exec.secretenv cap
  * move Secretenv from Meta to InitMessage
  * support passing SecretEnv to gateway containers
  * Add comment, update from review
  * Fix issue with digest merge (inconsistent graph state)
  * docs: add helper commands section to CONTRIBUTING.md
  * docs: update CONTRIBUTING.md whitespace formatting
  * integration: fix not deleting dockerd workdir
  * remove uses of deprecated ResolverOptions.Client
  * filesync: fix handling non-ascii in file paths
  * tests: add test for unicode filenames
  * Adding more docs to client/llb
  * Add special case for rw bind mounts
  * vendor: github.com/docker/cli v24.0.2
  * vendor: github.com/docker/docker v24.0.2
  * progressui: fix index printing on partial rows
  * gateway: wrap ExecProcessServer Send calls with a mutex
  * resources: make maxsamples configurable
  * llbsolver: add systemusage samples to provenance attestation
  * resources: store sys cpu usage per step
  * resources: add sampler for periodic stat reads
  * resources: CNI network usage sampling support
  * resources: add build step resource tracking via cgroups
  * solver: lock before using actives
  * Emulate "bind" mounts using the bind filter
  * Fix mount layers on host
  * llbsolver: set temporary lease in Commit context
  * Update containerd dependency
  * exporter: Add exptypes with Common exporter keys
  * exporter/image/exptypes: Make strongly typed
  * solver: move AddBuildConfig into llbsolver package
  * tests: add test to check url format for image loaded from oci layout
  * solver: mark locally loaded images as such
  * solver: merge local and remote images into single list
  * purl: allow RefToPURL to take a type parameter
  * tests: don't use purl code to test itself
  * Use linux as a default for inputOS
  * Add path handling functions
  * response to comments
  * containerimage: Export option keys
  * vendor: update spdx/tools-golang to v0.5.1
  * exporter: remove non dist options from tar exporter
  * exporter: move fs opt parsing to method
  * tests: fixup attestation tar to not panic when file not found
  * git: set umask without reexec
  * add language property for sourcemap
  * dockerfile/docs: add set -ex to heredoc #3870
  * authprovider: fix a bug where registry-1.docker.io auth was always a cache miss
  * response to comments
  * tracing: fix buildx tracing delegation
  * Update continuity and fsutil
  * cache: add a few more fields to ref trace logs.
  * vendor: github.com/containerd/go-runc v1.1.0
  * provenance: fix possible empty digest access
  * vendor: fix broken vendoring
  * dockerfile: bump up nerdctl to v1.4.0
  * bump nydus-snapshotter dependence to v0.8.2
  * vendor: github.com/docker/cli v24.0.1
  * vendor: github.com/docker/docker v24.0.1
  * vendor: github.com/containerd/containerd v1.7.1
  * vendor: github.com/Microsoft/hcsshim v0.10.0-rc.8
  * vendor: github.com/Microsoft/go-winio v0.6.1
  * vendor: golang.org/x/sys v0.7.0
  * vendor: github.com/containerd/typeurl/v2 v2.1.1
  * chore: bump spdx tools
  * Fix typo in attestation-storage.md
  * vendor: github.com/docker/cli v24.0.0
  * vendor: github.com/docker/docker v24.0.0
  * vendor: github.com/opencontainers/runc v1.1.7
  * vendor: github.com/opencontainers/runtime-spec v1.1.0-rc.2
  * vendor: github.com/klauspost/compress v1.16.3
  * Dockerfile: CONTAINERD_VERSION=v1.7.1
  * Dockerfile: CONTAINERD_ALT_VERSION_16=v1.6.21
  * Dockerfile: RUNC_VERSION=v1.1.7
  * session: avoid logging healthcheck error on canceled connection
  * session: fix run and close synchronization
  * testutil: update ReadImages to fallback to reading manifest
  * Add trace logs for cache leaks.
  * Add some doc strings for LLB functions
  * attestations: move containerd media type warnings
  * update generated proto files
  * attestations: replace intoto media type with vendored const
  * nydus: bump nydus versions in Dockerfile and doc
  * feedback changes for moby/buildkit #2251
  * testutil: expose underlying docker address for supported workers
  * testutil: expose integration workers as public
  * remove type aliases for leasemanager/contentstore
  * llbsolver: move history blobs to a separate namespace
  * build(deps): bump github.com/docker/distribution
  * added import/export support for OCI compatible image manifest version of cache manifest (opt-in on export, inferred on import) moby/buildkit #2251
  * llb: carry platform from inputs for merge/diff
  * llb: don't include platform in fileop
  * control: fix possible deadlock on network error
  * exporter/containerimage: remove redundant type for var declaration
  * Fix not to set the value on empty vertex
  * Fix to import as digest
  * cache: always release ref when getting size in usage.
  * Drop unneeded variable
  * ssh: add fallback to ensure conn is closed in all cases.
  * vendor: github.com/opencontainers/image-spec v1.1.0-rc3
  * vendor: github.com/docker/cli v23.0.5
  * vendor: github.com/docker/docker v23.0.5
  * nydus: update nydus-snapshotter dependency to v0.8.0
  * progressui: fix possible zero prefix numbers in logs
  * llbsolver: send active event only to current client
  * llbsolver: send delete status event
  * llbsolver: filter out records marked deleted from list responses
  * Add Windows service support
  * docs: fixup build repro doc with updated policy format
  * test: use appropriate snapshotter service to walk snapshots
  * overlay: use function to check for overlay-based mounts
  * Update uses of Image platform fields in OCI image-spec
  * allow setting user agent products
  * Bump up golangci-lint to v1.52.2
  * chore: tidy up duplicated imports
  * solver: Release unused refs in LoadWithParents
  * Avoid panic on parallel walking on DefinitionOp
  * solver: skip sbom post processor if result is nil
  * vendor: github.com/docker/docker v23.0.4
  * vendor: github.com/docker/cli v23.0.4
  * vendor: golang.org/x/time v0.3.0
  * vendor: github.com/docker/cli v23.0.2
  * vendor: github.com/docker/docker v23.0.2
  * test: don't hang if a process doesn't run
  * ci: put worker name first for better UX in actions
  * go.mod: remove github.com/kr/pretty
  * Revert "Problem: can't use anonymous S3 credentials"
  * go.mod: bump up runc to v1.1.6
  * go.mod: Bump up stargz-snapshotter to v0.14.3
  * dockerfile: bump up stargz-snapshotter to v0.14.3
  * dockerfile: bump up runc to v1.1.6
  * buildkitd: add grpc reflection
  * Bump up nerdctl to 1.3.0
  * Bump up containerd 1.6.20
  * Fix gzip decoding of HTTP sources.
  * ci: update runner os to ubuntu 22.04
  * Fix bearer token expiration check (fixes #3779)
  * docs: update buildkitd.toml with new field info
  * buildkitd: allow durations for gc config
  * buildkitd: allow multiple units for gc config
  * dockerui: expose context detection functions as public
  * Prevent overflow of runc exit code.
  * Upgrade to latest go-runc.
  * runc worker: fix sigkill handling
  * Dockerfile: RUNC_VERSION=v1.1.5
  * client: add client opts to enable system certificates
  * Make ClientOpts type safe
  * build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5
  * fileop: create new fileOpSolver instance per Exec call
  * Provide CacheManager to Controller instead of CacheKeyManager.
  * http: ensure HEAD and GET requests have same headers
  * docs: add auto-generated sections to buildctl.md
  * client: allow grpc dial option passthrough
  * cni: simplify netns creation
  * add Bass to list of LLB languages
  * llbsolver: fix sorting of history records
  * llbsolver: Fix performance of recomputeDigests
  * solve: use comparables instead of reflection in result struct
  * vendor: github.com/docker/cli v23.0.1
  * vendor: github.com/docker/docker v23.0.1
  * client: create oci-layout file in StoreIndex
  * ci: output annotations for failures
  * test: set mod vendor
  * test: use gotestsum to generate reports
  * fix gateway exec tty cleanup on context.Canceled
  * fix process termination handling for runc exec
  * Register builds before recording build history
  * docs(dockerfile): minimal Dockerfile version support for chmod
  * Update builder.md to document newly supported --chmod features in both ADD and COPY statements.
  * use bklog.G(ctx) instead of logrus directly
  * integration: missing mergeDiff compat check
  * chore: `translateLegacySolveRequest` does not need to return error checking.
  * integration: split feature compat check for subtests
  * integration: missing feature compat check for cache
  * dockerfile: fix reproducible digest test for non-amd64
  * integration: add FeatureMergeDiff compat
  * integration: add FeatureCacheBackend* compat
  * integration: enforce features compat through env vars
  * ci: upstream docs conformance validation
  * dockerfile(docs): fix liquid syntax
  * Problem: can't use anonymous S3 credentials
  * hack: remove build_ci_first_pass script
  * hack: binaries and cross bake targets
  * go.mod: update to go 1.20
  * Dockerfile: CONTAINERD_VERSION=v1.7.0
  * go.mod: github.com/containerd/containerd v1.7.0
  * Add Namespace to list of buildkit users.
  * remove buildinfo
  * buildinfo: add BUILDKIT_BUILDINFO build arg
  * buildinfo: mark as deprecated
  * docs: deprecated features page
  * rootless: guide for Bottlerocket OS (`sysctl -w user.max_user_namespaces=N`)
  * rootless: fix up unprivileged mount opts
  * Dockerfile: CONTAINERD_VERSION=v1.7.0-rc.3, CONTAINERD_ALT_VERSION_16=v1.6.19
  * go.mod: github.com/containerd/containerd v1.7.0-rc.3
  * version: add "v" prefix to version for tagging convention consistency
  * remove context name validation from kubepod connhelper
  * gateway: add hostname option to NewContainer API
  * fix error message typo
  * provenance: ensure URLs are redacted before written
  * test/client: Close buildkit client
  * docs: missing security policy markdown file
  * diffapply: do chown before xattrs
  * Add test for merge of files with capabilities.
  * fix a possible panic on cache
  * Update cmd/buildkitd/main_windows.go
  * ci(validate): use bake
  * hack: shfmt bake target
  * hack: generated-files bake target
  * hack: doctoc bake target
  * hack: lint bake target
  * hack: authors Dockerfile and bake target
  * hack: bake definition with vendor targets
  * Fix buildkitd panic when frontend input is nil.
  * ci: trigger workflows on push to release branches
  * build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0
  * ci: create GitHub Release for frontend as well
  * ci: make release depends on image job
  * lint: fix issues with go 1.20
  * remove deprecated golangci-lint linters
  * update golangci-lint to v1.51.1
  * update to go 1.20
  * Allow DefinitionOp to track sources
  * specify a `ResponseHeaderTimeout` value
  * Ensures that the primary GID is also included in the additional GIDs
  * ci: fix missing TESTFLAGS env var in test-os workflow
  * Dockerfile: update containerd to v1.7.0-beta.4, v1.6.18
  * go.mod: github.com/containerd/containerd v1.7.0-beta.4
  * ci: update softprops/action-gh-release to v0.1.15
  * ci: remove unused vars in dockerd workflow
  * ci: split cross job
  * Dockerfile: remove binaries-linux-helper stage
  * ci: rename unclear env vars
  * readme: fix and update badges
  * ci: rename build workflow to buildkit
  * ci: reusable test workflow
  * ci: move test-os to a dedicated workflow
  * ci: move frontend integration tests and build to a dedicated workflow
  * stargz-snapshotter: graduate from experimental
  * Bump up stargz-snapshotter to v0.14.1
  * set osversion in index descriptor from base image
  * progress: solve status description
  * ci: update buildx to latest
  * Dockerfile: update xx to 1.2.1
  * integration: make sure registry directory exists
  * gha: avoid range requests with too big offset
  * ci: merge test-nydus job in test one
  * ci: remove branch restriction on pull request event
  * client: add tests for layerID in comment field
  * exporter: fix sbom supplement core detection
  * exporter: fix supplement sboms on empty scratch layer
  * exporter: fix file layer finder whiteout detection
  * exporter: canonicalize sbom file paths during search
  * Add platform tracing socket paths and mounts
  * integration: log dockerd cmd
  * integration: set custom flags for dockerd worker
  * remotecache: proper exporter naming for gha, s3 and azblob
  * remotecache: explicit names for registry and local
  * exporter: use compression.ParseAttributes func
  * remotecache: mutualize compression parsing attrs
  * lex: add support for optional colon in variable expansion
  * test: rework TestProcessWithMatches to use a matrix
  * dockerfile: update to use dockerui pkg
  * dockerui: separate docker frontend params to reusable package
  * cache: add fallback for snapshotID
  * exporter: remove wrappers for oci data types
  * vendor: github.com/docker/cli v23.0.0
  * vendor: github.com/docker/docker v23.0.0
  * hack: do not cache some stages on release
  * hack: do not set attest flags when exporting to docker
  * git: override the locale to ensure consistent output
  * fix support for empty git ref with subdir
  * gitutil: use subtests
  * source: more tests cases for git identifier
  * source: use subtests cases for git identifier
  * otel: bump dependencies to v1.11.2/v0.37.0
  * hack: treat unset variables as an error
  * frontend: fix typo in release script
  * ci: create matrix for building frontend image
  * inline cache: fix blob indexes by uncompressed digest
  * Skip configuring cache exporter if it is nil.
  * docs: update syntax for labs channel in examples
  * integration: remove wrong compat condition
  * integration: fix compat check for CNI DNS test
  * cache: don’t link blobonly based on chainid
  * do not mount secrets that are optional and missing from solve opts
  * SOURCE_DATE_EPOCH: drop timezone
  * sbom: create tmp directory for scanner image
  * progress: keep color enabled with NO_COLOR empty
  * hack: remove azblob_test
  * integration: basic azblob cache test
  * test: add proxy build args when existed
  * vendor: github.com/docker/cli v23.0.0-rc.3
  * vendor: github.com/docker/docker v23.0.0-rc.3
  * vendor: golang.org/x/net v0.5.0
  * vendor: golang.org/x/text v0.6.0
  * vendor: golang.org/x/sys v0.4.0
  * Dockerfile: CNI plugins v1.2.0
  * Dockerfile: CONTAINERD_VERSION=v1.7.0-beta.3, CONTAINERD_ALT_VERSION_16=v1.6.16
  * Fix tracing listener on Windows
  * go.mod: github.com/containerd/containerd v1.7.0-beta.3
  * control: send current timestamp header with event streams
  * vendor: update containerd to v1.6.16-0.1709cfe273d9
  * buildctl: add ref-file to get history record for a build
  * client: make sure ref is configurable for the history API
  * history: save completed steps with cache stats
  * history: fix exporter key not being passed
  * history: fix logs and traces are saving on canceled builds
  * hack: add correct entrypoint to shell script
  * ci: use moby/buildkit:latest in build action
  * dockerfile: add testReproSourceDateEpoch
  * Fix cache cannot reuse lazy layers
  * Correct manifests_prefix documentation for S3 cache
  * Use golang.org/x/sys/windows instead of syscall
  * dockerfile: release frontend for i386 platform
  * Add get-user-info utility
  * optimize --dry-run flag
  * fix(tracing): spelling of OTEL_TRACES_EXPORTER value
  * Propagate sshforward send side connection close
  * buildctl: add `buildctl debug histories, buildctl prune-histories`
  * dockerfile: fix panic on warnings with multi-platform
  * vendor: github.com/docker/cli v23.0.0-rc.2
  * vendor: github.com/docker/docker v23.0.0-rc.2
  * vendor: github.com/containerd/containerd v1.6.15
  * cache: add registry.insecure option to registry exporter
  * Make local cache non-lazy
  * docs/build-repro.md: add the SOURCE_DATE_EPOCH section
  * docs: clarified build argument example by changing the variable name
  * azblob cache: account_name attribute
  * docs: master -&gt; 0.11
  * ci: fix dockerd workflow with latest changes from moby
  * integration: set mirrors and entitlements with dockerd worker
  * github: update CI to buildkit version
  * exporter: ensure spdx order prioritizes primary sbom
  * hack: remove s3_test
  * integration: basic s3 cache test
  * integration: add runCmd and randomString utils
  * integration: expose backend logs in sandbox interface
  * azblob_test: pin busybox to avoid "Illegal instruction" error
  * docs: add nerdctl container buildkitd address docs
  * feat: add namespace support for nerdctl container
  * ci: add ci to check README toc
  * testutil: pin busybox and alpine used in releases
  * exporter: allow configuring inline attestations for image exporters
  * exporter: force enabling inline attestations for image export
  * docs: change semicolons to double ampersands
  * llbsolver: fix panic when requesting provenance on nil result
  * vendor: update fsutil to fb43384
  * attestation: only supplement file data for the core scan
  * docs: add index page for attestations
  * docs: move attestation docs to dedicated directory
  * docs: rename slsa.md to slsa-provenance.md
  * docs: tidy up json examples for slsa definitions
  * docs: add cross-linking between slsa pages
  * Flakiness in azblob test job
  * vendor: update spdx/tools-golang to d6f58551be3f
  * feat: add nerdctl-container support for client
  * docs: slsa review updates
  * docs: moved slsa definitions to a separate page
  * docs: slsa editorial fixes
  * docs: add filename to provenance attestation
  * docs: update hermetic field after it was moved in implementation
  * docs: update provenance docs
  * docs: add slsa provenance documentation
  * progress: fix clean context cancelling
  * fix: updated_at -&gt; updated-at
  * Solve panic due to concurrent access to ExportSpans
  * feat: allow ignoring remote cache-export error if failing
  * add cache stats to the build history API
  * vendor: github.com/docker/cli v23.0.0-rc.1
  * vendor: github.com/docker/docker v23.0.0-rc.1
  * vendor: github.com/containerd/containerd v1.6.14
  * frontend: fix testMultiStageImplicitFrom to account for busybox changes
  * sshforward: skip conn close on stream CloseSend.
  * chore: update buildkitd.toml docs with mirror path example
  * feat: handle mirror url with path
  * provenance: fix the order of the build steps
  * provenance: move hermetic field into a correct struct
  * add possibility to override filename for provenance
  * Fix typo in CapExecMountBindReadWriteNoOutput.
  * Use SkipOutput instead of -1 for output indexes to clarify semantics.
  * fix indentation for in-toto and traces
  * attestation: forbid provenance attestations from frontend
  * attestation: validate attestations before unbundling as well
  * exporter: make attestation validation public
  * result: change reason types to strings
  * attestations: ignore spdx parse errors
  * attestations: propogate metadata through unbundling
  * gateway: add addition check to prevent content func from being forwarded
  * ociindex: add utility method for getting a single manifest from the index
  * ociindex: refactor to hide implementation internally
  * cache: test gha cache exporter
  * containerdexecutor: add network namespace callback
  * frontend/dockerfile: BFlags.Parse(): use strings.Cut()
  * frontend/dockerfile: parseExtraHosts(): use strings.Cut()
  * frontend/dockerfile: parseMount() use strings.Cut(), and some minor cleanup
  * frontend/dockerfile: move check for cache-sharing
  * frontend/dockerfile: provide suggestions for mount share mode
  * frontend/dockerfile: define types for enums
  * frontend/dockerfile/shell: use strings.Equalfold
  * frontend/dockerfile/parser: remove redundant concat
  * frontend/dockerfile: parseBuildStageName(): pre-compile regex
  * frontend/dockerfile: remove isSSHMountsSupported, isSecretMountsSupported
  * docs: Enable rootless for stargz-snapshotter
  * executor/oci: GetResolvConf(): simplify handling of resolv.conf
</description>
    <pkglist>
      <collection>
        <package name="buildkit" epoch="0" version="0.12.5" release="1.1" arch="src" src="src/buildkit-0.12.5-1.1.src.rpm">
          <filename>buildkit-0.12.5-1.1.src.rpm</filename>
        </package>
        <package name="buildkit" epoch="0" version="0.12.5" release="1.1" arch="x86_64" src="x86_64/buildkit-0.12.5-1.1.x86_64.rpm">
          <filename>buildkit-0.12.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="buildkit-debuginfo" epoch="0" version="0.12.5" release="1.1" arch="x86_64" src="x86_64/buildkit-debuginfo-0.12.5-1.1.x86_64.rpm">
          <filename>buildkit-debuginfo-0.12.5-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>174</id>
    <title>Security update for nvidia-open-driver-G06-signed</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1736416314" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222972" id="1222972" title="Update nvidia driver to version 550.76" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223356" id="1223356" title="VUL-0: CVE-2024-0090,CVE-2024-0091,CVE-2024-0092: nvidia-open-driver-G06-signed: May 28 release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223454" id="1223454" title="Update nvidia driver to version 550.78" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227417" id="1227417" title="[NVIDIA, CUDA, open driver] No current NVIDIA Open Driver available for most CUDA nvidia-compute Versions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227419" id="1227419" title="[CUDA, NVIDIA Open Driver] CUDA installs the proprietary Driver by Default" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227575" id="1227575" title="Update nvidia driver to version 550.100" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229716" id="1229716" title="Update nvidia driver to version 550.107.02" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230368" id="1230368" title="[zypper, supplements] On Installation Supplements don't appear to be ignored although --no-recommends set" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230779" id="1230779" title="Update nvidia driver to latest 550.120 release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232057" id="1232057" title="Update nvidia driver to latest 550.127.05 release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233332" id="1233332" title="weird zypper replacement issue" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233673" id="1233673" title="Update nvidia driver to latest 550.135 release" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0090" id="CVE-2024-0090" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0090" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0091" id="CVE-2024-0091" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0091" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0092" id="CVE-2024-0092" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0092" type="cve" />
    </references>
    <description>This update for nvidia-open-driver-G06-signed fixes the following issues:

- Make sure the correct FW package is installed on non-CUDA.
- only obsolete 555 CUDA driver/firmware packages
- For CUDA: update version to 565.57.01

- Add 'dummy' firmware package on SLE to work around update
  issues. On SLE, the firmware is installed directly from
  an NVIDIA-hosted repo.

- Improve handling of conflicts between different flavors (gfx vs. CUDA) (bsc#1233332).

- Update to 550.135 (bsc#1233673)

- Update to 550.127.05 (bsc#1232057)
  * Fixed a bug which could cause applications using GBM to crash
    when running with nvidia-drm.modeset=0.

- cuda-flavor

  provide also nvidia-open-driver-G06-kmp-$flavor = %version to
  workaround broken cuda-drivers

- For CUDA update version to 560.35.03 

- nv-prefer-signed-open-driver:

  * added specicic versions of cuda-drivers/cuda-drivers-xxx as
    preconditions for requiring specific version of
    nvidia-compute-G06 

- nv-prefer-signed-open-driver:

  * no longer require a specific version of
    nvidia-open-driver-G06-signed-cuda-kmp, so it can select the
    correct open driver KMP matching the cuda-runtime version

- cuda-flavor:

  * added nvidia-compute-G06 = %version to preconditions for
    requiring kernel-firmware-nvidia-gspx-G06, since
    nvidia-compute-utils-G06 does not have a version-specific
    requires on nvidia-compute-G06

- cuda-flavor: 

  * require kernel-firmware-nvidia-gspx-G06 instead of 
    kernel-firmware-nvidia-gspx-G06-cuda (which provides also
    kernel-firmware-nvidia-gspx-G06)
  * trigger removal of driver modules also on
    kernel-firmware-nvidia-gspx-G06

- no longer hard-require kernel firmware package, but install it
  automatically once nvidia-compute-utils-G06 gets installed

- trigger removal of driver modules with non-existing or wrong
  firmware when (new) firmware gets installed

- Update to 550.120 (bsc#1230779)

  * Fixed a bug that could cause kernel crashes upon attempting
    KMS operations through DRM when nvidia_drm was loaded with
    modeset=0.

- CUDA build: removed entries from pci_ids-555.42.06 since this is
  doing more harm than benefit (bsc#1230368)

- For CUDA (preamble file):
  * added: Provides: nvidia-open-driver-G06-signed-cuda-kmp-$flavor = %version
    which is needed for 'zypper install &lt;package&gt; = &lt;version&gt;'
  * added: Provides/Conflicts: nvidia-open-driver-G06-signed-kmp-$flavor = %version
    useful for containers

- reverted CUDA update version to 560.x.y due to changes in CUDA
  repository with CUDA 12.6/560.x.y drivers

- For CUDA update version to 560.35.03 

- Update to 550.107.02 (bsc#1229716)

- For CUDA update version to 560.28.03

- Update to 550.100 (bsc#1227575)

  * Fixed a bug that caused OpenGL triple buffering to behave like
    double buffering.

- To avoid issues with missing dependencies when no CUDA repo
  is present make the dependecy to nvidia-compute-G06 conditional.
- CUDA is not available for Tumbleweed, exclude the build of the
  cuda flavor.

- preamble: let the -cuda flavor KMP require the -cuda flavor
  firmware

- Add a second flavor for building the kernel module versions
  used by CUDA. The kmp targetting CUDA contains '-cuda' in
  its name to track its versions separately from the graphics
  kmp. (bsc#1227417)

- Provide the meta package nv-prefer-signed-open-driver to
  make sure the latest available SUSE-build open driver is
  installed - independent of the latest available open driver
  version in he CUDA repository.
  Rationale:
  The package cuda-runtime provides the link between CUDA and
  the kernel driver version through a
  Requires: cuda-drivers &gt;= %version
  This implies that a CUDA version will run withany kernel driver
  version equal or higher than a base version.
  nvidia-compute-G06 provides the glue layer between CUDA and
  a specific version of he kernel driver both by providing
  a set of base libraries and by requiring a specific kernel
  version. 'cuda-drivers' (provided by nvidia-compute-utils-G06)
  requires an unversioned nvidia-compute-G06. With this, the
  resolver will install the latest available and applicable
  nvidia-compute-G06.
  nv-prefer-signed-open-driver then represents the latest available
  open driver version and restricts the nvidia-compute-G06 version
  to it. (bsc#1227419)

- Security Update 550.90.07 (bsc#1223356) [CVE-2024-0090,
  CVE-2024-0091, CVE-2024-0092]

- Update to 550.78 (bsc#1223454)
- Update to 550.76 (bsc#1222972)
- Update to 550.67

</description>
    <pkglist>
      <collection>
        <package name="nvidia-open-driver-G06-signed" epoch="0" version="550.142" release="1.1" arch="src" src="src/nvidia-open-driver-G06-signed-550.142-1.1.src.rpm">
          <filename>nvidia-open-driver-G06-signed-550.142-1.1.src.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-debugsource" epoch="0" version="550.142" release="1.1" arch="x86_64" src="x86_64/nvidia-open-driver-G06-signed-debugsource-550.142-1.1.x86_64.rpm">
          <filename>nvidia-open-driver-G06-signed-debugsource-550.142-1.1.x86_64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default" epoch="0" version="550.142_k6.4.0_20" release="1.1" arch="x86_64" src="x86_64/nvidia-open-driver-G06-signed-kmp-default-550.142_k6.4.0_20-1.1.x86_64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-550.142_k6.4.0_20-1.1.x86_64.rpm</filename>
        </package>
        <package name="nvidia-open-driver-G06-signed-kmp-default-debuginfo" epoch="0" version="550.142_k6.4.0_20" release="1.1" arch="x86_64" src="x86_64/nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.142_k6.4.0_20-1.1.x86_64.rpm">
          <filename>nvidia-open-driver-G06-signed-kmp-default-debuginfo-550.142_k6.4.0_20-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>169</id>
    <title>Security update for docker</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1736169042" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217070" id="1217070" title="VUL-0: CVE-2023-47108: TRACKERBUG: otelgrpc: DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228324" id="1228324" title="VUL-0: CVE-2024-41110: docker: Authz zero length regression" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228553" id="1228553" title="VUL-0: CVE-2023-45142: TRACKERBUG: otelhttp,otelhttptrace,otelrestful: DoS vulnerability" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229806" id="1229806" title="CVE-L3: OpenTelemetry-Go related vulnerabilities in dockerd and containerd  [ ref:_00D1igLOd._500TrEscMs:ref ]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230294" id="1230294" title="[trackerbug] docker 26.1.5 update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230331" id="1230331" title="docker: add Requires for docker-buildx" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230333" id="1230333" title="docker-buildx: move to be a subpackage of Docker" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231348" id="1231348" title="Issues on remount of tmpfs mount/secrets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232999" id="1232999" title="Issues on Remount of tmpfs for Docker Secrets Directory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233819" id="1233819" title="docker-buildx doesn't work with containers-suseconnect" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45142" id="CVE-2023-45142" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45142" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47108" id="CVE-2023-47108" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47108" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110" id="CVE-2024-41110" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110" type="cve" />
    </references>
    <description>This update for docker fixes the following issues:

- Update docker-buildx to v0.19.2. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.2&gt;.

  Some notable changelogs from the last update:
    * &lt;https://github.com/docker/buildx/releases/tag/v0.19.0&gt;
    * &lt;https://github.com/docker/buildx/releases/tag/v0.18.0&gt;

- Add a new toggle file /etc/docker/suse-secrets-enable which allows users to
  disable the SUSEConnect integration with Docker (which creates special mounts
  in /run/secrets to allow container-suseconnect to authenticate containers
  with registries on registered hosts). bsc#1231348 bsc#1232999

  In order to disable these mounts, just do

    echo 0 &gt; /etc/docker/suse-secrets-enable

  and restart Docker. In order to re-enable them, just do

    echo 1 &gt; /etc/docker/suse-secrets-enable

  and restart Docker. Docker will output information on startup to tell you
  whether the SUSE secrets feature is enabled or not.

- Remove DOCKER_NETWORK_OPTS from docker.service. This was removed from
  sysconfig a long time ago, and apparently this causes issues with systemd in
  some cases.

- Update to docker-buildx v0.17.1 to match standalone docker-buildx package we
  are replacing. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.17.1&gt;

- Add %{_sysconfdir}/audit/rules.d to filelist.

- Update to Docker 26.1.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/26.1/#2615&gt;
  bsc#1230294
- This update includes fixes for:
  * CVE-2024-41110. bsc#1228324
  * CVE-2023-47108. bsc#1217070
  * CVE-2023-45142. bsc#1228553
</description>
    <message>Updating docker will restart the docker service, which may stop some of your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="26.1.5_ce" release="1.1" arch="src" src="src/docker-26.1.5_ce-1.1.src.rpm">
          <filename>docker-26.1.5_ce-1.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="26.1.5_ce" release="1.1" arch="x86_64" src="x86_64/docker-26.1.5_ce-1.1.x86_64.rpm">
          <filename>docker-26.1.5_ce-1.1.x86_64.rpm</filename>
        </package>
        <package name="docker-debuginfo" epoch="0" version="26.1.5_ce" release="1.1" arch="x86_64" src="x86_64/docker-debuginfo-26.1.5_ce-1.1.x86_64.rpm">
          <filename>docker-debuginfo-26.1.5_ce-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>157</id>
    <title>Recommended update for xmlsec1</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1734696463" />
    <references>
    </references>
    <description>This update for xmlsec1 fixes the following issues:

Update to 1.2.41:

  * (xmlsec-mscng,xmlsec-mscrypto) Improved certificates verification.
  * (xmlsec-gnutls) Added support for self-signed certificates.
  * (xmlsec-core) Fix deprecated functions in LibXML2 2.13.1
                  including disabling HTTP support by default
                  (use '--enable-http' option to re-enable it). 

Update to 1.2.40:

  The legacy XML Security Library 1.2.40 release includes the following changes:

  * (xmlsec-core) Fixed functions deprecated in LibXML2 2.13.1 (including disabling HTTP support by default).
  * (xmlsec-nss) Increased keys size in all tests to support NSS 3.101.
  * (windows) Added "ftp" and "http" flags in 'configure.js' (both are disabled by default).
  * Several other small fixes (more details).

Update to 1.2.39:

  The legacy XML Security Library 1.2.39 release includes the following changes:

  * Added options to enable/disable local files, HTTP, and FTP support. FTP is disabled by default.
  * Several other small fixes (more details).

Update to 1.2.38:

  * Have a look at the changelog for the list of changes
</description>
    <pkglist>
      <collection>
        <package name="libxmlsec1-1" epoch="0" version="1.2.41" release="1.1" arch="x86_64" src="x86_64/libxmlsec1-1-1.2.41-1.1.x86_64.rpm">
          <filename>libxmlsec1-1-1.2.41-1.1.x86_64.rpm</filename>
        </package>
        <package name="libxmlsec1-1-debuginfo" epoch="0" version="1.2.41" release="1.1" arch="x86_64" src="x86_64/libxmlsec1-1-debuginfo-1.2.41-1.1.x86_64.rpm">
          <filename>libxmlsec1-1-debuginfo-1.2.41-1.1.x86_64.rpm</filename>
        </package>
        <package name="libxmlsec1-openssl1" epoch="0" version="1.2.41" release="1.1" arch="x86_64" src="x86_64/libxmlsec1-openssl1-1.2.41-1.1.x86_64.rpm">
          <filename>libxmlsec1-openssl1-1.2.41-1.1.x86_64.rpm</filename>
        </package>
        <package name="libxmlsec1-openssl1-debuginfo" epoch="0" version="1.2.41" release="1.1" arch="x86_64" src="x86_64/libxmlsec1-openssl1-debuginfo-1.2.41-1.1.x86_64.rpm">
          <filename>libxmlsec1-openssl1-debuginfo-1.2.41-1.1.x86_64.rpm</filename>
        </package>
        <package name="xmlsec1" epoch="0" version="1.2.41" release="1.1" arch="src" src="src/xmlsec1-1.2.41-1.1.src.rpm">
          <filename>xmlsec1-1.2.41-1.1.src.rpm</filename>
        </package>
        <package name="xmlsec1-debugsource" epoch="0" version="1.2.41" release="1.1" arch="x86_64" src="x86_64/xmlsec1-debugsource-1.2.41-1.1.x86_64.rpm">
          <filename>xmlsec1-debugsource-1.2.41-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>170</id>
    <title>Recommended update for catatonit</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1736168942" />
    <references>
    </references>
    <description>This update for catatonit fixes the following issues:

Update to catatonit v0.2.0.

* Change license to GPL-2.0-or-later.
</description>
    <pkglist>
      <collection>
        <package name="catatonit" epoch="0" version="0.2.0" release="1.1" arch="src" src="src/catatonit-0.2.0-1.1.src.rpm">
          <filename>catatonit-0.2.0-1.1.src.rpm</filename>
        </package>
        <package name="catatonit" epoch="0" version="0.2.0" release="1.1" arch="x86_64" src="x86_64/catatonit-0.2.0-1.1.x86_64.rpm">
          <filename>catatonit-0.2.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="catatonit-debuginfo" epoch="0" version="0.2.0" release="1.1" arch="x86_64" src="x86_64/catatonit-debuginfo-0.2.0-1.1.x86_64.rpm">
          <filename>catatonit-debuginfo-0.2.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="catatonit-debugsource" epoch="0" version="0.2.0" release="1.1" arch="x86_64" src="x86_64/catatonit-debugsource-0.2.0-1.1.x86_64.rpm">
          <filename>catatonit-debugsource-0.2.0-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>167</id>
    <title>Recommended update for ignition</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1736160855" />
    <references>
    </references>
    <description>This update for ignition fixes the following issues:

Build with current GO.
</description>
    <pkglist>
      <collection>
        <package name="ignition" epoch="0" version="2.17.0" release="2.1" arch="src" src="src/ignition-2.17.0-2.1.src.rpm">
          <filename>ignition-2.17.0-2.1.src.rpm</filename>
        </package>
        <package name="ignition" epoch="0" version="2.17.0" release="2.1" arch="x86_64" src="x86_64/ignition-2.17.0-2.1.x86_64.rpm">
          <filename>ignition-2.17.0-2.1.x86_64.rpm</filename>
        </package>
        <package name="ignition-debuginfo" epoch="0" version="2.17.0" release="2.1" arch="x86_64" src="x86_64/ignition-debuginfo-2.17.0-2.1.x86_64.rpm">
          <filename>ignition-debuginfo-2.17.0-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>168</id>
    <title>Recommended update for liburing</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1736162449" />
    <references>
    </references>
    <description>This update for liburing fixes the following issues:

Update to 2.6:

  * Add getsockopt and setsockopt socket commands
  * Add test cases to test/hardlink
  * Man page fixes
  * Add futex support, and test cases
  * Add waitid support, and test cases
  * Add read multishot, and test cases
  * Add support for IORING_SETUP_NO_SQARRAY
  * Use IORING_SETUP_NO_SQARRAY as the default
  * Add support for IORING_OP_FIXED_FD_INSTALL
  * Add io_uring_prep_fixed_fd_install() helper
  * Support for napi busy polling
  * Improve/add test cases
  * Man page fixes
  * Add sample 'proxy' example

Update to 2.5:

  * Add support for io_uring_prep_cmd_sock()
  * Add support for application allocated ring memory, for placing rings
    in huge mem. Available through io_uring_queue_init_mem().
  * Add support for registered ring fds
  * Various documentation updates
  * Various fixes
</description>
    <pkglist>
      <collection>
        <package name="liburing" epoch="0" version="2.6" release="1.1" arch="src" src="src/liburing-2.6-1.1.src.rpm">
          <filename>liburing-2.6-1.1.src.rpm</filename>
        </package>
        <package name="liburing-debugsource" epoch="0" version="2.6" release="1.1" arch="x86_64" src="x86_64/liburing-debugsource-2.6-1.1.x86_64.rpm">
          <filename>liburing-debugsource-2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="liburing2" epoch="0" version="2.6" release="1.1" arch="x86_64" src="x86_64/liburing2-2.6-1.1.x86_64.rpm">
          <filename>liburing2-2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="liburing2-debuginfo" epoch="0" version="2.6" release="1.1" arch="x86_64" src="x86_64/liburing2-debuginfo-2.6-1.1.x86_64.rpm">
          <filename>liburing2-debuginfo-2.6-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>188</id>
    <title>Security update for libxml2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1737124517" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234812" id="1234812" title="VUL-0: CVE-2024-40896: TRACKERBUG: libxml2: XXE vulnerability" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40896" id="CVE-2024-40896" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40896" type="cve" />
    </references>
    <description>This update for libxml2 fixes the following issues:

- CVE-2024-40896: Fixed XML external entity vulnerability (bsc#1234812)
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.11.6" release="4.1" arch="x86_64" src="x86_64/libxml2-2-2.11.6-4.1.x86_64.rpm">
          <filename>libxml2-2-2.11.6-4.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2-debuginfo" epoch="0" version="2.11.6" release="4.1" arch="x86_64" src="x86_64/libxml2-2-debuginfo-2.11.6-4.1.x86_64.rpm">
          <filename>libxml2-2-debuginfo-2.11.6-4.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.11.6" release="4.1" arch="src" src="src/libxml2-2.11.6-4.1.src.rpm">
          <filename>libxml2-2.11.6-4.1.src.rpm</filename>
        </package>
        <package name="libxml2-debugsource" epoch="0" version="2.11.6" release="4.1" arch="x86_64" src="x86_64/libxml2-debugsource-2.11.6-4.1.x86_64.rpm">
          <filename>libxml2-debugsource-2.11.6-4.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.11.6" release="4.1" arch="x86_64" src="x86_64/libxml2-tools-2.11.6-4.1.x86_64.rpm">
          <filename>libxml2-tools-2.11.6-4.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-tools-debuginfo" epoch="0" version="2.11.6" release="4.1" arch="x86_64" src="x86_64/libxml2-tools-debuginfo-2.11.6-4.1.x86_64.rpm">
          <filename>libxml2-tools-debuginfo-2.11.6-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>184</id>
    <title>Security update for python-Jinja2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1736774269" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234808" id="1234808" title="VUL-0: CVE-2024-56201: python-Jinja2: sandbox breakout through malicious content and filename of a template" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234809" id="1234809" title="VUL-0: CVE-2024-56326: python-Jinja2: sandbox breakout through indirect reference to format method" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56201" id="CVE-2024-56201" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56201" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56326" id="CVE-2024-56326" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56326" type="cve" />
    </references>
    <description>This update for python-Jinja2 fixes the following issues:

- CVE-2024-56201: Fixed sandbox breakout through malicious content and filename of a template (bsc#1234808)
- CVE-2024-56326: Fixed sandbox breakout through indirect reference to format method (bsc#1234809)
</description>
    <pkglist>
      <collection>
        <package name="python-Jinja2" epoch="0" version="3.1.2" release="7.1" arch="src" src="src/python-Jinja2-3.1.2-7.1.src.rpm">
          <filename>python-Jinja2-3.1.2-7.1.src.rpm</filename>
        </package>
        <package name="python311-Jinja2" epoch="0" version="3.1.2" release="7.1" arch="x86_64" src="x86_64/python311-Jinja2-3.1.2-7.1.x86_64.rpm">
          <filename>python311-Jinja2-3.1.2-7.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>185</id>
    <title>Security update for dnsmasq</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1736774205" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214884" id="1214884" title="Migration from SLE Micro 5.4 -&gt; ALP: file conflict between libslp1 and openslp" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219823" id="1219823" title="VUL-0: CVE-2023-50387 : unbound, pdns, bind, dnsmasq: Denial Of Service while trying to validate specially crafted DNSSEC responses" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219826" id="1219826" title="VUL-0: CVE-2023-50868: unbound, bind, pdns, dnsmasq: Denial Of Service while trying to validate specially crafted DNSSEC responses" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28450" id="CVE-2023-28450" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28450" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387" id="CVE-2023-50387" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50387" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868" id="CVE-2023-50868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50868" type="cve" />
    </references>
    <description>This update for dnsmasq fixes the following issues:

- Update to 2.90:

  * CVE-2023-50387, CVE-2023-50868: Fixed a Denial Of Service while trying
    to validate specially crafted DNSSEC responses (bsc#1219823, bsc#1219826).
  * Fix reversion in --rev-server introduced in 2.88 which caused
    breakage if the prefix length is not exactly divisible by 8
    (IPv4) or 4 (IPv6).
  * Fix possible SEGV when there server(s) for a particular domain
    are configured, but no server which is not qualified for a
    particular domain.
  * Set the default maximum DNS UDP packet sice to 1232.
  * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better
    control over which interfaces are providing DHCP service.
  * Fix issue with stale caching
  * Add configurable caching for arbitrary RR-types.
  * Add --filter-rr option, to filter arbitrary RR-types.

- SLP got dropped, remove config (bsc#1214884)
</description>
    <pkglist>
      <collection>
        <package name="dnsmasq" epoch="0" version="2.90" release="1.1" arch="src" src="src/dnsmasq-2.90-1.1.src.rpm">
          <filename>dnsmasq-2.90-1.1.src.rpm</filename>
        </package>
        <package name="dnsmasq" epoch="0" version="2.90" release="1.1" arch="x86_64" src="x86_64/dnsmasq-2.90-1.1.x86_64.rpm">
          <filename>dnsmasq-2.90-1.1.x86_64.rpm</filename>
        </package>
        <package name="dnsmasq-debuginfo" epoch="0" version="2.90" release="1.1" arch="x86_64" src="x86_64/dnsmasq-debuginfo-2.90-1.1.x86_64.rpm">
          <filename>dnsmasq-debuginfo-2.90-1.1.x86_64.rpm</filename>
        </package>
        <package name="dnsmasq-debugsource" epoch="0" version="2.90" release="1.1" arch="x86_64" src="x86_64/dnsmasq-debugsource-2.90-1.1.x86_64.rpm">
          <filename>dnsmasq-debugsource-2.90-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>186</id>
    <title>Security update for python-dnspython</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1736775458" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222693" id="1222693" title="VUL-0: CVE-2023-29483: python-dnspython: potential DoS via the Tudoor mechanism" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29483" id="CVE-2023-29483" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29483" type="cve" />
      <reference href="https://github.com/rthalley/dnspython#1044" id="rthalley/dnspython#1044" title="https://github.com/rthalley/dnspython#1044" type="github" />
    </references>
    <description>This update for python-dnspython fixes the following issues:

  - CVE-2023-29483: Fixed potential DoS via the Tudoor mechanism (bsc#1222693).

</description>
    <pkglist>
      <collection>
        <package name="python-dnspython" epoch="0" version="2.4.2" release="2.1" arch="src" src="src/python-dnspython-2.4.2-2.1.src.rpm">
          <filename>python-dnspython-2.4.2-2.1.src.rpm</filename>
        </package>
        <package name="python311-dnspython" epoch="0" version="2.4.2" release="2.1" arch="noarch" src="noarch/python311-dnspython-2.4.2-2.1.noarch.rpm">
          <filename>python311-dnspython-2.4.2-2.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>190</id>
    <title>Recommended update for iptables</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1737360193" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234996" id="1234996" title="ip6tables in SL micro 6.1 fails to create some rules" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235088" id="1235088" title="iptables, podman: ipv6 not mapping all ports to a pod" type="bugzilla" />
    </references>
    <description>This update for iptables fixes the following issues:

* Fixes checking existence of rules. Fixes issues with rule creation
 with podman/netavark. (bsc#1235088, bsc#1234996)

</description>
    <pkglist>
      <collection>
        <package name="iptables" epoch="0" version="1.8.9" release="4.1" arch="src" src="src/iptables-1.8.9-4.1.src.rpm">
          <filename>iptables-1.8.9-4.1.src.rpm</filename>
        </package>
        <package name="iptables" epoch="0" version="1.8.9" release="4.1" arch="x86_64" src="x86_64/iptables-1.8.9-4.1.x86_64.rpm">
          <filename>iptables-1.8.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="iptables-debuginfo" epoch="0" version="1.8.9" release="4.1" arch="x86_64" src="x86_64/iptables-debuginfo-1.8.9-4.1.x86_64.rpm">
          <filename>iptables-debuginfo-1.8.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="iptables-debugsource" epoch="0" version="1.8.9" release="4.1" arch="x86_64" src="x86_64/iptables-debugsource-1.8.9-4.1.x86_64.rpm">
          <filename>iptables-debugsource-1.8.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="libip4tc2" epoch="0" version="1.8.9" release="4.1" arch="x86_64" src="x86_64/libip4tc2-1.8.9-4.1.x86_64.rpm">
          <filename>libip4tc2-1.8.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="libip4tc2-debuginfo" epoch="0" version="1.8.9" release="4.1" arch="x86_64" src="x86_64/libip4tc2-debuginfo-1.8.9-4.1.x86_64.rpm">
          <filename>libip4tc2-debuginfo-1.8.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="libip6tc2" epoch="0" version="1.8.9" release="4.1" arch="x86_64" src="x86_64/libip6tc2-1.8.9-4.1.x86_64.rpm">
          <filename>libip6tc2-1.8.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="libip6tc2-debuginfo" epoch="0" version="1.8.9" release="4.1" arch="x86_64" src="x86_64/libip6tc2-debuginfo-1.8.9-4.1.x86_64.rpm">
          <filename>libip6tc2-debuginfo-1.8.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="libxtables12" epoch="0" version="1.8.9" release="4.1" arch="x86_64" src="x86_64/libxtables12-1.8.9-4.1.x86_64.rpm">
          <filename>libxtables12-1.8.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="libxtables12-debuginfo" epoch="0" version="1.8.9" release="4.1" arch="x86_64" src="x86_64/libxtables12-debuginfo-1.8.9-4.1.x86_64.rpm">
          <filename>libxtables12-debuginfo-1.8.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="xtables-plugins" epoch="0" version="1.8.9" release="4.1" arch="x86_64" src="x86_64/xtables-plugins-1.8.9-4.1.x86_64.rpm">
          <filename>xtables-plugins-1.8.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="xtables-plugins-debuginfo" epoch="0" version="1.8.9" release="4.1" arch="x86_64" src="x86_64/xtables-plugins-debuginfo-1.8.9-4.1.x86_64.rpm">
          <filename>xtables-plugins-debuginfo-1.8.9-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>220</id>
    <title>Security update for sssd</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1740747843" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223100" id="1223100" title="VUL-0: CVE-2023-3758: sssd: race condition during authorization leads to GPO policies functioning inconsistently" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3758" id="CVE-2023-3758" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3758" type="cve" />
    </references>
    <description>This update for sssd fixes the following issues:

- CVE-2023-3758: Fixed race condition during authorization leading to GPO policies functioning inconsistently (bsc#1223100).
</description>
    <pkglist>
      <collection>
        <package name="libsss_certmap0" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/libsss_certmap0-2.8.2-6.1.x86_64.rpm">
          <filename>libsss_certmap0-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_certmap0-debuginfo" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/libsss_certmap0-debuginfo-2.8.2-6.1.x86_64.rpm">
          <filename>libsss_certmap0-debuginfo-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/libsss_idmap0-2.8.2-6.1.x86_64.rpm">
          <filename>libsss_idmap0-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_idmap0-debuginfo" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/libsss_idmap0-debuginfo-2.8.2-6.1.x86_64.rpm">
          <filename>libsss_idmap0-debuginfo-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/libsss_nss_idmap0-2.8.2-6.1.x86_64.rpm">
          <filename>libsss_nss_idmap0-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0-debuginfo" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/libsss_nss_idmap0-debuginfo-2.8.2-6.1.x86_64.rpm">
          <filename>libsss_nss_idmap0-debuginfo-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.8.2" release="6.1" arch="src" src="src/sssd-2.8.2-6.1.src.rpm">
          <filename>sssd-2.8.2-6.1.src.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/sssd-2.8.2-6.1.x86_64.rpm">
          <filename>sssd-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ad" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/sssd-ad-2.8.2-6.1.x86_64.rpm">
          <filename>sssd-ad-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ad-debuginfo" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/sssd-ad-debuginfo-2.8.2-6.1.x86_64.rpm">
          <filename>sssd-ad-debuginfo-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-debuginfo" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/sssd-debuginfo-2.8.2-6.1.x86_64.rpm">
          <filename>sssd-debuginfo-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-debugsource" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/sssd-debugsource-2.8.2-6.1.x86_64.rpm">
          <filename>sssd-debugsource-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/sssd-krb5-2.8.2-6.1.x86_64.rpm">
          <filename>sssd-krb5-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/sssd-krb5-common-2.8.2-6.1.x86_64.rpm">
          <filename>sssd-krb5-common-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-common-debuginfo" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/sssd-krb5-common-debuginfo-2.8.2-6.1.x86_64.rpm">
          <filename>sssd-krb5-common-debuginfo-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-debuginfo" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/sssd-krb5-debuginfo-2.8.2-6.1.x86_64.rpm">
          <filename>sssd-krb5-debuginfo-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/sssd-ldap-2.8.2-6.1.x86_64.rpm">
          <filename>sssd-ldap-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ldap-debuginfo" epoch="0" version="2.8.2" release="6.1" arch="x86_64" src="x86_64/sssd-ldap-debuginfo-2.8.2-6.1.x86_64.rpm">
          <filename>sssd-ldap-debuginfo-2.8.2-6.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>221</id>
    <title>Security update for pam_u2f</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1741076910" />
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23013" id="CVE-2025-23013" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23013" type="cve" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233517" id="1233517" title="https://bugzilla.suse.com/show_bug.cgi?id=1233517" type="bugzilla" />
    </references>
    <description>This update for pam_u2f fixes the following issues:

- update to 1.3.2:
  * Relax authfile permission check to a warning instead of an error to prevent
    a breaking change locking existing users out of their systems. 

- update to 1.3.1:
  * CVE-2025-23013: Fixed problematic PAM_IGNORE return values in `pam_sm_authenticate()`(bsc#1233517).
  * Changed return value when nouserok is enabled and the user has no
  credentials, PAM_IGNORE is used instead of PAM_SUCCESS.
  * Hardened checks of authfile permissions.
  * Hardened checks for nouserok.
  * Improved debug messages.
  * Improved documentation. 

</description>
    <pkglist>
      <collection>
        <package name="pam_u2f" epoch="0" version="1.3.2" release="1.1" arch="src" src="src/pam_u2f-1.3.2-1.1.src.rpm">
          <filename>pam_u2f-1.3.2-1.1.src.rpm</filename>
        </package>
        <package name="pam_u2f" epoch="0" version="1.3.2" release="1.1" arch="x86_64" src="x86_64/pam_u2f-1.3.2-1.1.x86_64.rpm">
          <filename>pam_u2f-1.3.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="pam_u2f-debuginfo" epoch="0" version="1.3.2" release="1.1" arch="x86_64" src="x86_64/pam_u2f-debuginfo-1.3.2-1.1.x86_64.rpm">
          <filename>pam_u2f-debuginfo-1.3.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="pam_u2f-debugsource" epoch="0" version="1.3.2" release="1.1" arch="x86_64" src="x86_64/pam_u2f-debugsource-1.3.2-1.1.x86_64.rpm">
          <filename>pam_u2f-debugsource-1.3.2-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>222</id>
    <title>Security update for pcp</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1741190323" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1069468" id="1069468" title="Packages should no longer use /var/adm/fillup-templates" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217783" id="1217783" title="VUL-0: pcp: pmie_farm_check.service and pmlogger_farm_check.service use unsafe tmp directories" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217826" id="1217826" title="VUL-0: CVE-2023-6917: pcp: Local privilege escalation from pcp user to root in /usr/libexec/pcp/lib/pmproxy" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222121" id="1222121" title="VUL-0: CVE-2024-3019: pcp: exposure of the redis server backend allows remote command execution via pmproxy" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222815" id="1222815" title="Performance CoPilot 6 is not starting due to missing pmlogger_daily.timer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230551" id="1230551" title="VUL-0: CVE-2024-45769: pcp: `pmcd` heap corruption through metric pmstore operations" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230552" id="1230552" title="VUL-0: CVE-2024-45770: pcp: `pmpost` symlink attack allows escalating `pcp` to `root` user" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6917" id="CVE-2023-6917" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6917" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3019" id="CVE-2024-3019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3019" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45769" id="CVE-2024-45769" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45769" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45770" id="CVE-2024-45770" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45770" type="cve" />
    </references>
    <description>This update for pcp fixes the following issues:

- CVE-2024-45770: Fixed `pmpost` symlink attack allowing escalating `pcp` to `root` user (bsc#1230552).
- CVE-2024-45769: Fixed `pmcd` heap corruption through metric pmstore operations (bsc#1230551).
- CVE-2024-3019: Fixed exposure of the redis backend server allowing remote command execution via pmproxy (bsc#1222121).
- CVE-2023-6917: Fixed Local privilege escalation from pcp user to root in /usr/libexec/pcp/lib/pmproxy (bsc#1217826).

Other fixes:
- Updated to version 6.2.0


</description>
    <pkglist>
      <collection>
        <package name="libpcp3" epoch="0" version="6.2.0" release="1.1" arch="x86_64" src="x86_64/libpcp3-6.2.0-1.1.x86_64.rpm">
          <filename>libpcp3-6.2.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libpcp3-debuginfo" epoch="0" version="6.2.0" release="1.1" arch="x86_64" src="x86_64/libpcp3-debuginfo-6.2.0-1.1.x86_64.rpm">
          <filename>libpcp3-debuginfo-6.2.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libpcp_import1" epoch="0" version="6.2.0" release="1.1" arch="x86_64" src="x86_64/libpcp_import1-6.2.0-1.1.x86_64.rpm">
          <filename>libpcp_import1-6.2.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libpcp_import1-debuginfo" epoch="0" version="6.2.0" release="1.1" arch="x86_64" src="x86_64/libpcp_import1-debuginfo-6.2.0-1.1.x86_64.rpm">
          <filename>libpcp_import1-debuginfo-6.2.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="pcp" epoch="0" version="6.2.0" release="1.1" arch="src" src="src/pcp-6.2.0-1.1.src.rpm">
          <filename>pcp-6.2.0-1.1.src.rpm</filename>
        </package>
        <package name="pcp-conf" epoch="0" version="6.2.0" release="1.1" arch="noarch" src="noarch/pcp-conf-6.2.0-1.1.noarch.rpm">
          <filename>pcp-conf-6.2.0-1.1.noarch.rpm</filename>
        </package>
        <package name="pcp-debugsource" epoch="0" version="6.2.0" release="1.1" arch="x86_64" src="x86_64/pcp-debugsource-6.2.0-1.1.x86_64.rpm">
          <filename>pcp-debugsource-6.2.0-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>223</id>
    <title>Security update for gstreamer-plugins-base</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1741190853" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234415" id="1234415" title="VUL-0: CVE-2024-47538: gstreamer-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234450" id="1234450" title="VUL-0: CVE-2024-47835: gstreamer-plugins-base: NULL-pointer dereference in LRC subtitle parser" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234453" id="1234453" title="VUL-0: CVE-2024-47600: gstreamer-plugins-base: Out-of-bounds read in gst-discoverer-1.0 commandline tool" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234455" id="1234455" title="VUL-0: CVE-2024-47607: gstreamer-plugins-base: Stack buffer-overflow in Opus decoder" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234456" id="1234456" title="VUL-0: CVE-2024-47615: gstreamer-plugins-base: Out-of-bounds write in Ogg demuxer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234459" id="1234459" title="VUL-0: CVE-2024-47541: gstreamer-plugins-base: GStreamer has an out-of-bounds write in SSA subtitle parser" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234460" id="1234460" title="VUL-0: CVE-2024-47542: gstreamer-plugins-base: ID3v2 parser out-of-bounds read and NULL-pointer dereference" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47538" id="CVE-2024-47538" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47538" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47541" id="CVE-2024-47541" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47541" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47542" id="CVE-2024-47542" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47542" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47600" id="CVE-2024-47600" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47600" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47607" id="CVE-2024-47607" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47607" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47615" id="CVE-2024-47615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47615" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47835" id="CVE-2024-47835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47835" type="cve" />
    </references>
    <description>This update for gstreamer-plugins-base fixes the following issues:

- CVE-2024-47538: Fixed stack-buffer overflow in vorbis_handle_identification_packet (bsc#1234415).
- CVE-2024-47835: Fixed NULL-pointer dereference in LRC subtitle parser (bsc#1234450).
- CVE-2024-47600: Fixed Out-of-bounds read in gst-discoverer-1.0 commandline tool (bsc#1234453).
- CVE-2024-47607: Fixed Stack buffer-overflow in Opus decoder (bsc#1234455).
- CVE-2024-47615: Fixed Out-of-bounds write in Ogg demuxer (bsc#1234456).
- CVE-2024-47541: Fixed out-of-bounds write in SSA subtitle parser (bsc#1234459).
- CVE-2024-47542: Fixed ID3v2 parser out-of-bounds read and NULL-pointer dereference (bsc#1234460).
</description>
    <pkglist>
      <collection>
        <package name="gstreamer-plugins-base" epoch="0" version="1.22.9" release="2.1" arch="src" src="src/gstreamer-plugins-base-1.22.9-2.1.src.rpm">
          <filename>gstreamer-plugins-base-1.22.9-2.1.src.rpm</filename>
        </package>
        <package name="gstreamer-plugins-base" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/gstreamer-plugins-base-1.22.9-2.1.x86_64.rpm">
          <filename>gstreamer-plugins-base-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="gstreamer-plugins-base-debuginfo" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/gstreamer-plugins-base-debuginfo-1.22.9-2.1.x86_64.rpm">
          <filename>gstreamer-plugins-base-debuginfo-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="gstreamer-plugins-base-debugsource" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/gstreamer-plugins-base-debugsource-1.22.9-2.1.x86_64.rpm">
          <filename>gstreamer-plugins-base-debugsource-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstallocators-1_0-0" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstallocators-1_0-0-1.22.9-2.1.x86_64.rpm">
          <filename>libgstallocators-1_0-0-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstallocators-1_0-0-debuginfo" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstallocators-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm">
          <filename>libgstallocators-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstapp-1_0-0" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstapp-1_0-0-1.22.9-2.1.x86_64.rpm">
          <filename>libgstapp-1_0-0-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstapp-1_0-0-debuginfo" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstapp-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm">
          <filename>libgstapp-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstaudio-1_0-0" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstaudio-1_0-0-1.22.9-2.1.x86_64.rpm">
          <filename>libgstaudio-1_0-0-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstaudio-1_0-0-debuginfo" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstaudio-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm">
          <filename>libgstaudio-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstgl-1_0-0" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstgl-1_0-0-1.22.9-2.1.x86_64.rpm">
          <filename>libgstgl-1_0-0-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstgl-1_0-0-debuginfo" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstgl-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm">
          <filename>libgstgl-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstpbutils-1_0-0" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstpbutils-1_0-0-1.22.9-2.1.x86_64.rpm">
          <filename>libgstpbutils-1_0-0-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstpbutils-1_0-0-debuginfo" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstpbutils-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm">
          <filename>libgstpbutils-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstriff-1_0-0" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstriff-1_0-0-1.22.9-2.1.x86_64.rpm">
          <filename>libgstriff-1_0-0-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstriff-1_0-0-debuginfo" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstriff-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm">
          <filename>libgstriff-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgsttag-1_0-0" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgsttag-1_0-0-1.22.9-2.1.x86_64.rpm">
          <filename>libgsttag-1_0-0-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgsttag-1_0-0-debuginfo" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgsttag-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm">
          <filename>libgsttag-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstvideo-1_0-0" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstvideo-1_0-0-1.22.9-2.1.x86_64.rpm">
          <filename>libgstvideo-1_0-0-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstvideo-1_0-0-debuginfo" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstvideo-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm">
          <filename>libgstvideo-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>210</id>
    <title>Security update for cloud-regionsrv-client</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1739224090" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222985" id="1222985" title="AUDIT-0: cloud-regionsrv-client: registry support required setuid cloudguestregistryauth script" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227308" id="1227308" title="cloud-regionsrv-client release to support sidecar registry" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229137" id="1229137" title="[Build 20240813-1] docker.service fails to start in Public Cloud providers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229472" id="1229472" title="&quot;zypper migration&quot; from 15sp3 fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230615" id="1230615" title="/etc/sudoers.d/cloudguestregistryauth has incorrect permission 0644" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232770" id="1232770" title="LTSS registration does not work" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233333" id="1233333" title="[cloud-regionsrv-client-10.3.4-150300.13.9.1.noarch] Registration will create /etc/containers/registries.conf" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234050" id="1234050" title="BYOS SUMA instance can not activate all its repos with a valid reg code" type="bugzilla" />
    </references>
    <description>This update for cloud-regionsrv-client contains the following fixes:

- Update to 10.3.11 (bsc#1234050)
  + Send registration code for the extensions, not only base product

- Update to 10.3.9: (bsc#1234050)
  + Send registration code for the extensions, not only base product

- Update to 10.3.8: (bsc#1233333)
  + Fix the package requirements for cloud-regionsrv-client
  + Follow changes to suseconnect error reporting from stdout to stderr

- Update to 10.3.7: (bsc#1232770)
  + Fix the product triplet for LTSS, it is always SLES-LTSS, not
    $BASEPRODUCT-LTSS

- Update to 10.3.6: (jsc#PCT-471, bsc#1230615)
  + Fix sudo setup
    ~ permissions cloudguestregistryauth
    ~ directory ownership /etc/sudoers.d
  + spec file
    ~ Remove traces of registry related entries on SLE 12
  + Forward port
    ~ fix for sles12 disable registry
    ~ fix for sles12 no trans_update
  + Deregister non free extensions at registercloudguest --clean
  + Fix registry cleanup at registercloudguest --clean, don't remove files
  + Prevent duplicate search entries in registry setup
- Update EC2 plugin to 1.0.5
  + Switch to using the region endpoint from IMDS to determine the region
    instead of deriving the data from the availability zone

- Update to 10.3.5:
  + Update spec file to build in all code streams and have proper dependencies.

- Update to 10.3.4:
  + Modify the message when network access over a specific IP version does
    not work. This is an informational message and should not look like
    an error
  + Inform the user that LTSS registration takes a little longer
  + fix for sles12 no transactional update:
    + SLE 12 family has no products with transactional-update we do not
      need to look for this condition
- From 10.3.3: (bsc#1229472)
  + Handle changes in process structure to properly identify the running
    zypper parent process and only check for 1 PID
- From 10.3.2:
  + Remove rgnsrv-clnt-fix-docker-setup patch included upstream
- From 10.3.1: (jsc#PCT-400)
  + Add support for LTSS registration
  + Add fix for sles12 disable registry issue:
    ~ No container support in SLE 12

- Add fix for docker setup: (bsc#1229137)
  + The entry for the update infrastructure registry mirror was written
    incorrectly causing docker daemon startup to fail.

- Update to version 10.3.0: (bsc#1227308, bsc#1222985)
  + Add support for sidecar registry
    Podman and rootless Docker support to set up the necessary 
    configuration for the container engines to run as defined
  + Add running command as root through sudoers file
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.3.11" release="3.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.3.11-3.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.3.11-3.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.3.11" release="3.1" arch="src" src="src/cloud-regionsrv-client-10.3.11-3.1.src.rpm">
          <filename>cloud-regionsrv-client-10.3.11-3.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-addon-azure" epoch="0" version="1.0.5" release="3.1" arch="noarch" src="noarch/cloud-regionsrv-client-addon-azure-1.0.5-3.1.noarch.rpm">
          <filename>cloud-regionsrv-client-addon-azure-1.0.5-3.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="3.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-3.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-3.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="3.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-3.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-3.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.5" release="3.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.5-3.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.5-3.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="3.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-3.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-3.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>203</id>
    <title>Security update for rsync</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1738659556" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234100" id="1234100" title="VUL-0: CVE-2024-12084: rsync: Heap Buffer Overflow in Checksum Parsing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234101" id="1234101" title="VUL-0: CVE-2024-12085: rsync: Info Leak via uninitialized Stack contents defeats ASLR" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234102" id="1234102" title="VUL-0: CVE-2024-12086: rsync: server leaks arbitrary client files" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234103" id="1234103" title="VUL-0: CVE-2024-12087: rsync: server can make client write files outside of destination directory using symbolic links" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234104" id="1234104" title="VUL-0: CVE-2024-12088: rsync: --safe-links bypass" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235475" id="1235475" title="VUL-0: CVE-2024-12747: rsync: Race Condition in rsync Handling Symbolic Links" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12084" id="CVE-2024-12084" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12084" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12085" id="CVE-2024-12085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12085" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12086" id="CVE-2024-12086" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12086" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12087" id="CVE-2024-12087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12087" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12088" id="CVE-2024-12088" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12088" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12747" id="CVE-2024-12747" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12747" type="cve" />
    </references>
    <description>This update for rsync fixes the following issues:

- CVE-2024-12084: Fixed Heap Buffer Overflow in Checksum Parsing (bsc#1234100).
- CVE-2024-12085: Fixed Info Leak via uninitialized Stack contents defeating ASLR (bsc#1234101).
- CVE-2024-12086: Fixed server leaking arbitrary client files (bsc#1234102).
- CVE-2024-12087: Fixed server use of symbolic links to  make client write files outside of destination directory (bsc#1234103).
- CVE-2024-12088: Fixed --safe-links bypass (bsc#1234104).
- CVE-2024-12747: Fixed Race Condition in rsync Handling Symbolic Links (bsc#1235475).
</description>
    <pkglist>
      <collection>
        <package name="rsync" epoch="0" version="3.2.7" release="4.1" arch="src" src="src/rsync-3.2.7-4.1.src.rpm">
          <filename>rsync-3.2.7-4.1.src.rpm</filename>
        </package>
        <package name="rsync" epoch="0" version="3.2.7" release="4.1" arch="x86_64" src="x86_64/rsync-3.2.7-4.1.x86_64.rpm">
          <filename>rsync-3.2.7-4.1.x86_64.rpm</filename>
        </package>
        <package name="rsync-debuginfo" epoch="0" version="3.2.7" release="4.1" arch="x86_64" src="x86_64/rsync-debuginfo-3.2.7-4.1.x86_64.rpm">
          <filename>rsync-debuginfo-3.2.7-4.1.x86_64.rpm</filename>
        </package>
        <package name="rsync-debugsource" epoch="0" version="3.2.7" release="4.1" arch="x86_64" src="x86_64/rsync-debugsource-3.2.7-4.1.x86_64.rpm">
          <filename>rsync-debugsource-3.2.7-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>224</id>
    <title>Security update for glibc</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1741192287" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233699" id="1233699" title="nssswitch change introduced through bug 1230638 unsuitable for containers [ref:_00D1igLOd._500TrNhLC6:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234665" id="1234665" title="Request to backport glibc patch for prctl bug on ppc64le" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236282" id="1236282" title="VUL-0: CVE-2025-0395: glibc: buffer overflow in the assert() function" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0395" id="CVE-2025-0395" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0395" type="cve" />
    </references>
    <description>This update for glibc fixes the following issues:
  
- CVE-2025-0395: Fixed buffer overflow in the assert() function (bsc#1236282).

Other fixes:
- Fix underallocation of abort_msg_s struct
- Correctly determine livepatching support
- Remove nss-systemd from default nsswitch.conf (bsc#1233699)

</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.38" release="8.1" arch="src" src="src/glibc-2.38-8.1.src.rpm">
          <filename>glibc-2.38-8.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.38" release="8.1" arch="x86_64" src="x86_64/glibc-2.38-8.1.x86_64.rpm">
          <filename>glibc-2.38-8.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-debuginfo" epoch="0" version="2.38" release="8.1" arch="x86_64" src="x86_64/glibc-debuginfo-2.38-8.1.x86_64.rpm">
          <filename>glibc-debuginfo-2.38-8.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-debugsource" epoch="0" version="2.38" release="8.1" arch="x86_64" src="x86_64/glibc-debugsource-2.38-8.1.x86_64.rpm">
          <filename>glibc-debugsource-2.38-8.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.38" release="8.1" arch="x86_64" src="x86_64/glibc-devel-2.38-8.1.x86_64.rpm">
          <filename>glibc-devel-2.38-8.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel-debuginfo" epoch="0" version="2.38" release="8.1" arch="x86_64" src="x86_64/glibc-devel-debuginfo-2.38-8.1.x86_64.rpm">
          <filename>glibc-devel-debuginfo-2.38-8.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.38" release="8.1" arch="x86_64" src="x86_64/glibc-locale-2.38-8.1.x86_64.rpm">
          <filename>glibc-locale-2.38-8.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.38" release="8.1" arch="x86_64" src="x86_64/glibc-locale-base-2.38-8.1.x86_64.rpm">
          <filename>glibc-locale-base-2.38-8.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base-debuginfo" epoch="0" version="2.38" release="8.1" arch="x86_64" src="x86_64/glibc-locale-base-debuginfo-2.38-8.1.x86_64.rpm">
          <filename>glibc-locale-base-debuginfo-2.38-8.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>227</id>
    <title>Recommended update for strace</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1741614034" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228216" id="1228216" title="strace: licensed under LGPL-2.1-or-later instead of BSD-3-Clause" type="bugzilla" />
    </references>
    <description>This update for strace fixes the following issues:

- Change the license to the correct LGPL-2.1-or-later (bsc#1228216).
</description>
    <pkglist>
      <collection>
        <package name="strace" epoch="0" version="6.7" release="2.1" arch="src" src="src/strace-6.7-2.1.src.rpm">
          <filename>strace-6.7-2.1.src.rpm</filename>
        </package>
        <package name="strace" epoch="0" version="6.7" release="2.1" arch="x86_64" src="x86_64/strace-6.7-2.1.x86_64.rpm">
          <filename>strace-6.7-2.1.x86_64.rpm</filename>
        </package>
        <package name="strace-debuginfo" epoch="0" version="6.7" release="2.1" arch="x86_64" src="x86_64/strace-debuginfo-6.7-2.1.x86_64.rpm">
          <filename>strace-debuginfo-6.7-2.1.x86_64.rpm</filename>
        </package>
        <package name="strace-debugsource" epoch="0" version="6.7" release="2.1" arch="x86_64" src="x86_64/strace-debugsource-6.7-2.1.x86_64.rpm">
          <filename>strace-debugsource-6.7-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>271</id>
    <title>Recommended update for openscap</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1743684729" />
    <references>
      <reference href="https://jira.suse.com/browse/SMO-388" id="SMO-388" title="https://jira.suse.com/browse/SMO-388" type="jira" />
    </references>
    <description>This update for openscap fixes the following issues:

This update ships openscap utilities to SL Miro 6.0.
</description>
    <pkglist>
      <collection>
        <package name="libltdl7" epoch="0" version="2.4.7" release="3.1" arch="x86_64" src="x86_64/libltdl7-2.4.7-3.1.x86_64.rpm">
          <filename>libltdl7-2.4.7-3.1.x86_64.rpm</filename>
        </package>
        <package name="libltdl7-debuginfo" epoch="0" version="2.4.7" release="3.1" arch="x86_64" src="x86_64/libltdl7-debuginfo-2.4.7-3.1.x86_64.rpm">
          <filename>libltdl7-debuginfo-2.4.7-3.1.x86_64.rpm</filename>
        </package>
        <package name="libtool" epoch="0" version="2.4.7" release="3.1" arch="src" src="src/libtool-2.4.7-3.1.src.rpm">
          <filename>libtool-2.4.7-3.1.src.rpm</filename>
        </package>
        <package name="libtool-debugsource" epoch="0" version="2.4.7" release="3.1" arch="x86_64" src="x86_64/libtool-debugsource-2.4.7-3.1.x86_64.rpm">
          <filename>libtool-debugsource-2.4.7-3.1.x86_64.rpm</filename>
        </package>
        <package name="libxmlsec1-1" epoch="0" version="1.2.41" release="1.1" arch="x86_64" src="x86_64/libxmlsec1-1-1.2.41-1.1.x86_64.rpm">
          <filename>libxmlsec1-1-1.2.41-1.1.x86_64.rpm</filename>
        </package>
        <package name="libxmlsec1-1-debuginfo" epoch="0" version="1.2.41" release="1.1" arch="x86_64" src="x86_64/libxmlsec1-1-debuginfo-1.2.41-1.1.x86_64.rpm">
          <filename>libxmlsec1-1-debuginfo-1.2.41-1.1.x86_64.rpm</filename>
        </package>
        <package name="libxmlsec1-openssl1" epoch="0" version="1.2.41" release="1.1" arch="x86_64" src="x86_64/libxmlsec1-openssl1-1.2.41-1.1.x86_64.rpm">
          <filename>libxmlsec1-openssl1-1.2.41-1.1.x86_64.rpm</filename>
        </package>
        <package name="libxmlsec1-openssl1-debuginfo" epoch="0" version="1.2.41" release="1.1" arch="x86_64" src="x86_64/libxmlsec1-openssl1-debuginfo-1.2.41-1.1.x86_64.rpm">
          <filename>libxmlsec1-openssl1-debuginfo-1.2.41-1.1.x86_64.rpm</filename>
        </package>
        <package name="xmlsec1" epoch="0" version="1.2.41" release="1.1" arch="src" src="src/xmlsec1-1.2.41-1.1.src.rpm">
          <filename>xmlsec1-1.2.41-1.1.src.rpm</filename>
        </package>
        <package name="xmlsec1-debugsource" epoch="0" version="1.2.41" release="1.1" arch="x86_64" src="x86_64/xmlsec1-debugsource-1.2.41-1.1.x86_64.rpm">
          <filename>xmlsec1-debugsource-1.2.41-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>214</id>
    <title>Recommended update for python-PyJWT</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1739449743" />
    <references>
      <reference href="https://github.com/jpadilla/pyjwt#802" id="jpadilla/pyjwt#802" title="https://github.com/jpadilla/pyjwt#802" type="github" />
    </references>
    <description>This update for python-PyJWT fixes the following issues:


Update to version 2.9.0

  * Allow JWT issuer claim validation to accept a list of
    strings too by @mattpollak in #913
  * Fix unnecessary string concatenation by @sirosen in #904
  * Fix docs for ``jwt.decode_complete`` to include ``strict_aud``
    option by @woodruffw in #923
  * Fix docs step by @jpadilla in #950
  * Fix: Remove an unused variable from example code block
    by @kenkoooo in #958
  * Add support for Python 3.12 by @hugovk in #910
  * Improve performance of ``is_ssh_key`` + add unit test by @bdraco in #940
  * Allow ``jwt.decode()`` to accept a PyJWK object by @luhn in #886
  * Make ``algorithm_name`` attribute available on PyJWK by @luhn in #886
  * Raise ``InvalidKeyError`` on invalid PEM keys to be compatible
    with cryptography 42.x.x by @CollinEMac in #952
  * Raise an exception when required cryptography dependency
    is missing by @tobloef in #963

</description>
    <pkglist>
      <collection>
        <package name="python-PyJWT" epoch="0" version="2.9.0" release="1.1" arch="src" src="src/python-PyJWT-2.9.0-1.1.src.rpm">
          <filename>python-PyJWT-2.9.0-1.1.src.rpm</filename>
        </package>
        <package name="python311-PyJWT" epoch="0" version="2.9.0" release="1.1" arch="noarch" src="noarch/python311-PyJWT-2.9.0-1.1.noarch.rpm">
          <filename>python311-PyJWT-2.9.0-1.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>211</id>
    <title>Security update for SUSE Manager Client Tools</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1739436008" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228182" id="1228182" title="Salt minions are not able to reconnect to the master in case of master's IP address change" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228690" id="1228690" title="After converting CentOS to Liberty, a post conversion patch applied via the webUI fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229079" id="1229079" title="mgr_ssl_cert_setup authorityKeyIdentifier parse problem" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229104" id="1229104" title="Confidential Compute Attestation: mgradm install is not pulling server-attestation image" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231497" id="1231497" title="VUL-0: CVE-2024-22037: SUMA: Database password leaked by systemd uyuni-server-attestation service" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231568" id="1231568" title="Redacting JSESSIONID and pxt-session-cookie from the installation log" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231618" id="1231618" title="salt bundle is missing the dbus module resulting in dependent modules like snapper not working" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231759" id="1231759" title="SUMA 5: searching for patches using bugzilla ids does not work" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232575" id="1232575" title="Migration from 4.3 results in container with services disabled and stopped" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232769" id="1232769" title="Migration 4.3 to 5.0.2 - rsync error: some files/attrs were not transferred" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232817" id="1232817" title="Migration 4.3 to 5.0.2 - PSQLException: FATAL: no pg_hba.conf entry for host" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233202" id="1233202" title="Registry parameter no longer available in mgrpxy" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233279" id="1233279" title="mgradm upgrade podman sometimes fails with `# Run 'systemctl daemon-reload' to reload units.`" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233630" id="1233630" title="L3: mgradm upgrade podman fails with Unable to get product info from update server" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233660" id="1233660" title="Running migration mutiple times does not cleanup / delete things on the target that have been deleted on the source" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233667" id="1233667" title="SELinux policy on Oracle 7.9 server is blocking venv-salt-minion from starting" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234123" id="1234123" title="mgradm upgrade podman list fails to authenticate on registry.suse.com" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22037" id="CVE-2024-22037" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22037" type="cve" />
      <reference href="https://jira.suse.com/browse/MSQA-914" id="MSQA-914" title="https://jira.suse.com/browse/MSQA-914" type="jira" />
    </references>
    <description>This update fixes the following issues:

salt:

- Revert setting SELinux context for minion service (bsc#1233667)
- Removed System V init support
- Fix the condition of alternatives for Tumbleweed and Leap 16
- Build all python bindings for all flavors
- Make minion reconnecting on changing master IP (bsc#1228182)
- Handle logger exception when flushing already closed file
- Include passlib as a recommended dependency
- Make Salt Bundle more tolerant to long running jobs (bsc#1228690)

uyuni-tools was updated from version 0.1.23-0 to 0.1.27-0:

- Security issues fixed:
  * CVE-2024-22037: Use podman secret to store the database credentials (bsc#1231497)
- Other changes and bugs fixed:
  * Version 0.1.27-0
    + Bump the default image tag to 5.0.3
    + IsInstalled function fix
    + Run systemctl daemon-reload after changing the container image config (bsc#1233279)
    + Coco-replicas-upgrade
    + Persist search server indexes (bsc#1231759)
    + Sync deletes files during migration (bsc#1233660)
    + Ignore coco and hub images when applying PTF if they are not ailable (bsc#1229079)
    + Add --registry back to mgrpxy (bsc#1233202)
    + Only add java.hostname on migrated server if not present
    + Consider the configuration file to detect the coco or hub api images should be pulled (bsc#1229104)
    + Only raise an error if cloudguestregistryauth fails for PAYG (bsc#1233630)
    + Add registry.suse.com login to mgradm upgrade podman list (bsc#1234123)
  * Version 0.1.26-0
    + Ignore all zypper caches during migration (bsc#1232769)
    + Use the uyuni network for all podman containers (bsc#1232817)
  * Version 0.1.25-0
    + Don't migrate enabled systemd services, recreate them (bsc#1232575)
  * Version 0.1.24-0
    + Redact JSESSIONID and pxt-session-cookie values from logs and
      console output (bsc#1231568)

venv-salt-minion:
    
- Included D-Bus python module for SUSE distros (bsc#1231618)
- Reverted setting SELinux context for minion service (bsc#1233667)
- Make minion reconnecting on changing master IP (bsc#1228182)
- Fixed post_start_cleanup.sh shebang to work on all systems
- Handle logger exception when flushing already closed file
- Made Salt Bundle more tolerant to long running jobs (bsc#1228690)
- Modified:
  * include-rpm
  * filter-requires.sh
</description>
    <pkglist>
      <collection>
        <package name="salt" epoch="0" version="3006.0" release="9.1" arch="src" src="src/salt-3006.0-9.1.src.rpm">
          <filename>salt-3006.0-9.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="9.1" arch="x86_64" src="x86_64/salt-3006.0-9.1.x86_64.rpm">
          <filename>salt-3006.0-9.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-master" epoch="0" version="3006.0" release="9.1" arch="x86_64" src="x86_64/salt-master-3006.0-9.1.x86_64.rpm">
          <filename>salt-master-3006.0-9.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="9.1" arch="x86_64" src="x86_64/salt-minion-3006.0-9.1.x86_64.rpm">
          <filename>salt-minion-3006.0-9.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="9.1" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-9.1.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-9.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>230</id>
    <title>Recommended update for systemd</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1741686962" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220338" id="1220338" title="SystemdOptions needs to be removed or measured for TPM based unlocking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229228" id="1229228" title="[Build 9.15] agetty fails to open credentials directory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231048" id="1231048" title="systemd-experimental: error message about homed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232227" id="1232227" title="[HPS Bug] SLES15SP6 QU1 displays diagnostic 'invalid value for WatchdogSec: &quot;0&quot;' during kexec reboot" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232844" id="1232844" title="after upgrading to SLES 15 SP6, devices fail to mount due to udev." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233752" id="1233752" title="[Build E.84.3] openQA test fails in trup_smoke -- TPM failure in 6.12" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234015" id="1234015" title="ID_NET_NAME_PATH appended with 'np{digit}' in SLES 15 SP6 [ref:_00D1igLOd._500TrO7ch9:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234313" id="1234313" title="[Build E.84.3] openQA test fails in trup_smoke -- TPM failure in 6.12" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234765" id="1234765" title="systemd-network recommends development package" type="bugzilla" />
    </references>
    <description>This update for systemd fixes the following issues:

- Fixed agetty fails to open credentials directory (bsc#1229228)
- hwdb: comment out the entry for Logitech MX Keys for Mac
- test: answer 2nd mdadm --create question for compat with new version
- core/unit-serialize: fix serialization of markers
- locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
- core: fix assert when AddDependencyUnitFiles is called with invalid parameter
- Fix systemd-network recommending libidn2-devel (bsc#1234765)
- tpm2-util: Also retry unsealing after policy_pcr returns PCR_CHANGED (bsc#1233752 bsc#1234313)
- add a allow/denylist for reading sysfs attributes (bsc#1234015)
- udev: add new builtin net_driver
- udev-builtin-net_id: split-out pci_get_onboard_index() from dev_pci_onboard()
- udev-builtin-net_id: split-out get_pci_slot_specifiers()
- udev-builtin-net_id: introduce get_port_specifier() helper function
- udev-builtin-net_id: split out get_dev_port() and make its failure critical
- udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address()
- udev-builtin-net_id: return earlier when hotplug slot is not found
- udev-builtin-net_id: skip non-directory entry earlier
- udev-builtin-net_id: make names_xen() self-contained
- udev-builtin-net_id: use sd_device_get_sysnum() to get index of netdevsim
- udev-builtin-net_id: make names_netdevsim() self-contained
- udev-builtin-net_id: make names_platform() self-contained
- udev-builtin-net_id: make names_vio() self-contained
- udev-builtin-net_id: make names_ccw() self-contained
- udev-builtin-net_id: make dev_devicetree_onboard() self-contained
- udev-builtin-net_id: make names_mac() self-contained
- udev-builtin-net_id: split out get_ifname_prefix()
- udev-builtin-net_id: swap arguments for streq() and friends
- udev-builtin-net_id: drop unused value from NetNameType
- drop efifar SystemdOptions (bsc#1220338)
  Upstream deprecated it and plan to drop it in the future.
- pid1: make clear that $WATCHDOG_USEC is set for the shutdown binary, noone else (bsc#1232227)
- udev: skipping empty udev rules file while collecting the stats (bsc#1232844)
- Clean up some remnants from when homed was in the experimental sub-package (bsc#1231048)
- restore some legacy symlinks

  Given that SLE16 will be based on SLFO, we have no choice but to continue
  supporting these compat symlinks. This compatibility code is no longer
  maintained in the Git repository though, as we primarily backport upstream
  commits these days. Additionally, the compat code rarely changes and often
  causes conflicts when merged into recent versions of systemd.

</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/libsystemd0-254.23-1.1.x86_64.rpm">
          <filename>libsystemd0-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0-debuginfo" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/libsystemd0-debuginfo-254.23-1.1.x86_64.rpm">
          <filename>libsystemd0-debuginfo-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/libudev1-254.23-1.1.x86_64.rpm">
          <filename>libudev1-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1-debuginfo" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/libudev1-debuginfo-254.23-1.1.x86_64.rpm">
          <filename>libudev1-debuginfo-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="254.23" release="1.1" arch="src" src="src/systemd-254.23-1.1.src.rpm">
          <filename>systemd-254.23-1.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/systemd-254.23-1.1.x86_64.rpm">
          <filename>systemd-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/systemd-container-254.23-1.1.x86_64.rpm">
          <filename>systemd-container-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container-debuginfo" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/systemd-container-debuginfo-254.23-1.1.x86_64.rpm">
          <filename>systemd-container-debuginfo-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-coredump" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/systemd-coredump-254.23-1.1.x86_64.rpm">
          <filename>systemd-coredump-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-coredump-debuginfo" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/systemd-coredump-debuginfo-254.23-1.1.x86_64.rpm">
          <filename>systemd-coredump-debuginfo-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-debuginfo" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/systemd-debuginfo-254.23-1.1.x86_64.rpm">
          <filename>systemd-debuginfo-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-debugsource" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/systemd-debugsource-254.23-1.1.x86_64.rpm">
          <filename>systemd-debugsource-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-experimental" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/systemd-experimental-254.23-1.1.x86_64.rpm">
          <filename>systemd-experimental-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-experimental-debuginfo" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/systemd-experimental-debuginfo-254.23-1.1.x86_64.rpm">
          <filename>systemd-experimental-debuginfo-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/systemd-journal-remote-254.23-1.1.x86_64.rpm">
          <filename>systemd-journal-remote-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote-debuginfo" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/systemd-journal-remote-debuginfo-254.23-1.1.x86_64.rpm">
          <filename>systemd-journal-remote-debuginfo-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-portable" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/systemd-portable-254.23-1.1.x86_64.rpm">
          <filename>systemd-portable-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-portable-debuginfo" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/systemd-portable-debuginfo-254.23-1.1.x86_64.rpm">
          <filename>systemd-portable-debuginfo-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/udev-254.23-1.1.x86_64.rpm">
          <filename>udev-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev-debuginfo" epoch="0" version="254.23" release="1.1" arch="x86_64" src="x86_64/udev-debuginfo-254.23-1.1.x86_64.rpm">
          <filename>udev-debuginfo-254.23-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>229</id>
    <title>Recommended update for e2fsprogs</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1741613945" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223596" id="1223596" title="Unable to read/write to ext4 file. Error: &quot;unexpected EA_INODE flag&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230145" id="1230145" title="resize2fs: New size results in too many block group descriptors." type="bugzilla" />
    </references>
    <description>This update for e2fsprogs fixes the following issues:

  - resize2fs: Check number of group descriptors only if meta_bg is disabled (bsc#1230145)
  - EA Inode handling fixes
       * e2fsck: Add more checks for EA inode consistency (bsc#1223596)
       * e2fsck: Fix golden output of several tests (bsc#1223596)
</description>
    <pkglist>
      <collection>
        <package name="e2fsprogs" epoch="0" version="1.47.0" release="3.1" arch="src" src="src/e2fsprogs-1.47.0-3.1.src.rpm">
          <filename>e2fsprogs-1.47.0-3.1.src.rpm</filename>
        </package>
        <package name="e2fsprogs" epoch="0" version="1.47.0" release="3.1" arch="x86_64" src="x86_64/e2fsprogs-1.47.0-3.1.x86_64.rpm">
          <filename>e2fsprogs-1.47.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="e2fsprogs-debuginfo" epoch="0" version="1.47.0" release="3.1" arch="x86_64" src="x86_64/e2fsprogs-debuginfo-1.47.0-3.1.x86_64.rpm">
          <filename>e2fsprogs-debuginfo-1.47.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="e2fsprogs-debugsource" epoch="0" version="1.47.0" release="3.1" arch="x86_64" src="x86_64/e2fsprogs-debugsource-1.47.0-3.1.x86_64.rpm">
          <filename>e2fsprogs-debugsource-1.47.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libcom_err2" epoch="0" version="1.47.0" release="3.1" arch="x86_64" src="x86_64/libcom_err2-1.47.0-3.1.x86_64.rpm">
          <filename>libcom_err2-1.47.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libcom_err2-debuginfo" epoch="0" version="1.47.0" release="3.1" arch="x86_64" src="x86_64/libcom_err2-debuginfo-1.47.0-3.1.x86_64.rpm">
          <filename>libcom_err2-debuginfo-1.47.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libext2fs2" epoch="0" version="1.47.0" release="3.1" arch="x86_64" src="x86_64/libext2fs2-1.47.0-3.1.x86_64.rpm">
          <filename>libext2fs2-1.47.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="libext2fs2-debuginfo" epoch="0" version="1.47.0" release="3.1" arch="x86_64" src="x86_64/libext2fs2-debuginfo-1.47.0-3.1.x86_64.rpm">
          <filename>libext2fs2-debuginfo-1.47.0-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>239</id>
    <title>Security update for curl</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1741776416" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235151" id="1235151" title="curl mail sending via smtp starttls broke with 15sp6 (works with 15sp5)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236588" id="1236588" title="VUL-0: CVE-2025-0167: curl: netrc and default credential leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236590" id="1236590" title="VUL-0: CVE-2025-0725: curl: gzip integer overflow" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0167" id="CVE-2025-0167" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0167" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0725" id="CVE-2025-0725" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0725" type="cve" />
    </references>
    <description>This update for curl fixes the following issues:

Security issues fixed:

- CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590)
- CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)

Other issues fixed:

- Make sure the TLS handshake after a successful STARTTLS command
  is fully done before further sending/receiving on the connection.  (bsc#1235151)
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.6.0" release="6.1" arch="src" src="src/curl-8.6.0-6.1.src.rpm">
          <filename>curl-8.6.0-6.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.6.0" release="6.1" arch="x86_64" src="x86_64/curl-8.6.0-6.1.x86_64.rpm">
          <filename>curl-8.6.0-6.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debuginfo" epoch="0" version="8.6.0" release="6.1" arch="x86_64" src="x86_64/curl-debuginfo-8.6.0-6.1.x86_64.rpm">
          <filename>curl-debuginfo-8.6.0-6.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debugsource" epoch="0" version="8.6.0" release="6.1" arch="x86_64" src="x86_64/curl-debugsource-8.6.0-6.1.x86_64.rpm">
          <filename>curl-debugsource-8.6.0-6.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.6.0" release="6.1" arch="x86_64" src="x86_64/libcurl4-8.6.0-6.1.x86_64.rpm">
          <filename>libcurl4-8.6.0-6.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4-debuginfo" epoch="0" version="8.6.0" release="6.1" arch="x86_64" src="x86_64/libcurl4-debuginfo-8.6.0-6.1.x86_64.rpm">
          <filename>libcurl4-debuginfo-8.6.0-6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>241</id>
    <title>Recommended update for lshw</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1741859964" />
    <references>
      <reference href="https://jira.suse.com/browse/PED-9912" id="PED-9912" title="https://jira.suse.com/browse/PED-9912" type="jira" />
    </references>
    <description>This update for lshw fixes the following issues:

- lshw: package update (jsc#9912)
    * update changelog
    * update data files 
    * get rid of GTK deprecation warning
    * get rid of some snprintf warnings
    * add support for 100Gbit interfaces
</description>
    <pkglist>
      <collection>
        <package name="lshw" epoch="0" version="B.02.20" release="1.1" arch="src" src="src/lshw-B.02.20-1.1.src.rpm">
          <filename>lshw-B.02.20-1.1.src.rpm</filename>
        </package>
        <package name="lshw" epoch="0" version="B.02.20" release="1.1" arch="x86_64" src="x86_64/lshw-B.02.20-1.1.x86_64.rpm">
          <filename>lshw-B.02.20-1.1.x86_64.rpm</filename>
        </package>
        <package name="lshw-debuginfo" epoch="0" version="B.02.20" release="1.1" arch="x86_64" src="x86_64/lshw-debuginfo-B.02.20-1.1.x86_64.rpm">
          <filename>lshw-debuginfo-B.02.20-1.1.x86_64.rpm</filename>
        </package>
        <package name="lshw-debugsource" epoch="0" version="B.02.20" release="1.1" arch="x86_64" src="x86_64/lshw-debugsource-B.02.20-1.1.x86_64.rpm">
          <filename>lshw-debugsource-B.02.20-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>244</id>
    <title>Recommended update for findutils</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1741952980" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231472" id="1231472" title="find 4.8.0: Segmentation fault" type="bugzilla" />
    </references>
    <description>This update for findutils fixes the following issues:

- do not crash when file system loop was encountered (bsc#1231472)
- added patches
- modified patches
</description>
    <pkglist>
      <collection>
        <package name="findutils" epoch="0" version="4.9.0" release="4.1" arch="src" src="src/findutils-4.9.0-4.1.src.rpm">
          <filename>findutils-4.9.0-4.1.src.rpm</filename>
        </package>
        <package name="findutils" epoch="0" version="4.9.0" release="4.1" arch="x86_64" src="x86_64/findutils-4.9.0-4.1.x86_64.rpm">
          <filename>findutils-4.9.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="findutils-debuginfo" epoch="0" version="4.9.0" release="4.1" arch="x86_64" src="x86_64/findutils-debuginfo-4.9.0-4.1.x86_64.rpm">
          <filename>findutils-debuginfo-4.9.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="findutils-debugsource" epoch="0" version="4.9.0" release="4.1" arch="x86_64" src="x86_64/findutils-debugsource-4.9.0-4.1.x86_64.rpm">
          <filename>findutils-debugsource-4.9.0-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>251</id>
    <title>Security update for krb5</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1742381426" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236619" id="1236619" title="VUL-0: CVE-2025-24528: krb5: out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24528" id="CVE-2025-24528" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24528" type="cve" />
    </references>
    <description>This update for krb5 fixes the following issues:

- CVE-2025-24528: Prevent overflow when calculating ulog block size.
  An authenticated attacker can cause kadmind to write beyond the end
  of the mapped region for the iprop log file, likely causing a process
  crash (bsc#1236619).
</description>
    <pkglist>
      <collection>
        <package name="krb5" epoch="0" version="1.20.1" release="6.1" arch="src" src="src/krb5-1.20.1-6.1.src.rpm">
          <filename>krb5-1.20.1-6.1.src.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.20.1" release="6.1" arch="x86_64" src="x86_64/krb5-1.20.1-6.1.x86_64.rpm">
          <filename>krb5-1.20.1-6.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-debuginfo" epoch="0" version="1.20.1" release="6.1" arch="x86_64" src="x86_64/krb5-debuginfo-1.20.1-6.1.x86_64.rpm">
          <filename>krb5-debuginfo-1.20.1-6.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-debugsource" epoch="0" version="1.20.1" release="6.1" arch="x86_64" src="x86_64/krb5-debugsource-1.20.1-6.1.x86_64.rpm">
          <filename>krb5-debugsource-1.20.1-6.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>252</id>
    <title>Security update for orc</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1742380593" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228184" id="1228184" title="VUL-0: CVE-2024-40897: orc: Stack-based buffer overflow in the Orc compiler when formatting error messages for certain input files" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40897" id="CVE-2024-40897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40897" type="cve" />
    </references>
    <description>This update for orc fixes the following issues:

- CVE-2024-40897: Fixed a stack-based buffer overflow in the Orc compiler when formatting error messages for certain input files (bsc#1228184)
</description>
    <pkglist>
      <collection>
        <package name="liborc-0_4-0" epoch="0" version="0.4.34" release="3.1" arch="x86_64" src="x86_64/liborc-0_4-0-0.4.34-3.1.x86_64.rpm">
          <filename>liborc-0_4-0-0.4.34-3.1.x86_64.rpm</filename>
        </package>
        <package name="liborc-0_4-0-debuginfo" epoch="0" version="0.4.34" release="3.1" arch="x86_64" src="x86_64/liborc-0_4-0-debuginfo-0.4.34-3.1.x86_64.rpm">
          <filename>liborc-0_4-0-debuginfo-0.4.34-3.1.x86_64.rpm</filename>
        </package>
        <package name="orc" epoch="0" version="0.4.34" release="3.1" arch="src" src="src/orc-0.4.34-3.1.src.rpm">
          <filename>orc-0.4.34-3.1.src.rpm</filename>
        </package>
        <package name="orc-debugsource" epoch="0" version="0.4.34" release="3.1" arch="x86_64" src="x86_64/orc-debugsource-0.4.34-3.1.x86_64.rpm">
          <filename>orc-debugsource-0.4.34-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>243</id>
    <title>Recommended update for aardvark-dns, netavark</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1741941557" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224167" id="1224167" title="DNS requests timeout" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234660" id="1234660" title="L3: sssd can not be started properly due to network issues between the host and container" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236567" id="1236567" title="openQA test fails in podman_netavark for incident 37144" type="bugzilla" />
    </references>
    <description>This update for aardvark-dns, netavark fixes the following issues:

  - Update to version 1.12.2
</description>
    <pkglist>
      <collection>
        <package name="aardvark-dns" epoch="0" version="1.12.2" release="1.1" arch="src" src="src/aardvark-dns-1.12.2-1.1.src.rpm">
          <filename>aardvark-dns-1.12.2-1.1.src.rpm</filename>
        </package>
        <package name="aardvark-dns" epoch="0" version="1.12.2" release="1.1" arch="x86_64" src="x86_64/aardvark-dns-1.12.2-1.1.x86_64.rpm">
          <filename>aardvark-dns-1.12.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="netavark" epoch="0" version="1.12.2" release="1.1" arch="src" src="src/netavark-1.12.2-1.1.src.rpm">
          <filename>netavark-1.12.2-1.1.src.rpm</filename>
        </package>
        <package name="netavark" epoch="0" version="1.12.2" release="1.1" arch="x86_64" src="x86_64/netavark-1.12.2-1.1.x86_64.rpm">
          <filename>netavark-1.12.2-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>217</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1740489094" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220763" id="1220763" title="vim gets Segmentation fault after updating to version 9.1.0111-150500.20.9.1" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229238" id="1229238" title="VUL-0: CVE-2024-43374: vim: use-after-free in alist_add()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229685" id="1229685" title="VUL-0: CVE-2024-43790: vim: Out of bounds read when performing a search command" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229822" id="1229822" title="VUL-0: CVE-2024-43802: vim: heap-buffer-overflow in ins_typebuf()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230078" id="1230078" title="VUL-0: CVE-2024-45306: vim: heap-buffer-overflow in Vim" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231373" id="1231373" title="VUL-0: CVE-2024-47814: vim: use-after-free when closing buffers in Vim" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235695" id="1235695" title="VUL-0: CVE-2025-22134: vim: heap-buffer-overflow in Vim &lt; 9.1.1003" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236151" id="1236151" title="VUL-0: CVE-2025-24014: vim: segmentation fault in win_line() in Vim &lt; 9.1.1043" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237137" id="1237137" title="VUL-0: CVE-2025-1215: vim: manipulation of the argument --log leads to memory corruption" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43374" id="CVE-2024-43374" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43374" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43790" id="CVE-2024-43790" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43790" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43802" id="CVE-2024-43802" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43802" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45306" id="CVE-2024-45306" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45306" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47814" id="CVE-2024-47814" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47814" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1215" id="CVE-2025-1215" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1215" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22134" id="CVE-2025-22134" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22134" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24014" id="CVE-2025-24014" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24014" type="cve" />
    </references>
    <description>This update for vim fixes the following issues:

vim was updated to 9.1.1101:

- CVE-2024-43374: Fixed use-after-free in alist_add() (bsc#1229238)
- CVE-2024-43790: Fixed Out of bounds read when performing a search command (bsc#1229685)
- CVE-2024-43802: Fixed heap-buffer-overflow in ins_typebuf() (bsc#1229822)
- CVE-2024-45306: Fixed heap-buffer-overflow in Vim (bsc#1230078)
- CVE-2024-47814: Fixed use-after-free when closing buffers in Vim (bsc#1231373)
- CVE-2025-1215: Fixed manipulation of the argument --log leads to memory corruption (bsc#1237137)
- CVE-2025-22134: Fixed heap-buffer-overflow in Vim &lt; 9.1.1003 (bsc#1235695)
- CVE-2025-24014: Fixed segmentation fault in win_line() in Vim &lt; 9.1.1043 (bsc#1236151)

Update to 9.1.1101:

  * insexpand.c hard to read
  * tests: Test_log_nonexistent only works on Linux
  * Update base-syntax, improve variable matching
  * Vim9: import with extends may crash
  * leaking memory with completing multi lines
  * --log with non-existent path causes a crash
  * if_perl: Perl 5.38 adds new symbols causing link failure
  * tests: matchparen plugin test wrongly named
  * Vim9: problem finding implemented method in type hierarchy
  * runtime(qf): Update syntax file, match second delimiter
  * tests: output of test ...win32_ctrl_z depends on python version
  * tests: fix expected return code for python 3.13 on Windows
  * tests: timeout might be a bit too small
  * tests: test_terminwscroll_topline2 unreliable
  * tests: No check when tests are run under Github actions
  * tests: plugin tests are named inconsistently
  * Vim9: import with extends may crash
  * completion doesn't work with multi lines
  * filetype: cmmt files are not recognized
  * Unable to persistently ignore events in a window and its buffers
  * improve syntax highlighting
  * setreg() doesn't correctly handle mbyte chars in blockwise mode
  * unexpected DCS responses may cause out of bounds reads
  * has('bsd') is true for GNU/Hurd
  * filetype: Mill files are not recognized
  * GUI late startup leads to uninitialized scrollbars
  * Add support for lz4 to tar &amp; gzip plugin
  * Terminal ansi colors off by one after tgc reset
  * included syntax items do not understand contains=TOP
  * vim_strnchr() is strange and unnecessary
  * Vim9: len variable not used in compile_load()
  * runtime(vim): Update base-syntax, match :debuggreedy count prefix
  * Strange error when heredoc marker starts with "trim"
  * tests: test_compiler fails on Windows without Maven
  * 'diffopt' "linematch" cannot be used with {n} less than 10
  * args missing after failing to redefine a function
  * Cannot control cursor positioning of getchar()
  * preinsert text completions not deleted with &lt;C-W&gt;/&lt;C-U&gt;
  * getchar() can't distinguish between C-I and Tab
  * tests: Test_termwinscroll_topline2 fails on MacOS
  * heap-use-after-free and stack-use-after-scope with :14verbose
  * no digraph for "Approaches the limit"
  * not possible to use plural forms with gettext()
  * too many strlen() calls in userfunc.c
  * terminal: E315 when dragging the terminal with the mouse
  * runtime(openPlugin): fix unclosed parenthesis in GetWordUnderCursor()
  * runtime(doc): Tweak documentation style a bit
  * tests: test_glvs fails when unarchiver not available
  * Vim always enables 'termguicolors' in a terminal
  * completion: input text deleted with preinsert when adding leader
  * translation(sr): Missing Serbian translation for the tutor
  * Superfluous cleanup steps in test_ins_complete.vim
  * runtime(netrw): correct wrong version check
  * Vim doesn't highlight to be inserted text when completing
  * runtime(netrw): upstream snapshot of v176
  * runtime(dist/vim9): fix regressions in dist#vim9#Open
  * runtime(hyprlang): fix string recognition
  * make install fails because of a missing dependency
  * runtime(asm): add byte directives to syntax script
  * Vim doesn't work well with TERM=xterm-direct
  * runtime(filetype): commit 99181205c5f8284a3 breaks V lang detection
  * runtime: decouple Open and Launch commands and gx mapping from netrw
  * "nosort" enables fuzzy filtering even if "fuzzy" isn't in 'completeopt'
  * runtime(just): fix typo in syntax file
  * runtime(filetype): Improve Verilog detection by checking for modules definition
  * tests: off-by-one error in CheckCWD in test_debugger.vim
  * tests: no support for env variables when running Vim in terminal
  * too many strlen() calls in os_unix.c
  * insert-completed items are always sorted
  * crash after scrolling and pasting in silent Ex mode
  * Makefiles uses non-portable syntax
  * fuzzymatching doesn't prefer matching camelcase
  * filetype: N-Tripels and TriG files are not recognized
  * Vim9: Patch 9.1.1014 causes regressions
  * translation(sr): Update Serbian messages translation

Update to 9.1.1043:

  * [security]: segfault in win_line()
  * update helptags
  * filetype: just files are not recognized
  * Update base-syntax, match ternary and falsy operators
  * Vim9: out-of-bound access when echoing an enum
  * Vim9: imported type cannot be used as func return type
  * runtime(kconfig): updated ftplugin and syntax script
  * runtime(doc): rename last t_BG reference to t_RB
  * Vim9: comments are outdated
  * tests: test_channel.py fails with IPv6
  * runtime(vim): Update base-syntax, fix is/isnot operator matching
  * Vim9: confusing error when using abstract method via super
  * make install fails when using shadowdir
  * Vim9: memory leak with blob2str()
  * runtime(tex): add texEmphStyle to texMatchGroup in syntax script
  * runtime(netrw): upstream snapshot of v175
  * Vim9: compiling abstract method fails without return
  * runtime(c): add new constexpr keyword to syntax file (C23)
  * tests: shaderslang was removed from test_filetype erroneously
  * link error when FEAT_SPELL not defined
  * Coverity complains about insecure data handling
  * runtime(sh): update syntax script
  * runtime(c): Add missing syntax test files
  * filetype: setting bash filetype is backwards incompatible
  * runtime(c): Update syntax and ftplugin files
  * the installer can be improved
  * too many strlen() calls in screen.c
  * no sanitize check when running linematch
  * filetype: swc configuration files are not recognized
  * runtime(netrw): change netrw maintainer
  * wrong return type of blob2str()
  * blob2str/str2blob() do not support list of strings
  * runtime(doc): fix typo in usr_02.txt
  * Coverity complains about dereferencing NULL pointer
  * linematch option value not completed
  * string might be used without a trailing NUL
  * no way to get current selected item in a async context
  * filetype: fd ignore files are not recognized
  * v9.1.0743 causes regression with diff mode
  * runtime(doc): fix base64 encode/decode examples
  * Vim9: Patch 9.1.1013 causes a few problems
  * Not possible to convert string2blob and blob2string
  * Coverity complains about dereferencing NULL value
  * Vim9: variable not found in transitive import
  * runtime(colors): Update colorschemes, include new unokai colorscheme
  * runtime(lyrics): support milliseconds in syntax script
  * runtime(vim): Split Vim legacy and Vim9 script indent tests
  * Vim9: class interface inheritance not correctly working
  * popupmenu internal error with some abbr in completion item
  * filetype: VisualCode setting file not recognized
  * diff feature can be improved
  * filetype: various ignore are not recognized
  * tests: Load screendump files with "git vimdumps"
  * PmenuMatch completion highlight can be combined
  * completion text is highlighted even with no pattern found
  * tests: a few termdebug tests are flaky
  * [security]: heap-buffer-overflow with visual mode
  * runtime(doc): add package-&lt;name&gt; helptags for included packages
  * Vim9: unknown func error with interface declaring func var
  * runtime(filetype): don't detect string interpolation as angular
  * ComplMatchIns highlight hard to read on light background
  * runtime(vim): Update base-syntax, highlight literal string quote escape
  * runtime(editorconfig): set omnifunc to syntaxcomplete func
  * tests: ruby tests fail with Ruby 3.4
  * Vim9: leaking finished exception
  * runtime(tiasm):  use correct syntax name tiasm in syntax script
  * filetype: TI assembly files are not recognized
  * too many strlen() calls in drawscreen.c
  * runtime(xf86conf): add section name OutputClass to syntax script
  * ComplMatchIns may highlight wrong text
  * runtime(vim): Update base-syntax, improve ex-bang matching
  * runtime(doc): clarify buffer deletion on popup_close()
  * filetype: shaderslang files are not detected
  * Vim9: not able to use comment after opening curly brace

Update to 9.1.0993:

  * 9.1.0993: New 'cmdheight' behavior may be surprising
  * runtime(sh): fix typo in Last Change header
  * 9.1.0992: Vim9: double-free after v9.1.0988
  * 9.1.0991: v:stacktrace has wrong type in Vim9 script
  * runtime(sh): add PS0 to bashSpecialVariables in syntax script
  * runtime(vim): Remove trailing comma from match_words
  * runtime(zsh): sync syntax script with upstream repo
  * runtime(doc): Capitalise the mnemonic "Zero" for the 'z' flag of search()
  * 9.1.0990: Inconsistent behavior when changing cmdheight
  * 9.1.0989: Vim9: Whitespace after the final enum value causes a syntax error
  * runtime(java): Quietly opt out for unsupported markdown.vim versions
  * runtime(vim): fix failing vim syntax test
  * 9.1.0988: Vim9: no error when using uninitialized var in new()
  * runtime(doc): update index.txt
  * 9.1.0987: filetype: cake files are not recognized
  * 9.1.0986: filetype: 'jj' filetype is a bit imprecise
  * runtime(jj): Support diffs in jj syntax
  * runtime(vim): Update matchit pattern, no Vim9 short names
  * 9.1.0985: Vim9: some ex commands can be shortened
  * 9.1.0984: exception handling can be improved
  * runtime(doc): update doc for :horizontal
  * runtime(doc): update index.txt, windows.txt and version9.txt
  * runtime(doc): Tweak documentation about base64 function
  * runtime(chordpro): update syntax script
  * 9.1.0983: not able to get the displayed items in complete_info()
  * runtime(doc): use standard SGR format at :h xterm-true-color
  * 9.1.0982: TI linker files are not recognized
  * runtime(vim): update vim generator syntax script
  * 9.1.0981: tests: typo in test_filetype.vim
  * 9.1.0980: no support for base64 en-/decoding functions in Vim Script
  * syntax(sh): Improve the recognition of bracket expressions
  * runtime(doc): mention how NUL bytes are handled
  * 9.1.0979: VMS: type warning with $XDG_VIMRC_FILE
  * 9.1.0978: GUI tests sometimes fail when setting 'scroll' options
  * 9.1.0977: filetype: msbuild filetypes are not recognized
  * 9.1.0976: Vim9: missing return statement with throw
  * 9.1.0975: Vim9: interpolated string expr not working in object methods
  * 9.1.0974: typo in change of commit v9.1.0873
  * 9.1.0973: too many strlen() calls in fileio.c
  * runtime(sh): set shellcheck as the compiler for supported shells
  * runtime(doc): Fix enum example syntax
  * 9.1.0972: filetype: TI linker map files are not recognized
  * runtime(vim): Improve syntax script generator for Vim Script
  * 9.1.0971: filetype: SLNX files are not recognized
  * 9.1.0970: VMS: build errors on VMS architecture
  * runtime(doc): Fix documentation typos
  * runtime(doc): update for new keyprotocol option value (after v9.1.0969)
  * 9.1.0969: ghostty not using kitty protocol by default
  * 9.1.0968: tests: GetFileNameChecks() isn't fully sorted by filetype name
  * runtime(doc): update version9.txt for bash filetype
  * runtime(netrw): update last change header for #16265
  * runtime(doc): fix doc error in :r behaviour
  * 9.1.0967: SpotBugs compiler setup can be further improved
  * 9.1.0966: Vim9: :enum command can be shortened
  * runtime(compiler): include a basic bash syntax checker compiler
  * 9.1.0965: filetype: sh filetype set when detecting the use of bash
  * runtime(doc): clarify ARCH value for 32-bit in INSTALLpc.txt
  * 9.1.0963: fuzzy-matching does not prefer full match
  * 9.1.0962: filetype: bun.lock file is not recognized
  * runtime(vim): update indentation plugin for Vim script
  * runtime(doc): tweak documentation style in helphelp.txt
  * runtime(vim): Update base-syntax, allow parens in default arguments
  * runtime(doc): mention auto-format using clang-format for sound.c/sign.c
  * runtime(help): fix typo s/additional/arbitrary/
  * runtime(help): Add better support for language annotation highlighting
  * 9.1.0961: filetype: TI gel files are not recognized
  * 9.1.0960: filetype: hy history files are not recognized
  * translation(fi): Fix typoes in Finish menu translation
  * 9.1.0959: Coverity complains about type conversion
  * runtime(vim): Use supported syntax in indent tests
  * 9.1.0958: filetype: supertux2 config files detected as lisp
  * 9.1.0956: completion may crash, completion highlight wrong with preview window
  * 9.1.0955: Vim9: vim9compile.c can be further improved
  * runtime(doc): move help tag E1182
  * runtime(graphql): contribute vim-graphql to Vim core
  * 9.1.0954: popupmenu.c can be improved
  * 9.1.0953: filetype: APKBUILD files not correctly detected
  * 9.1.0952: Vim9: missing type checking for any type assignment
  * 9.1.0951: filetype: jshell files are not recognized
  * runtime(dockerfile): do not set commentstring in syntax script
  * 9.1.0950: filetype: fennelrc files are not recognized
  * runtime(netrw): do not double escape Vim special characters
  * git: ignore reformatting change of netrw plugin
  * runtime(netrw): more reformating #16248
  * runtime(doc): Add a note about handling symbolic links in starting.txt
  * 9.1.0949: popups inconsistently shifted to the left
  * git: ignore reformatting change of netrw plugin
  * runtime(netrw): change indent size from 1 to 2
  * 9.1.0948: Missing cmdline completion for :pbuffer
  * runtime(tutor): Reformat tutor1
  * 9.1.0947: short-description
  * 9.1.0946: cross-compiling fails on osx-arm64
  * 9.1.0945: ComplMatchIns highlight doesn't end after inserted text
  * translation(sv): re-include the change from #16240
  * 9.1.0944: tests: test_registers fails when not run under X11
  * 9.1.0943: Vim9: vim9compile.c can be further improved
  * runtime(doc): Update README and mention make check to verify
  * translation(sv): partly revert commit 98874dca6d0b60ccd6fc3a140b3ec
  * runtime(vim): update base-syntax after v9.1.0936
  * 9.1.0942: a few typos were found
  * 9.1.0941: ComplMatchIns doesn't work after multibyte chars
  * runtime(doc): Fix style in fold.txt
  * translation(sv): Fix typo in Swedish translation
  * 9.1.0940: Wrong cursor shape with "gq" and 'indentexpr' executes :normal
  * runtime(doc): fix some small errors
  * 9.1.0939: make installtutor fails
  * 9.1.0938: exclusive selection not respected when re-selecting block mode
  * 9.1.0937: test_undolist() is flaky
  * 9.1.0936: cannot highlight completed text
  * 9.1.0935: SpotBugs compiler can be improved
  * 9.1.0934: hard to view an existing buffer in the preview window
  * runtime(doc): document how to minimize fold computation costs
  * 9.1.0933: Vim9: vim9compile.c can be further improved
  * 9.1.0932: new Italian tutor not installed
  * runtime(doc): fix a few minor errors from the last doc updates
  * translation(it): add Italian translation for the interactive tutor
  * runtime(doc): update the change.txt help file
  * runtime(help): Add Vim lang annotation support for codeblocks
  * 9.1.0931: ml_get error in terminal buffer
  * 9.1.0930: tests: test_terminal2 may hang in GUI mode
  * 9.1.0929: filetype: lalrpop files are not recognized
  * 9.1.0928: tests: test_popupwin fails because the filter command fails
  * editorconfig: set trim_trailing_whitespace = false for src/testdir/test*.vim
  * 9.1.0927: style issues in insexpand.c
  * 9.1.0926: filetype: Pixi lock files are not recognized
  * runtime(doc): Add a reference to |++opt| and |+cmd| at `:h :pedit`
  * runtime(doc): add a note about inclusive motions and exclusive selection
  * 9.1.0925: Vim9: expression compiled when not necessary
  * 9.1.0923: too many strlen() calls in filepath.c
  * 9.1.0923: wrong MIN macro in popupmenu.c
  * 9.1.0921: popupmenu logic is a bit convoluted
  * 9.1.0920: Vim9: compile_assignment() too long
  * 9.1.0919: filetype: some assembler files are not recognized
  * runtime(netrw): do not pollute search history with symlinks
  * 9.1.0918: tiny Vim crashes with fuzzy buffer completion
  * 9.1.0917: various vartabstop and shiftround bugs when shifting lines
  * runtime(typst): add definition lists to formatlistpat, update maintainer
  * 9.1.0916: messages.c is exceeding 80 columns
  * runtime(proto): include filetype plugin for protobuf
  * 9.1.0915: GVim: default font size a bit too small
  * 9.1.0914: Vim9: compile_assignment() is too long
  * 9.1.0913: no error check for neg values for 'messagesopt'
  * runtime(netrw): only check first arg of netrw_browsex_viewer for being executable
  * 9.1.0912: xxd: integer overflow with sparse files and -autoskip
  * 9.1.0911: Variable name for 'messagesopt' doesn't match short name
  * 9.1.0910: 'messagesopt' does not check max wait time
  * runtime(doc): update wrong Vietnamese localization tag
  * 9.1.0909: Vim9: crash when calling instance method

Update to 9.1.0908:

  * 9.1.0908: not possible to configure :messages
  * 9.1.0907: printoptions:portrait does not change postscript Orientation
  * runtime(doc): Add vietnamese.txt to helps main TOC
  * 9.1.0906: filetype: Nvidia PTX files are not recognized
  * runtime(doc): updated version9.txt with changes from v9.1.0905
  * 9.1.0905: Missing information in CompleteDone event
  * 9.1.0904: Vim9: copy-paste error in class_defining_member()
  * 9.1.0903: potential overflow in spell_soundfold_wsal()
  * runtime(netrw): do not detach when launching external programs in gvim
  * runtime(doc): make tag alignment more consistent in filetype.txt
  * runtime(doc): fix wrong syntax and style of vietnamese.txt
  * translation(it): update Italian manpage for vimtutor
  * runtime(lua): add optional lua function folding
  * Filelist: include translations for Chapter 2 tutor
  * translation(vi): Update Vietnamese translation
  * runtime(doc): include vietnamese.txt
  * runtime(tutor): fix another typo in tutor2
  * runtime(doc): fix typo in vimtutor manpage
  * translation(it): update Italian manpage for vimtutor
  * translation(it): include Italian version of tutor chapter 2
  * runtime(tutor): regenerated some translated tutor1 files
  * runtime(tutor): fix typo in Chapter 2
  * 9.1.0902: filetype: Conda configuration files are not recognized
  * runtime(doc): Tweak documentation style a bit
  * runtime(tutor): update the tutor files and re-number the chapters
  * runtime(tutor): Update the makefiles for tutor1 and tutor2 files
  * 9.1.0901: MS-Windows: vimtutor batch script can be improved
  * runtime(doc): remove buffer-local completeopt todo item
  * 9.1.0900: Vim9: digraph_getlist() does not accept bool arg
  * runtime(typst): provide a formatlistpat in ftplugin
  * runtime(doc): Update documentation for "noselect" in 'completeopt'
  * 9.1.0899: default for 'backspace' can be set in C code
  * runtime(helptoc): reload cached g:helptoc.shell_prompt when starting toc
  * translation(ru): Updated messages translation
  * 9.1.0898: runtime(compiler): pytest compiler not included
  * 9.1.0897: filetype: pyrex files are not detected
  * runtime(compiler): update eslint compiler
  * 9.1.0896: completion list wrong after v9.1.0891
  * runtime(doc): document changed default value for 'history'
  * 9.1.0895: default history value is too small
  * 9.1.0894: No test for what the spotbug compiler parses
  * 9.1.0893: No test that undofile format does not regress
  * translation(de): update German manpages
  * runtime(compiler): include spotbugs Java linter
  * 9.1.0892: the max value of 'tabheight' is limited by other tabpages
  * runtime(po): remove poDiffOld/New, add po-format flags to syntax file
  * 9.1.0891: building the completion list array is inefficient
  * patch 9.1.0890: %! item not allowed for 'rulerformat'
  * runtime(gzip): load undofile if there exists one
  * 9.1.0889: Possible unnecessary redraw after adding/deleting lines
  * 9.1.0888: leftcol property not available in getwininfo()
  * 9.1.0887: Wrong expression in sign.c
  * 9.1.0886: filetype: debian control file not detected
  * runtime(c3): include c3 filetype plugin
  * 9.1.0885: style of sign.c can be improved
  * 9.1.0884: gcc warns about uninitialized variable
  * runtime(apache): Update syntax directives for apache server 2.4.62
  * translation(ru): updated vimtutor translation, update MAINTAINERS file
  * 9.1.0883: message history cleanup is missing some tests
  * runtime(doc): Expand docs on :! vs. :term
  * runtime(netrw): Fixing powershell execution issues on Windows
  * 9.1.0882: too many strlen() calls in insexpand.c
  * 9.1.0881: GUI: message dialog may not get focus
  * runtime(netrw): update netrw's decompress logic
  * runtime(apache): Update syntax keyword definition
  * runtime(misc): add Italian LICENSE and (top-level) README file
  * 9.1.0880: filetype: C3 files are not recognized
  * runtime(doc): add helptag for :HelpToc command
  * 9.1.0879: source is not consistently formatted
  * Add clang-format config file
  * runtime(compiler): fix escaping of arguments passed to :CompilerSet
  * 9.1.0878: termdebug: cannot enable DEBUG mode
  * 9.1.0877: tests: missing test for termdebug + decimal signs
  * 9.1.0876: filetype: openCL files are not recognized
  * 9.1.0875: filetype: hyprlang detection can be improved
  * 9.1.0874: filetype: karel files are not detected
  * 9.1.0873: filetype: Vivado files are not recognized
  * 9.1.0872: No test for W23 message
  * 9.1.0871: getcellpixels() can be further improved
  * 9.1.0870: too many strlen() calls in eval.c
  * 9.1.0869: Problem: curswant not set on gm in folded line
  * 9.1.0868: the warning about missing clipboard can be improved
  * runtime(doc): Makefile does not clean up all temporary files
  * 9.1.0867: ins_compl_add() has too many args
  * editorconfig: don't trim trailing whitespaces in runtime/doc
  * translation(am): Remove duplicate keys in desktop files
  * runtime(doc): update helptags
  * runtime(filetype): remove duplicated *.org file pattern
  * runtime(cfg): only consider leading // as starting a comment
  * 9.1.0866: filetype: LLVM IR files are not recognized
  * 9.1.0865: filetype: org files are not recognized
  * 9.1.0864: message history is fixed to 200
  * 9.1.0863: getcellpixels() can be further improved
  * runtime(sh): better function support for bash/zsh in indent script
  * runtime(netrw): small fixes to netrw#BrowseX
  * 9.1.0862: 'wildmenu' not enabled by default in nocp mode
  * runtime(doc): update how to report issues for mac Vim
  * runtime(doc): mention option-backslash at :h CompilerSet
  * runtime(compiler): include a Java Maven compiler plugin
  * runtime(racket): update Racket runtime files
  * runtime(doc): improve indentation in examples for netrw-handler
  * runtime(doc): improve examples for netrw-handler functions
  * runtime(idris2): include filetype,indent+syntax plugins for (L)Idris2 + ipkg
  * runtime(doc): clarify the use of filters and external commands
  * 9.1.0861: Vim9: no runtime check for object member access of any var
  * runtime(compiler): update pylint linter
  * 9.1.0860: tests: mouse_shape tests use hard code sleep value
  * 9.1.0859: several problems with the GLVS plugin
  * 9.1.0858: Coverity complains about dead code
  * runtime(tar): Update tar.vim to support permissions
  * 9.1.0857: xxd: --- is incorrectly recognized as end-of-options
  * 9.1.0851: too many strlen() calls in getchar.c
  * 9.1.0850: Vim9: cannot access nested object inside objects
  * runtime(tex): extra Number highlighting causes issues
  * runtime(vim): Fix indent after :silent! function
  * 9.1.0849: there are a few typos in the source
  * runtime(netrw): directory symlink not resolved in tree view
  * runtime(doc): add a table of supported Operating Systems
  * runtime(tex): update Last Change header in syntax script
  * runtime(doc): fix typo in g:termdebug_config
  * runtime(vim): Update base-syntax, improve :normal highlighting
  * runtime(tex): add Number highlighting to syntax file
  * runtime(doc): Tweak documentation style a bit
  * 9.1.0848: if_lua: v:false/v:true are not evaluated to boolean
  * runtime(dune): use :setl instead of :set in ftplugin
  * runtime(termdebug): allow to use decimal signs
  * translation(it): Updated Italian vimtutor
  * runtime(compiler): improve cppcheck
  * git: git-blame-ignore-revs shown as an error on Github
  * 9.1.0847: tests: test_popupwin fails because of updated help file
  * 9.1.0846: debug symbols for xxd are not cleaned in Makefile
  * runtime(structurizr): Update structurizr syntax
  * runtime(8th): updated 8th syntax
  * runtime(doc): Add pi_tutor.txt to help TOC
  * runtime(compiler): add mypy and ruff compiler; update pylint linter
  * runtime(netrw): fix several bugs in netrw tree listing
  * runtime(netrw): prevent polluting the search history
  * 9.1.0845: vimtutor shell script can be improved
  * 9.1.0844: if_python: no way to pass local vars to python
  * 9.1.0843: too many strlen() calls in undo.c
  * runtime(doc): update default value for fillchars option
  * runtime(compiler): fix typo in cppcheck compiler plugin
  * runtime(doc): simplify vimtutor manpage a bit more
  * runtime(matchparen): Add matchparen_disable_cursor_hl config option
  * 9.1.0842: not checking for the sync() systemcall
  * 9.1.0841: tests: still preferring python2 over python3
  * 9.1.0840: filetype: idris2 files are not recognized
  * 9.1.0839: filetype: leo files are not recognized
  * runtime(cook): include cook filetype plugin
  * runtime(debversions): Update Debian versions
  * patch 9.1.0838: vimtutor is bash-specific
  * runtime(doc): add help specific modeline to pi_tutor.txt
  * Filelist: vimtutor chapter 2 is missing in Filelist
  * 9.1.0837: cross-compiling has some issues
  * runtime(vimtutor): Add a second chapter


- update to 9.1.0836 
 * 9.1.0836: The vimtutor can be improved
 * 9.1.0835: :setglobal doesn't work properly for 'ffu' and 'tsrfu'
 * 9.1.0834: tests: 2html test fails
 * 9.1.0833: CI: recent ASAN changes do not work for indent tests
 * 9.1.0832: :set doesn't work for 'cot' and 'bkc' after :setlocal
 * runtime(doc): update help-toc description
 * runtime(2html): Make links use color scheme colors in TOhtml
 * 9.1.0831: 'findexpr' can't be used as lambad or Funcref
 * Filelist: include helptoc package
 * runtime(doc): include a TOC Vim9 plugin
 * Filelist: ignore .git-blame-ignore-revs
 * 9.1.0830: using wrong highlight group for spaces for popupmenu
 * runtime(typst): synchronize updates from the upstream typst.vim
 * git: ignore reformatting commit for git-blame (after v9.1.0829)
 * 9.1.0829: Vim source code uses a mix of tabs and spaces
 * 9.1.0828: string_T struct could be used more often
 * 9.1.0827: CI: tests can be improved
 * runtime(doc): remove stray sentence in pi_netrw.txt
 * 9.1.0826: filetype: sway files are not recognized
 * runtime(doc): Include netrw-gp in TOC
 * runtime(doc): mention 'iskeyword' at :h charclass()
 * runtime(doc): update help tags
 * 9.1.0825: compile error for non-diff builds
 * runtime(netrw): fix E874 when browsing remote directory which contains `~` character
 * runtime(doc): update coding style documentation
 * runtime(debversions): Add plucky (25.04) as Ubuntu release name
 * 9.1.0824: too many strlen() calls in register.c
 * 9.1.0823: filetype: Zephyr overlay files not recognized
 * runtime(doc): Clean up minor formatting issues for builtin functions
 * runtime(netrw): make :Launch/Open autoloadable
 * runtime(netrw): fix regression with x mapping on Cygwin
 * runtime(netrw): fix filetype detection for remote files
 * 9.1.0822: topline might be changed in diff mode unexpectedly
 * CI: huge linux builds should also run syntax &amp; indent tests
 * 9.1.0821: 'findexpr' completion doesn't set v:fname to cmdline argument
 * 9.1.0820: tests: Mac OS tests are too flaky
 * runtime(awk): Highlight more awk comments in syntax script
 * runtime(netrw): add missing change for s:redir()
 * 9.1.0819: tests: using findexpr and imported func not tested
 * runtime(netrw): improve netrw's open-handling further
 * runtime(netrw): fix syntax error in netrwPlugin.vim
 * runtime(netrw): simplify gx file handling
 * 9.1.0818: some global functions are only used in single files
 * 9.1.0817: termdebug: cannot evaluate expr in a popup
 * runtime(defaults): Detect putty terminal and switch to dark background
 * 9.1.0816: tests: not clear what tests cause asan failures
 * runtime(doc): Remove some completed items from todo.txt
 * 9.1.0815: "above" virtual text causes wrong 'colorcolumn' position
 * runtime(syntax-tests): tiny vim fails because of line-continuation
 * 9.1.0814: mapset() may remove unrelated mapping
 * 9.1.0813: no error handling with setglobal and number types
 * 9.1.0812: Coverity warns about dereferencing NULL ptr
 * 9.1.0811: :find expansion does not consider 'findexpr'
 * 9.1.0810: cannot easily adjust the |:find| command
 * 9.1.0809: filetype: petalinux config files not recognized
 * 9.1.0808: Terminal scrollback doesn't shrink when decreasing 'termwinscroll'
 * 9.1.0807: tests: having 'nolist' in modelines isn't always desired
 * 9.1.0806: tests: no error check when setting global 'briopt'
 * 9.1.0805: tests: minor issues in gen_opt_test.vim
 * 9.1.0804: tests: no error check when setting global 'cc'
 * 9.1.0803: tests: no error check when setting global 'isk'
 * 9.1.0802: tests: no error check when setting global 'fdm' to empty value
 * 9.1.0801: tests: no error check when setting global 'termwinkey'
 * 9.1.0800: tests: no error check when setting global 'termwinsize'
 * runtime(doc): :ownsyntax also resets 'spelloptions'
 * 9.1.0799: tests: gettwinvar()/gettabwinvar() tests are not comprehensive
 * runtime(doc): Fix wrong Mac default options
 * 9.1.0798: too many strlen() calls in cmdhist.c
 * 9.1.0797: testing of options can be further improved
 * 9.1.0796: filetype: libtool files are not recognized
 * (typst): add folding to typst ftplugin
 * runtime(netrw): deprecate and remove netrwFileHandlers#Invoke()
 * 9.1.0795: filetype: Vivado memory info file are not recognized
 * 9.1.0794: tests: tests may fail on Windows environment
 * runtime(doc): improve the :colorscheme documentation
 * 9.1.0793: xxd: -e does add one extra space
 * 9.1.0792: tests: Test_set_values() is not comprehensive enough
 * runtime(swayconfig): add flag for bindsym/bindcode to syntax script
 * 9.1.0791: tests: errors in gen_opt_test.vim are not shown
 * runtime(compiler): check for compile_commands in build dirs for cppcheck
 * 9.1.0790: Amiga: AmigaOS4 build should use default runtime (newlib)
 * runtime(help): Update help syntax
 * runtime(help): fix end of sentence highlight in code examples
 * runtime(jinja): Support jinja syntax as secondary filetype
 * 9.1.0789: tests: ':resize + 5' has invalid space after '+'
 * 9.1.0788: &lt;CSI&gt;27;&lt;mod&gt;u is not decoded to literal Escape in kitty/foot
 * 9.1.0787: cursor position changed when using hidden terminal
 * 9.1.0786: tests: quickfix update test does not test location list
 * runtime(doc): add some docs for file-watcher programs
 * CI: uploading failed screendumps still fails on Cirrus CI
 * 9.1.0785: cannot preserve error position when setting quickfix list
 * 9.1.0784: there are several problems with python 3.13
 * 9.1.0783: 'spell' option setting has problems
 * 9.1.0782: tests: using wrong neomuttlog file name
 * runtime(doc): add preview flag to statusline example
 * 9.1.0781: tests: test_filetype fails
 * 9.1.0780: MS-Windows: incorrect Win32 error checking
 * 9.1.0779: filetype: neomuttlog files are not recognized
 * 9.1.0778: filetype: lf config files are not recognized
 * runtime(comment): fix commment toggle with mixed tabs &amp; spaces
 * runtime(misc): Use consistent "Vim script" spelling
 * runtime(gleam): add ftplugin for gleam files
 * runtime(doc): link help-writing from write-local-help
 * 9.1.0777: filetype: Some upstream php files are not recognized
 * runtime(java): Define javaBlockStart and javaBlockOtherStart hl groups
 * runtime(doc): mention conversion rules for remote_expr()
 * runtime(tutor): Fix missing :s command in spanish translation section 4.4
 * 9.1.0776: test_strftime may fail because of missing TZ data
 * translation(am): Add Armenian language translation
 * 9.1.0775: tests: not enough tests for setting options
 * 9.1.0774: "shellcmdline" doesn't work with getcompletion()
 * 9.1.0773: filetype: some Apache files are not recognized
 * 9.1.0772: some missing changes from v9.1.0771
 * 9.1.0771: completion attribute hl_group is confusing
 * 9.1.0770: current command line completion is a bit limited
 * 9.1.0769: filetype: MLIR files are not recognized
 * 9.1.0768: MS-Windows: incorrect cursor position when restoring screen
 * runtime(nasm): Update nasm syntax script
 * 9.1.0767: A condition is always true in ex_getln.c
 * runtime(skill): Update syntax file to fix string escapes
 * runtime(help): highlight CTRL-&lt;Key&gt; correctly
 * runtime(doc): add missing usr_52 entry to toc
 * 9.1.0766: too many strlen() calls in ex_getln.c
 * runtime(doc): correct `vi` registers 1-9 documentation error
 * 9.1.0765: No test for patches 6.2.418 and 7.3.489
 * runtime(spec): set comments and commentstring options
 * NSIS: Include libgcc_s_sjlj-1.dll again
 * runtime(doc): clarify the effect of 'startofline' option
 * 9.1.0764: [security]: use-after-free when closing a buffer
 * runtime(vim): Update base-syntax file, improve class, enum and interface highlighting
 * 9.1.0763: tests: cannot run single syntax tests
 * 9.1.0762: 'cedit', 'termwinkey' and 'wildchar' may not be parsed correctly
 * 9.1.0761: :cd completion fails on Windows with backslash in path
 * 9.1.0760: tests: no error reported, if gen_opt_test.vim fails
 * 9.1.0759: screenpos() may return invalid position
 * runtime(misc): unset compiler in various ftplugins
 * runtime(doc): update formatting and syntax
 * runtime(compiler): add cppcheck linter compiler plugin
 * runtime(doc): Fix style in documents
 * runtime(doc): Fix to two-space convention in user manual
 * runtime(comment): consider &amp;tabstop in lines after whitespace indent
 * 9.1.0758: it's possible to set an invalid key to 'wildcharm'
 * runtime(java): Manage circularity for every :syn-included syntax file
 * 9.1.0757: tests: messages files contains ANSI escape sequences
 * 9.1.0756: missing change from patch v9.1.0754
 * 9.1.0755: quickfix list does not handle hardlinks well
 * runtime(doc): 'filetype', 'syntax' and 'keymap' only allow alphanumeric + some characters
 * runtime(systemd): small fixes to &amp;keywordprg in ftplugin
 * CI: macos-12 runner is being sunset, switch to 13
 * 9.1.0754: fixed order of items in insert-mode completion menu
 * runtime(comment): commenting might be off by one column
 * 9.1.0753: Wrong display when typing in diff mode with 'smoothscroll'
 * 9.1.0752: can set 'cedit' to an invalid value
 * runtime(doc): add `usr` tag to usr_toc.txt
 * 9.1.0751: Error callback for term_start() not used
 * 9.1.0750: there are some Win9x legacy references
 * runtime(java): Recognise the CommonMark form (///) of Javadoc comments
 * 9.1.0749: filetype: http files not recognized
 * runtime(comment): fix syntax error
 * CI: uploading failed screendump tests does not work Cirrus
 * 9.1.0748: :keep* commmands are sometimes misidentified as :k
 * runtime(indent): allow matching negative numbers for gnu indent config file
 * runtime(comment): add gC mapping to (un)comment rest of line
 * 9.1.0747: various typos in repo found
 * 9.1.0746: tests: Test_halfpage_longline() fails on large terminals
 * runtime(doc): reformat gnat example
 * runtime(doc): reformat ada_standard_types section
 * 9.1.0745: filetype: bun and deno history files not recognized
 * runtime(glvs): Correct the tag name of glvs-autoinstal
 * runtime(doc): include short form for :earlier/:later
 * runtime(doc): remove completed TODO
 * 9.1.0744: filetype: notmuch configs are not recognised
 * 9.1.0743: diff mode does not handle overlapping diffs correctly
 * runtime(glvs): fix a few issues
 * runtime(doc): Fix typo in :help :command-modifiers
 * 9.1.0742: getcmdprompt() implementation can be improved
 * runtime(docs): update `:set?` command behavior table
 * runtime(doc): update vim90 to vim91 in docs
 * runtime(doc): fix typo in :h dos-colors
 * 9.1.0741: No way to get prompt for input()/confirm()
 * runtime(doc): fix typo in version9.txt nrformat -&gt; nrformats
 * runtime(rmd,rrst): 'fex' option not properly restored
 * runtime(netrw): remove extraneous closing bracket
 * 9.1.0740: incorrect internal diff with empty file
 * 9.1.0739: [security]: use-after-free in ex_getln.c
 * runtime(filetype): tests: Test_filetype_detection() fails
 * runtime(dist): do not output a message if executable is not found
 * 9.1.0738: filetype: rapid files are not recognized
 * runtime(modconf): remove erroneous :endif in ftplugin
 * runtime(lyrics): support multiple timestamps in syntax script
 * runtime(java): Optionally recognise _module_ import declarations
 * runtime(vim): Update base-syntax, improve folding function matches
 * CI: upload failed screendump tests also for Cirrus
 * 9.1.0737: tests: screendump tests may require a bit more time
 * runtime(misc): simplify keywordprg in various ftplugins
 * runtime(java): Optionally recognise all primitive constants in _switch-case_ labels
 * runtime(zsh,sh): set and unset compiler in ftplugin
 * runtime(netrw): using inefficient highlight pattern for 'mf'
 * 9.1.0736: Unicode tables are outdated
 * 9.1.0735: filetype: salt files are not recognized
 * 9.1.0734: filetype: jinja files are not recognized
 * runtime(zathurarc): add double-click-follow to syntax script
 * translation(ru): Updated messages translation
 * translation(it): updated xxd man page
 * translation(ru): updated xxd man page
 * 9.1.0733: keyword completion does not work with fuzzy
 * 9.1.0732: xxd: cannot use -b and -i together
 * runtime(java): Highlight javaConceptKind modifiers with StorageClass
 * runtime(doc): reword and reformat how to use defaults.vim
 * 9.1.0731: inconsistent case sensitive extension matching
 * runtime(vim): Update base-syntax, match Vim9 bool/null literal args to :if/:while/:return
 * runtime(netrw): delete confirmation not strict enough
 * 9.1.0730: Crash with cursor-screenline and narrow window
 * 9.1.0729: Wrong cursor-screenline when resizing window
 * 9.1.0728: [security]: heap-use-after-free in garbage collection with location list user data
 * runtime(doc): clarify the effect of the timeout for search()-functions
 * runtime(idlang): update syntax script
 * runtime(spec): Recognize epoch when making spec changelog in ftplugin
 * runtime(spec): add file triggers to syntax script
 * 9.1.0727: too many strlen() calls in option.c
 * runtime(make): add compiler/make.vim to reset compiler plugin settings
 * runtime(java): Recognise all available standard doclet tags
 * 9.1.0726: not using correct python3 API with dynamic linking
 * runtime(dosini): Update syntax script, spellcheck comments only
 * runtime(doc): Revert outdated comment in completeopt's fuzzy documentation
 * 9.1.0725: filetype: swiftinterface files are not recognized
 * runtime(pandoc): Update compiler plugin to use actual 'spelllang'
 * runtime(groff): Add compiler plugin for groff
 * 9.1.0724: if_python: link error with python 3.13 and stable ABI
 * 9.1.0723: if_python: dynamic linking fails with python3 &gt;= 3.13
 * 9.1.0722: crash with large id in text_prop interface
 * 9.1.0721: tests: test_mksession does not consider XDG_CONFIG_HOME
 * runtime(glvs): update GetLatestVimScripts plugin
 * runtime(doc): Fix typo in :help :hide text
 * runtime(doc): buffers can be re-used
 * 9.1.0720: Wrong breakindentopt=list:-1 with multibyte or TABs
 * 9.1.0719: Resetting cell widths can make 'listchars' or 'fillchars' invalid
 * runtime(doc): Update version9.txt and mention $MYVIMDIR
- Update to 9.1.0718:
  * v9.1.0718: hard to know the users personal Vim Runtime Directory
  * v9.1.0717: Unnecessary nextcmd NULL checks in parse_command_modifiers()
    Maintainers: fix typo in author name
  * v9.1.0716: resetting setcellwidth( doesn't update the screen
    runtime(hcl,terraform): Add runtime files for HCL and Terraform
    runtime(tmux): Update syntax script
  * v9.1.0715: Not correctly parsing color names (after v9.1.0709)
  * v9.1.0714: GuiEnter_Turkish test may fail
  * v9.1.0713: Newline causes E749 in Ex mode
  * v9.1.0712: missing dependency of Test_gettext_makefile
  * v9.1.0711: test_xxd may file when using different xxd
  * v9.1.0710: popup window may hide part of Command line
    runtime(vim): Update syntax, improve user-command matching
  * v9.1.0709: GUIEnter event not found in Turkish locale
    runtime(sudoers): improve recognized Runas_Spec and Tag_Spec items
  * v9.1.0708: Recursive window update does not account for reset skipcol
    runtime(nu): include filetype plugin
  * v9.1.0707: invalid cursor position may cause a crash
  * v9.1.0706: test_gettext fails when using shadow dir
    CI: Install locales-all package
  * v9.1.0705: Sorting of fuzzy filename completion is not stable
    translation(pt): update Portuguese/Brazilian menu translation
    runtime(vim): Update base-syntax, match bracket mark ranges
    runtime(doc): Update :help :command-complete list
  * v9.1.0704: inserting with a count is inefficient
    runtime(doc): use mkdir -p to save a command
  * v9.1.0703: crash with 2byte encoding and glob2regpat()
    runtime(hollywood): update syn highlight for If-Then statements
    and For-In-Loops
  * v9.1.0702: Patch 9.1.0700 broke CI
  * v9.1.0701: crash with NFA regex engine when searching for
    composing chars
  * v9.1.0700: crash with 2byte encoding and glob2regpat()
  * v9.1.0699: "dvgo" is not always an inclusive motion
    runtime(java): Provide support for syntax preview features
  * v9.1.0698: "Untitled" file not removed when running Test_crash1_3
    alone
  * v9.1.0697: heap-buffer-overflow in ins_typebuf
  * v9.1.0696: installing runtime files fails when using SHADOWDIR
    runtime(doc): fix typo
  * v9.1.0695: test_crash leaves Untitled file around
    translation(br): Update Brazilian translation
    translation(pt): Update menu_pt_br
  * v9.1.0694: matchparen is slow on a long line
  * v9.1.0693: Configure doesn't show result when not using python3
    stable abi
  * v9.1.0692: Wrong patlen value in ex_substitute()
  * v9.1.0691: stable-abi may cause segfault on Python 3.11
    runtime(vim): Update base-syntax, match :loadkeymap after colon and bar
    runtime(mane): Improve &lt;Plug&gt;ManBS mapping
  * v9.1.0690: cannot set special highlight kind in popupmenu
    translation(pt): Revert and fix wrong Portuguese menu translation
    files
    translation(pt): revert Portuguese menu translation
    translation(br): Update Brazilian translations
    runtime(vim): Update base-syntax, improve :let-heredoc highlighting
  * v9.1.0689: buffer-overflow in do_search( with 'rightleft'
    runtime(vim): Improve heredoc handling for all embedded scripts
  * v9.1.0688: dereferences NULL pointer in check_type_is_value()
  * v9.1.0687: Makefile may not install desktop files
    runtime(man): Fix &lt;Plug&gt;ManBS
    runtime(java): Make the bundled &amp;foldtext function optional
    runtime(netrw): Change line on `mx` if command output exists
    runtime(netrw): Fix `mf`-selected entry highlighting
    runtime(htmlangular): add html syntax highlighting
    translation(it): Fix filemode of Italian manpages
    runtime(doc): Update outdated man.vim plugin information
    runtime(zip): simplify condition to detect MS-Windows
  * v9.1.0686: zip-plugin has problems with special characters
    runtime(pandoc): escape quotes in &amp;errorformat for pandoc
    translation(it): updated Italian manpage
  * v9.1.0685: too many strlen( calls in usercmd.c
    runtime(doc): fix grammar in :h :keeppatterns
    runtime(pandoc): refine pandoc compiler settings
  * v9.1.0684: completion is inserted on Enter with "noselect"
    translation(ru): update man pages
  * v9.1.0683: mode( returns wrong value with &lt;Cmd&gt; mapping
    runtime(doc): remove trailing whitespace in cmdline.txt
  * v9.1.0682: Segfault with uninitialized funcref
  * v9.1.0681: Analyzing failed screendumps is hard
    runtime(doc): more clarification for the :keeppatterns needed
  * v9.1.0680: VMS does not have defined uintptr_t
    runtime(doc): improve typedchar documentation for KeyInputPre autocmd
    runtime(dist): verify that executable is in $PATH
    translation(it): update Italian manpages
    runtime(doc): clarify the effect of :keeppatterns after * v9.1.0677
    runtime(doc): update Makefile and make it portable between GNU and BSD
  * v9.1.0679: Rename from w_closing to w_locked is incomplete
    runtime(colors): update colorschemes
    runtime(vim): Update base-syntax, improve :let-heredoc highlighting
    runtime(doc): Updating the examples in the xxd manpage
    translation(ru): Updated uganda.rux
    runtime(yaml): do not re-indent when commenting out lines
  * v9.1.0678: use-after-free in alist_add()
  * v9.1.0677 :keepp does not retain the substitute pattern
    translation(ja): Update Japanese translations to latest release
    runtime(netrw): Drop committed trace lines
    runtime(netrw): Error popup not always used
    runtime(netrw): ErrorMsg( may throw E121
    runtime(tutor): update Makefile and make it portable between GNU and BSD
    translation: improve the po/cleanup.vim script
    runtime(lang): update Makefile and make it portable between GNU and BSD
  * v9.1.0676: style issues with man pages
  * v9.1.0675: Patch v9.1.0674 causes problems
    runtime(dosbatch): Show %%i as an argument in syntax file
    runtime(dosbatch): Add syn-sync to syntax file
    runtime(sql, mysql): fix E169: Command too recursive with
    sql_type_default = "mysql"
  * v9.1.0674: compiling abstract method fails because of missing return
    runtime(javascript): fix a few issues with syntax higlighting
    runtime(mediawiki): fix typo in doc, test for b:did_ftplugin var
    runtime(termdebug): Fix wrong test for balloon feature
    runtime(doc): Remove mentioning of the voting feature
    runtime(doc): add help tags for json + markdown global variables
  * v9.1.0673: too recursive func calls when calling super-class method
    runtime(syntax-tests): Facilitate the viewing of rendered screendumps
    runtime(doc): fix a few style issues
  * v9.1.0672: marker folds may get corrupted on undo
  * v9.1.0671 Problem:  crash with WinNewPre autocommand
  * v9.1.0670: po file encoding fails on *BSD during make
    translation(it): Update Italian translation
    translation: Stop using msgconv
  * v9.1.0669: stable python ABI not used by default
    Update .gitignore and .hgignore files
  * v9.1.0668: build-error with python3.12 and stable ABI
    translations: Update generated po files
  * v9.1.0667: Some other options reset curswant unnecessarily when set
  * v9.1.0666: assert_equal( doesn't show multibyte string correctly
    runtime(doc): clarify directory of Vim's executable vs CWD
  * v9.1.0665 :for loop
    runtime(proto): Add indent script for protobuf filetype
  * v9.1.0664: console vim did not switch back to main screen on exit
    runtime(zip): zip plugin does not work with Vim 9.0
  * v9.1.0663: zip test still resets 'shellslash' option
    runtime(zip): use defer to restore old settings
    runtime(zip): add a generic Message function
    runtime(zip): increment base version of zip plugin
    runtime(zip): raise minimum Vim version to * v9.0
    runtime(zip): refactor save and restore of options
    runtime(zip): remove test for fnameescape
    runtime(zip): use :echomsg instead of :echo
    runtime(zip): clean up and remove comments
  * v9.1.0662: filecopy( may return wrong value when readlink( fails
  * v9.1.0661: the zip plugin is not tested.
    runtime(zip): Fix for FreeBSD's unzip command
    runtime(doc): capitalize correctly
  * v9.1.0660: Shift-Insert does work on old conhost
    translation(it): update Italian manpage
    runtime(lua): add/subtract a 'shiftwidth' after '('/')' in indentexpr
    runtime(zip): escape '[' on Unix as well
  * v9.1.0659: MSVC Makefile is a bit hard to read
    runtime(doc): fix typo in syntax.txt
    runtime(doc): -x is only available when compiled with crypt feature
  * v9.1.0658: Coverity warns about dereferencing NULL pointer.
    runtime(colors): update Todo highlight in habamax colorscheme
  * v9.1.0657: MSVC build time can be optimized
  * v9.1.0656: MSVC Makefile CPU handling can be improved
  * v9.1.0655: goaccess config file not recognized
    CI: update clang compiler to version 20
    runtime(netrw): honor `g:netrw_alt{o,v}` for `:{S,H,V}explore`
  * v9.1.0654: completion does not respect completeslash with fuzzy
  * v9.1.0653: Patch v9.1.0648 not completely right
  * v9.1.0652: too many strlen( calls in syntax.c
  * v9.1.0651 :append
  * v9.1.0650: Coverity warning in cstrncmp()
  * v9.1.0649: Wrong comment for "len" argument of call_simple_func()
  * v9.1.0648: [security] double-free in dialog_changed()
  * v9.1.0647: [security] use-after-free in tagstack_clear_entry
    runtime(doc): re-format tag example lines, mention ctags --list-kinds
  * v9.1.0646: imported function may not be found
    runtime(java): Document "g:java_space_errors" and "g:java_comment_strings"
    runtime(java): Cluster optional group definitions and their group links
    runtime(java): Tidy up the syntax file
    runtime(java): Tidy up the documentation for "ft-java-syntax"
    runtime(colors): update habamax scheme - tweak diff/search/todo colors
    runtime(nohlsearch): add missing loaded_hlsearch guard
    runtime(kivy): Updated maintainer info for syntax script
    Maintainers: Add maintainer for ondir ftplugin + syntax files
    runtime(netrw): removing trailing slash when copying files in same
    directory
  * v9.1.0645: wrong match when searching multi-byte char case-insensitive
    runtime(html): update syntax script to sync by 250 minlines by default
  * v9.1.0644: Unnecessary STRLEN( when applying mapping
    runtime(zip): Opening a remote zipfile don't work
    runtime(cuda): source c and cpp ftplugins
  * v9.1.0643: cursor may end up on invalid position
  * v9.1.0642: Check that mapping rhs starts with lhs fails if not
    simplified
  * v9.1.0641: OLE enabled in console version
    runtime(thrift): add ftplugin, indent and syntax scripts
  * v9.1.0640: Makefile can be improved
  * v9.1.0639: channel timeout may wrap around
  * v9.1.0638: E1510 may happen when formatting a message for smsg()
  * v9.1.0637: Style issues in MSVC Makefile
- Update apparmor.vim to latest version (from AppArmor 4.0.2)
  - add support for "all" and "userns" rules, and new profile flags
- Update to 9.1.0636:
  * 9.1.0636: filetype: ziggy files are not recognized
  * 9.1.0635: filetype: SuperHTML template files not recognized
  * 9.1.0634: Ctrl-P not working by default
  * 9.1.0633: Compilation warnings with `-Wunused-parameter`
  * 9.1.0632: MS-Windows: Compiler Warnings
        Add support for Files-Included in syntax script
        tweak documentation style a bit
  * 9.1.0631: wrong completion list displayed with non-existing dir + fuzzy completion
  * 9.1.0630: MS-Windows: build fails with VIMDLL and mzscheme
  * 9.1.0629: Rename of pum hl_group is incomplete
  * 9.1.0628: MinGW: coverage files are not cleaned up
  * 9.1.0627: MinGW: build-error when COVERAGE is enabled
  * 9.1.0626: Vim9: need more tests with null objects
        include initial filetype plugin
  * 9.1.0625: tests: test output all translated messages for all translations
  * 9.1.0624: ex command modifiers not found
  * 9.1.0623: Mingw: errors when trying to delete non-existing files
  * 9.1.0622: MS-Windows: mingw-build can be optimized
  * 9.1.0621: MS-Windows: startup code can be improved
  * 9.1.0620: Vim9: segfauls with null objects
  * 9.1.0619: tests: test_popup fails
  * 9.1.0618: cannot mark deprecated attributes in completion menu
  * 9.1.0617: Cursor moves beyond first line of folded end of buffer
  * 9.1.0616: filetype: Make syntax highlighting off for MS Makefiles
  * 9.1.0615: Unnecessary STRLEN() in make_percent_swname()
        Add single-line comment syntax
        Add syntax test for comments
        Update maintainer info
  * 9.1.0614: tests: screendump tests fail due to recent syntax changes
  * 9.1.0613: tests: termdebug test may fail and leave file around
        Update base-syntax, improve :set highlighting
        Optionally highlight the :: token for method references
  * 9.1.0612: filetype: deno.lock file not recognized
        Use delete() for deleting directory
        escape filename before trying to delete it
  * 9.1.0611: ambiguous mappings not correctly resolved with modifyOtherKeys
        correctly extract file from zip browser
  * 9.1.0610: filetype: OpenGL Shading Language files are not detected
        Fix endless recursion in netrw#Explore()
  * 9.1.0609: outdated comments in Makefile
        update syntax script
        Fix flow mapping key detection
        Remove orphaned YAML syntax dump files
  * 9.1.0608: Coverity warns about a few potential issues
        Update syntax script and remove syn sync
  * 9.1.0607: termdebug: uses inconsistent style
  * 9.1.0606: tests: generated files may cause failure in test_codestyle
  * 9.1.0605: internal error with fuzzy completion
  * 9.1.0604: popup_filter during Press Enter prompt seems to hang
        translation: Update Serbian messages translation
  * 9.1.0603: filetype: use correct extension for Dracula
  * 9.1.0602: filetype: Prolog detection can be improved
        fix more inconsistencies in assert function docs
  * 9.1.0601: Wrong cursor position with 'breakindent' when wide char doesn't fit
        Update base-syntax, improve :map highlighting
  * 9.1.0600: Unused function and unused error constants
  * 9.1.0599: Termdebug: still get E1023 when specifying arguments
        correct wrong comment options
        fix typo "a xterm" -&gt; "an xterm"
  * 9.1.0598: fuzzy completion does not work with default completion
  * 9.1.0597: KeyInputPre cannot get the (unmapped typed) key
  * 9.1.0596: filetype: devscripts config files are not recognized
        gdb file/folder check is now performed only in CWD.
        quote filename arguments using double quotes
        update syntax to SDC-standard 2.1
        minor updates.
        Cleanup :match and :loadkeymap syntax test files
        Update base-syntax, match types in Vim9 variable declarations
  * 9.1.0595: make errors out with the po Makefile
  * 9.1.0594: Unnecessary redraw when setting 'winfixbuf'
        using wrong highlight for UTF-8
        include simple syntax plugin
  * 9.1.0593: filetype: Asymptote files are not recognized
        add recommended indent options to ftplugin
        add recommended indent options to ftplugin
        add recommended indent options to ftplugin
  * 9.1.0592: filetype: Mediawiki files are not recognized
  * 9.1.0591: filetype: *.wl files are not recognized
  * 9.1.0590: Vim9: crash when accessing getregionpos() return value
        'cpoptions': Include "z" in the documented default
  * 9.1.0589: vi: d{motion} and cw work differently than expected
        update included colorschemes
        grammar fixes in options.txt
- Update to 9.1.0588:
  * 9.1.0588: The maze program no longer compiles on newer clang
    runtime(typst): Add typst runtime files
  * 9.1.0587: tests: Test_gui_lowlevel_keyevent is still flaky
  * 9.1.0586: ocaml runtime files are outdated
    runtime(termdebug): fix a few issues
  * 9.1.0585: tests: test_cpoptions leaves swapfiles around
  * 9.1.0584: Warning about redeclaring f_id() non-static
    runtime(doc): Add hint how to load termdebug from vimrc
    runtime(doc): document global insert behavior
  * 9.1.0583: filetype: *.pdf_tex files are not recognized
  * 9.1.0582: Printed line doesn't overwrite colon when pressing Enter in Ex mode
  * 9.1.0581: Various lines are indented inconsistently
  * 9.1.0580: :lmap mapping for keypad key not applied when typed in Select mode
  * 9.1.0579: Ex command is still executed after giving E1247
  * 9.1.0578: no tests for :Tohtml
  * 9.1.0577: Unnecessary checks for v:sizeoflong in test_put.vim
  * 9.1.0576: tests: still an issue with test_gettext_make
  * 9.1.0575: Wrong comments in alt_tabpage()
  * 9.1.0574: ex: wrong handling of commands after bar
    runtime(doc): add a note for netrw bug reports
  * 9.1.0573: ex: no implicit print for single addresses
    runtime(vim): make &amp;indentexpr available from the outside
  * 9.1.0572: cannot specify tab page closing behaviour
    runtime(doc): remove obsolete Ex insert behavior
  * 9.1.0571: tests: Test_gui_lowlevel_keyevent is flaky
    runtime(logindefs): update syntax with new keywords
  * 9.1.0570: tests: test_gettext_make can be improved
    runtime(filetype): Fix Prolog file detection regex
  * 9.1.0569: fnamemodify() treats ".." and "../" differently
    runtime(mojo): include mojo ftplugin and indent script
  * 9.1.0568: Cannot expand paths from 'cdpath' setting
  * 9.1.0567: Cannot use relative paths as findfile() stop directories
  * 9.1.0566: Stop dir in findfile() doesn't work properly w/o trailing slash
  * 9.1.0565: Stop directory doesn't work properly in 'tags'
  * 9.1.0564: id() can be faster
  * 9.1.0563: Cannot process any Key event
  * 9.1.0562: tests: inconsistency in test_findfile.vim
    runtime(fstab): Add missing keywords to fstab syntax
  * 9.1.0561: netbeans: variable used un-initialized (Coverity)
  * 9.1.0560: bindtextdomain() does not indicate an error
  * 9.1.0559: translation of vim scripts can be improved
  * 9.1.0558: filetype: prolog detection can be improved
  * 9.1.0557: moving in the buffer list doesn't work as documented
    runtime(doc): fix inconsistencies in :h file-searching
  * 9.1.0556: :bwipe doesn't remove file from jumplist of other tabpages
    runtime(htmlangular): correct comment
  * 9.1.0555: filetype: angular ft detection is still problematic
  * 9.1.0554: :bw leaves jumplist and tagstack data around
  * 9.1.0553: filetype: *.mcmeta files are not recognized
  * 9.1.0552: No test for antlr4 filetype
  * 9.1.0551: filetype: htmlangular files are not properly detected
  * 9.1.0550: filetype: antlr4 files are not recognized
  * 9.1.0549: fuzzycollect regex based completion not working as expected
    runtime(doc): autocmd_add() accepts a list not a dict
  * 9.1.0548: it's not possible to get a unique id for some vars
    runtime(tmux): Update syntax script
  * 9.1.0547: No way to get the arity of a Vim function
  * 9.1.0546: vim-tiny fails on CTRL-X/CTRL-A
    runtime(hlsplaylist): include hlsplaylist ftplugin file
    runtime(doc): fix typo in :h ft-csv-syntax
    runtime(doc): Correct shell command to get $VIMRUNTIME into
    shell
  * 9.1.0545: MSVC conversion warning
  * 9.1.0544: filetype: ldapconf files are not recognized
    runtime(cmakecache): include cmakecache ftplugin file
    runtime(lex): include lex ftplugin file
    runtime(yacc): include yacc ftplugin file
    runtime(squirrel): include squirrel ftplugin file
    runtime(objcpp): include objcpp ftplugin file
    runtime(tf): include tf ftplugin file
    runtime(mysql): include mysql ftplugin file
    runtime(javacc): include javacc ftplugin file
    runtime(cabal): include cabal ftplugin file
    runtime(cuda): include CUDA ftplugin file
    runtime(editorconfig): include editorconfig ftplugin file
    runtime(kivy): update kivy syntax, include ftplugin
    runtime(syntax-tests): Stop generating redundant "*_* 99.dump"
    files
  * 9.1.0543: Behavior of CursorMovedC is strange
    runtime(vim): Update base-syntax, improve :match command
    highlighting
  * 9.1.0542: Vim9: confusing string() output for object functions
  * 9.1.0541: failing test with Vim configured without channel
  * 9.1.0540: Unused assignment in sign_define_cmd()
    runtime(doc): add page-scrolling keys to index.txt
    runtime(doc): add reference to xterm-focus-event from
    FocusGained/Lost
  * 9.1.0539: Not enough tests for what v9.1.0535 fixed
    runtime(doc): clarify how to re-init csv syntax file
  * 9.1.0538: not possible to assign priority when defining a sign
  * 9.1.0537: signed number detection for CTRL-X/A can be improved
  * 9.1.0536: filetype: zone files are not recognized
  * 9.1.0535: newline escape wrong in ex mode
    runtime(man): honor cmd modifiers before `g:ft_man_open_mode`
    runtime(man): use `nnoremap` to map to Ex commands
  * 9.1.0534: completion wrong with fuzzy when cycling back to original
    runtime(syntax-tests): Abort and report failed cursor progress
    runtime(syntax-tests): Introduce self tests for screen dumping
    runtime(syntax-tests): Clear and redraw the ruler line with
    the shell info
    runtime(syntax-tests): Allow for folded and wrapped lines in
    syntax test files
  * 9.1.0533: Vim9: need more tests for nested objects equality
    CI: Pre-v* 9.0.0110 versions generate bogus documentation tag entries
    runtime(doc): Remove wrong help tag CTRL-SHIFT-CR
  * 9.1.0532: filetype: Cedar files not recognized
    runtime(doc): document further keys that scroll page up/down
  * 9.1.0531: resource leak in mch_get_random()
    runtime(tutor): Fix wrong spanish translation
    runtime(netrw): fix remaining case of register clobber
  * 9.1.0530: xxd: MSVC warning about non-ASCII character
  * 9.1.0529: silent! causes following try/catch to not work
    runtime(rust): use shiftwidth() in indent script
  * 9.1.0528: spell completion message still wrong in translations
  * 9.1.0527: inconsistent parameter in Makefiles for Vim executable
  * 9.1.0526: Unwanted cursor movement with pagescroll at start of buffer
    runtime(doc): mention $XDG_CONFIG_HOME instead of $HOME/.config
  * 9.1.0525: Right release selects immediately when pum is truncated.
  * 9.1.0524: the recursive parameter in the *_equal functions can be removed
    runtime(termdebug): Add Deprecation warnings
  * 9.1.0523: Vim9: cannot downcast an object
  * 9.1.0522: Vim9: string(object) hangs for recursive references
  * 9.1.0521: if_py: _PyObject_CallFunction_SizeT is dropped in Python 3.13
  * 9.1.0520: Vim9: incorrect type checking for modifying lists
    runtime(manpager): avoid readonly prompt
  * 9.1.0519: MS-Windows: libvterm compilation can be optimized
  * 9.1.0518: initialize the random buffer can be improved
  * 9.1.0517: MS-Windows: too long lines in Make_mvc.mak
    runtime(terraform): Add filetype plugin for terraform
    runtime(dockerfile): enable spellchecking of comments in
    syntax script
    runtime(doc): rename variable for pandoc markdown support
    runtime(doc): In builtin overview use {buf} as param for
    appendbufline/setbufline
    runtime(doc): clarify, that register 1-* 9 will always be shifted
    runtime(netrw): save and restore register 0-* 9, a and unnamed
    runtime(termdebug): Refactored StartDebug_term and EndDebug
    functions
    runtime(java): Compose "g:java_highlight_signature" and
    "g:java_highlight_functions"
  * 9.1.0516: need more tests for nested dicts and list comparision
  * 9.1.0515: Vim9: segfault in object_equal()
  * 9.1.0514: Vim9: issue with comparing objects recursively
    runtime(termdebug): Change some variables to Enums
    runtime(vim): Update base-syntax, fix function tail comments
  * 9.1.0513: Vim9: segfault with object comparison
- Update to 9.1.0512:
  * Mode message for spell completion doesn't match allowed keys
  * CursorMovedC triggered wrongly with setcmdpos()
  * update runtime files
  * CI: test_gettext fails on MacOS14 + MSVC Win
  * not possible to translate Vim script messages
  * termdebug plugin can be further improved
  * add gomod filetype plugin
  * hard to detect cursor movement in the command line
  * Optionally highlight parameterised types
  * filetype: .envrc &amp; .prettierignore not recognized
  * filetype: Faust files are not recognized
  * inner-tag textobject confused about "&gt;" in attributes
  * cannot use fuzzy keyword completion
  * Remove the group exclusion list from @javaTop
  * wrong return type for execute() function
  * MS-Windows: too much legacy code
  * too complicated mapping restore in termdebug
  * simplify mapping
  * cannot switch buffer in a popup
  * MS-Windows: doesn't handle symlinks properly
  * getcmdcompltype() interferes with cmdline completion
  * termdebug can be further improved
  * update htmldjango detection
  * Improve Turkish documentation
  * include a simple csv filetype and syntax plugin
  * include the the simple nohlsearch package
  * matched text is highlighted case-sensitively
  * Matched text isn't highlighted in cmdline pum
  * Fix typos in several documents
  * clarify when text properties are cleared
  * improve the vim-shebang example
  * revert unintended formatting changes for termdebug
  * Add a config variable for commonly used compiler options
  * Wrong matched text highlighted in pum with 'rightleft'
  * bump length of character references in syntax script
  * properly check mapping variables using null_dict
  * fix KdlIndent and kdlComment in indent script
  * Test for patch 9.1.0489 doesn't fail without the fix
  * Fold multi-line comments with the syntax kind of &amp;fdm
  * using wrong type for PlaceSign()
  * filetype: Vim-script files not detected by shebang line
  * revert unintended change to zip#Write()
  * add another tag for vim-shebang feature
  * Cmdline pum doesn't work properly with 'rightleft'
  * minor style problems with patch 9.1.0487
  * default completion may break with fuzzy
  * Wrong padding for pum "kind" with 'rightleft'
  * Update base-syntax, match shebang lines
  * MS-Windows: handle files with spaces properly
  * Restore HTML syntax file tests
  * completed item not update on fuzzy completion
  * filetype: Snakemake files are not recognized
  * make TermDebugSendCommand() a global function again
  * close all buffers in the same way
  * Matched text shouldn't be highlighted in "kind" and "menu"
  * fix wrong helptag for :defer
  * Update base-syntax, match :sleep arg
  * include Georgian keymap
  * Sorting of completeopt+=fuzzy is not stable
  * correctly test for windows in NetrwGlob()
  * glob() on windows fails with [] in directory name
  * rewrite mkdir() doc and simplify {flags} meaning
  * glob() not sufficiently tested
  * update return type for job_info()
  * termdebug plugin needs more love
  * correct return types for job_start() and job_status()
  * Update base-syntax, match :catch and :throw args
  * Include element values in non-marker annotations
  * Vim9: term_getjob() throws an exception on error
  * fuzzy string matching executed when not needed
  * fuzzy_match_str_with_pos() does unnecessary list operations
  * restore description of "$" in col() and virtcol()
  * deduplicate getpos(), line(), col(), virtcol()
  * Update g:vimsyn_comment_strings dump file tests
  * Use string interpolation instead of string concat
  * potential deref of NULL pointer in fuzzy_match_str_with_pos
  * block_editing errors out when using &lt;enter&gt;
  * Update base-syntax, configurable comment string highlighting
  * fix typos in syntax.txt
  * Cannot see matched text in popup menu
  * Update base-syntax, match multiline continued comments
  * clarify documentation for "v" position at line()
  * cmod_split modifier is always reset in term_start()
  * remove line-continuation characters
  * use shiftwidth() instead of &amp;tabstop in indent script
  * Remove orphaned screen dump files
  * include syntax, indent and ftplugin files
  * CI: Test_ColonEight() fails on github runners
  * add missing Enabled field in syntax script
  * basic svelte ftplugin file
  * term_start() does not clear vertical modifier
  * fix mousemodel restoration by comparing against null_string
  * Added definitions of Vim scripts and plugins
  * Exclude lambda expressions from _when_ _switch-case_ label clauses
  * Fix saved_mousemodel check
  * Inconsistencies between functions for option flags
  * Crash when using autocmd_get() after removing event inside autocmd
  * Fix small style issues
  * add return type info for Vim function descriptions
  * Update Italian Vim manpage
  * disable the q mapping
  * Change 'cms' for C++ to '// %s'
  * fix type mismatch error
  * Fix wrong email address
  * convert termdebug plugin to Vim9 script
- Update to 9.1.0470:
  * tests Test_ColonEight_MultiByte() fails sporadically
  * Cannot have buffer-local value for 'completeopt'
  * GvimExt does not consult HKEY_CURRENT_USER
  * typos in some comments
  * runtime(vim): Update base-syntax, allow whitespace before
    :substitute pattern
  * Missing comments for fuzzy completion
  * runtime(man): update Vim manpage
  * runtime(comment): clarify the usage of 'commentstring' option
    value
  * runtime(doc): clarify how fuzzy 'completeopt' should work
  * runtime(netrw): prevent accidental data loss
  * missing filecopy() function
  * no whitespace padding in commentstring option in ftplugins
  * no fuzzy-matching support for insert-completion
  * eval5() and eval7 are too complex
  * too many strlen() calls in drawline.c
  * filetype lintstagedrc files are not recognized
  * Vim9 import autoload does not work with symlink
  * Coverity complains about division by zero
  * tests test_gui fails on Wayland
  * Left shift is incorrect with vartabstop and shiftwidth=0
  * runtime(doc): clarify 'shortmess' flag "S"
  * MS-Windows compiler warning for size_t to int conversion
  * runtime(doc): include some vim9 script examples in the help
  * minor issues in test_filetype with rasi test
  * filetype rasi files are not recognized
  * runtime(java): Improve the matching of lambda expressions
  * Configure checks for libelf unnecessarily
  * No test for escaping '&lt;' with shellescape()
  * check.vim complains about overlong comment lines
  * translation(it): Update Italian translation
  * evalc. code too complex
  * MS-Windows Compiler warnings 
- Update to 9.1.0448:
  * compiler warning in eval.c
  * remove remaining css code
  * Add ft_hare.txt to Reference Manual TOC
  * re-generate vim syntax from generator
  * fix syntax vim bug
  * completion may be wrong when deleting all chars
  * getregionpos() inconsistent for partly-selected multibyte char
  * fix highlighting nested and escaped quotes in string props
  * remove the indent plugin since it has too many issues
  * update Debian runtime files
  * Coverity warning after 9.1.0440
  * Not enough tests for getregion() with multibyte chars
  * Can't use blockwise selection with width for getregion()
  * update outdated syntax files
  * fix floating_modifier highlight
  * hare runtime files outdated
  * getregionpos() can't properly indicate positions beyond eol
  * function get_lval() is too long
  * Cannot filter the history
  * Wrong Ex command executed when :g uses '?' as delimiter
  * support floating_modifier none; revert broken highlighting
  * Motif requires non-const char pointer for XPM  data
  * Crash when using '?' as separator for :s
  * filetype: cygport files are not recognized
  * make errors trying to access autoload/zig
  * Wrong yanking with exclusive selection and ve=all
  * add missing help tags file
  * Ancient XPM preprocessor hack may cause build errors
  * include basic rescript ftplugin file
  * eval.c is too long
  * getregionpos() doesn't handle one char selection
  * check for gdb file/dir before using as buffer name
  * refactor zig ftplugin, remove auto format
  * Coverity complains about eval.c refactor
  * Tag guessing leaves wrong search history with very short names
  * some issues with termdebug mapping test
  * update matchit plugin to v1.20
  * too many strlen() calls in search.c
  * set commentstring option
  * update vb indent plugin as vim9script
  * filetype: purescript files are not recognized
  * filetype: slint files are not recognized
  * basic nim ftplugin file for comments 
  * Add Arduino ftplugin and indent files 
  * include basic typst ftplugin file 
  * include basic prisma ftplugin file 
  * include basic v ftplugin for comment support 
  * getregionpos() wrong with blockwise mode and multibyte
  * function echo_string_core() is too long
  * hyprlang files are not recognized
  * add basic dart ftplugin file
  * basic ftplugin file for graphql
  * mention comment plugin at :h 'commentstring'
  * set commentstring for sql files in ftplugin
  * :browse oldfiles prompts even with single entry
  * eval.c not sufficiently tested
  * clarify why E195 is returned
  * clarify temporary file clean up
  * fix :NoMatchParen not working 
  * Cannot move to previous/next rare word
  * add basic ftplugin file for sshdconfig 
  * if_py: find_module has been removed in Python 3.12.0a7
  * some screen dump tests can be improved
  * Some functions are not tested
  * clarify instal instructions for comment package
  * Unable to leave long line with 'smoothscroll' and 'scrolloff'
  * fix typo in vim9script help file 
  * Remove trailing spaces 
  * clarify {special} argument for shellescape()

update to 9.1.0413:

 *  smoothscroll may cause infinite loop
 *  add missing entries for the keys CTRL-W g&lt;Tab&gt; and &lt;C-Tab&gt;
 *  update vi_diff.txt: add default value for 'flash'
 *  typo in regexp_bt.c in DEBUG code
 *  allow indented commands 
 *  Fix wrong define regex in ftplugin 
 *  Filter out non-Latin-1 characters for syntax tests 
 *  prefer scp over pscp
 *  fix typo in usr_52.txt
 *  too long functions in eval.c
 *  warning about uninitialized variable
 *  too many strlen() calls in the regexp engine
 *  E16 fix, async keyword support for define 
 *  Stuck with long line and half-page scrolling
 *  Divide by zero with getmousepos() and 'smoothscroll'
 *  update and remove  some invalid links
 *  update translation of xxd manpage
 *  Recursively delete directories by default with netrw delete command
 *  Strive to remain compatible for at least Vim 7.0 
 *  tests: xxd buffer overflow fails on 32-bit
 *  Stop handpicking syntax groups for @javaTop 
 *  [security] xxd: buffer-overflow with specific flags
 *  Vim9: not able to import file from start dir
 *  filetype: mdd files detected as zsh filetype
 *  filetype: zsh module files are not recognized
 *  Remove hardcoded private.ppk logic from netrw
 *  Vim9: confusing error message for unknown type
 *  block_editing errors out when using del
 *  add new items to scripts section in syntax plugin
 *  Vim9: imported vars are not properly type checked
 *  Wrong display with 'smoothscroll' when changing quickfix list
 *  filetype: jj files are not recognized
 *  getregionpos() may leak memory on error
 *  The CODEOWNERS File is not useful
 *  Remove and cleanup Win9x legacy from netrw
 *  add MsgArea to 'highlight' option description
 *  Cannot get a list of positions describing a region
 *  Fix digit separator in syntax script for octals and floats
 *  Update link to Wikipedia Vi page
 *  clear $MANPAGER in ftplugin before shelling out
 *  Fix typos in help documents
 *  'viewdir' not respecting $XDG_CONFIG_HOME
 *  tests: Vim9 debug tests may be flaky
 *  correct getscriptinfo() example 
 *  Vim9: could improve testing
 *  test_sound fails on macos-12 
 *  update Serbian menu
 *  update Slovak menu
 *  update Slovenian menu
 *  update Portuguese menu
 *  update Dutch menu
 *  update Korean menu
 *  update Icelandic menu
 *  update Czech menu
 *  update Afrikaans menu
 *  update German menu
 *  filetype: inko files are not recognized
 *  filetype: templ files are not recognized
 *  cursor() and getregion() don't handle v:maxcol well
 *  Vim9: null value tests not sufficient
 *  update Catalan menu
 *  filetype: stylus files not recognized
 *  update spanish menu localization
 *  regenerate helptags 
 *  Vim9: crash with null_class and null_object
 *  Add tags about lazyloading of menu 
 *  tests: vt420 terminfo entry may not be found
 *  filetype: .out files recognized as tex files
 *  filetype: Kbuild files are not recognized
 *  cbuffer and similar commands don't accept a range
 *  Improve the recognition of the "indent" method declarations 
 *  Fix a typo in usr_30.txt
 *  remove undefined var s:save_cpoptions and add include setting
 *  missing setlocal in indent plugin 
 *  Calculating line height for unnecessary amount of lines
 *  improve syntax file performance 
 *  There are a few typos
 *  Vim9: no comments allowed after class vars
 *  CI: remove trailing white space in documentation
 *  Formatting text wrong when 'breakindent' is set
 *  Add oracular (24.10) as Ubuntu release name
 *  Vim9: Trailing commands after class/enum keywords ignored
 *  tests: 1-second delay after Test_BufEnter_botline()
 *  update helptags for jq syntax 
 *  include syntax, ftplugin and compiler plugin
 *  fix typo synconcealend -&gt; synconcealed 
 *  include a simple comment toggling plugin
 *  wrong botline in BufEnter
 *  clarify syntax vs matching mechanism
 *  fix undefined variable in indent plugin
 *  ops.c code uses too many strlen() calls
 *  Calling CLEAR_FIELD() on the same struct twice
 *  Vim9: compile_def_function() still too long
 *  Update Serbian messages 
 *  clarify the effect of setting the shell to powershell
 *  Improve the recognition of the "style" method declarations
 *  Vim9: problem when importing autoloaded scripts
 *  compile_def_function is too long
 *  filetype: ondir files are not recognized
 *  Crash when typing many keys with D- modifier
 *  tests: test_vim9_builtin is a bit slow
 *  update documentation
 *  change the download URL of "libsodium" 
 *  tests: test_winfixbuf is a bit slow
 *  Add filetype, syntax and indent plugin for Astro
 *  expanding rc config files does not work well
 *  Vim9: vim9type.c is too complicated
 *  Vim9: does not handle autoloaded variables well
 *  minor spell fix in starting.txt
 *  wrong drawing in GUI with setcellwidth()
 *  Add include and suffixesadd
 *  Page scrolling should place cursor at window boundaries
 *  align command line table
 *  minor fixes to starting.txt
 *  fix comment definition in filetype plugin 
 *  filetype: flake.lock files are not recognized
 *  runtime(uci): No support for uci file types
 *  Support "g:ftplugin_java_source_path" with archived files
 *  tests: Test_autoload_import_relative_compiled fails on Windows
 *  Finding cmd modifiers and cmdline-specials is inefficient
 *  No test that completing a partial mapping clears 'showcmd'
 *  tests: test_vim9_dissamble may fail
 *  Vim9: need static type for typealias
 *  X11 does not ignore smooth scroll event
 *  A few typos in test_xdg when testing gvimrc
 *  Patch v9.1.0338 fixed sourcing a script with import
 *  Problem: gvimrc not sourced from XDG_CONFIG_HOME
 *  Cursor wrong after using setcellwidth() in terminal
 *  'showcmd' wrong for partial mapping with multibyte
 *  tests: test_taglist fails when 'helplang' contains non-english
 *  Problem: a few memory leaks are found
 *  Problem: Error with matchaddpos() and empty list
 *  tests: xdg test uses screen dumps
 *  Vim9: import through symlinks not correctly handled
 *  Missing entry for XDG vimrc file in :version
 *  tests: typo in test_xdg
 *  runtime(i3config/swayconfig): update syntax scripts
 *  document pandoc compiler and enable configuring arguments
 *  String interpolation fails for List type
 *  No test for highlight behavior with 'ambiwidth'
 *  tests: test_xdg fails on the appimage repo
 *  tests: some assert_equal() calls have wrong order of args
 *  make install does not install all files
 *  runtime(doc): fix typos in starting.txt
- Updated to version 9.1 with patch level 0330, fixes the following problems
  * Fixing bsc#1220763 - vim gets Segmentation fault after updating to version 9.1.0111-150500.20.9.1

For the complete list of changes see https://github.com/vim/vim/compare/v9.1.0111...v9.1.0330
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.1.1101" release="1.1" arch="src" src="src/vim-9.1.1101-1.1.src.rpm">
          <filename>vim-9.1.1101-1.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.1.1101" release="1.1" arch="noarch" src="noarch/vim-data-common-9.1.1101-1.1.noarch.rpm">
          <filename>vim-data-common-9.1.1101-1.1.noarch.rpm</filename>
        </package>
        <package name="vim-debugsource" epoch="0" version="9.1.1101" release="1.1" arch="x86_64" src="x86_64/vim-debugsource-9.1.1101-1.1.x86_64.rpm">
          <filename>vim-debugsource-9.1.1101-1.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.1.1101" release="1.1" arch="x86_64" src="x86_64/vim-small-9.1.1101-1.1.x86_64.rpm">
          <filename>vim-small-9.1.1101-1.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small-debuginfo" epoch="0" version="9.1.1101" release="1.1" arch="x86_64" src="x86_64/vim-small-debuginfo-9.1.1101-1.1.x86_64.rpm">
          <filename>vim-small-debuginfo-9.1.1101-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>257</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1742818539" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237096" id="1237096" title="VUL-0: ucode-intel: 20250211 release" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31068" id="CVE-2024-31068" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-31068" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36293" id="CVE-2024-36293" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36293" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37020" id="CVE-2024-37020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37020" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39355" id="CVE-2024-39355" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39355" type="cve" />
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Intel CPU Microcode was updated to the 20250211 release (bsc#1237096)

  - Security updates for INTEL-SA-01166
    https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html

    * CVE-2024-31068: Improper Finite State Machines (FSMs) in Hardware
      Logic for some Intel Processors may allow privileged user to
      potentially enable denial of service via local access.

  - Security updates for INTEL-SA-01213
    https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html

    * CVE-2024-36293: A potential security vulnerability in some Intel
      Software Guard Extensions (Intel SGX) Platforms may allow denial
      of service. Intel is releasing microcode updates to mitigate this
    potential vulnerability.

  - Security updates for INTEL-SA-01139
    https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html

    * not clear which CVEs are fixed here, and which are in UEFI BIOS updates.

  - Security updates for INTEL-SA-01228
    https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01228.html

    * CVE-2024-39355: A potential security vulnerability in some
      13th and 14th Generation Intel Core Processors may allow denial
      of service. Intel is releasing microcode and UEFI reference code
      updates to mitigate this potential vulnerability.

  - Security updates for INTEL-SA-01194
    https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01194.html

    * CVE-2024-37020: A potential security vulnerability in the Intel
      Data Streaming Accelerator (Intel DSA) for some Intel Xeon Processors
      may allow denial of service. Intel is releasing software updates to
      mitigate this potential vulnerability.
  - Update for functional issues. Refer to Intel Core Ultra Processor
    https://cdrdv2.intel.com/v1/dl/getContent/792254 for details.
  - Update for functional issues. Refer to 13th/14th
    Generation Intel Core Processor Specification Update
    https://cdrdv2.intel.com/v1/dl/getContent/740518 for details.
  - Update for functional issues. Refer to 12th Generation Intel Core
    Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436
    for details.
  - Update for functional issues. Refer to 11th Gen Intel Core Processor
    Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123
    for details.
  - Update for functional issues. Refer to 8th and 9th
    Generation Intel Core Processor Family Spec Update
    https://cdrdv2.intel.com/v1/dl/getContent/337346 for details.
  - Update for functional issues. Refer to 5th Gen
    Intel Xeon Scalable Processors Specification Update
    https://cdrdv2.intel.com/v1/dl/getContent/793902 for details.
  - Update for functional issues. Refer to 4th Gen
    Intel Xeon Scalable Processors Specification Update
    https://cdrdv2.intel.com/v1/dl/getContent/772415 for details.
  - Update for functional issues. Refer to 3rd Generation
    Intel Xeon Processor Scalable Family Specification Update
    https://cdrdv2.intel.com/v1/dl/getContent/637780 for details.
  - Update for functional issues. Refer to Intel Xeon D-2700 Processor
    Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071
    for details.
  - Update for functional issues. Refer to Intel Xeon E-2300 Processor
    Specification Update https://cdrdv2.intel.com/v1/dl/getContent/709192
    for details.
  - Update for functional issues. Refer to Intel
    Xeon 6700-Series Processor Specification Update
    https://cdrdv2.intel.com/v1/dl/getContent/820922 for details.
  - Update for functional issues. Refer to Intel Processors and Intel Core
    i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616 for details

  ### New Platforms

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SRF-SP         | C0       | 06-af-03/01 |          | 03000330 |
    Xeon 6700-Series Processors with E-Cores

  ### Updated Platforms

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000037 | 00000038 | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 00000037 | 00000038 | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000435 | 00000436 | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 00000435 | 00000436 | Core Gen12
  | ADL-N          | N0       | 06-be-00/19 | 0000001a | 0000001c |
    Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E
  | AZB            | A0/R0    | 06-9a-04/40 | 00000007 | 00000009 | Intel(R) Atom(R) C1100
  | CFL-H          | R0       | 06-9e-0d/22 | 00000100 | 00000102 | Core Gen9 Mobile
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000f8 | 000000fa |
    Core Gen8 Desktop, Mobile, Xeon E
  | EMR-SP         | A0       | 06-cf-01/87 | 21000283 | 21000291 | Xeon Scalable Gen5
  | EMR-SP         | A1       | 06-cf-02/87 | 21000283 | 21000291 | Xeon Scalable Gen5
  | ICL-D          | B0       | 06-6c-01/10 | 010002b0 | 010002c0 | Xeon D-17xx, D-27xx
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003e7 | 0d0003f5 | Xeon Scalable Gen3
  | RPL-E/HX/S     | B0       | 06-b7-01/32 | 0000012b | 0000012c | Core Gen13/Gen14
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004123 | 00004124 | Core Gen13
  | RPL-HX/S       | C0       | 06-bf-02/07 | 00000037 | 00000038 | Core Gen13/Gen14
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004123 | 00004124 | Core Gen13
  | RPL-S          | H0       | 06-bf-05/07 | 00000037 | 00000038 | Core Gen13/Gen14
  | RKL-S          | B0       | 06-a7-01/02 | 00000062 | 00000063 | Core Gen11
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c000390 | 2c0003e0 | Xeon Max
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000603 | 2b000620 | Xeon Scalable Gen4 
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000603 | 2b000620 | Xeon Scalable Gen4
  | TWL            | N0       | 06-be-00/19 | 0000001a | 0000001c |
    Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E

  ### New Disclosures Updated in Prior Releases

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000f6 | 000000f8 | Core Gen9

</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20250211" release="1.1" arch="src" src="src/ucode-intel-20250211-1.1.src.rpm">
          <filename>ucode-intel-20250211-1.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-intel" epoch="0" version="20250211" release="1.1" arch="x86_64" src="x86_64/ucode-intel-20250211-1.1.x86_64.rpm">
          <filename>ucode-intel-20250211-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>219</id>
    <title>Security update for pam_pkcs11</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1740576213" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236314" id="1236314" title="VUL-0: CVE-2025-24531: pam_pkcs11: version 0.6.12 has a regression returning PAM_IGNORE in many situations with possible authentication bypass" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24531" id="CVE-2025-24531" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24531" type="cve" />
    </references>
    <description>This update for pam_pkcs11 fixes the following issues:

- CVE-2025-24531: Fixed regression in version 0.6.12 returning PAM_IGNORE in many situations with possible authentication bypass (bsc#1236314).
</description>
    <pkglist>
      <collection>
        <package name="pam_pkcs11" epoch="0" version="0.6.12" release="2.1" arch="src" src="src/pam_pkcs11-0.6.12-2.1.src.rpm">
          <filename>pam_pkcs11-0.6.12-2.1.src.rpm</filename>
        </package>
        <package name="pam_pkcs11" epoch="0" version="0.6.12" release="2.1" arch="x86_64" src="x86_64/pam_pkcs11-0.6.12-2.1.x86_64.rpm">
          <filename>pam_pkcs11-0.6.12-2.1.x86_64.rpm</filename>
        </package>
        <package name="pam_pkcs11-debuginfo" epoch="0" version="0.6.12" release="2.1" arch="x86_64" src="x86_64/pam_pkcs11-debuginfo-0.6.12-2.1.x86_64.rpm">
          <filename>pam_pkcs11-debuginfo-0.6.12-2.1.x86_64.rpm</filename>
        </package>
        <package name="pam_pkcs11-debugsource" epoch="0" version="0.6.12" release="2.1" arch="x86_64" src="x86_64/pam_pkcs11-debugsource-0.6.12-2.1.x86_64.rpm">
          <filename>pam_pkcs11-debugsource-0.6.12-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>261</id>
    <title>Recommended update for supportutils</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1742894785" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213291" id="1213291" title="L3-Question: detect and verify the origin of BPF programs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220082" id="1220082" title="supportconfig: lvm.txt shows: File descriptor 4 (/dev/null) leaked on lvs invocation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222021" id="1222021" title="Add capability in supportconfig to insert keyword/value pairs into the summary.xml file from a command line option" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222896" id="1222896" title="Detect and verify the origin of BPF programs (Feature Request PED-8221)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227127" id="1227127" title="supportconfig: file sanitizing improvement request for boot.txt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228265" id="1228265" title="Request to add &quot;read_values -s&quot; output to supportconfig on s390x" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231396" id="1231396" title="supportconfig: Display issues" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231423" id="1231423" title="supportconfig: NFS takes too long, showmount times out" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233726" id="1233726" title="supportconfig: Factory version is the same for sles 15 sp6 and above" type="bugzilla" />
      <reference href="https://jira.suse.com/browse/PED-8211" id="PED-8211" title="https://jira.suse.com/browse/PED-8211" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-8221" id="PED-8221" title="https://jira.suse.com/browse/PED-8221" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-11669" id="PED-11669" title="https://jira.suse.com/browse/PED-11669" type="jira" />
    </references>
    <description>This update for supportutils fixes the following issues:

- Changes to version 3.2.9
  + Map running PIDs to RPM package owner aiding BPF program detection (bsc#1222896, bsc#1213291,jsc#PED-8221)
  + Supportconfig available in current distro (PED-7131)
  + Corrected display issues (bsc#1231396)
  + NFS takes too long, showmount times out (bsc#1231423)
  + Merged sle15 and master branches (bsc#1233726, jsc#PED-11669)
- Changes to version 3.2.8
  + Update supportconfig get pam.d sorted
  + yast_files: Exclude .zcat
  + Sanitize grub bootloader (bsc#1227127)
  + Sanitize regcodes
  + Improve product detection
  + Add read_values for s390x (bsc#1228265,)
  + hardware_info: Remove old alsa ver check
  + drbd_info: Fix incorrect escape of quotes
- Changes in version 3.1.30
  + Added -V key:value pair option (bsc#1222021,jsc#PED-8211)
  + Avoid getting duplicate kernel verifications in boot.text
  + Suppress file descriptor leak warnings from lvm commands (bsc#1220082)
  + Includes container log timestamps
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.2.9" release="1.1" arch="noarch" src="noarch/supportutils-3.2.9-1.1.noarch.rpm">
          <filename>supportutils-3.2.9-1.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.2.9" release="1.1" arch="src" src="src/supportutils-3.2.9-1.1.src.rpm">
          <filename>supportutils-3.2.9-1.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>242</id>
    <title>Recommended update for dmidecode</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1741933862" />
    <references>
      <reference href="https://jira.suse.com/browse/PED-8647" id="PED-8647" title="https://jira.suse.com/browse/PED-8647" type="jira" />
    </references>
    <description>This update for dmidecode fixes the following issues:

- Update to version 3.6 (jsc#PED-8647):
  * Support for SMBIOS 3.6.0. This includes new memory device types, new
    processor upgrades, and Loongarch support.
  * Support for SMBIOS 3.7.0. This includes new port types, new processor
    upgrades, new slot characteristics and new fields for memory modules.
  * Added bash completion.
  * Decode HPE OEM records 197, 239 and 245.
  * Implement options --list-strings and --list-types.
  * Update HPE OEM records 203, 212, 216, 221, 233, 236, 238 and 242.
  * Update Redfish support.
  * Bug fixes:
    Fix enabled slot characteristics not being printed
  * Minor improvements:
    Print slot width on its own line
    Use standard strings for slot width

- Update for HPE servers from upstream:
  * Decode PCI bus segment in HPE type 238 records.

</description>
    <pkglist>
      <collection>
        <package name="dmidecode" epoch="0" version="3.6" release="1.1" arch="src" src="src/dmidecode-3.6-1.1.src.rpm">
          <filename>dmidecode-3.6-1.1.src.rpm</filename>
        </package>
        <package name="dmidecode" epoch="0" version="3.6" release="1.1" arch="x86_64" src="x86_64/dmidecode-3.6-1.1.x86_64.rpm">
          <filename>dmidecode-3.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="dmidecode-debuginfo" epoch="0" version="3.6" release="1.1" arch="x86_64" src="x86_64/dmidecode-debuginfo-3.6-1.1.x86_64.rpm">
          <filename>dmidecode-debuginfo-3.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="dmidecode-debugsource" epoch="0" version="3.6" release="1.1" arch="x86_64" src="x86_64/dmidecode-debugsource-3.6-1.1.x86_64.rpm">
          <filename>dmidecode-debugsource-3.6-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>225</id>
    <title>Security update for pcr-oracle, shim</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1741361499" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215098" id="1215098" title="VUL-0: CVE-2023-40547: shim: trusting http headers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215099" id="1215099" title="VUL-0: CVE-2023-40546: shim: format specifier issues when calling LogError" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215100" id="1215100" title="VUL-0: CVE-2023-40548: shim: Fix integer overflow on SBAT section size on 32-bit system" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215101" id="1215101" title="VUL-0: CVE-2023-40549: shim: Authenticode: verify that the signature header is in bounds." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215102" id="1215102" title="VUL-0: CVE-2023-40550: shim: pe: Fix an out-of-bound read in verify_buffer_sbat()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215103" id="1215103" title="VUL-0: CVE-2023-40551: shim: pe-relocate: Fix bounds check for MZ binaries" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230316" id="1230316" title="[Build X.27.17] shim 15.8 upgrade  breaks encrypted boot" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40546" id="CVE-2023-40546" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40546" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40547" id="CVE-2023-40547" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40547" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40548" id="CVE-2023-40548" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40548" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40549" id="CVE-2023-40549" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40549" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40550" id="CVE-2023-40550" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40550" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40551" id="CVE-2023-40551" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40551" type="cve" />
    </references>
    <description>This update for pcr-oracle, shim fixes the following issues:

pcr-oracle:

- predict SbatLevelRT for the next boot (bsc#1230316)

shim was updated to version 15.8:

- Update shim-install to use the 'removable' way for encrypted
  SL-Micro images (bsc#1230316)
  * Always use the removable way for SL-Micro
  * Limit the removable option to encrypted SL-Micro


Security issues fixed:

- mok: fix LogError() invocation (bsc#1215099,CVE-2023-40546)
- avoid incorrectly trusting HTTP headers (bsc#1215098,CVE-2023-40547)
- Fix integer overflow on SBAT section size on 32-bit system (bsc#1215100,CVE-2023-40548)
- Authenticode: verify that the signature header is in bounds (bsc#1215101,CVE-2023-40549)
- pe: Fix an out-of-bound read in verify_buffer_sbat() (bsc#1215102,CVE-2023-40550)
- pe-relocate: Fix bounds check for MZ binaries (bsc#1215103,CVE-2023-40551)


</description>
    <pkglist>
      <collection>
        <package name="pcr-oracle" epoch="0" version="0.4.6" release="2.1" arch="src" src="src/pcr-oracle-0.4.6-2.1.src.rpm">
          <filename>pcr-oracle-0.4.6-2.1.src.rpm</filename>
        </package>
        <package name="pcr-oracle" epoch="0" version="0.4.6" release="2.1" arch="x86_64" src="x86_64/pcr-oracle-0.4.6-2.1.x86_64.rpm">
          <filename>pcr-oracle-0.4.6-2.1.x86_64.rpm</filename>
        </package>
        <package name="pcr-oracle-debuginfo" epoch="0" version="0.4.6" release="2.1" arch="x86_64" src="x86_64/pcr-oracle-debuginfo-0.4.6-2.1.x86_64.rpm">
          <filename>pcr-oracle-debuginfo-0.4.6-2.1.x86_64.rpm</filename>
        </package>
        <package name="pcr-oracle-debugsource" epoch="0" version="0.4.6" release="2.1" arch="x86_64" src="x86_64/pcr-oracle-debugsource-0.4.6-2.1.x86_64.rpm">
          <filename>pcr-oracle-debugsource-0.4.6-2.1.x86_64.rpm</filename>
        </package>
        <package name="shim" epoch="0" version="15.8" release="1.1" arch="src" src="src/shim-15.8-1.1.src.rpm">
          <filename>shim-15.8-1.1.src.rpm</filename>
        </package>
        <package name="shim" epoch="0" version="15.8" release="1.1" arch="x86_64" src="x86_64/shim-15.8-1.1.x86_64.rpm">
          <filename>shim-15.8-1.1.x86_64.rpm</filename>
        </package>
        <package name="shim-debuginfo" epoch="0" version="15.8" release="1.1" arch="x86_64" src="x86_64/shim-debuginfo-15.8-1.1.x86_64.rpm">
          <filename>shim-debuginfo-15.8-1.1.x86_64.rpm</filename>
        </package>
        <package name="shim-debugsource" epoch="0" version="15.8" release="1.1" arch="x86_64" src="x86_64/shim-debugsource-15.8-1.1.x86_64.rpm">
          <filename>shim-debugsource-15.8-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>258</id>
    <title>Recommended update for transactional-update</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1742870164" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230537" id="1230537" title="Improve setting  of custom crashkernel memory on s390x/ppc64le by transactional-update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230901" id="1230901" title="[Build 20.3] openQA test fails in suseconnect_scc - transactional_update reports 0 even if underlying command failed" type="bugzilla" />
    </references>
    <description>This update for transactional-update fixes the following issues:

- Version update from 4.8.1 to 4.8.3:
  * Check return value of register command (bsc#1230901)
  * Allow specifying only low value with setup-kdump (bsc#1230537)

</description>
    <pkglist>
      <collection>
        <package name="dracut-transactional-update" epoch="0" version="4.8.3" release="1.1" arch="noarch" src="noarch/dracut-transactional-update-4.8.3-1.1.noarch.rpm">
          <filename>dracut-transactional-update-4.8.3-1.1.noarch.rpm</filename>
        </package>
        <package name="libtukit4" epoch="0" version="4.8.3" release="1.1" arch="x86_64" src="x86_64/libtukit4-4.8.3-1.1.x86_64.rpm">
          <filename>libtukit4-4.8.3-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtukit4-debuginfo" epoch="0" version="4.8.3" release="1.1" arch="x86_64" src="x86_64/libtukit4-debuginfo-4.8.3-1.1.x86_64.rpm">
          <filename>libtukit4-debuginfo-4.8.3-1.1.x86_64.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.8.3" release="1.1" arch="src" src="src/transactional-update-4.8.3-1.1.src.rpm">
          <filename>transactional-update-4.8.3-1.1.src.rpm</filename>
        </package>
        <package name="transactional-update" epoch="0" version="4.8.3" release="1.1" arch="x86_64" src="x86_64/transactional-update-4.8.3-1.1.x86_64.rpm">
          <filename>transactional-update-4.8.3-1.1.x86_64.rpm</filename>
        </package>
        <package name="transactional-update-debuginfo" epoch="0" version="4.8.3" release="1.1" arch="x86_64" src="x86_64/transactional-update-debuginfo-4.8.3-1.1.x86_64.rpm">
          <filename>transactional-update-debuginfo-4.8.3-1.1.x86_64.rpm</filename>
        </package>
        <package name="transactional-update-debugsource" epoch="0" version="4.8.3" release="1.1" arch="x86_64" src="x86_64/transactional-update-debugsource-4.8.3-1.1.x86_64.rpm">
          <filename>transactional-update-debugsource-4.8.3-1.1.x86_64.rpm</filename>
        </package>
        <package name="transactional-update-zypp-config" epoch="0" version="4.8.3" release="1.1" arch="noarch" src="noarch/transactional-update-zypp-config-4.8.3-1.1.noarch.rpm">
          <filename>transactional-update-zypp-config-4.8.3-1.1.noarch.rpm</filename>
        </package>
        <package name="tukit" epoch="0" version="4.8.3" release="1.1" arch="x86_64" src="x86_64/tukit-4.8.3-1.1.x86_64.rpm">
          <filename>tukit-4.8.3-1.1.x86_64.rpm</filename>
        </package>
        <package name="tukit-debuginfo" epoch="0" version="4.8.3" release="1.1" arch="x86_64" src="x86_64/tukit-debuginfo-4.8.3-1.1.x86_64.rpm">
          <filename>tukit-debuginfo-4.8.3-1.1.x86_64.rpm</filename>
        </package>
        <package name="tukitd" epoch="0" version="4.8.3" release="1.1" arch="x86_64" src="x86_64/tukitd-4.8.3-1.1.x86_64.rpm">
          <filename>tukitd-4.8.3-1.1.x86_64.rpm</filename>
        </package>
        <package name="tukitd-debuginfo" epoch="0" version="4.8.3" release="1.1" arch="x86_64" src="x86_64/tukitd-debuginfo-4.8.3-1.1.x86_64.rpm">
          <filename>tukitd-debuginfo-4.8.3-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>259</id>
    <title>Security update for openssh</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1742893363" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227456" id="1227456" title="install with Common Criteria role gives error after packages install step" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1186673" id="1186673" title="CC: openssh is not always clearing keys" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213004" id="1213004" title="SSH session keys not deleted after session ends" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1213008" id="1213008" title="CC: openssh is not always clearing keys" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229010" id="1229010" title="MFA message w/out prompt fails to display via ssh" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229072" id="1229072" title="[SELinux] mls policy: check if we need the ssh-keycat patch" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229449" id="1229449" title="ssh x11 forwarding unusably slow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221063" id="1221063" title="[SLES15 SP6][openssh] openssh-server force reinstall resets sshd_config to default" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221928" id="1221928" title="[SECURITY][FIPS][CC] SUSE servers unreachable over SSH if using Common Criteria role" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222840" id="1222840" title="VUL-0: openssh: bug in openssh-8.0p1-gssapi-keyex.patch" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225904" id="1225904" title="Package openssh does not build with gcc14 because of new errors" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236826" id="1236826" title="L3: SSH client segfaults in ssh_kex2() — ref:_00D1igLOd._500TrSpsZM:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237040" id="1237040" title="VUL-0: CVE-2025-26465: openssh,openssh8.4: MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237041" id="1237041" title="VUL-0: CVE-2025-26466: openssh,openssh8.4: DoS attack against OpenSSH's client and server" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26465" id="CVE-2025-26465" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26465" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26466" id="CVE-2025-26466" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26466" type="cve" />
    </references>
    <description>This update for openssh fixes the following issues:

- CVE-2025-26465: Fixed MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client (bsc#1237040).
- CVE-2025-26466: Fixed DoS attack against OpenSSH's client and server (bsc#1237041).

Other bugfixes:

- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2 due to gssapi proposal not being correctly initialized (bsc#1236826). 
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to fix build with gcc14 (bsc#1225904).
- Added missing struct initializer, added missing parameter (bsc#1222840).
- Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream (bsc#1221928). 
- Use %config(noreplace) for sshd_config. In any case, it's recommended to drop a file in sshd_config.d instead of editing sshd_config (bsc#1221063).
- Add a patch to fix a regression introduced in 9.6 that makes X11 forwarding very slow (bsc#1229449).
- Drop keycat binary that is not supported, except of the code that is used by other SELinux patches (bsc#1229072).
- Fix RFC4256 implementation that keyboard-interactive authentication method can send instructions and sshd shows them to users (bsc#1229010).
- Add attempts to mitigate instances of secrets lingering in memory after a session exits (bsc#1186673, bsc#1213004, bsc#1213008).
- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="9.6p1" release="3.1" arch="src" src="src/openssh-9.6p1-3.1.src.rpm">
          <filename>openssh-9.6p1-3.1.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="9.6p1" release="3.1" arch="x86_64" src="x86_64/openssh-9.6p1-3.1.x86_64.rpm">
          <filename>openssh-9.6p1-3.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="9.6p1" release="3.1" arch="x86_64" src="x86_64/openssh-clients-9.6p1-3.1.x86_64.rpm">
          <filename>openssh-clients-9.6p1-3.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients-debuginfo" epoch="0" version="9.6p1" release="3.1" arch="x86_64" src="x86_64/openssh-clients-debuginfo-9.6p1-3.1.x86_64.rpm">
          <filename>openssh-clients-debuginfo-9.6p1-3.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="9.6p1" release="3.1" arch="x86_64" src="x86_64/openssh-common-9.6p1-3.1.x86_64.rpm">
          <filename>openssh-common-9.6p1-3.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common-debuginfo" epoch="0" version="9.6p1" release="3.1" arch="x86_64" src="x86_64/openssh-common-debuginfo-9.6p1-3.1.x86_64.rpm">
          <filename>openssh-common-debuginfo-9.6p1-3.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-debuginfo" epoch="0" version="9.6p1" release="3.1" arch="x86_64" src="x86_64/openssh-debuginfo-9.6p1-3.1.x86_64.rpm">
          <filename>openssh-debuginfo-9.6p1-3.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-debugsource" epoch="0" version="9.6p1" release="3.1" arch="x86_64" src="x86_64/openssh-debugsource-9.6p1-3.1.x86_64.rpm">
          <filename>openssh-debugsource-9.6p1-3.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="9.6p1" release="3.1" arch="x86_64" src="x86_64/openssh-fips-9.6p1-3.1.x86_64.rpm">
          <filename>openssh-fips-9.6p1-3.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="9.6p1" release="3.1" arch="x86_64" src="x86_64/openssh-server-9.6p1-3.1.x86_64.rpm">
          <filename>openssh-server-9.6p1-3.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server-config-rootlogin" epoch="0" version="9.6p1" release="3.1" arch="x86_64" src="x86_64/openssh-server-config-rootlogin-9.6p1-3.1.x86_64.rpm">
          <filename>openssh-server-config-rootlogin-9.6p1-3.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server-debuginfo" epoch="0" version="9.6p1" release="3.1" arch="x86_64" src="x86_64/openssh-server-debuginfo-9.6p1-3.1.x86_64.rpm">
          <filename>openssh-server-debuginfo-9.6p1-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>260</id>
    <title>Security update for libX11</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1742894024" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237431" id="1237431" title="VUL-0: CVE-2025-26597: xorg-x11-server,xwayland,libX11: Buffer overflow in XkbChangeTypesOfKey()" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26597" id="CVE-2025-26597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26597" type="cve" />
    </references>
    <description>This update for libX11 fixes the following issues:

- CVE-2025-26597: Fixed buffer overflow in XkbChangeTypesOfKey() (bsc#1237431).
</description>
    <pkglist>
      <collection>
        <package name="libX11" epoch="0" version="1.8.7" release="3.1" arch="src" src="src/libX11-1.8.7-3.1.src.rpm">
          <filename>libX11-1.8.7-3.1.src.rpm</filename>
        </package>
        <package name="libX11-6" epoch="0" version="1.8.7" release="3.1" arch="x86_64" src="x86_64/libX11-6-1.8.7-3.1.x86_64.rpm">
          <filename>libX11-6-1.8.7-3.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-6-debuginfo" epoch="0" version="1.8.7" release="3.1" arch="x86_64" src="x86_64/libX11-6-debuginfo-1.8.7-3.1.x86_64.rpm">
          <filename>libX11-6-debuginfo-1.8.7-3.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-data" epoch="0" version="1.8.7" release="3.1" arch="noarch" src="noarch/libX11-data-1.8.7-3.1.noarch.rpm">
          <filename>libX11-data-1.8.7-3.1.noarch.rpm</filename>
        </package>
        <package name="libX11-debugsource" epoch="0" version="1.8.7" release="3.1" arch="x86_64" src="x86_64/libX11-debugsource-1.8.7-3.1.x86_64.rpm">
          <filename>libX11-debugsource-1.8.7-3.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-xcb1" epoch="0" version="1.8.7" release="3.1" arch="x86_64" src="x86_64/libX11-xcb1-1.8.7-3.1.x86_64.rpm">
          <filename>libX11-xcb1-1.8.7-3.1.x86_64.rpm</filename>
        </package>
        <package name="libX11-xcb1-debuginfo" epoch="0" version="1.8.7" release="3.1" arch="x86_64" src="x86_64/libX11-xcb1-debuginfo-1.8.7-3.1.x86_64.rpm">
          <filename>libX11-xcb1-debuginfo-1.8.7-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>238</id>
    <title>Security update for podman</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1741775531" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227052" id="1227052" title="VUL-0: CVE-2024-6104: podman: hashicorp/go-retryablehttp: url might write sensitive information to log file" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236270" id="1236270" title="VUL-0: CVE-2024-11218: podman: github.com/containers/buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236507" id="1236507" title="VUL-0: CVE-2023-45288: podman: golang.org/x/net/http2: close connections when receiving too many headers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237641" id="1237641" title="VUL-0: CVE-2025-27144: podman: gopkg.in/square/go-jose.v2,gopkg.in/go-jose/go-jose.v2,github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288" id="CVE-2023-45288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104" id="CVE-2024-6104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9407" id="CVE-2024-9407" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9407" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11218" id="CVE-2024-11218" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11218" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27144" id="CVE-2025-27144" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27144" type="cve" />
    </references>
    <description>This update for podman fixes the following issues:

- CVE-2025-27144: Fixed gopkg.in/square/go-jose.v2,gopkg.in/go-jose/go-jose.v2,github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237641):
- CVE-2024-11218: Fixed github.com/containers/buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile  (bsc#1236270):
- CVE-2023-45288: Fixed golang.org/x/net/http2: close connections when receiving too many headers (bsc#1236507):
- CVE-2024-6104: Fixed hashicorp/go-retryablehttp: url might write sensitive information to log file  (bsc#1227052):

</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.9.5" release="3.1" arch="src" src="src/podman-4.9.5-3.1.src.rpm">
          <filename>podman-4.9.5-3.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="3.1" arch="x86_64" src="x86_64/podman-4.9.5-3.1.x86_64.rpm">
          <filename>podman-4.9.5-3.1.x86_64.rpm</filename>
        </package>
        <package name="podman-debuginfo" epoch="0" version="4.9.5" release="3.1" arch="x86_64" src="x86_64/podman-debuginfo-4.9.5-3.1.x86_64.rpm">
          <filename>podman-debuginfo-4.9.5-3.1.x86_64.rpm</filename>
        </package>
        <package name="podman-docker" epoch="0" version="4.9.5" release="3.1" arch="noarch" src="noarch/podman-docker-4.9.5-3.1.noarch.rpm">
          <filename>podman-docker-4.9.5-3.1.noarch.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="3.1" arch="x86_64" src="x86_64/podman-remote-4.9.5-3.1.x86_64.rpm">
          <filename>podman-remote-4.9.5-3.1.x86_64.rpm</filename>
        </package>
        <package name="podman-remote-debuginfo" epoch="0" version="4.9.5" release="3.1" arch="x86_64" src="x86_64/podman-remote-debuginfo-4.9.5-3.1.x86_64.rpm">
          <filename>podman-remote-debuginfo-4.9.5-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>267</id>
    <title>Recommended update for python-kiwi</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1743503192" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214824" id="1214824" title="SelfInstall not possible via serial terminal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221469" id="1221469" title="grub2-zipl-setup fails on non-CDL s390x images due to config left by kiwi" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221790" id="1221790" title="[vmware] Image file mismatch between .vmx and .vmdk filename, supplied VMware settings wrong" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223374" id="1223374" title="[SLEM][6.0][Build10.5][SelfInstall] Installer lists hard disks out starting from /dev/sdb instead of /dev/sda" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224389" id="1224389" title="L3-Question: 15sp5 kiwi build will not extend partition to fill disk  ref:_00D1igLOd._500Tr8lkFh:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228118" id="1228118" title="sle micro 5.3 + 5.4 do not boot after dracut --force --regenerate-all is called by transactional-update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228729" id="1228729" title="s390x fcp image not grown to fill disk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228741" id="1228741" title="SelfInstall image being deployed twice breaks both installations, reboots before repairs can be done" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229257" id="1229257" title="PXE boot from selfinstall.iso fails due to bogus initrd permissions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235448" id="1235448" title="[kiwi,zypper,hardware] Image receives NVIDIA Drivers depending on Build Host Hardware" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237772" id="1237772" title="[Build 4.8][aarch64] raw images are missing /etc/snapper/configs/root" type="bugzilla" />
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Bump version: 10.2.11 to 10.2.12
- Fix profile env variable name regression
  In the effort of adapting to the latest snapper in Issue #2697
  we overlooked the after effect of a different variable name
  in the profile environment with regards to $kiwi_btrfs_root_is_snapshot
  and $kiwi_btrfs_root_is_snapper_snapshot. Image builds that
  references the former variable name would be broken by the change.
  This commit makes sure no regression is introduced by providing
  both variants (bsc#1237772).
- Fix grub mkimage call for the ppc platform
  The list of modules used to create a grub platform image for
  ppc was the same list as used for the x86 bios platform.
  This commit fixes this and also cleans up the inconsistency
  and misleading names used for creating platform specific
  output.
- Bump version: 10.2.10 to 10.2.11
- Update box plugin documentation
  Add chapter about new container build feature. The
  box plugin can now also run the build in containers
- The ubuntu 20.04 github runner is closing down
  Make sure to move to another runner for workloads which
  still uses ubuntu 20.04
- Bump version: 10.2.9 to 10.2.10
- Poetry build sdist timestamps set to epoch 0
  Newer versions of poetry set the timestamp for all source
  files to epoch 0. Such sources are not accepted by e.g
  Debian FTP servers and in general I don't like when tools
  changes their behavior just like that. This commit forces
  an older version of poetry for the purpose of creating the
  sdist tarball which then gets published on pypi. The
  argumentation for reproducible builds by forcing source
  files to a certain timestamp doesn't fly for me. I'm open
  for any better solution though.
- Bump version: 10.2.8 to 10.2.9
- Classify missing chkstat as debug message
  chkstat is a distribution specific tool. If it is
  present we use it, if not we don't but it's not worth
  a warning.
- Allow to run setfiles multi threaded
  Use option -T0 for newer setfiles version.
- Add rd.kiwi.dialog.timeout option
  Allow to configure the timeout value for dialogs displayed
  by the kiwi dracut code. By default the timeout is set to
  60 seconds. With the special value "off" the dialog will
  never timeout.
- Make sure copy actions does not drop context
  Use shutil.copy2 to copy files preserving their
  attributes in the grub BootLoader space.
- Improve unit test for archive target_dir
  Add a test case with absolute path in the target_dir
  to make sure we never unpack the archive to the host
  system.
- Fixed profiled overlay imports
  When building an image for profile: SOME and providing
  an overlay directory named SOME/... kiwi will sync the
  contents of this overlay directory to the root tree.
  However it took the toplevel name SOME/ into account
  which is unwanted because only the sub data structure
  should be synced into the new root tree. This
- Bump version: 10.2.7 to 10.2.8
- Use multipath child instead of parent device
  On multipath systems we need to find underlying child device
  instead of using parent device.
  This prevents listing all parent devices for a multipath device
- Increase size for agama integration test build
  Agama needs more space to build now
- Fixed agama integration test
  rubygem-byebug and rubygem-agama-yast seems to
  no longer exist
- Update TW integration tests
  Package nscd was dropped from TW
- Fix documentation regarding URI styles
  In reference to commit 760a65558f9e2e91d3eaa3a2f9503ff596984b48
  the support for iso:// URI types was dropped some time ago.
  However, the documentation was not properly updated. This
  commit fixes it
- Fix return value of grub helper methods
  The grub helper methods to find grub tools returns a
  None value if the tool cannot be found. This None value
  could be used later in a Command call where it will be
  used in a join() command to log the resulting commandline.
  This join() call then fails and raises an unhandled error
  causing a stack trace in the application. This commit
  fixes it
- Added disk validation for duplicate installs
  Installing the same image to different storage disks on the
  same machine creates device conflicts with unexpected side
  effects. This commit adds a validation based on the PTUUID
  of the disk image to check if another device on the system
  has the same ID and if yes, does not allow to install the
  image again including a message which device takes the same
  identifier. This references bsc#1228741
- Fixed documentation for signing key attribute
  The source locator name for local files was incorrect
- Bump version: 10.2.6 to 10.2.7
- Update documentation
  Added a new troubleshooting chapter as subsection to
  the Build Host Constraints named Package Manager Behavior.
  It serves the purpose to describe options for the customer
  to change the default package manager behavior which
  we from the kiwi side do not influence intentionally.
  This is a followup change to bsc#1235448
- Drop still present tox artifacts
  There were still some left over tox files and the
  documentation contribution chapter was also wrong at
  several places
- Add support for reading optional pkgmgr env file
  If there is a file .kiwi.package_manager.env in the root of
  the image tree it will be read and put into the caller environment for
  the selected package and repository manager. There are features
  in e.g zypper which can only be used via env variables (bsc#1235448).
- Auto convert unit test XML data to schema v8.3
- Rename btrfs_root_is_snapshot
  Rename btrfs_root_is_snapshot to btrfs_root_is_snapper_snapshot.
  This happens in preparation for the changes suggested in #2697
  where we want to get rid of snapper specific btrfs code which
  will be available in snapper natively soon. To make sure a btrfs
  layout specific to snapper(and SUSE), the implicitly used attribute
  named btrfs_root_is_snapshot now becomes explicit and its new
  name will indicate that snapper sits behind it. Along with the
  rename a XSLT stylesheet to automatically convert the old name
  into the new name for schema v8.3 will be performed.
- Bump version: 10.2.5 to 10.2.6
- Fixed donate button target
- Added LUKS reencryption support
  Added rd.kiwi.oem.luks.reencrypt boot option consumed by the
  kiwi-repart dracut module. For OEM LUKS2 encrypted disk images.
  If set, reencrypts the disk prior an eventual resize and therefore
  creates a new key pool and master key. The reencryption is advisable
  if the image binary is not protected. With access to the image
  binary it's possible to extract the luks header which then allows to
  decrypt the data unless it was reencrypted. The reencryption process
  only runs if the checksum of the luks header still matches the one
from the original disk image. Be aware that the reencryption will
  ask for the passphrase if the image has been built with an initial
  luks passphrase.
- Fixed arm/tumbleweed/test-image-rpi
  No ruby required for this integration test build
- Plain zipl loader needs boot partition
  If the rootfs is something zipl cannot read, we need an
  extra boot partition using a supported filesystem
- Fixed IBM-Cloud-Standard profile
  The test-image-MicroOS integration test builds an IBM-Cloud-Standard
  profile as encrypted variant with a random key that is not protected
  by an encrypted boot image. This doesn't make sense. Thus the
  encryption setup for the IBM cloud standard build got removed.
  Use the IBM-Cloud-Secure-Execution profile to test encrypted
  secure linux builds
- Fixed test-image-qcow-openstack
  rsh package was dropped from TW
- Fix genprotimg for s390 builds
  A recent change on genprotimg now forbids to use --cert in
  combination with --no-verify, even though this was allowed
  before.
- Fix documentation for repo, package gpg settings
  In contrast to the documentation, kiwi sets default values
  for any gpg setting if not explicitly specified differently.
  We want to avoid to inherit a behavior from how the distribution
  packages the package manager. This commit fixes the documentation
  to be in line with the implementation
- Drop insecure and unsupported md5 digest
  Decommission the Checksum.md5() method and move all places
  in code to sha256(). The md5 digest is considered insecure
  and has also been removed from hashlib as a supported digest.
- Fix config functions action
  The action failed on the setup of the runtime because the upgrade
  of pip failed.
- Bump version: 10.2.4 to 10.2.5
- Changed systemfiles provider
  Instead of providing a static list of filenames, provide a list
  of package names. It is expected that the pilot of flake-pilot
  resolves this list against the local package database to build
  up the filelist for provisioning
- Bump version: 10.2.3 to 10.2.4
- Update system files setup for containers
  The attribute provide_system_files creates a meta file in the
  root tree named 'systemfiles'. The contents of this file were
  produced by just a dump of the package database so far. For
  a more generic use of this data some adaptions were needed.
  First we allow to skip packages matching a pattern from being
  part of the system files. Next we do not put ghost and doc
  files into account. And last we handle library files in a different
  file named 'systemfiles.libs' where we do not add symlink targets
  if the target path is also part of the package. The consumer
  of this information is flake-pilot which syncs that library system
  files from the host via --copy-links. This allows a more generic
  use with regards to versioned libraries e.g. libc
- Drop /dev/pts from bind mount locations
  This has created havoc in the Fedora build environments by
  fully unmounting /dev/pts and breaking the builders for
  subsquent tasks.
  This is a partial revert of commit daf1323c5ded7e4e7783205f5e30457b40eb322f.
- Don't take ghost files into account
  When creating the system files information do not
  take ghost files and artifact files into account
- Bump version: 10.2.2 to 10.2.3
- Update STYLEROOT to SUSE 2022
- Fix broken links in the documentation
- Fix legacy_bios_mode detection
  The code in this method does not work correctly if the
  firmware is set to 'bios'. In bios only mode the method
  returned a false value which is incorrect as it should
  return a true value in this case. Without this patch
  ISO images will fail to boot because no loader gets
  configured.
- Added /dev/pts to bind mount locations
  During runtime several kernel filesystems are bind mounted into
  the image root system such that programs expecting it can work.
  /dev/pts was not needed so far but seems to be a good addition
  to the list to make tools like sudo to work properly when called
  e.g. from a config.sh script.
- xorriso: respect efiparttable and gpt_hybrid_mbr
  This should make the xorriso-based ISO build path respect the
  'efiparttable' and 'gpt_hybrid_mbr' settings when building a
  UEFI-compatible image, making it write a GPT disk label by default
  instead of an MBR (msdos) one. If it's building an image that is not
  UEFI-compatible it will always write an MBR label, regardless of
  this setting.
  If 'gpt_hybrid_mbr' is set, xorriso will write an Ubuntu-style
  MBR/GPT hybrid partition table, where the MBR partition table
  includes a partition with type 00 and the bootable flag, as well
  as the partition with type ee required by the UEFI spec. This
  mildly violates the UEFI spec but may make the image bootable on
  native BIOS or CSM firmwares which refuse to boot from a disk with
  no partition marked 'bootable' in the MBR. If 'gpt_hybrid_mbr' is
  not set, xorriso will write a strictly UEFI-spec compliant label,
  with just the 'protective MBR' required by the UEFI spec (no
  bootable partition) and the correct GPT partition table. Note
  this is somewhat different from what gpt_hybrid_mbr does for
  disk images.
  Also, we now pass -compliance no_emul_toc when building ISOs, as
  recommended by upstream in
  https://lists.gnu.org/archive/html/bug-xorriso/2024-11/msg00012.html
  This tool is generally always going to be building ISOs intended
  for write-once use, not multi-session use (and which are rarely,
  these days, written to physical discs at all anyway).
- Added provide/require system files for containers
  Added the attributes provide_system_files and require_system_files
  to control the provider and requester of system files in
  container image builds. systemfiles is a metadata file which
  contains all files from the package database at call time.
  It is used in flake-pilot to provision the systemfiles data
  from the host into the container instance. One possible use
  case for this data is a flake registration which uses a
  base container that is derived from a runtime container but
  all data from the runtime should be provisioned from the
  host. Using this feature tightly couples the flake to the
  host OS distribution and version.
- Bump version: 10.2.1 to 10.2.2
- Fix scope issue
  Increase livetime of the the compressor instances
  to the livetime of RootImportOCI. They create temporary
  files which are referenced later and need to live longer
  than the block they got created in
- Bump version: 10.2.0 to 10.2.1
- Fixed use of fscreateoptions for iso type
  The information for fscreateoptions was not passed along to the
  tooling if a custom filesystem attribute was specified.
- Allow to derive from multiple containers
  Add support for multi inheritance to the derived_from attribute
  In the order of a comma seperated list of docker source URI's
  a base tree is created. This was possible only with one container
  so far and Fixes #2680 as well as jira#OBS-354
- Bump version: 10.1.18 to 10.2.0
- Add selinux test build to TW
  Also update derived docker integration test to latest Leap
- kiwi/schema: Fix allowed value type for ISO publisher and application ID
  According to the spec, this should be constrained to 128 characters
  but also allow quite a few other special characters (as well as spaces).
  We didn't allow spaces in application ID, but allowed too much for Publisher.
  Now we set up both correctly.
- Fix setup of kiwi environment variables
  Some kiwi env vars are initialized with an empty value
  and not overwritten if another value is provided. For
  the selected variables an empty value setting is not
  allowed because the schema also enforces the value to
  be set at least once. In addition a helpful option
  named --print-kiwi-env was added to the 'image info'
  command which allows to print the environment variables
  and their values.
- Add random key support for LUKS encryption
  Allow to pass luks="random". In random mode use the
  generated keyfile as the only key to decrypt. This is
  only secure if the generated initrd also gets protected
  e.g. through encryption like it is done with the secure
  linux execution on zSystems
- Added development group in pyproject setup
  generateDS and other tools are needed and were forgotten
  to be added when we deleted the tox dependency
- Added containers integration with OBS
  When building in the Open Build Service (OBS) there is no way
  to create outgoing connections from the build workers. To allow
  the containers section to fetch containers from the SUSE
  registry we need to apply an OCI URI translation into a local
  path. The actual OCI container image is expected to be provided
  by the obs backend on the worker. Along with this commit also an
  integration test named test-image-disk-containers is provided (jira#OBS-351).
- Fix rendering of SUSE docs
  The SUSE documentation is produced through a conversion
  of the ReST source into docbook. The name kiwi is reserved
  in the index and needs to be referenced as kiwi-ng when
  used as command.
- Remove tox dependency
  tox was used as sort of a make target to run unit tests
  and more in a python virtualenv. However, since we switched
  everything to poetry it's no longer needed to let tox create
  the python virtual environments. This commit moves the tox
  targets into the Makefile and adapts the github workflow
  files accordingly. In addition the scripts container based
  tests were re-activated and fixed such that they succeed
  again.
- Fix make build target
  Move the actions done by the tox target into the
  build target and call them there in a clean and easy
  to spot sequence. There is no need to call tox to
  prepare for the package submission, instead the
  checks and poetry runs to prepare for the package
  target should be called directly as part of the
  build target. In the future we might get rid of
  tox completely.
- Bump version: 10.1.17 to 10.1.18
- Fixed zipl caller environment
  zipl gets confused with an active sysfs mount inside
  the root tree at call time of zipl. This commit
  umounts the /sys bind mount in the image tree prior
  calling zipl
- Fix s390 test-image-disk build
  Add missing kernel links used by suse tools
- Bump version: 10.1.16 to 10.1.17
- Fix coloring of build_status.sh flags
  Depending on the place of the status flag the color
  setup might fail. This commit fixes it
- Add pytest-container as optional dependency
  The pyproject.toml listed pytest-container as dependency
  but it is used only to run the container based integration
  tests for the shell helper methods. For building the package
  this dependency should not be pulled in
- Fix networking in erofs integration test
  The network setup was systemd-networkd based but
  the provided network config was not for systemd
- Bump version: 10.1.15 to 10.1.16
- Fix erofs requires in spec
  erofs-utils for SUSE only exists in Tumbleweed. The
  former conditon would also add the requirement for ALP
  and SLFO which is wrong. This commit fixes it
- Add vagrantconfig rule for vagrant format
  If the format="vagrant" attribute is set, a vagrantconfig
  section becomes mandatory. This commit enforces this rule
  on the schema.
- Bump version: 10.1.14 to 10.1.15
- Fixed sphinx_rtd_theme setup
  Delete obsolete display_version attribute
- Evaluate eficsm everywhere
  Fixed _supports_bios_modules() to take an eventually
  provided eficsm setup into account. The grub config still
  searches for i386 grub modules even if eficsm="false"
  is set.
- Fixed debian bootstrap script calls
  Run scripts as commands with their native shebang and not
  through bash. Not all debian package scripts uses bash, some
  of them uses sh which can be a link to dash or other
  interpreters.
- Update TW integration tests
  The package x86info was dropped from TW
- Turn DiskFormat into an ordinary class
  * it does not need to be an abstract base class
  * use f-strings where applicable instead of format()
  * change return type of _custom_args_for_format from list to tuple
- Add new containers section
  Allow to specify references to OCI containers in the
  image description
  During the kiwi process the containers are fetched into a
  temporary location and a systemd service is configured to
  one time load the containers into the local registry at
  first boot of the system.
- Bump version: 10.1.13 to 10.1.14
- Revert "Install usrmerge for Debian integration test"
  This reverts commit 95ac861741f14c4f35611c16328384c18e53dcfb.
  Solution needs to be provided in code
- Install usrmerge for Debian integration test
- Support older apt versions for bootstrap
- Run package scripts in apt bootstrap phase
  The bootstrap procedure based on apt only runs a manual
  collection of package scripts. This commit refactors the
  code that unpacks the bootstrap packages to a python
  implementation and adds a method to run the bootstrap
  scripts from all packages resolved by apt.
- Bump version: 10.1.12 to 10.1.13
- Fix bundle extension for vagrant type
  When bundling result files that uses a vagrant type,
  kiwi creates them with the extension .vagrant.virtualbox.box
  or .vagrant.libvirt.box. The bundler code renames them using
  only the .box suffix which is too short as it is missing
  the subformat information. This commit fixes it and keeps
  this information in the result bundle file name.
- Use simple quotas (squota) for volumes
- Add quota attribute to volume section
  Allow to set quota per volume for the btrfs filesystem
- Fix globbing with exclude with regex
  This fixes a collection of bugs when producing erofs images.
  On one hand, this ensures that an exclude of `/sys` doesn't accidentally
  match `/lib/libsystemd.so`, only `/sys/whatever`.
  On the other hand, this ensures that `/dev/*` does match `/dev/vda` and
  not just `/dev///////////`.
  This fixes libsystemd.so getting dropped in Kiwi-built FEX images.
- Honour custom exclude for filesystem builds
  All other call sites honour the custom exclude file, it's just this one
  that needs to be fixed. This unblocks use of Kiwi for generating FEX
  rootfs.
- test: storage: update clone_device tests with new block size
- storage: clone_device: increase dd block size
  Increasing the block size used for dd reduces the time needed to clone a
  device.
- Bump version: 10.1.11 to 10.1.12
- Add missing erofscompression validation
  In the filesystem builder I forgot to evaluate the
  erofscompression attribute.
- Include PI and comments in XSL stylesheets
  So far comments and processing instructions (PI) were
  ignored when applying the XSL stylesheets. This commit
  updates all stylesheets to take them into account
- Bump version: 10.1.10 to 10.1.11
- doc: Add login information test build test images
- Bump version: 10.1.9 to 10.1.10
- bootloader: Fix up ppc64 bootinfo again
  To make the code look pretty extra newline is inserted at the start of
  bootinfo file. This appears to break boot on Power9 PowerVM LPARs.
- Add support for erofs
  erofs is an alternative readonly filesystem that can be
  used as alternative to squashfs.
- Fixed enclave integration test
  The SELinux policy of Fedora Rawhide when running completely in
  an initrd is not suitable to let the system boot up. Thus the
  current solution is to boot in permissive mode. A better solution
  for the future would probably be a selinux policy for enclaves
- limit eif_build requires to fedora greater than or equal to 42
- Bump version: 10.1.8 to 10.1.9
- Added sshd to nitro-enclave integration test
- Fixed container sync options
  Do not exclude/filter any security/xattr capabilities.
- Update container integration test
  Add getcap to check on filesystem capabilities
- Add new build type provides for enclave
  Add a provides tag (read by the open buildservice) for the new
  enclave builder. Also add a recommends to eif_builder in
  the systemdeps-core meta package
- Update enclave documentation
  Fixup repo setup in the build documentation
- Bump version: 10.1.7 to 10.1.8
- Fixed enclave documentation
- Update test-image-nitro-enclave package list
  Fixup package list to match Fedora rawhide
- Move test-image-nitro-enclave to rawhide
- Fix ppc64 chrp bootinfo generation
- Fixed documentation header
  Fixed double H1 headers from the boxbuild tweaks chapter.
- Bump version: 10.1.6 to 10.1.7
- Move EXEC log message to the right place
  The log information of the command execution was not printed
  directly before the actual command invocation. There are other
  actions after the log information (e.g Path.which) which itself
  produce log information prior the real subprocess execution.
  This is very misleading when reading the log file and fixed
  in this commit.
- Add support for architectures in deb source file
  When apt resolves packages on a multiarch repo it can happen
  that dependencies for packages from other architectures are
  pulled into the solver process but are not provided by any
  repository. To overcome this behavior the repository can
  be setup to serve packages only for a specified architecture
  or list of architectures. This is related to
  OSInside/kiwi-descriptions#102
- Bump version: 10.1.5 to 10.1.6
- add allowExtraConfig and exportFlags to ovftool options
  Add allowExtraConfig and exportFlags to ovftool options
- Bump version: 10.1.4 to 10.1.5
- create EFI/BOOT only if UEFI boot is intended
- Fix boot support for ISO media on ppc64
  add CHRP boot support for ppc64 and add xorriso option to avoid
  file name reduction to MS-DOS compatible 8.3 format
- Fix initrd permissions
  kiwi stored the initrd for ISO images as 600 which might
  be too restrictive. This commit makes sure the initrd is
  stored as 644 and Fixes bsc#1229257
- Fixed ramdisk size setup
  For setting up the brd rd_size option kiwi creates
  99-brd.conf used at load time of the kernel brd driver.
  The location for the conf file is set to /etc/modprobe.d/
  However, in newer versions the location has changed to
  /usr/lib/modprobe.d/ and /etc/modprobe.d is no longer
  expected to exist. This commit makes sure /etc/modprobe.d
  is created if not present.
- Bump version: 10.1.3 to 10.1.4
- Add note about guestOS values for vmware ovftools.
- Add note about guestOS values for vmware platform.
- Fixed resize of dos table type on s390
  On s390, parted is used to detect the partition table type.
  In contrast to blkid the name for DOS tables is reported
  as 'msdos' and not 'dos' which impacts several conditions
  in the kiwi initrd code which checks for 'dos'. This commit
  fixes the get_partition_table_type() method to return a
  consistent table name for DOS tables (bsc#1228729)
- Revert "remove dependency on /usr/bin/python"
  This reverts commit 15b450188483b567ca10bb459bf50ed90e905bb7.
  The change provided here entirely broke kiwi in OBS. With this
  patch applied every image build in OBS fails with the following
  message: 'line 1: /usr/sbin/kiwi: No such file or directory'
- Bump version: 10.1.2 to 10.1.3
- Fix bundle extension for archive types
  When bundling result files that uses an archive type like
  tbz or docker, kiwi creates them with the extension tar.xz/tar.gz
  The bundler code only uses the extension from the last tuple
  in a "." split which is wrong for "tar." filenames. This commit
  adds an exception to the prefix rule for this output filenames
  and Fixes
- Fix ImageSystem mount procedure
  The mount() method did not take custom partitions into account.
  This commit fixes it.
- remove dependency on /usr/bin/python
- Add support for isomd5sum for tagging iso files
  The isomd5sum tool suite is used and available on all supported
  distributions except SUSE distributions, and is necessary to produce
  conformant ISOs for most Linux distributions.
  This change adds support for isomd5sum tool suite for kiwi, though
  it does not extend the kiwi-live dracut module to use it. The upstream
  dracut dmsquash-live module must be used instead.
- kiwi/builder/live: Log the correct value for Application ID
  Since it is now possible to set a custom application ID, we want
  to see this when it is being used for the image.
- kiwi/builder/live: Clean up leftover dracut configuration file
  The existence of this file breaks installers on live media that
  sync the full filesystem to disk and are not aware of this configuration
  before generating the target system initramfs.
- Allow string versions and test "word" versions
  There are descriptions out in the wild that use "non-numeric" versions
  in their descriptions, particularly without separators for splitting.
  This change switches all of this to strings rather than assuming
  numbers and gracefully handles the single word case.
- Add documentation for boxbuild tweaks
- Fixed wrong log level on --logfile
  When using --logfile, the log generated there matches the
  stdout log (which without --debug, does not include any debug info).
  This is in contrast to the automatically generated one in the
  output directory, which always does and also not following the
  way how it is documented.
- Fixed arch flag for namedCollection
  The arch flag in a namedCollection was not taken into account.
  This commit fixes this and also makes sure the result information
  is sorted and unique like we have it for the package lists.
- Fix handling of zipl.conf in plain zipl bootloader
  When using the plain zipl bootloader kiwi created a /etc/zipl.conf
  file. However, this file was only useful during image build as it
  points to a loop target device and geometry but does not represent
  a proper config file to be used in the running system. In addition
  the different distributors provides their own version and layout
  of the zipl.conf to be used inside of the system and with their
  respective tools. Thus this commit changes the way how kiwi operates
  in a way that the zipl.conf used in the initial image only exists
  during the image build process. An eventual present /etc/zipl.conf
  will not be touched by kiwi.
- Bump version: 10.1.1 to 10.1.2
- Improve error reporting for remote deployment
  Add new method called show_log_and_quit which displays
  the written error log file as a file box to the user
- Update test-image-orthos integration test
  Update the test such that you can also build it locally.
  Change the remote installation target to be a ramdisk
  for easy testing of remote deployments
- Setup default minimum volume size per filesystem
  The former method provided a static value but there are huge
  differences for the minimum size requirement of a filesystem.
  For example extX is fine with 30MB whereas XFS requires 300MB.
  This commit adds a more dynamic default value based on the
  used filesystem.
- Increase default volume size
  So far 30MB was set as default volume size which is by far
  too small for a number of filesystems, e.g btrfs and also XFS.
  This commit increases the default volume size such that all
  modern filesystems builds if the default volume size is used.
- Update test-image-raid
  Apart from testing raid this integration test also tests
  a certain LVM volume setup. The test has been updated
  to use the btrfs filesystem because it has the most strict
  size requirements.
- Use shutil.which for Path.which
  Both methods were only used in one place each and it makes much more sense to
  use the pathlib builtin methods instead
- Replace Path.create implementation with pathlib builtin
- Bump version: 10.1.0 to 10.1.1
- Mandatory package scripts for Debian bootstrap
  Make sure to run some mandatory package pre/post scripts
  such that settings like /etc/passwd, a root user, etc..
  exists. This action can also be done in post_bootstrap.sh
  but I think it's better to do this in the core code
- Bump version: 10.0.28 to 10.1.0
- kiwi no longer uses debootstrap
  For building Debian based images we used debootstrap to
  bootstrap an empty root until apt-get could be used to
  complete the job. This has now changed such hat apt-get
  is also used for bootstrapping a new system. The concept
  and also potential alternatives to the way kiwi bootstraps
  Debian based systems can be found here:
  * https://osinside.github.io/kiwi/working_with_images/build_without_debianbootstrap.html
  Due to the drop of debootstrap it might happen that
  package lists of existing image descriptions needs to be
  extended with packages that were formerly pulled in by
  debootstrap but did not get properly pulled in with the
  new apt based bootstrap. As reference please check out the
  integration tests from here:
  * https://github.com/OSInside/kiwi/tree/main/build-tests/x86/ubuntu
  * https://github.com/OSInside/kiwi/tree/main/build-tests/x86/debian
- Bump version: 10.0.27 to 10.0.28
- Update documentation
  * kiwi no longer uses debootstrap
- Fix test_process_result_bundle_as_rpm
- Fix Debian/Ubuntu integration tests
  Remove package hacks for debootstrap, explicitly add
  required packages and or configurations.
- Drop types-pkg_resources
  Got removed from PyPI
- Fix test_process_result_bundle_as_rpm
  os.path.basename was called on a MagicMock object which
  sometimes confused pytest
- CI: Add testing against Python 3.13
  Python 3.13 is shipping in Fedora Linux for Fedora Linux 41, so we
  should ensure kiwi is tested against it. The testing setup is
  based on the latest development version of 3.13 as it is not
  yet released.
- Fix kiwi-repart restrictions
  The kiwi repart dracut module reads a profile file and if it
  does not exists it dies in the initrd. However, that profile
  file is not mandatory for the main resize functionality. Thus
  this commit turns this into a warning message. In addition
    the module-setup for 90kiwi-repart makes sure to include
  the required and optional profile files (bsc#1228118).
- Do not exclude the .profile env file by default
  kiwi's initrd modules read a .profile file which gets included
  into the initrd produced at build time. To allow rebuild of a
  host-only initrd from the booted system this information should
  be present such that it is possible to re-use kiwi initrd code.
- Get rid of debootstrap
  Replace debootstrap with an apt-get based pre-download of
  packages followed by a dpkg-deb extraction.
- Bump version: 10.0.26 to 10.0.27
- Fix dracut-interactive with systemd 256
  With systemd 256, /usr (and thus also /bin/) is read-only in the initrd.
  Move dracut-interactive and its .service into /run instead.
- Bump version: 10.0.25 to 10.0.26
- Revise scripts_testing.rst
- Revise schema_extensions.rst
- Pass kernel cmdline to agama
  In the agama integration test make sure to pass along
  the kernel boot parameters to allow controlling the
  behavior of agama better
- Add file directive to incorporate custom files
  Usually custom files are managed by placing them as overlay
  files or archives. However, overlay files must be structured
  inside of a root/ subdirectory and archive files are binary
  data. It is therefore not straight forward to just reference
  one or more files as source files to the image description
  to be placed into the image.
- Bump version: 10.0.24 to 10.0.25
- Fix mocking of test_process_result_bundle_as_rpm
- Fixed logging behavior of Compress::get_format
  The get_format() method allows to check which compression format
  a given input stream has. This is done by calling the supported
  compression tools in a row and let them check if they can deal
  with the provided data or not. As a result error messages are
  logged for streams that some tool doesn't understand. However,
  those error messages are no errors and only the result of the
  checking. This information in the kiwi log file is confusing
  and several users already complained when they see information
  like:
  EXEC: Failed with stderr: /usr/bin/xz: ...: File format not recognized
  This commit changes how the compression tooling is called in a
  way that no exception is raised (which leads to the above error message)
  but the result returncode is used to decide on the success or
  error of the respective compression tooling.
- Allow to set custom ISO Application ID
  The application ID was used as identifier
  in the legacy initrd code from former kiwi versions. Because of
  this there is still the compat layer which sets an App ID as MBR
  identifier string unless the new application_id overwrites it.
- Bump version: 10.0.23 to 10.0.24
- Added integration test for SUSE agama installer
  This integration test builds a self-install ISO image which
  drops the SUSE Agama installer into a ramdisk for performing
  an interactive installation procedure to test Agama
- Add --set-type-attr and --set-release-version
  Allow to set/overwrite type section attributes via the cmdline.
  Allow to set/add the release-version element via the cmdline.
- Update integration test for eficsm
  Update the type of the Secure profile of the live image integration
  test as well as the type of the simple-disk test to make use of the
  eficsm="false" attribute to switch off CSM mode and test an EFI only
  layout.
- Add new eficsm type attribute
  Allow to produce EFI/UEFI images without hybrid CSM capabilities.
- kiwi_plugin_architecture.rst
- Revise kiwi_from_python.rst
- Wait for loop device detach to complete
 Detaching a loop device via 'losetup -d' is an async operation.
  Once the command returns the loop can still be associated with
  the block special. Therefore this commit waits until the block
  device got released or a timeout is hit.
- Update requires for kiwi-systemdeps-disk-images
  On Tumbleweed several changes caused tools like strings
  or the codepage for mtools to be missing in a standard
  installation. For building disk images especially EFI
  capable ones with vendor information kiwi needs the above
  tool. This commit adds the packages providing them on
  Tumbleweed to the meta systemdeps for disk images.
- Supplements are not understood by Debian/Ubuntu
- Add new builder for enclaves
  Add new EnclaveBuilder class which allows to build initrd-only
  image types. The first enclave implementation covers aws-nitro
  images produced via the eif_build tooling.
- Split out bash completion into a sub-package
  Per review of the SUSE packaging team we should split out
  the bash completion into its own sub-package to give users
  better control over the completion feature.
- Bump version: 10.0.22 to 10.0.23
- package: Add fully qualified provides for python3-kiwi in spec
  On SUSE distributions, currently the expectation is that packages
  built against the Python interpreter should have fully qualified
  names in the form of pythonXY-&lt;modulename&gt;. Additionally, all other
  Linux distributions prefer something similar in the form of
  pythonX.Y-&lt;modulename&gt;.
  This ensures we have those names so that distribution dependency
  generation works as expected.
- Add support for arch selector on volumes
  Multiple architecture names can be specified as comma separated list.
- Add rd.kiwi.oem.force_resize boot option
  Forces the disk resize process on an OEM disk image.
  If set, no sanity check for unpartitioned/free space
  is performed and also an eventually configured
  &lt;oem-resize-once&gt; configuration from the image description
  will not be taken into account (bsc#1224389).
- Fixed leap integration tests
  For whatever reason procps is not longer pulled in by the
  core dependencies. Thus we have to explicitly request it
- Fix potential race condition in loop detach
  The call to 'losetup -d' is in fact an async operation. Once
  the command returns the loop can still be associated with the
  former file because it gets lazy unbound and releases later.
  Prior re-use of the same loop device it is therefore required
  to wait until the kernel event queue is processed.
- Fixed repository include to image with dnf
  When specifying a repository element with imageinclude="true",
  kiwi permanently adds the repo file inside of the image.
  The distribution standard path is used to store the repo
  file in this case. With dnf a package manager exists that is
  primarily used on Fedora and RHEL systems. Thus the standard
  path for the repo files is set to "/etc/yum.repos.d".
  However, dnf can also be used for other rpm based distributions
  e.g SUSE. On such a system the default path does not exist
  or is different because another package manager is the
  default. This commit makes sure that the expected path is
  created prior adding any repo files.
- Bump version: 10.0.21 to 10.0.22
- Fixed selinux labels for boot files
  When kiwi calls the bootloader config and installation modules
  several files gets created as unlabeled_t because the labeling
  happened earlier. This commit ensures that setfiles gets called
  after BootLoaderConfig and/or BootLoaderInstall has done its job.
- Add bash to package requirements
  If there are script evaluations that does not specify
  an interpreter, kiwi uses bash for it. The same applies
  for sub-process invocations using shell pipelines. Thus
  the bash shell is a required tool for kiwi under certain
  circumstances.
- test-image-live: add shadow package
- Fix displaying the image verification failure dialog
  Kiwi must wait for the previous dialog to finish before showing another
  one as it's the same systemd service behind it.
- Allow to customize the path of the isoscan cowfile
  Added rd.live.cowfile.path option to specify the cowfile at
  any path below the isoscan-loop-mount.
- Better error handling on grub vendor dir lookup
  The strings command is used to lookup the in-efi binary encoded
  vendor path. However, if the strings or bash command is not availabe
  on the build host, the command silently failed and moved into the
  standard (non vendored) EFI boot path. This can lead to a broken
  boot for those distros and image targets which requires a vendor
  directory and should lead to an error message instead of a
  successful image build.
- Fixed profile variable settings for preferences
  It's allowed to have multiple preferences sections. If those
  sections provides the same value multiple times, e.g keytable,
  the last one in the row will win. The setup of the variables
  in .profile environment file for the preferences elements is
  not following this rule and used the first section not the
  last. This commit fixes the profile variables to match the
  actual setup
- Revise users.rst
- REvise systemdeps.rst
- Revise shell_scripts.rst
- Add initrd boot option rd.kiwi.allow_plymouth
  By default kiwi stops plymouth if present and active in the
  initrd. Setting rd.kiwi.allow_plymouth will keep plymouth
  active in the initrd including all effects that might have
  to the available consoles. This is related to bsc#1214824
- Drop use of obsolete tool isconsole
  isconsole was provided with the dropped kiwi-tools package.
  It was a simple C application that checked the capabilities
  of the current console. In the context of fbiterm it was just
  used to provide proper error messages which fbiterm on its
  own did not show. As also fbiterm is on its way to become
  obsolete and isconsole is already no longer present, it's ok
  to just drop that extra check and therefore keep the fbiterm
  mode functional if one manages to include fbiterm and its
  fonts into the initrd
- Bump version: 10.0.20 to 10.0.21
- Add missing write_meta_data method to BLS base
  The standard bootloader interface class provided a method
  named write_meta_data which is expected to be implemented
  in the specialized bootloader implementation. For BLS
  bootloaders this method was missing in the BLS base class.
  write_meta_data can provide additional cmdline options
  for booting. If not covered some boot options might be
  missing. This patch fixes it
- Fix TW integration test to build outside OBS
- Make sure BootLoaderConfig fixes are effective
  The BootLoaderConfigGrub2 class has methods to fix the grub-mkconfig
  generated files. It does that by mounting the system and changing the
  respective files after the mkconfig call. However, after the change
  the class instance stays open in combination with BootLoaderInstallGrub2
  instance which itself under certain circumstances also mounts the
  system to call grub-install. At the time grub-install is called it
  cannot be guaranteed that all changes has been written unless an
  explicit umount in the BootLoaderConfigGrub2 class instance happened.
  This commit address the potential race condition.
- Bump version: 10.0.19 to 10.0.20
- Update rawhide integration test
  Use new arch attribute for testing in the repository
  element of the rawhide/test-image-live-disk integration
  test.
- Add support for arch attr in repository element
  Allow to provide different repository sections per architecture
- Add --list-profiles to image info
  Allow to list available profiles from the processed image
  description
- Bump version: 10.0.18 to 10.0.19
- package: Always include patches and number all sources and patches
  This ensures that stuff is applied reliably and all sources and patches
  are included as expected.
- Bump version: 10.0.17 to 10.0.18
- package: adjust openSUSE patch
- Bump version: 10.0.16 to 10.0.17
- Fixed box plugin documentation
  The provided example was no longer correct according to
  changes on the image description referenced in the example
- Add procps to Tumbleweed integration tests
- Add procps to Tumbleweed integration tests
- Fix sdist upstream tarball contents
  The .virtualenv.dev-requirements.txt file is referenced by tox.ini
  but not put into the sdist tarball and therefore missing in the
  pypi upstream data.
- Drop use of obsolete pkg_resources
  As documented in https://setuptools.pypa.io/en/latest/pkg_resources.html
  the use of pkg_resources is obsolete and will cause issues.
  So happened on Debian unstable.
- RepositoryDnf5: correct defaults, set system_cachedir
  The "defaults" in `use_default_location` here are the dnf4
  defaults, not the dnf5 defaults, so let's update them. Also, for
  dnf5, we need to set `system_cachedir` instead of `cachedir` -
  see https://dnf5.readthedocs.io/en/latest/misc/caching.7.html ,
  `system_cachedir` is the cache location used when running as
  root, `cachedir` is the cache location used when running as a
  regular user.
- Bump version: 10.0.15 to 10.0.16
- poetry build doesn't like symlinks
  The sdist tarball produced by poetry build does not include
  all files and skipped symlinks in test/data. This caused the
  unit test run to fail if called from within that sources
- Fix spec file
  Require docopt-ng for Fedora 41+
- Bump version: 10.0.14 to 10.0.15
- REview runtime_configuration.rst
- Review repository_setup.rst
- Add support for stopsignal in containerconfig
  Allow to specify the stopsignal via the containerconfig
  element
- Fix set_disk_password to be effective
  Since commit 8aa517eb7 it is necessary to call
  _mount_device_and_volumes() prior making any modifications
  to boot files. In addition handle potential errors
  from the grub.cfg modification better.
- Update Makefile
  Make sure custom patches are part of the package sources
- Bump version: 10.0.13 to 10.0.14
- doc: Document the bls option for the grub bootloader
- Temporarily revert grub-bls default to false for SUSE distributions
  For the time being, SUSE distributions cannot handle KIWI's default
  to use BLS with GRUB2. Until they catch up, revert this for them only.
- kiwi/bootloader: restore backward compatibility for grub2 with bls
  The change to introduce the bls parameter broke backward compatibility
  with all existing kiwi descriptions for distributions that default to BLS.
  This fixes that by allowing the unset state to be equivalent to enabling it.
- Bump version: 10.0.12 to 10.0.13
- Overwrite compression setting only if randomized
  When building an encrypted image, the bundler never compressed
  the result. This overwrite from the runtime configuration and
  the default compression setting actually only makes sense when
  the image is randomized because only then a compression is
  for sure useless.
- Make sure lsblk output is sorted by dev name
  lsblk without the sorting option can provide the list
  of devices in different order. This patch makes sure
  lsblk sorts the output by the device name (bsc#1223374).
- Stop leaking plugins/{priorities,versionlock}.conf file with dnf4/5.
  This fixes the fedora issue
  https://bugzilla.redhat.com/show_bug.cgi?id=2270364
- Fix luks_randomize setting
  Make sure the value passed for luks_randomize in the description
  becomes effective. It was not possible to switch off luks_randomize
  because any "not" value was turned into a true value. The actual
  default should therefore only apply in case luks_randomize is
  not specified at all which means only a None value will turn
  into a true value for this setting.
- Fix package removal with dnf5
- Add 'bls' parameter for the bootloader
- Fix efifatimagesize attribute type
  The efifatimagesize attribute type value is set to "oem" but the documentation says
  that it is intended to be also used for creating ISO images. This causes a schema error
  when this attribute is set on a profile with type "iso" and blocks changing the EFI
  boot image size which is a problem if the image is bigger than 20M. This commit
  allows to specify the attribute also for the "iso" type
</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="10.2.12" release="1.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-10.2.12-1.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-10.2.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="10.2.12" release="1.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-10.2.12-1.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-10.2.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="10.2.12" release="1.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-10.2.12-1.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-10.2.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="10.2.12" release="1.1" arch="src" src="src/python-kiwi-10.2.12-1.1.src.rpm">
          <filename>python-kiwi-10.2.12-1.1.src.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>240</id>
    <title>Recommended update for dracut</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1741859555" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228086" id="1228086" title="On iSCSI root installation with bnx2i offload, iscsi is only activated after 4 minutes in initramfs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230468" id="1230468" title="dracut: nvmf module included without required kernel modules available" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231792" id="1231792" title="dracut fails to set systemd device timeout for some block devices" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232063" id="1232063" title="[Build 32.2] System with multipath fails to boot  during first boot during the installation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236982" id="1236982" title="Emergency shell due to network-legacy module not included" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237695" id="1237695" title="iSCSI multipath boot fails with just one path available" type="bugzilla" />
    </references>
    <description>This update for dracut fixes the following issues:

- Update to version 059+suse.591.ge2ab3f62:

  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)

- Update to version 059+suse.585.gc1e69422:

  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):

  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i

  Other:

  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)

- Update to version 059+suse.578.gd47ce28c:

  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)

- Update to version 059+suse.575.g06a9ae1f:

  Fixes for NVMeoF boot (bsc#1230468):

  * fix(nvmf): install (only) required nvmf modules
  * fix(nvmf): require NVMeoF modules
  * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly

</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="059+suse.591.ge2ab3f62" release="1.1" arch="src" src="src/dracut-059+suse.591.ge2ab3f62-1.1.src.rpm">
          <filename>dracut-059+suse.591.ge2ab3f62-1.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="059+suse.591.ge2ab3f62" release="1.1" arch="x86_64" src="x86_64/dracut-059+suse.591.ge2ab3f62-1.1.x86_64.rpm">
          <filename>dracut-059+suse.591.ge2ab3f62-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-debuginfo" epoch="0" version="059+suse.591.ge2ab3f62" release="1.1" arch="x86_64" src="x86_64/dracut-debuginfo-059+suse.591.ge2ab3f62-1.1.x86_64.rpm">
          <filename>dracut-debuginfo-059+suse.591.ge2ab3f62-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-debugsource" epoch="0" version="059+suse.591.ge2ab3f62" release="1.1" arch="x86_64" src="x86_64/dracut-debugsource-059+suse.591.ge2ab3f62-1.1.x86_64.rpm">
          <filename>dracut-debugsource-059+suse.591.ge2ab3f62-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="059+suse.591.ge2ab3f62" release="1.1" arch="x86_64" src="x86_64/dracut-fips-059+suse.591.ge2ab3f62-1.1.x86_64.rpm">
          <filename>dracut-fips-059+suse.591.ge2ab3f62-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>264</id>
    <title>Recommended update for net-snmp</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1743436237" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206044" id="1206044" title="MIB host-resource size calculation is broken for XFS - ref:_00D1igLOd._5005qGHkGL:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207697" id="1207697" title="netgroup support for net-snmp — ref:_00D1igLOd._5005qKa2bM:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214364" id="1214364" title="net-snmp: new release 5.9.4" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232030" id="1232030" title="L3-Question: logrotate try-restart affects snmp uptime OID" type="bugzilla" />
    </references>
    <description>This update for net-snmp fixes the following issues:

- Version update to 5.9.4 (bsc#1214364):

  * IMPORTANT: SNMP over TLS and/or DTLS are not functioning properly
    in this release with various versions of OpenSSL and will be fixed
    in a future release.

  * libsnmp:

    + Removed the unused SNMP_SWIPE_MEM() macro 
    + Fixed issues with DISPLAY-HINT
    + Miscellanious improvements to the transports
    + Handle multiple oldEngineID configuration lines 
    + Fixed issues with DNS names longer than 63 characters

  * agent:

    + Added a ignoremount configuration option for the HOST-MIB
    + Disallow SETs with a NULL varbind
    + Fixed the --enable-minimalist build

  * apps:

    + snmpset: allow SET with NULL varbind for testing
    + snmptrapd: improved MySQL logging code

  * general:

    + configure: removed `-Wno-deprecated` as it is no longer needed
    + miscellanious bug fixes

- Other issues fixed:

  * Removed legacy MIBs used by Velocity Software (jira#PED-6416)
  * Re-add support for hostname netgroups (bsc#1207697)
  * Fixed Systemd services setting "ProtectHome=true" that caused home directory size and allocation to be listed
    incorrectly (bsc#1206044)
  * Ensure logrotate reloads the configuration instead of restarting the service to prevent downtime (bsc#1232030)

</description>
    <pkglist>
      <collection>
        <package name="libsnmp40" epoch="0" version="5.9.4" release="1.1" arch="x86_64" src="x86_64/libsnmp40-5.9.4-1.1.x86_64.rpm">
          <filename>libsnmp40-5.9.4-1.1.x86_64.rpm</filename>
        </package>
        <package name="libsnmp40-debuginfo" epoch="0" version="5.9.4" release="1.1" arch="x86_64" src="x86_64/libsnmp40-debuginfo-5.9.4-1.1.x86_64.rpm">
          <filename>libsnmp40-debuginfo-5.9.4-1.1.x86_64.rpm</filename>
        </package>
        <package name="net-snmp" epoch="0" version="5.9.4" release="1.1" arch="src" src="src/net-snmp-5.9.4-1.1.src.rpm">
          <filename>net-snmp-5.9.4-1.1.src.rpm</filename>
        </package>
        <package name="net-snmp-debugsource" epoch="0" version="5.9.4" release="1.1" arch="x86_64" src="x86_64/net-snmp-debugsource-5.9.4-1.1.x86_64.rpm">
          <filename>net-snmp-debugsource-5.9.4-1.1.x86_64.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.4" release="1.1" arch="x86_64" src="x86_64/snmp-mibs-5.9.4-1.1.x86_64.rpm">
          <filename>snmp-mibs-5.9.4-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>263</id>
    <title>Recommended update for ignition</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1743403418" />
    <references>
    </references>
    <description>This update for ignition fixes the following issues:

- Drop "go clean" from the upstream build script: since we build in
- Fix order of previous change - *first* remount rw, *then* create
  directory.
- Apply (temporary) upstream patch from fedora-coreos-config for
  compatibility with systemd 256.
- Update to version 2.19.0:
  * Support LUKS encryption using IBM CEX secure keys on s390x
  * providers: add "akamai" provider
- Adding %check section
- Build scripts are executable by themselves now, remove explicit
  Bash call
- Update to version 2.18.0:
  * NEWS: update 2.18.0
  * azure: retry HTTP requests on codes 404, 410, and 429
  * docs: add missing scaleway link
  * providers: add scaleway
  * resource/url: customize local address (port)
  * stages/files: filter out non-existent paths before relabeling
  * docs/release-notes: tweak dracut module change
  * Bump minimum Go version to 1.20
  * dracut: Don't include the ignition module by default
  * ci: cancel previous build on PR update
  * Sync repo templates
  * Update build(deps)
- Increased required Go version
- module-setup.sh: Use $dracutsysrootdir
</description>
    <pkglist>
      <collection>
        <package name="ignition" epoch="0" version="2.19.0" release="1.1" arch="src" src="src/ignition-2.19.0-1.1.src.rpm">
          <filename>ignition-2.19.0-1.1.src.rpm</filename>
        </package>
        <package name="ignition" epoch="0" version="2.19.0" release="1.1" arch="x86_64" src="x86_64/ignition-2.19.0-1.1.x86_64.rpm">
          <filename>ignition-2.19.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="ignition-debuginfo" epoch="0" version="2.19.0" release="1.1" arch="x86_64" src="x86_64/ignition-debuginfo-2.19.0-1.1.x86_64.rpm">
          <filename>ignition-debuginfo-2.19.0-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>266</id>
    <title>Security update for libtasn1</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1743502385" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236878" id="1236878" title="VUL-0: CVE-2024-12133: libtasn1: Potential DoS in handling of numerous SEQUENCE OF or SET OF  elements" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12133" id="CVE-2024-12133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12133" type="cve" />
    </references>
    <description>This update for libtasn1 fixes the following issues:

- CVE-2024-12133: Fixed potential DoS in handling of numerous SEQUENCE OF or SET OF  elements (bsc#1236878).
</description>
    <pkglist>
      <collection>
        <package name="libtasn1" epoch="0" version="4.19.0" release="4.1" arch="src" src="src/libtasn1-4.19.0-4.1.src.rpm">
          <filename>libtasn1-4.19.0-4.1.src.rpm</filename>
        </package>
        <package name="libtasn1-6" epoch="0" version="4.19.0" release="4.1" arch="x86_64" src="x86_64/libtasn1-6-4.19.0-4.1.x86_64.rpm">
          <filename>libtasn1-6-4.19.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libtasn1-6-debuginfo" epoch="0" version="4.19.0" release="4.1" arch="x86_64" src="x86_64/libtasn1-6-debuginfo-4.19.0-4.1.x86_64.rpm">
          <filename>libtasn1-6-debuginfo-4.19.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libtasn1-debugsource" epoch="0" version="4.19.0" release="4.1" arch="x86_64" src="x86_64/libtasn1-debugsource-4.19.0-4.1.x86_64.rpm">
          <filename>libtasn1-debugsource-4.19.0-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>253</id>
    <title>Security update for python311</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1742384710" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=831629" id="831629" title="python3-base test test_faulthandler fails on ppc64" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174091" id="1174091" title="VUL-1: CVE-2019-20907: python,python36,python3,python27: in Lib/tarfile.py an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1210638" id="1210638" title="VUL-0: CVE-2023-27043: python39,python310,python27,python,python36,python3,python311: The e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which contain a special character" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219559" id="1219559" title="VUL-0: CVE-2023-52425: expat: denial of service (resource consumption) caused by processing large tokens" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219666" id="1219666" title="VUL-0: CVE-2023-6597: python,python3,python310,python311,python36,python39: tempfile.TemporaryDirectory fails removing dir in some edge cases related to symlinks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221854" id="1221854" title="VUL-0: CVE-2024-0450: python: The zipfile module is vulnerable to &quot;quoted-overlap&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225660" id="1225660" title="python311-pip package installs in /usr/lib by default" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226447" id="1226447" title="VUL-0: CVE-2024-0397: python,python3,python310,python311,python312,python36,python39: memory race condition in ssl.SSLContext certificate store methods" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226448" id="1226448" title="VUL-0: CVE-2024-4032: python,python3,python310,python311,python312,python36,python39: incorrect IPv4 and IPv6 private ranges" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227378" id="1227378" title="/usr/bin/idle* don't have executable bits" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227999" id="1227999" title="python reproducible builds" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228165" id="1228165" title="Position of SUSE Python interpreters on Externally managed environments" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228780" id="1228780" title="VUL-0: CVE-2024-6923: python,python3,python310,python311,python312,python36,python39: CPython : Email header injection due to unquoted newlines" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229596" id="1229596" title="VUL-0: CVE-2024-7592: python, cpython: Uncontrolled CPU resource consumption when in http.cookies module" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229704" id="1229704" title="VUL-0: CVE-2024-8088: python310,python311,python312,python39: denial of service in zipfile" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230227" id="1230227" title="VUL-0: CVE-2024-6232: python,python-base,python3,python3-base,python310,python311,python312,python36,python39: python: cpython: tarfile: ReDos via excessive backtracking while parsing header values" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230906" id="1230906" title="python312: has some mtime based .pyc files" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231795" id="1231795" title="python3-config contains some garbage flags" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232241" id="1232241" title="VUL-0: CVE-2024-9287: python,python3,python310,python311,python312,python36,python39: A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing ..." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236705" id="1236705" title="VUL-0: CVE-2025-0938: python: functions `urllib.parse.urlsplit` and `urlparse` accept domain names including square brackets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1238450" id="1238450" title="VUL-0: CVE-2025-1795: python: Mishandling of comma during folding and unicode-encoding of email headers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239210" id="1239210" title="python31x reproducible builds" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9947" id="CVE-2019-9947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9947" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20907" id="CVE-2019-20907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20907" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15523" id="CVE-2020-15523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15523" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15801" id="CVE-2020-15801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15801" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25236" id="CVE-2022-25236" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25236" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6597" id="CVE-2023-6597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6597" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27043" id="CVE-2023-27043" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27043" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52425" id="CVE-2023-52425" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52425" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0397" id="CVE-2024-0397" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0397" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0450" id="CVE-2024-0450" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0450" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4030" id="CVE-2024-4030" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4030" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4032" id="CVE-2024-4032" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4032" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6232" id="CVE-2024-6232" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6232" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6923" id="CVE-2024-6923" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6923" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7592" id="CVE-2024-7592" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7592" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8088" id="CVE-2024-8088" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8088" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9287" id="CVE-2024-9287" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9287" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0938" id="CVE-2025-0938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0938" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1795" id="CVE-2025-1795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1795" type="cve" />
      <reference href="https://github.com/python/cpython#105704" id="python/cpython#105704" title="https://github.com/python/cpython#105704" type="github" />
    </references>
    <description>This update for python311 fixes the following issues:

- Skip PGO with %want_reproducible_builds (bsc#1239210)

- CVE-2025-0938: Disallows square brackets ([ and ]) in domain names for parsed
  URLs (bsc#1236705).

- Configure externally_managed with a bcond (bsc#1228165).

- Update to 3.11.11:
  - Tools/Demos
    - gh-123418: Update GitHub CI workflows to use OpenSSL 3.0.15
      and multissltests to use 3.0.15, 3.1.7, and 3.2.3.
  - Tests
    - gh-125041: Re-enable skipped tests for zlib on the
      s390x architecture: only skip checks of the compressed
      bytes, which can be different between zlib’s software
      implementation and the hardware-accelerated implementation.
  - Security
    - gh-126623: Upgrade libexpat to 2.6.4
    - gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to
      consistently use the mapped IPv4 address value for deciding
      properties. Properties which have their behavior fixed are
      is_multicast, is_reserved, is_link_local, is_global, and
      is_unspecified.
  - Library
    - gh-124651: Properly quote template strings in venv
      activation scripts (bsc#1232241, CVE-2024-9287).

- Remove -IVendor/ from python-config (bsc#1231795)

- CVE-2024-9287: Properly quote path names provided when creating a
  virtual environment (bsc#1232241)

- Drop .pyc files from docdir for reproducible builds
  (bsc#1230906).

- Update to 3.11.10:
  - Security
    - gh-123678: Upgrade libexpat to 2.6.3
    - gh-121957: Fixed missing audit events around interactive
      use of Python, now also properly firing for ``python -i``,
      as well as for ``python -m asyncio``. The event in question
      is ``cpython.run_stdin``.
    - gh-122133: Authenticate the socket connection for the
      ``socket.socketpair()`` fallback on platforms where
      ``AF_UNIX`` is not available like Windows. Patch by
      Gregory P. Smith &lt;greg@krypto.org&gt; and Seth Larson
      &lt;seth@python.org&gt;. Reported by Ellie &lt;el@horse64.org&gt;
    - gh-121285: Remove backtracking from tarfile header parsing
      for ``hdrcharset``, PAX, and GNU sparse headers
      (bsc#1230227, CVE-2024-6232).
    - gh-118486: :func:`os.mkdir` on Windows now accepts
      *mode* of ``0o700`` to restrict the new directory to
      the current user. This fixes CVE-2024-4030 affecting
      :func:`tempfile.mkdtemp` in scenarios where the base
      temporary directory is more permissive than the default.
    - gh-116741: Update bundled libexpat to 2.6.2
  - Library
    - gh-123270: Applied a more surgical fix for malformed
      payloads in :class:`zipfile.Path` causing infinite loops
      (gh-122905) without breaking contents using legitimate
      characters (bsc#1229704, CVE-2024-8088).
    - gh-123067: Fix quadratic complexity in parsing ``"``-quoted
      cookie values with backslashes by :mod:`http.cookies`
      (bsc#1229596, CVE-2024-7592).
    - gh-122905: :class:`zipfile.Path` objects now sanitize names
      from the zipfile.
    - gh-121650: :mod:`email` headers with embedded newlines are
      now quoted on output. The :mod:`~email.generator` will now
      refuse to serialize (write) headers that are unsafely folded
      or delimited; see :attr:`~email.policy.Policy.verify_generated_headers`.
      (Contributed by Bas Bloemsaat and Petr Viktorin in
      :gh:`121650`; CVE-2024-6923, bsc#1228780).
    - gh-119506: Fix :meth:`!io.TextIOWrapper.write` method
      breaks internal buffer when the method is called again
      during flushing internal buffer.
    - gh-118643: Fix an AttributeError in the :mod:`email` module
      when re-fold a long address list. Also fix more cases of
      incorrect encoding of the address separator in the address
      list.
    - gh-113171: Fixed various false positives and false
      negatives in * :attr:`ipaddress.IPv4Address.is_private`
      (see these docs for details) *
      :attr:`ipaddress.IPv4Address.is_global` *
      :attr:`ipaddress.IPv6Address.is_private` *
      :attr:`ipaddress.IPv6Address.is_global` Also in the
      corresponding :class:`ipaddress.IPv4Network` and
      :class:`ipaddress.IPv6Network` attributes.
      Fixes bsc#1226448 (CVE-2024-4032).
    - gh-102988: :func:`email.utils.getaddresses` and
      :func:`email.utils.parseaddr` now return ``('', '')``
      2-tuples in more situations where invalid email addresses
      are encountered instead of potentially inaccurate
      values. Add optional *strict* parameter to these two
      functions: use ``strict=False`` to get the old behavior,
      accept malformed inputs. ``getattr(email.utils,
      'supports_strict_parsing', False)`` can be use to check if
      the *strict* paramater is available. Patch by Thomas Dwyer
      and Victor Stinner to improve the CVE-2023-27043 fix
      (bsc#1210638).
    - gh-67693: Fix :func:`urllib.parse.urlunparse` and
      :func:`urllib.parse.urlunsplit` for URIs with path starting
      with multiple slashes and no authority. Based on patch by
      Ashwin Ramaswami.
  - Core and Builtins
    - gh-112275: A deadlock involving ``pystate.c``'s
      ``HEAD_LOCK`` in ``posixmodule.c`` at fork is now
      fixed. Patch by ChuBoning based on previous Python 3.12 fix
      by Victor Stinner.
    - gh-109120: Added handle of incorrect star expressions, e.g
      ``f(3, *)``. Patch by Grigoryev Semyon


- CVE-2024-8088: Prevent malformed payload to cause infinite loops in
  zipfile.Path (bsc#1229704).

- Make pip and modern tools install directly in /usr/local when used by the user.
  (bsc#1225660).
  
- CVE-2024-4032: Fix rearranging definition of private v global IP addresses (bsc#1226448).

- Update to 3.11.9:
  * Security
    - gh-115398: Allow controlling Expat &gt;=2.6.0 reparse deferral
      (CVE-2023-52425,  bsc#1219559) by adding five new methods:
        xml.etree.ElementTree.XMLParser.flush()
        xml.etree.ElementTree.XMLPullParser.flush()
        xml.parsers.expat.xmlparser.GetReparseDeferralEnabled()
        xml.parsers.expat.xmlparser.SetReparseDeferralEnabled()
        xml.sax.expatreader.ExpatParser.flush()
    - gh-115399: Update bundled libexpat to 2.6.0
    - gh-115243: Fix possible crashes in collections.deque.index()
      when the deque is concurrently modified.
    - gh-114572: ssl.SSLContext.cert_store_stats() and
      ssl.SSLContext.get_ca_certs() now correctly lock access to the
      certificate store, when the ssl.SSLContext is shared across
      multiple threads (bsc#1226447, CVE-2024-0397).
  * Core and Builtins
    - gh-116296: Fix possible refleak in object.__reduce__() internal
      error handling.
    - gh-116034: Fix location of the error on a failed assertion.
    - gh-115823: Properly calculate error ranges in the parser when
      raising SyntaxError exceptions caused by invalid byte sequences.
      Patch by Pablo Galindo
    - gh-112087: For an empty reverse iterator for list will be
      reduced to reversed(). Patch by Donghee Na.
    - gh-115011: Setters for members with an unsigned integer type now
      support the same range of valid values for objects that has a
      __index__() method as for int.
    - gh-96497: Fix incorrect resolution of mangled class variables
      used in assignment expressions in comprehensions.
  * Library
    - gh-117310: Fixed an unlikely early &amp; extra Py_DECREF triggered
      crash in ssl when creating a new _ssl._SSLContext if CPython was
      built implausibly such that the default cipher list is empty or
      the SSL library it was linked against reports a failure from its
      C SSL_CTX_set_cipher_list() API.
    - gh-117178: Fix regression in lazy loading of self-referential
      modules, introduced in gh-114781.
    - gh-117084: Fix zipfile extraction for directory entries with the
      name containing backslashes on Windows.
    - gh-117110: Fix a bug that prevents subclasses of typing.Any to
      be instantiated with arguments. Patch by Chris Fu.
    - gh-90872: On Windows, subprocess.Popen.wait() no longer calls
      WaitForSingleObject() with a negative timeout: pass 0 ms if the
      timeout is negative. Patch by Victor Stinner.
    - gh-116957: configparser: Don’t leave ConfigParser values in an
      invalid state (stored as a list instead of a str) after an
      earlier read raised DuplicateSectionError or
      DuplicateOptionError.
    - gh-90095: Ignore empty lines and comments in .pdbrc
    - gh-116764: Restore support of None and other false values in
      urllib.parse functions parse_qs() and parse_qsl(). Also, they
      now raise a TypeError for non-zero integers and non-empty
      sequences.
    - gh-116811: In PathFinder.invalidate_caches, delegate to
      MetadataPathFinder.invalidate_caches.
    - gh-116600: Fix repr() for global Flag members.
    - gh-116484: Change automatically generated tkinter.Checkbutton
      widget names to avoid collisions with automatically generated
      tkinter.ttk.Checkbutton widget names within the same parent
      widget.
    - gh-116401: Fix blocking os.fwalk() and shutil.rmtree() on
      opening named pipe.
    - gh-116143: Fix a race in pydoc _start_server, eliminating a
      window in which _start_server can return a thread that is
      “serving” but without a docserver set.
    - gh-116325: typing: raise SyntaxError instead of AttributeError
      on forward references as empty strings.
    - gh-90535: Fix support of interval values &gt; 1 in
      logging.TimedRotatingFileHandler for when='MIDNIGHT' and
      when='Wx'.
    - gh-115978: Disable preadv(), readv(), pwritev(), and writev() on
      WASI.
    - Under wasmtime for WASI 0.2, these functions don’t pass
      test_posix
      (https://github.com/bytecodealliance/wasmtime/issues/7830).
    - gh-88352: Fix the computation of the next rollover time in the
      logging.TimedRotatingFileHandler handler. computeRollover() now
      always returns a timestamp larger than the specified time and
      works correctly during the DST change. doRollover() no longer
      overwrite the already rolled over file, saving from data loss
      when run at midnight or during repeated time at the DST change.
    - gh-87115: Set __main__.__spec__ to None when running a script
      with pdb
    - gh-76511: Fix UnicodeEncodeError in email.Message.as_string()
      that results when a message that claims to be in the ascii
      character set actually has non-ascii characters. Non-ascii
      characters are now replaced with the U+FFFD replacement
      character, like in the replace error handler.
    - gh-75988: Fixed unittest.mock.create_autospec() to pass the call
      through to the wrapped object to return the real result.
    - gh-115881: Fix issue where ast.parse() would incorrectly flag
      conditional context managers (such as with (x() if y else z()):
      ...) as invalid syntax if feature_version=(3, 8) was passed.
      This reverts changes to the grammar made as part of gh-94949.
    - gh-115886: Fix silent truncation of the name with an embedded
      null character in multiprocessing.shared_memory.SharedMemory.
    - gh-115809: Improve algorithm for computing which rolled-over log
      files to delete in logging.TimedRotatingFileHandler. It is now
      reliable for handlers without namer and with arbitrary
      deterministic namer that leaves the datetime part in the file
      name unmodified.
    - gh-74668: urllib.parse functions parse_qs() and parse_qsl() now
      support bytes arguments containing raw and percent-encoded
      non-ASCII data.
    - gh-67044: csv.writer() now always quotes or escapes '\r' and
      '\n', regardless of lineterminator value.
    - gh-115712: csv.writer() now quotes empty fields if delimiter is
      a space and skipinitialspace is true and raises exception if
      quoting is not possible.
    - gh-115618: Fix improper decreasing the reference count for None
      argument in property methods getter(), setter() and deleter().
    - gh-115570: A DeprecationWarning is no longer omitted on access
      to the __doc__ attributes of the deprecated typing.io and
      typing.re pseudo-modules.
    - gh-112006: Fix inspect.unwrap() for types with the __wrapper__
      data descriptor.
    - gh-101293: Support callables with the __call__() method and
      types with __new__() and __init__() methods set to class
      methods, static methods, bound methods, partial functions, and
      other types of methods and descriptors in
      inspect.Signature.from_callable().
    - gh-115392: Fix a bug in doctest where incorrect line numbers
      would be reported for decorated functions.
    - gh-114563: Fix several format() bugs when using the C
      implementation of Decimal: * memory leak in some rare cases when
      using the z format option (coerce negative 0) * incorrect output
      when applying the z format option to type F (fixed-point with
      capital NAN / INF) * incorrect output when applying the # format
      option (alternate form)
    - gh-115197: urllib.request no longer resolves the hostname before
      checking it against the system’s proxy bypass list on macOS and
      Windows.
    - gh-115198: Fix support of Docutils &gt;= 0.19 in distutils.
    - gh-115165: Most exceptions are now ignored when attempting to
      set the __orig_class__ attribute on objects returned when
      calling typing generic aliases (including generic aliases
      created using typing.Annotated). Previously only AttributeError
      was ignored. Patch by Dave Shawley.
    - gh-115133: Fix tests for XMLPullParser with Expat 2.6.0.
    - gh-115059: io.BufferedRandom.read1() now flushes the underlying
      write buffer.
    - gh-79382: Trailing ** no longer allows to match files and
      non-existing paths in recursive glob().
    - gh-114763: Protect modules loaded with importlib.util.LazyLoader
      from race conditions when multiple threads try to access
      attributes before the loading is complete.
    - gh-97959: Fix rendering class methods, bound methods, method and
      function aliases in pydoc. Class methods no longer have “method
      of builtins.type instance” note. Corresponding notes are now
      added for class and unbound methods. Method and function aliases
      now have references to the module or the class where the origin
      was defined if it differs from the current. Bound methods are
      now listed in the static methods section. Methods of builtin
      classes are now supported as well as methods of Python classes.
    - gh-112281: Allow creating union of types for typing.Annotated
      with unhashable metadata.
    - gh-111775: Fix importlib.resources.simple.ResourceHandle.open()
      for text mode, added missed stream argument.
    - gh-90095: Make .pdbrc and -c work with any valid pdb commands.
    - gh-107155: Fix incorrect output of help(x) where x is a lambda
      function, which has an __annotations__ dictionary attribute with
      a "return" key.
    - gh-105866: Fixed _get_slots bug which caused error when defining
      dataclasses with slots and a weakref_slot.
    - gh-60346: Fix ArgumentParser inconsistent with parse_known_args.
    - gh-100985: Update HTTPSConnection to consistently wrap IPv6
      Addresses when using a proxy.
    - gh-100884: email: fix misfolding of comma in address-lists
      over multiple lines in combination with unicode encoding
      (bsc#1238450 CVE-2025-1795)
    - gh-95782: Fix io.BufferedReader.tell(),
      io.BufferedReader.seek(), _pyio.BufferedReader.tell(),
      io.BufferedRandom.tell(), io.BufferedRandom.seek() and
      _pyio.BufferedRandom.tell() being able to return negative
      offsets.
    - gh-96310: Fix a traceback in argparse when all options in a
      mutually exclusive group are suppressed.
    - gh-93205: Fixed a bug in
      logging.handlers.TimedRotatingFileHandler where multiple
      rotating handler instances pointing to files with the same name
      but different extensions would conflict and not delete the
      correct files.
    - bpo-44865: Add missing call to localization function in
      argparse.
    - bpo-43952: Fix multiprocessing.connection.Listener.accept() to
      accept empty bytes as authkey. Not accepting empty bytes as key
      causes it to hang indefinitely.
    - bpo-42125: linecache: get module name from __spec__ if
      available. This allows getting source code for the __main__
      module when a custom loader is used.
    - gh-66543: Make mimetypes.guess_type() properly parsing of URLs
      with only a host name, URLs containing fragment or query, and
      filenames with only a UNC sharepoint on Windows. Based on patch
      by Dong-hee Na.
    - bpo-33775: Add ‘default’ and ‘version’ help text for
      localization in argparse.
  * Documentation
    - gh-115399: Document CVE-2023-52425 of Expat &lt;2.6.0 under “XML
      vulnerabilities”.
    - gh-115233: Fix an example for LoggerAdapter in the Logging
      Cookbook.
  * Tests
    - gh-83434: Disable JUnit XML output (--junit-xml=FILE command
      line option) in regrtest when hunting for reference leaks (-R
      option). Patch by Victor Stinner.
    - gh-117187: Fix XML tests for vanilla Expat &lt;2.6.0.
    - gh-115979: Update test_importlib so that it passes under WASI
      SDK 21.
    - gh-116307: Added import helper isolated_modules as CleanImport
      does not remove modules imported during the context.
    - gh-115720: Leak tests (-R, --huntrleaks) now show a summary of
      the number of leaks found in each iteration.
    - gh-115122: Add --bisect option to regrtest test runner: run
      failed tests with test.bisect_cmd to identify failing tests.
      Patch by Victor Stinner.
    - gh-115596: Fix ProgramPriorityTests in test_os permanently
      changing the process priority.
    - gh-115198: Fix test_check_metadata_deprecate in distutils tests
      with a newer Docutils.
  * Build
    - gh-116313: Get WASI builds to work under wasmtime 18 w/ WASI
      0.2/preview2 primitives.
    - gh-115167: Avoid vendoring vcruntime140_threads.dll when
      building with Visual Studio 2022 version 17.8.
  * Windows
    - gh-116773: Fix instances of &lt;_overlapped.Overlapped object at
      0xXXX&gt; still has pending operation at deallocation, the process
      may crash.
    - gh-91227: Fix the asyncio ProactorEventLoop implementation so
      that sending a datagram to an address that is not listening does
      not prevent receiving any more datagrams.
    - gh-115554: The installer now has more strict rules about
      updating the Python Launcher for Windows. In general, most users
      only have a single launcher installed and will see no
      difference. When multiple launchers have been installed, the
      option to install the launcher is disabled until all but one
      have been removed. Downgrading the launcher (which was never
      allowed) is now more obviously blocked.
    - gh-115543: Python Launcher for Windows can now detect Python
      3.13 when installed from the Microsoft Store, and will install
      Python 3.12 by default when PYLAUNCHER_ALLOW_INSTALL is set.
    - gh-115009: Update Windows installer to use SQLite 3.45.1.
  * IDLE
    - gh-88516: On macOS show a proxy icon in the title bar of editor
      windows to match platform behaviour.
  * Tools/Demos
    - gh-113516: Don’t set LDSHARED when building for WASI.
  * C API
    - gh-117021: Fix integer overflow in PyLong_AsPid() on non-Windows
      64-bit platforms.

- Add reference to CVE-2024-0450 (bsc#1221854) to changelog.
</description>
    <pkglist>
      <collection>
        <package name="python311" epoch="0" version="3.11.11" release="1.1" arch="src" src="src/python311-3.11.11-1.1.src.rpm">
          <filename>python311-3.11.11-1.1.src.rpm</filename>
        </package>
        <package name="python311" epoch="0" version="3.11.11" release="1.1" arch="x86_64" src="x86_64/python311-3.11.11-1.1.x86_64.rpm">
          <filename>python311-3.11.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses" epoch="0" version="3.11.11" release="1.1" arch="x86_64" src="x86_64/python311-curses-3.11.11-1.1.x86_64.rpm">
          <filename>python311-curses-3.11.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses-debuginfo" epoch="0" version="3.11.11" release="1.1" arch="x86_64" src="x86_64/python311-curses-debuginfo-3.11.11-1.1.x86_64.rpm">
          <filename>python311-curses-debuginfo-3.11.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debuginfo" epoch="0" version="3.11.11" release="1.1" arch="x86_64" src="x86_64/python311-debuginfo-3.11.11-1.1.x86_64.rpm">
          <filename>python311-debuginfo-3.11.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debugsource" epoch="0" version="3.11.11" release="1.1" arch="x86_64" src="x86_64/python311-debugsource-3.11.11-1.1.x86_64.rpm">
          <filename>python311-debugsource-3.11.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0" epoch="0" version="3.11.11" release="1.1" arch="x86_64" src="x86_64/libpython3_11-1_0-3.11.11-1.1.x86_64.rpm">
          <filename>libpython3_11-1_0-3.11.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0-debuginfo" epoch="0" version="3.11.11" release="1.1" arch="x86_64" src="x86_64/libpython3_11-1_0-debuginfo-3.11.11-1.1.x86_64.rpm">
          <filename>libpython3_11-1_0-debuginfo-3.11.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base" epoch="0" version="3.11.11" release="1.1" arch="x86_64" src="x86_64/python311-base-3.11.11-1.1.x86_64.rpm">
          <filename>python311-base-3.11.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base-debuginfo" epoch="0" version="3.11.11" release="1.1" arch="x86_64" src="x86_64/python311-base-debuginfo-3.11.11-1.1.x86_64.rpm">
          <filename>python311-base-debuginfo-3.11.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-core" epoch="0" version="3.11.11" release="1.1" arch="src" src="src/python311-core-3.11.11-1.1.src.rpm">
          <filename>python311-core-3.11.11-1.1.src.rpm</filename>
        </package>
        <package name="python311-core-debugsource" epoch="0" version="3.11.11" release="1.1" arch="x86_64" src="x86_64/python311-core-debugsource-3.11.11-1.1.x86_64.rpm">
          <filename>python311-core-debugsource-3.11.11-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>272</id>
    <title>Security update for libxml2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1743772049" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237363" id="1237363" title="VUL-0: CVE-2024-56171: libxml2: use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237370" id="1237370" title="VUL-0: CVE-2025-24928: libxml2: stack-based buffer overflow in xmlSnprintfElements in valid.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237418" id="1237418" title="VUL-0: CVE-2025-27113: libxml2: libxml2: NULL Pointer Dereference in libxml2 xmlPatMatch" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56171" id="CVE-2024-56171" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56171" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24928" id="CVE-2025-24928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24928" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27113" id="CVE-2025-27113" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27113" type="cve" />
    </references>
    <description>This update for libxml2 fixes the following issues:

  - CVE-2024-56171: Fixed use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363).
  - CVE-2025-24928: Fixed stack-based buffer overflow in xmlSnprintfElements in valid.c (bsc#1237370).
  - CVE-2025-27113: Fixed NULL Pointer Dereference in xmlPatMatch (bsc#1237418).
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.11.6" release="5.1" arch="x86_64" src="x86_64/libxml2-2-2.11.6-5.1.x86_64.rpm">
          <filename>libxml2-2-2.11.6-5.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2-debuginfo" epoch="0" version="2.11.6" release="5.1" arch="x86_64" src="x86_64/libxml2-2-debuginfo-2.11.6-5.1.x86_64.rpm">
          <filename>libxml2-2-debuginfo-2.11.6-5.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.11.6" release="5.1" arch="src" src="src/libxml2-2.11.6-5.1.src.rpm">
          <filename>libxml2-2.11.6-5.1.src.rpm</filename>
        </package>
        <package name="libxml2-debugsource" epoch="0" version="2.11.6" release="5.1" arch="x86_64" src="x86_64/libxml2-debugsource-2.11.6-5.1.x86_64.rpm">
          <filename>libxml2-debugsource-2.11.6-5.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.11.6" release="5.1" arch="x86_64" src="x86_64/libxml2-tools-2.11.6-5.1.x86_64.rpm">
          <filename>libxml2-tools-2.11.6-5.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-tools-debuginfo" epoch="0" version="2.11.6" release="5.1" arch="x86_64" src="x86_64/libxml2-tools-debuginfo-2.11.6-5.1.x86_64.rpm">
          <filename>libxml2-tools-debuginfo-2.11.6-5.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>269</id>
    <title>Recommended update for mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1743603505" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222834" id="1222834" title="[FIPS 140-3][NSS] RSA 1024 considerations" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224113" id="1224113" title="[FIPS 140-3] [NSS] Consider adding the CKM_ECDH1_COFACTOR_DERIVE to the approved mechanisms list." type="bugzilla" />
    </references>
    <description>This update for mozilla-nss fixes the following issues:

- FIPS: Do not pass in bad targetKeyLength parameters when checking for
  FIPS approval after keygen. This was causing false rejections.
- FIPS: Approve RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).
- FIPS: enforce approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.101.2" release="2.1" arch="x86_64" src="x86_64/libfreebl3-3.101.2-2.1.x86_64.rpm">
          <filename>libfreebl3-3.101.2-2.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3-debuginfo" epoch="0" version="3.101.2" release="2.1" arch="x86_64" src="x86_64/libfreebl3-debuginfo-3.101.2-2.1.x86_64.rpm">
          <filename>libfreebl3-debuginfo-3.101.2-2.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.101.2" release="2.1" arch="x86_64" src="x86_64/libsoftokn3-3.101.2-2.1.x86_64.rpm">
          <filename>libsoftokn3-3.101.2-2.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3-debuginfo" epoch="0" version="3.101.2" release="2.1" arch="x86_64" src="x86_64/libsoftokn3-debuginfo-3.101.2-2.1.x86_64.rpm">
          <filename>libsoftokn3-debuginfo-3.101.2-2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.101.2" release="2.1" arch="src" src="src/mozilla-nss-3.101.2-2.1.src.rpm">
          <filename>mozilla-nss-3.101.2-2.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.101.2" release="2.1" arch="x86_64" src="x86_64/mozilla-nss-3.101.2-2.1.x86_64.rpm">
          <filename>mozilla-nss-3.101.2-2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.101.2" release="2.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.101.2-2.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.101.2-2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs-debuginfo" epoch="0" version="3.101.2" release="2.1" arch="x86_64" src="x86_64/mozilla-nss-certs-debuginfo-3.101.2-2.1.x86_64.rpm">
          <filename>mozilla-nss-certs-debuginfo-3.101.2-2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-debuginfo" epoch="0" version="3.101.2" release="2.1" arch="x86_64" src="x86_64/mozilla-nss-debuginfo-3.101.2-2.1.x86_64.rpm">
          <filename>mozilla-nss-debuginfo-3.101.2-2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-debugsource" epoch="0" version="3.101.2" release="2.1" arch="x86_64" src="x86_64/mozilla-nss-debugsource-3.101.2-2.1.x86_64.rpm">
          <filename>mozilla-nss-debugsource-3.101.2-2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.101.2" release="2.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.101.2-2.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.101.2-2.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools-debuginfo" epoch="0" version="3.101.2" release="2.1" arch="x86_64" src="x86_64/mozilla-nss-tools-debuginfo-3.101.2-2.1.x86_64.rpm">
          <filename>mozilla-nss-tools-debuginfo-3.101.2-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>281</id>
    <title>Recommended update for cloud-init</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1744101501" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212476" id="1212476" title="patch shebang line match the python version required in the package" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219680" id="1219680" title="cloud-init: rename devices below VLAN fails again/on SLES 15 SP5 [ref:_00D1igLOd._500Tr50d6g:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227237" id="1227237" title="cloud-init: ValueError: Unable to find a system nic for mac [ref:_00D1igLOd._500TrD6z7n:ref]" type="bugzilla" />
    </references>
    <description>This update for cloud-init fixes the following issues:

- Wait for udev once if we cannot find the expected MAC (bsc#1227237)
- Remove dependency on /usr/bin/python3 via using the macros (bsc#1212476)
    * Brute force approach to skip renames if the device is already present
</description>
    <pkglist>
      <collection>
        <package name="cloud-init" epoch="0" version="23.3" release="8.1" arch="src" src="src/cloud-init-23.3-8.1.src.rpm">
          <filename>cloud-init-23.3-8.1.src.rpm</filename>
        </package>
        <package name="cloud-init" epoch="0" version="23.3" release="8.1" arch="x86_64" src="x86_64/cloud-init-23.3-8.1.x86_64.rpm">
          <filename>cloud-init-23.3-8.1.x86_64.rpm</filename>
        </package>
        <package name="cloud-init-config-suse" epoch="0" version="23.3" release="8.1" arch="x86_64" src="x86_64/cloud-init-config-suse-23.3-8.1.x86_64.rpm">
          <filename>cloud-init-config-suse-23.3-8.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>255</id>
    <title>Security update for python-Jinja2</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1742809877" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1238879" id="1238879" title="VUL-0: CVE-2025-27516: python-Jinja2: Jinja sandbox breakout through attr filter selecting format method" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27516" id="CVE-2025-27516" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27516" type="cve" />
    </references>
    <description>This update for python-Jinja2 fixes the following issues:

- CVE-2025-27516: Fixed sandbox breakout through attr filter selecting format method (bsc#1238879).
</description>
    <pkglist>
      <collection>
        <package name="python-Jinja2" epoch="0" version="3.1.2" release="8.1" arch="src" src="src/python-Jinja2-3.1.2-8.1.src.rpm">
          <filename>python-Jinja2-3.1.2-8.1.src.rpm</filename>
        </package>
        <package name="python311-Jinja2" epoch="0" version="3.1.2" release="8.1" arch="x86_64" src="x86_64/python311-Jinja2-3.1.2-8.1.x86_64.rpm">
          <filename>python311-Jinja2-3.1.2-8.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>256</id>
    <title>Security update for gnutls</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1742810017" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236974" id="1236974" title="VUL-0: CVE-2024-12243: gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12243" id="CVE-2024-12243" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12243" type="cve" />
    </references>
    <description>This update for gnutls fixes the following issues:

- CVE-2024-12243: Fixed inefficient DER decoding in libtasn1 which could lead to a remote denial-of-service (bsc#1236974).
</description>
    <pkglist>
      <collection>
        <package name="gnutls" epoch="0" version="3.8.3" release="3.1" arch="src" src="src/gnutls-3.8.3-3.1.src.rpm">
          <filename>gnutls-3.8.3-3.1.src.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.8.3" release="3.1" arch="x86_64" src="x86_64/gnutls-3.8.3-3.1.x86_64.rpm">
          <filename>gnutls-3.8.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls-debuginfo" epoch="0" version="3.8.3" release="3.1" arch="x86_64" src="x86_64/gnutls-debuginfo-3.8.3-3.1.x86_64.rpm">
          <filename>gnutls-debuginfo-3.8.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls-debugsource" epoch="0" version="3.8.3" release="3.1" arch="x86_64" src="x86_64/gnutls-debugsource-3.8.3-3.1.x86_64.rpm">
          <filename>gnutls-debugsource-3.8.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.8.3" release="3.1" arch="x86_64" src="x86_64/libgnutls30-3.8.3-3.1.x86_64.rpm">
          <filename>libgnutls30-3.8.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30-debuginfo" epoch="0" version="3.8.3" release="3.1" arch="x86_64" src="x86_64/libgnutls30-debuginfo-3.8.3-3.1.x86_64.rpm">
          <filename>libgnutls30-debuginfo-3.8.3-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>265</id>
    <title>Recommended update for pcr-oracle</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1743494072" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230316" id="1230316" title="[Build X.27.17] shim 15.8 upgrade  breaks encrypted boot" type="bugzilla" />
    </references>
    <description>This update for pcr-oracle fixes the following issues:

- Fixed the prediction of SbatLevelRT when Secure Boot is disabled
  (bsc#1230316)
- Make PCR4 a hard requirement for SbatLevelRT prediction (bsc#1230316)
</description>
    <pkglist>
      <collection>
        <package name="pcr-oracle" epoch="0" version="0.4.6" release="3.1" arch="src" src="src/pcr-oracle-0.4.6-3.1.src.rpm">
          <filename>pcr-oracle-0.4.6-3.1.src.rpm</filename>
        </package>
        <package name="pcr-oracle" epoch="0" version="0.4.6" release="3.1" arch="x86_64" src="x86_64/pcr-oracle-0.4.6-3.1.x86_64.rpm">
          <filename>pcr-oracle-0.4.6-3.1.x86_64.rpm</filename>
        </package>
        <package name="pcr-oracle-debuginfo" epoch="0" version="0.4.6" release="3.1" arch="x86_64" src="x86_64/pcr-oracle-debuginfo-0.4.6-3.1.x86_64.rpm">
          <filename>pcr-oracle-debuginfo-0.4.6-3.1.x86_64.rpm</filename>
        </package>
        <package name="pcr-oracle-debugsource" epoch="0" version="0.4.6" release="3.1" arch="x86_64" src="x86_64/pcr-oracle-debugsource-0.4.6-3.1.x86_64.rpm">
          <filename>pcr-oracle-debugsource-0.4.6-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>279</id>
    <title>Security update for procps</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1744099188" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236842" id="1236842" title="ps command segfaults when pid argument has a leading space" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4016" id="CVE-2023-4016" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4016" type="cve" />
    </references>
    <description>This update for procps fixes the following issues:

- Fixed regression introduced with the CVE-2023-4016 fix. The ps command
  segfaults when pid argument has a leading space (bsc#1236842).
</description>
    <pkglist>
      <collection>
        <package name="libprocps8" epoch="0" version="3.3.17" release="5.1" arch="x86_64" src="x86_64/libprocps8-3.3.17-5.1.x86_64.rpm">
          <filename>libprocps8-3.3.17-5.1.x86_64.rpm</filename>
        </package>
        <package name="libprocps8-debuginfo" epoch="0" version="3.3.17" release="5.1" arch="x86_64" src="x86_64/libprocps8-debuginfo-3.3.17-5.1.x86_64.rpm">
          <filename>libprocps8-debuginfo-3.3.17-5.1.x86_64.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.17" release="5.1" arch="src" src="src/procps-3.3.17-5.1.src.rpm">
          <filename>procps-3.3.17-5.1.src.rpm</filename>
        </package>
        <package name="procps" epoch="0" version="3.3.17" release="5.1" arch="x86_64" src="x86_64/procps-3.3.17-5.1.x86_64.rpm">
          <filename>procps-3.3.17-5.1.x86_64.rpm</filename>
        </package>
        <package name="procps-debuginfo" epoch="0" version="3.3.17" release="5.1" arch="x86_64" src="x86_64/procps-debuginfo-3.3.17-5.1.x86_64.rpm">
          <filename>procps-debuginfo-3.3.17-5.1.x86_64.rpm</filename>
        </package>
        <package name="procps-debugsource" epoch="0" version="3.3.17" release="5.1" arch="x86_64" src="x86_64/procps-debugsource-3.3.17-5.1.x86_64.rpm">
          <filename>procps-debugsource-3.3.17-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>286</id>
    <title>Recommended update for salt</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1744623125" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1215484" id="1215484" title="RHEL8 clients can not be onboarded since the update to 4.3.7" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1220905" id="1220905" title="salt-master: Error loading known_hosts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230642" id="1230642" title="Salt GitFS - AttributeError: '_pygit2.Blob' object has no attribute 'hex'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230944" id="1230944" title="Exception caught while initializing git_pillar remote" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231605" id="1231605" title="Adding a SLE Micro 5.5 client with the regular salt stack fails with:  AttributeError: 'str' object has no attribute 'get'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234022" id="1234022" title="&quot;virt-what&quot; does not detect Nutanix based VMs properly, grain shows &quot;virtual: physical&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234881" id="1234881" title="WIth external pillar salt-master throws intermittent errors: [CRITICAL] Exception caught while initializing git_pillar remote" type="bugzilla" />
    </references>
    <description>This update for salt fixes the following issues:

- Fixed aptpkg 'NoneType object has no attribute split' error
- Detect openEuler as RedHat family OS
- Ensure the correct crypt module is loaded
- Implemented multiple inventory for ansible.targets
- Made x509 module compatible with M2Crypto 0.44.0
- Removed deprecated code from x509.certificate_managed test mode
- Move logrotate config to /usr/etc/logrotate.d where possible
- Added DEB822 apt repository format support
- Made Salt-SSH work with all SSH passwords (bsc#1215484)
- Fixed issue of using update-alternatives with alts (#105)
- Fixed virt_query outputter and added support for block devices
- Made _auth calls visible with master stats
- Repair mount.fstab_present always returning pending changes
- Set virtual grain in Podman systemd container
- Fixed crash due wrong client reference on `SaltMakoTemplateLookup`
- Enhanced batch async and fixed some detected issues
- Fixed tests failures after "repo.saltproject.io" deprecation
- Fixed error to stat '/root/.gitconfig' on gitfs
  (bsc#1230944) (bsc#1234881) (bsc#1220905)
- Adapt to removal of hex attribute in pygit2 v1.15.0 (bsc#1230642)
- Enhanced smart JSON parsing when garbage is present (bsc#1231605)
- Fixed virtual grains for VMs running on Nutanix AHV (bsc#1234022)
- Fixed issues running on Python 3.12 and 3.13
- Enhancements of Salt packaging:
  * Use update-alternatives for all salt scripts
  * Use flexible dependencies for the subpackages
  * Made salt-minion to require flavored zypp-plugin
  * Made zyppnotify to use update-alternatives
  * Dropped unused yumnotify plugin
  * Added dependency to python3-dnf-plugins-core for RHEL based

</description>
    <pkglist>
      <collection>
        <package name="salt" epoch="0" version="3006.0" release="10.1" arch="src" src="src/salt-3006.0-10.1.src.rpm">
          <filename>salt-3006.0-10.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="10.1" arch="x86_64" src="x86_64/salt-3006.0-10.1.x86_64.rpm">
          <filename>salt-3006.0-10.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-master" epoch="0" version="3006.0" release="10.1" arch="x86_64" src="x86_64/salt-master-3006.0-10.1.x86_64.rpm">
          <filename>salt-master-3006.0-10.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="10.1" arch="x86_64" src="x86_64/salt-minion-3006.0-10.1.x86_64.rpm">
          <filename>salt-minion-3006.0-10.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="10.1" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-10.1.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-10.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>287</id>
    <title>Recommended update for qemu</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1745295794" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221812" id="1221812" title="qemu coredump when virsh migrate postcopy + virsh migrate-postcopy on sle15sp6 kvm host" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228079" id="1228079" title="SRSO mitigation in microcode not passed through KVM VMs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228343" id="1228343" title="Partner-L3: AMD Turin platform: SLES guests fail to boot when vcpu &gt;255" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230978" id="1230978" title="[SLES][15SP6][XEN][UEFI] qemu coredump when virsh dompmwakeup with 15SP7 FV UEFI guest system" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231166" id="1231166" title="The qemu translation is not being installed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232283" id="1232283" title="KVM live migration with --copy-storage-all is failing  - ref:_00D1igLOd._500TrKWfFp:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232728" id="1232728" title="No audio from guests after update to qemu 9.1.1" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233530" id="1233530" title="Problem with 'megasas' SCSI controller on qemu virtual machines" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236709" id="1236709" title="qemu-aarch64 invoked via binfmt_misc dumps core" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237603" id="1237603" title="[glibc2.41] qemu:qemu-linux-user fails to build" type="bugzilla" />
    </references>
    <description>This update for qemu fixes the following issues:

- linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
- elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
- linux-user: Honor elf alignment when placing images (bsc#1236709)
- tests/acpi: q35: Update host address width in DMAR (bsc#1228343)
- intel_iommu: Set default aw_bits to 48 starting from QEMU 9.2 (bsc#1228343)
- tests/acpi: q35: allow DMAR acpi table changes (bsc#1228343)
- Update version to 8.2.9
  * Full changelog here:
     https://lore.kernel.org/qemu-devel/568115c5-8908-4931-aae0-a57bf542f68a@tls.msk.ru/
  * Some backports:
     gdbstub/user-target: fix gdbserver int format (%d -&gt; %x)
     target/s390x: Fix MVC not always invalidating translation blocks
     physmem: fix qemu_ram_alloc_from_fd size calculation
     hw/usb/canokey: Fix buffer overflow for OUT packet
     target/arm: arm_reset_sve_state() should set FPSR, not FPCR
     hw/cxl: Fix msix_notify: Assertion `vector &lt; dev-&gt;msix_entries_nr`
     tests: acpi: update expected blobs
     pci: acpi: Windows 'PCI Label Id' bug workaround
     tests: acpi: whitelist expected blobs
     pci/msix: Fix msix pba read vector poll end calculation
     pci: ensure valid link status bits for downstream ports
     hw/usb/hcd-xhci-pci: Use modulo to select MSI vector as per spec
     backends/cryptodev-vhost-user: Fix local_error leaks
     tests/qtest/boot-serial-test: Correct HPPA machine name
     target/i386/cpu: Fix notes for CPU models
     docs: Correct release of TCG trace-events removal
     target/loongarch: Use actual operand size with vbsrl check
     s390x/s390-virtio-ccw: don't crash on weird RAM sizes
     vhost-user: fix shared object return values
     meson.build: Disallow libnfs v6 to fix the broken macOS build
     hw/intc/arm_gicv3_its: Zero initialize local DTEntry etc structs
     roms: re-add edk2-basetools target
     edk2: commit version info
     edk2: get version + date from git submodule
     x86/loader: only patch linux kernels
- nbd/server: avoid per-NBDRequest nbd_client_get/put() (bsc#1232283)
- [openSUSE][RPM] The qemu translation is not being installed (bsc#1231166)
- target/i386: Expose IBPB-BRTYPE and SBPB CPUID bits to the guest (bsc#1228079)
- [openSUSE] block: Move qcow2 invalidation query-block op_blocker
- scsi: megasas: Internal cdbs have 16-byte length (bsc#1233530)
- Update version to 8.2.8
  * Full changelog here:
     https://lore.kernel.org/qemu-devel/1b7d3242-abe9-408a-bd77-85162e0d0de4@tls.msk.ru/
  * Some backports:
     usb-hub: Fix handling port power control messages
     hw/audio/hda: fix memory leak on audio setup (bsc#1232728)
     hw/misc/mos6522: Fix bad class definition of the MOS6522 device
     contrib/plugins: add compat for g_memdup2
     target/i386: fix hang when using slow path for ptw_setl
     tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
     linux-user/arm: Select vdso for be8 and be32 modes
     linux-user/arm: Reduce vdso alignment to 4k
     linux-user: Tolerate CONFIG_LSM_MMAP_MIN_ADDR
     accel/tcg: Fix user-only probe_access_internal plugin check
     target/arm: Drop user-only special case in sve_stN_r
     linux-user: Fix setreuid and setregid to use direct syscalls
     target/i386: Fix legacy page table walk
     9pfs: fix crash on 'Treaddir' request
     hw/nvme: fix handling of over-committed queues
     migration: Ensure vmstate_save() sets errp
     target/arm: Fix SVE SDOT/UDOT/USDOT (4-way, indexed)
     target/ppc: Fix mtDPDES targeting SMT siblings
     target/ppc: Set ctx-&gt;opcode for decode_insn32()
     target/riscv: Fix vcompress with rvv_ta_all_1s
     target/riscv/kvm: clarify how 'riscv-aia' default works
     target/riscv/kvm: set 'aia_mode' to default in error path
     hw/intc/riscv_aplic: Check and update pending when write sourcecfg
     hw/intc/riscv_aplic: Fix in_clrip[x] read emulation
     target/riscv: Set vtype.vill on CPU reset
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="8.2.9" release="1.1" arch="src" src="src/qemu-8.2.9-1.1.src.rpm">
          <filename>qemu-8.2.9-1.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-audio-spice-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-audio-spice-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-audio-spice-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-audio-spice-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-block-curl-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-block-curl-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-block-curl-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-block-curl-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-block-iscsi-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-block-iscsi-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-block-iscsi-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-block-iscsi-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-block-rbd-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-block-rbd-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-block-rbd-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-block-rbd-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-block-ssh-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-block-ssh-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-block-ssh-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-block-ssh-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-chardev-spice-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-chardev-spice-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-chardev-spice-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-chardev-spice-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-debugsource" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-debugsource-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-debugsource-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-guest-agent-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-guest-agent-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-guest-agent-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-guest-agent-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-img" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-img-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-img-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-img-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-img-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-img-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="8.2.9" release="1.1" arch="noarch" src="noarch/qemu-ipxe-8.2.9-1.1.noarch.rpm">
          <filename>qemu-ipxe-8.2.9-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-ksm" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-ksm-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-ksm-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-lang" epoch="0" version="8.2.9" release="1.1" arch="noarch" src="noarch/qemu-lang-8.2.9-1.1.noarch.rpm">
          <filename>qemu-lang-8.2.9-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-pr-helper" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-pr-helper-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-pr-helper-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-pr-helper-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-pr-helper-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-pr-helper-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="8.2.91.16.3_3_ga95067eb" release="1.1" arch="noarch" src="noarch/qemu-seabios-8.2.91.16.3_3_ga95067eb-1.1.noarch.rpm">
          <filename>qemu-seabios-8.2.91.16.3_3_ga95067eb-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-tools-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-tools-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-tools-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-tools-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-tools-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-ui-opengl-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-ui-opengl-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-ui-opengl-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-ui-opengl-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="8.2.91.16.3_3_ga95067eb" release="1.1" arch="noarch" src="noarch/qemu-vgabios-8.2.91.16.3_3_ga95067eb-1.1.noarch.rpm">
          <filename>qemu-vgabios-8.2.91.16.3_3_ga95067eb-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-x86-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-x86-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-x86-debuginfo" epoch="0" version="8.2.9" release="1.1" arch="x86_64" src="x86_64/qemu-x86-debuginfo-8.2.9-1.1.x86_64.rpm">
          <filename>qemu-x86-debuginfo-8.2.9-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>278</id>
    <title>Security update for skopeo</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1744018526" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227056" id="1227056" title="VUL-0: CVE-2024-6104: skopeo: hashicorp/go-retryablehttp: url might write sensitive information to log file" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236483" id="1236483" title="VUL-0: CVE-2023-45288: skopeo: golang.org/x/net/http2: close connections when receiving too many headers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237613" id="1237613" title="VUL-0: CVE-2025-27144: skopeo: gopkg.in/square/go-jose.v2,gopkg.in/go-jose/go-jose.v2,github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1238685" id="1238685" title="VUL-0: CVE-2025-22870: skopeo: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288" id="CVE-2023-45288" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45288" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104" id="CVE-2024-6104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22870" id="CVE-2025-22870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22870" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27144" id="CVE-2025-27144" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27144" type="cve" />
    </references>
    <description>This update for skopeo fixes the following issues:

- CVE-2025-22870: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs  (bsc#1238685)
- CVE-2025-27144: gopkg.in/square/go-jose.v2,gopkg.in/go-jose/go-jose.v2,github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service  (bsc#1237613)
- CVE-2024-6104: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227056)
- CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers (bsc#1236483)
</description>
    <pkglist>
      <collection>
        <package name="skopeo" epoch="0" version="1.14.4" release="3.1" arch="src" src="src/skopeo-1.14.4-3.1.src.rpm">
          <filename>skopeo-1.14.4-3.1.src.rpm</filename>
        </package>
        <package name="skopeo" epoch="0" version="1.14.4" release="3.1" arch="x86_64" src="x86_64/skopeo-1.14.4-3.1.x86_64.rpm">
          <filename>skopeo-1.14.4-3.1.x86_64.rpm</filename>
        </package>
        <package name="skopeo-debuginfo" epoch="0" version="1.14.4" release="3.1" arch="x86_64" src="x86_64/skopeo-debuginfo-1.14.4-3.1.x86_64.rpm">
          <filename>skopeo-debuginfo-1.14.4-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>292</id>
    <title>Security update for podman</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1745332165" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239330" id="1239330" title="VUL-0: CVE-2025-22869: podman: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104" id="CVE-2024-6104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22869" id="CVE-2025-22869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22869" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27144" id="CVE-2025-27144" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27144" type="cve" />
    </references>
    <description>This update for podman fixes the following issues:

- CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239330).
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.9.5" release="4.1" arch="src" src="src/podman-4.9.5-4.1.src.rpm">
          <filename>podman-4.9.5-4.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="4.1" arch="x86_64" src="x86_64/podman-4.9.5-4.1.x86_64.rpm">
          <filename>podman-4.9.5-4.1.x86_64.rpm</filename>
        </package>
        <package name="podman-debuginfo" epoch="0" version="4.9.5" release="4.1" arch="x86_64" src="x86_64/podman-debuginfo-4.9.5-4.1.x86_64.rpm">
          <filename>podman-debuginfo-4.9.5-4.1.x86_64.rpm</filename>
        </package>
        <package name="podman-docker" epoch="0" version="4.9.5" release="4.1" arch="noarch" src="noarch/podman-docker-4.9.5-4.1.noarch.rpm">
          <filename>podman-docker-4.9.5-4.1.noarch.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="4.1" arch="x86_64" src="x86_64/podman-remote-4.9.5-4.1.x86_64.rpm">
          <filename>podman-remote-4.9.5-4.1.x86_64.rpm</filename>
        </package>
        <package name="podman-remote-debuginfo" epoch="0" version="4.9.5" release="4.1" arch="x86_64" src="x86_64/podman-remote-debuginfo-4.9.5-4.1.x86_64.rpm">
          <filename>podman-remote-debuginfo-4.9.5-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>293</id>
    <title>Security update for pam_pkcs11</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1745332165" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237058" id="1237058" title="VUL-0: CVE-2025-24031: pam_pkcs11: pam_pkcs11: PAM-PKCS#11 vulnerable to segmentation fault on ctrl-c/ctrl-d when asked for PIN" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237062" id="1237062" title="VUL-0: CVE-2025-24032: pam_pkcs11: pam_pkcs11: PAM-PKCS#11 vulnerable to authentication bypass with default value for `cert_policy` (`none`)" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24031" id="CVE-2025-24031" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24031" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24032" id="CVE-2025-24032" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24032" type="cve" />
    </references>
    <description>This update for pam_pkcs11 fixes the following issues:

- CVE-2025-24031: Fixed segmentation fault on ctrl-c/ctrl-d when asked for PIN (bsc#1237058).
- CVE-2025-24032: Fixed authentication bypass with default value for `cert_policy` (`none`) (bsc#1237062).
</description>
    <pkglist>
      <collection>
        <package name="pam_pkcs11" epoch="0" version="0.6.12" release="3.1" arch="src" src="src/pam_pkcs11-0.6.12-3.1.src.rpm">
          <filename>pam_pkcs11-0.6.12-3.1.src.rpm</filename>
        </package>
        <package name="pam_pkcs11" epoch="0" version="0.6.12" release="3.1" arch="x86_64" src="x86_64/pam_pkcs11-0.6.12-3.1.x86_64.rpm">
          <filename>pam_pkcs11-0.6.12-3.1.x86_64.rpm</filename>
        </package>
        <package name="pam_pkcs11-debuginfo" epoch="0" version="0.6.12" release="3.1" arch="x86_64" src="x86_64/pam_pkcs11-debuginfo-0.6.12-3.1.x86_64.rpm">
          <filename>pam_pkcs11-debuginfo-0.6.12-3.1.x86_64.rpm</filename>
        </package>
        <package name="pam_pkcs11-debugsource" epoch="0" version="0.6.12" release="3.1" arch="x86_64" src="x86_64/pam_pkcs11-debugsource-0.6.12-3.1.x86_64.rpm">
          <filename>pam_pkcs11-debugsource-0.6.12-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>289</id>
    <title>Recommended update for python-azure-agent</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1745315004" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1203164" id="1203164" title="Unsupported WALinux Agent Version in SUSE images (2.2.49)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222620" id="1222620" title="waagent failed to start" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227600" id="1227600" title="L3-Question: Condition check resulted in Azure Linux Agent being skipped after patching" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235140" id="1235140" title="Update Azure agent to latest version" type="bugzilla" />
      <reference href="https://jira.suse.com/browse/PED-1298" id="PED-1298" title="https://jira.suse.com/browse/PED-1298" type="jira" />
    </references>
    <description>This update for python-azure-agent fixes the following issues:

- Update to version 2.12.04 (bsc#1235140)
  + Remove the patch handeled by config file specialization
    sub-packages
  + The waagent script is executable and we set the proper interpreter
      using the macro for multibuild python. Do prefix the execution in the
      service file wit the interpreter
  + Fix install_requires list syntax
  + Update spec file
    * Remove conditions for distros no longer maintained
    * Simplify build and install conditionals using macros
  + Enable GA versioning
  + Cgroups api refactor for v2
  + Fix JIT for FIPS 140-3
  + reset network service unit file if python version changes
  + Recognize SLE-Micro as a SLE based distribution
  + Add distutils/version.py to azurelinuxagent
  + Use legacycrypt instead of crypt on Python greater than 3.13
  + Fix osutil/default route_add to pass string array.
  + Fix argument to GoalState.init
  + Add lock around access to fast_track.json
  + Add DistroVersion class to compare distro versions
  + LogCollector should skip and log warning for files that don't exist
  + check for unexpected process in agent cgroups before cgroups enabled
  + [Redo with correct source/target]: Remove check for "ibXX" interface
    format and rework mac-address regex to expand support
  + Fix Ubuntu version codename for 24.04
  + Update test certificate data
  + move setupslice after cgroupsv2 check, remove unit file for
    log collector and remove fiirewall daemon-reload
  + Address pylint warning deprecated-method
  + Run pylint on Python 3.11
  + Run unit tests with pytest on Python greater than 3.10
  + Log logcollector cgroups if process is found in unexpected slice
  + remove secret and use cert for aad app in e2e pipeline
  + suppress pylint warn contextmanager-generator-missing-cleanup
  + Switching to SNI based authentication for aad app
  + updated PR template
  + Avoiding mocked exception from being lost on test when using
    python 3.12: complete mocked info
  + Add more useful logging statement for agent unit properties
  + Remove wireserver fallback for imds calls
  + Remove unused import
  + Add support for Azure Linux 3
  + Fix pytest warnings
  + Allow use of node 16
  + Send controller/cgroup path telemetry
- From 2.13.0.2
  + Add support for nftables (+ refactoring of firewall code)
  + Create walinuxagent nftable atomically
  + Features in progress (Verify extension signature/Policy Enforcement)
  + Parse encodedSignature property from EGS
  + Add Regorus policy engine framework
  + Remove Regorus and platform check for policy enforcement
  + Telemetry (update logcollector telemetry with common properties)
  + Handle non-boolean when parsing extension manifests
  + Fix unicode type check when parsing extension manifests
  + Telemetry: high-priority events
  + Telemetry: report apparent dead code
  + Cleanup: remove AMA extension services cgroups tracking code
  + Accommodate the new behavior in OpenSSL 3.2.2 when given an
    empty input
- From 2.11.1.12
  + Remove multi config extension status only on extension delete
- From 2.111.1.4
  + General Improvements
  + Improvements in telemetry for firewall settings
- From 2.10.0.8
  + GA versioning
  + Disabled GA versioning
  + Add regular expression to match logs from very old agents
  + Remove empty "distro" module
  + Enable Python 2.7 for unit tests
  + Add check for noexec on Permission denied errors
  + Reorganize file structure of unit tests
  + Report useful message when extension processing is disabled
  + Add log and telemetry event for extension disabled
  + Cleanup common directory
  + Fix agent memory usage check
  + enable rhel/centos agent-cgroups
  + Add support for EC certificates
  + Add Cpu Arch in local logs and telemetry events
  + Clarify support status of installing from source.
  + Gathering Guest ProxyAgent Log Files
  + Remove debug info from waagent.status.json
  + Handle errors when adding logs to the archive
  + Update supported Ubuntu versions
  + Fix pylint warning
  + Add information about HTTP proxies
  + update the proxy agenet log folder for logcollector
  + Add config parameter to wait for cloud-init
    (Extensions.WaitForCloudInit) [Added in 2.10.0.8]
  + Adding AutoUpdate.UpdateToLatestVersion new flag support
    [Added in 2.10.0.8]
  + Check certificates only if certificates are included in goal state
  + Redact access tokens from extension's output
  + Fix name of single IB device when provisioning RDMA
  + Port NSBSD system to the latest version of waagent
  + fix daemon version
  + fix version checking in setup.py
  + fix(ubuntu): Point to correct dhcp lease files
  + Download certs on FT GS after check_certificates only when missing
    from disk
  + Add support for EC certificates [Added in 2.10.0.5]
  + Fix for "local variable _COLLECT_NOEXEC_ERRORS referenced before
    assignment" [Added in 2.10.0.5]
  + Cache daemon version [Added in 2.10.0.5]
  + undo get daemon version change [Added in 2.10.0.5]
  + fix self-update frequency to spread over 24 hrs for regular type
    and 4 hrs for hotfix [Added in 2.10.0.5]
  + ignore dependencies from extensions that do not have settings
    [Added in 2.10.0.6]
  + Do not reset the mode of a extension's log directory
    [Added in 2.10.0.8]
  + skip cgroup monitoring if log collector doesn't start by the agent.
    [Added in 2.10.0.8]
  + NM should not be restarted during hostname publish if NM_CONTROLLED=y
    [Added in 2.10.0.8]
  + Daemon should remove stale published_hostname file and log
    useful warning [Added in 2.10.0.8]
  + Revert changes to publish_hostname in RedhatOSModernUtil
    [Added in 2.10.0.8]
  + Recover primary nic if down after publishing hostname in
    RedhatOSUtil [Added in 2.10.0.8]
- fix a few typos in the spec file and use proper macros where
  applicable
- remove python3 requires
- Restart the agent (bsc#1227600)
  + The agent service gets restarted in post but may fail due to a missing
    config file. config files were split into their own package previously.
    When we detect that we have to restore a config file we also need
    to restart the agent again.
</description>
    <pkglist>
      <collection>
        <package name="python-pyasn1" epoch="0" version="0.5.0" release="2.9" arch="src" src="src/python-pyasn1-0.5.0-2.9.src.rpm">
          <filename>python-pyasn1-0.5.0-2.9.src.rpm</filename>
        </package>
        <package name="python311-pyasn1" epoch="0" version="0.5.0" release="2.9" arch="noarch" src="noarch/python311-pyasn1-0.5.0-2.9.noarch.rpm">
          <filename>python311-pyasn1-0.5.0-2.9.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>295</id>
    <title>Security update for libxslt</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1745330809" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1238591" id="1238591" title="VUL-0: CVE-2023-40403: libxslt: libxslt: Processing web content may disclose sensitive information" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239625" id="1239625" title="VUL-0: CVE-2025-24855: libxslt: numbers.c in libxslt before 1.1.43 has a use-after-free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239637" id="1239637" title="VUL-0: CVE-2024-55549: libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList)" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40403" id="CVE-2023-40403" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40403" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-55549" id="CVE-2024-55549" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-55549" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24855" id="CVE-2025-24855" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24855" type="cve" />
    </references>
    <description>This update for libxslt fixes the following issues:

* CVE-2025-24855: Fix use-after-free of XPath context node (bsc#1239625) 
* CVE-2024-55549: Fix UAF related to excluded namespaces (bsc#1239637)
* CVE-2023-40403: Make generate-id() deterministic (bsc#1238591)
</description>
    <pkglist>
      <collection>
        <package name="libexslt0" epoch="0" version="1.1.38" release="4.1" arch="x86_64" src="x86_64/libexslt0-1.1.38-4.1.x86_64.rpm" embargo_date="2025-05-01">
          <filename>libexslt0-1.1.38-4.1.x86_64.rpm</filename>
        </package>
        <package name="libexslt0-debuginfo" epoch="0" version="1.1.38" release="4.1" arch="x86_64" src="x86_64/libexslt0-debuginfo-1.1.38-4.1.x86_64.rpm" embargo_date="2025-05-01">
          <filename>libexslt0-debuginfo-1.1.38-4.1.x86_64.rpm</filename>
        </package>
        <package name="libxslt" epoch="0" version="1.1.38" release="4.1" arch="src" src="src/libxslt-1.1.38-4.1.src.rpm" embargo_date="2025-05-01">
          <filename>libxslt-1.1.38-4.1.src.rpm</filename>
        </package>
        <package name="libxslt-debugsource" epoch="0" version="1.1.38" release="4.1" arch="x86_64" src="x86_64/libxslt-debugsource-1.1.38-4.1.x86_64.rpm" embargo_date="2025-05-01">
          <filename>libxslt-debugsource-1.1.38-4.1.x86_64.rpm</filename>
        </package>
        <package name="libxslt1" epoch="0" version="1.1.38" release="4.1" arch="x86_64" src="x86_64/libxslt1-1.1.38-4.1.x86_64.rpm" embargo_date="2025-05-01">
          <filename>libxslt1-1.1.38-4.1.x86_64.rpm</filename>
        </package>
        <package name="libxslt1-debuginfo" epoch="0" version="1.1.38" release="4.1" arch="x86_64" src="x86_64/libxslt1-debuginfo-1.1.38-4.1.x86_64.rpm" embargo_date="2025-05-01">
          <filename>libxslt1-debuginfo-1.1.38-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>270</id>
    <title>Recommended update for container-selinux</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1743666644" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221720" id="1221720" title="[SELinux] installation could break when container-selinux is installed before selinux-policy" type="bugzilla" />
    </references>
    <description>This update for container-selinux fixes the following issues:

- Update to version 2.236.0:

  * Allow super privileged containers to use RealtimeKit for scheduling
  * Add container_ro_file_t to the podman artifact store

- Update to version 2.235.0:

  * Bump to v2.235.0
  * container_log{reader,writer}_t: allow watch file
  * RPM: Update gating config
  * Enable aarch64 testing
  * TMT: simplify podman tests
  * feat: support /var/lib/crio

- Update to version 2.234.2:

  * TMT: enable epel idomatically
  * Packit: switch back to fedora-all
  * RPM: Bump Epoch to 4
  * rpm: ship manpage
  * Add proper labeling for RamaLama
  * Packit: remove rhel / epel jobs
  * packit: remove unused file

- Add BuildRequires selinux-policy-%{selinuxtype} to enable building
  for SLFO. Might be removed in the future again when 1231252
  is fixed.

- Update to version 2.233.0:

  * container_engine_t: small change to allow non root exec in a container
  * RPM: explicitly list ghosted paths and skip mode verification
  * container-selinux install on non selinux-policy-targeted systems (#332)
  * set container_log_t type for /var/log/kube-apiserver
  * Allow kubelet_t to create a sock file kubelet_var_lib_t
  * dontaudit spc_t to mmap_zero
  * Packit: update targets (#330)
  * container_engine_t: another round of small improvements (#327)
  * Allow container_device_plugin_t to use the network (#325)
  * RPM: cleanup changelog (#324)
  * TMT: Simplify tests

- Update to version 2.232.1:

  * Bump to v2.232.1
  * TMT: fix srpm download syntax on rawhide
  * Bump to 2.232.0
  * Packit: remove `update_release` key from downstream jobs (#313)
  * Update container-selinux.8 man page
  * Add ownership of /usr/share/udica (#312)
  * Packit/TMT: upstream maintenance of downstream gating tests
  * extend container_engine_t again
  * Allow spc_t to use localectl
  * Allow spc_t to use timedatectl
  * introduce container_use_xserver_devices boolean to allow GPU access

- Update to version 2.231.0:

  * Allow container domains to communicate with spc_t unix_stream_sockets
  * Move to %posttrans to ensure selinux-policy got updated before
    the commands run (bsc#1221720)

- Manual update to version 2.230.0+git4.a8e389d to include this 
  commit that is needed for the main selinux-policy update to work:

  * Rename all /var/run file context entries to /run

- Update to version 2.230.0:

  * Move to tar_scm based packaging: added _service and _servicedata
  * Allow containers to unmount file systems
  * Add buildah as a container_runtime_exec_t label
  * Additional rules for container_user_t
  * improve container_engine_t

- Update to version 2.228:

  * Allow container domains to watch fifo_files
  * container_engine_t: improve for podman in kubernetes case
  * Allow spc_t to transition to install_t domain
  * Default to allowing containers to use dri devices
  * Allow access to BPF Filesystems
  * Fix kubernetes transition rule
  * Label kubensenter as well as kubenswrapper
  * Allow container domains to execute container_runtime_tmpfs_t files
  * Allow container domains to ptrace themselves
  * Allow container domains to use container_runtime_tmpfs_t as an entrypoint
  * Add boolean to allow containers to use dri devices
  * Give containers access to pod resources endpoint
  * Label kubenswrapper kubelet_exec_t

- Update to version 2.222:

  * Allow containers to read/write inherited dri devices

- Update to version 2.221:

  * Allow containers to shutdown sockets inherited from container
    runtimes
  * Allow spc_t to use execmod libraries on container file systems
  * Add boolean to allow containers to read all cert files
  * More MLS Policy allow rules
  * Allow container runtimes using pasta bind icmp_socket to port_t
  * Fix spc_t transitions from container_runtime_domain

- Update to version 2.215.0:

  * Add some MLS rules to policy
  * Allow container runtime to dyntransition to spc_t
  * Tighten controls on confined users
  * Add labels for /var/lib/shared
  * Cleanup entrypoint definitions
  * Allow container_device_plugin_t access to debugfs
  * Allow containers which use devices to map them

</description>
    <pkglist>
      <collection>
        <package name="container-selinux" epoch="0" version="2.236.0" release="1.1" arch="noarch" src="noarch/container-selinux-2.236.0-1.1.noarch.rpm">
          <filename>container-selinux-2.236.0-1.1.noarch.rpm</filename>
        </package>
        <package name="container-selinux" epoch="0" version="2.236.0" release="1.1" arch="src" src="src/container-selinux-2.236.0-1.1.src.rpm">
          <filename>container-selinux-2.236.0-1.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>290</id>
    <title>Security update for git</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1745330809" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235600" id="1235600" title="VUL-0: CVE-2024-50349: git: passwords for trusted sites could be sent to untrusted sites" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235601" id="1235601" title="VUL-0: CVE-2024-52006: git: Carriage Returns via the credential protocol to credential helpers" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50349" id="CVE-2024-50349" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50349" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52006" id="CVE-2024-52006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52006" type="cve" />
    </references>
    <description>This update for git fixes the following issues:

- CVE-2024-50349: Passwords for trusted sites could be sent to untrusted sites (bsc#1235600).
- CVE-2024-52006: Carriage Returns via the credential protocol to credential helpers (bsc#1235601).
</description>
    <pkglist>
      <collection>
        <package name="git" epoch="0" version="2.45.1" release="2.1" arch="src" src="src/git-2.45.1-2.1.src.rpm">
          <filename>git-2.45.1-2.1.src.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.45.1" release="2.1" arch="x86_64" src="x86_64/git-2.45.1-2.1.x86_64.rpm">
          <filename>git-2.45.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.45.1" release="2.1" arch="x86_64" src="x86_64/git-core-2.45.1-2.1.x86_64.rpm">
          <filename>git-core-2.45.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="git-core-debuginfo" epoch="0" version="2.45.1" release="2.1" arch="x86_64" src="x86_64/git-core-debuginfo-2.45.1-2.1.x86_64.rpm">
          <filename>git-core-debuginfo-2.45.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="git-debuginfo" epoch="0" version="2.45.1" release="2.1" arch="x86_64" src="x86_64/git-debuginfo-2.45.1-2.1.x86_64.rpm">
          <filename>git-debuginfo-2.45.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="git-debugsource" epoch="0" version="2.45.1" release="2.1" arch="x86_64" src="x86_64/git-debugsource-2.45.1-2.1.x86_64.rpm">
          <filename>git-debugsource-2.45.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.45.1" release="2.1" arch="x86_64" src="x86_64/perl-Git-2.45.1-2.1.x86_64.rpm">
          <filename>perl-Git-2.45.1-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>298</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1745416751" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237180" id="1237180" title="vmtoolsd and VGAuthd service is disabled by default after reinstall open-vm-tools" type="bugzilla" />
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section (bsc#1237180).
- remove unused pcre build dependency
- Revert previous change.  The proposed
  solutions was non-standard.
- Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default (bsc#1237180).
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.5.0" release="2.1" arch="x86_64" src="x86_64/libvmtools0-12.5.0-2.1.x86_64.rpm">
          <filename>libvmtools0-12.5.0-2.1.x86_64.rpm</filename>
        </package>
        <package name="libvmtools0-debuginfo" epoch="0" version="12.5.0" release="2.1" arch="x86_64" src="x86_64/libvmtools0-debuginfo-12.5.0-2.1.x86_64.rpm">
          <filename>libvmtools0-debuginfo-12.5.0-2.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.5.0" release="2.1" arch="src" src="src/open-vm-tools-12.5.0-2.1.src.rpm">
          <filename>open-vm-tools-12.5.0-2.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.5.0" release="2.1" arch="x86_64" src="x86_64/open-vm-tools-12.5.0-2.1.x86_64.rpm">
          <filename>open-vm-tools-12.5.0-2.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools-debuginfo" epoch="0" version="12.5.0" release="2.1" arch="x86_64" src="x86_64/open-vm-tools-debuginfo-12.5.0-2.1.x86_64.rpm">
          <filename>open-vm-tools-debuginfo-12.5.0-2.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools-debugsource" epoch="0" version="12.5.0" release="2.1" arch="x86_64" src="x86_64/open-vm-tools-debugsource-12.5.0-2.1.x86_64.rpm">
          <filename>open-vm-tools-debugsource-12.5.0-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>299</id>
    <title>Recommended update for systemd</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1745417660" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234015" id="1234015" title="ID_NET_NAME_PATH appended with 'np{digit}' in SLES 15 SP6 [ref:_00D1igLOd._500TrO7ch9:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236886" id="1236886" title="SLES15 SP6 - systemd journal file rotation because of different sequence number ID" type="bugzilla" />
      <reference href="https://jira.suse.com/browse/PED-12317" id="PED-12317" title="https://jira.suse.com/browse/PED-12317" type="jira" />
    </references>
    <description>This update for systemd fixes the following issues:

- Maintain the network device naming scheme used on SLE15 (jsc#PED-12317)
  This shouldn't cause problems as predictable naming schemes are disabled on
  SLMicro-6.1 (net.ifnames=0 is set on the kernel command line by default).

- allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/libsystemd0-254.24-1.1.x86_64.rpm">
          <filename>libsystemd0-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0-debuginfo" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/libsystemd0-debuginfo-254.24-1.1.x86_64.rpm">
          <filename>libsystemd0-debuginfo-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/libudev1-254.24-1.1.x86_64.rpm">
          <filename>libudev1-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1-debuginfo" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/libudev1-debuginfo-254.24-1.1.x86_64.rpm">
          <filename>libudev1-debuginfo-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="254.24" release="1.1" arch="src" src="src/systemd-254.24-1.1.src.rpm">
          <filename>systemd-254.24-1.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/systemd-254.24-1.1.x86_64.rpm">
          <filename>systemd-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/systemd-container-254.24-1.1.x86_64.rpm">
          <filename>systemd-container-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container-debuginfo" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/systemd-container-debuginfo-254.24-1.1.x86_64.rpm">
          <filename>systemd-container-debuginfo-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-coredump" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/systemd-coredump-254.24-1.1.x86_64.rpm">
          <filename>systemd-coredump-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-coredump-debuginfo" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/systemd-coredump-debuginfo-254.24-1.1.x86_64.rpm">
          <filename>systemd-coredump-debuginfo-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-debuginfo" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/systemd-debuginfo-254.24-1.1.x86_64.rpm">
          <filename>systemd-debuginfo-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-debugsource" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/systemd-debugsource-254.24-1.1.x86_64.rpm">
          <filename>systemd-debugsource-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-experimental" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/systemd-experimental-254.24-1.1.x86_64.rpm">
          <filename>systemd-experimental-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-experimental-debuginfo" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/systemd-experimental-debuginfo-254.24-1.1.x86_64.rpm">
          <filename>systemd-experimental-debuginfo-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/systemd-journal-remote-254.24-1.1.x86_64.rpm">
          <filename>systemd-journal-remote-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote-debuginfo" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/systemd-journal-remote-debuginfo-254.24-1.1.x86_64.rpm">
          <filename>systemd-journal-remote-debuginfo-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-portable" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/systemd-portable-254.24-1.1.x86_64.rpm">
          <filename>systemd-portable-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-portable-debuginfo" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/systemd-portable-debuginfo-254.24-1.1.x86_64.rpm">
          <filename>systemd-portable-debuginfo-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/udev-254.24-1.1.x86_64.rpm">
          <filename>udev-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev-debuginfo" epoch="0" version="254.24" release="1.1" arch="x86_64" src="x86_64/udev-debuginfo-254.24-1.1.x86_64.rpm">
          <filename>udev-debuginfo-254.24-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>300</id>
    <title>Security update for freetype2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1745506058" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=867620" id="867620" title="VUL-0: CVE-2014-2240 CVE-2014-2241: freetype2: problems in CFF rasterizer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1035807" id="1035807" title="VUL-0: CVE-2017-8105: freetype2: FreeType 2 before 2017-03-24 has an out-of-bounds write caused by aheap-based buffer overflow relat..." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1036457" id="1036457" title="VUL-0: CVE-2017-8287: freetype2: FreeType 2 before 2017-03-26 has an out-of-bounds write caused by aheap-based buffer overflow relat..." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1079600" id="1079600" title="VUL-1: freetype2: Integer overflow issues in src/truetype/ttinterp.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198823" id="1198823" title="VUL-0: CVE-2022-27406: freetype,freetype2: Segmentation violation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198830" id="1198830" title="VUL-0: CVE-2022-27404: freetype2,freetype: FreeType: Buffer Overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198832" id="1198832" title="VUL-0: CVE-2022-27405: freetype2,freetype: FreeType: Segmentation Fault" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2240" id="CVE-2014-2240" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2240" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2241" id="CVE-2014-2241" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2241" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8105" id="CVE-2017-8105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8105" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8287" id="CVE-2017-8287" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8287" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27404" id="CVE-2022-27404" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27404" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27405" id="CVE-2022-27405" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27405" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27406" id="CVE-2022-27406" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27406" type="cve" />
    </references>
    <description>This update for freetype2 fixes the following issues:

Update to 2.13.2:

* Some fields in the `FT_Outline` structure have been changed
  from signed to unsigned type, which better reflects the actual
  usage. It is also an additional means to protect against
  malformed input.
* Rare double-free crashes in the cache subsystem have been fixed.
* Excessive stack allocation in the autohinter has been fixed.
* The B/W  rasterizer has received a major upkeep that results in
  large performance improvements.  The rendering speed has
  increased and even doubled for very complex glyphs.
</description>
    <pkglist>
      <collection>
        <package name="freetype2" epoch="0" version="2.13.3" release="1.1" arch="src" src="src/freetype2-2.13.3-1.1.src.rpm">
          <filename>freetype2-2.13.3-1.1.src.rpm</filename>
        </package>
        <package name="freetype2-debugsource" epoch="0" version="2.13.3" release="1.1" arch="x86_64" src="x86_64/freetype2-debugsource-2.13.3-1.1.x86_64.rpm">
          <filename>freetype2-debugsource-2.13.3-1.1.x86_64.rpm</filename>
        </package>
        <package name="libfreetype6" epoch="0" version="2.13.3" release="1.1" arch="x86_64" src="x86_64/libfreetype6-2.13.3-1.1.x86_64.rpm">
          <filename>libfreetype6-2.13.3-1.1.x86_64.rpm</filename>
        </package>
        <package name="libfreetype6-debuginfo" epoch="0" version="2.13.3" release="1.1" arch="x86_64" src="x86_64/libfreetype6-debuginfo-2.13.3-1.1.x86_64.rpm">
          <filename>libfreetype6-debuginfo-2.13.3-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>283</id>
    <title>Recommended update for timezone</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1744102144" />
    <references>
    </references>
    <description>This update for timezone fixes the following issues:

Update to 2025b:

  * New zone for Aysén Region in Chile (America/Coyhaique) which
    moves from -04/-03 to -03

Update to 2025a:

  * Paraguay adopts permanent -03 starting spring 2024
  * Improve pre-1991 data for the Philippines
  * Etc/Unknown is now reserved

Update to 2024b:

  * Improve historical data for Mexico, Mongolia, and Portugal.
  * System V names are now obsolescent.
  * The main data form now uses %z.
  * The code now conforms to RFC 8536 for early timestamps.
  * Support POSIX.1-2024, which removes asctime_r and ctime_r.
  * Assume POSIX.2-1992 or later for shell scripts.
  * SUPPORT_C89 now defaults to 1.

Update to 2024a:

  * Kazakhstan unifies on UTC+5.  This affects Asia/Almaty and
    Asia/Qostanay which together represent the eastern portion of the
    country that will transition from UTC+6 on 2024-03-01 at 00:00 to
    join the western portion.  (Thanks to Zhanbolat Raimbekov.)
  * Palestine springs forward a week later than previously predicted
    in 2024 and 2025.  (Thanks to Heba Hamad.)  Change spring-forward
    predictions to the second Saturday after Ramadan, not the first;
    this also affects other predictions starting in 2039.
  * Asia/Ho_Chi_Minh's 1955-07-01 transition occurred at 01:00
    not 00:00.  (Thanks to Đoàn Trần Công Danh.)
  * From 1947 through 1949, Toronto's transitions occurred at 02:00
    not 00:00.  (Thanks to Chris Walton.)
  * In 1911 Miquelon adopted standard time on June 15, not May 15.
  * The FROM and TO columns of Rule lines can no longer be "minimum"
    or an abbreviation of "minimum", because TZif files do not support
    DST rules that extend into the indefinite past - although these
    rules were supported when TZif files had only 32-bit data, this
    stopped working when 64-bit TZif files were introduced in 1995.
    This should not be a problem for realistic data, since DST was
    first used in the 20th century.  As a transition aid, FROM columns
    like "minimum" are now diagnosed and then treated as if they were
    the year 1900; this should suffice for TZif files on old systems
    with only 32-bit time_t, and it is more compatible with bugs in
    2023c-and-earlier localtime.c.  (Problem reported by Yoshito
    Umaoka.)
  * localtime and related functions no longer mishandle some
    timestamps that occur about 400 years after a switch to a time
    zone with a DST schedule.  In 2023d data this problem was visible
    for some timestamps in November 2422, November 2822, etc. in
    America/Ciudad_Juarez.  (Problem reported by Gilmore Davidson.)
  * strftime %s now uses tm_gmtoff if available.  (Problem and draft
    patch reported by Dag-Erling Smørgrav.)
  * The strftime man page documents which struct tm members affect
    which conversion specs, and that tzset is called.  (Problems
    reported by Robert Elz and Steve Summit.)

Update to 2023d:

  * Ittoqqortoormiit, Greenland changes time zones on
    2024-03-31.
  * Vostok, Antarctica changed time zones on 2023-12-18.
  * Casey, Antarctica changed time zones five times since
    2020.
  * Code and data fixes for Palestine timestamps starting in
    2072.
  * A new data file zonenow.tab for timestamps starting now.
  * Fix predictions for DST transitions in Palestine in
    2072-2075, correcting a typo introduced in 2023a.
  * Vostok, Antarctica changed to +05 on 2023-12-18.  It had
    been at +07 (not +06) for years.
  * Change data for Casey, Antarctica to agree with
    timeanddate.com, by adding five time zone changes since 2020.
    Casey is now at +08 instead of +11.
  * Much of Greenland, represented by America/Nuuk, changed
    its standard time from -03 to -02 on 2023-03-25, not on
    2023-10-28.
  * localtime.c no longer mishandles TZif files that contain
    a single transition into a DST regime.  Previously,
    it incorrectly assumed DST was in effect before the transition
    too.
  * tzselect no longer creates temporary files.
  * tzselect no longer mishandles the following:
  * Spaces and most other special characters in BUGEMAIL,
    PACKAGE, TZDIR, and VERSION.
  * TZ strings when using mawk 1.4.3, which mishandles
    regular expressions of the form /X{2,}/.
  * ISO 6709 coordinates when using an awk that lacks the
    GNU extension of newlines in -v option-arguments.
  * Non UTF-8 locales when using an iconv command that
    lacks the GNU //TRANSLIT extension.
  * zic no longer mishandles data for Palestine after the
    year 2075.
</description>
    <pkglist>
      <collection>
        <package name="timezone" epoch="0" version="2025b" release="1.1" arch="src" src="src/timezone-2025b-1.1.src.rpm">
          <filename>timezone-2025b-1.1.src.rpm</filename>
        </package>
        <package name="timezone" epoch="0" version="2025b" release="1.1" arch="x86_64" src="x86_64/timezone-2025b-1.1.x86_64.rpm">
          <filename>timezone-2025b-1.1.x86_64.rpm</filename>
        </package>
        <package name="timezone-debuginfo" epoch="0" version="2025b" release="1.1" arch="x86_64" src="x86_64/timezone-debuginfo-2025b-1.1.x86_64.rpm">
          <filename>timezone-debuginfo-2025b-1.1.x86_64.rpm</filename>
        </package>
        <package name="timezone-debugsource" epoch="0" version="2025b" release="1.1" arch="x86_64" src="x86_64/timezone-debugsource-2025b-1.1.x86_64.rpm">
          <filename>timezone-debugsource-2025b-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>304</id>
    <title>Security update for expat</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1745924868" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219559" id="1219559" title="VUL-0: CVE-2023-52425: expat: denial of service (resource consumption) caused by processing large tokens" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219561" id="1219561" title="VUL-0: CVE-2023-52426: expat: recursive XML Entity Expansion if XML_DTD is undefined at compile time." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221289" id="1221289" title="VUL-0: CVE-2024-28757: expat: libexpat: XML Entity Expansion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229930" id="1229930" title="VUL-0: CVE-2024-45490: expat: reject negative len for XML_ParseBuffer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229931" id="1229931" title="VUL-0: CVE-2024-45491: expat: detect integer overflow in dtdCopy" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229932" id="1229932" title="VUL-0: CVE-2024-45492: expat: detect integer overflow in function nextScaffoldPart" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232579" id="1232579" title="VUL-0: CVE-2024-50602: TRACKERBUG: libexpat: DoS via XML_ResumeParser" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232601" id="1232601" title="VUL-0: CVE-2024-50602: expat: libexpat: DoS via XML_ResumeParser" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239618" id="1239618" title="VUL-0: CVE-2024-8176: expat: libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0340" id="CVE-2013-0340" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0340" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15903" id="CVE-2019-15903" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15903" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52425" id="CVE-2023-52425" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52425" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52426" id="CVE-2023-52426" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52426" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8176" id="CVE-2024-8176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8176" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28757" id="CVE-2024-28757" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28757" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45490" id="CVE-2024-45490" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45490" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45491" id="CVE-2024-45491" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45491" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45492" id="CVE-2024-45492" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45492" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50602" id="CVE-2024-50602" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50602" type="cve" />
      <reference href="https://jira.suse.com/browse/SLE-21253" id="SLE-21253" title="https://jira.suse.com/browse/SLE-21253" type="jira" />
    </references>
    <description>This update for expat fixes the following issues:

Version update to 2.7.1:

* Bug fixes:

  * Restore event pointer behavior from Expat 2.6.4 (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:

    - XML_GetCurrentByteCount
    - XML_GetCurrentByteIndex
    - XML_GetCurrentColumnNumber
    - XML_GetCurrentLineNumber
    - XML_GetInputContext

  * Other changes:
       #976 #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
                    with Automake that were missing from 2.7.0 release tarballs
       #983 #984  Fix printf format specifiers for 32bit Emscripten
            #992  docs: Promote OpenSSF Best Practices self-certification
            #978  tests/benchmark: Resolve mistaken double close
            #986  Address compiler warnings
       #990 #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
                    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
                    for what these numbers do

        Infrastructure:
            #982  CI: Start running Perl XML::Parser integration tests
            #987  CI: Enforce Clang Static Analyzer clean code
            #991  CI: Re-enable warning clang-analyzer-valist.Uninitialized
                    for clang-tidy
            #981  CI: Cover compilation with musl
       #983 #984  CI: Cover compilation with 32bit Emscripten
       #976 #977  CI: Protect against fuzzer files missing from future
                    release archives

Version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])

* Security fixes:
  * CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
    - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
    - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
    - parameter entities ("%p1;")

   Known impact is (reliable and easy) denial of service:

   CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C

   (Base Score: 7.5, Temporal Score: 7.2)

   Please note that a layer of compression around XML can
   significantly reduce the minimum attack payload size.

   * Other changes:
     * Document changes since the previous release
     * Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
       to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
       for what these numbers do

Version update to 2.6.4:

  * Security fixes: [bsc#1232601][bsc#1232579]
    * CVE-2024-50602 -- Fix crash within function XML_ResumeParser
      from a NULL pointer dereference by disallowing function
      XML_StopParser to (stop or) suspend an unstarted parser.
      A new error code XML_ERROR_NOT_STARTED was introduced to
      properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    * Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
      to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
      for what these numbers do

Update to 2.6.3:

  * Security fixes:
    - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
      len &lt; 0 without noticing and then calling XML_GetBuffer
      will have XML_ParseBuffer fail to recognize the problem
      and XML_GetBuffer corrupt memory.
      With the fix, XML_ParseBuffer now complains with error
      XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
      has been doing since Expat 2.2.1, and now documented.
      Impact is denial of service to potentially artitrary code
      execution.
    - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
      integer overflow for nDefaultAtts on 32-bit platforms
      (where UINT_MAX equals SIZE_MAX).
      Impact is denial of service to potentially artitrary code
      execution.
    - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
      have an integer overflow for m_groupSize on 32-bit
      platforms (where UINT_MAX equals SIZE_MAX).
      Impact is denial of service to potentially artitrary code
      execution.

  * Other changes:

    - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
      to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
      for what these numbers do  

Update to 2.6.2:

  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (bsc#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior

Update to 2.6.1:

  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust

Update to 2.6.0: 

  * Security fixes:
    - CVE-2023-52425 (bsc#1219559)  
      Fix quadratic runtime issues with big tokens
      that can cause denial of service, in partial where
      dealing with compressed XML input.  Applications
      that parsed a document in one go -- a single call to
      functions XML_Parse or XML_ParseBuffer -- were not affected.
      The smaller the chunks/buffers you use for parsing
      previously, the bigger the problem prior to the fix.
      Backporters should be careful to no omit parts of
      pull request #789 and to include earlier pull request #771,
      in order to not break the fix.
    - CVE-2023-52426 (bsc#1219561)
      Fix billion laughs attacks for users
      compiling *without* XML_DTD defined (which is not common).
      Users with XML_DTD defined have been protected since
      Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
    - Fix parse-size-dependent "invalid token" error for
      external entities that start with a byte order mark
    - Fix NULL pointer dereference in setContext via
      XML_ExternalEntityParserCreate for compilation with
      XML_DTD undefined
    - Protect against closing entities out of order
  * Other changes:
    - Improve support for arc4random/arc4random_buf
    - Improve buffer growth in XML_GetBuffer and XML_Parse
    - xmlwf: Support --help and --version
    - xmlwf: Support custom buffer size for XML_GetBuffer and read
    - xmlwf: Improve language and URL clickability in help output
    - examples: Add new example "element_declarations.c"
    - Be stricter about macro XML_CONTEXT_BYTES at build time
    - Make inclusion to expat_config.h consistent
    - Autotools: configure.ac: Support --disable-maintainer-mode
    - Autotools: Sync CMake templates with CMake 3.26
    - Autotools: Make installation of shipped man page doc/xmlwf.1
      independent of docbook2man availability
    - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
      section "Cflags.private" in order to fix compilation
      against static libexpat using pkg-config on Windows
    - Autotools|CMake: Require a C99 compiler
      (a de-facto requirement already since Expat 2.2.2 of 2017)
    - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
    - Autotools|CMake: Make test suite require a C++11 compiler
    - CMake: Require CMake &gt;=3.5.0
    - CMake: Lowercase off_t and size_t to help a bug in Meson
    - CMake: Sort xmlwf sources alphabetically
    - CMake|Windows: Fix generation of DLL file version info
    - CMake: Build tests/benchmark/benchmark.c as well for
      a build with -DEXPAT_BUILD_TESTS=ON
    - docs: Document the importance of isFinal + adjust tests
      accordingly
    - docs: Improve use of "NULL" and "null"
    - docs: Be specific about version of XML (XML 1.0r4)
      and version of C (C99); (XML 1.0r5 will need a sponsor.)
    - docs: reference.html: Promote function XML_ParseBuffer more
    - docs: reference.html: Add HTML anchors to XML_* macros
    - docs: reference.html: Upgrade to OK.css 1.2.0
    - docs: Fix typos
    - docs|CI: Use HTTPS URLs instead of HTTP at various places
    - Address compiler warnings
    - Address clang-tidy warnings
    - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
      to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
      for what these numbers do
</description>
    <pkglist>
      <collection>
        <package name="expat" epoch="0" version="2.7.1" release="1.1" arch="src" src="src/expat-2.7.1-1.1.src.rpm">
          <filename>expat-2.7.1-1.1.src.rpm</filename>
        </package>
        <package name="expat-debugsource" epoch="0" version="2.7.1" release="1.1" arch="x86_64" src="x86_64/expat-debugsource-2.7.1-1.1.x86_64.rpm">
          <filename>expat-debugsource-2.7.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="libexpat1" epoch="0" version="2.7.1" release="1.1" arch="x86_64" src="x86_64/libexpat1-2.7.1-1.1.x86_64.rpm">
          <filename>libexpat1-2.7.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="libexpat1-debuginfo" epoch="0" version="2.7.1" release="1.1" arch="x86_64" src="x86_64/libexpat1-debuginfo-2.7.1-1.1.x86_64.rpm">
          <filename>libexpat1-debuginfo-2.7.1-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>306</id>
    <title>Security update for gpg2</title>
    <severity>low</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1745925056" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239119" id="1239119" title="VUL-0: CVE-2025-30258: gpg2: verification DoS due to a malicious subkey in the keyring" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30258" id="CVE-2025-30258" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30258" type="cve" />
    </references>
    <description>This update for gpg2 fixes the following issues:

- CVE-2025-30258: Fixed DoS due to a malicious subkey in the keyring (bsc#1239119)
</description>
    <pkglist>
      <collection>
        <package name="gpg2" epoch="0" version="2.4.4" release="2.1" arch="src" src="src/gpg2-2.4.4-2.1.src.rpm">
          <filename>gpg2-2.4.4-2.1.src.rpm</filename>
        </package>
        <package name="gpg2" epoch="0" version="2.4.4" release="2.1" arch="x86_64" src="x86_64/gpg2-2.4.4-2.1.x86_64.rpm">
          <filename>gpg2-2.4.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2-debuginfo" epoch="0" version="2.4.4" release="2.1" arch="x86_64" src="x86_64/gpg2-debuginfo-2.4.4-2.1.x86_64.rpm">
          <filename>gpg2-debuginfo-2.4.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2-debugsource" epoch="0" version="2.4.4" release="2.1" arch="x86_64" src="x86_64/gpg2-debugsource-2.4.4-2.1.x86_64.rpm">
          <filename>gpg2-debugsource-2.4.4-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>301</id>
    <title>Security update for docker</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1745506725" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223409" id="1223409" title="[trackerbug] docker 25.0.5 update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234089" id="1234089" title="VUL-0: CVE-2024-29018: docker: moby: external DNS requests from 'internal' networks could lead to data exfiltration" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237335" id="1237335" title="[trackerbug] docker 27.5.1 update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237367" id="1237367" title="docker pulls in container-selinux unconditionally" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239185" id="1239185" title="VUL-0: CVE-2025-22868: TRACKERBUG: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239322" id="1239322" title="VUL-0: CVE-2025-22869: TRACKERBUG: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239765" id="1239765" title="VUL-0: CVE-2025-0495: TRACKERBUG: buildx: credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29018" id="CVE-2024-29018" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29018" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0495" id="CVE-2025-0495" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0495" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22868" id="CVE-2025-22868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22868" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22869" id="CVE-2025-22869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22869" type="cve" />
      <reference href="https://jira.suse.com/browse/PED-8905" id="PED-8905" title="https://jira.suse.com/browse/PED-8905" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-12534" id="PED-12534" title="https://jira.suse.com/browse/PED-12534" type="jira" />
    </references>
    <description>This update for docker fixes the following issues:

- Updated to docker-buildx v0.22.0.
- Updated to Docker 27.5.1-ce.
- CVE-2025-0495: buildx: Fixed credential leakage to telemetry endpoints (bsc#1239765)
- CVE-2025-22868: Fixed golang.org/x/oauth2/jws: Unexpected memory
  consumption during token parsing in golang.org/x/oauth2 (bsc#1239185)
- CVE-2025-22869: Fixed golang.org/x/crypto/ssh: Denial of Service in
  the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322).
- CVE-2024-29018:moby: external DNS requests from 'internal' networks could lead to data exfiltration (bsc#1234089)
- Make container-selinux requirement conditional on selinux-policy (bsc#1237367)
</description>
    <message>"Updating docker will restart the docker service, which may stop your docker containers. Do you want to proceed with the update?"</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="27.5.1_ce" release="2.1" arch="src" src="src/docker-27.5.1_ce-2.1.src.rpm">
          <filename>docker-27.5.1_ce-2.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="27.5.1_ce" release="2.1" arch="x86_64" src="x86_64/docker-27.5.1_ce-2.1.x86_64.rpm">
          <filename>docker-27.5.1_ce-2.1.x86_64.rpm</filename>
        </package>
        <package name="docker-debuginfo" epoch="0" version="27.5.1_ce" release="2.1" arch="x86_64" src="x86_64/docker-debuginfo-27.5.1_ce-2.1.x86_64.rpm">
          <filename>docker-debuginfo-27.5.1_ce-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>309</id>
    <title>Security update for containerd</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1746005242" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239749" id="1239749" title="VUL-0: CVE-2024-40635: containerd: containerd has an integer overflow in User ID handling" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40635" id="CVE-2024-40635" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40635" type="cve" />
    </references>
    <description>This update for containerd fixes the following issues:

- Updated containerd to v1.7.27.
- CVE-2024-40635: Fixed integer overflow in User ID handling (bsc#1239749).
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.7.27" release="1.1" arch="src" src="src/containerd-1.7.27-1.1.src.rpm">
          <filename>containerd-1.7.27-1.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.27" release="1.1" arch="x86_64" src="x86_64/containerd-1.7.27-1.1.x86_64.rpm">
          <filename>containerd-1.7.27-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>311</id>
    <title>Recommended update for gettext-runtime</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1746599764" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227316" id="1227316" title="gettext-runtime: msgcat fails on certain files" type="bugzilla" />
    </references>
    <description>This update for gettext-runtime fixes the following issues:

- Fixed handling of po files with malformed header (bsc#1227316)

</description>
    <pkglist>
      <collection>
        <package name="gettext-runtime" epoch="0" version="0.21.1" release="6.1" arch="src" src="src/gettext-runtime-0.21.1-6.1.src.rpm">
          <filename>gettext-runtime-0.21.1-6.1.src.rpm</filename>
        </package>
        <package name="gettext-runtime" epoch="0" version="0.21.1" release="6.1" arch="x86_64" src="x86_64/gettext-runtime-0.21.1-6.1.x86_64.rpm">
          <filename>gettext-runtime-0.21.1-6.1.x86_64.rpm</filename>
        </package>
        <package name="gettext-runtime-debuginfo" epoch="0" version="0.21.1" release="6.1" arch="x86_64" src="x86_64/gettext-runtime-debuginfo-0.21.1-6.1.x86_64.rpm">
          <filename>gettext-runtime-debuginfo-0.21.1-6.1.x86_64.rpm</filename>
        </package>
        <package name="gettext-runtime-debugsource" epoch="0" version="0.21.1" release="6.1" arch="x86_64" src="x86_64/gettext-runtime-debugsource-0.21.1-6.1.x86_64.rpm">
          <filename>gettext-runtime-debugsource-0.21.1-6.1.x86_64.rpm</filename>
        </package>
        <package name="libtextstyle0" epoch="0" version="0.21.1" release="6.1" arch="x86_64" src="x86_64/libtextstyle0-0.21.1-6.1.x86_64.rpm">
          <filename>libtextstyle0-0.21.1-6.1.x86_64.rpm</filename>
        </package>
        <package name="libtextstyle0-debuginfo" epoch="0" version="0.21.1" release="6.1" arch="x86_64" src="x86_64/libtextstyle0-debuginfo-0.21.1-6.1.x86_64.rpm">
          <filename>libtextstyle0-debuginfo-0.21.1-6.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>331</id>
    <title>Security update for ca-certificates-mozilla</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1747841888" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=441356" id="441356" title="LEGAL: SLES11 RPMs missing license information" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1010996" id="1010996" title="With Firefox 50, ISRG X1 CA to ca-certificates-mozilla should be added" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1199079" id="1199079" title="VUL-0: ca-certificatges-mozilla: update to 2.54 nss release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229003" id="1229003" title="ca-certificates-mozilla-prebuilt: java-cacerts differ" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234798" id="1234798" title="VUL-0: ca-certificates-mozilla: update to 2.72" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240009" id="1240009" title="Base:System/ca-certificates-mozilla: Bug in spec file - rpmbuild on console gets stuck" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240343" id="1240343" title="Need to remove GLOBALTRUST certificate from ca-certificates-mozila.trust.p11-kit" type="bugzilla" />
    </references>
    <description>This update for ca-certificates-mozilla fixes the following issues:

- test for a concretely missing certificate rather than
  just the directory, as the latter is now also provided by
  openssl-3

- Re-create java-cacerts with SOURCE_DATE_EPOCH set
  for reproducible builds (bsc#1229003)

- explicit remove distrusted certs, as the distrust does not get exported
  correctly and the SSL certs are still trusted. (bsc#1240343)
  - Entrust.net Premium 2048 Secure Server CA
  - Entrust Root Certification Authority
  - AffirmTrust Commercial
  - AffirmTrust Networking
  - AffirmTrust Premium
  - AffirmTrust Premium ECC
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - GlobalSign Root E46
  - GLOBALTRUST 2020

- pass file argument to awk (bsc#1240009)

- update to 2.74 state of Mozilla SSL root CAs:
  Removed:
  * SwissSign Silver CA - G2
  Added:
  * D-TRUST BR Root CA 2 2023
  * D-TRUST EV Root CA 2 2023

- remove extensive signature printing in comments of the cert
  bundle

- Define two macros to break a build cycle with p11-kit.

- Updated to 2.72 state of Mozilla SSL root CAs (bsc#1234798)
  Removed:
  - SecureSign RootCA11
  - Security Communication RootCA3
  Added:
  - TWCA CYBER Root CA
  - TWCA Global Root CA G2
  - SecureSign Root CA12
  - SecureSign Root CA14
  - SecureSign Root CA15
</description>
    <pkglist>
      <collection>
        <package name="ca-certificates-mozilla" epoch="0" version="2.74" release="1.1" arch="noarch" src="noarch/ca-certificates-mozilla-2.74-1.1.noarch.rpm">
          <filename>ca-certificates-mozilla-2.74-1.1.noarch.rpm</filename>
        </package>
        <package name="ca-certificates-mozilla" epoch="0" version="2.74" release="1.1" arch="src" src="src/ca-certificates-mozilla-2.74-1.1.src.rpm">
          <filename>ca-certificates-mozilla-2.74-1.1.src.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>314</id>
    <title>Security update for glib2</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1747043136" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240897" id="1240897" title="VUL-0: CVE-2025-3360: glib2: integer overflow and buffer underread when parsing a very long and invalid ISO 8601 timestamp with g_date_time_new_from_iso8601()." type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3360" id="CVE-2025-3360" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3360" type="cve" />
    </references>
    <description>This update for glib2 fixes the following issues:

- CVE-2025-3360: Fixed integer overflow and buffer underread when 
  parsing a very long and invalid ISO 8601 timestamp with 
  g_date_time_new_from_iso8601() (bsc#1240897).
</description>
    <pkglist>
      <collection>
        <package name="glib2" epoch="0" version="2.76.2" release="7.1" arch="src" src="src/glib2-2.76.2-7.1.src.rpm">
          <filename>glib2-2.76.2-7.1.src.rpm</filename>
        </package>
        <package name="glib2-debugsource" epoch="0" version="2.76.2" release="7.1" arch="x86_64" src="x86_64/glib2-debugsource-2.76.2-7.1.x86_64.rpm">
          <filename>glib2-debugsource-2.76.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.76.2" release="7.1" arch="x86_64" src="x86_64/glib2-tools-2.76.2-7.1.x86_64.rpm">
          <filename>glib2-tools-2.76.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools-debuginfo" epoch="0" version="2.76.2" release="7.1" arch="x86_64" src="x86_64/glib2-tools-debuginfo-2.76.2-7.1.x86_64.rpm">
          <filename>glib2-tools-debuginfo-2.76.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.76.2" release="7.1" arch="x86_64" src="x86_64/libgio-2_0-0-2.76.2-7.1.x86_64.rpm">
          <filename>libgio-2_0-0-2.76.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0-debuginfo" epoch="0" version="2.76.2" release="7.1" arch="x86_64" src="x86_64/libgio-2_0-0-debuginfo-2.76.2-7.1.x86_64.rpm">
          <filename>libgio-2_0-0-debuginfo-2.76.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.76.2" release="7.1" arch="x86_64" src="x86_64/libglib-2_0-0-2.76.2-7.1.x86_64.rpm">
          <filename>libglib-2_0-0-2.76.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0-debuginfo" epoch="0" version="2.76.2" release="7.1" arch="x86_64" src="x86_64/libglib-2_0-0-debuginfo-2.76.2-7.1.x86_64.rpm">
          <filename>libglib-2_0-0-debuginfo-2.76.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.76.2" release="7.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-2.76.2-7.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-2.76.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0-debuginfo" epoch="0" version="2.76.2" release="7.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-debuginfo-2.76.2-7.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-debuginfo-2.76.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.76.2" release="7.1" arch="x86_64" src="x86_64/libgobject-2_0-0-2.76.2-7.1.x86_64.rpm">
          <filename>libgobject-2_0-0-2.76.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0-debuginfo" epoch="0" version="2.76.2" release="7.1" arch="x86_64" src="x86_64/libgobject-2_0-0-debuginfo-2.76.2-7.1.x86_64.rpm">
          <filename>libgobject-2_0-0-debuginfo-2.76.2-7.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>313</id>
    <title>Recommended update for NetworkManager</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1747042560" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224868" id="1224868" title="NetworkManager-wait-online is failed after every boot" type="bugzilla" />
    </references>
    <description>This update for NetworkManager fixes the following issues:

- Add config-server subpackage (bsc#1224868).
</description>
    <pkglist>
      <collection>
        <package name="NetworkManager" epoch="0" version="1.42.6" release="6.1" arch="src" src="src/NetworkManager-1.42.6-6.1.src.rpm">
          <filename>NetworkManager-1.42.6-6.1.src.rpm</filename>
        </package>
        <package name="NetworkManager" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/NetworkManager-1.42.6-6.1.x86_64.rpm">
          <filename>NetworkManager-1.42.6-6.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-bluetooth" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/NetworkManager-bluetooth-1.42.6-6.1.x86_64.rpm">
          <filename>NetworkManager-bluetooth-1.42.6-6.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-bluetooth-debuginfo" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/NetworkManager-bluetooth-debuginfo-1.42.6-6.1.x86_64.rpm">
          <filename>NetworkManager-bluetooth-debuginfo-1.42.6-6.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-cloud-setup" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/NetworkManager-cloud-setup-1.42.6-6.1.x86_64.rpm">
          <filename>NetworkManager-cloud-setup-1.42.6-6.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-cloud-setup-debuginfo" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/NetworkManager-cloud-setup-debuginfo-1.42.6-6.1.x86_64.rpm">
          <filename>NetworkManager-cloud-setup-debuginfo-1.42.6-6.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-debuginfo" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/NetworkManager-debuginfo-1.42.6-6.1.x86_64.rpm">
          <filename>NetworkManager-debuginfo-1.42.6-6.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-debugsource" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/NetworkManager-debugsource-1.42.6-6.1.x86_64.rpm">
          <filename>NetworkManager-debugsource-1.42.6-6.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-pppoe" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/NetworkManager-pppoe-1.42.6-6.1.x86_64.rpm">
          <filename>NetworkManager-pppoe-1.42.6-6.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-pppoe-debuginfo" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/NetworkManager-pppoe-debuginfo-1.42.6-6.1.x86_64.rpm">
          <filename>NetworkManager-pppoe-debuginfo-1.42.6-6.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-tui" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/NetworkManager-tui-1.42.6-6.1.x86_64.rpm">
          <filename>NetworkManager-tui-1.42.6-6.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-tui-debuginfo" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/NetworkManager-tui-debuginfo-1.42.6-6.1.x86_64.rpm">
          <filename>NetworkManager-tui-debuginfo-1.42.6-6.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-wwan" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/NetworkManager-wwan-1.42.6-6.1.x86_64.rpm">
          <filename>NetworkManager-wwan-1.42.6-6.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-wwan-debuginfo" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/NetworkManager-wwan-debuginfo-1.42.6-6.1.x86_64.rpm">
          <filename>NetworkManager-wwan-debuginfo-1.42.6-6.1.x86_64.rpm</filename>
        </package>
        <package name="libnm0" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/libnm0-1.42.6-6.1.x86_64.rpm">
          <filename>libnm0-1.42.6-6.1.x86_64.rpm</filename>
        </package>
        <package name="libnm0-debuginfo" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/libnm0-debuginfo-1.42.6-6.1.x86_64.rpm">
          <filename>libnm0-debuginfo-1.42.6-6.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-NM-1_0" epoch="0" version="1.42.6" release="6.1" arch="x86_64" src="x86_64/typelib-1_0-NM-1_0-1.42.6-6.1.x86_64.rpm">
          <filename>typelib-1_0-NM-1_0-1.42.6-6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>322</id>
    <title>Recommended update for vim</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1747377787" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235751" id="1235751" title="L3-Question: vim9.1.0836 -using putty with system colors option the syntax higlighting changes to terrible light blue" type="bugzilla" />
    </references>
    <description>This update for vim fixes the following issues:

- Introduce patch to fix bsc#1235751 (regression).
- Update to 9.1.1176. Changes:
  * 9.1.1176: wrong indent when expanding multiple lines
  * 9.1.1175: inconsistent behaviour with exclusive selection and motion commands
  * 9.1.1174: tests: Test_complete_cmdline() may fail
  * 9.1.1173: filetype: ABNF files are not detected
  * 9.1.1172: [security]: overflow with 'nostartofline' and Ex command in tag file
  * 9.1.1171: tests: wrong arguments passed to assert_equal()
  * 9.1.1170: wildmenu highlighting in popup can be improved
  * 9.1.1169: using global variable for get_insert()/get_lambda_name()
  * 9.1.1168: wrong flags passed down to nextwild()
  * 9.1.1167: mark '] wrong after copying text object
  * 9.1.1166: command-line auto-completion hard with wildmenu
  * 9.1.1165: diff: regression with multi-file diff blocks
  * 9.1.1164: [security]: code execution with tar.vim and special crafted tar files
  * 9.1.1163: $MYVIMDIR is set too late
  * 9.1.1162: completion popup not cleared in cmdline
  * 9.1.1161: preinsert requires bot "menu" and "menuone" to be set
  * 9.1.1160: Ctrl-Y does not work well with "preinsert" when completing items
  * 9.1.1159: $MYVIMDIR may not always be set
  * 9.1.1158: :verbose set has wrong file name with :compiler!
  * 9.1.1157: command completion wrong for input()
  * 9.1.1156: tests: No test for what patch 9.1.1152 fixes
  * 9.1.1155: Mode message not cleared after :silent message
  * 9.1.1154: Vim9: not able to use autoload class accross scripts
  * 9.1.1153: build error on Haiku
  * 9.1.1152: Patch v9.1.1151 causes problems
  * 9.1.1151: too many strlen() calls in getchar.c
  * 9.1.1150: :hi completion may complete to wrong value
  * 9.1.1149: Unix Makefile does not support Brazilian lang for the installer
  * 9.1.1148: Vim9: finding imported scripts can be further improved
  * 9.1.1147: preview-window does not scroll correctly
  * 9.1.1146: Vim9: wrong context being used when evaluating class member
  * 9.1.1145: multi-line completion has wrong indentation for last line
  * 9.1.1144: no way to create raw strings from a blob
  * 9.1.1143: illegal memory access when putting a register
  * 9.1.1142: tests: test_startup fails if $HOME/$XDG_CONFIG_HOME is defined
  * 9.1.1141: Misplaced comment in readfile()
  * 9.1.1140: filetype: m17ndb files are not detected
  * 9.1.1139: [fifo] is not displayed when editing a fifo
  * 9.1.1138: cmdline completion for :hi is too simplistic
  * 9.1.1137: ins_str() is inefficient by calling STRLEN()
  * 9.1.1136: Match highlighting marks a buffer region as changed
  * 9.1.1135: 'suffixesadd' doesn't work with multiple items
  * 9.1.1134: filetype: Guile init file not recognized
  * 9.1.1133: filetype: xkb files not recognized everywhere
  * 9.1.1132: Mark positions wrong after triggering multiline completion
  * 9.1.1131: potential out-of-memory issue in search.c
  * 9.1.1130: 'listchars' "precedes" is not drawn on Tabs.
  * 9.1.1129: missing out-of-memory test in buf_write()
  * 9.1.1128: patch 9.1.1119 caused a regression with imports
  * 9.1.1127: preinsert text is not cleaned up correctly
  * 9.1.1126: patch 9.1.1121 used a wrong way to handle enter
  * 9.1.1125: cannot loop through pum menu with multiline items
  * 9.1.1124: No test for 'listchars' "precedes" with double-width char
  * 9.1.1123: popup hi groups not falling back to defaults
  * 9.1.1122: too many strlen() calls in findfile.c
  * 9.1.1121: Enter does not insert newline with "noselect"
  * 9.1.1120: tests: Test_registers fails
  * 9.1.1119: Vim9: Not able to use an autoloaded class from another autoloaded script
  * 9.1.1118: tests: test_termcodes fails
  * 9.1.1117: there are a few minor style issues
  * 9.1.1116: Vim9: super not supported in lambda expressions
  * 9.1.1115: [security]: use-after-free in str_to_reg()
  * 9.1.1114: enabling termguicolors automatically confuses users
  * 9.1.1113: tests: Test_terminal_builtin_without_gui waits 2 seconds
  * 9.1.1112: Inconsistencies in get_next_or_prev_match()
  * 9.1.1111: Vim9: variable not found in transitive import
  * 9.1.1110: Vim tests are slow and flaky
  * 9.1.1109: cmdexpand.c hard to read
  * 9.1.1108: 'smoothscroll' gets stuck with 'listchars' "eol"
  * 9.1.1107: cannot loop through completion menu with fuzzy
  * 9.1.1106: tests: Test_log_nonexistent() causes asan failure
  * 9.1.1105: Vim9: no support for protected new() method
  * 9.1.1104: CI: using Ubuntu 22.04 Github runners
  * 9.1.1103: if_perl: still some compile errors with Perl 5.38
  * 9.1.1102: tests: Test_WinScrolled_Resized_eiw() uses wrong filename
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.1.1176" release="1.1" arch="src" src="src/vim-9.1.1176-1.1.src.rpm">
          <filename>vim-9.1.1176-1.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.1.1176" release="1.1" arch="noarch" src="noarch/vim-data-common-9.1.1176-1.1.noarch.rpm">
          <filename>vim-data-common-9.1.1176-1.1.noarch.rpm</filename>
        </package>
        <package name="vim-debugsource" epoch="0" version="9.1.1176" release="1.1" arch="x86_64" src="x86_64/vim-debugsource-9.1.1176-1.1.x86_64.rpm">
          <filename>vim-debugsource-9.1.1176-1.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.1.1176" release="1.1" arch="x86_64" src="x86_64/vim-small-9.1.1176-1.1.x86_64.rpm">
          <filename>vim-small-9.1.1176-1.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small-debuginfo" epoch="0" version="9.1.1176" release="1.1" arch="x86_64" src="x86_64/vim-small-debuginfo-9.1.1176-1.1.x86_64.rpm">
          <filename>vim-small-debuginfo-9.1.1176-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>330</id>
    <title>Security update for perl</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1747841764" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241083" id="1241083" title="VUL-0: CVE-2024-56406: perl: heap buffer overflow when transliterating non-ASCII bytes" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56406" id="CVE-2024-56406" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56406" type="cve" />
    </references>
    <description>This update for perl fixes the following issues:

- CVE-2024-56406: Fixed heap buffer overflow with tr// [bsc#1241083] 

</description>
    <pkglist>
      <collection>
        <package name="perl" epoch="0" version="5.38.2" release="2.1" arch="src" src="src/perl-5.38.2-2.1.src.rpm">
          <filename>perl-5.38.2-2.1.src.rpm</filename>
        </package>
        <package name="perl" epoch="0" version="5.38.2" release="2.1" arch="x86_64" src="x86_64/perl-5.38.2-2.1.x86_64.rpm">
          <filename>perl-5.38.2-2.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base" epoch="0" version="5.38.2" release="2.1" arch="x86_64" src="x86_64/perl-base-5.38.2-2.1.x86_64.rpm">
          <filename>perl-base-5.38.2-2.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base-debuginfo" epoch="0" version="5.38.2" release="2.1" arch="x86_64" src="x86_64/perl-base-debuginfo-5.38.2-2.1.x86_64.rpm">
          <filename>perl-base-debuginfo-5.38.2-2.1.x86_64.rpm</filename>
        </package>
        <package name="perl-debuginfo" epoch="0" version="5.38.2" release="2.1" arch="x86_64" src="x86_64/perl-debuginfo-5.38.2-2.1.x86_64.rpm">
          <filename>perl-debuginfo-5.38.2-2.1.x86_64.rpm</filename>
        </package>
        <package name="perl-debugsource" epoch="0" version="5.38.2" release="2.1" arch="x86_64" src="x86_64/perl-debugsource-5.38.2-2.1.x86_64.rpm">
          <filename>perl-debugsource-5.38.2-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>332</id>
    <title>Security update for runc</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1747841806" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214960" id="1214960" title="ssh slowness when many entries in /proc/mounts (created by containers) ref:_00D1igLOd._5005qVSkHB:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230092" id="1230092" title="VUL-0: CVE-2024-45310: runc: runc can be tricked into creating empty files/directories on host" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45310" id="CVE-2024-45310" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45310" type="cve" />
    </references>
    <description>This update for runc fixes the following issues:

- Update to runc v1.2.6. Upstream changelog is available from

  https://github.com/opencontainers/runc/releases/tag/v1.2.6

- CVE-2024-45310: Fixed runc can be tricked into creating empty files/directories on host (bsc#1230092)

</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.2.6" release="1.1" arch="src" src="src/runc-1.2.6-1.1.src.rpm">
          <filename>runc-1.2.6-1.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.2.6" release="1.1" arch="x86_64" src="x86_64/runc-1.2.6-1.1.x86_64.rpm">
          <filename>runc-1.2.6-1.1.x86_64.rpm</filename>
        </package>
        <package name="runc-debuginfo" epoch="0" version="1.2.6" release="1.1" arch="x86_64" src="x86_64/runc-debuginfo-1.2.6-1.1.x86_64.rpm">
          <filename>runc-debuginfo-1.2.6-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>325</id>
    <title>Security update for sqlite3</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1747399899" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241020" id="1241020" title="VUL-0: CVE-2025-29087: sqlite3: Integer Overflow in SQLite concat Function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241078" id="1241078" title="VUL-0: CVE-2025-29088: sqlite2,sqlite3: integer overflow through the SQLITE_DBCONFIG_LOOKASIDE component." type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29087" id="CVE-2025-29087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29087" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29088" id="CVE-2025-29088" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29088" type="cve" />
    </references>
    <description>This update for sqlite3 fixes the following issues:

- Update to release 3.49.1:

  * Improve portability of makefiles and configure scripts.
  * CVE-2025-29087, bsc#1241020: Fix a bug in the concat_ws()
    function, introduced in version 3.44.0, that could lead to a
    memory error if the separator string is very large (hundreds
    of megabytes).
  * CVE-2025-29088, bsc#1241078: Enhanced the
    SQLITE_DBCONFIG_LOOKASIDE interface to make it  more robust
    against misuse.

- Update to release 3.49.0:

  * Enhancements to the query planner:
    - Improve the query-time index optimization so that it works on
      WITHOUT ROWID tables.
    - Better query plans for large star-query joins. This fixes
      three different performance regressions that were reported
      on the SQLite Forum.
    - When two or more queries have the same estimated cost, use
      the one with the fewer bytes per row.
  * Enhance the iif() SQL function so that it can accept any number
    of arguments greater than or equal to two.
  * Enhance the session extension so that it works on databases
    that make use of generated columns.
  * Omit the SQLITE_USE_STDIO_FOR_CONSOLE compile-time option which
    was not implemented correctly and never worked right. In its place
    add the SQLITE_USE_W32_FOR_CONSOLE_IO compile-time option. This
    option applies to command-line tools like the CLI only, not to the
    SQLite core. It causes Win32 APIs to be used for console I/O
    instead of stdio. This option affects Windows builds only.
  * Three new options to sqlite3_db_config(). All default "on".
    SQLITE_DBCONFIG_ENABLE_ATTACH_CREATE
    SQLITE_DBCONFIG_ENABLE_ATTACH_WRITE
    SQLITE_DBCONFIG_ENABLE_COMMENTS 

- Re-enable SONAME which got disabled by default in 3.48.0.
  * https://www.sqlite.org/src/forumpost/5a3b44f510df8ded
  * https://sqlite.org/forum/forumpost/ab8f15697a  

- Update to release 3.48.0:

  * Improved EXPLAIN QUERY PLAN output for covering indexes.
  * Allow a two-argument version of the iif() SQL function.
  * Also allow if() as an alternative spelling for iif().
  * Add the ".dbtotxt" command to the CLI.
  * Add the SQLITE_IOCAP_SUBPAGE_READ property to the
    xDeviceCharacteristics method of the sqlite3_io_methods object.
  * Add the SQLITE_PREPARE_DONT_LOG option to sqlite3_prepare_v3()
    that prevents warning messages being sent to the error log if
    the SQL is ill-formed. This allows sqlite3_prepare_v3() to be
    used to do test compiles of SQL to check for validity without
    polluting the error log with false messages.
  * Increase the minimum allowed value of SQLITE_LIMIT_LENGTH from
    1 to 30.
  * Added the SQLITE_FCNTL_NULL_IO file control.
  * Extend the FTS5 auxiliary API xInstToken() to work with prefix
    queries via the insttoken configuration option and the
    fts5_insttoken() SQL function.
  * Increase the maximum number of arguments to an SQL function
    from 127 to 1000.

- Update to release 3.47.2:

  * Fix a problem in text-to-floating-point conversion that affects
    text values where the first 16 significant digits are
    '1844674407370955'. This issue was introduced in 3.47.0 and
    only arises on x64 and i386 hardware.
  * Other minor bug fixes.
- Enable the session extension, because NodeJS 22 needs it.

- Update to release 3.47.1:

  * Fix the makefiles so that they once again honored DESTDIR for
    the "install" target.
  * Add the SQLITE_IOCAP_SUBPAGE_READ capability to the VFS, to
    work around issues on some non-standard VFSes caused by making
    SQLITE_DIRECT_OVERFLOW_READ the default in version 3.45.0.
  * Fix incorrect answers to certain obscure IN queries caused by
    new query optimizations added in the 3.47.0 release.
  * Other minor bug fixes.

- Update to release 3.47.0:

  * Allow arbitrary expressions in the second argument to the RAISE
    function.
  * If the RHS of the -&gt;&gt; operator is negative, then access array
    elements counting from the right.
  * Fix a problem with rolling back hot journal files in the
    seldom-used unix-dotfile VFS.
  * FTS5 tables can now be dropped even if they use a non-standard
    tokenizer that has not been registered.
  * Fix the group_concat() aggregate function so that it returns an
    empty string, not a NULL, if it receives a single input value
    which is an empty string.
  * Enhance the generate_series() table-valued function so that it
    is able to recognize and use constraints on its output value.
    Preupdate hooks now recognize when a column added by ALTER
    TABLE ADD COLUMN has a non-null default value.
  * Improved reuse of subqueries associated with the IN operator,
    especially when the IN operator has been duplicated due to
    predicate push-down.
  * Use a Bloom filter on subqueries on the right-hand side of the
    IN operator, in cases where that seems likely to improve
    performance.
  * Ensure that queries like "SELECT func(a) FROM tab GROUP BY 1"
    only invoke the func() function once per row.
  * No attempt is made to create automatic indexes on a column
    that is known to be non-selective because of its use in other
    indexes that have been analyzed.
  * Adjustments to the query planner so that it produces better
    plans for star queries with a large number of dimension
    tables.
  * Add the "order-by-subquery" optimization, that seeks to
    disable sort operations in outer queries if the desired order
    is obtained naturally due to ORDER BY clauses in subqueries. 
  * The "indexed-subtype-expr" optimization strives to use
    expressions that are part of an index rather than recomputing
    the expression based on table values, as long as the query
    planner can prove that the subtype of the expression will
    never be used.
  * Miscellaneous coding tweaks for faster runtimes.
  * Add the experimental sqlite3_rsync program.
  * Add extension functions median(), percentile(),
    percentile_cont(), and percentile_disc() to the CLI.
  * Add the .www dot-command to the CLI.
  * The sqlite3_analyzer utility now provides a break-out of
    statistics for WITHOUT ROWID tables.
  * The sqldiff utility avoids creating an empty database if its
    second argument does not exist.
  * Enhance the sqlite_dbpage table-valued function such that
    INSERT can be used to increase or decrease the size of the
    database file.
  * SQLite no longer makes any use of the "long double" data type,
    as hardware support for long double is becoming less common
    and long double creates challenges for some compiler tool
    chains. Instead, SQLite uses Dekker's algorithm when extended
    precision is needed.
  * The TCL Interface for SQLite supports TCL9. Everything
    probably still works for TCL 8.5 and later, though this is not
    guaranteed. Users are encouraged to upgrade to TCL9.
  * Fix a corruption-causing bug in the JavaScript "opfs" VFS.
    Correct "mode=ro" handling for the "opfs" VFS.  Work around a
    couple of browser-specific OPFS quirks.
  * Add the fts5_tokenizer_v2 API and the locale=1 option, for
    creating custom locale-aware tokenizers and fts5 tables that
    may take advantage of them.
  * Add the contentless_unindexed=1 option, for creating
    contentless fts5 tables that store the values of any UNINDEXED
    columns persistently in the database.
  * Allow an FTS5 table to be dropped even if it uses a custom
    tokenizer whose implementation is not available.

- Update to release 3.46.1:
  * Improved robustness while parsing the tokenize= arguments in
    FTS5.
  * Enhancements to covering index prediction in the query planner.
  * Do not let the number of terms on a VALUES clause be limited by
    SQLITE_LIMIT_COMPOUND_SELECT, even if the VALUES clause
    contains elements that appear to be variables due to
    double-quoted string literals.
  * Fix the window function version of group_concat() so that it
    returns an empty string if it has one or more empty string
    inputs.
  * In FTS5 secure-delete mode, fix false-positive integrity-check
    reports about corrupt indexes.
  * Syntax errors in ALTER TABLE should always return SQLITE_ERROR.
    In some cases, they were formerly returning SQLITE_INTERNAL.
  * Other minor fixes.

- Update to release 3.46.0:

  * https://sqlite.org/releaselog/3_46_0.html

  * Enhance PRAGMA optimize in multiple ways.
  * Enhancements to the date and time functions.
  * Add support for underscore ("_") characters between digits in
    numeric literals.
  * Add the json_pretty() SQL function.
  * Query planner improvements.
  * Allocate additional memory from the heap for the SQL parser
    stack if that stack overflows, rather than reporting a "parser
    stack overflow" error.
  * Allow ASCII control characters within JSON5 string literals.
  * Fix the -&gt; and -&gt;&gt; JSON operators so that when the right-hand
    side operand is a string that looks like an integer it is still
    treated as a string, because that is what PostgreSQL does.

- Update to release 3.45.3:

  * Fix a long-standing bug (going back to version 3.24.0) that
    might (rarely) cause the "old.*" values of an UPDATE trigger
    to be incorrect if that trigger fires in response to an UPSERT.
  * Reduce the scope of the NOT NULL strength reduction
    optimization that was added as item 8e in version 3.35.0. The
    optimization was being attempted in some contexts where it did
    not work, resulting in incorrect query results.
- Add SQLITE_STRICT_SUBTYPE=1 as recommended by upstream.

- Update to release 3.45.2:

  * Added the SQLITE_RESULT_SUBTYPE property for application-
    defined SQL functions.
  * Enhancements to the JSON SQL functions
  * Add the FTS5 tokendata option to the FTS5 virtual table.
  * The SQLITE_DIRECT_OVERFLOW_READ optimization is now enabled by
    default.
  * Query planner improvements
  * Increase the default value for SQLITE_MAX_PAGE_COUNT from
    1073741824 to 4294967294.
  * Enhancements to the CLI
  * Restore the JSON BLOB input bug, and promise to support the
    anomaly in subsequent releases, for backward compatibility.
  * Fix the PRAGMA integrity_check command so that it works on
    read-only databases that contain FTS3 and FTS5 tables.
  * Fix issues associated with processing corrupt JSONB inputs.
  * Fix a long-standing bug in which a read of a few bytes past the
    end of a memory-mapped segment might occur when accessing a
    craftily corrupted database using memory-mapped database.
  * Fix a long-standing bug in which a NULL pointer dereference
    might occur in the bytecode engine due to incorrect bytecode
    being generated for a class of SQL statements that are
    deliberately designed to stress the query planner but which
    are otherwise pointless.
  * Fix an error in UPSERT, introduced in version 3.35.0.
  * Reduce the scope of the NOT NULL strength reduction
    optimization that was added in version 3.35.0.
</description>
    <pkglist>
      <collection>
        <package name="libsqlite3-0" epoch="0" version="3.49.1" release="1.1" arch="x86_64" src="x86_64/libsqlite3-0-3.49.1-1.1.x86_64.rpm">
          <filename>libsqlite3-0-3.49.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="libsqlite3-0-debuginfo" epoch="0" version="3.49.1" release="1.1" arch="x86_64" src="x86_64/libsqlite3-0-debuginfo-3.49.1-1.1.x86_64.rpm">
          <filename>libsqlite3-0-debuginfo-3.49.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="sqlite3" epoch="0" version="3.49.1" release="1.1" arch="src" src="src/sqlite3-3.49.1-1.1.src.rpm">
          <filename>sqlite3-3.49.1-1.1.src.rpm</filename>
        </package>
        <package name="sqlite3-debugsource" epoch="0" version="3.49.1" release="1.1" arch="x86_64" src="x86_64/sqlite3-debugsource-3.49.1-1.1.x86_64.rpm">
          <filename>sqlite3-debugsource-3.49.1-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>329</id>
    <title>Security update for libxml2</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1747826617" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241453" id="1241453" title="VUL-0: CVE-2025-32415: libxml2: a crafted XML document may lead to a heap-based buffer under-read" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241551" id="1241551" title="VUL-0: CVE-2025-32414: libxml2: out-of-bounds read when parsing text via the Python API" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32414" id="CVE-2025-32414" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32414" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32415" id="CVE-2025-32415" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32415" type="cve" />
    </references>
    <description>This update for libxml2 fixes the following issues:

- CVE-2025-32414: Fixed out-of-bounds read when parsing text via the Python API (bsc#1241551)
- CVE-2025-32415: Fixed a crafted XML document may lead to a heap-based buffer under-read (bsc#1241453)

</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.11.6" release="8.1" arch="x86_64" src="x86_64/libxml2-2-2.11.6-8.1.x86_64.rpm">
          <filename>libxml2-2-2.11.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2-debuginfo" epoch="0" version="2.11.6" release="8.1" arch="x86_64" src="x86_64/libxml2-2-debuginfo-2.11.6-8.1.x86_64.rpm">
          <filename>libxml2-2-debuginfo-2.11.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.11.6" release="8.1" arch="src" src="src/libxml2-2.11.6-8.1.src.rpm">
          <filename>libxml2-2.11.6-8.1.src.rpm</filename>
        </package>
        <package name="libxml2-debugsource" epoch="0" version="2.11.6" release="8.1" arch="x86_64" src="x86_64/libxml2-debugsource-2.11.6-8.1.x86_64.rpm">
          <filename>libxml2-debugsource-2.11.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.11.6" release="8.1" arch="x86_64" src="x86_64/libxml2-tools-2.11.6-8.1.x86_64.rpm">
          <filename>libxml2-tools-2.11.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-tools-debuginfo" epoch="0" version="2.11.6" release="8.1" arch="x86_64" src="x86_64/libxml2-tools-debuginfo-2.11.6-8.1.x86_64.rpm">
          <filename>libxml2-tools-debuginfo-2.11.6-8.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>337</id>
    <title>Security update for augeas</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1748005214" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239909" id="1239909" title="VUL-0: CVE-2025-2588: augeas: no check for NULL pointers when calling re_case_expand in function fa_expand_nocase" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2588" id="CVE-2025-2588" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2588" type="cve" />
    </references>
    <description>This update for augeas fixes the following issues:

- CVE-2025-2588: Fixed check for NULL pointers when calling re_case_expand in function fa_expand_nocase (bsc#1239909)
</description>
    <pkglist>
      <collection>
        <package name="augeas" epoch="0" version="1.14.1" release="2.1" arch="src" src="src/augeas-1.14.1-2.1.src.rpm">
          <filename>augeas-1.14.1-2.1.src.rpm</filename>
        </package>
        <package name="augeas-debugsource" epoch="0" version="1.14.1" release="2.1" arch="x86_64" src="x86_64/augeas-debugsource-1.14.1-2.1.x86_64.rpm">
          <filename>augeas-debugsource-1.14.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="libaugeas0" epoch="0" version="1.14.1" release="2.1" arch="x86_64" src="x86_64/libaugeas0-1.14.1-2.1.x86_64.rpm">
          <filename>libaugeas0-1.14.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="libaugeas0-debuginfo" epoch="0" version="1.14.1" release="2.1" arch="x86_64" src="x86_64/libaugeas0-debuginfo-1.14.1-2.1.x86_64.rpm">
          <filename>libaugeas0-debuginfo-1.14.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="libfa1" epoch="0" version="1.14.1" release="2.1" arch="x86_64" src="x86_64/libfa1-1.14.1-2.1.x86_64.rpm">
          <filename>libfa1-1.14.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="libfa1-debuginfo" epoch="0" version="1.14.1" release="2.1" arch="x86_64" src="x86_64/libfa1-debuginfo-1.14.1-2.1.x86_64.rpm">
          <filename>libfa1-debuginfo-1.14.1-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>334</id>
    <title>Recommended update for python-M2Crypto</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1747899723" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205042" id="1205042" title="[TRACKERBUG] Set OpenSSL 3.0 as the default openssl in TW" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217782" id="1217782" title="Python packages fail to build with OpenSSL 3.2.0" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231589" id="1231589" title="python-M2Crypto fails to build with Swig 4.3.0" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236664" id="1236664" title="python3-M2Crypto package included to the image on building SUSE Manager 5.0 is too slow" type="bugzilla" />
    </references>
    <description>This update for python-M2Crypto fixes the following issues:

Update to 0.44.0:

    - fix(rsa): introduce internal cache for rsa.check_key()
      (bsc#1236664, srht#mcepl/m2crypto#369)
    - fix[authcookie]: modernize the module
    - fix(_lib): add missing #include for windows
    - ci: relax fedora crypto policy to legacy.
    - enhance setup.py for macos compatibility
    - prefer packaging.version over distutils.version
    - fix segfault with openssl 3.4.0
    - fix[ec]: raise ioerror instead when load_key_bio() cannot read
      the file.
    - doc: update installation instructions for windows.
    - fix setting x509.verify_* variables
    - fix building against openssl in non-standard location
    - test_x509: use only x509_version_1 (0) as version for csr. 


Update to 0.43.0:

  - feat[m2]: add m2.time_t_bits to checking for 32bitness.
  - fix[tests]: Use only X509_VERSION_1 (0) as version for CSR.
  - fix[EC]: raise ValueError when load_key_bio() cannot read the
    file (bsc#1231589).
  - ci: use -mpip wheel instead of -mbuild
  - fix: use PyMem_Malloc() instead of malloc()
  - fix[hints]: more work on conversion of type hints to the py3k ones
  - fix: make the package build even on Python 3.6
  - ci[local]: skip freezing local tests
  - fix[hints]: remove AnyStr type
  - test: add suggested test for RSA.{get,set}_ex_data
  - fix: implement interfaces for RSA_{get,set}_ex_new_{data,index}
  - fix: generate src/SWIG/x509_v_flag.h to overcome weaknesses of
    swig
  - fix: replace literal enumeration of all VERIFY_ constants by a
    cycle
  - test: unify various test cases in test_ssl related to ftpslib
  - fix: replace deprecated url keyword in setup.cfg with complete
    project_urls map

Update 0.42.0:

  - allow ASN1_{Integer,String} be initialized directly
  - minimal infrastructure for type hints for a C extension and
    some type hints for some basic modules
  - time_t on 32bit Linux is 32bit (integer) not 64bit (long)
  - EOS for CentOS 7
  - correct checking for OpenSSL version number on Windows
  - make compatible with Python 3.13 (replace PyEval_CallObject
    with PyObject_CallObject)
  - fix typo in extern function signature (and proper type of
    engine_ctrl_cmd_string())
  - move the package to Sorucehut
  - setup CI to use Sourcehut CI
  - setup CI on GitLab for Windows as well (remove Appveyor)
  - initial draft of documentation for migration to
    pyca/cryptography
  - fix Read the Docs configuration (contributed kindly by Facundo
    Tuesca)

Update to 0.40.0:

  - BREAKING CHANGES:
    - There are no SWIG generated files (src/SWIG/_m2crytpo_wrap.c)
      included anymore, so swig must be installed, no
      exceptions! Also, for compatibility with Python 3.12+, swig
      4.0+ is required.
     - All support for asyncore has been removed, as it has been
       removed in Python 3.12 as well (which means also removal of
       contrib/dispatcher.py, M2Crypto/SSL/ssl_dispatcher.py,
       ZServerSSL).
     - All use of distutils (including the bundled ones in
       setuptools) has been removed, so `setup.py clean` is no
       more.
     - Excessively complicated and error-prone __init__py has been
       cleaned and `import M2Crypto` doesn’t include everything
       anymore. Imports should specified as for example with `from
       M2Crypto import foo`.
  - ASN1_Time handling has been mostly rewritten and it almost
    works even on Windows.
  - All tests in Gitlab CI (with exceptions of some skipped tests
    especially on Windows) are now green, tests of Python 2.7 on
    CentOS 7 have been included.
  - Introduce m2.err_clear_error()
  - Make X509_verify_cert() accessible as m2.x509_verify_cert
</description>
    <pkglist>
      <collection>
        <package name="python-M2Crypto" epoch="0" version="0.44.0" release="1.1" arch="src" src="src/python-M2Crypto-0.44.0-1.1.src.rpm">
          <filename>python-M2Crypto-0.44.0-1.1.src.rpm</filename>
        </package>
        <package name="python-M2Crypto-debugsource" epoch="0" version="0.44.0" release="1.1" arch="x86_64" src="x86_64/python-M2Crypto-debugsource-0.44.0-1.1.x86_64.rpm">
          <filename>python-M2Crypto-debugsource-0.44.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-M2Crypto" epoch="0" version="0.44.0" release="1.1" arch="x86_64" src="x86_64/python311-M2Crypto-0.44.0-1.1.x86_64.rpm">
          <filename>python311-M2Crypto-0.44.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-M2Crypto-debuginfo" epoch="0" version="0.44.0" release="1.1" arch="x86_64" src="x86_64/python311-M2Crypto-debuginfo-0.44.0-1.1.x86_64.rpm">
          <filename>python311-M2Crypto-debuginfo-0.44.0-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>333</id>
    <title>Recommended update for supportutils</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1747899393" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222650" id="1222650" title="supportcofig collects empty dbus configuration from the wrong file" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230371" id="1230371" title="L3-Question: lsof slow on BIG systems - ref:_00D1igLOd._500TrHm2aR:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231838" id="1231838" title="make supportutils openldap2_5 compatible" type="bugzilla" />
    </references>
    <description>This update for supportutils fixes the following issues:

Changes to version 3.2.10:

  + network.txt collect all firewalld zones (pr#233)
  + Collects gfs2 info (PED-11853, pr#235, pr#236)
  + Ignore tasks/threads to prevent collecting duplicate fd data in open_files (bsc#1230371, pr#237)
  + Added openldap2_5 support for SLES (pr#238)
  + Collects additional hawk details (pr#239)
  + Optimized filtering D/Z processes (pr#241)
  + Collect firewalld permanent configuration (pr#243)
  + ldap_info: support for multiple DBs and sanitize olcRootPW (bsc#1231838, pr#247)
  + Added dbus_info for dbus.txt (bsc#1222650, pr#248)

Changes to version 3.2.10:

  + network.txt collect all firewalld zones (pr#233)
  + Collects gfs2 info (PED-11853, pr#235, pr#236)
  + Ignore tasks/threads to prevent collecting duplicate fd data in open_files (bsc#1230371, pr#237)
  + Added openldap2_5 support for SLES (pr#238)
  + Collects additional hawk details (pr#239)
  + Optimized filtering D/Z processes (pr#241)
  + Collect firewalld permanent configuration (pr#243)
  + ldap_info: support for multiple DBs and sanitize olcRootPW (bsc#1231838, pr#247)
  + Added dbus_info for dbus.txt (bsc#1222650, pr#248)

</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.2.10" release="1.1" arch="noarch" src="noarch/supportutils-3.2.10-1.1.noarch.rpm">
          <filename>supportutils-3.2.10-1.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.2.10" release="1.1" arch="src" src="src/supportutils-3.2.10-1.1.src.rpm">
          <filename>supportutils-3.2.10-1.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>338</id>
    <title>Recommended update for dracut</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1748253852" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217885" id="1217885" title="dracut: the nfs module issues &quot;rpc.statd: Running as root.  chown /var/lib/nfs to choose different user&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240919" id="1240919" title="Unknown device /dev//tmp/curl_fetch_url0/" type="bugzilla" />
    </references>
    <description>This update for dracut fixes the following issues:

Update to version 059+suse.597.gb05a38d8:

  * fix(dmsquash-live): do not check ISO md5 if image filesystem (bsc#1240919)
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions

</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="059+suse.597.gb05a38d8" release="1.1" arch="src" src="src/dracut-059+suse.597.gb05a38d8-1.1.src.rpm">
          <filename>dracut-059+suse.597.gb05a38d8-1.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="059+suse.597.gb05a38d8" release="1.1" arch="x86_64" src="x86_64/dracut-059+suse.597.gb05a38d8-1.1.x86_64.rpm">
          <filename>dracut-059+suse.597.gb05a38d8-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-debuginfo" epoch="0" version="059+suse.597.gb05a38d8" release="1.1" arch="x86_64" src="x86_64/dracut-debuginfo-059+suse.597.gb05a38d8-1.1.x86_64.rpm">
          <filename>dracut-debuginfo-059+suse.597.gb05a38d8-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-debugsource" epoch="0" version="059+suse.597.gb05a38d8" release="1.1" arch="x86_64" src="x86_64/dracut-debugsource-059+suse.597.gb05a38d8-1.1.x86_64.rpm">
          <filename>dracut-debugsource-059+suse.597.gb05a38d8-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="059+suse.597.gb05a38d8" release="1.1" arch="x86_64" src="x86_64/dracut-fips-059+suse.597.gb05a38d8-1.1.x86_64.rpm">
          <filename>dracut-fips-059+suse.597.gb05a38d8-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>310</id>
    <title>Security update for gdk-pixbuf</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1746527227" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1223903" id="1223903" title="gdk-pixbuf-2.42.11 causes gkrellm to fail to load" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219276" id="1219276" title="VUL-0: CVE-2022-48622: gdk-pixbuf,gtk2: heap memory corruption on gdk-pixbuf" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48622" id="CVE-2022-48622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48622" type="cve" />
    </references>
    <description>This update for gdk-pixbuf fixes the following issues:

Update to version 2.42.12:

+ Fix a build failure,
+ Fix occasional build failures,
+ ani: Reject files with multiple INA or IART chunks,
+ ani: Reject files with multiple anih chunks (CVE-2022-48622 bsc#1219276),
+ ani: validate chunk size,
+ Updated translations.

- Enable other image loaders (most notably needed seems xpm,xbm).
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).

Update to version 2.42.11:

+ Disable fringe loaders by default.
+ Introspection fixes.
+ Updated translations.

</description>
    <pkglist>
      <collection>
        <package name="gdk-pixbuf" epoch="0" version="2.42.12" release="1.1" arch="src" src="src/gdk-pixbuf-2.42.12-1.1.src.rpm">
          <filename>gdk-pixbuf-2.42.12-1.1.src.rpm</filename>
        </package>
        <package name="gdk-pixbuf-debugsource" epoch="0" version="2.42.12" release="1.1" arch="x86_64" src="x86_64/gdk-pixbuf-debugsource-2.42.12-1.1.x86_64.rpm">
          <filename>gdk-pixbuf-debugsource-2.42.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders" epoch="0" version="2.42.12" release="1.1" arch="x86_64" src="x86_64/gdk-pixbuf-query-loaders-2.42.12-1.1.x86_64.rpm">
          <filename>gdk-pixbuf-query-loaders-2.42.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders-debuginfo" epoch="0" version="2.42.12" release="1.1" arch="x86_64" src="x86_64/gdk-pixbuf-query-loaders-debuginfo-2.42.12-1.1.x86_64.rpm">
          <filename>gdk-pixbuf-query-loaders-debuginfo-2.42.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0" epoch="0" version="2.42.12" release="1.1" arch="x86_64" src="x86_64/libgdk_pixbuf-2_0-0-2.42.12-1.1.x86_64.rpm">
          <filename>libgdk_pixbuf-2_0-0-2.42.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0-debuginfo" epoch="0" version="2.42.12" release="1.1" arch="x86_64" src="x86_64/libgdk_pixbuf-2_0-0-debuginfo-2.42.12-1.1.x86_64.rpm">
          <filename>libgdk_pixbuf-2_0-0-debuginfo-2.42.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-GdkPixbuf-2_0" epoch="0" version="2.42.12" release="1.1" arch="x86_64" src="x86_64/typelib-1_0-GdkPixbuf-2_0-2.42.12-1.1.x86_64.rpm">
          <filename>typelib-1_0-GdkPixbuf-2_0-2.42.12-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>339</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1748330186" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218345" id="1218345" title="[AHB] When no cache file present, a specific license change could lead to a registered BYOS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240310" id="1240310" title="cloud-regionsrv-client does not remove repos on package removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240311" id="1240311" title="cloud-regionsrv-client does not remove repos on package removal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240997" id="1240997" title="Partner-L3: SLES 15 SP6 Patch Failures due to bug in cloud-regionsrv-client package" type="bugzilla" />
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- Update version to 10.4.0
    * Remove repositories when the package is being removed
      We do not want to leave repositories behind refering to the plugin that
      is being removed when the package gets removed (bsc#1240310, bsc#1240311)
    * Turn docker into an optional setup (jsc#PCT-560)
      Change the Requires into a Recommends and adapt the code accordingly
    * Support flexible licenses in GCE (jsc#PCT-531)
    * Drop the azure-addon package it is geting replaced by the
      license-watcher package which has a generic implementation of the
      same functionality.
    * Handle cache inconsistencies (bsc#1218345)
    * Properly handle the zypper root target argument (bsc#1240997)
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.4.0" release="4.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.4.0-4.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.4.0-4.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.4.0" release="4.1" arch="src" src="src/cloud-regionsrv-client-10.4.0-4.1.src.rpm">
          <filename>cloud-regionsrv-client-10.4.0-4.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="4.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-4.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-4.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="4.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-4.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-4.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.5" release="4.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.5-4.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.5-4.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="4.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-4.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-4.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>327</id>
    <title>Security update for python-httpcore, python-h11</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1747731078" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241872" id="1241872" title="VUL-0: CVE-2025-43859: python-h11: accepts some malformed Chunked-Encoding bodies" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43859" id="CVE-2025-43859" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-43859" type="cve" />
    </references>
    <description>This update for python-httpcore, python-h11 fixes the following issues:

python-h11:
  - Update 0.16.0:
    * CVE-2025-43859: Fixed accepting of malformed Chunked-Encoding bodies (bsc#1241872)
  - 0.15.0:
    * Reject Content-Lengths &gt;= 1 zettabyte (1 billion terabytes) early,
      without attempting to parse the integer (#181)

python-httpcore:
  - CVE-2025-43859: Fixed accepting of malformed Chunked-Encoding bodies (bsc#1241872)
</description>
    <pkglist>
      <collection>
        <package name="python-h11" epoch="0" version="0.16.0" release="1.1" arch="src" src="src/python-h11-0.16.0-1.1.src.rpm">
          <filename>python-h11-0.16.0-1.1.src.rpm</filename>
        </package>
        <package name="python311-h11" epoch="0" version="0.16.0" release="1.1" arch="noarch" src="noarch/python311-h11-0.16.0-1.1.noarch.rpm">
          <filename>python311-h11-0.16.0-1.1.noarch.rpm</filename>
        </package>
        <package name="python-httpcore" epoch="0" version="0.16.3" release="7.1" arch="src" src="src/python-httpcore-0.16.3-7.1.src.rpm">
          <filename>python-httpcore-0.16.3-7.1.src.rpm</filename>
        </package>
        <package name="python311-httpcore" epoch="0" version="0.16.3" release="7.1" arch="noarch" src="noarch/python311-httpcore-0.16.3-7.1.noarch.rpm">
          <filename>python311-httpcore-0.16.3-7.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>348</id>
    <title>Security update for docker-compose</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1749555127" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217070" id="1217070" title="VUL-0: CVE-2023-47108: TRACKERBUG: otelgrpc: DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47108" id="CVE-2023-47108" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47108" type="cve" />
    </references>
    <description>This update for docker-compose fixes the following issues:

Update to version 2.33.1:

  * Improvements

    - Add support for gw_priority, enable_ipv4 (requires docker
      v28.0) by @thaJeztah in #12570

  * Fixes

    - Run watch standalone if menu fails to start by @ndeloof in
      #12536
    - Report error using non-file secret|config with read-only
      service by @ndeloof in #12531
    - Don't display bake suggestion when using --progress with
      quiet or json option by @glours in #12561
    - Fix pull --parallel and --no-parallel deprecation warnings
      missing by @maxproske in #12555
    - Fix error message when detach is implied by wait by @ndeloof
      in #12566

  * Dependencies

    - build(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1
      by @dependabot in #12556
    - build(deps): bump google.golang.org/grpc from 1.68.1 to
      1.70.0 by @dependabot in #12494
    - go.mod: update to docker v28.0.0 by @thaJeztah in #12545

Update to version 2.33.0:

  * Important

    - This release introduce support for Bake to manage builds as
      an alternative to the internal buildkit client. This new
      feature can be enabled by setting COMPOSE_BAKE=1 variable.
      Bake will become the default builder in a future release.

  * Improvements

    - let user know bake is now supported by @ndeloof in #12524
    - support additional_context reference to another service by
      @ndeloof in #12485
    - add support for BUILDKIT_PROGRESS by @ndeloof in #12458
    - add --with-env flag to publish command by @glours in #12482
    - Update ls --quiet help description by @maxproske in #12541
    - Publish warn display env vars by @glours in #12486

  * Fixes

    - Fix bake support by @ndeloof in #12507
    - Update link in stats --help output by @maxproske in #12523
    - Properly handle "builtin" seccomp profile by @r-bk in #12478
    - manage watch applied to mulitple services by @ndeloof in
      #12469

  * Internal

    - use main branch for docs upstream validation workflow by
      @crazy-max in #12487
    - fix provenance for binaries and generate sbom by @crazy-max
      in #12479
    - add codeowners file by @glours in #12480
    - remove exit code per error type used by legacy metrics system
      by @ndeloof in #12502
    - Dockerfile: update golangci-lint to v1.63.4 by @thaJeztah in
      #12546
    - Full test coverage for compatibility cmd by @maxproske in
      #12528
    - don't send raw os.Args to opentelemetry but a pseudo command
      line by @ndeloof in #12530
    - add docker engine v28.x to the test-matrix by @thaJeztah in
      #12539
    - enable copyloopvar linter by @thaJeztah in #12542
    - go.mod: remove toolchain directive by @thaJeztah in #12551

  * Dependencies

    - bump buildx v0.20.1 by @ndeloof in #12488
    - bump docker to v27.5.1 by @ndeloof in #12491
    - bump compose-go v2.4.8 by @ndeloof in #12543
    - bump golang.org/x/sys from 0.28.0 to 0.30.0 by @dependabot in
      #12529
    - bump github.com/moby/term v0.5.2 by @thaJeztah in #12540
    - bump github.com/otiai10/copy from 1.14.0 to 1.14.1 by
      @dependabot in #12493
    - bump github.com/jonboulle/clockwork from 0.4.0 to 0.5.0 by
      @dependabot in #12430
    - bump github.com/spf13/pflag from 1.0.5 to 1.0.6 by
      @dependabot in #12548
    - bump golang.org/x/sync from 0.10.0 to 0.11.0 by @dependabot
      in #12547
    - bump gotest.tools/v3 from 3.5.1 to 3.5.2 by @dependabot in
      #12549

Update to version 2.32.4:

  * add missing tag for build during merge workflow
  * ci: re-use local source to build binary images
  * ci: use local source for binary builds

Update to version 2.32.3:

  * ci: update bake-action to v6
  * simplification
  * image can be set to a local ID, that isn't a valid docker ref
  * can't render progress concurrently with buildkit
  * exclude one-off container running convergence
  * Only override service mac if set on the main network.

Update to version 2.32.2:

  * remove engine v25 from e2e test matrix The 1st version
    available for Ubuntu 24.x is Docker Engine v26
  * fix relative path in compose file
  * bump compose-go to v2.4.7
  * replace tibdex/github-app-token by official GitHub
    create-github-app-token
  * bump golang.org/x/net to v0.33.0 to fix potential security
    issue https://github.com/golang/go/issues/70906
  * checkExpectedVolumes must ignore anonymous volumes
  * When retrying to resolveOrCreateNetwork, retry with a valid
    network name
  * only check bind mount conflict if sync action is involved
  * use the 3 latest major versions of the engine to run e2e step
  * bump Golang version to v1.22.10 and update CI actions
  * add --pull to run command
  * CI to validate fmt
  * `make fmt` so any contributor can enforce formatting
  * format code with gofumpt

Update to version 2.32.1:

  * e2e test to prevent future regression
  * only check volume mounts for updated config

Update to version 2.32.0:

  * e2e test for recreate volume
  * build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1
  * build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0
  * build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0
  * prompt user to confirm volume recreation
  * Recreate container on volume configuration change
  * introduce watch restart action
  * bump otel dependencies to v1.28.0 and v0.53.0 to align with
    buildx, buildkit and engine versions
  * bump docker/buildx to latest release
  * fix support for service.mac_address
  * update xx to v1.6.1 for compatibility with alpine 3.21 and file
    5.46+
  * build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0
  * Update pkg/e2e/watch_test.go
  * first watch action for a file event wins
  * fix
  * revisit TestDebounceBatching
  * introduce sync+exec watch action
  * log configuration error as a watch log event
  * do not require a build section but for `rebuild` action
  * pull --quiet should not drop status message, only progress
  * use latest engine tags
  * Bump buildx to 0.19.1
  * be sure everything has been cleanup at the end of each tests
  * add local config.json to test configuration dir if exists
  * disable failing TestBuildSSH test
  * fix build with bake

Update to version 2.31.0:

  * bump containerd to v1.7,24
  * bump google.golang.org/grpc to v1.68.0
  * build(deps): bump github.com/moby/buildkit from 0.17.1 to
    0.17.2
  * build(deps): bump github.com/compose-spec/compose-go/v2
  * only stop dependent containers ... if there's some
  * disable TestNetworkConfigChanged which is unstable on CI
  * only check attached networks on running containers
  * fix: commit tests
  * feat: add commit command
  * run build tests against bake
  * delegate build to buildx bake
  * build(deps): bump github.com/stretchr/testify from 1.9.0 to
    1.10.0
  * use service.stop to stop dependent containers
  * Update wait-timeout flag usage to include the unit
  * go.mod: github.com/docker/cli v27.4.0-rc.2
  * go.mod: github.com/docker/docker v27.4.0-rc.2
  * go.mod: github.com/docker/cli 8d1bacae3e49 (v27.4.0-rc.2-dev)
  * go.mod: github.com/docker/cli v27.4.0-rc.1
  * go.mod: github.com/docker/docker v27.4.0-rc.1
  * Update pkg/compose/convergence.go
  * detect network config changes and recreate if needed
  * go.mod: github.com/docker/buildx v0.18.0
  * go.mod: github.com/moby/buildkit v0.17.1
  * gha: test against docker engine v27.4.0
  * push empty descriptor layer when using OCI version 1.1 for
    Compose artifact it fixes a repository creation issue when
    pushing the 1st time a Compose OCI artifact on the Hub
  * remove ddev e2e tests
  * implement remove-orphans on run
  * ci: enable testifylint linter
  * Emit events for building images
  * Fix compose images that reutn a different image with the same
    ID
  * remove obsolete containers first on scale down
  * pass stal bot inactivity limit from 6 to 3 months
  * fix(config): Print service names with --no-interpolate
  * build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0
  * build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0

Update to version 2.30.3:

  * bump compose-go v2.4.4
  * Avoid starting all services on rebuild

Update to version 2.30.2:

  * remove ArtifactType from Config in OCI v1.1 definition of the
    artifact
  * build(deps): bump github.com/compose-spec/compose-go/v2
  * Service being declared in a profile must not trigger
    re-creation
  * Add profile e2e test case to document in compose
  * Update `MAINTAINERS` file

Update to version 2.30.1:

  * bump compose-go to version v2.4.2

Update to version 2.30.0:

  * Improvements

    - Introduce service hooks by @ndeloof (12166)
    - Introduce generate command as alpha command by @glours
      (12209)
    - Add export command by @jarqvi (12120)
    - Add support for CDI device request using devices by @ndeloof
      (12184)
    - Add support for bind recursive by @ndeloof (12210)
    - Allow usage of -f flag with OCI Compose artifacts by @glours
      (12220)

  * Fixes

    - Append unix-style relative path when computing container
      target path by @ndeloof (12145)
    - Wait for dependent service up to delay set by --wait-timeout
      by @ndeloof (12156)
    - Check secret source exists, as bind mount would create target
      by @ndeloof (12151)
    - After container restart register printer consumer by @jhrotko
      (12158)
    - Fix(down): Fix down command if specified services are not
      running by @idsulik (12164)
    - Show watch error message and open DD only when w is pressed
      by @jhrotko (12165)
    - Fix(push): Fix unexpected EOF on alpha publish by @idsulik
      (12169)
    - Fix(convergence): Serialize access to observed state by
      @anantadwi13 (12150)
    - Remove feature flag integration with Docker Desktop for
      ComposeUI and ComposeNav by @jhrotko (12192)
    - Support Dockerfile-specific ignore-file with watch by
      @ndeloof (12193)
    - Add support for raw env_file format by @ndeloof (12179)
    - Convert GPUs to DeviceRequests with implicit "gpu" capability
      by @ndeloof (12197)
    - Improve error message to include expected network label by
      @divinity76 (12213)
    - Don't use progress to render restart, which hides logs by
      @ndeloof (12226)
    - One-off containers are not indexed, and must be ignored by
      exec --index command by @ndeloof (12224)
    - Don't warn about uid/gid not being supported while ... they
      are by @ndeloof (12232)
    - Connect to external networks by name by @ndeloof (12234)
    - Fix push error message typo by @chris-crone (12237)
    - Fix(dockerignore): Add wildcard support to dockerignore.go by
      @idsulik (12239)

  * Internal

    - Remove bind options when creating a volume type by @jhrotko
      (12177)
    - pass device.options to engine by @ndeloof (12183)
    - Add security policy by @thaJeztah (12194)
    - Gha: set default permissions to "contents: read" by
      @thaJeztah (12195)
    - Desktop: allow this client to be identified via user-agent by
      @djs55 (12212)
    - Compose-go clean volume target to avoid ambiguous comparisons
      by @ndeloof (12208)

  * Dependencies

    - Bump docker v27.3.1 by @ndeloof (12178)
    - Build(deps): bump golang.org/x/sys from 0.25.0 to 0.26.0 by
      @dependabot (12189)
    - Bump compose-go to v2.3.0 by @glours (12198)
    - Bump compose-go to v2.4.0 by @glours (12231)
    - Bump compose-go to v2.4.1 by @glours (12243)
    - Build(deps): bump github.com/containerd/containerd from
      1.7.22 to 1.7.23 by @dependabot (12211)
    - Bump golang minimal version to 1.22 in go.mod by @glours
      (12246)
    - Bump go.uber.org/mock to v0.5.0 and google.golang.org/grpc to
      v1.67.1 by @glours (12245)

Update to version 2.29.7:

  * revert commits link to mount API over bind changes

Update to version 2.29.6:

  * don't set propagation if target engine isn't linux
  * build(deps): bump github.com/docker/docker v27.3.0-rc.2
  * build(deps): bump github.com/docker/cli v27.3.0-rc.2

Update to version 2.29.5:

  * set propagation default
  * Remove custom codeql workflow

Update to version 2.29.4:

  * fix import
  * chore(watch): Add debug log when skipping service without build
    context
  * stop dependent containers before recreating diverged service
  * Fixed possible `nil` pointer dereference
  * bump github.com/docker/buildx v0.17.1
  * build(deps): bump docker, docker/cli to v27.3.0-rc.1
  * gha: test against docker engine v27.3.0

Update to version 2.29.3:

  * show sync files only in debug level
  * chore(watch): Add changed files path/count to log
  * build(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0
  * bump compose-go to version v2.2.0
  * Restore compose v1 behavior to recreate containers when ran
    with -V
  * fix linting issues with golangci-lint 1.60.2
  * bump golang to version 1.22.7
  * bump dependencies versions, engine and cli v27.2.1 containerd
    v1.7.22 buildx v0.17.0 buildkit v0.16.0
  * build(deps): bump golang.org/x/sys from 0.22.0 to 0.25.0
  * Fix typos
  * Use logrus instead of direct output to stderr.
  * attach: close streams when done
  * Fix typo in pull.go
  * Allow combination of bind mounts and 'rebuild' watches
  * service hash must exlude depends_on
  * prefer mount API over bind
  * docs: duplicate documentation for root cmd
  * docs(wait): Fix wait command description
  * allow to add empty line in the logs when nav menu activated
  * upgrade docker versions

Update to version 2.29.2:

  * initial sync files that modified after image creation
  * initial sync for root directory
  * Removes redundant condition from toAPIBuildOptions in build.go
  * docs: Update docker compose kill usage
  * Fix stop on file chane for sync-restart action
  * bump engine and cli to v27.1.1, buildx to v0.16.1
  * remove all dependabot update PRs for OTel dependencies
  * gp.mod: github.com/gofrs/flock v0.12.1
  * go.mod: golang.org/x/sys v0.22.0
  * update to go1.21.12

Update to version 2.29.1:

  * Enhance JSON progress events with more fields.
  * bump compose-go v2.1.5
  * bump github.com/docker/cli v27.1.0
  * bump github.com/docker/docker v27.1.0
  * bump github.com/containerd/containerd v1.7.20
  * gha: add docker 27.1.0
  * fix(containers): fix sorting logic by adding secondary sorting
    for one-off containers

Update to version 2.29.0:

  * update docs generation to avoid man pages generation
  * bump compose-go to v2.1.4, buildx to v0.16.0, containerd to
    v1.7.19 and buildx to v0.15.0
  * restore setEnvWithDotEnv
  * empty env variable with no value must be unset in container
  * exclude unnecessary resources after services have been selected
  * change time for stale bot
  * Remove debug mode and run twice a week
  * Add stale workflow
  * update docs
  * feat(watch): Add --prune option to docker-compose watch command
  * Remove COMPOSE_MENU env from e2e tests
  * Use rawjson for the build backend.
  * Set logging format to JSON.
  * Format errors as JSON when in JSON progress mode.
  * Pass 'plain' instead of 'json' to build backend
  * Add JSON stream progress writer
  * go.mod: docker/cli, docker/docker v27.0.3
  * gha: test against docker v27.0.3
  * go.mod: docker/cli, docker/docker v27.0.2

Update to version 2.28.1:

  * Remove `console.Terminal` check and use `IsTerminal` from
    `streams.Out`

Update to version 2.28.0:

  * go.mod: github.com/compose-spec/compose-go v2.1.3
  * go.mod: docker/docker and docker/cli v27.0.1-rc.1

Update to version 2.27.3:

  * build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1
  * build(deps): bump github.com/docker/buildx from 0.15.0 to
    0.15.1

Update to version 2.27.2:

  * using as flag of the up command, watch was blocking process
    shutdown This happened when sunsetting the application from
    docker compose down command
  * Add open watch docs in up menu
  * bump buildkit to v0.14.0 and buildx to v0.15.0
  * stop watch process when associated up process is stopped
  * build(deps): bump github.com/docker/docker
  * build(deps): bump github.com/containerd/containerd from 1.7.17
    to 1.7.18
  * build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0
  * build(deps): bump github.com/hashicorp/go-version from 1.6.0 to
    1.7.0
  * build: replace uses of archive.CanonicalTarNameForPath
  * update gh actions versions, update engine matrix, bump golang
    to 1.21.11
  * enforce keyboard.Close is always executed to restore terminal
  * config --environment
  * Readd event
  * remove unreachable code
  * Fix dot env file to define COMPOSE_* variables
  * return an error when --detach and --watch are used together in
    up command
  * Correct 'cancellation' typo in comment
  * Fix: change append to use slice index in ps.go
  * COMPOSE_PROFILES can be set by .env file
  * prevent concurrent map write relying on project immutability

Update to version 2.27.1:
  * build(deps): bump github.com/containerd/containerd from 1.7.16
    to 1.7.17
  * build(deps): bump github.com/docker/buildx from 0.14.0 to
    0.14.1
  * drop COMPOSE_EXPERIMENTAL_OTEL as docker/cli has opentelemetry
    in
  * add gui/composeview as part of available commands
  * fix opentelemetry
  * bump compose-go to version v2.1.1
  * Set endpoint-specific DriverOpts
  * Bump compose-go version to latest main
  * Backport OpenBSD patches
  * add new navigation menu to open Compose app configuration in
    Docker Desktop
  * build(deps): bump github.com/fsnotify/fsevents from 0.1.1 to
    0.2.0
  * build(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0
  * fix --resolve-image-digests
  * allow a local .env file to override compose.yaml sibling .env
  * Bump docker engine and cli to version 26.1.3
  * Bump docker to v26.1.2
  * Add documentation for --menu up option and COMPOSE_MENU
    environemnt variable
  * chore(deps): bump docker to v26.1.1 (#11794)

Update to version 2.27.0:
  * fix: overlapping logs and menu navigation (#11765)
  * build(deps): bump github.com/moby/buildkit
  * chore(e2e): fix flaky cascade failure test
  * use v2.26.1 tag for moby and Docker cli
  * chore(deps): update to Moby v26.1 &amp; buildx v0.14
  * bump compose-go version to v2.1.0
  * fix support for --context=foo
  * Fix #11710: Avoid to try to close channel twice after hitting
    Ctrl-C on compose up (#11719)
  * fix(desktop): remove overly-aggressive feature flag check
    (#11748)
  * chore: fix typo in comment
  * bump dependencies
  * fix: do not try to create file shares for non-directories
  * check container_name is not in use by another service we will
    create
  * don't clear line when navigation is disabled
  * fix: return correct exit code with `--exit-code-from` (#11715)
  * progress for resource can be restarted after more Working event
    comes
  * Revert "Stop the resource timer after last expected event"
  * Revert change to allow trying to kill again if a kill fails
  * Handle errors and allow to send multiple kills if one failed
  * Ignore errors when killing on second Ctrl-C
  * docker compose up always kills the containers on second Ctrl-C
  * read COMPOSE_REMOVE_ORPHANS from .env
  * Set Required false to depends_on containers for compose -p
    stop/down
  * Ignore missing containers when compose stop -p
  * Ignore missing containers when compose down -p
  * Introduce support for build.entitlements
  * Remove dead url reference.
  * e2e test for --all-resources
  * introduce --all-resources to _not_ exclude resources not used
    by services
  * Introduce --abort-on-container-failure
  * bump golang version to 1.21.9
  * don't use ansi espace sequence when disabled

Update to version 2.26.1:
  * Does not start keyboard manager if there is no tty
  * Change menu information text to dim
  * Handle --no-build and --watch args
  * build(deps): bump github.com/opencontainers/image-spec
  * Unwrap error message.
  * Include error message in pull warning/errors

Update to version 2.26.0:
  * chore(desktop): revised feature detection for file shares
  * Add Navigation Menu to compose up
  * Add support for volume Subpath option
  * Bump docker v26.0.0
  * introduce config --variables to list compose model variables
  * Fix docs on default build image name
  * Bump compose-go to v2.0.2
  * add support for annotations
  * Revert "Bump compose-go to v2.0.1"
  * Bump compose-go to v2.0.1
  * feat(desktop): synchronized file share integration (#11614)
  * feat(experiments): add experimental feature state (#11633)
  * reduce timeout of the Otel tracing command
  * fix `compose config --format json`

Update to version 2.25.0:
  * Bump compose-go v2.0.0
  * services shell completion bugfix
  * fix TestBuildPlatformsWithCorrectBuildxConfig
  * only use ToModel when --no-interpolate is set
  * feat(desktop): add Docker Desktop detection and client skeleton
    (#11593)

Update to version 2.24.7:
  * chore(deps): upgrade go to 1.21.8 (#11578)
  * ci(deps): bump moby/moby &amp; docker/cli to v25.0.4 (#11566)
  * Add test summary for test jobs in ci
  * make code simpler
  * avoid duplicated "xx exited with code 0" message
  * introduce --watch
  * move code into small functions for better readability
  * restore support for `config --no-interpolate`
  * remove docker cli step in ci.yml
  * get log to manage `attach`
  * bump compose-go to version v2.0.0-rc.8
  * use an dedicated compose file --quiet-pull e2e test
  * Add a fallback check of Watch pid on Windows False positives
    were detected when checking the previous watch process state
  * add support of QuietOption to create command
  * pass QuietOption when starting dependencies from run command
  * when ran with ANSI disabled, force progress=plain
  * Issue-11374: Modified compose up command to respect
    COMPOSE_REMOVE_ORPHANS environment variable
  * ci: bump engine version to `25.0.3`
  * sort containers to optimize scale down
  * discard stdout for laaarge log test

Update to version 2.24.6:

  * use listeners to collect include metrics
  * docs: update cli reference link
  * docs: unify no trailing dots in docstrings and help (#11301)
  * Use listener for file metadata
  * fix deadlock collecting large logs
  * chore(watch): remove old `docker cp` implementation
  * ci(deps): bump docker/cli to v25.0.3 (#11481)
  * pass All option to backend api.Service when length statuses is
    not equal to zero
  * Add OTEL specs: build, depends_on, capabilities (gpu/tpu)
  * build(deps): bump github.com/opencontainers/image-spec
  * feat(tracing): add project hash attr
  * chore(load): ensure context passed to load
  * Include all networks in ContainerCreate call if API &gt;= 1.44
  * bump compose-go to v2.0.0-rc.4
  * CI: docker engine version matrix
  * build(deps): bump github.com/docker/cli
  * Fix load .env from project directory when project file is set
    by COMPOSE_FILE

</description>
    <pkglist>
      <collection>
        <package name="docker-compose" epoch="0" version="2.33.1" release="1.1" arch="src" src="src/docker-compose-2.33.1-1.1.src.rpm">
          <filename>docker-compose-2.33.1-1.1.src.rpm</filename>
        </package>
        <package name="docker-compose" epoch="0" version="2.33.1" release="1.1" arch="x86_64" src="x86_64/docker-compose-2.33.1-1.1.x86_64.rpm">
          <filename>docker-compose-2.33.1-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>340</id>
    <title>Security update for libsoup</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1748510310" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240750" id="1240750" title="VUL-0: CVE-2025-2784: libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240752" id="1240752" title="VUL-0: CVE-2025-32050: libsoup: Integer overflow in append_param_quoted" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240754" id="1240754" title="VUL-0: CVE-2025-32051: libsoup: Segmentation fault when parsing malformed data URI" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240756" id="1240756" title="VUL-0: CVE-2025-32052: libsoup: Heap buffer overflow in sniff_unknown()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240757" id="1240757" title="VUL-0: CVE-2025-32053: libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241162" id="1241162" title="VUL-0: CVE-2025-32913: libsoup,libsoup2: NULL pointer dereference in soup_message_headers_get_content_disposition" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241164" id="1241164" title="VUL-0: CVE-2025-32914: libsoup,libsoup2: out of bounds read  in `soup_multipart_new_from_message()`." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241214" id="1241214" title="VUL-0: CVE-2025-32912: libsoup,libsoup2: NULL pointer dereference in SoupAuthDigest" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241222" id="1241222" title="VUL-0: CVE-2025-32907: libsoup,libsoup2: excessive memory consumption in server when client requests a large amount of overlapping ranges in a single HTTP request" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241263" id="1241263" title="VUL-0: CVE-2025-32906: libsoup,libsoup2: Out of bounds reads in soup_headers_parse_request()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241223" id="1241223" title="VUL-0: CVE-2025-32908: libsoup,libsoup2: HTTP request may lead to server crash due to HTTP/2 server not fully validating the values of pseudo-headers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241226" id="1241226" title="VUL-0: CVE-2025-32909: libsoup,libsoup2: NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241238" id="1241238" title="VUL-0: CVE-2025-32911: libsoup,libsoup2: Double free on soup_message_headers_get_content_disposition() via &quot;params&quot;." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241252" id="1241252" title="VUL-0: CVE-2025-32910: libsoup,libsoup2: null pointer deference on client when server omits the 'realm' parameter in an Unauthorized response with Digest authentication" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241686" id="1241686" title="VUL-0: CVE-2025-46420: libsoup,libsoup2: libsoup: Memory leak on soup_header_parse_quality_list() via soup-headers.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241688" id="1241688" title="VUL-0: CVE-2025-46421: libsoup,libsoup2: libsoup: HTTP Authorization Header leak via an HTTP redirect" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2784" id="CVE-2025-2784" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2784" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32050" id="CVE-2025-32050" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32050" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32051" id="CVE-2025-32051" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32051" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32052" id="CVE-2025-32052" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32052" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32053" id="CVE-2025-32053" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32053" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32906" id="CVE-2025-32906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32906" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32907" id="CVE-2025-32907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32907" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32908" id="CVE-2025-32908" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32908" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32909" id="CVE-2025-32909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32909" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32910" id="CVE-2025-32910" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32910" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32911" id="CVE-2025-32911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32911" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32912" id="CVE-2025-32912" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32912" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32913" id="CVE-2025-32913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32913" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32914" id="CVE-2025-32914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32914" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46420" id="CVE-2025-46420" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46420" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46421" id="CVE-2025-46421" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46421" type="cve" />
    </references>
    <description>This update for libsoup fixes the following issues:

- CVE-2025-2784: Fixed Heap buffer over-read in `skip_insignificant_space` when sniffing content (bsc#1240750)
- CVE-2025-32050: Fixed Integer overflow in append_param_quoted (bsc#1240752)
- CVE-2025-32051: Fixed Segmentation fault when parsing malformed data URI (bsc#1240754)
- CVE-2025-32052: Fixed Heap buffer overflow in sniff_unknown() (bsc#1240756)
- CVE-2025-32053: Fixed Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (bsc#1240757)
- CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162)
- CVE-2025-32914: Fixed out of bounds read  in `soup_multipart_new_from_message()` (bsc#1241164)
- CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214)
- CVE-2025-32907: Fixed xcessive memory consumption in server when client requests a large amount of overlapping
  ranges in a single HTTP request (bsc#1241222)
- CVE-2025-32906: Fixed Out of bounds reads in soup_headers_parse_request() (bsc#1241263)
- CVE-2025-32908: Fixed HTTP request may lead to server crash due to HTTP/2 server not fully validating the values
  of pseudo-headers (bsc#1241223)
- CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226)
- CVE-2025-32911: Fixed Double free on soup_message_headers_get_content_disposition() via "params" (bsc#1241238)
- CVE-2025-32910: Fixed null pointer deference on client when server omits the 'realm' parameter in an Unauthorized
  response with Digest authentication (bsc#1241252)
- CVE-2025-46420: Fixed Memory leak on soup_header_parse_quality_list() via soup-headers.c (bsc#1241686)
- CVE-2025-46421: Fixed HTTP Authorization Header leak via an HTTP redirect (bsc#1241688)
</description>
    <pkglist>
      <collection>
        <package name="libsoup" epoch="0" version="3.4.2" release="6.1" arch="src" src="src/libsoup-3.4.2-6.1.src.rpm">
          <filename>libsoup-3.4.2-6.1.src.rpm</filename>
        </package>
        <package name="libsoup-3_0-0" epoch="0" version="3.4.2" release="6.1" arch="x86_64" src="x86_64/libsoup-3_0-0-3.4.2-6.1.x86_64.rpm">
          <filename>libsoup-3_0-0-3.4.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-3_0-0-debuginfo" epoch="0" version="3.4.2" release="6.1" arch="x86_64" src="x86_64/libsoup-3_0-0-debuginfo-3.4.2-6.1.x86_64.rpm">
          <filename>libsoup-3_0-0-debuginfo-3.4.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-debugsource" epoch="0" version="3.4.2" release="6.1" arch="x86_64" src="x86_64/libsoup-debugsource-3.4.2-6.1.x86_64.rpm">
          <filename>libsoup-debugsource-3.4.2-6.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>336</id>
    <title>Security update for python311</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1748008544" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236705" id="1236705" title="VUL-0: CVE-2025-0938: python: functions `urllib.parse.urlsplit` and `urlparse` accept domain names including square brackets" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241067" id="1241067" title="python310, python311: FTBFS with OpenSSL 3.5.0" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0938" id="CVE-2025-0938" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0938" type="cve" />
    </references>
    <description>This update for python311 fixes the following issues:

- Updated to 3.11.12:
  - gh-131809: Updated bundled libexpat to 2.7.1
  - gh-131261: Upgraded to libexpat 2.7.0
  - CVE-2025-0938: Fixed functions `urllib.parse.urlsplit` and `urlparse` 
    accepting domain names including square brackets (bsc#1236705)
  - gh-121284: Fixed bug in the folding of rfc2047 encoded-words
    when flattening an email message using a modern email
    policy. Previously when an encoded-word was too long for
    a line, it would be decoded, split across lines, and
    re-encoded. But commas and other special characters in the
    original text could be left unencoded and unquoted. This
    could theoretically be used to spoof header lines using a
    carefully constructed encoded-word if the resulting rendered
    email was transmitted or re-parsed.
  - gh-80222: Fixed bug in the folding of quoted strings
    when flattening an email message using a modern email
    policy. Previously when a quoted string was folded so that
    it spanned more than one line, the surrounding quotes and
    internal escapes would be omitted. This could theoretically
    be used to spoof header lines using a carefully constructed
    quoted string if the resulting rendered email was transmitted
    or re-parsed.
  - gh-119511: Fixed a potential denial of service in the imaplib
    module. When connecting to a malicious server, it could
    cause an arbitrary amount of memory to be allocated. On many
    systems this is harmless as unused virtual memory is only
    a mapping, but if this hit a virtual address size limit
    it could lead to a MemoryError or other process crash. On
    unusual systems or builds where all allocated memory is
    touched and backed by actual ram or storage it could’ve
    consumed resources doing so until similarly crashing.
  - gh-127257: In ssl, system call failures that OpenSSL reports
    using ERR_LIB_SYS are now raised as OSError.
  - gh-121277: Writers of CPython’s documentation can now use
    next as the version for the versionchanged, versionadded,
    deprecated directives.
  - gh-106883: Disabled GC during the _PyThread_CurrentFrames()
    and _PyThread_CurrentExceptions() calls to avoid the
    interpreter to deadlock.
</description>
    <pkglist>
      <collection>
        <package name="python311" epoch="0" version="3.11.12" release="1.1" arch="src" src="src/python311-3.11.12-1.1.src.rpm">
          <filename>python311-3.11.12-1.1.src.rpm</filename>
        </package>
        <package name="python311" epoch="0" version="3.11.12" release="1.1" arch="x86_64" src="x86_64/python311-3.11.12-1.1.x86_64.rpm">
          <filename>python311-3.11.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses" epoch="0" version="3.11.12" release="1.1" arch="x86_64" src="x86_64/python311-curses-3.11.12-1.1.x86_64.rpm">
          <filename>python311-curses-3.11.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses-debuginfo" epoch="0" version="3.11.12" release="1.1" arch="x86_64" src="x86_64/python311-curses-debuginfo-3.11.12-1.1.x86_64.rpm">
          <filename>python311-curses-debuginfo-3.11.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debuginfo" epoch="0" version="3.11.12" release="1.1" arch="x86_64" src="x86_64/python311-debuginfo-3.11.12-1.1.x86_64.rpm">
          <filename>python311-debuginfo-3.11.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debugsource" epoch="0" version="3.11.12" release="1.1" arch="x86_64" src="x86_64/python311-debugsource-3.11.12-1.1.x86_64.rpm">
          <filename>python311-debugsource-3.11.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0" epoch="0" version="3.11.12" release="1.1" arch="x86_64" src="x86_64/libpython3_11-1_0-3.11.12-1.1.x86_64.rpm">
          <filename>libpython3_11-1_0-3.11.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0-debuginfo" epoch="0" version="3.11.12" release="1.1" arch="x86_64" src="x86_64/libpython3_11-1_0-debuginfo-3.11.12-1.1.x86_64.rpm">
          <filename>libpython3_11-1_0-debuginfo-3.11.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base" epoch="0" version="3.11.12" release="1.1" arch="x86_64" src="x86_64/python311-base-3.11.12-1.1.x86_64.rpm">
          <filename>python311-base-3.11.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base-debuginfo" epoch="0" version="3.11.12" release="1.1" arch="x86_64" src="x86_64/python311-base-debuginfo-3.11.12-1.1.x86_64.rpm">
          <filename>python311-base-debuginfo-3.11.12-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-core" epoch="0" version="3.11.12" release="1.1" arch="src" src="src/python311-core-3.11.12-1.1.src.rpm">
          <filename>python311-core-3.11.12-1.1.src.rpm</filename>
        </package>
        <package name="python311-core-debugsource" epoch="0" version="3.11.12" release="1.1" arch="x86_64" src="x86_64/python311-core-debugsource-3.11.12-1.1.x86_64.rpm">
          <filename>python311-core-debugsource-3.11.12-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>346</id>
    <title>Security update for iputils</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1749389141" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242300" id="1242300" title="VUL-0: CVE-2025-47268: iputils: integer overflow in RTT calculation can lead to undefined behavior" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47268" id="CVE-2025-47268" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47268" type="cve" />
    </references>
    <description>This update for iputils fixes the following issues:

- CVE-2025-47268: Fixed integer overflow in RTT calculation leading to undefined behavior (bsc#1242300)
</description>
    <pkglist>
      <collection>
        <package name="iputils" epoch="0" version="20221126" release="4.1" arch="src" src="src/iputils-20221126-4.1.src.rpm">
          <filename>iputils-20221126-4.1.src.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20221126" release="4.1" arch="x86_64" src="x86_64/iputils-20221126-4.1.x86_64.rpm">
          <filename>iputils-20221126-4.1.x86_64.rpm</filename>
        </package>
        <package name="iputils-debuginfo" epoch="0" version="20221126" release="4.1" arch="x86_64" src="x86_64/iputils-debuginfo-20221126-4.1.x86_64.rpm">
          <filename>iputils-debuginfo-20221126-4.1.x86_64.rpm</filename>
        </package>
        <package name="iputils-debugsource" epoch="0" version="20221126" release="4.1" arch="x86_64" src="x86_64/iputils-debugsource-20221126-4.1.x86_64.rpm">
          <filename>iputils-debugsource-20221126-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>345</id>
    <title>Security update for open-vm-tools</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1749388983" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237147" id="1237147" title="containerd 1.7.25 and open-vm-tools" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241938" id="1241938" title="GCC 15 - open-vm-tools package doesn't build" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243106" id="1243106" title="VUL-0: CVE-2025-22247: open-vm-tools: Insecure file handling" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22247" id="CVE-2025-22247" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22247" type="cve" />
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- Updated to 12.5.2:
  * CVE-2025-22247: Fixed insecure file handling (bsc#1243106)

- Fixed gcc15 compile time error (bsc#1241938)
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="12.5.2" release="1.1" arch="x86_64" src="x86_64/libvmtools0-12.5.2-1.1.x86_64.rpm">
          <filename>libvmtools0-12.5.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="libvmtools0-debuginfo" epoch="0" version="12.5.2" release="1.1" arch="x86_64" src="x86_64/libvmtools0-debuginfo-12.5.2-1.1.x86_64.rpm">
          <filename>libvmtools0-debuginfo-12.5.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.5.2" release="1.1" arch="src" src="src/open-vm-tools-12.5.2-1.1.src.rpm">
          <filename>open-vm-tools-12.5.2-1.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="12.5.2" release="1.1" arch="x86_64" src="x86_64/open-vm-tools-12.5.2-1.1.x86_64.rpm">
          <filename>open-vm-tools-12.5.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools-debuginfo" epoch="0" version="12.5.2" release="1.1" arch="x86_64" src="x86_64/open-vm-tools-debuginfo-12.5.2-1.1.x86_64.rpm">
          <filename>open-vm-tools-debuginfo-12.5.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools-debugsource" epoch="0" version="12.5.2" release="1.1" arch="x86_64" src="x86_64/open-vm-tools-debugsource-12.5.2-1.1.x86_64.rpm">
          <filename>open-vm-tools-debugsource-12.5.2-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>323</id>
    <title>Recommended update for pcr-oracle</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1747388373" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241957" id="1241957" title="SL Micro 6.0 Staging P fails after installing grub2 update (TPM based unlocking fails)" type="bugzilla" />
    </references>
    <description>This update for pcr-oracle fixes the following issues:

- Predict the EFI_VARIABLE_AUTHORITY event with the alternative database (bsc#1241957)
</description>
    <pkglist>
      <collection>
        <package name="pcr-oracle" epoch="0" version="0.4.6" release="4.1" arch="src" src="src/pcr-oracle-0.4.6-4.1.src.rpm">
          <filename>pcr-oracle-0.4.6-4.1.src.rpm</filename>
        </package>
        <package name="pcr-oracle" epoch="0" version="0.4.6" release="4.1" arch="x86_64" src="x86_64/pcr-oracle-0.4.6-4.1.x86_64.rpm">
          <filename>pcr-oracle-0.4.6-4.1.x86_64.rpm</filename>
        </package>
        <package name="pcr-oracle-debuginfo" epoch="0" version="0.4.6" release="4.1" arch="x86_64" src="x86_64/pcr-oracle-debuginfo-0.4.6-4.1.x86_64.rpm">
          <filename>pcr-oracle-debuginfo-0.4.6-4.1.x86_64.rpm</filename>
        </package>
        <package name="pcr-oracle-debugsource" epoch="0" version="0.4.6" release="4.1" arch="x86_64" src="x86_64/pcr-oracle-debugsource-0.4.6-4.1.x86_64.rpm">
          <filename>pcr-oracle-debugsource-0.4.6-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>362</id>
    <title>Recommended update for python-kiwi</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1750428368" />
    <references>
    </references>
    <description>This update for python-kiwi fixes the following issues:

- Apply security context on writable root only
- Docs: fix typo in users.rst
- Docs: minor punctuation and grammar fixes
- Give test-image-overlayroot enough space
- Allow ext2/ext3 as valid build target
  stat reports the value 'ext2/ext3' which is a valid target
- Added check_target_dir_on_unsupported_filesystem
- Fix rd.kiwi.oem.luks.reencrypt_randompass workflow
- Add support for new tarball-based WSL format
- Update SL-Micro build test
- Required read-only-root-fs for SL-Micro test build
  Changes from the SL-Micro team requires adaptions to the
  integration test description
- Delete fstab.script from SL-Micro test build
  This was only needed when /var was an extra partition, but
  it's a volume with copy-on-write disabled for some time
- Add systemd-resolved to TW integration tests
  For some reason it's not longer part of the systemd standard
  installation
- Add dkms to test-image-embedded integration test
- Fixed access issue to etc/kernel for sdboot
- Update test-image-overlayroot
- Fixed get_volume_management
- Update test-image-overlayroot
  Move to systemd-boot as bootloader, activate secure boot
  and drop the extra boot partition. Use XFS for the write
  space
- Allow initrd updates on read-only devices
  Move initrd to ESP for boot loaders that reads data
  from there
- Fix ordering issue for device assignment
  wrong assignment of a boot partition in overlayroot setup
  without boot partition
- Add kiwi-settings package for TW
  de-blacklist erofs to allow building integration tests
  with this filesystem
- Switch to dracut-kiwi-verity
- Update test-image-overlayroot integration test
- Add documentation for new attribute
  Add details how to use the new overlayroot_readonly_filesystem attribute
- Add support for selecting the overlay read-only fs
- Fixed root setup for verity overlay disk
- Make sure the verity record has a superblock
- Drop distro specific runtime check
- Fix root clone size setup
- Fix reencryption master key passphrase
- Fixed targettype setup in zipl.conf
  The special targettype set to GPT still indicates SCSI for
  the zipl.conf but tells kiwi to create a GPT disk layout
- Fixed s390 integration test
  targettype attribute in wrong section
- Add support for GPT targettype on s390
  Allow to build s390 images using GPT instead of the old DOS
  partition table. zipl has added support to read from GPT.
- Add --no-compress option to bundler
  Allow to skip the compression for bundle files marked
  to become compressed.
- Rawhide (F43) has removed basesystem package
- rawhide install shadow-utils for usermod
- Fixed default bls value setup
- Fix setup of use_disk_password for random secret
  When using luks="random" in combination with use_disk_password="true"
  the resulting cryptomount call in grub is wrong. This commit fixes it
- Drop copying GRUB2 modules to /boot with Secure Boot UEFI images
  Copying the modules creates a situation where future updates
  applied to a running system can cause GRUB to crash due to mixed
  modules and GRUB EFI binaries.
  It is not needed anyway since GRUB EFI binaries for Secure Boot have
  all modules compiled into the binaries.
- Make sure editbootinstall runs offline
  editbootinstall expects the system to be umounted
- Make sure post sync actions are in scope
- Follow up fix for overlayroot builds for EFI path
  Only perform the boot overlay if there is an extra boot partition
- Only remove entries from exclude list if present
- Fix overlayroot builds for EFI path
  make sure to keep boot/efi mountpoint directories
  in the read-only area as they can't be created later
- doc: overview: Add list of supported Linux distributions
  These are the Linux distributions that are developed and actively
  tested for with the latest kiwi releases.
  This should offer greater clarity about what we're able to support
  as an upstream project.
- Fixed mount of image system for volume managers
  The ImageSystem.mount() method implemented its own handling
  for mounting the volumes of a volume manager based system.
  First and foremost this duplicates code that already exists
  in the respective VolumeManager implementation and second
  the code behaved wrong in case of btrfs when there is no
  default subvolume configured
- Handle grub fix functions less strict
  If called on full read-only systems, log the information
  that the files can't be modified but do not fail. On
  such systems the expectation is that no fix code must
  be applied and as such the fix function can be considered
  an optional step.
- Fixed root setup for encrypted overlay disk
- Change suffix for package manager config files
- Set security context after root sync
  On selinux enabled image builds we call setfiles initially
  after the root tree is complete and after each script invocation
  that might change the system. However the security context
  also applies to mount points e.g volumes which only exists
  at the time when the root tree gets synced to the actual image
  binary. Thus this commit also calls setfiles on the mounted
  root tree after data sync.
- Fix broken doc link
  Rephrase chapter pointing to a documentation side at VMware.
  They are constantly changing their documentation URLs that
  I'm tired of fixing this.
- Fix key slot selection for luks reencrypt
  Depending on the type setup for a luks encrypted image, there
  might be one or two key slots available. When kiwi is requested
  to perform the reencryption process at least one key-slot and
  the proper keyfile/passphrase must be provided. This commit
  stores the information about the key-slot number for which
  a decryption information exists in the initrd. In addition to
  the code change also the corresponding integration test image
  was updated.
- Fixed test-image-gce integration test
  python3-gcemetadata was renamed to python-gcemetadata
- Fixed integration test builds for TW
  Request dracut explicitly when needed
- Add support for filtering out files from the ESP image for GRUB
  Prior to this change, KIWI blindly synced the ESP directory into the
  embedded ESP image. Depending on the distribution and packages included
  for the created image, this can have undesirable side-effects.
  For image builds that need some more fine-grained control over the
  creation of the embedded ESP image (particularly for ISO images),
  this change introduces the ability to inject an exclusion list
  similar to what is used to filter out files for the root filesystem.
- Fix bundle extension for container types
  When building result files that use container types like oci or docker,
  kiwi creates them as archive tarballs with an extension prefix to
  indicate the special nature of the archive. However, the bundler
  code does not retain the prefix, which results in the wrong file
  extension for these archives.
  This change adds exceptions for these types and refactors the
  exception handling to unify it with the Vagrant image filename
  handling, which operates similarly.
- Update LOADER_TYPE setup for grub
  If the bootloader attribute: bls is set to true, make sure
  the LOADER_TYPE changes to grub2-bls.
- Fix Agama PXE build
  A bootloader setup is needed to create config.bootoptions
  Even though a ramdisk deployment does not require a bootloader
  setup we need it because part of the setup is the root device
  reference which is still needed to pivot root into the
  system
- Fix firmware setting for Agama PXE image
- Added obs BUILD_FLAVOR for agama
  Required for multibuild (multiple profiles) build
- Update Agama integration test
  Split the build into two profiles ISO and PXE to differentiate
  the build results into a small Agama for remote installations
  and a standard Agama for iso based installations
- Prevent loading unused data in oem deployment
  In case rd.kiwi.ramdisk is used as part of a remote deployment
  setup, it's not needed to load the system kernel and initrd
  because it's not used as kexec is not called with the system
  deployed into memory. For ramdisk deployments the system is
  booted using the currently active kernel and initrd and as
  such we can avoid loading an extra kernel and initrd for
  booting the system via kexec.
- Update Agama integration test
- Added &lt;oem-ramdisk-size&gt; element
  So far it was only possible to specify the size of the ramdisk
  via the kernel commandline option: ramdisk_size. In a remote
  deployment it was therefore required to carry this size as a
  mandatory information to the deployment server. With this commit
  we allow to specify the size for the ramdisk to be configured as
  part of the image configuration which makes this information
  also available inside of the initrd. If provided the ramdisk_size
  kernel commandline option still takes precedence over the
  &lt;oem-ramdisk-size&gt; setting to avoid any behavior change and to
  still allow dynamic overrides of the ramdisk size.
- reinstall bootstrap packs in image phase for apt
  Due to the special bootstrap process, the packages unpacked
  during bootstrap are not properly listed in the apt index.
  Therefore the bootstrap packages are added to the install
  phase which causes an install of this packages again to
  fix the apt index and provide a consistent system from
  an apt perspective.
- Fixed restore of keyfile after reencryption
  When kiwi runs the reencryption it also restores an eventual
  existing keyfile. However if the option rd.kiwi.oem.luks.reencrypt_randompass
  is specified no former keyfile should be restored. The purpose
  of reencrypt_randompass is to make sure only this in memory
  passphrase can access the luks pool such that tooling at boot
  time gets the opportunity to work with the luks pool for e.g.
  setting up a TPM key or set a passphrase only known to the user.
- Update dracut kiwi-lib module setup
  Make sure all tools used in code are requested for inclusion
- keep /usr/bin/sha256sum
  dropping md5sum was okay, but now we need
  the current tool to verify the checksum
- Restrict keyfile permissions
  For reencrypt in combination with rd.kiwi.oem.luks.reencrypt_randompass
  make sure that the temporary random pass keyfile has 0400 root
  owned access permissions set
- package: Add kiwi-image:oci Provides to -systemdeps-containers
  This allows the Open Build Service to correctly resolve dependencies
  when building OCI images.
- Better logging which kiwi file is read
  Improve the log message that tells about reading the
  kiwi config file to actually show the file path that
  is read in. This is especially an issue if more than
  one kiwi file is read in during the build process.
- also keep the ts binary, might be needed to provide timestamped logfiles
- Update documentation
  Add information about new apk (Alpine) support
- Add support for Alpine
  Add apk repository and package manager support and provide
  an integration test build for the Alpine distribution
- Fix F824 flake check for global assignments
- Use metalink repos for local test builds
- schema: Allow C as a valid locale
  It should be permitted to set the "C.UTF-8" locale for minimal images
  that are not preloaded with locales. The "C.UTF-8" locale has been
  supported in Linux distributions for many years.
- Support sourcetype setting on the commandline
  Allow to specifiy the sourcetype(metalink|baseurl|mirrorlist)
  also on the commandline via --set-repo/--add-repo options. So
  far this was only possible as part of the kiwi description file
- Fix gh-pages deployment
  poetry install was not called, thus sphinx was not present
- Drop use of travis-sphinx
  According to the documentation of peaceiris/actions-gh-pages
  the sphinx-build output can be directly consumed to publish
  to github pages
- Allow stderr data in CommandProcess
  Enhance poll_show_progress() method to allow polling on
  stderr data too. The new parameter with_stderr is used
  together with the dnf5 package manager. dnf5 has changed
  in a way that a lot of useful information during the
  install of packages is printed to stderr. From my perspective
  a clear regression to former behavior but we can fix this
  in kiwi to poll on both channels.
- Support arch attribute for &lt;users&gt; section
  Allow to setup users per arch. 
- Add Debian_12_update repo for testing with typer
- Fixed python3_sitelib for debbuild in OBS
- Fixed test-image-agama
  Service setup-systemd-proxy-env.path no longer exists
- Explicitly request shadow-utils
  Make sure shadow-utils gets installed for rawhide
  integration tests
- Drop test-image-suse-on-dnf test
  This was just a "can this work" test but has no real
  relevance for users since nobody would use dnf to build
  a suse image, there is also no help when it does not
  work. So let's drop this test build
- distutils sysconfig is deprecated
- Make integration tests to build outside of OBS
  Update and extend all integration tests such that they also
  build outside of the Open Build Service. Along with the changes
  on the descriptions a simple build-tests.sh script was added
  to drive the build process. The build is based on the kiwi
  boxbuild plugin in container mode to build the tests
  from a given build-tests directory. A new chapter to document
  how to Build the Build Tests is also provided and referenced
  on the github main page.
- Add rd.kiwi.oem.luks.reencrypt_randompass
  For OEM LUKS2 encrypted disk images in combination
  with rd.kiwi.oem.luks.reencrypt. Reset insecure built time
  passphrase with a random onetime passphrase
- Lookup CHRP loader instead of using a static name
</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="10.2.22" release="1.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-10.2.22-1.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-10.2.22-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="10.2.22" release="1.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-10.2.22-1.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-10.2.22-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="10.2.22" release="1.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-10.2.22-1.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-10.2.22-1.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="10.2.22" release="1.1" arch="src" src="src/python-kiwi-10.2.22-1.1.src.rpm">
          <filename>python-kiwi-10.2.22-1.1.src.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>356</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1750067606" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243123" id="1243123" title="VUL-0: ucode-intel: 20250512 release" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28956" id="CVE-2024-28956" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28956" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43420" id="CVE-2024-43420" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43420" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45332" id="CVE-2024-45332" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45332" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20012" id="CVE-2025-20012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20012" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20054" id="CVE-2025-20054" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20054" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20103" id="CVE-2025-20103" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20103" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20623" id="CVE-2025-20623" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20623" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24495" id="CVE-2025-24495" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24495" type="cve" />
    </references>
    <description>This update for ucode-intel fixes the following issues:

Intel CPU Microcode was updated to the 20250512 release (bsc#1243123)

  - Security updates for INTEL-SA-01153
    https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html)

    - CVE-2024-28956: Exposure of Sensitive Information in Shared
      Microarchitectural Structures during Transient Execution for some
      Intel Processors may allow an authenticated user to potentially
      enable information disclosure via local access.

  - Security updates for INTEL-SA-01244
    https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html)

    - CVE-2025-20103: Insufficient resource pool in the core management
      mechanism for some Intel Processors may allow an authenticated user
      to potentially enable denial of service via local access.
    - CVE-2025-20054: Uncaught exception in the core management
      mechanism for some Intel Processors may allow an authenticated user
      to potentially enable denial of service via local access.

  - Security updates for INTEL-SA-01247
    https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html)

     - CVE-2024-43420: Exposure of sensitive information caused by
       shared microarchitectural predictor state that influences transient
       execution for some Intel Atom processors may allow an authenticated
       user to potentially enable information disclosure via local access.
     - CVE-2025-20623: Exposure of sensitive information caused by
       shared microarchitectural predictor state that influences transient
       execution for some Intel Core processors (10th Generation) may allow
       an authenticated user to potentially enable information disclosure
       via local access.
   - CVE-2024-45332: Exposure of sensitive information caused by shared
     microarchitectural predictor state that influences transient execution
     in the indirect branch predictors for some Intel Processors may allow
     an authenticated user to potentially enable information disclosure
     via local access.
  - Security updates for INTEL-SA-01322
    https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html)

    - CVE-2025-24495:  Incorrect initialization of resource in the branch
      prediction unit for some Intel Core Ultra Processors may allow an
      authenticated user to potentially enable information disclosure via
      local access.
    - CVE-2025-20012: Incorrect behavior order for some Intel Core Ultra
      Processors may allow an unauthenticated user to potentially enable
      information disclosure via physical access.

  - Update for functional issues. Refer to Intel Core Ultra 200 V Series
    Processor (Series2) https://cdrdv2.intel.com/v1/dl/getContent/834774)
    for details.
  - Update for functional issues. Refer to Intel Core Ultra 200 V Series
    Processor https://cdrdv2.intel.com/v1/dl/getContent/827538) for details.
  - Update for functional issues. Refer to Intel Core Ultra Processor
    https://cdrdv2.intel.com/v1/dl/getContent/792254) for details.
  - Update for functional issues. Refer to 14th/13th
    Generation Intel Core Processor Specification Update
    https://cdrdv2.intel.com/v1/dl/getContent/740518) for details.
  - Update for functional issues. Refer to 12th Generation Intel Core
    Processor Family https://cdrdv2.intel.com/v1/dl/getContent/682436)
    for details.
  - Update for functional issues. Refer to 11th Gen Intel Core Processor
    Specification Update https://cdrdv2.intel.com/v1/dl/getContent/631123)
    for details.
  - Update for functional issues. Refer to 10th Gen
    Intel Core Processor Families Specification Update
    https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to 10th Gen
    Intel Core Processor Families Specification Update
    https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
  - Update for functional issues. Refer to 8th and 9th
    Generation Intel Core Processor Family Spec Update
    https://cdrdv2.intel.com/v1/dl/getContent/337346) for details.
  - Update for functional issues. Refer to 6th Gen
    Intel Xeon Scalable Processors Specification Update
    https://cdrdv2.intel.com/v1/dl/getContent/835486) for details.
  - Update for functional issues. Refer to 5th Gen Intel Xeon Processor
    Scalable Family https://cdrdv2.intel.com/v1/dl/getContent/793902)
    for details.
  - Update for functional issues. Refer to 4th Gen
    Intel Xeon Scalable Processors Specification Update
    https://cdrdv2.intel.com/v1/dl/getContent/772415) for details.
  - Update for functional issues. Refer to 3rd Generation
    Intel Xeon Scalable Processors Specification Update
    https://cdrdv2.intel.com/v1/dl/getContent/634897) for details.
  - Update for functional issues. Refer to 3rd Generation
    Intel Xeon Scalable Processors Specification Update
    https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to 2nd Generation
    Intel Xeon Processor Scalable Family Specification Update
    https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to Intel
    Xeon 6700-Series Processor Specification Update
    https://cdrdv2.intel.com/v1/dl/getContent/820922) for details.
  - Update for functional issues. Refer to Intel Xeon E-2300 Processor
    Specification Update https://cdrdv2.intel.com/v1/dl/getContent/709192)
    for details.
  - Update for functional issues. Refer to Intel Xeon D-2700 Processor
    Specification Update https://cdrdv2.intel.com/v1/dl/getContent/714071)
    for details.
  - Update for functional issues. Refer to Intel Processors and Intel
    Core i3 N-Series https://cdrdv2.intel.com/v1/dl/getContent/764616)
    for details.
  - Update for functional issues. Refer to Intel Pentium
    Silver and Intel Celeron Processor Specification Update
    https://cdrdv2.intel.com/v1/dl/getContent/336562) for details.

  ### New Platforms

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ARL-U          | A1       | 06-b5-00/80 |          | 0000000a | Core Ultra Processor (Series2)
  | ARL-S/HX (8P)  | B0       | 06-c6-02/82 |          | 00000118 | Core Ultra Processor (Series2)
  | ARL-H          | A1       | 06-c5-02/82 |          | 00000118 | Core Ultra Processor (Series2)
  | GNR-AP/SP      | B0       | 06-ad-01/95 |          | 010003a2 | Xeon Scalable Gen6
  | GNR-AP/SP      | H0       | 06-ad-01/20 |          | 0a0000d1 | Xeon Scalable Gen6
  | LNL            | B0       | 06-bd-01/80 |          | 0000011f | Core Ultra 200 V Series Processor

  ### Updated Platforms

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ADL            | C0       | 06-97-02/07 | 00000038 | 0000003a | Core Gen12
  | ADL            | H0       | 06-97-05/07 | 00000038 | 0000003a | Core Gen12
  | ADL            | L0       | 06-9a-03/80 | 00000436 | 00000437 | Core Gen12
  | ADL            | R0       | 06-9a-04/80 | 00000436 | 00000437 | Core Gen12
  | ADL-N          | N0       | 06-be-00/19 | 0000001c | 0000001d | Core i3-N305/N300,
                                                                    N50/N97/N100/N200,
                                                                    Atom x7211E/x7213E/x7425E
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen10 Mobile
  | AZB            | A0/R0    | 06-9a-04/40 | 00000009 | 0000000a | Intel(R) Atom(R) C1100
  | CFL-H          | R0       | 06-9e-0d/22 | 00000102 | 00000104 | Core Gen9 Mobile
  | CLX-SP         | B1       | 06-55-07/bf | 05003707 | 05003901 | Xeon Scalable Gen2
  | CML-H          | R1       | 06-a5-02/20 | 000000fc | 00000100 | Core Gen10 Mobile
  | CML-S102       | Q0       | 06-a5-05/22 | 000000fc | 00000100 | Core Gen10
  | CML-S62        | G1       | 06-a5-03/22 | 000000fc | 00000100 | Core Gen10
  | CML-U42        | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen10 Mobile
  | CML-U62 V1     | A0       | 06-a6-00/80 | 000000fe | 00000102 | Core Gen10 Mobile
  | CML-U62 V2     | K1       | 06-a6-01/80 | 000000fc | 00000100 | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen10 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf | 07002904 | 07002b01 | Xeon Scalable Gen3
  | EMR-SP         | A1       | 06-cf-02/87 | 21000291 | 210002a9 | Xeon Scalable Gen5
  | GLK-R          | R0       | 06-7a-08/01 | 00000024 | 00000026 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-D          | B0       | 06-6c-01/10 | 010002c0 | 010002d0 | Xeon D-17xx, D-27xx
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000c6 | 000000ca | Core Gen10 Mobile
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d0003f5 | 0d000404 | Xeon Scalable Gen3
  | MTL            | C0       | 06-aa-04/e6 | 00000020 | 00000024 | Core Ultra Processor
  | RKL-S          | B0       | 06-a7-01/02 | 00000063 | 00000064 | Core Gen11
  | RPL-E/HX/S     | B0       | 06-b7-01/32 | 0000012c | 0000012f | Core Gen13/Gen14
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004124 | 00004128 | Core Gen13
  | RPL-HX/S       | C0       | 06-bf-02/07 | 00000038 | 0000003a | Core Gen13/Gen14
  | RPL-S          | H0       | 06-bf-05/07 | 00000038 | 0000003a | Core Gen13/Gen14
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004124 | 00004128 | Core Gen13
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c0003e0 | 2c0003f7 | Xeon Max
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000620 | 2b000639 | Xeon Scalable Gen4
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000620 | 2b000639 | Xeon Scalable Gen4
  | SRF-SP         | C0       | 06-af-03/01 | 03000330 | 03000341 | Xeon 6700-Series Processors with E-Cores
  | TGL            | B0/B1    | 06-8c-01/80 | 000000b8 | 000000bc | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 | 00000052 | 00000056 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 | 00000038 | 0000003c | Core Gen11 Mobile
  | TWL            | N0       | 06-be-00/19 | 0000001c | 0000001d | Core i3-N305/N300, N50/N97/N100/N200,
                                                                    Atom x7211E/x7213E/x7425E
  | WHL-U          | V0       | 06-8e-0c/94 | 000000fc | 00000100 | Core Gen8 Mobile

</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20250512" release="1.1" arch="src" src="src/ucode-intel-20250512-1.1.src.rpm">
          <filename>ucode-intel-20250512-1.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-intel" epoch="0" version="20250512" release="1.1" arch="x86_64" src="x86_64/ucode-intel-20250512-1.1.x86_64.rpm">
          <filename>ucode-intel-20250512-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>353</id>
    <title>Security update for openssl-3</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1749814203" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236136" id="1236136" title="VUL-0: CVE-2024-13176: openssl: timing side-channel in the ECDSA signature computation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240366" id="1240366" title="VUL-0: CVE-2025-27587: openssl-3: Minerva side channel vulnerability in P-384" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176" id="CVE-2024-13176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27587" id="CVE-2025-27587" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27587" type="cve" />
    </references>
    <description>This update for openssl-3 fixes the following issues:

- CVE-2025-27587: Fixed Minerva side channel vulnerability in P-384 on PPC arch (bsc#1240366)
- CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-3-devel" epoch="0" version="3.1.4" release="8.1" arch="x86_64" src="x86_64/libopenssl-3-devel-3.1.4-8.1.x86_64.rpm">
          <filename>libopenssl-3-devel-3.1.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider" epoch="0" version="3.1.4" release="8.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-3.1.4-8.1.x86_64.rpm">
          <filename>libopenssl-3-fips-provider-3.1.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider-debuginfo" epoch="0" version="3.1.4" release="8.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-debuginfo-3.1.4-8.1.x86_64.rpm">
          <filename>libopenssl-3-fips-provider-debuginfo-3.1.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.1.4" release="8.1" arch="x86_64" src="x86_64/libopenssl3-3.1.4-8.1.x86_64.rpm">
          <filename>libopenssl3-3.1.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3-debuginfo" epoch="0" version="3.1.4" release="8.1" arch="x86_64" src="x86_64/libopenssl3-debuginfo-3.1.4-8.1.x86_64.rpm">
          <filename>libopenssl3-debuginfo-3.1.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="8.1" arch="src" src="src/openssl-3-3.1.4-8.1.src.rpm">
          <filename>openssl-3-3.1.4-8.1.src.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="8.1" arch="x86_64" src="x86_64/openssl-3-3.1.4-8.1.x86_64.rpm">
          <filename>openssl-3-3.1.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debuginfo" epoch="0" version="3.1.4" release="8.1" arch="x86_64" src="x86_64/openssl-3-debuginfo-3.1.4-8.1.x86_64.rpm">
          <filename>openssl-3-debuginfo-3.1.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debugsource" epoch="0" version="3.1.4" release="8.1" arch="x86_64" src="x86_64/openssl-3-debugsource-3.1.4-8.1.x86_64.rpm">
          <filename>openssl-3-debugsource-3.1.4-8.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>354</id>
    <title>Security update for python-cryptography</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1749814593" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242631" id="1242631" title="VUL-0: CVE-2025-3416: python-cryptography,python-maturin: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3416" id="CVE-2025-3416" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3416" type="cve" />
    </references>
    <description>This update for python-cryptography fixes the following issues:

- CVE-2025-3416: Fixed  Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242631)

</description>
    <pkglist>
      <collection>
        <package name="python-cryptography" epoch="0" version="42.0.4" release="2.1" arch="src" src="src/python-cryptography-42.0.4-2.1.src.rpm">
          <filename>python-cryptography-42.0.4-2.1.src.rpm</filename>
        </package>
        <package name="python311-cryptography" epoch="0" version="42.0.4" release="2.1" arch="x86_64" src="x86_64/python311-cryptography-42.0.4-2.1.x86_64.rpm">
          <filename>python311-cryptography-42.0.4-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>328</id>
    <title>Security update for glibc</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1747825562" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234128" id="1234128" title="SLES 15 SP4: potential libpthread bug" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239883" id="1239883" title="[SLFO] elfutils testsuite fails after upgrading to glibc 2.40" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243317" id="1243317" title="VUL-0: CVE-2025-4802: glibc: The GNU C Library security advisories update for 2025-05-16" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4802" id="CVE-2025-4802" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4802" type="cve" />
    </references>
    <description>This update for glibc fixes the following issues:

- CVE-2025-4802: Fixed local root exploits when using static built setuid root applications. (elf: Ignore LD_LIBRARY_PATH and debug env var for setuid for static) (bsc#1243317)
- pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ #25847)
- Mark functions in libc_nonshared.a as hidden (bsc#1239883)

</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.38" release="9.1" arch="src" src="src/glibc-2.38-9.1.src.rpm">
          <filename>glibc-2.38-9.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.38" release="9.1" arch="x86_64" src="x86_64/glibc-2.38-9.1.x86_64.rpm">
          <filename>glibc-2.38-9.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-debuginfo" epoch="0" version="2.38" release="9.1" arch="x86_64" src="x86_64/glibc-debuginfo-2.38-9.1.x86_64.rpm">
          <filename>glibc-debuginfo-2.38-9.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-debugsource" epoch="0" version="2.38" release="9.1" arch="x86_64" src="x86_64/glibc-debugsource-2.38-9.1.x86_64.rpm">
          <filename>glibc-debugsource-2.38-9.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.38" release="9.1" arch="x86_64" src="x86_64/glibc-devel-2.38-9.1.x86_64.rpm">
          <filename>glibc-devel-2.38-9.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel-debuginfo" epoch="0" version="2.38" release="9.1" arch="x86_64" src="x86_64/glibc-devel-debuginfo-2.38-9.1.x86_64.rpm">
          <filename>glibc-devel-debuginfo-2.38-9.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.38" release="9.1" arch="x86_64" src="x86_64/glibc-locale-2.38-9.1.x86_64.rpm">
          <filename>glibc-locale-2.38-9.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.38" release="9.1" arch="x86_64" src="x86_64/glibc-locale-base-2.38-9.1.x86_64.rpm">
          <filename>glibc-locale-base-2.38-9.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base-debuginfo" epoch="0" version="2.38" release="9.1" arch="x86_64" src="x86_64/glibc-locale-base-debuginfo-2.38-9.1.x86_64.rpm">
          <filename>glibc-locale-base-debuginfo-2.38-9.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>358</id>
    <title>Security update for python-setuptools</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1750073276" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243313" id="1243313" title="VUL-0: CVE-2025-47273: python-setuptools: A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47273" id="CVE-2025-47273" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47273" type="cve" />
    </references>
    <description>This update for python-setuptools fixes the following issues:

- CVE-2025-47273: Fixed a path traversal vulnerability.  (bsc#1243313, gh#pypa/setuptools@250a6d17978f)
</description>
    <pkglist>
      <collection>
        <package name="python-setuptools" epoch="0" version="69.0.2" release="3.1" arch="src" src="src/python-setuptools-69.0.2-3.1.src.rpm">
          <filename>python-setuptools-69.0.2-3.1.src.rpm</filename>
        </package>
        <package name="python311-setuptools" epoch="0" version="69.0.2" release="3.1" arch="noarch" src="noarch/python311-setuptools-69.0.2-3.1.noarch.rpm">
          <filename>python311-setuptools-69.0.2-3.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>365</id>
    <title>Security update for python-tornado6</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1750686841" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243268" id="1243268" title="VUL-0: CVE-2025-47287: python-tornado,python-tornado6: denial-of-service via generation of an extremely high volume of logs due to multipart/form-data parser" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47287" id="CVE-2025-47287" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47287" type="cve" />
      <reference href="https://github.com/tornadoweb/tornado#3497" id="tornadoweb/tornado#3497" title="https://github.com/tornadoweb/tornado#3497" type="github" />
    </references>
    <description>This update for python-tornado6 fixes the following issues:

- CVE-2025-47287: Fixed denial of service via generation of 
  an extremely high volume of logs due to multipart/form-data
  parser (bsc#1243268).
</description>
    <pkglist>
      <collection>
        <package name="python-tornado6" epoch="0" version="6.4" release="3.1" arch="src" src="src/python-tornado6-6.4-3.1.src.rpm">
          <filename>python-tornado6-6.4-3.1.src.rpm</filename>
        </package>
        <package name="python-tornado6-debugsource" epoch="0" version="6.4" release="3.1" arch="x86_64" src="x86_64/python-tornado6-debugsource-6.4-3.1.x86_64.rpm">
          <filename>python-tornado6-debugsource-6.4-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-tornado6" epoch="0" version="6.4" release="3.1" arch="x86_64" src="x86_64/python311-tornado6-6.4-3.1.x86_64.rpm">
          <filename>python311-tornado6-6.4-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-tornado6-debuginfo" epoch="0" version="6.4" release="3.1" arch="x86_64" src="x86_64/python311-tornado6-debuginfo-6.4-3.1.x86_64.rpm">
          <filename>python311-tornado6-debuginfo-6.4-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>367</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1750754313" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243389" id="1243389" title="[SELinux] selinux policy prevents qemu-guest-agent from querying root filesystem info" type="bugzilla" />
    </references>
    <description>This update for selinux-policy fixes the following issues:

Update to version 20230523+git27.6fee49569:

* qemu-guest-agent: fix denial for guest-get-fsinfo (bsc#1243389)

</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230523+git27.6fee49569" release="1.1" arch="noarch" src="noarch/selinux-policy-20230523+git27.6fee49569-1.1.noarch.rpm">
          <filename>selinux-policy-20230523+git27.6fee49569-1.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230523+git27.6fee49569" release="1.1" arch="src" src="src/selinux-policy-20230523+git27.6fee49569-1.1.src.rpm">
          <filename>selinux-policy-20230523+git27.6fee49569-1.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230523+git27.6fee49569" release="1.1" arch="noarch" src="noarch/selinux-policy-devel-20230523+git27.6fee49569-1.1.noarch.rpm">
          <filename>selinux-policy-devel-20230523+git27.6fee49569-1.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230523+git27.6fee49569" release="1.1" arch="noarch" src="noarch/selinux-policy-targeted-20230523+git27.6fee49569-1.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230523+git27.6fee49569-1.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>341</id>
    <title>Recommended update for pcr-oracle</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1748616920" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241957" id="1241957" title="SL Micro 6.0 Staging P fails after installing grub2 update (TPM based unlocking fails)" type="bugzilla" />
    </references>
    <description>This update for pcr-oracle fixes the following issues:

- Fix the strcmp statement for the alternative event (bsc#1241957)
</description>
    <pkglist>
      <collection>
        <package name="pcr-oracle" epoch="0" version="0.4.6" release="5.1" arch="src" src="src/pcr-oracle-0.4.6-5.1.src.rpm">
          <filename>pcr-oracle-0.4.6-5.1.src.rpm</filename>
        </package>
        <package name="pcr-oracle" epoch="0" version="0.4.6" release="5.1" arch="x86_64" src="x86_64/pcr-oracle-0.4.6-5.1.x86_64.rpm">
          <filename>pcr-oracle-0.4.6-5.1.x86_64.rpm</filename>
        </package>
        <package name="pcr-oracle-debuginfo" epoch="0" version="0.4.6" release="5.1" arch="x86_64" src="x86_64/pcr-oracle-debuginfo-0.4.6-5.1.x86_64.rpm">
          <filename>pcr-oracle-debuginfo-0.4.6-5.1.x86_64.rpm</filename>
        </package>
        <package name="pcr-oracle-debugsource" epoch="0" version="0.4.6" release="5.1" arch="x86_64" src="x86_64/pcr-oracle-debugsource-0.4.6-5.1.x86_64.rpm">
          <filename>pcr-oracle-debugsource-0.4.6-5.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>352</id>
    <title>Security update for systemd</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1749712582" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236177" id="1236177" title="Server not rebooting/shutting down after upgrade to SP6" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237496" id="1237496" title="SLES15 SP7 PublicBeta - systemd-coredump does not provide /etc/systemd/coredump.conf" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241190" id="1241190" title="unable to change network device name through udev" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242938" id="1242938" title="journalctl not working for users in Container UID range" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4598" id="CVE-2025-4598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4598" type="cve" />
    </references>
    <description>This update for systemd fixes the following issues:

- coredump: use %d in kernel core pattern (CVE-2025-4598)
- Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)
- umount: do not move busy network mounts (bsc#1236177)
- man/pstore.conf: pstore.conf template is not always installed in /etc
- man: coredump.conf template is not always installed in /etc (bsc#1237496)
- Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids. (bsc#1242938)
- This re-adds back the support for the persistent net name rules as well as
  their generator since predictable naming scheme is still disabled by default
  on Micro (via the `net.ifnames=0` boot option). (bsc#1241190)
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/libsystemd0-254.25-1.1.x86_64.rpm">
          <filename>libsystemd0-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0-debuginfo" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/libsystemd0-debuginfo-254.25-1.1.x86_64.rpm">
          <filename>libsystemd0-debuginfo-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/libudev1-254.25-1.1.x86_64.rpm">
          <filename>libudev1-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1-debuginfo" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/libudev1-debuginfo-254.25-1.1.x86_64.rpm">
          <filename>libudev1-debuginfo-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="254.25" release="1.1" arch="src" src="src/systemd-254.25-1.1.src.rpm">
          <filename>systemd-254.25-1.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/systemd-254.25-1.1.x86_64.rpm">
          <filename>systemd-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/systemd-container-254.25-1.1.x86_64.rpm">
          <filename>systemd-container-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container-debuginfo" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/systemd-container-debuginfo-254.25-1.1.x86_64.rpm">
          <filename>systemd-container-debuginfo-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-coredump" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/systemd-coredump-254.25-1.1.x86_64.rpm">
          <filename>systemd-coredump-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-coredump-debuginfo" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/systemd-coredump-debuginfo-254.25-1.1.x86_64.rpm">
          <filename>systemd-coredump-debuginfo-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-debuginfo" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/systemd-debuginfo-254.25-1.1.x86_64.rpm">
          <filename>systemd-debuginfo-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-debugsource" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/systemd-debugsource-254.25-1.1.x86_64.rpm">
          <filename>systemd-debugsource-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-experimental" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/systemd-experimental-254.25-1.1.x86_64.rpm">
          <filename>systemd-experimental-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-experimental-debuginfo" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/systemd-experimental-debuginfo-254.25-1.1.x86_64.rpm">
          <filename>systemd-experimental-debuginfo-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/systemd-journal-remote-254.25-1.1.x86_64.rpm">
          <filename>systemd-journal-remote-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote-debuginfo" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/systemd-journal-remote-debuginfo-254.25-1.1.x86_64.rpm">
          <filename>systemd-journal-remote-debuginfo-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-portable" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/systemd-portable-254.25-1.1.x86_64.rpm">
          <filename>systemd-portable-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-portable-debuginfo" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/systemd-portable-debuginfo-254.25-1.1.x86_64.rpm">
          <filename>systemd-portable-debuginfo-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/udev-254.25-1.1.x86_64.rpm">
          <filename>udev-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev-debuginfo" epoch="0" version="254.25" release="1.1" arch="x86_64" src="x86_64/udev-debuginfo-254.25-1.1.x86_64.rpm">
          <filename>udev-debuginfo-254.25-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>342</id>
    <title>Security update for docker</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1749111897" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244035" id="1244035" title="docker 27.5.1_ce-slfo.1.1_1.1 -&gt; 27.5.1_ce-slfo.1.1_2.1 fails to start existing containers" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22868" id="CVE-2025-22868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22868" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22869" id="CVE-2025-22869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22869" type="cve" />
    </references>
    <description>This update for docker fixes the following issues:

Always clear SUSEConnect suse_* secrets when starting containers regardless
of whether the daemon was built with SUSEConnect support. Not doing this
causes containers from SUSEConnect-enabled daemons to fail to start when
running with SUSEConnect-disabled (i.e. upstream) daemons. (bsc#1244035)
</description>
    <message>"Updating docker will restart the docker service, which may stop your docker containers. Do you want to proceed with the update?"</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="27.5.1_ce" release="3.1" arch="src" src="src/docker-27.5.1_ce-3.1.src.rpm">
          <filename>docker-27.5.1_ce-3.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="27.5.1_ce" release="3.1" arch="x86_64" src="x86_64/docker-27.5.1_ce-3.1.x86_64.rpm">
          <filename>docker-27.5.1_ce-3.1.x86_64.rpm</filename>
        </package>
        <package name="docker-debuginfo" epoch="0" version="27.5.1_ce" release="3.1" arch="x86_64" src="x86_64/docker-debuginfo-27.5.1_ce-3.1.x86_64.rpm">
          <filename>docker-debuginfo-27.5.1_ce-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>371</id>
    <title>Security update for python-requests</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1751286158" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244039" id="1244039" title="VUL-0: CVE-2024-47081: python-requests: incorrect URL processing  under specific conditions can lead to .netrc credential leak" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47081" id="CVE-2024-47081" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47081" type="cve" />
      <reference href="https://github.com/psf/requests#6965" id="psf/requests#6965" title="https://github.com/psf/requests#6965" type="github" />
    </references>
    <description>This update for python-requests fixes the following issues:

- CVE-2024-47081: Fixed incorrect URL processing leading to .netrc credential leak (bsc#1244039)
</description>
    <pkglist>
      <collection>
        <package name="python-requests" epoch="0" version="2.32.3" release="2.1" arch="src" src="src/python-requests-2.32.3-2.1.src.rpm">
          <filename>python-requests-2.32.3-2.1.src.rpm</filename>
        </package>
        <package name="python311-requests" epoch="0" version="2.32.3" release="2.1" arch="noarch" src="noarch/python311-requests-2.32.3-2.1.noarch.rpm">
          <filename>python311-requests-2.32.3-2.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>372</id>
    <title>Security update for perl</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1751370133" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244079" id="1244079" title="VUL-0: CVE-2025-40909: perl: a working directory race condition may cause file operations to target unintended paths" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40909" id="CVE-2025-40909" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40909" type="cve" />
    </references>
    <description>This update for perl fixes the following issues:

- CVE-2025-40909: Fixed a working directory race condition causing 
  file operations to target unintended paths (bsc#1244079)
</description>
    <pkglist>
      <collection>
        <package name="perl" epoch="0" version="5.38.2" release="4.1" arch="src" src="src/perl-5.38.2-4.1.src.rpm">
          <filename>perl-5.38.2-4.1.src.rpm</filename>
        </package>
        <package name="perl" epoch="0" version="5.38.2" release="4.1" arch="x86_64" src="x86_64/perl-5.38.2-4.1.x86_64.rpm">
          <filename>perl-5.38.2-4.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base" epoch="0" version="5.38.2" release="4.1" arch="x86_64" src="x86_64/perl-base-5.38.2-4.1.x86_64.rpm">
          <filename>perl-base-5.38.2-4.1.x86_64.rpm</filename>
        </package>
        <package name="perl-base-debuginfo" epoch="0" version="5.38.2" release="4.1" arch="x86_64" src="x86_64/perl-base-debuginfo-5.38.2-4.1.x86_64.rpm">
          <filename>perl-base-debuginfo-5.38.2-4.1.x86_64.rpm</filename>
        </package>
        <package name="perl-debuginfo" epoch="0" version="5.38.2" release="4.1" arch="x86_64" src="x86_64/perl-debuginfo-5.38.2-4.1.x86_64.rpm">
          <filename>perl-debuginfo-5.38.2-4.1.x86_64.rpm</filename>
        </package>
        <package name="perl-debugsource" epoch="0" version="5.38.2" release="4.1" arch="x86_64" src="x86_64/perl-debugsource-5.38.2-4.1.x86_64.rpm">
          <filename>perl-debugsource-5.38.2-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>373</id>
    <title>Security update for openssl-3</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1751539529" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236136" id="1236136" title="VUL-0: CVE-2024-13176: openssl: timing side-channel in the ECDSA signature computation" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176" id="CVE-2024-13176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176" type="cve" />
    </references>
    <description>This update for openssl-3 fixes the following issues:

- CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136)
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-3-devel" epoch="0" version="3.1.4" release="9.1" arch="x86_64" src="x86_64/libopenssl-3-devel-3.1.4-9.1.x86_64.rpm">
          <filename>libopenssl-3-devel-3.1.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider" epoch="0" version="3.1.4" release="9.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-3.1.4-9.1.x86_64.rpm">
          <filename>libopenssl-3-fips-provider-3.1.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider-debuginfo" epoch="0" version="3.1.4" release="9.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-debuginfo-3.1.4-9.1.x86_64.rpm">
          <filename>libopenssl-3-fips-provider-debuginfo-3.1.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.1.4" release="9.1" arch="x86_64" src="x86_64/libopenssl3-3.1.4-9.1.x86_64.rpm">
          <filename>libopenssl3-3.1.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3-debuginfo" epoch="0" version="3.1.4" release="9.1" arch="x86_64" src="x86_64/libopenssl3-debuginfo-3.1.4-9.1.x86_64.rpm">
          <filename>libopenssl3-debuginfo-3.1.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="9.1" arch="src" src="src/openssl-3-3.1.4-9.1.src.rpm">
          <filename>openssl-3-3.1.4-9.1.src.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="9.1" arch="x86_64" src="x86_64/openssl-3-3.1.4-9.1.x86_64.rpm">
          <filename>openssl-3-3.1.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debuginfo" epoch="0" version="3.1.4" release="9.1" arch="x86_64" src="x86_64/openssl-3-debuginfo-3.1.4-9.1.x86_64.rpm">
          <filename>openssl-3-debuginfo-3.1.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debugsource" epoch="0" version="3.1.4" release="9.1" arch="x86_64" src="x86_64/openssl-3-debugsource-3.1.4-9.1.x86_64.rpm">
          <filename>openssl-3-debugsource-3.1.4-9.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>380</id>
    <title>Security update for rust-keylime</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1752227371" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243861" id="1243861" title="VUL-0: CVE-2024-12224: rust-keylime: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12224" id="CVE-2024-12224" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12224" type="cve" />
    </references>
    <description>This update for rust-keylime fixes the following issues:

- CVE-2024-12224: idna: Fixed improper validation in punycode (bsc#1243861)

- Update to version 0.2.7+70: 
  * build(deps): bump wiremock from 0.6.2 to 0.6.3
  * build(deps): bump uuid from 1.16.0 to 1.17.0
  * lib: Introduce AgentIdentity structure
  * gitignore: Add *.swp and *.orig to be ignored
  * build(deps): bump clap from 4.5.38 to 4.5.39
  * build(deps): bump tokio from 1.45.0 to 1.45.1
  * Unify Push Model structures time formats to UTC (#1016)
  * Add Quote related structures to Keylime library
  * Remove configuration file trailing whitespaces (#1012)
  * keylime-agent.conf: add all accepted TPM encryption algs
  * tpm: add policy auth for EK to activate crendential
  * Enable non standard key sizes and curves for EK and AK
  * config: Use next_back() instead of last() for iterators
  * Update to tss-esapi v7.6.0
  * Avoid duplicated call to ctx.create_ek
  * build(deps): bump clap from 4.5.23 to 4.5.38
  * Add registration for Push Model client
  * build(deps): bump tokio from 1.44.2 to 1.45.0
  * build(deps): bump chrono from 0.4.40 to 0.4.41
  * build(deps): bump tempfile from 3.17.1 to 3.20.0
  * Refactor code: move error, registration to lib
  * Move structure filling and URL selection code (#999)
  * build(deps): bump pest_derive from 2.7.15 to 2.8.0
  * build(deps): bump pest from 2.7.15 to 2.8.0
  * build(deps): bump libc from 0.2.169 to 0.2.172
  * Add Evidence/Authentication messages to prototype
  * build(deps): bump uuid from 1.15.1 to 1.16.0
  * build(deps): bump thiserror from 2.0.11 to 2.0.12
  * build(deps): bump signal-hook from 0.3.17 to 0.3.18
  * build(deps): bump log from 0.4.25 to 0.4.27
  * build(deps): bump assert_cmd from 2.0.16 to 2.0.17
  * build(deps): bump actix-web from 4.9.0 to 4.10.2
  * build(deps): bump reqwest from 0.12.12 to 0.12.15
  * build(deps): bump serde from 1.0.217 to 1.0.219
  * Add unit tests for sessions.rs structures
  * Add auth(sessions) structures
  * Fix minor README.md issue (#988)
  * Define EvidenceHandling structures (#971)
  * Add mockoon test scenario
  * Add client certificates to push-attestation prototype
  * Cargo: bump url crate to version 2.5.4
  * Add logging to the push attestation prototype
  * Do not use certificate on insecure mode
  * common: Move the EncryptedData structure from common to the library
  * common: Move AuthTag from common to the library
  * build(deps): bump openssl from 0.10.71 to 0.10.72
  * common: Move Symmkey to library as crypto::symmkey
  * common: Remove unused constants and static values
  * build(deps): bump tokio from 1.43.0 to 1.44.2
  * Refactor code: Include AgentIdentity structure
  * Push model prototype
  * Add support for ek certificate chain, stored in TPM NVRAM.
  * Recover key_class field and set it as "asymmetric"
  * Update push model structures to latest values
  * build(deps): bump serde_json from 1.0.138 to 1.0.140
  * packit: Add identifier for each copr_build job
  * keylime-agent.conf: only mention ecdsa and rsassa for signing
  * build(deps): bump openssl from 0.10.70 to 0.10.71
  * build(deps): bump uuid from 1.13.2 to 1.15.1
  * Add capabilities_negotiation structures
  * packit: Add compatibility/api_version_compatibility test
  * build(deps): bump uuid from 1.11.0 to 1.13.2
  * build(deps): bump serde_json from 1.0.135 to 1.0.138
  * build(deps): bump thiserror from 2.0.9 to 2.0.11
  * build(deps): bump tempfile from 3.14.0 to 3.17.1
  * Allow agent to start as non-root
  * scripts: Fix coverage information downloading script
  * build(deps): bump openssl from 0.10.68 to 0.10.70
  * build(deps): bump tokio from 1.42.0 to 1.43.0

- Update to version 0.2.7+1:
  * dist: Enable logging for keylime library in the service
  * Bump version to 0.2.7
  * scripts: Download coverage data from Testing Farm directly
  * main: Remove unnecessary lifetime
  * cargo: Bump pretty_env_logger to version 0.5.0
  * scripts: Fix regex in download_packit_coverage.sh
  * cargo: Bump clap crate to version 4.5.23
  * cargo: Bump base64 crate to version 0.22.1
  * build(deps): bump log from 0.4.22 to 0.4.25
  * build(deps): bump serde_json from 1.0.133 to 1.0.135
  * cargo: Bump tokio crate to version 1.42.0
  * packit: Fix RPM builds on copr
  * cargo: Bump thiserror crate to version 0.2.9
  * cargo: Update reqwest to version 0.12.12
  * build(deps): bump libc from 0.2.168 to 0.2.169
  * build(deps): bump glob from 0.3.1 to 0.3.2
  * version: Implement API version validation and ordering
  * main: Support using multiple API versions for registration
  * keylime: Introduce the registrar_client module
  * Provide endpoints under multiple API versions
  * Move 'serialization' module to the keylime library
  * Drop unnecessary dependency on common::API_VERSION
  * keylime-agent.conf: Bump version to 2.3
  * build(deps): bump serde from 1.0.210 to 1.0.217
  * build(deps): bump pest_derive from 2.7.14 to 2.7.15
  * build(deps): bump pest from 2.7.14 to 2.7.15
  * build(deps): bump libc from 0.2.167 to 0.2.168
  * config: Make IAK and IDevID certificates optional
  * Fix warnings reported by clippy
  * workflows: Run job in the CI container directly
  * tests: Add unit test for device ID builder
  * main: Move IAK/IDevID related code to dedicated module
  * tests: Add script to generate IAK and IDevID certificates
  * build(deps): bump openssl from 0.10.66 to 0.10.68
  * build(deps): bump uuid from 1.10.0 to 1.11.0
  * build(deps): bump serde_json from 1.0.128 to 1.0.133
  * build(deps): bump actix-web from 4.5.1 to 4.9.0
  * build(deps): bump reqwest from 0.12.7 to 0.12.9
  * tests/setup_swtpm.sh: Add script to setup temporary TPM
  * Use a single TPM context and avoid race conditions during tests
  * config: Enable passing a hostname instead of IP
  * build(deps): bump clap from 4.3.11 to 4.5.21
  * build(deps): bump tempfile from 3.10.1 to 3.14.0
  * build(deps): bump pest_derive from 2.7.6 to 2.7.14
  * build(deps): bump pest from 2.7.6 to 2.7.14
  * build(deps): bump codecov/codecov-action from 4 to 5
  * workflows: Submit the coverage for merged PR from Fedora 41
  * tests: Use Fedora 41 to generate code coverage
  * api: Make API configuration modular
  * agent_handler: Move the /agent scope configuration
  * notifications_handler: Move the /notifications scope configuration
  * quotes_handler: Move the /quotes scope configuration to quotes_handler
  * keys_handler: Move /keys scope configuration to keys_handler
  * Use ${DESTDIR} for config
  * Fix showing wrong UUID
  * build(deps): bump actix-rt from 2.9.0 to 2.10.0
  * config: Refactor AgentConfig Source trait implementation
  * build(deps): bump log from 0.4.21 to 0.4.22
  * build(deps): bump serde_json from 1.0.120 to 1.0.128
  * tpm: check if EK certificate has valid ASN.1 DER encoding
  * build(deps): bump futures from 0.3.27 to 0.3.31
  * cargo: Bump reqwest to version 0.12.7
  * build(deps): bump serde from 1.0.203 to 1.0.210
  * tests: Add more tests to Packit CI
  * build(deps): bump docker/build-push-action from 5 to 6
  * tests: apply workarounds to known bugs
</description>
    <pkglist>
      <collection>
        <package name="rust-keylime" epoch="0" version="0.2.7+70" release="1.1" arch="src" src="src/rust-keylime-0.2.7+70-1.1.src.rpm">
          <filename>rust-keylime-0.2.7+70-1.1.src.rpm</filename>
        </package>
        <package name="rust-keylime" epoch="0" version="0.2.7+70" release="1.1" arch="x86_64" src="x86_64/rust-keylime-0.2.7+70-1.1.x86_64.rpm">
          <filename>rust-keylime-0.2.7+70-1.1.x86_64.rpm</filename>
        </package>
        <package name="rust-keylime-debuginfo" epoch="0" version="0.2.7+70" release="1.1" arch="x86_64" src="x86_64/rust-keylime-debuginfo-0.2.7+70-1.1.x86_64.rpm">
          <filename>rust-keylime-debuginfo-0.2.7+70-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>381</id>
    <title>Security update for libgcrypt</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1752225694" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221107" id="1221107" title="VUL-0: CVE-2024-2236: libgcrypt: timing based side-channel in RSA implementation" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2236" id="CVE-2024-2236" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2236" type="cve" />
    </references>
    <description>This update for libgcrypt fixes the following issues:

- CVE-2024-2236: Fixed timing based side-channel in RSA implementation (bsc#1221107)
</description>
    <pkglist>
      <collection>
        <package name="libgcrypt" epoch="0" version="1.10.3" release="2.1" arch="src" src="src/libgcrypt-1.10.3-2.1.src.rpm">
          <filename>libgcrypt-1.10.3-2.1.src.rpm</filename>
        </package>
        <package name="libgcrypt-debugsource" epoch="0" version="1.10.3" release="2.1" arch="x86_64" src="x86_64/libgcrypt-debugsource-1.10.3-2.1.x86_64.rpm">
          <filename>libgcrypt-debugsource-1.10.3-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgcrypt20" epoch="0" version="1.10.3" release="2.1" arch="x86_64" src="x86_64/libgcrypt20-1.10.3-2.1.x86_64.rpm">
          <filename>libgcrypt20-1.10.3-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgcrypt20-debuginfo" epoch="0" version="1.10.3" release="2.1" arch="x86_64" src="x86_64/libgcrypt20-debuginfo-1.10.3-2.1.x86_64.rpm">
          <filename>libgcrypt20-debuginfo-1.10.3-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>399</id>
    <title>Security update for grub2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1753777333" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229163" id="1229163" title="AUDIT-0: grub2: review grub2 patches for TPM-bound disk encryption on SL(E)M encrypted Images" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229164" id="1229164" title="VUL-0: CVE-2024-49504: grub2: Bypassing TPM-bound disk encryption on SL(E)M encrypted Images" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233606" id="1233606" title="VUL-0: CVE-2024-45778: grub2: bfs filesystem not fuzzing stable" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233608" id="1233608" title="VUL-0: CVE-2024-45779: grub2: bfs: heap overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233609" id="1233609" title="VUL-0: CVE-2024-45774: grub2: heap overflows in JPEG parser" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233610" id="1233610" title="VUL-0: CVE-2024-45775: grub2: missing NULL check in extcmd parser" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233612" id="1233612" title="VUL-0: CVE-2024-45776: grub2: overflow in .MO file (gettext) handling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233613" id="1233613" title="VUL-0: CVE-2024-45777: grub2: integer overflow in gettext" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233614" id="1233614" title="VUL-0: CVE-2024-45780: grub2: overflow in tar/cpio" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233615" id="1233615" title="VUL-0: CVE-2024-45782: grub2: hfs: strcpy overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233616" id="1233616" title="VUL-0: CVE-2024-45783: grub2: hfsplus: refcount overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233617" id="1233617" title="VUL-0: CVE-2024-45781: grub2: ufs: strcpy overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234958" id="1234958" title="VUL-0: CVE-2024-56737: grub2: heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236316" id="1236316" title="VUL-0: CVE-2025-0624: grub2: net: Out-of-bounds write in grub_net_search_config_file()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236317" id="1236317" title="VUL-0: CVE-2025-0622: grub2: command/gpg: Use-after-free due to hooks not being removed on module unload" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237002" id="1237002" title="VUL-0: CVE-2025-0677: grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237006" id="1237006" title="VUL-0: CVE-2025-0678: grub2: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237008" id="1237008" title="VUL-0: CVE-2025-0684: grub2: reiserfs: Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237009" id="1237009" title="VUL-0: CVE-2025-0685: grub2: jfs: Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237010" id="1237010" title="VUL-0: CVE-2025-0686: grub2: romfs: Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237011" id="1237011" title="VUL-0: CVE-2025-0689: grub2: udf: Heap based buffer overflow  in grub_udf_read_block() may lead to arbitrary code execution" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237012" id="1237012" title="VUL-0: CVE-2025-0690: grub2: read: Integer overflow may lead to out-of-bounds write" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237013" id="1237013" title="VUL-0: CVE-2025-1118: grub2: commands/dump: The dump command is not in lockdown when secure boot is enabled" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237014" id="1237014" title="VUL-0: CVE-2025-1125: grub2: fs/hfs: Interger overflow may lead to heap based out-of-bounds write" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239674" id="1239674" title="'grub2-mkrelpath' produces wrong output right after firstboot" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242971" id="1242971" title="VUL-0: CVE-2025-4382: grub2: GRUB TPM Auto- decryption Data Exposure" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45774" id="CVE-2024-45774" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45774" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45775" id="CVE-2024-45775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45775" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45776" id="CVE-2024-45776" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45776" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45777" id="CVE-2024-45777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45777" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45778" id="CVE-2024-45778" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45778" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45779" id="CVE-2024-45779" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45779" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45780" id="CVE-2024-45780" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45780" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45781" id="CVE-2024-45781" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45781" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45782" id="CVE-2024-45782" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45782" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45783" id="CVE-2024-45783" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45783" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49504" id="CVE-2024-49504" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49504" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56737" id="CVE-2024-56737" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56737" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0622" id="CVE-2025-0622" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0622" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0624" id="CVE-2025-0624" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0624" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0677" id="CVE-2025-0677" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0677" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0678" id="CVE-2025-0678" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0678" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0684" id="CVE-2025-0684" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0684" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0685" id="CVE-2025-0685" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0685" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0686" id="CVE-2025-0686" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0686" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0689" id="CVE-2025-0689" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0689" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0690" id="CVE-2025-0690" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0690" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1118" id="CVE-2025-1118" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1118" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1125" id="CVE-2025-1125" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1125" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4382" id="CVE-2025-4382" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4382" type="cve" />
    </references>
    <description>This update for grub2 fixes the following issues:

- CVE-2025-4382: Fixed TPM auto-decryption data exposure (bsc#1242971)

- Filter out the non-subvolume btrfs mount points when creating the
  relative path (bsc#1239674)

- CVE-2024-45781: Fixed ufs strcpy overflow (bsc#1233617)
- CVE-2024-56737: Fixed heap-based buffer overflow in fs/hfs.c via
  crafted sblock data in an HFS filesystem (bsc#1234958)
- CVE-2024-45782: Fixed hfs strcpy overflow (bsc#1233615)
- CVE-2024-45780: Fixed overflow in tar/cpio(bsc#1233614)
- CVE-2024-45783: Fixed hfsplus refcount overflow (bsc#1233616)
- CVE-2025-0624: Fixed out-of-bounds write in grub_net_search_config_file() (bsc#1236316)
- CVE-2024-45774: Fixed heap overflows in JPEG parser (bsc#1233609)
- CVE-2024-45775: Fixed missing NULL check in extcmd parser (bsc#1233610)
- CVE-2025-0622: Fixed command/gpg: Use-after-free due to hooks not being removed on module unload (bsc#1236317)
- CVE-2024-45776: Fixed overflow in .MO file (gettext) handling (bsc#1233612)
- CVE-2024-45777: Fixed integer overflow in gettext (bsc#1233613)
- CVE-2025-0690: Fixed integer overflow in read that may lead to out-of-bounds write (bsc#1237012)
- CVE-2025-1118: Fixed commands/dump: The dump command is not in lockdown when secure boot is enabled(bsc#1237013)
- CVE-2024-45778: Fixed bfs filesystem not fuzzing stable (bsc#1233606)
- CVE-2024-45779: Fixed bfs heap overflow (bsc#1233608)
- CVE-2025-0677: Fixed integer overflow that may lead to heap based
  out-of-bounds write when handling symlinks in ufs (bsc#1237002)
- CVE-2025-0684: Fixed reiserfs: Integer overflow when handling symlinks
  may lead to heap based out-of-bounds write when reading data (bsc#1237008)
- CVE-2025-0685: Fixed jfs: Integer overflow when handling symlinks may
  lead to heap based out-of-bounds write when reading data (bsc#1237009)
- CVE-2025-0686: Fixed romfs: Integer overflow when handling symlinks
  may lead to heap based out-of-bounds write when reading data (bsc#1237010)
- CVE-2025-0689: Fixed udf: Heap based buffer overflow  in
  grub_udf_read_block() may lead to arbitrary code execution (bsc#1237011)
- CVE-2025-1125: Fixed fs/hfs: Interger overflow may lead to heap based out-of-bounds write (bsc#1237014)
- CVE-2025-0678: Fixed squash4: Integer overflow may lead to heap based out-of-bounds write when reading data (bsc#1237006)

- Bump upstream SBAT generation to 5 to block older grub2 versions.

- CVE-2024-49504: Fixed Bypassing TPM-bound disk encryption on SL(E)M encrypted Images (bsc#1229163) (bsc#1229164)

- Restrict CLI access if the encrypted root device is automatically unlocked by
  the TPM. LUKS password authentication is required for access to be granted
- Obsolete, as CLI access is now locked and granted access no longer requires
  the previous restrictions

</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.12~rc1" release="6.1" arch="src" src="src/grub2-2.12~rc1-6.1.src.rpm">
          <filename>grub2-2.12~rc1-6.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.12~rc1" release="6.1" arch="x86_64" src="x86_64/grub2-2.12~rc1-6.1.x86_64.rpm">
          <filename>grub2-2.12~rc1-6.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-debuginfo" epoch="0" version="2.12~rc1" release="6.1" arch="x86_64" src="x86_64/grub2-debuginfo-2.12~rc1-6.1.x86_64.rpm">
          <filename>grub2-debuginfo-2.12~rc1-6.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-debugsource" epoch="0" version="2.12~rc1" release="6.1" arch="x86_64" src="x86_64/grub2-debugsource-2.12~rc1-6.1.x86_64.rpm">
          <filename>grub2-debugsource-2.12~rc1-6.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.12~rc1" release="6.1" arch="noarch" src="noarch/grub2-i386-pc-2.12~rc1-6.1.noarch.rpm">
          <filename>grub2-i386-pc-2.12~rc1-6.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.12~rc1" release="6.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.12~rc1-6.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.12~rc1-6.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.12~rc1" release="6.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.12~rc1-6.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.12~rc1-6.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.12~rc1" release="6.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.12~rc1-6.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.12~rc1-6.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>360</id>
    <title>Security update for libblockdev</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1750237091" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243226" id="1243226" title="VUL-0: EMBARGOED: CVE-2025-6018: pam: LPE from unprivileged to allow_active in *SUSE 15's PAM" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6019" id="CVE-2025-6019" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6019" type="cve" />
    </references>
    <description>This update for libblockdev fixes the following issues:

- CVE-2025-6019: Suppress privilege escalation during xfs fs resize ( (bsc#1243226)
</description>
    <pkglist>
      <collection>
        <package name="libbd_btrfs2" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_btrfs2-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_btrfs2-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_btrfs2-debuginfo" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_btrfs2-debuginfo-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_btrfs2-debuginfo-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_crypto2" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_crypto2-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_crypto2-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_crypto2-debuginfo" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_crypto2-debuginfo-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_crypto2-debuginfo-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_fs2" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_fs2-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_fs2-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_fs2-debuginfo" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_fs2-debuginfo-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_fs2-debuginfo-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_loop2" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_loop2-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_loop2-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_loop2-debuginfo" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_loop2-debuginfo-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_loop2-debuginfo-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_lvm2" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_lvm2-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_lvm2-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_lvm2-debuginfo" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_lvm2-debuginfo-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_lvm2-debuginfo-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_mdraid2" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_mdraid2-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_mdraid2-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_mdraid2-debuginfo" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_mdraid2-debuginfo-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_mdraid2-debuginfo-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_part2" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_part2-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_part2-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_part2-debuginfo" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_part2-debuginfo-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_part2-debuginfo-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_swap2" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_swap2-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_swap2-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_swap2-debuginfo" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_swap2-debuginfo-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_swap2-debuginfo-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_utils2" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_utils2-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_utils2-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbd_utils2-debuginfo" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libbd_utils2-debuginfo-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libbd_utils2-debuginfo-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libblockdev" epoch="0" version="2.28" release="2.1" arch="src" src="src/libblockdev-2.28-2.1.src.rpm" embargo_date="2025-06-17">
          <filename>libblockdev-2.28-2.1.src.rpm</filename>
        </package>
        <package name="libblockdev" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libblockdev-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libblockdev-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libblockdev-debuginfo" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libblockdev-debuginfo-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libblockdev-debuginfo-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libblockdev-debugsource" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libblockdev-debugsource-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libblockdev-debugsource-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libblockdev2" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libblockdev2-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libblockdev2-2.28-2.1.x86_64.rpm</filename>
        </package>
        <package name="libblockdev2-debuginfo" epoch="0" version="2.28" release="2.1" arch="x86_64" src="x86_64/libblockdev2-debuginfo-2.28-2.1.x86_64.rpm" embargo_date="2025-06-17">
          <filename>libblockdev2-debuginfo-2.28-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>363</id>
    <title>Security update for afterburn</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1750428743" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244675" id="1244675" title="afterburn-dracut is noarch, but requires arch specific afterburn" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3416" id="CVE-2025-3416" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3416" type="cve" />
    </references>
    <description>This update for afterburn fixes the following issues:

Update to version 5.8.2:

  * cargo: Afterburn release 5.8.2
  * docs/release-notes: update for release 5.8.2
  * cargo: update dependencies
  * cargo: Afterburn release 5.8.1
  * cargo: Afterburn release 5.8.0
  * docs/release-notes: update for release 5.8.0
  * cargo: update dependencies
  * packit: add initial support

Update to version 5.7.0.git103.bae893c:

  * Sync repo templates ⚙
    fixes RUSTSEC-2025-0022 AKA CVE-2025-3416
  * mod.rs: Fix clippy lint errors
  * release-notes.md: add release notes for rust version update
  * Cargo.toml: bump MSRV to 1.84.1
  * Fix clippy lint issues
  * Sync repo templates ⚙
  * Update release notes.
  * proxmoxve: Add more context to log messages.
  * proxmoxve: Remove unneeded fields
  * proxmoxve: Add tests for static network configuration from cloud-init.
  * proxmoxve: Add support for static network configuration from cloud-init.
  * Sync repo templates ⚙
  * release notes: add notes for tempfile bump from 3.16.0 to 3.17.1
  * add makefile targets for fmt,lint and test
  * providers/openstack: ignore ec2 metadata if not present
  * Sync repo templates ⚙
  * docs: add changelog entry
  * proxmox: use noop provider if no configdrive
  * add noop provider
  * release-notes: remove "upcoming"

Update to version 5.7.0:

  * cargo: Afterburn release 5.7.0
  * docs/release-notes: update for release 5.7.0
  * cargo: update dependencies
  * dhcp: replace dbus_proxy with proxy, and zbus traits
  * providers/hetzner: private ipv4 addresses in attributes
  * openstack: Document the two platforms
  * microsoft/azure: allow empty certificate chain in PKCS12 file
  * proxmoxve: implement proxmoxve provider
  * providers/hetzner: fix duplicate attribute prefix
  * cargo: Afterburn release 5.6.0
  * docs/release-notes: update for release 5.6.0
  * cargo: update dependencies
  * lint: silence deadcode warnings
  * lint: address latest lint's from msrv update
  * workflows/rust: directly update toolchain to 1.75.0
  * cargo: update msrv to 1.75
  * Sync repo templates ⚙
  * providers: Add "akamai" provider
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.5.1
  * docs/release-notes: update for release 5.5.1
  * cargo: update dependencies
  * providers/vmware: add missing public functions for non-amd64
  * cargo: Afterburn release 5.5.0
  * Sync repo templates ⚙
  * docs/release-notes: update for release 5.5.0
  * cargo: update dependencies
  * ci: cancel previous build on PR update
  * providers/vmware: Process guestinfo.metadata netplan configuration
  * kubevirt: Run afterburn-hostname service
  * providers: add support for scaleway
  * Move away from deprecated `users` to `uzers`
  * Sync repo templates ⚙
  * providers/hetzner: add support for Hetzner Cloud
  * cargo: update MSRV to 1.71
  * chore: Get rid of Clippy warnings
  * cargo: specify required features for nix dependency
  * Sync repo templates ⚙
  * openstack: Add attribute OPENSTACK_INSTANCE_UUID
  * cargo: Afterburn release 5.4.3
  * docs/release-notes: update for release 5.4.3
  * cargo: update dependencies
  * cargo: allow openssl 0.10.46
  * ci: strip debug symbols
  * Sync repo templates ⚙
  * build-sys: Use new tier = 2 for cargo-vendor-filterer
  * Sync repo templates ⚙
  * cargo: Afterburn release 5.4.2
  * docs/release-notes: update for release
  * docs/release-notes: note Azure SSH regression fix with new openssl
  * cargo: fix minimum version of openssl crate
  * microsoft/crypto/mod: replace deprecated function `parse` with `parse2`
  * Update mockito to 1.0.1
  * cli: switch to clap derive
  * cli: add descriptive value names for option arguments in --help
  * cli: have clap require exactly one of --cmdline/--provider
  * providers/*: move endpoint mocking into retry::Client
  * retry/client: move URL parsing into helper function
  * providers/microsoft: import crate::retry
  * providers/microsoft: use stored client for all fetches
  * providers/packet: use stored client for boot checkin
  * Sync repo templates ⚙
  * docs: Use upstream theme &amp; update to 0.4.1
  * initrd: remember to write trailing newline to network kargs file
  * util: drop obsolete "OEM" terminology
  * Update to clap 4
  * workflows: update clippy to 1.67
  * Fix clippy lints
  * Inline variables into format strings
</description>
    <pkglist>
      <collection>
        <package name="afterburn" epoch="0" version="5.8.2" release="1.1" arch="src" src="src/afterburn-5.8.2-1.1.src.rpm">
          <filename>afterburn-5.8.2-1.1.src.rpm</filename>
        </package>
        <package name="afterburn" epoch="0" version="5.8.2" release="1.1" arch="x86_64" src="x86_64/afterburn-5.8.2-1.1.x86_64.rpm">
          <filename>afterburn-5.8.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="afterburn-debuginfo" epoch="0" version="5.8.2" release="1.1" arch="x86_64" src="x86_64/afterburn-debuginfo-5.8.2-1.1.x86_64.rpm">
          <filename>afterburn-debuginfo-5.8.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="afterburn-debugsource" epoch="0" version="5.8.2" release="1.1" arch="x86_64" src="x86_64/afterburn-debugsource-5.8.2-1.1.x86_64.rpm">
          <filename>afterburn-debugsource-5.8.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="afterburn-dracut" epoch="0" version="5.8.2" release="1.1" arch="noarch" src="noarch/afterburn-dracut-5.8.2-1.1.noarch.rpm">
          <filename>afterburn-dracut-5.8.2-1.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>361</id>
    <title>Security update for pam</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1750323337" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244509" id="1244509" title="VUL-0: CVE-2025-6020: pam: module pam_namespace may access user-controlled paths without proper protections" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6020" id="CVE-2025-6020" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6020" type="cve" />
    </references>
    <description>This update for pam fixes the following issues:

- CVE-2025-6020: pam_namespace: convert functions that may operate
  on a user-controlled path to operate on file descriptors instead of
  absolute path. And keep the bind-mount protection from protect_mount()
  as a defense in depthmeasure. (bsc#1244509)
</description>
    <pkglist>
      <collection>
        <package name="pam" epoch="0" version="1.6.0" release="5.1" arch="src" src="src/pam-1.6.0-5.1.src.rpm">
          <filename>pam-1.6.0-5.1.src.rpm</filename>
        </package>
        <package name="pam" epoch="0" version="1.6.0" release="5.1" arch="x86_64" src="x86_64/pam-1.6.0-5.1.x86_64.rpm">
          <filename>pam-1.6.0-5.1.x86_64.rpm</filename>
        </package>
        <package name="pam-debuginfo" epoch="0" version="1.6.0" release="5.1" arch="x86_64" src="x86_64/pam-debuginfo-1.6.0-5.1.x86_64.rpm">
          <filename>pam-debuginfo-1.6.0-5.1.x86_64.rpm</filename>
        </package>
        <package name="pam-debugsource" epoch="0" version="1.6.0" release="5.1" arch="x86_64" src="x86_64/pam-debugsource-1.6.0-5.1.x86_64.rpm">
          <filename>pam-debugsource-1.6.0-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>386</id>
    <title>Security update for pam_pkcs11</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1752654195" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243226" id="1243226" title="VUL-0: CVE-2025-6018: pam: LPE from unprivileged to allow_active in *SUSE 15's PAM" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6018" id="CVE-2025-6018" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6018" type="cve" />
    </references>
    <description>This update for pam_pkcs11 fixes the following issues:

- Removes pam_env from auth stack for security reason [bsc#1243226]

</description>
    <pkglist>
      <collection>
        <package name="pam_pkcs11" epoch="0" version="0.6.12" release="5.1" arch="src" src="src/pam_pkcs11-0.6.12-5.1.src.rpm">
          <filename>pam_pkcs11-0.6.12-5.1.src.rpm</filename>
        </package>
        <package name="pam_pkcs11" epoch="0" version="0.6.12" release="5.1" arch="x86_64" src="x86_64/pam_pkcs11-0.6.12-5.1.x86_64.rpm">
          <filename>pam_pkcs11-0.6.12-5.1.x86_64.rpm</filename>
        </package>
        <package name="pam_pkcs11-debuginfo" epoch="0" version="0.6.12" release="5.1" arch="x86_64" src="x86_64/pam_pkcs11-debuginfo-0.6.12-5.1.x86_64.rpm">
          <filename>pam_pkcs11-debuginfo-0.6.12-5.1.x86_64.rpm</filename>
        </package>
        <package name="pam_pkcs11-debugsource" epoch="0" version="0.6.12" release="5.1" arch="x86_64" src="x86_64/pam_pkcs11-debugsource-0.6.12-5.1.x86_64.rpm">
          <filename>pam_pkcs11-debugsource-0.6.12-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>382</id>
    <title>Recommended update for podman</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1752566627" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239776" id="1239776" title="[Build 20250317] openQA test fails in toolbox: run permission denied" type="bugzilla" />
    </references>
    <description>This update for podman fixes the following issues:

- Added patch to remove using rw as a default mount option (bsc#1239776)
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.9.5" release="6.1" arch="src" src="src/podman-4.9.5-6.1.src.rpm">
          <filename>podman-4.9.5-6.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="6.1" arch="x86_64" src="x86_64/podman-4.9.5-6.1.x86_64.rpm">
          <filename>podman-4.9.5-6.1.x86_64.rpm</filename>
        </package>
        <package name="podman-debuginfo" epoch="0" version="4.9.5" release="6.1" arch="x86_64" src="x86_64/podman-debuginfo-4.9.5-6.1.x86_64.rpm">
          <filename>podman-debuginfo-4.9.5-6.1.x86_64.rpm</filename>
        </package>
        <package name="podman-docker" epoch="0" version="4.9.5" release="6.1" arch="noarch" src="noarch/podman-docker-4.9.5-6.1.noarch.rpm">
          <filename>podman-docker-4.9.5-6.1.noarch.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="6.1" arch="x86_64" src="x86_64/podman-remote-4.9.5-6.1.x86_64.rpm">
          <filename>podman-remote-4.9.5-6.1.x86_64.rpm</filename>
        </package>
        <package name="podman-remote-debuginfo" epoch="0" version="4.9.5" release="6.1" arch="x86_64" src="x86_64/podman-remote-debuginfo-4.9.5-6.1.x86_64.rpm">
          <filename>podman-remote-debuginfo-4.9.5-6.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>368</id>
    <title>Security update for libsoup</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1751089643" />
    <references>
      <reference href="https://bugzilla.gnome.org/show_bug.cgi?id=528882" id="528882" title="gvfsd-http crashed with SIGSEGV in soup_str_case_hash()" type="bugzilla" />
      <reference href="https://bugzilla.gnome.org/show_bug.cgi?id=553466" id="553466" title="rhythmbox crashes when iTunes 7.7.1.11 win32 attempts to access DAAP shared library" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243314" id="1243314" title="VUL-0: CVE-2025-4945: libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243332" id="1243332" title="VUL-0: CVE-2025-4948: libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243422" id="1243422" title="VUL-0: CVE-2025-4476: libsoup,libsoup2: libsoup: null pointer dereference may lead to denial of service" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243423" id="1243423" title="VUL-0: CVE-2025-4969: libsoup,libsoup2: libsoup: off-by-one out-of-bounds read may lead to infoleak" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4476" id="CVE-2025-4476" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4476" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4945" id="CVE-2025-4945" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4945" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4948" id="CVE-2025-4948" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4948" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4969" id="CVE-2025-4969" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4969" type="cve" />
    </references>
    <description>This update for libsoup fixes the following issues:

- CVE-2025-4476: Fixed null pointer dereference that may lead to denial of service (bsc#1243422)
- CVE-2025-4948: Fixed Integer Underflow in
  soup_multipart_new_from_message() Leading to Denial of Service in libsoup
  (bsc#1243332)
- CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423)
- CVE-2025-4945: Fixed Integer Overflow in Cookie Expiration Date Handling in libsoup (bsc#1243314)
</description>
    <pkglist>
      <collection>
        <package name="libsoup" epoch="0" version="3.4.2" release="8.1" arch="src" src="src/libsoup-3.4.2-8.1.src.rpm">
          <filename>libsoup-3.4.2-8.1.src.rpm</filename>
        </package>
        <package name="libsoup-3_0-0" epoch="0" version="3.4.2" release="8.1" arch="x86_64" src="x86_64/libsoup-3_0-0-3.4.2-8.1.x86_64.rpm">
          <filename>libsoup-3_0-0-3.4.2-8.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-3_0-0-debuginfo" epoch="0" version="3.4.2" release="8.1" arch="x86_64" src="x86_64/libsoup-3_0-0-debuginfo-3.4.2-8.1.x86_64.rpm">
          <filename>libsoup-3_0-0-debuginfo-3.4.2-8.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-debugsource" epoch="0" version="3.4.2" release="8.1" arch="x86_64" src="x86_64/libsoup-debugsource-3.4.2-8.1.x86_64.rpm">
          <filename>libsoup-debugsource-3.4.2-8.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>390</id>
    <title>Security update for iputils</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1753092278" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243772" id="1243772" title="VUL-0: CVE-2025-48964: iputils: integer overflow in ping statistics via zero timestamp" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48964" id="CVE-2025-48964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48964" type="cve" />
    </references>
    <description>This update for iputils fixes the following issues:

- CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772)
</description>
    <pkglist>
      <collection>
        <package name="iputils" epoch="0" version="20221126" release="6.1" arch="src" src="src/iputils-20221126-6.1.src.rpm">
          <filename>iputils-20221126-6.1.src.rpm</filename>
        </package>
        <package name="iputils" epoch="0" version="20221126" release="6.1" arch="x86_64" src="x86_64/iputils-20221126-6.1.x86_64.rpm">
          <filename>iputils-20221126-6.1.x86_64.rpm</filename>
        </package>
        <package name="iputils-debuginfo" epoch="0" version="20221126" release="6.1" arch="x86_64" src="x86_64/iputils-debuginfo-20221126-6.1.x86_64.rpm">
          <filename>iputils-debuginfo-20221126-6.1.x86_64.rpm</filename>
        </package>
        <package name="iputils-debugsource" epoch="0" version="20221126" release="6.1" arch="x86_64" src="x86_64/iputils-debugsource-20221126-6.1.x86_64.rpm">
          <filename>iputils-debugsource-20221126-6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>393</id>
    <title>Security update for jq</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1753357280" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243450" id="1243450" title="VUL-0: CVE-2024-23337: jq: signed integer overflow in jv.c:jvp_array_write" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23337" id="CVE-2024-23337" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23337" type="cve" />
    </references>
    <description>This update for jq fixes the following issues:

- CVE-2024-23337: Fixed signed integer overflow in jv.c:jvp_array_write (bsc#1243450)
</description>
    <pkglist>
      <collection>
        <package name="jq" epoch="0" version="1.6" release="4.1" arch="src" src="src/jq-1.6-4.1.src.rpm">
          <filename>jq-1.6-4.1.src.rpm</filename>
        </package>
        <package name="jq" epoch="0" version="1.6" release="4.1" arch="x86_64" src="x86_64/jq-1.6-4.1.x86_64.rpm">
          <filename>jq-1.6-4.1.x86_64.rpm</filename>
        </package>
        <package name="jq-debuginfo" epoch="0" version="1.6" release="4.1" arch="x86_64" src="x86_64/jq-debuginfo-1.6-4.1.x86_64.rpm">
          <filename>jq-debuginfo-1.6-4.1.x86_64.rpm</filename>
        </package>
        <package name="jq-debugsource" epoch="0" version="1.6" release="4.1" arch="x86_64" src="x86_64/jq-debugsource-1.6-4.1.x86_64.rpm">
          <filename>jq-debugsource-1.6-4.1.x86_64.rpm</filename>
        </package>
        <package name="libjq1" epoch="0" version="1.6" release="4.1" arch="x86_64" src="x86_64/libjq1-1.6-4.1.x86_64.rpm">
          <filename>libjq1-1.6-4.1.x86_64.rpm</filename>
        </package>
        <package name="libjq1-debuginfo" epoch="0" version="1.6" release="4.1" arch="x86_64" src="x86_64/libjq1-debuginfo-1.6-4.1.x86_64.rpm">
          <filename>libjq1-debuginfo-1.6-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>394</id>
    <title>Security update for gstreamer-plugins-base</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1753357494" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244403" id="1244403" title="VUL-0: CVE-2025-47807: gstreamer-0_10-plugins-base,gstreamer-plugins-base: NULL-pointer dereference in SubRip subtitle parser" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244404" id="1244404" title="VUL-0: CVE-2025-47808: gstreamer-0_10-plugins-base,gstreamer-plugins-base: NULL-pointer dereference in TMPlayer subtitle parser" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244407" id="1244407" title="VUL-0: CVE-2025-47806: gstreamer-0_10-plugins-base,gstreamer-plugins-base: Stack buffer overflow in SubRip subtitle parser" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47806" id="CVE-2025-47806" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47806" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47807" id="CVE-2025-47807" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47807" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47808" id="CVE-2025-47808" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47808" type="cve" />
    </references>
    <description>This update for gstreamer-plugins-base fixes the following issues:

- CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403)
- CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404)
- CVE-2025-47806: Fixed Stack buffer overflow in SubRip subtitle parser (bsc#1244407)
</description>
    <pkglist>
      <collection>
        <package name="gstreamer-plugins-base" epoch="0" version="1.22.9" release="3.1" arch="src" src="src/gstreamer-plugins-base-1.22.9-3.1.src.rpm">
          <filename>gstreamer-plugins-base-1.22.9-3.1.src.rpm</filename>
        </package>
        <package name="gstreamer-plugins-base" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/gstreamer-plugins-base-1.22.9-3.1.x86_64.rpm">
          <filename>gstreamer-plugins-base-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="gstreamer-plugins-base-debuginfo" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/gstreamer-plugins-base-debuginfo-1.22.9-3.1.x86_64.rpm">
          <filename>gstreamer-plugins-base-debuginfo-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="gstreamer-plugins-base-debugsource" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/gstreamer-plugins-base-debugsource-1.22.9-3.1.x86_64.rpm">
          <filename>gstreamer-plugins-base-debugsource-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstallocators-1_0-0" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgstallocators-1_0-0-1.22.9-3.1.x86_64.rpm">
          <filename>libgstallocators-1_0-0-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstallocators-1_0-0-debuginfo" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgstallocators-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm">
          <filename>libgstallocators-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstapp-1_0-0" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgstapp-1_0-0-1.22.9-3.1.x86_64.rpm">
          <filename>libgstapp-1_0-0-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstapp-1_0-0-debuginfo" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgstapp-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm">
          <filename>libgstapp-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstaudio-1_0-0" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgstaudio-1_0-0-1.22.9-3.1.x86_64.rpm">
          <filename>libgstaudio-1_0-0-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstaudio-1_0-0-debuginfo" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgstaudio-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm">
          <filename>libgstaudio-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstgl-1_0-0" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgstgl-1_0-0-1.22.9-3.1.x86_64.rpm">
          <filename>libgstgl-1_0-0-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstgl-1_0-0-debuginfo" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgstgl-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm">
          <filename>libgstgl-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstpbutils-1_0-0" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgstpbutils-1_0-0-1.22.9-3.1.x86_64.rpm">
          <filename>libgstpbutils-1_0-0-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstpbutils-1_0-0-debuginfo" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgstpbutils-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm">
          <filename>libgstpbutils-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstriff-1_0-0" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgstriff-1_0-0-1.22.9-3.1.x86_64.rpm">
          <filename>libgstriff-1_0-0-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstriff-1_0-0-debuginfo" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgstriff-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm">
          <filename>libgstriff-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgsttag-1_0-0" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgsttag-1_0-0-1.22.9-3.1.x86_64.rpm">
          <filename>libgsttag-1_0-0-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgsttag-1_0-0-debuginfo" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgsttag-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm">
          <filename>libgsttag-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstvideo-1_0-0" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgstvideo-1_0-0-1.22.9-3.1.x86_64.rpm">
          <filename>libgstvideo-1_0-0-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgstvideo-1_0-0-debuginfo" epoch="0" version="1.22.9" release="3.1" arch="x86_64" src="x86_64/libgstvideo-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm">
          <filename>libgstvideo-1_0-0-debuginfo-1.22.9-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>395</id>
    <title>Security update for glib2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1753357610" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242844" id="1242844" title="VUL-0: CVE-2025-4373: glib2: buffer underflow through glib/gstring.c via function g_string_insert_unichar" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244596" id="1244596" title="VUL-0: CVE-2025-6052: glib2: integer overflow in g_string_maybe_expand() leads to potential buffer overflow in GString" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4373" id="CVE-2025-4373" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4373" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6052" id="CVE-2025-6052" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6052" type="cve" />
    </references>
    <description>This update for glib2 fixes the following issues:

- CVE-2025-4373: Fixed buffer underflow through glib/gstring.c via 
  function g_string_insert_unichar (bsc#1242844)
- CVE-2025-6052: Fixed integer overflow in g_string_maybe_expand() 
  leads to potential buffer overflow in GString (bsc#1244596)
</description>
    <pkglist>
      <collection>
        <package name="glib2" epoch="0" version="2.76.2" release="9.1" arch="src" src="src/glib2-2.76.2-9.1.src.rpm">
          <filename>glib2-2.76.2-9.1.src.rpm</filename>
        </package>
        <package name="glib2-debugsource" epoch="0" version="2.76.2" release="9.1" arch="x86_64" src="x86_64/glib2-debugsource-2.76.2-9.1.x86_64.rpm">
          <filename>glib2-debugsource-2.76.2-9.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.76.2" release="9.1" arch="x86_64" src="x86_64/glib2-tools-2.76.2-9.1.x86_64.rpm">
          <filename>glib2-tools-2.76.2-9.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools-debuginfo" epoch="0" version="2.76.2" release="9.1" arch="x86_64" src="x86_64/glib2-tools-debuginfo-2.76.2-9.1.x86_64.rpm">
          <filename>glib2-tools-debuginfo-2.76.2-9.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.76.2" release="9.1" arch="x86_64" src="x86_64/libgio-2_0-0-2.76.2-9.1.x86_64.rpm">
          <filename>libgio-2_0-0-2.76.2-9.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0-debuginfo" epoch="0" version="2.76.2" release="9.1" arch="x86_64" src="x86_64/libgio-2_0-0-debuginfo-2.76.2-9.1.x86_64.rpm">
          <filename>libgio-2_0-0-debuginfo-2.76.2-9.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.76.2" release="9.1" arch="x86_64" src="x86_64/libglib-2_0-0-2.76.2-9.1.x86_64.rpm">
          <filename>libglib-2_0-0-2.76.2-9.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0-debuginfo" epoch="0" version="2.76.2" release="9.1" arch="x86_64" src="x86_64/libglib-2_0-0-debuginfo-2.76.2-9.1.x86_64.rpm">
          <filename>libglib-2_0-0-debuginfo-2.76.2-9.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.76.2" release="9.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-2.76.2-9.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-2.76.2-9.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0-debuginfo" epoch="0" version="2.76.2" release="9.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-debuginfo-2.76.2-9.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-debuginfo-2.76.2-9.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.76.2" release="9.1" arch="x86_64" src="x86_64/libgobject-2_0-0-2.76.2-9.1.x86_64.rpm">
          <filename>libgobject-2_0-0-2.76.2-9.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0-debuginfo" epoch="0" version="2.76.2" release="9.1" arch="x86_64" src="x86_64/libgobject-2_0-0-debuginfo-2.76.2-9.1.x86_64.rpm">
          <filename>libgobject-2_0-0-debuginfo-2.76.2-9.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>397</id>
    <title>Security update for jbigkit</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1753712950" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1198146" id="1198146" title="VUL-1: CVE-2022-1210: jbigkit: Malicious file leads to a denial of service in TIFF File Handler" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1210" id="CVE-2022-1210" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1210" type="cve" />
    </references>
    <description>This update for jbigkit fixes the following issues:

- Updated to version 2.1:
  * CVE-2022-1210: Fixed denial of service in TIFF File Handler (bsc#1198146)
</description>
    <pkglist>
      <collection>
        <package name="jbigkit" epoch="0" version="2.1" release="4.1" arch="src" src="src/jbigkit-2.1-4.1.src.rpm">
          <filename>jbigkit-2.1-4.1.src.rpm</filename>
        </package>
        <package name="jbigkit-debugsource" epoch="0" version="2.1" release="4.1" arch="x86_64" src="x86_64/jbigkit-debugsource-2.1-4.1.x86_64.rpm">
          <filename>jbigkit-debugsource-2.1-4.1.x86_64.rpm</filename>
        </package>
        <package name="libjbig2" epoch="0" version="2.1" release="4.1" arch="x86_64" src="x86_64/libjbig2-2.1-4.1.x86_64.rpm">
          <filename>libjbig2-2.1-4.1.x86_64.rpm</filename>
        </package>
        <package name="libjbig2-debuginfo" epoch="0" version="2.1" release="4.1" arch="x86_64" src="x86_64/libjbig2-debuginfo-2.1-4.1.x86_64.rpm">
          <filename>libjbig2-debuginfo-2.1-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>403</id>
    <title>Security update for ignition</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1753867372" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1238681" id="1238681" title="VUL-0: CVE-2025-22870: ignition: golang.org/x/net/http/httpproxy: proxy bypass using IPv6 zone IDs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239192" id="1239192" title="VUL-0: CVE-2025-22868: ignition: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22868" id="CVE-2025-22868" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22868" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22870" id="CVE-2025-22870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22870" type="cve" />
    </references>
    <description>This update for ignition fixes the following issues:

- CVE-2025-22870: golang.org/x/net/http/httpproxy: Fixed proxy bypass 
  using IPv6 zone IDs (bsc#1238681)
- CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory 
  consumption during token parsing (bsc#1239192)
</description>
    <pkglist>
      <collection>
        <package name="ignition" epoch="0" version="2.19.0" release="2.1" arch="src" src="src/ignition-2.19.0-2.1.src.rpm">
          <filename>ignition-2.19.0-2.1.src.rpm</filename>
        </package>
        <package name="ignition" epoch="0" version="2.19.0" release="2.1" arch="x86_64" src="x86_64/ignition-2.19.0-2.1.x86_64.rpm">
          <filename>ignition-2.19.0-2.1.x86_64.rpm</filename>
        </package>
        <package name="ignition-debuginfo" epoch="0" version="2.19.0" release="2.1" arch="x86_64" src="x86_64/ignition-debuginfo-2.19.0-2.1.x86_64.rpm">
          <filename>ignition-debuginfo-2.19.0-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>405</id>
    <title>Security update for coreutils</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1753955071" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243767" id="1243767" title="VUL-0: CVE-2025-5278: coreutils: heap buffer under-read may lead to a crash or leak sensitive data" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5278" id="CVE-2025-5278" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5278" type="cve" />
    </references>
    <description>This update for coreutils fixes the following issues:

- CVE-2025-5278: Fixed heap buffer under-read ledaing to a 
  crash or leak sensitive data (bsc#1243767)
</description>
    <pkglist>
      <collection>
        <package name="coreutils" epoch="0" version="9.4" release="5.1" arch="src" src="src/coreutils-9.4-5.1.src.rpm">
          <filename>coreutils-9.4-5.1.src.rpm</filename>
        </package>
        <package name="coreutils" epoch="0" version="9.4" release="5.1" arch="x86_64" src="x86_64/coreutils-9.4-5.1.x86_64.rpm">
          <filename>coreutils-9.4-5.1.x86_64.rpm</filename>
        </package>
        <package name="coreutils-debuginfo" epoch="0" version="9.4" release="5.1" arch="x86_64" src="x86_64/coreutils-debuginfo-9.4-5.1.x86_64.rpm">
          <filename>coreutils-debuginfo-9.4-5.1.x86_64.rpm</filename>
        </package>
        <package name="coreutils-debugsource" epoch="0" version="9.4" release="5.1" arch="x86_64" src="x86_64/coreutils-debugsource-9.4-5.1.x86_64.rpm">
          <filename>coreutils-debugsource-9.4-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>406</id>
    <title>Security update for opensc</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1754040368" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219386" id="1219386" title="VUL-0: CVE-2023-5992: opensc: Side-channel leaks while stripping encryption PKCS#1 padding" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5992" id="CVE-2023-5992" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5992" type="cve" />
    </references>
    <description>This update for opensc fixes the following issues:

- CVE-2023-5992: Fixed side-channel leaks while stripping 
  encryption PKCS#1 padding (bsc#1219386)
</description>
    <pkglist>
      <collection>
        <package name="opensc" epoch="0" version="0.24.0" release="4.1" arch="src" src="src/opensc-0.24.0-4.1.src.rpm">
          <filename>opensc-0.24.0-4.1.src.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.24.0" release="4.1" arch="x86_64" src="x86_64/opensc-0.24.0-4.1.x86_64.rpm">
          <filename>opensc-0.24.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="opensc-debuginfo" epoch="0" version="0.24.0" release="4.1" arch="x86_64" src="x86_64/opensc-debuginfo-0.24.0-4.1.x86_64.rpm">
          <filename>opensc-debuginfo-0.24.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="opensc-debugsource" epoch="0" version="0.24.0" release="4.1" arch="x86_64" src="x86_64/opensc-debugsource-0.24.0-4.1.x86_64.rpm">
          <filename>opensc-debugsource-0.24.0-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>370</id>
    <title>Security update for gpg2</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1751271568" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236931" id="1236931" title="gpg hangs when importing a key" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239119" id="1239119" title="VUL-0: CVE-2025-30258: gpg2: verification DoS due to a malicious subkey in the keyring" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30258" id="CVE-2025-30258" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30258" type="cve" />
    </references>
    <description>This update for gpg2 fixes the following issues:

* Fix regression for the recent malicious subkey DoS fix in CVE-2025-30258. [bsc#1236931, bsc#1239119, CVE-2025-30258]
</description>
    <pkglist>
      <collection>
        <package name="gpg2" epoch="0" version="2.4.4" release="4.1" arch="src" src="src/gpg2-2.4.4-4.1.src.rpm">
          <filename>gpg2-2.4.4-4.1.src.rpm</filename>
        </package>
        <package name="gpg2" epoch="0" version="2.4.4" release="4.1" arch="x86_64" src="x86_64/gpg2-2.4.4-4.1.x86_64.rpm">
          <filename>gpg2-2.4.4-4.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2-debuginfo" epoch="0" version="2.4.4" release="4.1" arch="x86_64" src="x86_64/gpg2-debuginfo-2.4.4-4.1.x86_64.rpm">
          <filename>gpg2-debuginfo-2.4.4-4.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2-debugsource" epoch="0" version="2.4.4" release="4.1" arch="x86_64" src="x86_64/gpg2-debugsource-2.4.4-4.1.x86_64.rpm">
          <filename>gpg2-debugsource-2.4.4-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>410</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1754400723" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=391434" id="391434" title="vmware-kmp-default doesn't seem to work like closed vmare tools do" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245169" id="1245169" title="open-vm-tools 13.0.0 has been released - please rebase" type="bugzilla" />
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- Update to open-vm-tools 13.0.0 based on build 24696409. (bsc#1245169): 
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  + The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  + Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
- Add patch:
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="13.0.0" release="1.1" arch="x86_64" src="x86_64/libvmtools0-13.0.0-1.1.x86_64.rpm">
          <filename>libvmtools0-13.0.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="libvmtools0-debuginfo" epoch="0" version="13.0.0" release="1.1" arch="x86_64" src="x86_64/libvmtools0-debuginfo-13.0.0-1.1.x86_64.rpm">
          <filename>libvmtools0-debuginfo-13.0.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="13.0.0" release="1.1" arch="src" src="src/open-vm-tools-13.0.0-1.1.src.rpm">
          <filename>open-vm-tools-13.0.0-1.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="13.0.0" release="1.1" arch="x86_64" src="x86_64/open-vm-tools-13.0.0-1.1.x86_64.rpm">
          <filename>open-vm-tools-13.0.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools-debuginfo" epoch="0" version="13.0.0" release="1.1" arch="x86_64" src="x86_64/open-vm-tools-debuginfo-13.0.0-1.1.x86_64.rpm">
          <filename>open-vm-tools-debuginfo-13.0.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools-debugsource" epoch="0" version="13.0.0" release="1.1" arch="x86_64" src="x86_64/open-vm-tools-debugsource-13.0.0-1.1.x86_64.rpm">
          <filename>open-vm-tools-debugsource-13.0.0-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>375</id>
    <title>Recommended update for gptfdisk</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1751638721" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242987" id="1242987" title="L3: Systems boot to Emergency Mode on first reboot using qcow2 or vmdk images." type="bugzilla" />
    </references>
    <description>This update for gptfdisk fixes the following issues:

- Fixed boot failure with qcow and vmdk images (bsc#1242987)

</description>
    <pkglist>
      <collection>
        <package name="gptfdisk" epoch="0" version="1.0.9" release="4.1" arch="src" src="src/gptfdisk-1.0.9-4.1.src.rpm">
          <filename>gptfdisk-1.0.9-4.1.src.rpm</filename>
        </package>
        <package name="gptfdisk" epoch="0" version="1.0.9" release="4.1" arch="x86_64" src="x86_64/gptfdisk-1.0.9-4.1.x86_64.rpm">
          <filename>gptfdisk-1.0.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="gptfdisk-debuginfo" epoch="0" version="1.0.9" release="4.1" arch="x86_64" src="x86_64/gptfdisk-debuginfo-1.0.9-4.1.x86_64.rpm">
          <filename>gptfdisk-debuginfo-1.0.9-4.1.x86_64.rpm</filename>
        </package>
        <package name="gptfdisk-debugsource" epoch="0" version="1.0.9" release="4.1" arch="x86_64" src="x86_64/gptfdisk-debugsource-1.0.9-4.1.x86_64.rpm">
          <filename>gptfdisk-debugsource-1.0.9-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>412</id>
    <title>Security update for xz</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1754648601" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240414" id="1240414" title="VUL-0: CVE-2025-31115: xz: heap use after free and writing to an address based on the null pointer plus an offset" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31115" id="CVE-2025-31115" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31115" type="cve" />
    </references>
    <description>This update for xz fixes the following issues:

- CVE-2025-31115: Fixed heap use after free and writing to an address based on the null pointer plus an offset  (bsc#1240414)
</description>
    <pkglist>
      <collection>
        <package name="liblzma5" epoch="0" version="5.4.3" release="5.1" arch="x86_64" src="x86_64/liblzma5-5.4.3-5.1.x86_64.rpm">
          <filename>liblzma5-5.4.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="liblzma5-debuginfo" epoch="0" version="5.4.3" release="5.1" arch="x86_64" src="x86_64/liblzma5-debuginfo-5.4.3-5.1.x86_64.rpm">
          <filename>liblzma5-debuginfo-5.4.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="xz" epoch="0" version="5.4.3" release="5.1" arch="src" src="src/xz-5.4.3-5.1.src.rpm">
          <filename>xz-5.4.3-5.1.src.rpm</filename>
        </package>
        <package name="xz" epoch="0" version="5.4.3" release="5.1" arch="x86_64" src="x86_64/xz-5.4.3-5.1.x86_64.rpm">
          <filename>xz-5.4.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="xz-debuginfo" epoch="0" version="5.4.3" release="5.1" arch="x86_64" src="x86_64/xz-debuginfo-5.4.3-5.1.x86_64.rpm">
          <filename>xz-debuginfo-5.4.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="xz-debugsource" epoch="0" version="5.4.3" release="5.1" arch="x86_64" src="x86_64/xz-debugsource-5.4.3-5.1.x86_64.rpm">
          <filename>xz-debugsource-5.4.3-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>374</id>
    <title>Security update for gpg2</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1751619725" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236931" id="1236931" title="gpg hangs when importing a key" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239119" id="1239119" title="VUL-0: CVE-2025-30258: gpg2: verification DoS due to a malicious subkey in the keyring" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243069" id="1243069" title="remove expired and insecure key /usr/share/gnupg/sks-keyservers.netCA.pem" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30258" id="CVE-2025-30258" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30258" type="cve" />
    </references>
    <description>This update for gpg2 fixes the following issues:

- gpg: Allow the use of an ADSK subkey as ADSK subkey. (bsc#1239119 CVE-2025-30258)
- Don't install expired sks certificate [bsc#1243069]
</description>
    <pkglist>
      <collection>
        <package name="gpg2" epoch="0" version="2.4.4" release="5.1" arch="src" src="src/gpg2-2.4.4-5.1.src.rpm">
          <filename>gpg2-2.4.4-5.1.src.rpm</filename>
        </package>
        <package name="gpg2" epoch="0" version="2.4.4" release="5.1" arch="x86_64" src="x86_64/gpg2-2.4.4-5.1.x86_64.rpm">
          <filename>gpg2-2.4.4-5.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2-debuginfo" epoch="0" version="2.4.4" release="5.1" arch="x86_64" src="x86_64/gpg2-debuginfo-2.4.4-5.1.x86_64.rpm">
          <filename>gpg2-debuginfo-2.4.4-5.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2-debugsource" epoch="0" version="2.4.4" release="5.1" arch="x86_64" src="x86_64/gpg2-debugsource-2.4.4-5.1.x86_64.rpm">
          <filename>gpg2-debugsource-2.4.4-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>379</id>
    <title>Security update for python311</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1752229277" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=831629" id="831629" title="python3-base test test_faulthandler fails on ppc64" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1174091" id="1174091" title="VUL-1: CVE-2019-20907: python,python36,python3,python27: in Lib/tarfile.py an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227378" id="1227378" title="/usr/bin/idle* don't have executable bits" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243155" id="1243155" title="python3* sphinx non-determinism" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243273" id="1243273" title="VUL-0: CVE-2025-4516: python, cpython: CPython DecodeError Handling Vulnerability" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244032" id="1244032" title="VUL-0: CVE-2025-4517: python: arbitrary filesystem writes outside the extraction directory during extraction with filter=&quot;data&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244056" id="1244056" title="VUL-0: CVE-2024-12718: python: Bypass extraction filter to modify file metadata outside extraction directory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244059" id="1244059" title="VUL-0: CVE-2025-4138: python: may allow symlink targets to point outside the destination directory, and the modification of some file metadata." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244060" id="1244060" title="VUL-0: CVE-2025-4330: python: Extraction filter bypass for linking outside extraction directory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244061" id="1244061" title="VUL-0: CVE-2025-4435: python: Tarfile extracts filtered members when errorlevel=0" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244705" id="1244705" title="VUL-0: CVE-2025-6069: python,python3,python310,python311,python312,python313,python36,python39: worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9947" id="CVE-2019-9947" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9947" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20907" id="CVE-2019-20907" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20907" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15523" id="CVE-2020-15523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15523" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15801" id="CVE-2020-15801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15801" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12718" id="CVE-2024-12718" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12718" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4138" id="CVE-2025-4138" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4138" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4330" id="CVE-2025-4330" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4330" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4435" id="CVE-2025-4435" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4435" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4516" id="CVE-2025-4516" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4516" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4517" id="CVE-2025-4517" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4517" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6069" id="CVE-2025-6069" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6069" type="cve" />
    </references>
    <description>This update for python311 fixes the following issues:

- CVE-2025-6069: Avoid worst case quadratic complexity when processing
  certain crafted malformed inputs with HTMLParser (bsc#1244705).

Update to 3.11.13:

  - Security

    - gh-135034: Fixes multiple issues that allowed tarfile
      extraction filters (filter="data" and filter="tar")
      to be bypassed using crafted symlinks and hard links.
      Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138
      (bsc#1244059), CVE-2025-4330 (bsc#1244060), and
      CVE-2025-4517 (bsc#1244032). Also addresses CVE-2025-4435
      (gh#135034, bsc#1244061).
    - gh-133767: Fix use-after-free in the “unicode-escape”
      decoder with a non-“strict” error handler (CVE-2025-4516,
      bsc#1243273).
    - gh-128840: Short-circuit the processing of long IPv6
      addresses early in ipaddress to prevent excessive memory
      consumption and a minor denial-of-service.

  - Library

    - gh-128840: Fix parsing long IPv6 addresses with embedded
      IPv4 address.
    - gh-134062: ipaddress: fix collisions in __hash__() for
      IPv4Network and IPv6Network objects.
    - gh-123409: Fix ipaddress.IPv6Address.reverse_pointer output
      according to RFC 3596, §2.5. Patch by Bénédikt Tran.
    - bpo-43633: Improve the textual representation of
      IPv4-mapped IPv6 addresses (RFC 4291 Sections 2.2, 2.5.5.2)
      in ipaddress. Patch by Oleksandr Pavliuk.

- CVE-2025-4516: Fixed blocking DecodeError handling
  vulnerability, which could lead to DoS. (bsc#1243273) 

</description>
    <pkglist>
      <collection>
        <package name="python311" epoch="0" version="3.11.13" release="1.1" arch="src" src="src/python311-3.11.13-1.1.src.rpm">
          <filename>python311-3.11.13-1.1.src.rpm</filename>
        </package>
        <package name="python311" epoch="0" version="3.11.13" release="1.1" arch="x86_64" src="x86_64/python311-3.11.13-1.1.x86_64.rpm">
          <filename>python311-3.11.13-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses" epoch="0" version="3.11.13" release="1.1" arch="x86_64" src="x86_64/python311-curses-3.11.13-1.1.x86_64.rpm">
          <filename>python311-curses-3.11.13-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses-debuginfo" epoch="0" version="3.11.13" release="1.1" arch="x86_64" src="x86_64/python311-curses-debuginfo-3.11.13-1.1.x86_64.rpm">
          <filename>python311-curses-debuginfo-3.11.13-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debuginfo" epoch="0" version="3.11.13" release="1.1" arch="x86_64" src="x86_64/python311-debuginfo-3.11.13-1.1.x86_64.rpm">
          <filename>python311-debuginfo-3.11.13-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debugsource" epoch="0" version="3.11.13" release="1.1" arch="x86_64" src="x86_64/python311-debugsource-3.11.13-1.1.x86_64.rpm">
          <filename>python311-debugsource-3.11.13-1.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0" epoch="0" version="3.11.13" release="1.1" arch="x86_64" src="x86_64/libpython3_11-1_0-3.11.13-1.1.x86_64.rpm">
          <filename>libpython3_11-1_0-3.11.13-1.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0-debuginfo" epoch="0" version="3.11.13" release="1.1" arch="x86_64" src="x86_64/libpython3_11-1_0-debuginfo-3.11.13-1.1.x86_64.rpm">
          <filename>libpython3_11-1_0-debuginfo-3.11.13-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base" epoch="0" version="3.11.13" release="1.1" arch="x86_64" src="x86_64/python311-base-3.11.13-1.1.x86_64.rpm">
          <filename>python311-base-3.11.13-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base-debuginfo" epoch="0" version="3.11.13" release="1.1" arch="x86_64" src="x86_64/python311-base-debuginfo-3.11.13-1.1.x86_64.rpm">
          <filename>python311-base-debuginfo-3.11.13-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-core" epoch="0" version="3.11.13" release="1.1" arch="src" src="src/python311-core-3.11.13-1.1.src.rpm">
          <filename>python311-core-3.11.13-1.1.src.rpm</filename>
        </package>
        <package name="python311-core-debugsource" epoch="0" version="3.11.13" release="1.1" arch="x86_64" src="x86_64/python311-core-debugsource-3.11.13-1.1.x86_64.rpm">
          <filename>python311-core-debugsource-3.11.13-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>377</id>
    <title>Recommended update for zypper, libsolv, libzypp</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1752050797" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=614646" id="614646" title="zypper useColor = autodetect crash" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1189788" id="1189788" title="UsrMerge: filesystem package breaks system when upgraded in a single rpm transaction" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216091" id="1216091" title="openQA failures with the update of zypper to 1.14.65 and libzypp  to 17.31.21" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1222044" id="1222044" title="zypper %posttrans fails with &quot;Failed to start jobs&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1225451" id="1225451" title="zypper invoked as non-root no more warns about outdated repositories" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228434" id="1228434" title="Behaviour of zypper dup in case of (temporarily) unaccessible repos" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229106" id="1229106" title="lsof reports &quot;Operation not permitted&quot;, zypper malfunction" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230267" id="1230267" title="[ZYPP-CODE15] Tracker bug for new revisions of the zypp stack due to code refactoring and renewal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232458" id="1232458" title="zypper ignores /var/cache/zypp/packages/.no_auto_prune (Version 1.14.77, TW and Leap)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234752" id="1234752" title="fix the refresh order to prefer -Updates over -Pool" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235598" id="1235598" title="yast dependencies insufficient" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235636" id="1235636" title="Superfluous &quot;no permisisons&quot; error when running zypper as non-root" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236384" id="1236384" title="implement better protection from effect of failure to meet baselevel-x86_64-v2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236481" id="1236481" title="[usrmerge] filesystem package doing a usrmerge must indicate this to zypp" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236820" id="1236820" title="Agama installer is stuck at &quot;refreshing repository metadata&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236939" id="1236939" title="zypper trashes the OS if repo failures occur" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236983" id="1236983" title="Stop using -Werror=deprecated-declarations in libyui-ncurses-pkg" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237044" id="1237044" title="zypper --installroot breaks baseurl for vendor repositories due missing vars" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237172" id="1237172" title="[Build 5.4] openQA test fails in first_boot: the system can not boot and got black screen" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237587" id="1237587" title="[SLES][16.0][agama][Build5.1] zypper can not handle encoded URLs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237949" id="1237949" title="[zypper info/search] no option to search for/list Enhances:" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1238315" id="1238315" title="zypper ignores double slash for FTP for the absolute path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239012" id="1239012" title="terminate called after throwing an instance of 'boost::wrapexcept&lt;boost::bad_any_cast&gt;'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239543" id="1239543" title="parallel download is slow on slow consoles" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239809" id="1239809" title="Requesting default zypper lock timeout value in a configuration file (similar to ZYPP_LOCK_TIMEOUT)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240132" id="1240132" title="zypper preload fails to download package" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240529" id="1240529" title="refresh on fips mode fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241463" id="1241463" title="Using metalink in a .repo file breaks Ansibles zypper_repository module" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243279" id="1243279" title="zypper does not allow distinguising between install and upgrade in %postinstall" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243457" id="1243457" title="Migrating from SLE Micro 5.5 + SUMA 5.0 Proxy Extension to SL Micro 6.1 + MLM 5.1 proxy extension fails with &quot;liblua5.3.so.5: cannot open shared object file&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243887" id="1243887" title="[Build 20250530] salt failed to install package" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243901" id="1243901" title="zypper 1.14.90: parse errors with custom OBS repositories" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244042" id="1244042" title="L3-Question: The most recent version released for nvidia-open-driver-G06-signed-kmp-default differs from nvidia-driver-G06-kmp-default" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244105" id="1244105" title="User authentication pop-up on SCC registration" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244710" id="1244710" title="Did not find how to set proxy settings for zypper. How it must work?" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245220" id="1245220" title="L3: Downloaded data exceeded the expected filesize ‘95 B’  when upgrading SLE-15-SP3 instance" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245452" id="1245452" title="[SLES16][s390x][Agama] KVM guest installation show Unexpected Application Error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245496" id="1245496" title="zypper fails to install dependencies" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245672" id="1245672" title="Unavailable delta rpms cause a user report rather than being ignored" type="bugzilla" />
      <reference href="https://jira.suse.com/browse/PED-11268" id="PED-11268" title="https://jira.suse.com/browse/PED-11268" type="jira" />
    </references>
    <description>This update for zypper, libsolv, libzypp fixes the following issues:

libsolv was updated to 0.7.34:

  - add support for product-obsoletes() provides in the product
    autopackage generation code
  - improve transaction ordering by allowing more uninst-&gt;uninst
    edges [bsc#1243457]
  - implement color filtering when adding update targets
  - support orderwithrequires dependencies in susedata.xml
  - build both static and dynamic libraries on new suse distros
  - support the apk package and repository format (both v2 and v3)
  - new dataiterator_final_{repo,solvable} functions
  - Provide a symbol specific for the ruby-version
    so yast does not break across updates (bsc#1235598)

  - fix replaces_installed_package using the wrong solvable id
    when checking the noupdate map
  - make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
  - add rpm_query_idarray query function
  - support rpm's "orderwithrequires" dependency
  - improve transaction ordering by allowing more uninst-&gt;uninst
    edges [bsc#1243457]
  - implement color filtering when adding update targets
  - support orderwithrequires dependencies in susedata.xml
  - build both static and dynamic libraries on new suse distros
  - support the apk package and repository format (both v2 and v3)
  - new dataiterator_final_{repo,solvable} functions
  - Provide a symbol specific for the ruby-version
    so yast does not break across updates (bsc#1235598)

  - fix replaces_installed_package using the wrong solvable id
    when checking the noupdate map
  - make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
  - add rpm_query_idarray query function
  - support rpm's "orderwithrequires" dependency

libzypp was updated to 17.37.10:

  - BuildRequires: %{libsolv_devel_package} &gt;= 0.7.34 (bsc#1243486)
  - Newer rpm versions no longer allow a ':' in rpm package names or
    obsoletes. So injecting an "Obsoletes: product:oldproductname &lt; oldproductversion"
    into the -release package to indicate a product rename is no longer
    possible.  Since libsolv-0.7.34 you can and should use:
    "Provides: product-obsoletes(oldproductname) &lt; oldproductversion"
    in the -release package. libsolv will then inject the appropriate
    Obsoletes into the Product.
  - Ignore DeltaRpm download errors (bsc#1245672)
    DeltaRpms are in fact optional resources. In case of a failure
    the full rpm is downloaded.
  - Improve fix for incorrect filesize handling (bsc#1245220)
  - Do not trigger download data exceeded errors on HTTP non data
    responses (bsc#1245220)
    In some cases a HTTP 401 or 407 did trigger a "filesize exceeded"
    error, because the response payload size was compared against the
    expected filesize. This patch adds some checks if the response
    code is in the success range and only then takes expected
    filesize into account. Otherwise the response content-length is
    used or a fallback of 2Mb if no content-length is known.
  - Fix SEGV in MediaDISK handler (bsc#1245452)
  - Explicitly selecting DownloadAsNeeded also selects the
    classic_rpmtrans backend.
    DownloadAsNeeded can not be combined with the rpm singletrans
    installer backend because a rpm transaction requires all package
    headers to be available the the beginning of the transaction. So
    explicitly selecting this mode also turns on the classic_rpmtrans
    backend.
  - Fix evaluation of libproxy results (bsc#1244710)
  - Enhancements regarding mirror handling during repo refresh.
    Added  means to disable the use of mirrors when downloading
    security relevant files. Requires updaing zypper to 1.14.91.
  - Fix autotestcase writer if ZYPP_FULLLOG=1 (bsc#1244042)
    If ZYPP_FULLLOG=1 a solver testcase to
    "/var/log/YaST2/autoTestcase" should be written for each solver
    run. There was no testcase written for the very first solver run.
    This is now fixed.
  - Pass $1==2 to %posttrans script if it's an update (bsc#1243279)
  - Fix credential handling in HEAD requests (bsc#1244105)
  - RepoInfo: use pathNameSetTrailingSlash (fixes #643)
  - Fix wrong userdata parameter type when running zypp with debug
    verbosity (bsc#1239012)
  - Do not warn about no mirrors if mirrorlist was switched on
    automatically. (bsc#1243901)
  - Relax permission of cached packages to 0644 &amp; ~umask
    (bsc#1243887)
  - Add a note to service maintained .repo file entries (fixes #638)
  - Support using %{url} variable in a RIS service's repo section.
  - Use a cookie file to validate mirrorlist cache.
    This patch extends the mirrorlist code to use a cookie file to
    validate the contents of the cache against the source URL, making
    sure that we do not accidentially use a old cache when the
    mirrorlist url was changed. For example when migrating a system
    from one release to the next where the same repo alias might just
    have a different URL.
  - Let Service define and update gpgkey, mirrorlist and metalink.
  - Preserve a mirrorlist file in the raw cache during refresh.
  - Code16: Enable curl2 backend and parallel package download by
    default. In Code15 it's optional.
    Environment variables ZYPP_CURL2=&lt;0|1&gt; and ZYPP_PCK_PRELOAD=&lt;0|1&gt;
    can be used to turn the features on or off.
  - Make gpgKeyUrl the default source for gpg keys.
    When refreshing zypp now primarily uses gpgKeyUrl information
    from the repo files and only falls back to a automatically
    generated key Url if a gpgKeyUrl was not specified.
  - Introduce mirrors into the Media backends (bsc#1240132)
  - Drop MediaMultiCurl backend.
  - Throttle progress updates when preloading packages (bsc#1239543)
  - Check if request is in valid state in CURL callbacks (fixes
    openSUSE/zypper#605)
  - spec/CMake: add conditional build
    '--with[out] classic_rpmtrans_as_default'.
    classic_rpmtrans is the current builtin default for SUSE,
    otherwise it's single_rpmtrans.
    The `enable_preview_single_rpmtrans_as_default_for_zypper` switch
    was removed from the spec file.  Accordingly the CMake option
    ENABLE_PREVIEW_SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER was removed.
  - fixed build with boost 1.88.
  - XmlReader: Fix detection of bad input streams (fixes #635)
    libxml2 2.14 potentially reads the complete stream, so it may
    have the 'eof' bit set. Which is not 'good' but also not 'bad'.
  - rpm: Fix detection of %triggerscript starts (bsc#1222044)
  - RepoindexFileReader: add more &lt;repo&gt; related attributes a
    service may set.
    Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
    keeppackages, gpgkey, mirrorlist, and metalink with the same
    semantic as in a .repo file.
  - Drop workaround for broken rpm-4.18 in Code16 (bsc#1237172)
  - BuildRequires:  %{libsolv_devel_package} &gt;= 0.7.32.
    Code16 moved static libs to libsolv-devel-static.
  - Drop usage of SHA1 hash algorithm because it will become
    unavailable in FIPS mode (bsc#1240529)
  - Fix zypp.conf dupAllowVendorChange to reflect the correct
    default (false).
    The default was true in Code12 (libzypp-16.x) and changed to
    false with Code15 (libzypp-17.x). Unfortunately this was done by
    shipping a modified zypp.conf file rather than fixing the code.
  - zypp.conf: Add `lock_timeout` ($ZYPP_LOCK_TIMEOUT) (bsc#1239809)
  - Fix computation of RepStatus if Repo URLs change.
  - Fix lost double slash when appending to an absolute FTP url
    (bsc#1238315)
    Ftp actually differs between absolute and relative URL paths.
    Absolute path names begin with a double slash encoded as '/%2F'.
    This must be preserved when manipulating the path.
  - Add a transaction package preloader (fixes openSUSE/zypper#104)
    This patch adds a preloader that concurrently downloads files
    during a transaction commit. It's not yet enabled per default.
    To enable the preview set ZYPP_CURL2=1 and ZYPP_PCK_PRELOAD=1
    in the environment.
  - RpmPkgSigCheck_test: Exchange the test package signingkey
    (fixes #622)
  - Exclude MediaCurl tests if DISABLE_MEDIABACKEND_TESTS (fixes #626)
  - Strip a mediahandler tag from baseUrl querystrings.
  - Disable zypp.conf:download.use_deltarpm by default (fixes #620)
    Measurements show that you don't benefit from using deltarpms
    unless your network connection is very slow. That's why most
    distributions even stop offering deltarpms. The default remains
    unchanged on SUSE-15.6 and older.
  - Make sure repo variables are evaluated in the right context
    (bsc#1237044)
  - Introducing MediaCurl2 a alternative HTTP backend.
    This patch adds MediaCurl2 as a testbed for experimenting with a
    more simple way to download files. Set ZYPP_CURL2=1 in the
    environment to use it.
  - Filesystem usrmerge must not be done in singletrans mode
    (bsc#1236481, bsc#1189788)
    Commit will amend the backend in case the transaction would
    perform a filesystem usrmerge.
  - Workaround bsc#1216091 on Code16.
  - Don't issue deprecated warnings if -DNDEBUG is set (bsc#1236983)
    Released libyui packages compile with -Werror=deprecated-declarations
    so we can't add deprecated warnings without breaking them.
  - make gcc15 happy (fixes #613)
  - Drop zypp-CheckAccessDeleted in favor of 'zypper ps'.
  - Fix Repoverification plugin not being executed (fixes #614)
  - Refresh: Fetch the master index file before key and signature
    (bsc#1236820)
  - Allow libzypp to compile with C++20.
  - Deprecate RepoReports we do not trigger.
  - Create '.keep_packages' in the package cache dir to enforce
    keeping downloaded packages of all repos cahed there (bsc#1232458)
  - Fix missing UID checks in repomanager workflow (fixes #603)
  - Move cmake config files to LIB_INSTALL_DIR/cmake/Zypp (fixes #28)
  - Fix 'zypper ps' when running in incus container (bsc#1229106)
    Should apply to lxc and lxd containers as well.
  - Re-enable 'rpm --runposttrans' usage for chrooted systems
    (bsc#1216091)

zypper was updated to 1.14.92:

  - sh: Reset solver options after command (bsc#1245496)
  - Explicitly selecting DownloadAsNeeded also selects the
    classic_rpmtrans backend.
    Enhancements regarding mirror handling during repo refresh. Adapt
    to libzypp API changes. (bsc#1230267)
  - Use libzypp improvements for preload and mirror handling.
  - xmlout.rnc: Update repo-element (bsc#1241463)
    Add the "metalink" attribute and reflect that the "url" elements
    list may in fact be empty, if no baseurls are defined in the
    .repo files.
  - man: update --allow-unsigned-rpm description.
    Explain how to achieve the same for packages provided by
    repositories.
  - Updated translations (bsc#1230267)
  - Do not double encode URL strings passed on the commandline
    (bsc#1237587)
    URLs passed on the commandline must have their special chars
    encoded already. We just want to check and encode forgotten
    unsafe chars like a blank. A '%' however must not be encoded
    again.
  - Package preloader that concurrently downloads files. It's not yet
    enabled per default. To enable the preview set ZYPP_CURL2=1 and
    ZYPP_PCK_PRELOAD=1 in the environment. (#104)
  - refresh: add --include-all-archs (fixes #598)
    Future multi-arch repos may allow to download only those metadata
    which refer to packages actually compatible with the systems
    architecture. Some tools however want zypp to provide the full
    metadata of a repository without filtering incompatible
    architectures.
  - info,search: add option to search and list Enhances
    (bsc#1237949)
  - Annonunce --root in commands not launching a Target
    (bsc#1237044)
  - Let zypper dup fail in case of (temporarily) unaccessible repos
    (bsc#1228434, bsc#1236939, fixes #446)
  - New system-architecture command (bsc#1236384)
    Prints the detected system architecture.
  - Change versioncmp command to return exit code according to the
    comparison result (#593)
  - lr: show the repositories keep-packages flag (bsc#1232458)
    It is shown in the  details view or by using -k,--keep-packages.
    In addition libyzpp supports to enforce keeping downloaded
    packages of all repos within a package cache by creating a
    '.keep_packages' file there.
  - Try to refresh update repos first to have updated GPG keys on
    the fly (bsc#1234752)
    An update repo may contain a prolonged GPG key for the GA repo.
    Refreshing the update repo first updates a trusted key on the fly
    and avoids a 'key has expired' warning being issued when
    refreshing the GA repo.
  - Refresh: restore legacy behavior and suppress Exception
    reporting as non-root (bsc#1235636)
  - info: Allow to query a specific version (jsc#PED-11268)
    To query for a specific version simply append "-&lt;version&gt;" or
    "-&lt;version&gt;-&lt;release&gt;" to the "&lt;name&gt;" pattern. Note that the
    edition part must always match exactly.
  - Don't try to download missing raw metadata if cache is not
    writable (bsc#1225451)
  - man: Update 'search' command description.
    Hint to "se -v" showing the matches within the packages metadata.
    Explain that search strings starting with a "/" will implicitly
    look into the filelist as well. Otherfise an explicit "-f" is
    needed.
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.34" release="1.1" arch="src" src="src/libsolv-0.7.34-1.1.src.rpm">
          <filename>libsolv-0.7.34-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-debugsource" epoch="0" version="0.7.34" release="1.1" arch="x86_64" src="x86_64/libsolv-debugsource-0.7.34-1.1.x86_64.rpm">
          <filename>libsolv-debugsource-0.7.34-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.34" release="1.1" arch="x86_64" src="x86_64/libsolv-tools-base-0.7.34-1.1.x86_64.rpm">
          <filename>libsolv-tools-base-0.7.34-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base-debuginfo" epoch="0" version="0.7.34" release="1.1" arch="x86_64" src="x86_64/libsolv-tools-base-debuginfo-0.7.34-1.1.x86_64.rpm">
          <filename>libsolv-tools-base-debuginfo-0.7.34-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.37.10" release="1.1" arch="src" src="src/libzypp-17.37.10-1.1.src.rpm">
          <filename>libzypp-17.37.10-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.37.10" release="1.1" arch="x86_64" src="x86_64/libzypp-17.37.10-1.1.x86_64.rpm">
          <filename>libzypp-17.37.10-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp-debuginfo" epoch="0" version="17.37.10" release="1.1" arch="x86_64" src="x86_64/libzypp-debuginfo-17.37.10-1.1.x86_64.rpm">
          <filename>libzypp-debuginfo-17.37.10-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp-debugsource" epoch="0" version="17.37.10" release="1.1" arch="x86_64" src="x86_64/libzypp-debugsource-17.37.10-1.1.x86_64.rpm">
          <filename>libzypp-debugsource-17.37.10-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.92" release="1.1" arch="src" src="src/zypper-1.14.92-1.1.src.rpm">
          <filename>zypper-1.14.92-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.92" release="1.1" arch="x86_64" src="x86_64/zypper-1.14.92-1.1.x86_64.rpm">
          <filename>zypper-1.14.92-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-debuginfo" epoch="0" version="1.14.92" release="1.1" arch="x86_64" src="x86_64/zypper-debuginfo-1.14.92-1.1.x86_64.rpm">
          <filename>zypper-debuginfo-1.14.92-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-debugsource" epoch="0" version="1.14.92" release="1.1" arch="x86_64" src="x86_64/zypper-debugsource-1.14.92-1.1.x86_64.rpm">
          <filename>zypper-debugsource-1.14.92-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.92" release="1.1" arch="noarch" src="noarch/zypper-needs-restarting-1.14.92-1.1.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.92-1.1.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>392</id>
    <title>Security update 5.0.5 for Multi-Linux Manager Client Tools, Salt and Salt Bundle</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1753278472" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236877" id="1236877" title="rpm locks not working with Rocky Linux 8" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1238849" id="1238849" title="Unable to install SUMA 5.0 using an existing database" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1238929" id="1238929" title="After migration to SUMA 5.0 =&gt; clicking on Autoinstallation Profiles fails with Internal Server Error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240626" id="1240626" title="WebUI bootstrap fails with &quot;Server error&quot; after migration to 5.0.3" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240698" id="1240698" title="Migration fails with permissions: exec: &quot;restorecon&quot;: executable file not found" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242174" id="1242174" title="L3: &quot;mgradm support config&quot; not cleaning up host supportconfig generated in working directory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243105" id="1243105" title="CLM channels , activation keys missing after migration to SUMA 5.0.4" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243274" id="1243274" title="L3-Question: Migration fails on (52/188) 900-vacuum-analyze.sql.postgresql" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243297" id="1243297" title="mgradm support config failed" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243802" id="1243802" title="Autointsllation distributions are not migrated properly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236621" id="1236621" title="IP address in the webui is showing up as unknown" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243268" id="1243268" title="VUL-0: CVE-2025-47287: python-tornado,python-tornado6: denial-of-service via generation of an extremely high volume of logs due to multipart/form-data parser" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244561" id="1244561" title="VUL-0: CVE-2024-38822: salt: multiple methods in the salt master skip minion token validation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244564" id="1244564" title="VUL-0: CVE-2024-38823: salt: request server can be affected by replay attacks when not using a TLS encrypted transport" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244565" id="1244565" title="VUL-0: CVE-2024-38824: salt: directory traversal in recv_file method allows arbitrary files to be written to the master cache directory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244566" id="1244566" title="VUL-0: CVE-2024-38825: salt: the salt.auth.pki module does not properly authenticate callers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244567" id="1244567" title="VUL-0: CVE-2025-22240: salt: Path traversal in GitFS find_file()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244568" id="1244568" title="VUL-0: CVE-2025-22236: salt: attackers with access to a minion key can craft a message which may be able to execute a job on other minions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244570" id="1244570" title="VUL-0: CVE-2025-22241: salt: Path traversal in salt.utils.virt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244571" id="1244571" title="VUL-0: CVE-2025-22237: salt: access to a minion key allows for exploitation of the 'on demand' pillar functionality such that arbitrary commands cn be run on the master with the same privileges as the master process" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244572" id="1244572" title="VUL-0: CVE-2025-22238: salt: directory traversal in minion file cache creation can be leveraged to write or overwrite 'cache' files outside of the cache directory" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244574" id="1244574" title="VUL-0: CVE-2025-22239: salt: the master's &quot;_minion_event&quot; method can be used by and authorized minion to send arbitrary events onto the master's event bus" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244575" id="1244575" title="VUL-0: CVE-2025-22242: salt: worker process denial of service through file read operation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1238686" id="1238686" title="VUL-0: CVE-2025-22870: golang-github-prometheus-node_exporter,golang-github-prometheus-prometheus,golang-github-prometheus-alertmanager: golang.org/x/net/proxy,golang.org/x/net/http/httpproxy: proxy bypass using IPv6 zone IDs" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38822" id="CVE-2024-38822" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38822" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38823" id="CVE-2024-38823" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38823" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38824" id="CVE-2024-38824" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38824" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38825" id="CVE-2024-38825" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-38825" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22236" id="CVE-2025-22236" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22236" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22237" id="CVE-2025-22237" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22237" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22238" id="CVE-2025-22238" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22238" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22239" id="CVE-2025-22239" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22239" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22240" id="CVE-2025-22240" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22240" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22241" id="CVE-2025-22241" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22241" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22242" id="CVE-2025-22242" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22242" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47287" id="CVE-2025-47287" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47287" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22870" id="CVE-2025-22870" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22870" type="cve" />
      <reference href="https://jira.suse.com/browse/MSQA-993" id="MSQA-993" title="https://jira.suse.com/browse/MSQA-993" type="jira" />
    </references>
    <description>This update fixes the following issues:

golang-github-prometheus-node_exporter:

- Security issues fixed:
  
  - CVE-2025-22870: Prevent a matching of hosts against proxy patterns to improperly treat an IPv6 zone ID as a
    hostname component (bsc#1238686)

- Other bugs fixed:

  - Fixed Darwin memory leak
  - pressure: Fix missing IRQ on older kernels

salt, venv-salt-minion:

- Security issues fixed:
  
  - CVE-2024-38822: Fixed Minion token validation (bsc#1244561)
  - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#1244564)
  - CVE-2024-38824: Fixed directory traversal vulnerability in recv_file method (bsc#1244565)
  - CVE-2024-38825: Fixed salt.auth.pki module authentication issue (bsc#1244566)
  - CVE-2025-22240: Fixed arbitrary directory creation or file deletion with GitFS (bsc#1244567)
  - CVE-2025-22236: Fixed Minion event bus authorization bypass (bsc#1244568)
  - CVE-2025-22241: Fixed the use of un-validated input in the VirtKey class (bsc#1244570)
  - CVE-2025-22237: Fixed exploitation of the 'on demand' pillar functionality (bsc#1244571)
  - CVE-2025-22238: Fixed the master's default cache vulnerability to a directory traversal attack (bsc#1244572)
  - CVE-2025-22239: Fixed the arbitrary event injection on the Salt Master (bsc#1244574) 
  - CVE-2025-22242: Fixed a Denial of Service vulnerability through file read operation (bsc#1244575)
  - CVE-2025-47287: Fixed a Denial of Service vulnerability in Tornado logging behavior (bsc#1243268)

- Other bugs fixed:

  - Added subsystem filter to udev.exportdb (bsc#1236621)
  - Added `minion_legacy_req_warnings` option to avoid noisy warnings
  - Fixed Ubuntu 24.04 edge-case test failures
  - Fixed refresh of osrelease and related grains on Python 3.10+
  - Fixed issue requiring proper Python flavor for dependencies
  - Require M2Crypto version 0.44.0 or higher
  - venv-salt-minion: Fixed bundle path in pyvenv.cfg

uyuni-tools:
    
- Version 0.1.31-0:

  - Added the info message about End User License Agreement
  - Don't migrate py2*-compat-salt.conf files (bsc#1240626)
  - Check for restorecon before using it (bsc#1240698)
  - Adjust the distro path in cobbler files after migration
    (bsc#1238929)
  - Added mgradm support ptf podman --pullPolicy flag (bsc#1236877)
  - Support: don't dump files in bound folders (bsc#1243297)
  - Cleanup host supportconfig files (bsc#1242174)
  - During migration, check if backup already exists (bsc#1243105)
  - Removed SHM size limits from all containers (bsc#1243274)
  - Don't migrate /etc/apache2/vhosts.d/cobbler.conf
  - Fixed migration --prepare for autoinstallable distributions (bsc#1243802)
  - Skip instalation if the server is already set up (bsc#1238849)
  - Bumped the default image tag to 5.0.5

</description>
    <pkglist>
      <collection>
        <package name="salt" epoch="0" version="3006.0" release="13.1" arch="src" src="src/salt-3006.0-13.1.src.rpm">
          <filename>salt-3006.0-13.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="13.1" arch="x86_64" src="x86_64/salt-3006.0-13.1.x86_64.rpm">
          <filename>salt-3006.0-13.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-master" epoch="0" version="3006.0" release="13.1" arch="x86_64" src="x86_64/salt-master-3006.0-13.1.x86_64.rpm">
          <filename>salt-master-3006.0-13.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="13.1" arch="x86_64" src="x86_64/salt-minion-3006.0-13.1.x86_64.rpm">
          <filename>salt-minion-3006.0-13.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="13.1" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-13.1.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-13.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>378</id>
    <title>Security update for sudo</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1752152022" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245274" id="1245274" title="VUL-0: CVE-2025-32462: sudo: Local Privilege Escalation via host option" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245275" id="1245275" title="VUL-0: CVE-2025-32463: sudo: Local Privilege Escalation via chroot option" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32462" id="CVE-2025-32462" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32462" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32463" id="CVE-2025-32463" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32463" type="cve" />
    </references>
    <description>This update for sudo fixes the following issues:

- CVE-2025-32462: Fix a possible local privilege escalation via the --host option (bsc#1245274)
- CVE-2025-32463: Fix a possible local privilege Escalation via chroot option (bsc#1245275)
</description>
    <pkglist>
      <collection>
        <package name="sudo" epoch="0" version="1.9.15p5" release="2.1" arch="src" src="src/sudo-1.9.15p5-2.1.src.rpm">
          <filename>sudo-1.9.15p5-2.1.src.rpm</filename>
        </package>
        <package name="sudo" epoch="0" version="1.9.15p5" release="2.1" arch="x86_64" src="x86_64/sudo-1.9.15p5-2.1.x86_64.rpm">
          <filename>sudo-1.9.15p5-2.1.x86_64.rpm</filename>
        </package>
        <package name="sudo-debuginfo" epoch="0" version="1.9.15p5" release="2.1" arch="x86_64" src="x86_64/sudo-debuginfo-1.9.15p5-2.1.x86_64.rpm">
          <filename>sudo-debuginfo-1.9.15p5-2.1.x86_64.rpm</filename>
        </package>
        <package name="sudo-debugsource" epoch="0" version="1.9.15p5" release="2.1" arch="x86_64" src="x86_64/sudo-debugsource-1.9.15p5-2.1.x86_64.rpm">
          <filename>sudo-debugsource-1.9.15p5-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>419</id>
    <title>Security update for libssh</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1755163609" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245309" id="1245309" title="VUL-0: CVE-2025-4877: libssh: Write beyond bounds in binary to base64 conversion functions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245310" id="1245310" title="VUL-0: CVE-2025-4878: libssh: Use of uninitialized variable in privatekey_from_file()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245311" id="1245311" title="VUL-0: CVE-2025-5318: libssh: Likely read beyond bounds in sftp server handle management" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245312" id="1245312" title="VUL-0: CVE-2025-5351: libssh: Double free in functions exporting keys" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245314" id="1245314" title="VUL-0: CVE-2025-5372: libssh: ssh_kdf() returns a success code on certain failures" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245317" id="1245317" title="VUL-0: CVE-2025-5987: libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4877" id="CVE-2025-4877" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4877" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4878" id="CVE-2025-4878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4878" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5318" id="CVE-2025-5318" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5318" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5351" id="CVE-2025-5351" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5351" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5372" id="CVE-2025-5372" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5372" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5987" id="CVE-2025-5987" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5987" type="cve" />
    </references>
    <description>This update for libssh fixes the following issues:

- CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
- CVE-2025-5987: Invalid return code for chacha20 poly1305 with OpenSSL backend (bsc#1245317)
- CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
- CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
- CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
- CVE-2025-5351: Double free in functions exporting keys (bsc#1245312)

</description>
    <pkglist>
      <collection>
        <package name="libssh" epoch="0" version="0.10.6" release="2.1" arch="src" src="src/libssh-0.10.6-2.1.src.rpm">
          <filename>libssh-0.10.6-2.1.src.rpm</filename>
        </package>
        <package name="libssh-config" epoch="0" version="0.10.6" release="2.1" arch="x86_64" src="x86_64/libssh-config-0.10.6-2.1.x86_64.rpm">
          <filename>libssh-config-0.10.6-2.1.x86_64.rpm</filename>
        </package>
        <package name="libssh-debugsource" epoch="0" version="0.10.6" release="2.1" arch="x86_64" src="x86_64/libssh-debugsource-0.10.6-2.1.x86_64.rpm">
          <filename>libssh-debugsource-0.10.6-2.1.x86_64.rpm</filename>
        </package>
        <package name="libssh4" epoch="0" version="0.10.6" release="2.1" arch="x86_64" src="x86_64/libssh4-0.10.6-2.1.x86_64.rpm">
          <filename>libssh4-0.10.6-2.1.x86_64.rpm</filename>
        </package>
        <package name="libssh4-debuginfo" epoch="0" version="0.10.6" release="2.1" arch="x86_64" src="x86_64/libssh4-debuginfo-0.10.6-2.1.x86_64.rpm">
          <filename>libssh4-debuginfo-0.10.6-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>391</id>
    <title>Recommended update for pcr-oracle</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1753092603" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241957" id="1241957" title="SL Micro 6.0 Staging P fails after installing grub2 update (TPM based unlocking fails)" type="bugzilla" />
    </references>
    <description>This update for pcr-oracle fixes the following issues:

- Fixed pcr oracle handling for grub2 update (bsc#1241957)

</description>
    <pkglist>
      <collection>
        <package name="pcr-oracle" epoch="0" version="0.4.6" release="7.1" arch="src" src="src/pcr-oracle-0.4.6-7.1.src.rpm">
          <filename>pcr-oracle-0.4.6-7.1.src.rpm</filename>
        </package>
        <package name="pcr-oracle" epoch="0" version="0.4.6" release="7.1" arch="x86_64" src="x86_64/pcr-oracle-0.4.6-7.1.x86_64.rpm">
          <filename>pcr-oracle-0.4.6-7.1.x86_64.rpm</filename>
        </package>
        <package name="pcr-oracle-debuginfo" epoch="0" version="0.4.6" release="7.1" arch="x86_64" src="x86_64/pcr-oracle-debuginfo-0.4.6-7.1.x86_64.rpm">
          <filename>pcr-oracle-debuginfo-0.4.6-7.1.x86_64.rpm</filename>
        </package>
        <package name="pcr-oracle-debugsource" epoch="0" version="0.4.6" release="7.1" arch="x86_64" src="x86_64/pcr-oracle-debugsource-0.4.6-7.1.x86_64.rpm">
          <filename>pcr-oracle-debugsource-0.4.6-7.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>388</id>
    <title>Recommended update for rpm</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1753088489" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216091" id="1216091" title="openQA failures with the update of zypper to 1.14.65 and libzypp  to 17.31.21" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218459" id="1218459" title="rpm scriptlets left over after snapshot updates" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241052" id="1241052" title="rpm: memory leak in function strtolocale()" type="bugzilla" />
    </references>
    <description>This update for rpm fixes the following issues:

- fix --runposttrans not working correctly with the --root
  option [bsc#1216091]

  * added "rpm_fixed_runposttrans" provides for libzypp

- print scriptlet messages in --runposttrans
  * needed to fix leaking tmp files [bsc#1218459]

- fix memory leak in str2locale [bsc#1241052]

</description>
    <pkglist>
      <collection>
        <package name="librpmbuild9" epoch="0" version="4.18.0" release="7.1" arch="x86_64" src="x86_64/librpmbuild9-4.18.0-7.1.x86_64.rpm">
          <filename>librpmbuild9-4.18.0-7.1.x86_64.rpm</filename>
        </package>
        <package name="librpmbuild9-debuginfo" epoch="0" version="4.18.0" release="7.1" arch="x86_64" src="x86_64/librpmbuild9-debuginfo-4.18.0-7.1.x86_64.rpm">
          <filename>librpmbuild9-debuginfo-4.18.0-7.1.x86_64.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.18.0" release="7.1" arch="src" src="src/rpm-4.18.0-7.1.src.rpm">
          <filename>rpm-4.18.0-7.1.src.rpm</filename>
        </package>
        <package name="rpm" epoch="0" version="4.18.0" release="7.1" arch="x86_64" src="x86_64/rpm-4.18.0-7.1.x86_64.rpm">
          <filename>rpm-4.18.0-7.1.x86_64.rpm</filename>
        </package>
        <package name="rpm-debuginfo" epoch="0" version="4.18.0" release="7.1" arch="x86_64" src="x86_64/rpm-debuginfo-4.18.0-7.1.x86_64.rpm">
          <filename>rpm-debuginfo-4.18.0-7.1.x86_64.rpm</filename>
        </package>
        <package name="rpm-debugsource" epoch="0" version="4.18.0" release="7.1" arch="x86_64" src="x86_64/rpm-debugsource-4.18.0-7.1.x86_64.rpm">
          <filename>rpm-debugsource-4.18.0-7.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>420</id>
    <title>Security update for python-urllib3</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1755163609" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244925" id="1244925" title="VUL-0: CVE-2025-50181: python-urllib3: Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects." type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50181" id="CVE-2025-50181" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-50181" type="cve" />
    </references>
    <description>This update for python-urllib3 fixes the following issues:

- CVE-2025-50181: * Pool managers now properly control redirects when retries is passed (GHSA-pq67-6m6q-mj2v, bsc#1244925)

</description>
    <pkglist>
      <collection>
        <package name="python-urllib3" epoch="0" version="2.1.0" release="3.1" arch="src" src="src/python-urllib3-2.1.0-3.1.src.rpm">
          <filename>python-urllib3-2.1.0-3.1.src.rpm</filename>
        </package>
        <package name="python311-urllib3" epoch="0" version="2.1.0" release="3.1" arch="noarch" src="noarch/python311-urllib3-2.1.0-3.1.noarch.rpm">
          <filename>python311-urllib3-2.1.0-3.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>401</id>
    <title>Security update for pam-config</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1753799300" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243226" id="1243226" title="VUL-0: CVE-2025-6018: pam: LPE from unprivileged to allow_active in *SUSE 15's PAM" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6018" id="CVE-2025-6018" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6018" type="cve" />
    </references>
    <description>This update for pam-config fixes the following issues:

- CVE-2025-6018: Stop adding pam_env in AUTH stack, and be sure to put this module at the
  really end of the SESSION stack. (bsc#1243226)
</description>
    <pkglist>
      <collection>
        <package name="pam-config" epoch="0" version="2.11" release="2.1" arch="src" src="src/pam-config-2.11-2.1.src.rpm">
          <filename>pam-config-2.11-2.1.src.rpm</filename>
        </package>
        <package name="pam-config" epoch="0" version="2.11" release="2.1" arch="x86_64" src="x86_64/pam-config-2.11-2.1.x86_64.rpm">
          <filename>pam-config-2.11-2.1.x86_64.rpm</filename>
        </package>
        <package name="pam-config-debuginfo" epoch="0" version="2.11" release="2.1" arch="x86_64" src="x86_64/pam-config-debuginfo-2.11-2.1.x86_64.rpm">
          <filename>pam-config-debuginfo-2.11-2.1.x86_64.rpm</filename>
        </package>
        <package name="pam-config-debugsource" epoch="0" version="2.11" release="2.1" arch="x86_64" src="x86_64/pam-config-debugsource-2.11-2.1.x86_64.rpm">
          <filename>pam-config-debugsource-2.11-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>418</id>
    <title>Security update for libxslt</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1755163260" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246360" id="1246360" title="VUL-0: CVE-2025-7424: libxslt: Type confusion in xmlNode.psvi between stylesheet and source nodes" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7424" id="CVE-2025-7424" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7424" type="cve" />
    </references>
    <description>This update for libxslt fixes the following issues:

- CVE-2025-7424: Fixed type confusion in xmlNode.psvi between 
  stylesheet and source nodes (bsc#1246360)
</description>
    <pkglist>
      <collection>
        <package name="libexslt0" epoch="0" version="1.1.38" release="6.1" arch="x86_64" src="x86_64/libexslt0-1.1.38-6.1.x86_64.rpm">
          <filename>libexslt0-1.1.38-6.1.x86_64.rpm</filename>
        </package>
        <package name="libexslt0-debuginfo" epoch="0" version="1.1.38" release="6.1" arch="x86_64" src="x86_64/libexslt0-debuginfo-1.1.38-6.1.x86_64.rpm">
          <filename>libexslt0-debuginfo-1.1.38-6.1.x86_64.rpm</filename>
        </package>
        <package name="libxslt" epoch="0" version="1.1.38" release="6.1" arch="src" src="src/libxslt-1.1.38-6.1.src.rpm">
          <filename>libxslt-1.1.38-6.1.src.rpm</filename>
        </package>
        <package name="libxslt-debugsource" epoch="0" version="1.1.38" release="6.1" arch="x86_64" src="x86_64/libxslt-debugsource-1.1.38-6.1.x86_64.rpm">
          <filename>libxslt-debugsource-1.1.38-6.1.x86_64.rpm</filename>
        </package>
        <package name="libxslt1" epoch="0" version="1.1.38" release="6.1" arch="x86_64" src="x86_64/libxslt1-1.1.38-6.1.x86_64.rpm">
          <filename>libxslt1-1.1.38-6.1.x86_64.rpm</filename>
        </package>
        <package name="libxslt1-debuginfo" epoch="0" version="1.1.38" release="6.1" arch="x86_64" src="x86_64/libxslt1-debuginfo-1.1.38-6.1.x86_64.rpm">
          <filename>libxslt1-debuginfo-1.1.38-6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>424</id>
    <title>Security update for dpkg</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1755690200" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245573" id="1245573" title="VUL-0: CVE-2025-6297: dpkg: improper sanitization of directory permissions when extracting a control member into a temporary directory can lead to DoS via disk quota exhaustion due to files left behind on cleanup" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6297" id="CVE-2025-6297" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6297" type="cve" />
    </references>
    <description>This update for dpkg fixes the following issues:

- CVE-2025-6297: Fixed improper sanitization of directory permissions leading to
  DoS via disk quota exhaustion due to files left behind on cleanup (bsc#1245573)
</description>
    <pkglist>
      <collection>
        <package name="update-alternatives" epoch="0" version="1.22.0" release="2.1" arch="src" src="src/update-alternatives-1.22.0-2.1.src.rpm">
          <filename>update-alternatives-1.22.0-2.1.src.rpm</filename>
        </package>
        <package name="update-alternatives" epoch="0" version="1.22.0" release="2.1" arch="x86_64" src="x86_64/update-alternatives-1.22.0-2.1.x86_64.rpm">
          <filename>update-alternatives-1.22.0-2.1.x86_64.rpm</filename>
        </package>
        <package name="update-alternatives-debuginfo" epoch="0" version="1.22.0" release="2.1" arch="x86_64" src="x86_64/update-alternatives-debuginfo-1.22.0-2.1.x86_64.rpm">
          <filename>update-alternatives-debuginfo-1.22.0-2.1.x86_64.rpm</filename>
        </package>
        <package name="update-alternatives-debugsource" epoch="0" version="1.22.0" release="2.1" arch="x86_64" src="x86_64/update-alternatives-debugsource-1.22.0-2.1.x86_64.rpm">
          <filename>update-alternatives-debugsource-1.22.0-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>425</id>
    <title>Security update for polkit</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1755689670" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246472" id="1246472" title="VUL-0: CVE-2025-7519: polkit: XML policy file with a large number of nested elements may lead to out-of-bounds write" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7519" id="CVE-2025-7519" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7519" type="cve" />
    </references>
    <description>This update for polkit fixes the following issues:

- CVE-2025-7519: Fixed that a XML policy file with a large number of
  nested elements may lead to out-of-bounds write (bsc#1246472)
</description>
    <pkglist>
      <collection>
        <package name="libpolkit-agent-1-0" epoch="0" version="121" release="3.1" arch="x86_64" src="x86_64/libpolkit-agent-1-0-121-3.1.x86_64.rpm">
          <filename>libpolkit-agent-1-0-121-3.1.x86_64.rpm</filename>
        </package>
        <package name="libpolkit-agent-1-0-debuginfo" epoch="0" version="121" release="3.1" arch="x86_64" src="x86_64/libpolkit-agent-1-0-debuginfo-121-3.1.x86_64.rpm">
          <filename>libpolkit-agent-1-0-debuginfo-121-3.1.x86_64.rpm</filename>
        </package>
        <package name="libpolkit-gobject-1-0" epoch="0" version="121" release="3.1" arch="x86_64" src="x86_64/libpolkit-gobject-1-0-121-3.1.x86_64.rpm">
          <filename>libpolkit-gobject-1-0-121-3.1.x86_64.rpm</filename>
        </package>
        <package name="libpolkit-gobject-1-0-debuginfo" epoch="0" version="121" release="3.1" arch="x86_64" src="x86_64/libpolkit-gobject-1-0-debuginfo-121-3.1.x86_64.rpm">
          <filename>libpolkit-gobject-1-0-debuginfo-121-3.1.x86_64.rpm</filename>
        </package>
        <package name="polkit" epoch="0" version="121" release="3.1" arch="src" src="src/polkit-121-3.1.src.rpm">
          <filename>polkit-121-3.1.src.rpm</filename>
        </package>
        <package name="polkit" epoch="0" version="121" release="3.1" arch="x86_64" src="x86_64/polkit-121-3.1.x86_64.rpm">
          <filename>polkit-121-3.1.x86_64.rpm</filename>
        </package>
        <package name="polkit-debuginfo" epoch="0" version="121" release="3.1" arch="x86_64" src="x86_64/polkit-debuginfo-121-3.1.x86_64.rpm">
          <filename>polkit-debuginfo-121-3.1.x86_64.rpm</filename>
        </package>
        <package name="polkit-debugsource" epoch="0" version="121" release="3.1" arch="x86_64" src="x86_64/polkit-debugsource-121-3.1.x86_64.rpm">
          <filename>polkit-debugsource-121-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>398</id>
    <title>Security update for docker</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1753713151" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240150" id="1240150" title="rootless docker fails on SLES" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241830" id="1241830" title="VUL-0: CVE-2025-22872: docker-stable,docker-compose,docker: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242114" id="1242114" title="[trackerbug] docker 28.1.1 update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243833" id="1243833" title="[trackerbug] docker 28.2.1 update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244035" id="1244035" title="docker 27.5.1_ce-slfo.1.1_1.1 -&gt; 27.5.1_ce-slfo.1.1_2.1 fails to start existing containers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246556" id="1246556" title="L3: Bugzilla request - PTF or newer package version release - docker version 28.2.2" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22872" id="CVE-2025-22872" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22872" type="cve" />
    </references>
    <description>This update for docker fixes the following issues:

- Update to Go 1.24 for builds, to match upstream.

- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;

- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;

- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556

- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;

- CVE-2025-22872: golang.org/x/net/html: Fixed incorrectly interpreted tags 
  causing content to be placed wrong scope during DOM construction (bsc#1241830)  

- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150

- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.

  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
</description>
    <message>"Updating docker will restart the docker service, which may stop your docker containers. Do you want to proceed with the update?"</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="28.3.2_ce" release="5.1" arch="src" src="src/docker-28.3.2_ce-5.1.src.rpm">
          <filename>docker-28.3.2_ce-5.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="28.3.2_ce" release="5.1" arch="x86_64" src="x86_64/docker-28.3.2_ce-5.1.x86_64.rpm">
          <filename>docker-28.3.2_ce-5.1.x86_64.rpm</filename>
        </package>
        <package name="docker-debuginfo" epoch="0" version="28.3.2_ce" release="5.1" arch="x86_64" src="x86_64/docker-debuginfo-28.3.2_ce-5.1.x86_64.rpm">
          <filename>docker-debuginfo-28.3.2_ce-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>400</id>
    <title>Recommended update for python-kiwi</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1753777371" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242987" id="1242987" title="L3: Systems boot to Emergency Mode on first reboot using qcow2 or vmdk images." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244668" id="1244668" title="Minimal-VM kvm-encrypt images failed to build" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245190" id="1245190" title="kiwi-repart fails in GCE with confidential compute enabled" type="bugzilla" />
    </references>
    <description>This update for python-kiwi fixes the following issues:

Bump version: 10.2.28 → 10.2.29:

- Fix return from repart stage

  If we return from the repart stage it's important to wait
  for the root device to appear. This is because the device
  setup from udev might still be held back due to a former
  lock on the device. This means if we return fast after
  locking for example when check_repart_possible() quickly
  finds out that it's not possible, then udev has not yet
  got the time to create the device nodes.
  This Fixes #2863

- Bump version: 10.2.27 → 10.2.28

- Fix dracut code to be POSIX compliant

  The redirect type "&lt; &lt;(...)" is not POSIX complians and leads
  to a syntax error in dracut which calls bash as "sh" leading
  it to be restricted to POSIX only

- Extend test-image-lvm integration test

  For testing a bit more complex resize procedure, update
  the lvm integration test to run more resize actions
  with required device locking

- Apply proper udev locking

  Several commands during repart, resize and other actions
  require a proper lock to be set for udev such that other
  events knows about the locked state of a device and do
  not mess with it until the command for which the lock
  persists has completed. This commit applies proper udev
  locks to all commands that requires it. In addition
  incorrect code that was expected to prevent such race
  conditions got dropped from the implementation.
  This is related to bsc#1242987

- relocate GPT at the end of disk using sfdisk

  Using sfdisk for relocation and verification makes this
  part more consistent. We also want to move away from gdisk.
  This is related to #2851

- Do not strictly require config.partids in repart

  The kiwi-repart implementation requires a metadata file
  named config.partids which holds information about
  partition ids and more stored at the time the image was
  built. Depending on the complexity of the image and the
  resize request some of the information can be rebuilt
  in case the metadata file is missing. This commit adds
  the rebuild of the minimum required information to run
  a standard resize and therefore allows the kiwi-repart
  dracut module to work also without config.partids to be
  present in the system

- Do not drop /config.partids

  The partition id metadata file is used in the kiwi-repart
  module. If a user wants to use the kiwi repart module
  permanently, this metadata file needs to stay in the system.
  Therefore it should not be automatically deleted by the
  cleanup. A disk.sh hook script can be used to force the
  deletion of the file though. This is related #2851

- Fix centos/test-image-live-disk-v10

  There is no package named iprutils

- Fix centos/test-image-live-disk-v10

  Update package names

- Added centos/test-image-live-disk-v10 build test

- Fix tumbleweed/test-image-gce integration test

  Drop obsolete growpart

- Followup fix to support older apt versions for bootstrap

  There are apt versions that do not create missing state files.
  Make sure the intermediate bootstrap state file is created in
  any case. This Fixes #2857

- Fixed integration test builds

  Next round of fixes for integration tests. Missing
  or wrong service activations

- Fix arm/tumbleweed/test-image-rpi

  Fix snapper setup for this integration test

- Fixed test-image-live-disk

  Added missing openssh-server package

- Fixed test-image-azure

  Add missing python-azure-agent-config-default package

- Fixed debian integration test builds

  secure shell service is named ssh and not sshd there

- Fixed integration test builds

  Second round of fixes for integration tests. Again errors
  now became visible due to the refactoring of the script code

- Fixed integration test builds

  Errors from scripts were no longer ignored due to the last
  cleanup of the integration test script code. This commit
  fixes the now exposed build errors

- Fix check_target_dir_on_unsupported_filesystem

  Find the first existing path in the target path and
  check the filesystem capabilities for this path.
  This Fixes #2858

- Cleanup integration tests config.sh script code

  Add script code to shellcheck and fix all reported issues.
  Get rid of suseXX and baseXX methods as much as possible.
  Add set -ex for all script code. Do not allow any script
  code to fail.

- defaults: Add patterns for shim/grub2 on riscv64

  A recent commit changed the way these are looked up and
  accidentally broke image building on riscv64, with

  KiwiBootLoaderGrubSecureBootError: Signed grub2 efi loader not found

  now being raised for kiwi recipes that worked just fine
  before that moment.

- Add SLFO test-image-disk-simple integration test

  Add simple disk test and allow for testing the new
  transparent container idea for the aws toolchain. also
  add SLFO builds to the helper script

- Fixed check for unallocated space on disk

  So far the check for unallocated space was only working for GPT
  and there it was also not really stable. The check was based on
  verifying if the backup GPT table is really at the end of the
  disk. Depending on which tool was used to dump the image on the
  target this "mistake" often got corrected by the tools that
  dumped the image. In this case the check no longer worked.
  This commit improves the check by another test which looks
  for the real free bytes on disk compared to the current
  partition geometry.

- Move to neutral directory for calling osc

  When calling the helper/build_status.sh script to get an
  overview about the results of the integration tests, there
  is a stupid new behavior from the osc tool that it assumes
  a package name according to the name of the directory you
  are in probably connected to the fact that the data in this
  directory is a git checkout or some other strange assumption.
  This commit moves to a neutral directory where none of the
  osc internal assumptions applies and it just does what it
  should do... showing results of the given project.

- Bump version: 10.2.26 → 10.2.27

- Fix regression in get_partition_node_name

  backwards compat for lsblk before 2.38
  if START column not supported, fall back to default sort

- Add global option --setenv

  Allow to set environment variables in the caller environment
  via the commandline, e.g --setenv SOURCE_DATE_EPOCH=42

- Seed filesystem UUIDs with SOURCE_DATE_EPOCH

  For reproducible builds the calculation of the filesystem UUID
  should be persistent with each rebuild of the image. To achieve
  this the UUID is calculated using the SOURCE_DATE_EPOCH from
  the environment plus a char-number representation of the filesystem
  label name as random seed. In kiwi every filesystem is created
  with a label, thus only in case there is no SOURCE_DATE_EPOCH
  available we continue to create the UUID as random data.
  This Fixes #2761

- Add label attribute for &lt;partition&gt; section

  Allow to specify a filesystem label as part of a &lt;partition&gt;
  definition. So far the label was set by the name of the
  partition. With the new label attribute, a filesystem label
  different from the partition name can be set. This commit
  also updates/fixes the documentation in this regard.

- Improve log message in SystemIdentifier

  Add some scope information such that we know from where
  this log information originates from.

- Add rd.kiwi.install.devicepersistency

  Allow to specify which type of persistent device name should
  be used to build up the list of installation disk devices.
  For example rd.kiwi.install.devicepersistency=by-path would
  use the by-path representations for the available disk
  devices. The default (by-id) stays untouched. In case an
  invalid or not present device representation is selected, kiwi
  falls back to the non persistent unix node names.

- Update test-image-disk

  Add NetworkManager for better remote debugging capabilities

- Make mbr-id deterministic

  Log the value of SDE so it is available to review,
  even if the build system does not tell about it.

  Update the tests to cover the new code-path.

- Ensure dracut initrd is reproducible

  This helps a bit with issue #2358

  Add reproducible flag for UKI too

  Update tests accordingly

- Bump version: 10.2.25 → 10.2.26

- Add kernel parameter support for dm-verity options

  Implement rd.kiwi.verity_options= parameter to allow runtime customization of veritysetup options

- Fix shim lookup for arm on SUSE

  Add missing search path for shim binary on arm based SUSE
  systems. Also update the tumbleweed/test-image-live-disk
  integration test for arm to build with secure boot enabled
  to actually test a secure boot enabled ISO build.
  This Fixes #2842

- Add container_import template test

- Fixed get_partition_node_name

  The function get_partition_node_name takes the disk device
  and the partition index as arguments to match against the
  respective device node for this partition index. The partition
  index is the position of the partition in the partition table
  according to their start offset. For the code to function
  properly it is required that the list of partitions provided
  by lsblk is ordered according to the start address of the
  partitions in the table. The way lsblk was called did not
  enforce this ordering. This commit enforces the order to
  be done against the start offset and fixes bsc#1245190

- Add support for container-snap as a container-image engine

  With this commit, we can now pre-load images using container-snap directly
  during the kiwi image build

- Update test-image-MicroOS for local build

  Fix bootstrap setup such that micro-os patterns can resolve

- Fix logging of stderr data in command calls

  The stderr data was presented as one blob without line
  breaks. Hard to read and smells like a bug. This commit
  fixes the output to become readable

- Update test-image-MicroOS/disk.sh

  Add a findmnt for / to check if there is a proper root
  device reference

- Fix mount system for root_is_snapper_snapshot

  If root is a snapper snapshot we have to tell the
  chroot a proper root mount point which can be achieved
  by a bind mount pointing to itself. This Fixes
  bsc#1244668

- There is no shim for aarch64 on SUSE

  Fix integration test for standard EFI (no secure boot)
  setup on arm

- Add driver configuration support for dracut initrd

  Add driver configuration support for dracut initrd

  Add support for specifying kernel drivers to be included or omitted
  in the dracut initrd configuration. This extends the existing dracut
  configuration capabilities like in the following example

  &lt;initrd action="add"&gt;
  &lt;dracut driver="erofs"/&gt;
  &lt;/initrd&gt;

- Fixed rootfs size calculation with spare part

  In case a spare_part setup is combined with the root_clone feature,
  the size calculation for the rootfs did not take the cloning into
  account and lead to the wrong value. In addition when requesting
  the spare part to be last and no size information was given, the
  partition was not created at all. This commit fixes both defects
  and Fixes #2831

- Add dependency for isomd5sum for iso images and set in kiwi-settings

  This ensures that isomd5sum is pulled into the environment for ISO image
  builds, and the updated settings makes it so that kiwi boxes will use it.

- Allow /boot to be a btrfs subvolume

  In a btrfs based design, allow to put /boot as subvolume.
  This required a small fix in the mount order in a way that
  boot/efi gets mounted after the subvolume mounts are done.
  The respective integration test has been updated to test
  this functionality. This Fixes #2824

- Use f-strings where feasible

  This is a slightly shorter and easier to read syntax

- Allow multiple EFI arch binaries/modules

  Allow to lookup and included EFI binaries/modules for
  multiple architectures. For testing the integration
  test in rawhide/test-image-live-disk has been adapted
  accordingly to install 32bit and 64bit EFI binaries.
  This Fixes #2822

- Log warning message for disabled runtime checks

  Complete type hints for RuntimeConfig class and log
  a warning message for each disabled runtime check

- Fix static type argument int vs. str

- Move it inside the context that actually uses it

  also rename it to "supported" as that seems to closer match
  what it resembles

- Add overlayfs as supporting xattr/ACLs as well

- Fix disk_type validation for zipl loader

  If the targettype is set to GPT in combination with plain
  zipl as loader, the code to validate the targettype against
  the targetgeometry was not effective and zipl failed.
  This Fixes #2821

- Fixup overlay unit enablement

- Fixup overlay mount dependencies

- Update test-image-overlayroot integration test

  Use proper systemd mount units to setup the custom overlay.
  The handling of fstab entries by systemd is limited and
  should be better handled by self managed mount units

- Use proper mount units for overlay setup

  Instead of manual mounting create a proper systemd mount
  unit. This allows to manage mount dependencies and the order
  of nested mounts in a clean way

- Cleanup build metadata

  Make sure the final image rootfs does not contain unneeded
  metadata files used during build time. The respective cleanup
  call is performed after the root sync and after all initrd/boot
  processing has been done. This is because up to that point it's
  still possible that the information is required. This means
  when building images with a read-only rootfs, it might not be
  possible that the metadata can be deleted due to a chicken&amp;egg
  situation. Furthermore the cleanup is applied to the disk
  builder only as other builders do not really suffer from
  this data and for the container builder the metadata can
  also be used for the stackbuild feature when building images
  derived from containers. This Fixes #2668

- Update overlay integration test for partial write

  Update the sdboot_uki_verity_erofs profile of the
  test-image-overlayroot integration test with a custom
  fstab example to overlay only parts of the system
  for writing. This Fixes #2815

- bootloader setup without overlay write partition

  If overlayroot_write_partition="false" is set, no system
  indicator was stored. This cause the bootloader setup to
  be skipped completely which is not required for e.g.
  systemd-boot.

- Make sure to create overlay directories

  Create overlay directories even if rd.root.overlay.readonly
  is set. This allows individual fstab overlays mounts to be
  performed

- Fixed rd.root.overlay.readonly overlay mode

  When booting an overlayroot image with rd.root.overlay.readonly
  set, the system will boot with only the read-only root mounted.
  There was a bug in the dracut code which prevented this mount
  from succeeding when the read-only rootfs is different from
  squashfs. This commit changes the mount to be a simple bind
  mount, independent of the origin filesystem. This works because
  the read-only mount is performed in the dracut overlay code
  anyway. This is related to Issue #2815

- The way we build debs requires setuptools

  debbuild doesn't work when setuptools is not there

- Drop use of setuptools

  Since we moved to poetry and no code using setuptools anymore,
  this requirement can be dropped. The commit also updates the
  plugin documentation which was still based on setup.py

- Update live boot remote boot features

  Like the upstream module also support the root=live:http://...
  remote boot options. The kiwi-live dracut module is scheduled
  to become obsolete, but it's still in use and should support
  remote boot not only for AoE. As we got more issue reports than
  working AoE remote boot success, this commit also updates the
  documentation and switches to the capabilities of this PR.

- Add UKI support for the grub bootloader

  In addition to systemd_boot also add support for UKI creation
  when grub is used. This includes the creation of a UKI image
  via dracut in the same way as it's done for systemd_boot.
  In addition an earlyboot grub script chainloads the UKI and
  bypasses any written grub configuration. In Theory this should
  also allow to use the shim loader for chainloading an UKI.
  However I haven't done testing in this direction and I also
  expect security issues with this approach because loading
  any non signed data by shim is not expected to work. A new
  profile named grub_uki_verity_erofs has been added to the
  integration test that experiments with UKIs

- Add support for &lt;initrd&gt; section as part of &lt;type&gt;

  Extend scope and content of the &lt;initrd&gt; section to be allowed
  as part of the &lt;type&gt; section. This allows to specify custom
  call options and modules for the dracut tool. In particular
  this commit implementes support for passing the uefi option
  to dracut to enable building an UKI EFI binary as follows:

  &lt;initrd action="setup"&gt;
  &lt;dracut uefi="true"/&gt;
  &lt;/initrd&gt;

  This Fixes #2809 and Fixes #2408

- Fix systemd-boot loader setup

  To make sure only loader entries from /boot/efi/loader/entries
  kiwi deleted eventually existing entry files from /boot/loader.
  However that is a problem for read-only systems and should actually
  also not performed by kiwi. This Fixes #2805

</description>
    <pkglist>
      <collection>
        <package name="dracut-kiwi-lib" epoch="0" version="10.2.29" release="1.1" arch="x86_64" src="x86_64/dracut-kiwi-lib-10.2.29-1.1.x86_64.rpm">
          <filename>dracut-kiwi-lib-10.2.29-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-dump" epoch="0" version="10.2.29" release="1.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-dump-10.2.29-1.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-dump-10.2.29-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-kiwi-oem-repart" epoch="0" version="10.2.29" release="1.1" arch="x86_64" src="x86_64/dracut-kiwi-oem-repart-10.2.29-1.1.x86_64.rpm">
          <filename>dracut-kiwi-oem-repart-10.2.29-1.1.x86_64.rpm</filename>
        </package>
        <package name="python-kiwi" epoch="0" version="10.2.29" release="1.1" arch="src" src="src/python-kiwi-10.2.29-1.1.src.rpm">
          <filename>python-kiwi-10.2.29-1.1.src.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>426</id>
    <title>Security update for gnutls</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1755690558" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246232" id="1246232" title="VUL-0: CVE-2025-32988: gnutls: double-free due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246233" id="1246233" title="VUL-0: CVE-2025-32989: gnutls: heap buffer overread when handling the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246267" id="1246267" title="VUL-0: CVE-2025-32990: gnutls: 1-byte heap buffer overflow when parsing templates with certtool" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246299" id="1246299" title="VUL-0: CVE-2025-6395: gnutls: NULL pointer dereference when 2nd Client Hello omits PSK" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6395" id="CVE-2025-6395" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6395" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32988" id="CVE-2025-32988" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32988" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32989" id="CVE-2025-32989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32989" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32990" id="CVE-2025-32990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32990" type="cve" />
    </references>
    <description>This update for gnutls fixes the following issues:

- CVE-2025-32988: Fixed double-free due to incorrect ownership handling (bsc#1246232)
- CVE-2025-32989: Fixed heap buffer overread during X.509 certificate parsing (bsc#1246233)
- CVE-2025-32990: Fixed 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267)
- CVE-2025-6395: Fixed NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299)
</description>
    <pkglist>
      <collection>
        <package name="gnutls" epoch="0" version="3.8.3" release="4.1" arch="src" src="src/gnutls-3.8.3-4.1.src.rpm">
          <filename>gnutls-3.8.3-4.1.src.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.8.3" release="4.1" arch="x86_64" src="x86_64/gnutls-3.8.3-4.1.x86_64.rpm">
          <filename>gnutls-3.8.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls-debuginfo" epoch="0" version="3.8.3" release="4.1" arch="x86_64" src="x86_64/gnutls-debuginfo-3.8.3-4.1.x86_64.rpm">
          <filename>gnutls-debuginfo-3.8.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls-debugsource" epoch="0" version="3.8.3" release="4.1" arch="x86_64" src="x86_64/gnutls-debugsource-3.8.3-4.1.x86_64.rpm">
          <filename>gnutls-debugsource-3.8.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.8.3" release="4.1" arch="x86_64" src="x86_64/libgnutls30-3.8.3-4.1.x86_64.rpm">
          <filename>libgnutls30-3.8.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30-debuginfo" epoch="0" version="3.8.3" release="4.1" arch="x86_64" src="x86_64/libgnutls30-debuginfo-3.8.3-4.1.x86_64.rpm">
          <filename>libgnutls30-debuginfo-3.8.3-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>408</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1754373434" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1158664" id="1158664" title="urlresolver plugin exists with traceback when no current update server target is in the server cache" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245305" id="1245305" title="instance-flavour-check script returns BYOS instead of PAYG because Google is unreachable" type="bugzilla" />
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- Fix issue with picking up configured server names from the regionsrv config file.
  Previously only IP addresses were collected
- Update scriptlet for package uninstall to avoid issues in the build service
- Use region server IP addresses to determine Internet access rather than a generic address.
  Region server IP addresses may not be blocked in the network construct. (bsc#1245305)
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.5.1" release="6.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.5.1-6.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.5.1-6.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.5.1" release="6.1" arch="src" src="src/cloud-regionsrv-client-10.5.1-6.1.src.rpm">
          <filename>cloud-regionsrv-client-10.5.1-6.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="6.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-6.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-6.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="6.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-6.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-6.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.5" release="6.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.5-6.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.5-6.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="6.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-6.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-6.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>427</id>
    <title>Security update for libarchive</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1755689791" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244270" id="1244270" title="VUL-0: CVE-2025-5916: libarchive: libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244272" id="1244272" title="VUL-0: CVE-2025-5914: libarchive: libarchive: double free due to an integer overflow in the archive_read_format_rar_seek_data() function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244273" id="1244273" title="VUL-0: CVE-2025-5915: libarchive: libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244279" id="1244279" title="VUL-0: CVE-2025-5918: libarchive: libarchive: Reading past EOF may be triggered for piped file streams" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244336" id="1244336" title="VUL-0: CVE-2025-5917: libarchive: libarchive: Off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5914" id="CVE-2025-5914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5914" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5915" id="CVE-2025-5915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5915" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5916" id="CVE-2025-5916" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5916" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5917" id="CVE-2025-5917" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5917" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5918" id="CVE-2025-5918" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5918" type="cve" />
    </references>
    <description>This update for libarchive fixes the following issues:

- CVE-2025-5914: Fixed double free due to an integer overflow in 
  the archive_read_format_rar_seek_data() function (bsc#1244272)
- CVE-2025-5915: Fixed heap buffer over read in copy_from_lzss_window() 
  at archive_read_support_format_rar.c (bsc#1244273)
- CVE-2025-5916: Fixed integer overflow while reading warc files at 
  archive_read_support_format_warc.c (bsc#1244270)
- CVE-2025-5917: Fixed off by one error in build_ustar_entry_name() 
  at archive_write_set_format_pax.c (bsc#1244336)
- CVE-2025-5918: Fixed past EOF read triggered for piped file 
  streams (bsc#1244279)
</description>
    <pkglist>
      <collection>
        <package name="libarchive" epoch="0" version="3.6.2" release="5.1" arch="src" src="src/libarchive-3.6.2-5.1.src.rpm">
          <filename>libarchive-3.6.2-5.1.src.rpm</filename>
        </package>
        <package name="libarchive-debugsource" epoch="0" version="3.6.2" release="5.1" arch="x86_64" src="x86_64/libarchive-debugsource-3.6.2-5.1.x86_64.rpm">
          <filename>libarchive-debugsource-3.6.2-5.1.x86_64.rpm</filename>
        </package>
        <package name="libarchive13" epoch="0" version="3.6.2" release="5.1" arch="x86_64" src="x86_64/libarchive13-3.6.2-5.1.x86_64.rpm">
          <filename>libarchive13-3.6.2-5.1.x86_64.rpm</filename>
        </package>
        <package name="libarchive13-debuginfo" epoch="0" version="3.6.2" release="5.1" arch="x86_64" src="x86_64/libarchive13-debuginfo-3.6.2-5.1.x86_64.rpm">
          <filename>libarchive13-debuginfo-3.6.2-5.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>429</id>
    <title>Security update for libxml2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1755764456" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244554" id="1244554" title="VUL-0: CVE-2025-49794: libxml2: heap use after free (UAF) can lead to Denial of service (DoS)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244555" id="1244555" title="VUL-0: CVE-2025-49795: libxml2: null pointer dereference may lead to Denial of service (DoS)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244557" id="1244557" title="VUL-0: CVE-2025-49796: libxml2: type confusion may lead to Denial of service (DoS)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244580" id="1244580" title="VUL-0: CVE-2025-6021: TRACKERBUG: libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244700" id="1244700" title="VUL-0: CVE-2025-6170: libxml2: stack buffer overflow may lead to a crash" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246296" id="1246296" title="VUL-0: CVE-2025-7425: libxslt: libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6021" id="CVE-2025-6021" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6021" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6170" id="CVE-2025-6170" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6170" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7425" id="CVE-2025-7425" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7425" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49794" id="CVE-2025-49794" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49794" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49795" id="CVE-2025-49795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49795" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49796" id="CVE-2025-49796" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49796" type="cve" />
    </references>
    <description>This update for libxml2 fixes the following issues:

- CVE-2025-6021: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 [bsc#1244580]
- CVE-2025-6170: stack buffer overflow may lead to a crash [bsc#1244700]
- CVE-2025-7425: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr [bsc#1246296]
- CVE-2025-49794: heap use after free (UAF) can lead to Denial of service (DoS) [bsc#1244554]
- CVE-2025-49795: null pointer dereference may lead to Denial of service (DoS) [bsc#1244555]
- CVE-2025-49796: type confusion may lead to Denial of service (DoS) [bsc#1244557]
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.11.6" release="10.1" arch="x86_64" src="x86_64/libxml2-2-2.11.6-10.1.x86_64.rpm">
          <filename>libxml2-2-2.11.6-10.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2-debuginfo" epoch="0" version="2.11.6" release="10.1" arch="x86_64" src="x86_64/libxml2-2-debuginfo-2.11.6-10.1.x86_64.rpm">
          <filename>libxml2-2-debuginfo-2.11.6-10.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.11.6" release="10.1" arch="src" src="src/libxml2-2.11.6-10.1.src.rpm">
          <filename>libxml2-2.11.6-10.1.src.rpm</filename>
        </package>
        <package name="libxml2-debugsource" epoch="0" version="2.11.6" release="10.1" arch="x86_64" src="x86_64/libxml2-debugsource-2.11.6-10.1.x86_64.rpm">
          <filename>libxml2-debugsource-2.11.6-10.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.11.6" release="10.1" arch="x86_64" src="x86_64/libxml2-tools-2.11.6-10.1.x86_64.rpm">
          <filename>libxml2-tools-2.11.6-10.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-tools-debuginfo" epoch="0" version="2.11.6" release="10.1" arch="x86_64" src="x86_64/libxml2-tools-debuginfo-2.11.6-10.1.x86_64.rpm">
          <filename>libxml2-tools-debuginfo-2.11.6-10.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>430</id>
    <title>Security update for docker</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1755764456" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247367" id="1247367" title="VUL-0: CVE-2025-54388: docker: firewalld reload can make published container ports accessible from remote hosts" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54388" id="CVE-2025-54388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54388" type="cve" />
    </references>
    <description>This update for docker fixes the following issues:

- Update to Docker 28.3.3-ce: 
  * CVE-2025-54388: firewalld reload can make published container 
    ports accessible from remote hosts (bsc#1247367)

- Update to docker-buildx v0.26.1.
</description>
    <message>"Updating docker will restart the docker service, which may stop your docker containers. Do you want to proceed with the update?"</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="28.3.3_ce" release="6.1" arch="src" src="src/docker-28.3.3_ce-6.1.src.rpm">
          <filename>docker-28.3.3_ce-6.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="28.3.3_ce" release="6.1" arch="x86_64" src="x86_64/docker-28.3.3_ce-6.1.x86_64.rpm">
          <filename>docker-28.3.3_ce-6.1.x86_64.rpm</filename>
        </package>
        <package name="docker-debuginfo" epoch="0" version="28.3.3_ce" release="6.1" arch="x86_64" src="x86_64/docker-debuginfo-28.3.3_ce-6.1.x86_64.rpm">
          <filename>docker-debuginfo-28.3.3_ce-6.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>416</id>
    <title>Security update for systemd</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1755008090" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242827" id="1242827" title="systemd: real_journal_next() calls journal_file_fstat() after every line and multiplied by each journal file" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243935" id="1243935" title="VUL-0: CVE-2025-4598: systemd: systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247074" id="1247074" title="fixlet-systemd-post.sh can break /etc/locale.conf syntax" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4598" id="CVE-2025-4598" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4598" type="cve" />
    </references>
    <description>This update for systemd fixes the following issues:

- Remove the script used to help migrating the language and locale settings
  located in /etc/sysconfig/language on old systems to the systemd default
  locations (bsc#1247074)

  The script was introduced more than 7 years ago and all systems running TW
  should have been migrated since then. Moreover the installer supports the
  systemd default locations since approximately SLE15. 

- triggers.systemd: skip update of hwdb, journal-catalog if executed during an
  offline update.

- logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
- sd-journal: drop to use Hashmap to manage journal files per boot ID
- tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
- sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
- sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
- sd-journal: cache last entry offset and journal file state
- sd-journal: fix typo in function name

- coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/libsystemd0-254.27-1.1.x86_64.rpm">
          <filename>libsystemd0-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0-debuginfo" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/libsystemd0-debuginfo-254.27-1.1.x86_64.rpm">
          <filename>libsystemd0-debuginfo-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/libudev1-254.27-1.1.x86_64.rpm">
          <filename>libudev1-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1-debuginfo" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/libudev1-debuginfo-254.27-1.1.x86_64.rpm">
          <filename>libudev1-debuginfo-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="254.27" release="1.1" arch="src" src="src/systemd-254.27-1.1.src.rpm">
          <filename>systemd-254.27-1.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/systemd-254.27-1.1.x86_64.rpm">
          <filename>systemd-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/systemd-container-254.27-1.1.x86_64.rpm">
          <filename>systemd-container-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container-debuginfo" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/systemd-container-debuginfo-254.27-1.1.x86_64.rpm">
          <filename>systemd-container-debuginfo-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-coredump" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/systemd-coredump-254.27-1.1.x86_64.rpm">
          <filename>systemd-coredump-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-coredump-debuginfo" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/systemd-coredump-debuginfo-254.27-1.1.x86_64.rpm">
          <filename>systemd-coredump-debuginfo-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-debuginfo" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/systemd-debuginfo-254.27-1.1.x86_64.rpm">
          <filename>systemd-debuginfo-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-debugsource" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/systemd-debugsource-254.27-1.1.x86_64.rpm">
          <filename>systemd-debugsource-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-experimental" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/systemd-experimental-254.27-1.1.x86_64.rpm">
          <filename>systemd-experimental-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-experimental-debuginfo" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/systemd-experimental-debuginfo-254.27-1.1.x86_64.rpm">
          <filename>systemd-experimental-debuginfo-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/systemd-journal-remote-254.27-1.1.x86_64.rpm">
          <filename>systemd-journal-remote-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote-debuginfo" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/systemd-journal-remote-debuginfo-254.27-1.1.x86_64.rpm">
          <filename>systemd-journal-remote-debuginfo-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-portable" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/systemd-portable-254.27-1.1.x86_64.rpm">
          <filename>systemd-portable-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-portable-debuginfo" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/systemd-portable-debuginfo-254.27-1.1.x86_64.rpm">
          <filename>systemd-portable-debuginfo-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/udev-254.27-1.1.x86_64.rpm">
          <filename>udev-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev-debuginfo" epoch="0" version="254.27" release="1.1" arch="x86_64" src="x86_64/udev-debuginfo-254.27-1.1.x86_64.rpm">
          <filename>udev-debuginfo-254.27-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>428</id>
    <title>Security update for sqlite3</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1755690077" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246597" id="1246597" title="VUL-0: CVE-2025-6965: sqlite3: sqlite: Integer Truncation in SQLite" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6965" id="CVE-2025-6965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6965" type="cve" />
    </references>
    <description>This update for sqlite3 fixes the following issues:

- Update to 3.50.2:
  * Fix the concat_ws() SQL function so that it includes empty
    strings in the concatenation.
  * Avoid writing frames with no checksums into the wal file if a
    savepoint is rolled back after dirty pages have already been
    spilled into the wal file.
  * Fix the Bitvec object to avoid stack overflow when the
    database is within 60 pages of its maximum size.
  * Fix a problem with UPDATEs on fts5 tables that contain BLOB
    values.
  * Fix an issue with transitive IS constraints on a RIGHT JOIN.
  * CVE-2025-6965: Fixed Integer Truncation in SQLite (bsc#1246597)
  * Ensure that sqlite3_setlk_timeout() holds the database mutex.

- Update to 3.50 (3.50.1):
  * Improved handling and robust output of control characters
  * sqlite3_rsync no longer requires WAL mode and needs less
    bandwidth
  * Bug fixes and optimized JSON handling
  * Performance optimizations and developer visible fixes

- Update to release 3.49.2:
  * Fix a bug in the NOT NULL optimization of version 3.40.0 that
    can lead to a memory error if abused.
  * Fix the count-of-view optimization so that it does not give an
    incorrect answer for a DISTINCT query.
  * Fix a possible incorrect answer that can result if a UNIQUE
    constraint of a table contains the PRIMARY KEY column and that
    UNIQUE constraint is used by an IN operator.
  * Fix obscure problems with the generate_series() extension
    function.
  * Incremental improvements to the configure/make.

- Add subpackage for the lemon parser generator.
</description>
    <pkglist>
      <collection>
        <package name="libsqlite3-0" epoch="0" version="3.50.2" release="1.1" arch="x86_64" src="x86_64/libsqlite3-0-3.50.2-1.1.x86_64.rpm">
          <filename>libsqlite3-0-3.50.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="libsqlite3-0-debuginfo" epoch="0" version="3.50.2" release="1.1" arch="x86_64" src="x86_64/libsqlite3-0-debuginfo-3.50.2-1.1.x86_64.rpm">
          <filename>libsqlite3-0-debuginfo-3.50.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="sqlite3" epoch="0" version="3.50.2" release="1.1" arch="src" src="src/sqlite3-3.50.2-1.1.src.rpm">
          <filename>sqlite3-3.50.2-1.1.src.rpm</filename>
        </package>
        <package name="sqlite3-debugsource" epoch="0" version="3.50.2" release="1.1" arch="x86_64" src="x86_64/sqlite3-debugsource-3.50.2-1.1.x86_64.rpm">
          <filename>sqlite3-debugsource-3.50.2-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>438</id>
    <title>Security update for python311</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1756290487" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247249" id="1247249" title="VUL-0: CVE-2025-8194: python: cpython: tar archives with negative offsets may lead to infinite loop and deadlock" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8194" id="CVE-2025-8194" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8194" type="cve" />
      <reference href="https://github.com/python/cpython#130577" id="python/cpython#130577" title="https://github.com/python/cpython#130577" type="github" />
    </references>
    <description>This update for python311 fixes the following issues:

- CVE-2025-8194: Fixed infinite loop and deadlock caused by tar 
  archives with negative offsets (bsc#1247249)
</description>
    <pkglist>
      <collection>
        <package name="python311" epoch="0" version="3.11.13" release="2.1" arch="src" src="src/python311-3.11.13-2.1.src.rpm">
          <filename>python311-3.11.13-2.1.src.rpm</filename>
        </package>
        <package name="python311" epoch="0" version="3.11.13" release="2.1" arch="x86_64" src="x86_64/python311-3.11.13-2.1.x86_64.rpm">
          <filename>python311-3.11.13-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses" epoch="0" version="3.11.13" release="2.1" arch="x86_64" src="x86_64/python311-curses-3.11.13-2.1.x86_64.rpm">
          <filename>python311-curses-3.11.13-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses-debuginfo" epoch="0" version="3.11.13" release="2.1" arch="x86_64" src="x86_64/python311-curses-debuginfo-3.11.13-2.1.x86_64.rpm">
          <filename>python311-curses-debuginfo-3.11.13-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debuginfo" epoch="0" version="3.11.13" release="2.1" arch="x86_64" src="x86_64/python311-debuginfo-3.11.13-2.1.x86_64.rpm">
          <filename>python311-debuginfo-3.11.13-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debugsource" epoch="0" version="3.11.13" release="2.1" arch="x86_64" src="x86_64/python311-debugsource-3.11.13-2.1.x86_64.rpm">
          <filename>python311-debugsource-3.11.13-2.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0" epoch="0" version="3.11.13" release="2.1" arch="x86_64" src="x86_64/libpython3_11-1_0-3.11.13-2.1.x86_64.rpm">
          <filename>libpython3_11-1_0-3.11.13-2.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0-debuginfo" epoch="0" version="3.11.13" release="2.1" arch="x86_64" src="x86_64/libpython3_11-1_0-debuginfo-3.11.13-2.1.x86_64.rpm">
          <filename>libpython3_11-1_0-debuginfo-3.11.13-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base" epoch="0" version="3.11.13" release="2.1" arch="x86_64" src="x86_64/python311-base-3.11.13-2.1.x86_64.rpm">
          <filename>python311-base-3.11.13-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base-debuginfo" epoch="0" version="3.11.13" release="2.1" arch="x86_64" src="x86_64/python311-base-debuginfo-3.11.13-2.1.x86_64.rpm">
          <filename>python311-base-debuginfo-3.11.13-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-core" epoch="0" version="3.11.13" release="2.1" arch="src" src="src/python311-core-3.11.13-2.1.src.rpm">
          <filename>python311-core-3.11.13-2.1.src.rpm</filename>
        </package>
        <package name="python311-core-debugsource" epoch="0" version="3.11.13" release="2.1" arch="x86_64" src="x86_64/python311-core-debugsource-3.11.13-2.1.x86_64.rpm">
          <filename>python311-core-debugsource-3.11.13-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>436</id>
    <title>Recommended update for dracut</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1756274355" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241114" id="1241114" title="Dracut errors when including nvidia drivers in initrd" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241680" id="1241680" title="dracut: bug in kernel module name normalization" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247819" id="1247819" title="dracut: memory corruption if kernel command line ends with a quotation mark" type="bugzilla" />
    </references>
    <description>This update for dracut fixes the following issues:

- fix (dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
- fix (rngd): adjust license to match the license of the whole project
- fix (dracut): kernel module name normalization in drivers lists (bsc#1241680)
- fix (dracut-init): assign real path to srcmods (bsc#1241114)
</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="059+suse.605.gc5a2b7ff" release="1.1" arch="src" src="src/dracut-059+suse.605.gc5a2b7ff-1.1.src.rpm">
          <filename>dracut-059+suse.605.gc5a2b7ff-1.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="059+suse.605.gc5a2b7ff" release="1.1" arch="x86_64" src="x86_64/dracut-059+suse.605.gc5a2b7ff-1.1.x86_64.rpm">
          <filename>dracut-059+suse.605.gc5a2b7ff-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-debuginfo" epoch="0" version="059+suse.605.gc5a2b7ff" release="1.1" arch="x86_64" src="x86_64/dracut-debuginfo-059+suse.605.gc5a2b7ff-1.1.x86_64.rpm">
          <filename>dracut-debuginfo-059+suse.605.gc5a2b7ff-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-debugsource" epoch="0" version="059+suse.605.gc5a2b7ff" release="1.1" arch="x86_64" src="x86_64/dracut-debugsource-059+suse.605.gc5a2b7ff-1.1.x86_64.rpm">
          <filename>dracut-debugsource-059+suse.605.gc5a2b7ff-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="059+suse.605.gc5a2b7ff" release="1.1" arch="x86_64" src="x86_64/dracut-fips-059+suse.605.gc5a2b7ff-1.1.x86_64.rpm">
          <filename>dracut-fips-059+suse.605.gc5a2b7ff-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>431</id>
    <title>Security update for net-tools</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1755764456" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243581" id="1243581" title="VUL-0: CVE-2025-46836: net-tools: the absence of bound check may lead to a stack buffer overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246608" id="1246608" title="net-tools update for SLES 12 SP5: net-stat update causes segmentation faults" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46836" id="CVE-2025-46836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46836" type="cve" />
    </references>
    <description>This update for net-tools fixes the following issues:

- Provide more readable error for interface name size checking (bsc#1243581)

- Perform bound checks when parsing interface labels in
  /proc/net/dev (bsc#1243581, bsc#1246608. CVE-2025-46836)
</description>
    <pkglist>
      <collection>
        <package name="net-tools" epoch="0" version="2.10" release="3.1" arch="src" src="src/net-tools-2.10-3.1.src.rpm">
          <filename>net-tools-2.10-3.1.src.rpm</filename>
        </package>
        <package name="net-tools" epoch="0" version="2.10" release="3.1" arch="x86_64" src="x86_64/net-tools-2.10-3.1.x86_64.rpm">
          <filename>net-tools-2.10-3.1.x86_64.rpm</filename>
        </package>
        <package name="net-tools-debuginfo" epoch="0" version="2.10" release="3.1" arch="x86_64" src="x86_64/net-tools-debuginfo-2.10-3.1.x86_64.rpm">
          <filename>net-tools-debuginfo-2.10-3.1.x86_64.rpm</filename>
        </package>
        <package name="net-tools-debugsource" epoch="0" version="2.10" release="3.1" arch="x86_64" src="x86_64/net-tools-debugsource-2.10-3.1.x86_64.rpm">
          <filename>net-tools-debugsource-2.10-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>445</id>
    <title>Security update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1757076950" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234959" id="1234959" title="VUL-0: CVE-2024-56738: grub2: side-channel attack due to not constant-time algorithm in grub_crypto_memcmp" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56738" id="CVE-2024-56738" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56738" type="cve" />
    </references>
    <description>This update for grub2 fixes the following issues:

- CVE-2024-56738: Side-channel attack due to not constant-timealgorithm in grub_crypto_memcmp (bsc#1234959).
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.12~rc1" release="7.1" arch="src" src="src/grub2-2.12~rc1-7.1.src.rpm">
          <filename>grub2-2.12~rc1-7.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.12~rc1" release="7.1" arch="x86_64" src="x86_64/grub2-2.12~rc1-7.1.x86_64.rpm">
          <filename>grub2-2.12~rc1-7.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-debuginfo" epoch="0" version="2.12~rc1" release="7.1" arch="x86_64" src="x86_64/grub2-debuginfo-2.12~rc1-7.1.x86_64.rpm">
          <filename>grub2-debuginfo-2.12~rc1-7.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-debugsource" epoch="0" version="2.12~rc1" release="7.1" arch="x86_64" src="x86_64/grub2-debugsource-2.12~rc1-7.1.x86_64.rpm">
          <filename>grub2-debugsource-2.12~rc1-7.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.12~rc1" release="7.1" arch="noarch" src="noarch/grub2-i386-pc-2.12~rc1-7.1.noarch.rpm">
          <filename>grub2-i386-pc-2.12~rc1-7.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.12~rc1" release="7.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.12~rc1-7.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.12~rc1-7.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.12~rc1" release="7.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.12~rc1-7.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.12~rc1-7.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.12~rc1" release="7.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.12~rc1-7.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.12~rc1-7.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>446</id>
    <title>Security update for jq</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1757076950" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244116" id="1244116" title="VUL-0: CVE-2025-48060: jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48060" id="CVE-2025-48060" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48060" type="cve" />
    </references>
    <description>This update for jq fixes the following issues:

- CVE-2025-48060: Fixed stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) (bsc#1244116).
</description>
    <pkglist>
      <collection>
        <package name="jq" epoch="0" version="1.6" release="5.1" arch="src" src="src/jq-1.6-5.1.src.rpm">
          <filename>jq-1.6-5.1.src.rpm</filename>
        </package>
        <package name="jq" epoch="0" version="1.6" release="5.1" arch="x86_64" src="x86_64/jq-1.6-5.1.x86_64.rpm">
          <filename>jq-1.6-5.1.x86_64.rpm</filename>
        </package>
        <package name="jq-debuginfo" epoch="0" version="1.6" release="5.1" arch="x86_64" src="x86_64/jq-debuginfo-1.6-5.1.x86_64.rpm">
          <filename>jq-debuginfo-1.6-5.1.x86_64.rpm</filename>
        </package>
        <package name="jq-debugsource" epoch="0" version="1.6" release="5.1" arch="x86_64" src="x86_64/jq-debugsource-1.6-5.1.x86_64.rpm">
          <filename>jq-debugsource-1.6-5.1.x86_64.rpm</filename>
        </package>
        <package name="libjq1" epoch="0" version="1.6" release="5.1" arch="x86_64" src="x86_64/libjq1-1.6-5.1.x86_64.rpm">
          <filename>libjq1-1.6-5.1.x86_64.rpm</filename>
        </package>
        <package name="libjq1-debuginfo" epoch="0" version="1.6" release="5.1" arch="x86_64" src="x86_64/libjq1-debuginfo-1.6-5.1.x86_64.rpm">
          <filename>libjq1-debuginfo-1.6-5.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>447</id>
    <title>Security update for cloud-init</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1757076950" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245403" id="1245403" title="VUL-0: CVE-2024-11584: cloud-init: Unpriveleged user could trigger hotplug-hook commands" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239715" id="1239715" title="[SLES 16.0] Rebase cloud-init to 24.4 or higher" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228414" id="1228414" title="cloud-init --debug status fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237764" id="1237764" title="Using ssh_pwauth: True in cloud-init breaks ssh for root" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236720" id="1236720" title="[cloud-init] cloud-init[1175]: FileNotFoundError: [Errno 2] No such file or directory: '/var/lib/cloud/data/tmp8nbfhk5z'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233649" id="1233649" title="cloud-init fails to work with python 3.13" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1786" id="CVE-2023-1786" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1786" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6174" id="CVE-2024-6174" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6174" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11584" id="CVE-2024-11584" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11584" type="cve" />
      <reference href="https://github.com/canonical/cloud-init#4392" id="canonical/cloud-init#4392" title="https://github.com/canonical/cloud-init#4392" type="github" />
      <reference href="https://github.com/canonical/cloud-init#4669" id="canonical/cloud-init#4669" title="https://github.com/canonical/cloud-init#4669" type="github" />
      <reference href="https://github.com/canonical/cloud-init#5052" id="canonical/cloud-init#5052" title="https://github.com/canonical/cloud-init#5052" type="github" />
      <reference href="https://jira.suse.com/browse/PED-8680" id="PED-8680" title="https://jira.suse.com/browse/PED-8680" type="jira" />
      <reference href="https://jira.suse.com/browse/PM-2335" id="PM-2335" title="https://jira.suse.com/browse/PM-2335" type="jira" />
      <reference href="https://jira.suse.com/browse/PM-3175" id="PM-3175" title="https://jira.suse.com/browse/PM-3175" type="jira" />
      <reference href="https://jira.suse.com/browse/PM-3181" id="PM-3181" title="https://jira.suse.com/browse/PM-3181" type="jira" />
    </references>
    <description>This update for cloud-init fixes the following issues:

Update to version 25.1.3:

- CVE-2024-6174: Unpriveleged user could trigger hotplug-hook commands (bsc#1245403).

None security fixes:

- Rebase cloud-init to 24.4 or higher (bsc#1239715, jsc#PED-8680).
- Fixed cloud-init --debug status (bsc#1228414).
- Using ssh_pwauth: True in cloud-init breaks ssh for root (bsc#1237764).
- Fixed FileNotFoundError (bsc#1236720).
- Fixed python 3.13 support (bsc#1233649).
</description>
    <pkglist>
      <collection>
        <package name="cloud-init" epoch="0" version="25.1.3" release="1.1" arch="src" src="src/cloud-init-25.1.3-1.1.src.rpm">
          <filename>cloud-init-25.1.3-1.1.src.rpm</filename>
        </package>
        <package name="cloud-init" epoch="0" version="25.1.3" release="1.1" arch="x86_64" src="x86_64/cloud-init-25.1.3-1.1.x86_64.rpm">
          <filename>cloud-init-25.1.3-1.1.x86_64.rpm</filename>
        </package>
        <package name="cloud-init-config-suse" epoch="0" version="25.1.3" release="1.1" arch="x86_64" src="x86_64/cloud-init-config-suse-25.1.3-1.1.x86_64.rpm">
          <filename>cloud-init-config-suse-25.1.3-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>449</id>
    <title>Security update for aide</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1757076951" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247884" id="1247884" title="VUL-0: CVE-2025-54389: aide: improper output neutralization (potential AIDE detection bypass)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247885" id="1247885" title="VUL-0: CVE-2025-54409: aide: null pointer dereference after reading incorrectly encoded xattr attributes from database (local DoS)" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54389" id="CVE-2025-54389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54389" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54409" id="CVE-2025-54409" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54409" type="cve" />
    </references>
    <description>This update for aide fixes the following issues:

- CVE-2025-54389: Escape control characters in report and log output (bsc#1247884).
- CVE-2025-54409: Fix null pointer dereference after reading incorrectly encoded xattr attributes from database (bsc#1247885).
</description>
    <pkglist>
      <collection>
        <package name="aide" epoch="0" version="0.18.6" release="2.1" arch="src" src="src/aide-0.18.6-2.1.src.rpm">
          <filename>aide-0.18.6-2.1.src.rpm</filename>
        </package>
        <package name="aide" epoch="0" version="0.18.6" release="2.1" arch="x86_64" src="x86_64/aide-0.18.6-2.1.x86_64.rpm">
          <filename>aide-0.18.6-2.1.x86_64.rpm</filename>
        </package>
        <package name="aide-debuginfo" epoch="0" version="0.18.6" release="2.1" arch="x86_64" src="x86_64/aide-debuginfo-0.18.6-2.1.x86_64.rpm">
          <filename>aide-debuginfo-0.18.6-2.1.x86_64.rpm</filename>
        </package>
        <package name="aide-debugsource" epoch="0" version="0.18.6" release="2.1" arch="x86_64" src="x86_64/aide-debugsource-0.18.6-2.1.x86_64.rpm">
          <filename>aide-debugsource-0.18.6-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>451</id>
    <title>Security update for podman</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1757338632" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245320" id="1245320" title="VUL-0: CVE-2025-6032: podman: machine init command fails to verify TLS certificate when downloading VM images from an OCI registry" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6032" id="CVE-2025-6032" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6032" type="cve" />
    </references>
    <description>This update for podman fixes the following issues:

- CVE-2025-6032: Machine init command fails to verify TLS certificate when downloading VM images from an OCI registry (bsc#1245320).
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.9.5" release="7.1" arch="src" src="src/podman-4.9.5-7.1.src.rpm">
          <filename>podman-4.9.5-7.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="7.1" arch="x86_64" src="x86_64/podman-4.9.5-7.1.x86_64.rpm">
          <filename>podman-4.9.5-7.1.x86_64.rpm</filename>
        </package>
        <package name="podman-debuginfo" epoch="0" version="4.9.5" release="7.1" arch="x86_64" src="x86_64/podman-debuginfo-4.9.5-7.1.x86_64.rpm">
          <filename>podman-debuginfo-4.9.5-7.1.x86_64.rpm</filename>
        </package>
        <package name="podman-docker" epoch="0" version="4.9.5" release="7.1" arch="noarch" src="noarch/podman-docker-4.9.5-7.1.noarch.rpm">
          <filename>podman-docker-4.9.5-7.1.noarch.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="7.1" arch="x86_64" src="x86_64/podman-remote-4.9.5-7.1.x86_64.rpm">
          <filename>podman-remote-4.9.5-7.1.x86_64.rpm</filename>
        </package>
        <package name="podman-remote-debuginfo" epoch="0" version="4.9.5" release="7.1" arch="x86_64" src="x86_64/podman-remote-debuginfo-4.9.5-7.1.x86_64.rpm">
          <filename>podman-remote-debuginfo-4.9.5-7.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>452</id>
    <title>Security update for gstreamer</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1757339323" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234449" id="1234449" title="VUL-0: CVE-2024-47606: gstreamer,gstreamer-plugins-good: Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47606" id="CVE-2024-47606" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47606" type="cve" />
    </references>
    <description>This update for gstreamer fixes the following issues:

- CVE-2024-47606: Avoid integer overflow when allocating sysmem (bsc#1234449).
</description>
    <pkglist>
      <collection>
        <package name="gstreamer" epoch="0" version="1.22.9" release="2.1" arch="src" src="src/gstreamer-1.22.9-2.1.src.rpm">
          <filename>gstreamer-1.22.9-2.1.src.rpm</filename>
        </package>
        <package name="gstreamer" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/gstreamer-1.22.9-2.1.x86_64.rpm">
          <filename>gstreamer-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="gstreamer-debuginfo" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/gstreamer-debuginfo-1.22.9-2.1.x86_64.rpm">
          <filename>gstreamer-debuginfo-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="gstreamer-debugsource" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/gstreamer-debugsource-1.22.9-2.1.x86_64.rpm">
          <filename>gstreamer-debugsource-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstreamer-1_0-0" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstreamer-1_0-0-1.22.9-2.1.x86_64.rpm">
          <filename>libgstreamer-1_0-0-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgstreamer-1_0-0-debuginfo" epoch="0" version="1.22.9" release="2.1" arch="x86_64" src="x86_64/libgstreamer-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm">
          <filename>libgstreamer-1_0-0-debuginfo-1.22.9-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>453</id>
    <title>Security update for gdk-pixbuf</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1757339323" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245227" id="1245227" title="VUL-0: CVE-2025-6199: gdk-pixbuf: uninitialized memory could lead to leak arbitrary memory contents" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246114" id="1246114" title="VUL-0: CVE-2025-7345: gdk-pixbuf,glib2: heap buffer overflow in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (gbase64.c)" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6199" id="CVE-2025-6199" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6199" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7345" id="CVE-2025-7345" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7345" type="cve" />
    </references>
    <description>This update for gdk-pixbuf fixes the following issues:

- CVE-2025-7345: Uninitialized memory could lead to leak arbitrary memory contents (bsc#1246114).
- CVE-2025-6199: Heap buffer overflow within the gdk_pixbuf__jpeg_image_load_increment function (bsc#1245227).
</description>
    <pkglist>
      <collection>
        <package name="gdk-pixbuf" epoch="0" version="2.42.12" release="3.1" arch="src" src="src/gdk-pixbuf-2.42.12-3.1.src.rpm">
          <filename>gdk-pixbuf-2.42.12-3.1.src.rpm</filename>
        </package>
        <package name="gdk-pixbuf-debugsource" epoch="0" version="2.42.12" release="3.1" arch="x86_64" src="x86_64/gdk-pixbuf-debugsource-2.42.12-3.1.x86_64.rpm">
          <filename>gdk-pixbuf-debugsource-2.42.12-3.1.x86_64.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders" epoch="0" version="2.42.12" release="3.1" arch="x86_64" src="x86_64/gdk-pixbuf-query-loaders-2.42.12-3.1.x86_64.rpm">
          <filename>gdk-pixbuf-query-loaders-2.42.12-3.1.x86_64.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders-debuginfo" epoch="0" version="2.42.12" release="3.1" arch="x86_64" src="x86_64/gdk-pixbuf-query-loaders-debuginfo-2.42.12-3.1.x86_64.rpm">
          <filename>gdk-pixbuf-query-loaders-debuginfo-2.42.12-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0" epoch="0" version="2.42.12" release="3.1" arch="x86_64" src="x86_64/libgdk_pixbuf-2_0-0-2.42.12-3.1.x86_64.rpm">
          <filename>libgdk_pixbuf-2_0-0-2.42.12-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0-debuginfo" epoch="0" version="2.42.12" release="3.1" arch="x86_64" src="x86_64/libgdk_pixbuf-2_0-0-debuginfo-2.42.12-3.1.x86_64.rpm">
          <filename>libgdk_pixbuf-2_0-0-debuginfo-2.42.12-3.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-GdkPixbuf-2_0" epoch="0" version="2.42.12" release="3.1" arch="x86_64" src="x86_64/typelib-1_0-GdkPixbuf-2_0-2.42.12-3.1.x86_64.rpm">
          <filename>typelib-1_0-GdkPixbuf-2_0-2.42.12-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>439</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1756373605" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247539" id="1247539" title="credentials do not get cleaned up under certain scenario" type="bugzilla" />
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

- When an instance fails verification server side the default credentials were left behind 
  requireing manual intervantion prior to the next registration attempt. (bsc#1247539)
- Fix issue triggered when using instance-billing-flavor-check due to IP address 
  handling as object rather than string introduced 10.5.0 (bsc#1247539)
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="10.5.2" release="7.1" arch="noarch" src="noarch/cloud-regionsrv-client-10.5.2-7.1.noarch.rpm">
          <filename>cloud-regionsrv-client-10.5.2-7.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="10.5.2" release="7.1" arch="src" src="src/cloud-regionsrv-client-10.5.2-7.1.src.rpm">
          <filename>cloud-regionsrv-client-10.5.2-7.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="7.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-7.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-7.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="2.0.0" release="7.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-2.0.0-7.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-2.0.0-7.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="1.0.5" release="7.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-1.0.5-7.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-1.0.5-7.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="1.0.0" release="7.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-1.0.0-7.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-1.0.0-7.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>457</id>
    <title>Security update for vim</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1757586582" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246602" id="1246602" title="VUL-0: CVE-2025-53906: vim: malicious zip archive may cause a path traversal in Vim’s zip" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246604" id="1246604" title="VUL-0: CVE-2025-53905: vim: malicious tar archive may cause a path traversal in Vim’s tar.vim plugin" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247938" id="1247938" title="VUL-0: CVE-2025-55157: vim: use-after-free in internal tuple reference management" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247939" id="1247939" title="VUL-0: CVE-2025-55158: vim: double-free in internal typed value (typval_T) management" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53905" id="CVE-2025-53905" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53905" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53906" id="CVE-2025-53906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53906" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55157" id="CVE-2025-55157" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55157" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55158" id="CVE-2025-55158" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55158" type="cve" />
    </references>
    <description>This update for vim fixes the following issues:

- CVE-2025-53906: Fixed malicious zip archive causing path traversal (bsc#1246602)
- CVE-2025-53905: Fixed malicious tar archive causing path traversal (bsc#1246604)
- CVE-2025-55157: Fixed use-after-free in internal tuple reference management (bsc#1247938)
- CVE-2025-55158: Fixed double-free in internal typed value (typval_T) management (bsc#1247939)
  
- Update to 9.1.1629:
  9.1.1629: Vim9: Not able to use more than 10 type arguments in a generic function
  9.1.1628: fuzzy.c has a few issues
  9.1.1627: fuzzy matching can be improved
  9.1.1626: cindent: does not handle compound literals
  9.1.1625: Autocompletion slow with include- and tag-completion
  9.1.1624: Cscope not enabled on MacOS
  9.1.1623: Buffer menu does not handle unicode names correctly
  9.1.1622: Patch v9.1.1432 causes performance regressions
  9.1.1621: flicker in popup menu during cmdline autocompletion
  9.1.1620: filetype: composer.lock and symfony.lock files not recognized
  9.1.1619: Incorrect E535 error message
  9.1.1618: completion: incorrect selected index returned from complete_info()
  9.1.1617: Vim9: some error messages can be improved
  9.1.1616: xxd: possible buffer overflow with bitwise output
  9.1.1615: diff format erroneously detected
  9.1.1614: Vim9: possible variable type change
  9.1.1613: tests: test_search leaves a few swapfiles behind
  9.1.1612: Ctrl-G/Ctrl-T do not ignore the end search delimiter
  9.1.1611: possible undefined behaviour in mb_decompose()
  9.1.1610: completion: hang or E684 when 'tagfunc' calls complete()
  9.1.1609: complete: Heap-buffer overflow with complete function
  9.1.1608: No command-line completion for :unsilent {command}
  9.1.1607: :apple command detected as :append
  9.1.1606: filetype: a few more files are not recognized
  9.1.1605: cannot specify scope for chdir()
  9.1.1604: completion: incsearch highlight might be lost
  9.1.1603: completion: cannot use autoloaded funcs in 'complete' F{func}
  9.1.1602: filetype: requirements-*.txt files are not recognized
  9.1.1601: Patch v8.1.0425 was wrong
  9.1.1600: using diff anchors with hidden buffers fails silently
  9.1.1599: :bnext doesn't go to unlisted help buffers
  9.1.1598: filetype: waybar config file is not recognized
  9.1.1597: CI reports leaks in libgtk3 library
  9.1.1596: tests: Test_search_wildmenu_iminsert() depends on help file
  9.1.1595: Wayland: non-portable use of select()
  9.1.1594: completion: search completion throws errors
  9.1.1593: Confusing error when compiling incomplete try block
  9.1.1592: Vim9: crash with classes and garbage collection
  9.1.1591: VMS support can be improved
  9.1.1590: cannot perform autocompletion
  9.1.1589: Cannot disable cscope interface using configure
  9.1.1588: Vim9: cannot split dict inside command block
  9.1.1587: Wayland: timeout not updated before select()
  9.1.1586: Vim9: can define an enum/interface in a function
  9.1.1585: Wayland: gvim still needs GVIM_ENABLE_WAYLAND
  9.1.1584: using ints as boolean type
  9.1.1583: gvim window lost its icons
  9.1.1582: style issue in vim9type.c and vim9generics.c
  9.1.1581: possible memory leak in vim9generics.c
  9.1.1580: possible memory leak in vim9type.c
  9.1.1579: Coverity complains about unchecked return value
  9.1.1578: configure: comment still mentions autoconf 2.71
  9.1.1577: Vim9: no generic support yet
  9.1.1576: cannot easily trigger wildcard expansion
  9.1.1575: tabpanel not drawn correctly with wrapped lines
  9.1.1574: Dead code in mbyte.c
  9.1.1573: Memory leak when pressing Ctrl-D in cmdline mode
  9.1.1572: expanding $var does not escape whitespace for 'path'
  9.1.1571: CmdlineChanged triggered to often
  9.1.1570: Copilot suggested some improvements in cmdexpand.c
  9.1.1569: tests: Vim9 tests can be improved
  9.1.1568: need a few more default highlight groups
  9.1.1567: crash when using inline diff mode
  9.1.1566: self-referenced enum may not get freed
  9.1.1565: configure: does not consider tiny version for wayland
  9.1.1564: crash when opening popup to closing buffer
  9.1.1563: completion: ruler may disappear
  9.1.1562: close button always visible in the 'tabline'
  9.1.1561: configure: wayland test can be improved
  9.1.1560: configure: uses $PKG_CONFIG before it is defined
  9.1.1559: tests: Test_popup_complete_info_01() fails when run alone
  9.1.1558: str2blob() treats NULL string and empty string differently
  9.1.1557: not possible to anchor specific lines in difff mode
  9.1.1556: string handling in cmdexpand.c can be improved
  9.1.1555: completion: repeated insertion of leader
  9.1.1554: crash when omni-completion opens command-line window
  9.1.1553: Vim9: crash when accessing a variable in if condition
  9.1.1552: [security]: path traversal issue in tar.vim
  9.1.1551: [security]: path traversal issue in zip.vim
  9.1.1550: defaults: 'showcmd' is not enabled in non-compatible mode on Unix
  9.1.1549: filetype: pkl files are not recognized
  9.1.1548: filetype: OpenFGA files are not recognized
  9.1.1547: Wayland: missing ifdef
  9.1.1546: Vim9: error with has() and short circuit evaluation
  9.1.1545: typo in os_unix.c
  9.1.1544: :retab cannot be limited to indentation only
  9.1.1543: Wayland: clipboard appears to not be working
  9.1.1542: Coverity complains about uninitialized variable
  9.1.1541: Vim9: error when last enum value ends with a comma
  9.1.1540: completion: menu state wrong on interruption
  9.1.1539: completion: messages don't respect 'shm' setting
  9.1.1537: helptoc: still some issues when markdown code blocks
  9.1.1536: tests: test_plugin_comment uses wrong :Check command
  9.1.1535: the maximum search count uses hard-coded value 99
  9.1.1534: unnecessary code in tabpanel.c
  9.1.1533: helptoc: does not handle code sections in markdown well
  9.1.1532: termdebug: not enough ways to configure breakpoints
  9.1.1531: confusing error with nested legacy function
  9.1.1530: Missing version change in v9.1.1529
  9.1.1529: Win32: the toolbar in the GUI is old and dated
  9.1.1528: completion: crash with getcompletion()
  9.1.1527: Vim9: Crash with string compound assignment
  9.1.1526: completion: search completion match may differ in case
  9.1.1525: tests: testdir/ is a bit messy
  9.1.1524: tests: too many imports in the test suite
  9.1.1523: tests: test_clipmethod fails in non X11 environment
  9.1.1522: tests: still some ANSI escape sequences in test output
  9.1.1521: completion: pum does not reset scroll pos on reopen with 'noselect'
  9.1.1520: completion: search completion doesn't handle 'smartcase' well
  9.1.1519: tests: Test_termdebug_decimal_breakpoints() may fail
  9.1.1518: getcompletiontype() may crash
  9.1.1517: filetype: autopkgtest files are not recognized
  9.1.1516: tests: no test that 'incsearch' is updated after search completion
  9.1.1515: Coverity complains about potential unterminated strings
  9.1.1514: Coverity complains about the use of tmpfile()
  9.1.1513: resizing Vim window causes unexpected internal window width
  9.1.1512: completion: can only complete from keyword characters
  9.1.1511: tests: two edit tests change v:testing from 1 to 0
  9.1.1510: Search completion may use invalid memory
  9.1.1509: patch 9.1.1505 was not good
  9.1.1508: string manipulation can be improved in cmdexpand.c
  9.1.1507: symlinks are resolved on :cd commands
  9.1.1506: tests: missing cleanup in Test_search_cmdline_incsearch_highlight()
  9.1.1505: not possible to return completion type for :ex command
  9.1.1504: filetype: numbat files are not recognized
  9.1.1503: filetype: haxe files are not recognized
  9.1.1502: filetype: quickbms files are not recognized
  9.1.1501: filetype: flix files are not recognized
  9.1.1500: if_python: typo in python error variable
  9.1.1499: MS-Windows: no indication of ARM64 architecture
  9.1.1498: completion: 'complete' funcs behave different to 'omnifunc'
  9.1.1497: Link error with shm_open()
  9.1.1496: terminal: still not highlighting empty cells correctly
  9.1.1495: Wayland: uses $XDG_SEAT to determine seat
  9.1.1494: runtime(tutor): no French translation for Chapter 2
  9.1.1493: manually comparing positions on buffer
  9.1.1492: tests: failure when Wayland compositor fails to start
  9.1.1491: missing out-of-memory checks in cmdexpand.c
  9.1.1490: 'wildchar' does not work in search contexts
  9.1.1489: terminal: no visual highlight of empty cols with empty 'listchars'
  9.1.1488: configure: using obsolete macro AC_PROG_GCC_TRADITIONAL
  9.1.1487: :cl doesn't invoke :clist
  9.1.1486: documentation issues with Wayland
  9.1.1485: missing Wayland clipboard support
  9.1.1484: tests: Turkish locale tests fails on Mac
  9.1.1483: not possible to translation position in buffer
  9.1.1482: scrolling with 'splitkeep' and line()
  9.1.1481: gcc complains about uninitialized variable
  9.1.1480: Turkish translation outdated
  9.1.1479: regression when displaying localized percentage position
  9.1.1478: Unused assignment in ex_uniq()
  9.1.1476: no easy way to deduplicate text
  9.1.1476: missing out-of-memory checks in cmdexpand.c
  9.1.1475: completion: regression when "nearest" in 'completeopt'
  9.1.1474: missing out-of-memory check in mark.c
  9.1.1473: inconsistent range arg for :diffget/diffput
  9.1.1472: if_python: PySequence_Fast_{GET_SIZE,GET_ITEM} removed
  9.1.1471: completion: inconsistent ordering with CTRL-P
  9.1.1470: use-after-free with popup callback on error
  9.1.1469: potential buffer-underflow with invalid hl_id
  9.1.1468: filetype: bright(er)script files are not recognized
  9.1.1467: too many strlen() calls
  9.1.1466: filetype: not all lex files are recognized
  9.1.1465: tabpanel: not correctly drawn with 'equalalways'
  9.1.1464: gv does not work in operator-pending mode
  9.1.1463: Integer overflow in getmarklist() after linewise operation
  9.1.1462: missing change from patch v9.1.1461
  9.1.1461: tabpanel: tabpanel vanishes with popup menu
  9.1.1460: MS-Windows: too many strlen() calls in os_win32.c
  9.1.1459: xxd: coloring output is inefficient
  9.1.1458: tabpanel: tabs not properly updated with 'stpl'
  9.1.1457: compile warning with tabpanelopt
  9.1.1456: comment plugin fails toggling if 'cms' contains \
  9.1.1455: Haiku: dailog objects created with no reference
  9.1.1454: tests: no test for pum at line break position
  9.1.1453: tests: Test_geometry() may fail
  9.1.1452: completion: redundant check for completion flags
  9.1.1451: tabpanel rendering artifacts when scrolling
  9.1.1450: Session has wrong arglist with :tcd and :arglocal
  9.1.1449: typo in pum_display()
  9.1.1448: tabpanel is not displayed correctly when msg_scrolled
  9.1.1447: completion: crash when backspacing with fuzzy completion
  9.1.1446: filetype: cuda-gdb config files are not recognized
  9.1.1445: negative matchfuzzy scores although there is a match
  9.1.1444: Unused assignment in set_fuzzy_score()
  9.1.1443: potential buffer underflow in insertchar()
  9.1.1442: tests: Test_diff_fold_redraw() is insufficient
  9.1.1441: completion: code can be improved
  9.1.1440: too many strlen() calls in os_win32.c
  9.1.1439: Last diff folds not merged
  9.1.1438: tests: Test_breakindent_list_split() fails
  9.1.1437: MS-Windows: internal compile error in uc_list()
  9.1.1436: GUI control code is displayed on the console on startup
  9.1.1435: completion: various flaws in fuzzy completion
  9.1.1434: MS-Windows: missing out-of-memory checks in os_win32.c
  9.1.1433: Unnecessary :if when writing session
  9.1.1432: GTK GUI: Buffer menu does not handle unicode correctly
  9.1.1431: Hit-Enter Prompt when loading session files
  9.1.1430: tabpanel may flicker in the GUI
  9.1.1429: dragging outside the tabpanel changes tabpagenr
  9.1.1428: completion: register completion needs cleanup
  9.1.1427: rendering artifacts with the tabpanel
  9.1.1426: completion: register contents not completed
  9.1.1425: tabpanel: there are still some problems with the tabpanel
  9.1.1424: PMenu selection broken with multi-line selection and limits
  9.1.1423: :tag command not working correctly using Vim9 Script
  9.1.1422: scheduling of complete function can be improved
  9.1.1421: tests: need a test for the new-style tutor.tutor
  9.1.1420: tests: could need some more tests for shebang lines
  9.1.1419: It is difficult to ignore all but some events
  9.1.1418: configures GUI auto detection favors GTK2
  9.1.1417: missing info about register completion in complete_info()
  9.1.1416: completion limits not respected for fuzzy completions
  9.1.1415: potential use-after free when there is an error in 'tabpanel'
  9.1.1414: MS-Windows: compile warnings in os_win32.c
  9.1.1413: spurious CursorHold triggered in GUI on startup
  9.1.1412: tests: Test_tabpanel_tabonly() fails on larger screens
  9.1.1411: crash when calling non-existing function for tabpanel
  9.1.1410: out-of-bounds access with 'completefunc'
  9.1.1409: using f-flag in 'complete' conflicts with Neovim
  9.1.1408: not easily possible to complete from register content
  9.1.1407: Can't use getpos('v') in OptionSet when using setbufvar()
  9.1.1406: crash when importing invalid tuple
  9.1.1405: tests: no test for mapping with special keys in session file
  9.1.1404: wrong link to Chapter 2 in new-tutor
  9.1.1403: expansion of 'tabpanelopt' value adds wrong values
  9.1.1402: multi-byte mappings not properly stored in session file
  9.1.1401: list not materialized in prop_list()
  9.1.1400: [security]: use-after-free when evaluating tuple fails
  9.1.1399: tests: test_codestyle fails for auto-generated files
  9.1.1398: completion: trunc does not follow Pmenu highlighting attributes
  9.1.1397: tabpanel not correctly updated on :tabonly
  9.1.1396: 'errorformat' is a global option
  9.1.1395: search_stat not reset when pattern differs in case
  9.1.1394: tabpanel not correctly redrawn on tabonly
  9.1.1393: missing test for switching buffers and reusing curbuf
  9.1.1392: missing patch number
  9.1.1391: Vim does not have a vertical tabpanel
  9.1.1390: style: more wrong indentation
  9.1.1389: completion: still some issue when 'isexpand' contains a space
  9.1.1388: Scrolling one line too far with 'nosmoothscroll' page scrolling
  9.1.1387: memory leak when buflist_new() fails to reuse curbuf
  9.1.1386: MS-Windows: some minor problems building on AARCH64
  9.1.1385: inefficient loop for 'nosmoothscroll' scrolling
  9.1.1384: still some problem with the new tutors filetype plugin
  9.1.1383: completion: 'isexpand' option does not handle space char correct
  9.1.1382: if_ruby: unused compiler warnings from ruby internals
  9.1.1381: completion: cannot return to original text
  9.1.1380: 'eventignorewin' only checked for current buffer
  9.1.1379: MS-Windows: error when running evim when space in path
  9.1.1378: sign without text overwrites number option
  9.1.1377: patch v9.1.1370 causes some GTK warning messages
  9.1.1376: quickfix dummy buffer may remain as dummy buffer
  9.1.1375: [security]: possible heap UAF with quickfix dummy buffer
  9.1.1374: completion: 'smartcase' not respected when filtering matches
  9.1.1373: 'completeopt' checking logic can be simplified
  9.1.1372: style: braces issues in various files
  9.1.1371: style: indentation and brace issues in insexpand.c
  9.1.1370: CI Tests favor GTK2 over GTK3
  9.1.1369: configure still using autoconf 2.71
  9.1.1368: GTK3 and GTK4 will drop numeric cursor support.
  9.1.1367: too many strlen() calls in gui.c
  9.1.1366: v9.1.1364 unintentionally changed sign.c and sound.c
  9.1.1365: MS-Windows: compile warnings and too many strlen() calls
  9.1.1364: style: more indentation issues
  9.1.1363: style: inconsistent indentation in various files
  9.1.1362: Vim9: type ignored when adding tuple to instance list var
  9.1.1361: [security]: possible use-after-free when closing a buffer
  9.1.1360: filetype: GNU Radio companion files are not recognized
  9.1.1359: filetype: GNU Radio config files are not recognized
  9.1.1358: if_lua: compile warnings with gcc15
  9.1.1357: Vim incorrectly escapes tags with "[" in a help buffer
  9.1.1356: Vim9: crash when unletting variable
  9.1.1355: The pum_redraw() function is too complex
  9.1.1354: tests: Test_terminalwinscroll_topline() fails on Windows
  9.1.1353: missing change from v9.1.1350
  9.1.1352: style: inconsistent indent in insexpand.c
  9.1.1351: Return value of getcmdline() inconsistent in CmdlineLeavePre
  9.1.1350: tests: typo in Test_CmdlineLeavePre_cabbr()
  9.1.1349: CmdlineLeavePre may trigger twice
  9.1.1348: still E315 with the terminal feature
  9.1.1347: small problems with gui_w32.c
  9.1.1346: missing out-of-memory check in textformat.c
  9.1.1345: tests: Test_xxd_color2() test failure dump diff is misleading
  9.1.1344: double free in f_complete_match() (after v9.1.1341)
  9.1.1343: filetype: IPython files are not recognized
  9.1.1342: Shebang filetype detection can be improved
  9.1.1341: cannot define completion triggers
  9.1.1340: cannot complete :filetype arguments
  9.1.1339: missing out-of-memory checks for enc_to_utf16()/utf16_to_enc()
  9.1.1338: Calling expand() interferes with cmdcomplete_info()
  9.1.1337: Undo corrupted with 'completeopt' "preinsert" when switching buffer
  9.1.1336: comment plugin does not support case-insensitive 'commentstring'
  9.1.1335: Coverity complains about Null pointer dereferences
  9.1.1334: Coverity complains about unchecked return value
  9.1.1333: Coverity: complains about unutilized variable
  9.1.1332: Vim9: segfault when using super within a lambda
  9.1.1331: Leaking memory with cmdcomplete()
  9.1.1330: may receive E315 in terminal
  9.1.1329: cannot get information about command line completion
  9.1.1328: too many strlen() calls in indent.c
  9.1.1327: filetype: nroff detection can be improved
  9.1.1326: invalid cursor position after 'tagfunc'
  9.1.1325: tests: not checking error numbers properly
  9.1.1324: undefined behaviour if X11 connection dies
  9.1.1323: b:undo_ftplugin not executed when re-using buffer
  9.1.1322: small delete register cannot paste multi-line correctly
  9.1.1321: filetype: MS ixx and mpp files are not recognized
  9.1.1320: filetype: alsoft config files are not recognized
  9.1.1319: Various typos in the code, issue with test_inst_complete.vim
  9.1.1318: tests: test_format fails
  9.1.1317: noisy error when restoring folds from session fails
  9.1.1316: missing memory allocation failure in os_mswin.c
  9.1.1315: completion: issue with fuzzy completion and 'completefuzzycollect'
  9.1.1314: max allowed string width too small
  9.1.1313: compile warning about uninitialized value
  9.1.1312: tests: Test_backupskip() fails when HOME is defined
  9.1.1311: completion: not possible to limit number of matches
  9.1.1310: completion: redundant check for preinsert effect
  9.1.1309: tests: no test for 'pummaxwidth' with non-truncated "kind"
  9.1.1308: completion: cannot order matches by distance to cursor
  9.1.1307: make syntax does not reliably detect different flavors
  9.1.1306: completion menu rendering can be improved
  9.1.1305: completion menu active after switching windows/tabs
  9.1.1304: filetype: some man files are not recognized
  9.1.1303: missing out-of-memory check in linematch.c
  9.1.1302: Coverity warns about using uninitialized value
  9.1.1301: completion: cannot configure completion functions with 'complete'
  9.1.1300: wrong detection of -inf
  9.1.1299: filetype: mbsyncrc files are not recognized
  9.1.1298: define_function() is too long
  9.1.1297: Ctrl-D scrolling can get stuck
  9.1.1296: completion: incorrect truncation logic
  9.1.1295: clientserver: does not handle :stopinsert correctly
  9.1.1294: gui tabline menu does not use confirm when closing tabs
  9.1.1293: comment plugin does not handle 'exclusive' selection for comment object
  9.1.1292: statusline not correctly evaluated
  9.1.1291: too many strlen() calls in buffer.c
  9.1.1290: tests: missing cleanup in test_filetype.vim
  9.1.1289: tests: no test for matchparen plugin with WinScrolled event
  9.1.1288: Using wrong window in ll_resize_stack()
  9.1.1287: quickfix code can be further improved
  9.1.1286: filetype: help files not detected when 'iskeyword' includes ":"
  9.1.1285: Vim9: no error message for missing method after "super."
  9.1.1284: not possible to configure pum truncation char
  9.1.1283: quickfix stack is limited to 10 items
  9.1.1282: Build and test failure without job feature
  9.1.1281: extra newline output when editing stdin
  9.1.1280: trailing additional semicolon in get_matches_in_str()
  9.1.1279: Vim9: null_object and null_class are no reserved names
  9.1.1278: Vim9: too long functions in vim9type.c
  9.1.1277: tests: trailing comment char in test_popupwin
  9.1.1276: inline word diff treats multibyte chars as word char
  9.1.1275: MS-Windows: Not possible to pass additional flags to Make_mvc
  9.1.1274: Vim9: no support for object&lt;type&gt; as variable type
  9.1.1273: Coverity warns about using uninitialized value
  9.1.1272: completion: in keyword completion Ctrl_P cannot go back after Ctrl_N
  9.1.1271: filetype: Power Query files are not recognized
  9.1.1270: missing out-of-memory checks in buffer.c
  9.1.1269: completion: compl_shown_match is updated when starting keyword completion
  9.1.1268: filetype: dax files are not recognized
  9.1.1267: Vim9: no support for type list/dict&lt;object&lt;any&gt;&gt;
  9.1.1266: MS-Windows: type conversion warnings
  9.1.1265: tests: no tests for typing normal char during completion
  9.1.1264: Vim9: error when comparing objects
  9.1.1263: string length wrong in get_last_inserted_save()
  9.1.1262: heap-buffer-overflow with narrow 'pummaxwidth' value
  9.1.1261: No test for 'pummaxwidth' non-truncated items
  9.1.1260: Hang when filtering buffer with NUL bytes
  9.1.1259: some issues with comment package and tailing spaces
  9.1.1258: regexp: max \U and \%U value is limited by INT_MAX
  9.1.1257: Mixing vim_strsize() with mb_ptr2cells() in pum_redraw()
  9.1.1256: if_python: duplicate tuple data entries
  9.1.1255: missing test condition for 'pummaxwidth' setting
  9.1.1254: need more tests for the comment plugin
  9.1.1253: abort when closing window with attached quickfix data
  9.1.1252: typos in code and docs related to 'diffopt' "inline:"
  9.1.1251: if_python: build error with tuples and dynamic python
  9.1.1250: cannot set the maximum popup menu width
  9.1.1249: tests: no test that 'listchars' "eol" doesn't affect "gM"
  9.1.1248: compile error when building without FEAT_QUICKFIX
  9.1.1247: fragile setup to get (preferred) keys from key_name_entry
  9.1.1246: coverity complains about some changes in v9.1.1243
  9.1.1245: need some more tests for curly braces evaluation
  9.1.1244: part of patch v9.1.1242 was wrong
  9.1.1243: diff mode is lacking for changes within lines
  9.1.1242: Crash when evaluating variable name
  9.1.1241: wrong preprocessort indentation in term.c
  9.1.1240: Regression with ic/ac text objects and comment plugin
  9.1.1239: if_python: no tuple data type support
  9.1.1238: wrong cursor column with 'set splitkeep=screen'
  9.1.1237: Compile error with C89 compiler in term.c
  9.1.1236: tests: test_comments leaves swapfiles around
  9.1.1235: cproto files are outdated
  9.1.1234: Compile error when SIZE_MAX is not defined
  9.1.1233: Coverity warns about NULL pointer when triggering WinResized
  9.1.1232: Vim script is missing the tuple data type
  9.1.1231: filetype: SPA JSON files are not recognized
  9.1.1230: inconsistent CTRL-C behaviour for popup windows
  9.1.1229: the comment plugin can be improved
  9.1.1228: completion: current position column wrong after got a match
  9.1.1227: no tests for the comment package
  9.1.1226: "shellcmdline" completion doesn't work with input()
  9.1.1225: extra NULL check in VIM_CLEAR()
  9.1.1224: cannot :put while keeping indent
  9.1.1223: wrong translation used for encoding failures
  9.1.1222: using wrong length for last inserted string
  9.1.1221: Wrong cursor pos when leaving Insert mode just after 'autoindent'
  9.1.1220: filetype: uv.lock file not recognized
  9.1.1219: Strange error with wrong type for matchfuzzy() "camelcase"
  9.1.1218: missing out-of-memory check in filepath.c
  9.1.1217: tests: typos in test_matchfuzzy.vim
  9.1.1216: Pasting the '.' register multiple times may not work
  9.1.1215: Patch 9.1.1213 has some issues
  9.1.1214: matchfuzzy() can be improved for camel case matches
  9.1.1213: cannot :put while keeping indent
  9.1.1212: too many strlen() calls in edit.c
  9.1.1212: filetype: logrotate'd pacmanlogs are not recognized
  9.1.1211: TabClosedPre is triggered just before the tab is being freed
  9.1.1210: translation(ru): missing Russian translation for the new tutor
  9.1.1209: colorcolumn not drawn after virtual text lines
  9.1.1208: MS-Windows: not correctly restoring alternate screen on Win 10
  9.1.1207: MS-Windows: build warning in filepath.c
  9.1.1206: tests: test_filetype fails when a file is a directory
  9.1.1205: completion: preinserted text not removed when closing pum
  9.1.1204: MS-Windows: crash when passing long string to expand()
  9.1.1203: matchparen keeps cursor on case label in sh filetype
  9.1.1202: Missing TabClosedPre autocommand
  9.1.1201: 'completefuzzycollect' does not handle dictionary correctly
  9.1.1200: cmdline pum not cleared for input() completion
  9.1.1199: gvim uses hardcoded xpm icon file
  9.1.1198: [security]: potential data loss with zip.vim
  9.1.1197: process_next_cpt_value() uses wrong condition
  9.1.1196: filetype: config files for container tools are not recognized
  9.1.1195: inside try-block: fn body executed with default arg undefined
  9.1.1194: filetype: false positive help filetype detection
  9.1.1193: Unnecessary use of STRCAT() in au_event_disable()
  9.1.1192: Vim crashes with term response debug logging enabled
  9.1.1191: tests: test for patch 9.1.1186 doesn't fail without the patch
  9.1.1190: C indentation does not detect multibyte labels
  9.1.1189: if_python: build error due to incompatible pointer types
  9.1.1188: runtime(tera): tera support can be improved
  9.1.1187: matchparen plugin wrong highlights shell case statement
  9.1.1186: filetype: help files in git repos are not detected
  9.1.1185: endless loop with completefuzzycollect and no match found
  9.1.1184: Unnecessary use of vim_tolower() in vim_strnicmp_asc()
  9.1.1083: "above" virtual text breaks cursorlineopt=number
  9.1.1182: No cmdline completion for 'completefuzzycollect'
  9.1.1181: Unnecessary STRLEN() calls in insexpand.c
  9.1.1180: short-description
  9.1.1179: too many strlen() calls in misc2.c
  9.1.1178: not possible to generate completion candidates using fuzzy matching
  9.1.1177: filetype: tera files not detected
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.1.1629" release="1.1" arch="src" src="src/vim-9.1.1629-1.1.src.rpm">
          <filename>vim-9.1.1629-1.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.1.1629" release="1.1" arch="noarch" src="noarch/vim-data-common-9.1.1629-1.1.noarch.rpm">
          <filename>vim-data-common-9.1.1629-1.1.noarch.rpm</filename>
        </package>
        <package name="vim-debugsource" epoch="0" version="9.1.1629" release="1.1" arch="x86_64" src="x86_64/vim-debugsource-9.1.1629-1.1.x86_64.rpm">
          <filename>vim-debugsource-9.1.1629-1.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.1.1629" release="1.1" arch="x86_64" src="x86_64/vim-small-9.1.1629-1.1.x86_64.rpm">
          <filename>vim-small-9.1.1629-1.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small-debuginfo" epoch="0" version="9.1.1629" release="1.1" arch="x86_64" src="x86_64/vim-small-debuginfo-9.1.1629-1.1.x86_64.rpm">
          <filename>vim-small-debuginfo-9.1.1629-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>461</id>
    <title>Security update for rust-keylime</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1758008947" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242623" id="1242623" title="VUL-0: CVE-2025-3416: rust-keylime: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247193" id="1247193" title="VUL-0: CVE-2024-58266: rust-keylime: shlex: certain bytes allowed to appear unquoted and unescaped in command arguments" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248006" id="1248006" title="VUL-0: CVE-2025-55159: rust-keylime: slab: incorrect bounds check in get_disjoint_mut function can lead to undefined behavior or potential crash due to out-of-bounds access" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3416" id="CVE-2025-3416" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3416" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55159" id="CVE-2025-55159" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55159" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58266" id="CVE-2024-58266" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58266" type="cve" />
    </references>
    <description>This update for rust-keylime fixes the following issues:

- Update vendored crate slab to version 0.4.11
  * CVE-2025-55159: Fixed incorrect bounds check in get_disjoint_mut function 
    leading to undefined behavior or potential crash due to out-of-bounds 
    access (bsc#1248006)

- Update to version 0.2.8+12:
  * build(deps): bump actions/checkout from 4 to 5
  * build(deps): bump cfg-if from 1.0.0 to 1.0.1
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump clap from 4.5.39 to 4.5.45
  * build(deps): bump pest from 2.8.0 to 2.8.1
  * Fix clippy warnings
  * Use verifier-provided interval for continuous attestation timing
  * Add meta object with seconds_to_next_attestation to evidence response
  * Fix boot time retrieval
  * Fix IMA log format (it must be ['text/plain']) (#1073)
  * Remove unnecessary configuration fields
  * cargo: Bump retry-policies to version 0.4.0

- Update vendored crate shlex to version 1.3.0
  * CVE-2024-58266: Fixed command injection (bsc#1247193) 

- Update to version 0.2.7+141:
  * service: Use WantedBy=multi-user.target
  * rpm: Add subpackage for push-attestation agent
  * push-model: implement continuous attestation with configurable intervals
  * Retry registration forever in the state machine
  * Add Verifier URL to configuration
  * Align exp.backoff to current configuration format
  * Increase coverage of state machine (using Context)
  * Increase coverage of struct_filler.rs
  * Groom code (remove dead code)
  * Fix exponential backoff (10secs, 4xx accepted)
  * test: Add documentation test to tests/run.sh
  * tpm: Avoid running code example during documentation tests
  * state_machine: Always start the agent from the Unregistered state
  * Add fixes for the URL construction
  * Refactor evidences collection in push attestation agent
  * push-model: refactor attestation logic into a state machine
  * Fix body sending by allowing serializing strings (#1057)
  * Log ResilientClient errors/response status codes (#1055)
  * Add AK signing scheme and hash algorithm to negotiation
  * tpm: Add method to extract signing scheme and hash algorithm from AK
  * Allow custom content-type/accept headers
  * Integrate exponential backoff to registration (#1052)
  * keylime/structures: Rename ShaValues to PcrBanks
  * Add resilient_client for exponential backoff (#1048)

- Update vendored crate openssl 0.10.73:
  * CVE-2025-3416: Fixed Use-After-Free in Md::fetch and Cipher::fetch (bsc#1242623) 

- Update to version 0.2.7+117:
  * Increase coverage in evidence handling structure
  * Add Capabilities Negotiations resp. missing fields
  * Fix UEFI test to check file access in all cases
  * context_info_handler: Do not assume /var/lib/keylime exists
  * Fix clippy warnings about uninlined format arguments
  * attestation: Allow unwrap() in tests
  * Increase coverage (groom code, extend unit tests)
  * Include IMA/UEFI logs in Evidence Handling request
  * Include method to get all IMA entries as string
  * Send correct list of pcr banks and sign algorithms
  * Try to fix TPM tests related issues
  * Define attestation perform asynchronous
  * Perform attestation in push model agent binary
  * Refactor code to use new attestation.rs
  * Create attestation.rs for Attestation stuff
  * Move ContextInfo management to its own handler
  * Adjust context_info.rs after rebase
  * Add attestation function to ContextInfo structure
  * Add prohibited signing algorithms, avoid ecschnorr
  * keylime/config: Use macro to implement PushModelConfigTrait
  * Introduce keylime-macros and define_view_trait
  * config: Remove KeylimeConfig structure
  * config: Remove unnecessary options and lazy initialization
  * Fix pcr_bank function to send all possible slots
  * Send Content-Type:application/json on request (#1039)
  * Send correct 'key_algorithm' in certification_keys (#1035)
  * Push Model: Persist Attestation Key to file
  * Add Keylime push model binary to root GNUmakefile
  * Use singleton to avoid multiple Context allocation
  * tests: Do not assume `/var/lib/keylime` exists (#1030)
  * lib/cert: Fix race condition due to use of same file path
  * payloads: Fix race condition in tests
  * Add uefi_log_handler.rs to parse UEFI binary
  * Use IMA log parser to send correct entry count
  * Add IMA log parser
  * build(deps): bump once_cell from 1.19.0 to 1.21.3
  * lib/config/base.rs: Add more unit tests
  * lib/permissions: Add unit tests
  * keylime-agent: move JsonWrapper from common.rs to the library
  * lib/agent_data: Move agent_data related tests from common
  * common: Replace APIVersion with the library Version structure
  * keylime_agent: Move secure_mount.rs to the library
  * lib: Rename keylime_error.rs as error.rs
  * config: Move config to keylime library
  * config: Rename push_model_config to push_model
  * lib: Move permissions.rs from keylime-agent to the lib
  * Extract Capabilities Negotiation info from TPM (#1014)
</description>
    <pkglist>
      <collection>
        <package name="rust-keylime" epoch="0" version="0.2.8+12" release="1.1" arch="src" src="src/rust-keylime-0.2.8+12-1.1.src.rpm">
          <filename>rust-keylime-0.2.8+12-1.1.src.rpm</filename>
        </package>
        <package name="rust-keylime" epoch="0" version="0.2.8+12" release="1.1" arch="x86_64" src="x86_64/rust-keylime-0.2.8+12-1.1.x86_64.rpm">
          <filename>rust-keylime-0.2.8+12-1.1.x86_64.rpm</filename>
        </package>
        <package name="rust-keylime-debuginfo" epoch="0" version="0.2.8+12" release="1.1" arch="x86_64" src="x86_64/rust-keylime-debuginfo-0.2.8+12-1.1.x86_64.rpm">
          <filename>rust-keylime-debuginfo-0.2.8+12-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>458</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1757666530" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248438" id="1248438" title="VUL-0: ucode-intel: 20250812 release" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20053" id="CVE-2025-20053" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20053" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20109" id="CVE-2025-20109" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-20109" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22839" id="CVE-2025-22839" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22839" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22840" id="CVE-2025-22840" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22840" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22889" id="CVE-2025-22889" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22889" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26403" id="CVE-2025-26403" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26403" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32086" id="CVE-2025-32086" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32086" type="cve" />
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Intel CPU Microcode was updated to the 20250812 release (bsc#1248438)
     - CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
     - CVE-2025-22840: Sequence of processor instructions leads to unexpected behavior for some Intel Xeon 6 Scalable processors may allow an authenticated user to potentially enable escalation of privilege via local access
     - CVE-2025-22839: Insufficient granularity of access control in the OOB-MSM for some Intel Xeon 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege via adjacent access.
     - CVE-2025-22889: Improper handling of overlap between protected memory ranges for some Intel Xeon 6 processor with Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.
     - CVE-2025-20053: Improper buffer restrictions for some Intel Xeon Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access.
     - CVE-2025-26403: Out-of-bounds write in the memory subsystem for some Intel Xeon 6 processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.
     - CVE-2025-32086: Improperly implemented security check for standard in the DDRIO configuration for some Intel Xeon 6 Processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access.
     - Update for functional issues.
     - Updated Platforms:

  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | ARL-H          | A1       | 06-c5-02/82 | 00000118 | 00000119 | Core Ultra Processor (Series 2)
  | ARL-S/HX (8P)  | B0       | 06-c6-02/82 | 00000118 | 00000119 | Core Ultra Processor (Series 2)
  | EMR-SP         | A1       | 06-cf-02/87 | 210002a9 | 210002b3 | Xeon Scalable Gen5
  | GNR-AP/SP      | B0       | 06-ad-01/95 | 010003a2 | 010003d0 | Xeon Scalable Gen6
  | GNR-AP/SP      | H0       | 06-ad-01/20 | 0a0000d1 | 0a000100 | Xeon Scalable Gen6
  | ICL-D          | B0       | 06-6c-01/10 | 010002d0 | 010002e0 | Xeon D-17xx, D-27xx
  | ICX-SP         | Dx/M1    | 06-6a-06/87 | 0d000404 | 0d000410 | Xeon Scalable Gen3
  | LNL            | B0       | 06-bd-01/80 | 0000011f | 00000123 | Core Ultra 200 V Series Processor
  | MTL            | C0       | 06-aa-04/e6 | 00000024 | 00000025 | Core™ Ultra Processor
  | RPL-H/P/PX 6+8 | J0       | 06-ba-02/e0 | 00004128 | 00004129 | Core Gen13
  | RPL-U 2+8      | Q0       | 06-ba-03/e0 | 00004128 | 00004129 | Core Gen13
  | SPR-HBM        | Bx       | 06-8f-08/10 | 2c0003f7 | 2c000401 | Xeon Max
  | SPR-SP         | E4/S2    | 06-8f-07/87 | 2b000639 | 2b000643 | Xeon Scalable Gen4
  | SPR-SP         | E5/S3    | 06-8f-08/87 | 2b000639 | 2b000643 | Xeon Scalable Gen4
  | SRF-SP         | C0       | 06-af-03/01 | 03000341 | 03000362 | Xeon 6700-Series Processors with E-Cores

  New Disclosures Updated in Prior Releases:
  All ADL, RPL, SPR, EMR, MTL, ARL Microcode patches previously released in May 2025.
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20250812" release="1.1" arch="src" src="src/ucode-intel-20250812-1.1.src.rpm">
          <filename>ucode-intel-20250812-1.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-intel" epoch="0" version="20250812" release="1.1" arch="x86_64" src="x86_64/ucode-intel-20250812-1.1.x86_64.rpm">
          <filename>ucode-intel-20250812-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>459</id>
    <title>Security update for sevctl</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1757666866" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242618" id="1242618" title="VUL-0: CVE-2025-3416: sevctl: openssl: Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243860" id="1243860" title="VUL-0: CVE-2024-12224: sevctl: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12224" id="CVE-2024-12224" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12224" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3416" id="CVE-2025-3416" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3416" type="cve" />
    </references>
    <description>This update for sevctl fixes the following issues:

- CVE-2025-3416: openssl: Fixed Use-After-Free in Md::fetch and Cipher::fetch (bsc#1242618)
- CVE-2024-12224: idna: Fixed Punycode labels not producing any non-ASCII when decode (bsc#1243860)
</description>
    <pkglist>
      <collection>
        <package name="sevctl" epoch="0" version="0.4.3" release="3.1" arch="src" src="src/sevctl-0.4.3-3.1.src.rpm">
          <filename>sevctl-0.4.3-3.1.src.rpm</filename>
        </package>
        <package name="sevctl" epoch="0" version="0.4.3" release="3.1" arch="x86_64" src="x86_64/sevctl-0.4.3-3.1.x86_64.rpm">
          <filename>sevctl-0.4.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="sevctl-debuginfo" epoch="0" version="0.4.3" release="3.1" arch="x86_64" src="x86_64/sevctl-debuginfo-0.4.3-3.1.x86_64.rpm">
          <filename>sevctl-debuginfo-0.4.3-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>440</id>
    <title>Recommended update for regionServiceClientConfigAzure</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1756733269" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243419" id="1243419" title="regionServiceClientConfig* packages have broken dependencies" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246995" id="1246995" title="[SLES-16.0.x86_64-0.9.4-EC2-Build1.1.raw.xz]  guestregister.service fails with invalid credentials" type="bugzilla" />
    </references>
    <description>This update for regionServiceClientConfigAzure fixes the following issues:

- SLE 16 python-requests requiers SSL v3 certificates. 
  Update 2 region server certs to support SLE 16 when it gets released. (bsc#1246995)
- Update dependency name for metadata package, name change in SLE 16 (bsc#1243419)
- Replacing certificate for rgnsrv-azure-southeastasia to get rid of weird chain cert
- New 4096 certificate for rgnsrv-azure-southeastasia 
</description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigAzure" epoch="0" version="3.0.0" release="1.1" arch="noarch" src="noarch/regionServiceClientConfigAzure-3.0.0-1.1.noarch.rpm">
          <filename>regionServiceClientConfigAzure-3.0.0-1.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigAzure" epoch="0" version="3.0.0" release="1.1" arch="src" src="src/regionServiceClientConfigAzure-3.0.0-1.1.src.rpm">
          <filename>regionServiceClientConfigAzure-3.0.0-1.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>443</id>
    <title>Recommended update for regionServiceClientConfigGCE</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1756744895" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1242063" id="1242063" title="python-gcemetadata build issue on 16.0" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246995" id="1246995" title="[SLES-16.0.x86_64-0.9.4-EC2-Build1.1.raw.xz]  guestregister.service fails with invalid credentials" type="bugzilla" />
    </references>
    <description>This update for regionServiceClientConfigGCE fixes the following issues:

- SLE 16 python-requests requiers SSL v3 certificates. 
  Update 2 region server certs to support SLE 16 when it gets released. (bsc#1246995)
- Update conditional to handle name change of metadata package in SLE 16. (bsc#1242063)
- Add no ipv6
</description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigGCE" epoch="0" version="5.0.0" release="1.1" arch="noarch" src="noarch/regionServiceClientConfigGCE-5.0.0-1.1.noarch.rpm">
          <filename>regionServiceClientConfigGCE-5.0.0-1.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigGCE" epoch="0" version="5.0.0" release="1.1" arch="src" src="src/regionServiceClientConfigGCE-5.0.0-1.1.src.rpm">
          <filename>regionServiceClientConfigGCE-5.0.0-1.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>441</id>
    <title>Recommended update for regionServiceClientConfigEC2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1756733545" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243419" id="1243419" title="regionServiceClientConfig* packages have broken dependencies" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246995" id="1246995" title="[SLES-16.0.x86_64-0.9.4-EC2-Build1.1.raw.xz]  guestregister.service fails with invalid credentials" type="bugzilla" />
    </references>
    <description>This update for regionServiceClientConfigEC2 fixes the following issues:

- SLE 16 python-requests requiers SSL v3 certificates. 
  Update 2 region server certs to support SLE 16 when it gets released. (bsc#1246995)
- Update dependency to accomodate metadata binary package name change in SLE 16. (bsc#1243419)
- Fix us-east-1 cert 
- New 4096 certificate for rgnsrv-ec2-us-east1
</description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigEC2" epoch="0" version="5.0.0" release="1.1" arch="noarch" src="noarch/regionServiceClientConfigEC2-5.0.0-1.1.noarch.rpm">
          <filename>regionServiceClientConfigEC2-5.0.0-1.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigEC2" epoch="0" version="5.0.0" release="1.1" arch="src" src="src/regionServiceClientConfigEC2-5.0.0-1.1.src.rpm">
          <filename>regionServiceClientConfigEC2-5.0.0-1.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>464</id>
    <title>Security update for udisks2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1758267838" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248502" id="1248502" title="VUL-0: CVE-2025-8067: udisks2: missing bounds check can lead to out-of-bounds read in udisks daemon" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8067" id="CVE-2025-8067" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8067" type="cve" />
    </references>
    <description>This update for udisks2 fixes the following issues:

- CVE-2025-8067: Fixed missing bounds check leading to out-of-bounds read (bsc#1248502)
</description>
    <pkglist>
      <collection>
        <package name="libudisks2-0" epoch="0" version="2.9.4" release="2.1" arch="x86_64" src="x86_64/libudisks2-0-2.9.4-2.1.x86_64.rpm">
          <filename>libudisks2-0-2.9.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="libudisks2-0-debuginfo" epoch="0" version="2.9.4" release="2.1" arch="x86_64" src="x86_64/libudisks2-0-debuginfo-2.9.4-2.1.x86_64.rpm">
          <filename>libudisks2-0-debuginfo-2.9.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="libudisks2-0_btrfs" epoch="0" version="2.9.4" release="2.1" arch="x86_64" src="x86_64/libudisks2-0_btrfs-2.9.4-2.1.x86_64.rpm">
          <filename>libudisks2-0_btrfs-2.9.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="libudisks2-0_btrfs-debuginfo" epoch="0" version="2.9.4" release="2.1" arch="x86_64" src="x86_64/libudisks2-0_btrfs-debuginfo-2.9.4-2.1.x86_64.rpm">
          <filename>libudisks2-0_btrfs-debuginfo-2.9.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="libudisks2-0_lvm2" epoch="0" version="2.9.4" release="2.1" arch="x86_64" src="x86_64/libudisks2-0_lvm2-2.9.4-2.1.x86_64.rpm">
          <filename>libudisks2-0_lvm2-2.9.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="libudisks2-0_lvm2-debuginfo" epoch="0" version="2.9.4" release="2.1" arch="x86_64" src="x86_64/libudisks2-0_lvm2-debuginfo-2.9.4-2.1.x86_64.rpm">
          <filename>libudisks2-0_lvm2-debuginfo-2.9.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="udisks2" epoch="0" version="2.9.4" release="2.1" arch="src" src="src/udisks2-2.9.4-2.1.src.rpm">
          <filename>udisks2-2.9.4-2.1.src.rpm</filename>
        </package>
        <package name="udisks2" epoch="0" version="2.9.4" release="2.1" arch="x86_64" src="x86_64/udisks2-2.9.4-2.1.x86_64.rpm">
          <filename>udisks2-2.9.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="udisks2-debuginfo" epoch="0" version="2.9.4" release="2.1" arch="x86_64" src="x86_64/udisks2-debuginfo-2.9.4-2.1.x86_64.rpm">
          <filename>udisks2-debuginfo-2.9.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="udisks2-debugsource" epoch="0" version="2.9.4" release="2.1" arch="x86_64" src="x86_64/udisks2-debugsource-2.9.4-2.1.x86_64.rpm">
          <filename>udisks2-debugsource-2.9.4-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>478</id>
    <title>Security update for net-tools</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1758879058" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=142461" id="142461" title="L3: ifconfig can fail to list aliases due to get_name() induced stack corruption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=544339" id="544339" title="net-tools-1.60-732.1: needlessly duplicated calls to fopen" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243581" id="1243581" title="VUL-0: CVE-2025-46836: net-tools: the absence of bound check may lead to a stack buffer overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248410" id="1248410" title="[Build 129.5] ltp test if4-addr-addlarge_ifconfig fails when adding an alias interface using ifconfig" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248687" id="1248687" title="VUL-0: net-tools: stack buffer overflow in parse_hex" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46836" id="CVE-2025-46836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46836" type="cve" />
    </references>
    <description>This update for net-tools fixes the following issues:

- Fixed stack buffer overflow in parse_hex, proc_gen_fmt, ax25 and netrom (bsc#1248687)
- Fixed stack overflow in ax25 and netrom (bsc#1248687)
- CVE-2025-46836: Fixed stack buffer overflow caused by the absence of bound checks (bsc#1243581)
</description>
    <pkglist>
      <collection>
        <package name="net-tools" epoch="0" version="2.10" release="4.1" arch="src" src="src/net-tools-2.10-4.1.src.rpm">
          <filename>net-tools-2.10-4.1.src.rpm</filename>
        </package>
        <package name="net-tools" epoch="0" version="2.10" release="4.1" arch="x86_64" src="x86_64/net-tools-2.10-4.1.x86_64.rpm">
          <filename>net-tools-2.10-4.1.x86_64.rpm</filename>
        </package>
        <package name="net-tools-debuginfo" epoch="0" version="2.10" release="4.1" arch="x86_64" src="x86_64/net-tools-debuginfo-2.10-4.1.x86_64.rpm">
          <filename>net-tools-debuginfo-2.10-4.1.x86_64.rpm</filename>
        </package>
        <package name="net-tools-debugsource" epoch="0" version="2.10" release="4.1" arch="x86_64" src="x86_64/net-tools-debugsource-2.10-4.1.x86_64.rpm">
          <filename>net-tools-debugsource-2.10-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>469</id>
    <title>Security update for krb5</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1758530557" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241219" id="1241219" title="VUL-0: CVE-2025-3576: krb5: krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3576" id="CVE-2025-3576" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3576" type="cve" />
    </references>
    <description>This update for krb5 fixes the following issues:

- CVE-2025-3576: Fixed Kerberos RC4-HMAC-MD5 Checksum Vulnerability (bsc#1241219)
</description>
    <pkglist>
      <collection>
        <package name="krb5" epoch="0" version="1.20.1" release="7.1" arch="src" src="src/krb5-1.20.1-7.1.src.rpm">
          <filename>krb5-1.20.1-7.1.src.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.20.1" release="7.1" arch="x86_64" src="x86_64/krb5-1.20.1-7.1.x86_64.rpm">
          <filename>krb5-1.20.1-7.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-debuginfo" epoch="0" version="1.20.1" release="7.1" arch="x86_64" src="x86_64/krb5-debuginfo-1.20.1-7.1.x86_64.rpm">
          <filename>krb5-debuginfo-1.20.1-7.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-debugsource" epoch="0" version="1.20.1" release="7.1" arch="x86_64" src="x86_64/krb5-debugsource-1.20.1-7.1.x86_64.rpm">
          <filename>krb5-debugsource-1.20.1-7.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>476</id>
    <title>Recommended update for runc</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1758796861" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214960" id="1214960" title="ssh slowness when many entries in /proc/mounts (created by containers) ref:_00D1igLOd._5005qVSkHB:ref" type="bugzilla" />
    </references>
    <description>This update for runc fixes the following issues:

Update to runc v1.3.1:

Upstream changelog is available from &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.1&gt;

Update to runc v1.3.0:

Upstream changelog is available from &lt;https://github.com/opencontainers/runc/releases/tag/v1.3.0&gt;

</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.3.1" release="1.1" arch="src" src="src/runc-1.3.1-1.1.src.rpm">
          <filename>runc-1.3.1-1.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.3.1" release="1.1" arch="x86_64" src="x86_64/runc-1.3.1-1.1.x86_64.rpm">
          <filename>runc-1.3.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="runc-debuginfo" epoch="0" version="1.3.1" release="1.1" arch="x86_64" src="x86_64/runc-debuginfo-1.3.1-1.1.x86_64.rpm">
          <filename>runc-debuginfo-1.3.1-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>470</id>
    <title>Security update for git</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1758531173" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1212476" id="1212476" title="patch shebang line match the python version required in the package" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219660" id="1219660" title="VUL-0: CVE-2024-24577: git,libgit2: arbitrary code execution due to heap corruption in git_index_add" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235600" id="1235600" title="VUL-0: CVE-2024-50349: git: passwords for trusted sites could be sent to untrusted sites" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235601" id="1235601" title="VUL-0: CVE-2024-52006: git: Carriage Returns via the credential protocol to credential helpers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239989" id="1239989" title="gitk broken with SHA256 git repo" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245938" id="1245938" title="VUL-0: CVE-2025-27613: git: arbitrary writable file creation and truncation in Gitk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245939" id="1245939" title="VUL-0: CVE-2025-27614: git: arbitrary script execution via repo clonation in gitk" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245942" id="1245942" title="VUL-0: CVE-2025-46835: git: untrusted repository cloning can lead to arbitrary writable file creation in Git GUI" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245943" id="1245943" title="VUL-0: CVE-2025-48384: git: script may be unintentionally executed after checkout due to CRLF transforming" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245946" id="1245946" title="VUL-0: CVE-2025-48385: git: arbitrary code execution due to protocol injection via fetching advertised bundle" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245947" id="1245947" title="VUL-0: CVE-2025-48386: git: buffer overflow in static buffer 'target' in wincred credential helper" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24577" id="CVE-2024-24577" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24577" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50349" id="CVE-2024-50349" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50349" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52006" id="CVE-2024-52006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52006" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27613" id="CVE-2025-27613" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27613" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27614" id="CVE-2025-27614" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27614" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46334" id="CVE-2025-46334" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46334" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46835" id="CVE-2025-46835" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46835" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48384" id="CVE-2025-48384" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48384" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48385" id="CVE-2025-48385" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48385" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48386" id="CVE-2025-48386" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48386" type="cve" />
    </references>
    <description>This update for git fixes the following issues:

- Update to 2.51.0
  
  - UI, Workflows &amp; Features
    - Userdiff patterns for the R language have been added.
    - Documentation for "git send-email" has been updated with a
      bit more credential helper and OAuth information.
    - "git cat-file --batch" learns to understand %(objectmode)
      atom to allow the caller to tell missing objects (due to
      repository corruption) and submodules (whose commit objects
      are OK to be missing) apart.
    - "git diff --no-index dirA dirB" can limit the comparison with
      pathspec at the end of the command line, just like normal
      "git diff".
    - "git subtree" (in contrib/) learned to grok GPG signing its
      commits.
    - "git whatchanged" that is longer to type than "git log --raw"
      which is its modern rough equivalent has outlived its
      usefulness more than 10 years ago.  Plan to deprecate and
      remove it.
    - An interchange format for stash entries is defined, and
      subcommand of "git stash" to import/export has been added.
    - "git merge/pull" has been taught the "--compact-summary"
      option to use the compact-summary format, intead of diffstat,
      when showing the summary of the incoming changes.
    - "git imap-send" has been broken for a long time, which has
      been resurrected and then taught to talk OAuth2.0 etc.
    - Some error messages from "git imap-send" has been updated.
    - When "git daemon" sees a signal while attempting to accept()
      a new client, instead of retrying, it skipped it by mistake,
      which has been corrected.
    - The reftable ref backend has matured enough; Git 3.0 will
      make it the default format in a newly created repositories by
      default.
    - "netrc" credential helper has been improved to understand
      textual service names (like smtp) in addition to the numeric
      port numbers (like 25).
    - Lift the limitation to use changed-path filter in "git log"
      so that it can be used for a pathspec with multiple literal
      paths.
    - Clean up the way how signature on commit objects are exported
      to and imported from fast-import stream.
    - Remove unsupported, unused, and unsupportable old option from
      "git log".
    - Document recently added "git imap-send --list" with an
      example.
    - "git pull" learned to pay attention to pull.autostash
      configuration variable, which overrides
      rebase/merge.autostash.
    - "git for-each-ref" learns "--start-after" option to help
      applications that want to page its output.
    - "git switch" and "git restore" are declared to be no longer
      experimental.
    - "git -c alias.foo=bar foo -h baz" reported "'foo' is aliased
      to 'bar'" and then went on to run "git foo -h baz", which was
      unexpected.  Tighten the rule so that alias expansion is
      reported only when "-h" is the sole option.
  - Performance, Internal Implementation, Development Support etc.
    - "git pack-objects" learned to find delta bases from blobs at
      the same path, using the --path-walk API.
    - CodingGuidelines update.
    - Add settings for Solaris 10 &amp; 11.
    - Meson-based build/test framework now understands TAP output
      generated by our tests.
    - "Do not explicitly initialize to zero" rule has been
      clarified in the CodingGuidelines document.
    - A test helper "test_seq" function learned the "-f &lt;fmt&gt;"
      option, which allowed us to simplify a lot of test scripts.
    - A lot of stale stuff has been removed from the contrib/
      hierarchy.
    - "git push" and "git fetch" are taught to update refs in
      batches to gain performance.
    - Some code paths in "git prune" used to ignore the passed-in
      repository object and used the `the_repository` singleton
      instance instead, which has been corrected.
    - Update ".clang-format" and ".editorconfig" to match our style
      guide a bit better.
    - "make coccicheck" succeeds even when spatch made suggestions,
      which has been updated to fail in such a case.
    - Code clean-up around object access API.
    - Define .precision to more canned parse-options type to avoid
      bugs coming from using a variable with a wrong type to
      capture the parsed values.
    - Flipping the default hash function to SHA-256 at Git 3.0
      boundary is planned.
    - Declare weather-balloon we raised for "bool" type 18 months
      ago a success and officially allow using the type in our
      codebase.
    - GIT_TEST_INSTALLED was not honored in the recent topic
      related to SHA256 hashes, which has been corrected.
    - The pop_most_recent_commit() function can have quite
      expensive worst case performance characteristics, which has
      been optimized by using prio-queue data structure.
    - Move structure definition from unrelated header file to where
      it belongs.
    - To help our developers, document what C99 language features
      are being considered for adoption, in addition to what past
      experiments have already decided.
    - The reftable unit tests are now ported to the "clar" unit
      testing framework.
    - Redefine where the multi-pack-index sits in the object
      subsystem, which recently was restructured to allow multiple
      backends that support a single object source that belongs to
      one repository.  A MIDX does span multiple "object sources".
    - Reduce implicit assumption and dependence on the_repository
      in the object-file subsystem.

  - Fixes since v2.50 Unless otherwise noted, all the changes in
    2.50.X maintenance track, including security updates, are
    included in this release.
    - A memory-leak in an error code path has been plugged.
    - Some leftover references to documentation source files that
      no longer exist, due to recent ".txt" -&gt; ".adoc" renaming,
      have been corrected.
    - "git stash -p &lt;pathspec&gt;" improvements. 
    - "git send-email" incremented its internal message counter
      when a message was edited, which made logic that treats the
      first message specially misbehave, which has been corrected.
    - "git stash" recorded a wrong branch name when submodules are
      present in the current checkout, which has been corrected.
    - When asking to apply mailmap to both author and committer
      field while showing a commit object, the field that appears
      later was not correctly parsed and replaced, which has been
      corrected.
    - "git maintenance" lacked the care "git gc" had to avoid
      holding onto the repository lock for too long during packing
      refs, which has been remedied.
    - Avoid regexp_constraint and instead use comparison_constraint
      when listing functions to exclude from application of
      coccinelle rules, as spatch can be built with different
      regexp engine X-&lt;.
    - Updating submodules from the upstream did not work well when
      submodule's HEAD is detached, which has been improved. 
    - Remove unnecessary check from "git daemon" code. (merge
      0c856224d2 cb/daemon-fd-check-fix later to maint).
    - Use of sysctl() system call to learn the total RAM size used
      on BSDs has been corrected.
    - Drop FreeBSD 4 support and declare that we support only
      FreeBSD 12 or later, which has memmem() supported.
    - A diff-filter with negative-only specification like "git log
      --diff-filter=d" did not trigger correctly, which has been
      fixed.
    - A failure to open the index file for writing due to
      conflicting access did not state what went wrong, which has
      been corrected.
    - Tempfile removal fix in the codepath to sign commits with SSH
      keys.
    - Code and test clean-up around string-list API.
    - "git apply -N" should start from the current index and
      register only new files, but it instead started from an empty
      index, which has been corrected.
    - Leakfix with a new and a bit invasive test on pack-bitmap
      files.
    - "git fetch --prune" used to be O(n^2) expensive when there
      are many refs, which has been corrected.
    - When a ref creation at refs/heads/foo/bar fails, the files
      backend now removes refs/heads/foo/ if the directory is
      otherwise not used.
    - "pack-objects" has been taught to avoid pointing into objects
      in cruft packs from midx.
    - "git remote" now detects remote names that overlap with each
      other (e.g., remote nickname "outer" and "outer/inner" are
      used at the same time), as it will lead to overlapping
      remote-tracking branches.
    - The gpg.program configuration variable, which names a
      pathname to the (custom) GPG compatible program, can now be
      spelled with ~tilde expansion.
    - Our &lt;sane-ctype.h&gt; header file relied on that the
      system-supplied &lt;ctype.h&gt; header is not later included, which
      would override our macro definitions, but "amazon linux"
      broke this assumption.  Fix this by preemptively including
      &lt;ctype.h&gt; near the beginning of &lt;sane-ctype.h&gt; ourselves.
      (merge 9d3b33125f ps/sane-ctype-workaround later to maint).
    - Clean-up compat/bswap.h mess. (merge f4ac32c03a
      ss/compat-bswap-revamp later to maint).
    - Meson-based build did not handle libexecdir setting
      correctly, which has been corrected. (merge 056dbe8612
      rj/meson-libexecdir-fix later to maint).
    - Document that we do not require "real" name when signing your
      patches off. (merge 1f0fed312a
      bc/contribution-under-non-real-names later to maint).
    - "git commit" that concludes a conflicted merge failed to
      notice and remove existing comment added automatically (like
      "# Conflicts:") when the core.commentstring is set to 'auto'.
      (merge 92b7c7c9f5 ac/auto-comment-char-fix later to maint).
    - "git rebase -i" with bogus rebase.instructionFormat
      configuration failed to produce the todo file after recording
      the state files, leading to confused "git status"; this has
      been corrected. (merge ade14bffd7
      ow/rebase-verify-insn-fmt-before-initializing-state later to
      maint).
    - A few file descriptors left unclosed upon program completion
      in a few test helper programs are now closed. (merge
      0f1b33815b hl/test-helper-fd-close later to maint).
    - Interactive prompt code did not correctly strip CRLF from the
      end of line on Windows. (merge 711a20827b js/prompt-crlf-fix
      later to maint).
    - The config API had a set of convenience wrapper functions
      that implicitly use the_repository instance; they have been
      removed and inlined at the calling sites.
    - "git add/etc -p" now honor the diff.context configuration
      variable, and also they learn to honor the -U&lt;n&gt; command-line
      option. (merge 2b3ae04011 lm/add-p-context later to maint).
    - The case where a new submodule takes a path where there used
      to be a completely different subproject is now dealt with a
      bit better than before. (merge 5ed8c5b465
      kj/renamed-submodule later to maint).
    - The deflate codepath in "git archive --format=zip" had a
      longstanding bug coming from misuse of zlib API, which has
      been corrected.


- Update to 2.50.1:
  
  * CVE-2025-27613: Fixed arbitrary writable file creation and 
    truncation in Gitk (bsc#1245938)
  * CVE-2025-27614: Fixed arbitrary script execution via repo 
    clonation in gitk (bsc#1245939)
  * CVE-2025-46835: Fixed untrusted repository cloning leading 
    to arbitrary writable file creation in Git GUI (bsc#1245942)
  * CVE-2025-48384: Fixed CRLF transforming (bsc#1245943)
  * CVE-2025-48385: Fixed arbitrary code execution due to protocol 
    injection (bsc#1245946)
  * CVE-2025-48386: Fixed buffer overflow in static buffer (bsc#1245947)

- Update to 2.48.1:
  
  * CVE-2024-50349: Fixed password leak (bsc#1235600)
  * CVE-2024-52006: Fixed Carriage Returns via the credential 
    protocol to credential helpers (bsc#1235601)

- Update to 2.48.0:

  * Reference consistency checks: git refs verify
  * Reflogs can now be migrated with git refs migrate
  * git is free of memory leaks as covered by the test suite
  * Performance improvements

- Update to 2.47.1:

  * Use after free and double freeing at the end in
    "git log -L... -p" had been identified and fixed.
  * "git maintenance start" crashed due to an uninitialized
    variable reference, which has been corrected.
  * Fail gracefully instead of crashing when attempting to write
    the contents of a corrupt in-core index as a tree object.
  * A "git fetch" from the superproject going down to a submodule
    used a wrong remote when the default remote names are set
    differently between them.
  * The "gitk" project tree has been synchronized again

- Update to 2.47.0:
  
 * A few descriptions in "git show-ref -h" have been clarified.
 * A 'P' command to "git add -p" that passes the patch hunk to the
   pager has been added.
 * "git grep -W" omits blank lines that follow the found function at
   the end of the file, just like it omits blank lines before the next
   function.
 * The value of http.proxy can have "path" at the end for a socks
   proxy that listens to a unix-domain socket, but we started to
   discard it when we taught proxy auth code path to use the
   credential helpers, which has been corrected.
 * The code paths to compact multiple reftable files have been updated
   to correctly deal with multiple compaction triggering at the same
   time.
 * Support to specify ref backend for submodules has been enhanced.
 * "git svn" has been taught about svn:global-ignores property
   recent versions of Subversion has.
 * The default object hash and ref backend format used to be settable
   only with explicit command line option to "git init" and
   environment variables, but now they can be configured in the user's
   global and system wide configuration.
 * "git send-email" learned "--translate-aliases" option that reads
   addresses from the standard input and emits the result of applying
   aliases on them to the standard output.
 * 'git for-each-ref' learned a new "--format" atom to find the branch
   that the history leading to a given commit "%(is-base:&lt;commit&gt;)" is
   likely based on.
 * The command line prompt support used to be littered with bash-isms,
   which has been corrected to work with more shells.
 * Support for the RUNTIME_PREFIX feature has been added to z/OS port.
 * "git send-email" learned "--mailmap" option to allow rewriting the
   recipient addresses.
 * "git mergetool" learned to use VSCode as a merge backend.
 * "git pack-redundant" has been marked for removal in Git 3.0.
 * One-line messages to "die" and other helper functions will get LF
   added by these helper functions, but many existing messages had an
   unnecessary LF at the end, which have been corrected.
 * The "scalar clone" command learned the "--no-tags" option.
 * The environment GIT_ADVICE has been intentionally kept undocumented
   to discourage its use by interactive users.  Add documentation to
   help tool writers.
 * "git apply --3way" learned to take "--ours" and other options.

- Update to version 2.46.2:
  
  * Revert the "git patch-id" change that went into 2.46.1,
    as it seems to have got a regression reported (I haven't verified,
    but it is better to keep a known breakage than adding an unintended
    regression).
  * In a few corner cases "git diff --exit-code" failed to report
    "changes" (e.g., renamed without any content change), which has
    been corrected.
  * The interpret-trailers command failed to recognise the end of the
    message when the commit log ends in an incomplete line.

- Update to version 2.46.1;
  
  * "git checkout --ours" (no other arguments) complained that the
    option is incompatible with branch switching, which is technically
    correct, but found confusing by some users.  It now says that the
    user needs to give pathspec to specify what paths to checkout.
  * It has been documented that we avoid "VAR=VAL shell_func" and why.
  * "git add -p" by users with diff.suppressBlankEmpty set to true
    failed to parse the patch that represents an unmodified empty line
    with an empty line (not a line with a single space on it), which
    has been corrected.
  * "git rebase --help" referred to "offset" (the difference between
    the location a change was taken from and the change gets replaced)
    incorrectly and called it "fuzz", which has been corrected.
  * "git notes add -m '' --allow-empty" and friends that take prepared
    data to create notes should not invoke an editor, but it started
    doing so since Git 2.42, which has been corrected.
  * An expensive operation to prepare tracing was done in re-encoding
    code path even when the tracing was not requested, which has been
    corrected.
  * Perforce tests have been updated.
  * The credential helper to talk to OSX keychain sometimes sent
    garbage bytes after the username, which has been corrected.
  * A recent update broke "git ls-remote" used outside a repository,
    which has been corrected.
  * "git config --value=foo --fixed-value section.key newvalue" barfed
    when the existing value in the configuration file used the
    valueless true syntax, which has been corrected.
  * "git reflog expire" failed to honor annotated tags when computing
   reachable commits.
  * A flakey test and incorrect calls to strtoX() functions have been
    fixed.
  * Follow-up on 2.45.1 regression fix.
  * "git rev-list ... | git diff-tree -p --remerge-diff --stdin" should
    behave more or less like "git log -p --remerge-diff" but instead it
    crashed, forgetting to prepare a temporary object store needed.
  * The patch parser in "git patch-id" has been tightened to avoid
    getting confused by lines that look like a patch header in the log
    message.
  * "git bundle unbundle" outside a repository triggered a BUG()
    unnecessarily, which has been corrected.
  * The code forgot to discard unnecessary in-core commit buffer data
    for commits that "git log --skip=&lt;number&gt;" traversed but omitted
    from the output, which has been corrected.
  * "git verify-pack" and "git index-pack" started dying outside a
    repository, which has been corrected.
  * A corner case bug in "git stash" was fixed.

- Change less requirement to path to allow for use with BusyBox

- Update to 2.46.0
  
  UI, Workflows &amp; Features
   * The "--rfc" option of "git format-patch" learned to take an
     optional string value to be used in place of "RFC" to tweak the
     "[PATCH]" on the subject header.
   * The credential helper protocol, together with the HTTP layer, have
     been enhanced to support authentication schemes different from
     username &amp; password pair, like Bearer and NTLM.
   * Command line completion script (in contrib/) learned to complete
     "git symbolic-ref" a bit better (you need to enable plumbing
     commands to be completed with GIT_COMPLETION_SHOW_ALL_COMMANDS).
   * When the user responds to a prompt given by "git add -p" with an
     unsupported command, list of available commands were given, which
     was too much if the user knew what they wanted to type but merely
     made a typo.  Now the user gets a much shorter error message.
   * The color parsing code learned to handle 12-bit RGB colors, spelled
     as "#RGB" (in addition to "#RRGGBB" that is already supported).
   * The operation mode options (like "--get") the "git config" command
     uses have been deprecated and replaced with subcommands (like "git
     config get").
   * "git tag" learned the "--trailer" option to futz with the trailers
     in the same way as "git commit" does.
   * A new global "--no-advice" option can be used to disable all advice
     messages, which is meant to be used only in scripts.
   * Updates to symbolic refs can now be made as a part of ref
     transaction.
   * The trailer API has been reshuffled a bit.
   * Terminology to call various ref-like things are getting
     straightened out.
   * The command line completion script (in contrib/) has been adjusted
     to the recent update to "git config" that adopted subcommand based
     UI.
   * The knobs to tweak how reftable files are written have been made
     available as configuration variables.
   * When "git push" notices that the commit at the tip of the ref on
     the other side it is about to overwrite does not exist locally, it
     used to first try fetching it if the local repository is a partial
     clone. The command has been taught not to do so and immediately
     fail instead.
   * The promisor.quiet configuration knob can be set to true to make
     lazy fetching from promisor remotes silent.
   * The inter/range-diff output has been moved to the end of the patch
     when format-patch adds it to a single patch, instead of writing it
     before the patch text, to be consistent with what is done for a
     cover letter for a multi-patch series.
   * A new command has been added to migrate a repository that uses the
     files backend for its ref storage to use the reftable backend, with
     limitations.
   * "git diff --exit-code --ext-diff" learned to take the exit status
     of the external diff driver into account when deciding the exit
     status of the overall "git diff" invocation when configured to do
     so.
   * "git update-ref --stdin" learned to handle transactional updates of
     symbolic-refs.
   * "git format-patch --interdiff" for multi-patch series learned to
     turn on cover letters automatically (unless told never to enable
     cover letter with "--no-cover-letter" and such).
   * The "--heads" option of "ls-remote" and "show-ref" has been been
     deprecated; "--branches" replaces "--heads".
   * For over a year, setting add.interactive.useBuiltin configuration
     variable did nothing but giving a "this does not do anything"
     warning.  The warning has been removed.
   * The http transport can now be told to send request with
     authentication material without first getting a 401 response.
   * A handful of entries are added to the GitFAQ document.
   * "git var GIT_SHELL_PATH" should report the path to the shell used
     to spawn external commands, but it didn't do so on Windows, which
     has been corrected.
  Performance, Internal Implementation, Development Support etc.
   * Advertise "git contacts", a tool for newcomers to find people to
     ask review for their patches, a bit more in our developer
     documentation.
   * In addition to building the objects needed, try to link the objects
     that are used in fuzzer tests, to make sure at least they build
     without bitrot, in Linux CI runs.
   * Code to write out reftable has seen some optimization and
     simplification.
   * Tests to ensure interoperability between reftable written by jgit
     and our code have been added and enabled in CI.
   * The singleton index_state instance "the_index" has been eliminated
     by always instantiating "the_repository" and replacing references
     to "the_index"  with references to its .index member.
   * Git-GUI has a new maintainer, Johannes Sixt.
   * The "test-tool" has been taught to run testsuite tests in parallel,
     bypassing the need to use the "prove" tool.
   * The "whitespace check" task that was enabled for GitHub Actions CI
     has been ported to GitLab CI.
   * The refs API lost functions that implicitly assumes to work on the
     primary ref_store by forcing the callers to pass a ref_store as an
     argument.
   * Code clean-up to reduce inter-function communication inside
     builtin/config.c done via the use of global variables.
   * The pack bitmap code saw some clean-up to prepare for a follow-up topic.
   * Preliminary code clean-up for "git send-email".
   * The default "creation-factor" used by "git format-patch" has been
     raised to make it more aggressively find matching commits.
   * Before discovering the repository details, We used to assume SHA-1
     as the "default" hash function, which has been corrected. Hopefully
     this will smoke out codepaths that rely on such an unwarranted
     assumptions.
   * The project decision making policy has been documented.
   * The strcmp-offset tests have been rewritten using the unit test
     framework.
   * "git add -p" learned to complain when an answer with more than one
     letter is given to a prompt that expects a single letter answer.
   * The alias-expanded command lines are logged to the trace output.
   * A new test was added to ensure git commands that are designed to
     run outside repositories do work.
   * A few tests in reftable library have been rewritten using the
     unit test framework.
   * A pair of test helpers that essentially are unit tests on hash
     algorithms have been rewritten using the unit-tests framework.
   * A test helper that essentially is unit tests on the "decorate"
     logic has been rewritten using the unit-tests framework.
   * Many memory leaks in the sparse-checkout code paths have been
     plugged.
   * "make check-docs" noticed problems and reported to its output but
     failed to signal its findings with its exit status, which has been
     corrected.
   * Building with "-Werror -Wwrite-strings" is now supported.
   * To help developers, the build procedure now allows builders to use
     CFLAGS_APPEND to specify additional CFLAGS.
   * "oidtree" tests were rewritten to use the unit test framework.
   * The structure of the document that records longer-term project
     decisions to deprecate/remove/update various behaviour has been
     outlined.
   * The pseudo-merge reachability bitmap to help more efficient storage
     of the reachability bitmap in a repository with too many refs has
     been added.
   * When "git merge" sees that the index cannot be refreshed (e.g. due
     to another process doing the same in the background), it died but
     after writing MERGE_HEAD etc. files, which was useless for the
     purpose to recover from the failure.
   * The output from "git cat-file --batch-check" and "--batch-command
     (info)" should not be unbuffered, for which some tests have been
     added.
   * A CPP macro USE_THE_REPOSITORY_VARIABLE is introduced to help
     transition the codebase to rely less on the availability of the
     singleton the_repository instance.
   * "git version --build-options" reports the version information of
     OpenSSL and other libraries (if used) in the build.
   * Memory ownership rules for the in-core representation of
     remote.*.url configuration values have been straightened out, which
     resulted in a few leak fixes and code clarification.
   * When bundleURI interface fetches multiple bundles, Git failed to
     take full advantage of all bundles and ended up slurping duplicated
     objects, which has been corrected.
   * The code to deal with modified paths that are out-of-cone in a
     sparsely checked out working tree has been optimized.
   * An existing test of oidmap API has been rewritten with the
     unit-test framework.
   * The "ort" merge backend saw one bugfix for a crash that happens
     when inner merge gets killed, and assorted code clean-ups.
   * A new warning message is issued when a command has to expand a
     sparse index to handle working tree cruft that are outside of the
     sparse checkout.
   * The test framework learned to take the test body not as a single
     string but as a here-document.
   * "git push '' HEAD:there" used to hit a BUG(); it has been corrected
     to die with "fatal: bad repository ''".
   * What happens when http.cookieFile gets the special value "" has
     been clarified in the documentation.
  Fixes
   * "git rebase --signoff" used to forget that it needs to add a
     sign-off to the resulting commit when told to continue after a
     conflict stops its operation.
   * The procedure to build multi-pack-index got confused by the
     replace-refs mechanism, which has been corrected by disabling the
     latter.
   * The "-k" and "--rfc" options of "format-patch" will now error out
     when used together, as one tells us not to add anything to the
     title of the commit, and the other one tells us to add "RFC" in
     addition to "PATCH".
   * "git stash -S" did not handle binary files correctly, which has
     been corrected.
   * A scheduled "git maintenance" job is expected to work on all
     repositories it knows about, but it stopped at the first one that
     errored out.  Now it keeps going.
   * zsh can pretend to be a normal shell pretty well except for some
     glitches that we tickle in some of our scripts. Work them around
     so that "vimdiff" and our test suite works well enough with it.
   * Command line completion support for zsh (in contrib/) has been
     updated to stop exposing internal state to end-user shell
     interaction.
   * Tests that try to corrupt in-repository files in chunked format did
     not work well on macOS due to its broken "mv", which has been
     worked around.
   * The maximum size of attribute files is enforced more consistently.
   * Unbreak CI jobs so that we do not attempt to use Python 2 that has
     been removed from the platform.
   * Git 2.43 started using the tree of HEAD as the source of attributes
     in a bare repository, which has severe performance implications.
     For now, revert the change, without ripping out a more explicit
     support for the attr.tree configuration variable.
   * The "--exit-code" option of "git diff" command learned to work with
     the "--ext-diff" option.
   * Windows CI running in GitHub Actions started complaining about the
     order of arguments given to calloc(); the imported regex code uses
     the wrong order almost consistently, which has been corrected.
   * Expose "name conflict" error when a ref creation fails due to D/F
     conflict in the ref namespace, to improve an error message given by
     "git fetch".
     (merge 9339fca23e it/refs-name-conflict later to maint).
   * The SubmittingPatches document now refers folks to manpages
     translation project.
   * The documentation for "git diff --name-only" has been clarified
     that it is about showing the names in the post-image tree.
   * The credential helper that talks with osx keychain learned to avoid
     storing back the authentication material it just got received from
     the keychain.
     (merge e1ab45b2da kn/osxkeychain-skip-idempotent-store later to maint).
   * The chainlint script (invoked during "make test") did nothing when
     it failed to detect the number of available CPUs.  It now falls
     back to 1 CPU to avoid the problem.
   * Revert overly aggressive "layered defence" that went into 2.45.1
     and friends, which broke "git-lfs", "git-annex", and other use
     cases, so that we can rebuild necessary counterparts in the open.
   * "git init" in an already created directory, when the user
     configuration has includeif.onbranch, started to fail recently,
     which has been corrected.
   * Memory leaks in "git mv" has been plugged.
   * The safe.directory configuration knob has been updated to
     optionally allow leading path matches.
   * An overly large ".gitignore" files are now rejected silently.
   * Upon expiration event, the credential subsystem forgot to clear
     in-core authentication material other than password (whose support
     was added recently), which has been corrected.
   * Fix for an embarrassing typo that prevented Python2 tests from running
     anywhere.
   * Varargs functions that are unannotated as printf-like or execl-like
     have been annotated as such.
   * "git am" has a safety feature to prevent it from starting a new
     session when there already is a session going.  It reliably
     triggers when a mbox is given on the command line, but it has to
     rely on the tty-ness of the standard input.  Add an explicit way to
     opt out of this safety with a command line option.
     (merge 62c71ace44 jk/am-retry later to maint).
   * A leak in "git imap-send" that somehow escapes LSan has been
     plugged.
   * Setting core.abbrev too early before the repository set-up
     (typically in "git clone") caused segfault, which as been
     corrected.
   * When the user adds to "git rebase -i" instruction to "pick" a merge
     commit, the error experience is not pleasant.  Such an error is now
     caught earlier in the process that parses the todo list.
   * We forgot to normalize the result of getcwd() to NFC on macOS where
     all other paths are normalized, which has been corrected.  This still
     does not address the case where core.precomposeUnicode configuration
     is not defined globally.
   * Earlier we stopped using the tree of HEAD as the default source of
     attributes in a bare repository, but failed to document it.  This
     has been corrected.
   * "git update-server-info" and "git commit-graph --write" have been
     updated to use the tempfile API to avoid leaving cruft after
     failing.
   * An unused extern declaration for mingw has been removed to prevent
     it from causing build failure.
   * A helper function shared between two tests had a copy-paste bug,
     which has been corrected.
   * "git fetch-pack -k -k" without passing "--lock-pack" (which we
     never do ourselves) did not work at all, which has been corrected.
   * CI job to build minimum fuzzers learned to pass NO_CURL=NoThanks to
     the build procedure, as its build environment does not offer, or
     the rest of the build needs, anything cURL.
     (merge 4e66b5a990 jc/fuzz-sans-curl later to maint).
   * "git diff --no-ext-diff" when diff.external is configured ignored
     the "--color-moved" option.
     (merge 0f4b0d4cf0 rs/diff-color-moved-w-no-ext-diff-fix later to maint).
   * "git archive --add-virtual-file=&lt;path&gt;:&lt;contents&gt;" never paid
     attention to the --prefix=&lt;prefix&gt; option but the documentation
     said it would. The documentation has been corrected.
     (merge 72c282098d jc/archive-prefix-with-add-virtual-file later to maint).
   * When GIT_PAGER failed to spawn, depending on the code path taken,
     we failed immediately (correct) or just spew the payload to the
     standard output (incorrect).  The code now always fail immediately
     when GIT_PAGER fails.
     (merge 78f0a5d187 rj/pager-die-upon-exec-failure later to maint).
   * date parser updates to be more careful about underflowing epoch
     based timestamp.
     (merge 9d69789770 db/date-underflow-fix later to maint).
   * The Bloom filter used for path limited history traversal was broken
     on systems whose "char" is unsigned; update the implementation and
     bump the format version to 2.
     (merge 9c8a9ec787 tb/path-filter-fix later to maint).
   * Typofix.
     (merge 231cf7370e as/pathspec-h-typofix later to maint).
   * Code clean-up.
     (merge 4b837f821e rs/simplify-submodule-helper-super-prefix-invocation later to maint).
   * "git describe --dirty --broken" forgot to refresh the index before
     seeing if there is any chang, ("git describe --dirty" correctly did
     so), which has been corrected.
     (merge b8ae42e292 as/describe-broken-refresh-index-fix later to maint).
   * Test suite has been taught not to unnecessarily rely on DNS failing
     a bogus external name.
     (merge 407cdbd271 jk/tests-without-dns later to maint).
   * GitWeb update to use committer date consistently in rss/atom feeds.
     (merge cf6ead095b am/gitweb-feed-use-committer-date later to maint).
   * Custom control structures we invented more recently have been
     taught to the clang-format file.
     (merge 1457dff9be rs/clang-format-updates later to maint).
   * Developer build procedure fix.
     (merge df32729866 tb/dev-build-pedantic-fix later to maint).
   * "git push" that pushes only deletion gave an unnecessary and
     harmless error message when push negotiation is configured, which
     has been corrected.
     (merge 4d8ee0317f jc/disable-push-nego-for-deletion later to maint).
   * Address-looking strings found on the trailer are now placed on the
     Cc: list after running through sanitize_address by "git send-email".
     (merge c852531f45 cb/send-email-sanitize-trailer-addresses later to maint).
   * Tests that use GIT_TEST_SANITIZE_LEAK_LOG feature got their exit
     status inverted, which has been corrected.
     (merge 8c1d6691bc rj/test-sanitize-leak-log-fix later to maint).
   * The http.cookieFile and http.saveCookies configuration variables
     have a few values that need to be avoided, which are now ignored
     with warning messages.
     (merge 4f5822076f jc/http-cookiefile later to maint).
   * Repacking a repository with multi-pack index started making stupid
     pack selections in Git 2.45, which has been corrected.
     (merge 8fb6d11fad ds/midx-write-repack-fix later to maint).
   * Fix documentation mark-up regression in 2.45.
     (merge 6474da0aa4 ja/doc-markup-updates-fix later to maint).
   * Work around asciidoctor's css that renders `monospace` material
     in the SYNOPSIS section of manual pages as block elements.
     (merge d44ce6ddd5 js/doc-markup-updates-fix later to maint).

- CVE-2024-24577: Fixed arbitrary code execution due to heap corruption
  in git_index_add (bsc#1219660)

- Update to 2.45.2:
  
  * Revert "defense in depth" fixes from 2.45.1 broke 'git lfs' and
   'git annex'

- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]
</description>
    <pkglist>
      <collection>
        <package name="git" epoch="0" version="2.51.0" release="1.1" arch="src" src="src/git-2.51.0-1.1.src.rpm">
          <filename>git-2.51.0-1.1.src.rpm</filename>
        </package>
        <package name="git" epoch="0" version="2.51.0" release="1.1" arch="x86_64" src="x86_64/git-2.51.0-1.1.x86_64.rpm">
          <filename>git-2.51.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="git-core" epoch="0" version="2.51.0" release="1.1" arch="x86_64" src="x86_64/git-core-2.51.0-1.1.x86_64.rpm">
          <filename>git-core-2.51.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="git-core-debuginfo" epoch="0" version="2.51.0" release="1.1" arch="x86_64" src="x86_64/git-core-debuginfo-2.51.0-1.1.x86_64.rpm">
          <filename>git-core-debuginfo-2.51.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="git-debuginfo" epoch="0" version="2.51.0" release="1.1" arch="x86_64" src="x86_64/git-debuginfo-2.51.0-1.1.x86_64.rpm">
          <filename>git-debuginfo-2.51.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="git-debugsource" epoch="0" version="2.51.0" release="1.1" arch="x86_64" src="x86_64/git-debugsource-2.51.0-1.1.x86_64.rpm">
          <filename>git-debugsource-2.51.0-1.1.x86_64.rpm</filename>
        </package>
        <package name="perl-Git" epoch="0" version="2.51.0" release="1.1" arch="x86_64" src="x86_64/perl-Git-2.51.0-1.1.x86_64.rpm">
          <filename>perl-Git-2.51.0-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>477</id>
    <title>Security update for curl</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1758797420" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246197" id="1246197" title="shipped curl command v8.14.1  does not have the --ftp-pasv option" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249191" id="1249191" title="VUL-0: CVE-2025-9086: curl: Out of bounds read for cookie path" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249348" id="1249348" title="VUL-0: CVE-2025-10148: curl: predictable WebSocket mask" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249367" id="1249367" title="curl can return invalid return value" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9086" id="CVE-2025-9086" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9086" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10148" id="CVE-2025-10148" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10148" type="cve" />
      <reference href="https://github.com/curl/curl#15496" id="curl/curl#15496" title="https://github.com/curl/curl#15496" type="github" />
      <reference href="https://jira.suse.com/browse/PED-13055" id="PED-13055" title="https://jira.suse.com/browse/PED-13055" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-13056" id="PED-13056" title="https://jira.suse.com/browse/PED-13056" type="jira" />
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2025-9086: Fixed Out of bounds read for cookie path (bsc#1249191)
- CVE-2025-10148: Predictable WebSocket mask (bsc#1249348)
- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]

- Updated to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Bugfixes:
    - asyn-thrdd: fix cleanup when RR fails due to OOM
    - ftp: fix teardown of DATA connection in done
    - http: fail early when rewind of input failed when following redirects
    - multi: fix add_handle resizing
    - tls BIOs: handle BIO_CTRL_EOF correctly
    - tool_getparam: make --no-anyauth not be accepted
    - wolfssl: fix sending of early data
    - ws: handle blocked sends better
    - ws: tests and fixes

- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.

- Update to 8.14.0:
  
  * Changes:
    - mqtt: send ping at upkeep interval
    - schannel: handle pkcs12 client certificates containing CA certificates
    - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
    - vquic: ngtcp2 + openssl support
    - wcurl: import v2025.04.20 script + docs
    - websocket: add option to disable auto-pong reply
  
  * Bugfixes:
    - asny-thrdd: fix detach from running thread
    - async-threaded resolver: use ref counter
    - async: DoH improvements
    - build: enable gcc-12/13+, clang-10+ picky warnings
    - build: enable gcc-15 picky warnings
    - certs: drop unused `default_bits` from `.prm` files
    - cf-https-connect: use the passed in dns struct pointer
    - cf-socket: fix FTP accept connect
    - cfilters: remove assert
    - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
    - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
    - cmake: revert `CURL_LTO` behavior for multi-config generators
    - configure: fix --disable-rt
    - CONTRIBUTE: add project guidelines for AI use
    - cpool/cshutdown: force close connections under pressure
    - curl: fix memory leak when -h is used in config file
    - curl_get_line: handle lines ending on the buffer boundary
    - headers: enforce a max number of response header to accept
    - http: fix HTTP/2 handling of TE request header using "trailers"
    - lib: include files using known path
    - lib: unify conversions to/from hex
    - libssh: add NULL check for Curl_meta_get()
    - libssh: fix memory leak
    - mqtt: use conn/easy meta hash
    - multi: do transfer book keeping using mid
    - multi: init_do(): check result
    - netrc: avoid NULL deref on weird input
    - netrc: avoid strdup NULL
    - netrc: deal with null token better
    - openssl-quic: avoid potential `-Wnull-dereference`, add assert
    - openssl-quic: fix shutdown when stream not open
    - openssl: enable builds for *both* engines and providers
    - openssl: set the cipher string before doing private cert
    - progress: avoid integer overflow when gathering total transfer size
    - rand: update comment on Curl_rand_bytes weak random
    - rustls: make max size of cert and key reasonable
    - smb: avoid integer overflow on weird input date
    - urlapi: redirecting to "" is considered fine

- Update to 8.13.0:
  
  * Changes:
    - curl: add write-out variable 'tls_earlydata'
    - curl: make --url support a file with URLs
    - gnutls: set priority via --ciphers
    - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
    - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
    - OpenSSL/quictls: add support for TLSv1.3 early data
    - rustls: add support for CERTINFO
    - rustls: add support for SSLKEYLOGFILE
    - rustls: support ECH w/ DoH lookup for config
    - rustls: support native platform verifier
    - var: add a '64dec' function that can base64 decode a string
  
  * Bugfixes:
    - conn: fix connection reuse when SSL is optional
    - hash: use single linked list for entries
    - http2: detect session being closed on ingress handling
    - http2: reset stream on response header error
    - http: remove a HTTP method size restriction
    - http: version negotiation
    - httpsrr: fix port detection
    - libssh: fix freeing of resources in disconnect
    - libssh: fix scp large file upload for 32-bit size_t systems
    - openssl-quic: do not iterate over multi handles
    - openssl: check return value of X509_get0_pubkey
    - openssl: drop support for old OpenSSL/LibreSSL versions
    - openssl: fix crash on missing cert password
    - openssl: fix pkcs11 URI checking for key files.
    - openssl: remove bad `goto`s into other scope
    - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
    - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
    - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
    - sshserver: fix excluding obsolete client config lines
    - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
    - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
    - tool_operate: fail SSH transfers without server auth
    - url: call protocol handler's disconnect in Curl_conn_free
    - urlapi: remove percent encoded dot sequences from the URL path
    - urldata: remove 'hostname' from struct Curl_async

- Update to 8.12.1:
  
  * Bugfixes:
    - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
    - asyn-thread: fix HTTPS RR crash
    - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
    - asyn-thread: survive a c-ares channel set to NULL
    - cmake: always reference OpenSSL and ZLIB via imported targets
    - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
    - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
    - content_encoding: #error on too old zlib
    - imap: TLS upgrade fix
    - ldap: drop support for legacy Novell LDAP SDK
    - libssh2: comparison is always true because rc &lt;= -1
    - libssh2: raise lowest supported version to 1.2.8
    - libssh: drop support for libssh older than 0.9.0
    - openssl-quic: ignore ciphers for h3
    - pop3: TLS upgrade fix
    - runtests: fix the disabling of the memory tracking
    - runtests: quote commands to support paths with spaces
    - scache: add magic checks
    - smb: silence '-Warray-bounds' with gcc 13+
    - smtp: TLS upgrade fix
    - tool_cfgable: sort struct fields by size, use bitfields for booleans
    - tool_getparam: add "TLS required" flag for each such option
    - vtls: fix multissl-init
    - wakeup_write: make sure the eventfd write sends eight bytes

- Update to 8.12.0:
  
  * Changes:
    - curl: add byte range support to --variable reading from file
    - curl: make --etag-save acknowledge --create-dirs
    - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
    - getinfo: provide info which auth was used for HTTP and proxy
    - hyper: drop support
    - openssl: add support to use keys and certificates from PKCS#11 provider
    - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
    - vtls: feature ssls-export for SSL session im-/export
  
  * Bugfixes:
    - altsvc: avoid integer overflow in expire calculation
    - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
    - asyn-ares: fix memory leak
    - asyn-ares: initial HTTPS resolve support
    - asyn-thread: use c-ares to resolve HTTPS RR
    - async-thread: avoid closing eventfd twice
    - cd2nroff: do not insist on quoted &lt;&gt; within backticks
    - cd2nroff: support "none" as a TLS backend
    - conncache: count shutdowns against host and max limits
    - content_encoding: drop support for zlib before 1.2.0.4
    - content_encoding: namespace GZIP flag constants
    - content_encoding: put the decomp buffers into the writer structs
    - content_encoding: support use of custom libzstd memory functions
    - cookie: cap expire times to 400 days
    - cookie: parse only the exact expire date
    - curl: return error if etag options are used with multiple URLs
    - curl_multi_fdset: include the shutdown connections in the set
    - curl_sha512_256: rename symbols to the curl namespace
    - curl_url_set.md: adjust the added-in to 7.62.0
    - doh: send HTTPS RR requests for all HTTP(S) transfers
    - easy: allow connect-only handle reuse with easy_perform
    - easy: make curl_easy_perform() return error if connection still there
    - easy_lock: use Sleep(1) for thread yield on old Windows
    - ECH: update APIs to those agreed with OpenSSL maintainers
    - GnuTLS: fix 'time_appconnect' for early data
    - HTTP/2: strip TE request header
    - http2: fix data_pending check
    - http2: fix value stored to 'result' is never read
    - http: ignore invalid Retry-After times
    - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
    - https-connect: start next immediately on failure
    - lib: redirect handling by protocol handler
    - multi: fix curl_multi_waitfds reporting of fd_count
    - netrc: 'default' with no credentials is not a match
    - netrc: fix password-only entries
    - netrc: restore _netrc fallback logic
    - ngtcp2: fix memory leak on connect failure
    - openssl: define `HAVE_KEYLOG_CALLBACK` before use
    - openssl: fix ECH logic
    - osslq: use SSL_poll to determine writeability of QUIC streams
    - sectransp: free certificate on error
    - select: avoid a NULL deref in cwfds_add_sock
    - src: omit hugehelp and ca-embed from libcurltool
    - ssl session cache: change cache dimensions
    - system.h: add 64-bit curl_off_t definitions for NonStop
    - telnet: handle single-byte input option
    - TLS: check connection for SSL use, not handler
    - tool_formparse.c: make curlx_uztoso a static in here
    - tool_formparse: accept digits in --form type= strings
    - tool_getparam: ECH param parsing refix
    - tool_getparam: fail --hostpubsha256 if libssh2 is not used
    - tool_getparam: fix "Ignored Return Value"
    - tool_getparam: fix memory leak on error in parse_ech
    - tool_getparam: fix the ECH parser
    - tool_operate: make --etag-compare always accept a non-existing file
    - transfer: fix CURLOPT_CURLU override logic
    - urlapi: fix redirect to a new fragment or query (only)
    - vquic: make vquic_send_packets not return without setting psent
    - vtls: fix default SSL backend as a fallback
    - vtls: only remember the expiry timestamp in session cache
    - websocket: fix message send corruption
    - x509asn1: add parse recursion limit
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.14.1" release="1.1" arch="src" src="src/curl-8.14.1-1.1.src.rpm">
          <filename>curl-8.14.1-1.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.14.1" release="1.1" arch="x86_64" src="x86_64/curl-8.14.1-1.1.x86_64.rpm">
          <filename>curl-8.14.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debuginfo" epoch="0" version="8.14.1" release="1.1" arch="x86_64" src="x86_64/curl-debuginfo-8.14.1-1.1.x86_64.rpm">
          <filename>curl-debuginfo-8.14.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debugsource" epoch="0" version="8.14.1" release="1.1" arch="x86_64" src="x86_64/curl-debugsource-8.14.1-1.1.x86_64.rpm">
          <filename>curl-debugsource-8.14.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.14.1" release="1.1" arch="x86_64" src="x86_64/libcurl4-8.14.1-1.1.x86_64.rpm">
          <filename>libcurl4-8.14.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4-debuginfo" epoch="0" version="8.14.1" release="1.1" arch="x86_64" src="x86_64/libcurl4-debuginfo-8.14.1-1.1.x86_64.rpm">
          <filename>libcurl4-debuginfo-8.14.1-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>471</id>
    <title>Recommended update for docker</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1758530686" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247594" id="1247594" title="docker-buildx packages for SLE 15 SP6/SP7 missing in release [thread::IOLoQg1mLmSVXmwVLvfYuis::]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248373" id="1248373" title="docker push to registry throws error invalid memory address or nil pointer dereference" type="bugzilla" />
      <reference href="https://jira.suse.com/browse/PED-8905" id="PED-8905" title="https://jira.suse.com/browse/PED-8905" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-12534" id="PED-12534" title="https://jira.suse.com/browse/PED-12534" type="jira" />
    </references>
    <description>This update for docker fixes the following issues:

Update to docker-buildx v0.28.0. Upstream changelog:

  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;

Update to Docker 28.4.0-ce.

See upstream changelog online at
&lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;

  * Fixes a nil pointer panic in "docker push". bsc#1248373

- Updated warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.

</description>
    <message>"Updating docker will restart the docker service, which may stop your docker containers. Do you want to proceed with the update?"</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="28.4.0_ce" release="7.1" arch="src" src="src/docker-28.4.0_ce-7.1.src.rpm">
          <filename>docker-28.4.0_ce-7.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="28.4.0_ce" release="7.1" arch="x86_64" src="x86_64/docker-28.4.0_ce-7.1.x86_64.rpm">
          <filename>docker-28.4.0_ce-7.1.x86_64.rpm</filename>
        </package>
        <package name="docker-debuginfo" epoch="0" version="28.4.0_ce" release="7.1" arch="x86_64" src="x86_64/docker-debuginfo-28.4.0_ce-7.1.x86_64.rpm">
          <filename>docker-debuginfo-28.4.0_ce-7.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>490</id>
    <title>Security update for chrony</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1760455057" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246544" id="1246544" title="VUL-0: chrony: chronyc uses racy socket creation code which allows privilege escalation from chrony to root" type="bugzilla" />
    </references>
    <description>This update for chrony fixes the following issues:

- Update to version 4.8:
  * Add maxunreach option to limit selection of unreachable sources
  * Add -u option to chronyc to drop root privileges (default
    chronyc user is set by configure script)
  * Fix refclock extpps option to work on Linux &gt;= 6.15
  * Validate refclock samples for reachability updates

- Fix racy socket creation allowing privilege escalation to root (bsc#1246544)

- Update to version 4.7:
  * Add opencommands directive to select remote monitoring
    commands
  * Add interval option to driftfile directive
  * Add waitsynced and waitunsynced options to local directive
  * Add sanity checks for integer values in configuration
  * Add support for systemd Type=notify service
  * Add RTC refclock driver
  * Allow PHC refclock to be specified with network interface name
  * Don’t require multiple refclock samples per poll to simplify
    filter configuration
  * Keep refclock reachable when dropping samples with large delay
  * Improve quantile-based filtering to adapt faster to larger
    delay
  * Improve logging of selection failures
  * Detect clock interference from other processes
  * Try to reopen message log (-l option) on cyclelogs command
  * Fix sourcedir reloading to not multiply sources
  * Fix tracking offset after failed clock step
  * Drop support for NTS with Nettle &lt; 3.6 and GnuTLS &lt; 3.6.14
  * Drop support for building without POSIX threads

- Update to version 4.6.1:
  * Add ntsaeads directive to enable only selected AEAD algorithms
    for NTS.
  * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD
    algorithm.
  * Switch to compliant NTS keys if first response from server is
    NTS NAK.

- Drop rcFOO symlinks for CODE16 (PED-266).

- Update to version 4.6:
  * Add activate option to local directive to set activation threshold
  * Add ipv4 and ipv6 options to server/pool/peer directive
  * Add kod option to ratelimit directive for server KoD RATE support
  * Add leapseclist directive to read NIST/IERS leap-seconds.list file
  * Add ptpdomain directive to set PTP domain for NTP over PTP
  * Allow disabling pidfile
  * Improve copy server option to accept unsynchronised status instantly
  * Log one selection failure on start
  * Add offset command to modify source offset correction
  * Add timestamp sources to ntpdata report
  * Fix crash on sources reload during initstepslew or RTC initialisation
  * Fix source refreshment to not repeat failed name resolving attempts

- Update to version 4.5:
  * Add support for AES-GCM-SIV in GnuTLS
  * Add support for corrections from PTP transparent clocks
  * Add support for systemd socket activation
  * Fix presend in interleaved mode
  * Fix reloading of modified sources from sourcedir
</description>
    <pkglist>
      <collection>
        <package name="chrony" epoch="0" version="4.8" release="1.1" arch="src" src="src/chrony-4.8-1.1.src.rpm">
          <filename>chrony-4.8-1.1.src.rpm</filename>
        </package>
        <package name="chrony" epoch="0" version="4.8" release="1.1" arch="x86_64" src="x86_64/chrony-4.8-1.1.x86_64.rpm">
          <filename>chrony-4.8-1.1.x86_64.rpm</filename>
        </package>
        <package name="chrony-debuginfo" epoch="0" version="4.8" release="1.1" arch="x86_64" src="x86_64/chrony-debuginfo-4.8-1.1.x86_64.rpm">
          <filename>chrony-debuginfo-4.8-1.1.x86_64.rpm</filename>
        </package>
        <package name="chrony-debugsource" epoch="0" version="4.8" release="1.1" arch="x86_64" src="x86_64/chrony-debugsource-4.8-1.1.x86_64.rpm">
          <filename>chrony-debugsource-4.8-1.1.x86_64.rpm</filename>
        </package>
        <package name="chrony-pool-suse" epoch="0" version="4.8" release="1.1" arch="noarch" src="noarch/chrony-pool-suse-4.8-1.1.noarch.rpm">
          <filename>chrony-pool-suse-4.8-1.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>491</id>
    <title>Security update for libssh</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1760455227" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246974" id="1246974" title="VUL-0: CVE-2025-8114: libssh: improper handling of allocation errors leads to NULL pointer dereference when calculating the session ID during the key exchange (KEX) process" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249375" id="1249375" title="VUL-0: CVE-2025-8277: libssh: Memory Exhaustion via Repeated Key Exchange" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8114" id="CVE-2025-8114" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8114" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8277" id="CVE-2025-8277" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8277" type="cve" />
    </references>
    <description>This update for libssh fixes the following issues:

- CVE-2025-8114: Fixed NULL pointer dereference when calculating the session ID
  during the key exchange (KEX) process (bsc#1246974)
- CVE-2025-8277: Fixed Memory Exhaustion via Repeated Key Exchange (bsc#1249375)
</description>
    <pkglist>
      <collection>
        <package name="libssh" epoch="0" version="0.10.6" release="3.1" arch="src" src="src/libssh-0.10.6-3.1.src.rpm">
          <filename>libssh-0.10.6-3.1.src.rpm</filename>
        </package>
        <package name="libssh-config" epoch="0" version="0.10.6" release="3.1" arch="x86_64" src="x86_64/libssh-config-0.10.6-3.1.x86_64.rpm">
          <filename>libssh-config-0.10.6-3.1.x86_64.rpm</filename>
        </package>
        <package name="libssh-debugsource" epoch="0" version="0.10.6" release="3.1" arch="x86_64" src="x86_64/libssh-debugsource-0.10.6-3.1.x86_64.rpm">
          <filename>libssh-debugsource-0.10.6-3.1.x86_64.rpm</filename>
        </package>
        <package name="libssh4" epoch="0" version="0.10.6" release="3.1" arch="x86_64" src="x86_64/libssh4-0.10.6-3.1.x86_64.rpm">
          <filename>libssh4-0.10.6-3.1.x86_64.rpm</filename>
        </package>
        <package name="libssh4-debuginfo" epoch="0" version="0.10.6" release="3.1" arch="x86_64" src="x86_64/libssh4-debuginfo-0.10.6-3.1.x86_64.rpm">
          <filename>libssh4-debuginfo-0.10.6-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>500</id>
    <title>Security update for expat</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1761135169" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249584" id="1249584" title="VUL-0: CVE-2025-59375: expat: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing." type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59375" id="CVE-2025-59375" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59375" type="cve" />
    </references>
    <description>This update for expat fixes the following issues:

- CVE-2025-59375: memory amplification vulnerability allows attackers to trigger excessive dynamic memory allocations
  by submitting crafted XML input (bsc#1249584).
</description>
    <pkglist>
      <collection>
        <package name="expat" epoch="0" version="2.7.1" release="3.1" arch="src" src="src/expat-2.7.1-3.1.src.rpm">
          <filename>expat-2.7.1-3.1.src.rpm</filename>
        </package>
        <package name="expat-debugsource" epoch="0" version="2.7.1" release="3.1" arch="x86_64" src="x86_64/expat-debugsource-2.7.1-3.1.x86_64.rpm">
          <filename>expat-debugsource-2.7.1-3.1.x86_64.rpm</filename>
        </package>
        <package name="libexpat1" epoch="0" version="2.7.1" release="3.1" arch="x86_64" src="x86_64/libexpat1-2.7.1-3.1.x86_64.rpm">
          <filename>libexpat1-2.7.1-3.1.x86_64.rpm</filename>
        </package>
        <package name="libexpat1-debuginfo" epoch="0" version="2.7.1" release="3.1" arch="x86_64" src="x86_64/libexpat1-debuginfo-2.7.1-3.1.x86_64.rpm">
          <filename>libexpat1-debuginfo-2.7.1-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>485</id>
    <title>Security update for aaa_base</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1760020940" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1159103" id="1159103" title="VUL-0: aaa_base: [tracker] removal of safe-rm, safe-rmdir" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1211721" id="1211721" title="[s390x] kernel: The sched.sched_min_granularity_ns sysctl was moved to debugfs in kernel 5.13 for CPU scheduler debugging only" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219038" id="1219038" title="Increase kernel.pid_max to maximum value by default?" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1221763" id="1221763" title="ptrace(PTRACE_ATTACH) fails on processes of the same user" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227117" id="1227117" title="systemd-sysctl[189]: Couldn't write '4194304' to 'kernel/pid_max': Invalid argument" type="bugzilla" />
      <reference href="https://jira.suse.com/browse/PED-264" id="PED-264" title="https://jira.suse.com/browse/PED-264" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-266" id="PED-266" title="https://jira.suse.com/browse/PED-266" type="jira" />
    </references>
    <description>This update for aaa_base fixes the following issues:

Update to version 84.87+git20240906.742565b:

  * yama-enable-ptrace: enforce changed behavior upon installation (bsc#1221763)
  * Avoid unnecessary /bin/bash dependency
  * sysctl: Fixup of not setting kernel.pid_max on 32b archs (bsc#1227117)

Update to version 84.87+git20240821.fbabe1d:

  * Add helper service for soft-reboot

Update to version 84.87+git20240809.5d13eb4:

  * cleanup aaa_base.post and fold back into specfile

Update to version 84.87+git20240805.7513b28:

  * Remove obsolete resolv+ manual page
  * Remove obsolete defaultdomain.5 manual page
  * Move /etc/skel to /usr/etc/skel (hermetic-usr)
  * Remove obsolete refresh_initrd
  * Add deprecation notice for service [jsc#PED-266]

Update to version 84.87+git20240801.75f05dd:

  * sysctl: Don't set kernel.pid_max on 32b archs (bsc#1227117)

Update to version 84.87+git20240620.57ee9e1:

  * Remove legacy-actions support [jsc#PED-264]

Update to version 84.87+git20240617.f5ff27f:

  * add /usr/bin/nu to etc/shells for nushell

Update to version 84.87+git20240614.332933e:

  * Do not save/restore cursor for foot at status line
  * Add tmux and others to DIR_COLORS (Issue #116)
  * Remove kernel.pid_max limit (bsc#1219038)
  * Add subpackge to enable ptrace

Update to version 84.87+git20240523.10a5692:

  * Add tmpfiles.d/soft-reboot-cleanup.conf

Update to version 84.87+git20240415.e6815bf:

  * drop obsolete 50-default-s390.conf (bsc#1211721)
  * fix typo in alljava.csh and drop stderr redirection

Update to version 84.87+git20240402.16596d1:

  * add alacritty to DIR_COLORS
  * Make sure tput it present before resetting TERM
  * Add mc helpers for both tcsh and bash resources
  * Do not overwrite escape sequences for xterm like
  * Check for valid TERM

Update to version 84.87+git20240202.9526d46:

  * properly shorten the variable when setting JAVA_HOME and JRE_HOME
  * silence output of alljava
  * Restrict ptrace with Yama LSM by default
  * patch alljava.sh and alljava.csh, use the links from update alternatives

Update to version 84.87+git20231023.f347d36:

  * Remove %ghost lastlog entry, lastlog is long gone
  * Remove shaky safe-rm and safe-rmdir helpers (bsc#1159103)

</description>
    <pkglist>
      <collection>
        <package name="aaa_base" epoch="0" version="84.87+git20240906.742565b" release="1.1" arch="src" src="src/aaa_base-84.87+git20240906.742565b-1.1.src.rpm">
          <filename>aaa_base-84.87+git20240906.742565b-1.1.src.rpm</filename>
        </package>
        <package name="aaa_base" epoch="0" version="84.87+git20240906.742565b" release="1.1" arch="x86_64" src="x86_64/aaa_base-84.87+git20240906.742565b-1.1.x86_64.rpm">
          <filename>aaa_base-84.87+git20240906.742565b-1.1.x86_64.rpm</filename>
        </package>
        <package name="aaa_base-debuginfo" epoch="0" version="84.87+git20240906.742565b" release="1.1" arch="x86_64" src="x86_64/aaa_base-debuginfo-84.87+git20240906.742565b-1.1.x86_64.rpm">
          <filename>aaa_base-debuginfo-84.87+git20240906.742565b-1.1.x86_64.rpm</filename>
        </package>
        <package name="aaa_base-debugsource" epoch="0" version="84.87+git20240906.742565b" release="1.1" arch="x86_64" src="x86_64/aaa_base-debugsource-84.87+git20240906.742565b-1.1.x86_64.rpm">
          <filename>aaa_base-debugsource-84.87+git20240906.742565b-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>495</id>
    <title>Security update for open-vm-tools</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1760702226" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250373" id="1250373" title="VUL-0: CVE-2025-41244: open-vm-tools: local privilege escalation vulnerability" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250692" id="1250692" title="open-vm-tools version 13.0.5 has been released - please rebaseopen-vm-tools 13.0.5 was released on Sept 29, 2025 - based on build 24915695  There are no new features in the open-vm-tools 13.0.5 release.  This is primarily a maintenance release that addres" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-41244" id="CVE-2025-41244" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-41244" type="cve" />
    </references>
    <description>This update for open-vm-tools fixes the following issues:

Update to open-vm-tools 13.0.5 based on build 24915695. (bsc#1250692): 

Please refer to the Release Notes at https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.

The granular changes that have gone into the open-vm-tools 13.0.5 release are in the ChangeLog at

  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.

There are no new features in the open-vm-tools 13.0.5 release. This is
primarily a maintenance release that addresses a security issue.

This release resolves and includes the patch for CVE-2025-41244. For more
information on this vulnerability and its impact on Broadcom products,
see VMSA-2025-0015.

A minor enhancement has been made for Guest OS Customization. The
DeployPkg plugin has been updated to use "systemctl reboot", if available.

For a more complete list of issues addressed in this release, see the
What's New and Resolved Issues section of the Release Notes.
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="13.0.5" release="1.1" arch="x86_64" src="x86_64/libvmtools0-13.0.5-1.1.x86_64.rpm">
          <filename>libvmtools0-13.0.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="libvmtools0-debuginfo" epoch="0" version="13.0.5" release="1.1" arch="x86_64" src="x86_64/libvmtools0-debuginfo-13.0.5-1.1.x86_64.rpm">
          <filename>libvmtools0-debuginfo-13.0.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="13.0.5" release="1.1" arch="src" src="src/open-vm-tools-13.0.5-1.1.src.rpm">
          <filename>open-vm-tools-13.0.5-1.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="13.0.5" release="1.1" arch="x86_64" src="x86_64/open-vm-tools-13.0.5-1.1.x86_64.rpm">
          <filename>open-vm-tools-13.0.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools-debuginfo" epoch="0" version="13.0.5" release="1.1" arch="x86_64" src="x86_64/open-vm-tools-debuginfo-13.0.5-1.1.x86_64.rpm">
          <filename>open-vm-tools-debuginfo-13.0.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools-debugsource" epoch="0" version="13.0.5" release="1.1" arch="x86_64" src="x86_64/open-vm-tools-debugsource-13.0.5-1.1.x86_64.rpm">
          <filename>open-vm-tools-debugsource-13.0.5-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>501</id>
    <title>Security update for podman</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1761137512" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249154" id="1249154" title="VUL-0: CVE-2025-9566: podman: Podman kube play command may overwrite host files" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104" id="CVE-2024-6104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6104" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6032" id="CVE-2025-6032" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6032" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9566" id="CVE-2025-9566" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9566" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22869" id="CVE-2025-22869" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22869" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27144" id="CVE-2025-27144" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27144" type="cve" />
    </references>
    <description>This update for podman fixes the following issues:

- CVE-2025-9566: Fixed kube play command overwriting host files (bsc#1249154)
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.9.5" release="8.1" arch="src" src="src/podman-4.9.5-8.1.src.rpm">
          <filename>podman-4.9.5-8.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="8.1" arch="x86_64" src="x86_64/podman-4.9.5-8.1.x86_64.rpm">
          <filename>podman-4.9.5-8.1.x86_64.rpm</filename>
        </package>
        <package name="podman-debuginfo" epoch="0" version="4.9.5" release="8.1" arch="x86_64" src="x86_64/podman-debuginfo-4.9.5-8.1.x86_64.rpm">
          <filename>podman-debuginfo-4.9.5-8.1.x86_64.rpm</filename>
        </package>
        <package name="podman-docker" epoch="0" version="4.9.5" release="8.1" arch="noarch" src="noarch/podman-docker-4.9.5-8.1.noarch.rpm">
          <filename>podman-docker-4.9.5-8.1.noarch.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="8.1" arch="x86_64" src="x86_64/podman-remote-4.9.5-8.1.x86_64.rpm">
          <filename>podman-remote-4.9.5-8.1.x86_64.rpm</filename>
        </package>
        <package name="podman-remote-debuginfo" epoch="0" version="4.9.5" release="8.1" arch="x86_64" src="x86_64/podman-remote-debuginfo-4.9.5-8.1.x86_64.rpm">
          <filename>podman-remote-debuginfo-4.9.5-8.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>502</id>
    <title>Security update for haproxy</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1761233213" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250983" id="1250983" title="VUL-0: CVE-2025-11230: haproxy: issue in the mjson JSON decoder leads to excessive resource consumption when processing numbers with large exponents" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11230" id="CVE-2025-11230" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11230" type="cve" />
    </references>
    <description>This update for haproxy fixes the following issues:

- CVE-2025-11230: Fixed mjson JSON decoder excessive resource consumption (bsc#1250983)
</description>
    <pkglist>
      <collection>
        <package name="haproxy" epoch="0" version="2.8.11+git0.01c1056a4" release="2.1" arch="src" src="src/haproxy-2.8.11+git0.01c1056a4-2.1.src.rpm">
          <filename>haproxy-2.8.11+git0.01c1056a4-2.1.src.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.8.11+git0.01c1056a4" release="2.1" arch="x86_64" src="x86_64/haproxy-2.8.11+git0.01c1056a4-2.1.x86_64.rpm">
          <filename>haproxy-2.8.11+git0.01c1056a4-2.1.x86_64.rpm</filename>
        </package>
        <package name="haproxy-debuginfo" epoch="0" version="2.8.11+git0.01c1056a4" release="2.1" arch="x86_64" src="x86_64/haproxy-debuginfo-2.8.11+git0.01c1056a4-2.1.x86_64.rpm">
          <filename>haproxy-debuginfo-2.8.11+git0.01c1056a4-2.1.x86_64.rpm</filename>
        </package>
        <package name="haproxy-debugsource" epoch="0" version="2.8.11+git0.01c1056a4" release="2.1" arch="x86_64" src="x86_64/haproxy-debugsource-2.8.11+git0.01c1056a4-2.1.x86_64.rpm">
          <filename>haproxy-debugsource-2.8.11+git0.01c1056a4-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>486</id>
    <title>Recommended update for selinux-policy</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1760425662" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228879" id="1228879" title="SELinux: ULP fails on dlopen with ENOPERM or map segment error on certain applications" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249832" id="1249832" title="[SELinux] Loading glibc from /var/livepatches results in a kernel panic on reboot" type="bugzilla" />
    </references>
    <description>This update for selinux-policy fixes the following issues:

- Ensure dbus communication is allowed bidirectionally
- policy module for kiwi
- Label /var/livepatches as lib_t for ULP on micro (bsc#1228879, bsc#1249832)
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230523+git32.d521aa73b" release="1.1" arch="noarch" src="noarch/selinux-policy-20230523+git32.d521aa73b-1.1.noarch.rpm">
          <filename>selinux-policy-20230523+git32.d521aa73b-1.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230523+git32.d521aa73b" release="1.1" arch="src" src="src/selinux-policy-20230523+git32.d521aa73b-1.1.src.rpm">
          <filename>selinux-policy-20230523+git32.d521aa73b-1.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230523+git32.d521aa73b" release="1.1" arch="noarch" src="noarch/selinux-policy-devel-20230523+git32.d521aa73b-1.1.noarch.rpm">
          <filename>selinux-policy-devel-20230523+git32.d521aa73b-1.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230523+git32.d521aa73b" release="1.1" arch="noarch" src="noarch/selinux-policy-targeted-20230523+git32.d521aa73b-1.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230523+git32.d521aa73b-1.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>508</id>
    <title>Security update for colord</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1761928584" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250750" id="1250750" title="colord[2362]: free(): invalid pointer error encountered during SLES 16.0 GM install" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42523" id="CVE-2021-42523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42523" type="cve" />
    </references>
    <description>This update for colord fixes the following issues:

- CVE-2021-42523: Fixed information disclosure in cd-device-db.c
  and cd-profile-db.c (bsc#1250750).
</description>
    <pkglist>
      <collection>
        <package name="colord" epoch="0" version="1.4.6" release="4.1" arch="src" src="src/colord-1.4.6-4.1.src.rpm">
          <filename>colord-1.4.6-4.1.src.rpm</filename>
        </package>
        <package name="colord-debugsource" epoch="0" version="1.4.6" release="4.1" arch="x86_64" src="x86_64/colord-debugsource-1.4.6-4.1.x86_64.rpm">
          <filename>colord-debugsource-1.4.6-4.1.x86_64.rpm</filename>
        </package>
        <package name="libcolord2" epoch="0" version="1.4.6" release="4.1" arch="x86_64" src="x86_64/libcolord2-1.4.6-4.1.x86_64.rpm">
          <filename>libcolord2-1.4.6-4.1.x86_64.rpm</filename>
        </package>
        <package name="libcolord2-debuginfo" epoch="0" version="1.4.6" release="4.1" arch="x86_64" src="x86_64/libcolord2-debuginfo-1.4.6-4.1.x86_64.rpm">
          <filename>libcolord2-debuginfo-1.4.6-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>522</id>
    <title>Recommended update for afterburn</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1763460158" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250471" id="1250471" title="Current build of Micro 5.2 BYOS x86_64 (Azure profile) does not set properly ssh keys when starting an instance" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5791" id="CVE-2025-5791" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5791" type="cve" />
    </references>
    <description>This update for afterburn fixes the following issues:

- Update to version 5.9.0.git21.a73f509:
  * docs/release-notes: update for release 5.10.0
  * cargo: update dependencies
  * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat
  * docs/release-notes: Add entry for Azure SharedConfig XML parsing fix
  * microsoft/azure: Fix SharedConfig parsing of XML attributes
  * microsoft/azure: Mock goalstate.SharedConfig output in tests
  * providers/azure: switch SSH key retrieval from certs endpoint to IMDS
    as azure stopped providing keys in the old one (bsc#1250471)
  * build(deps): bump the build group with 8 updates
  * build(deps): bump slab from 0.4.10 to 0.4.11
  * build(deps): bump actions/checkout from 4 to 5
  * upcloud: implement UpCloud provider
  * build(deps): bump the build group with 4 updates
  * Sync repo templates ⚙

- Update to version 5.9.0:
  * cargo: Afterburn release 5.9.0
  * docs/release-notes: update for release 5.9.0
  * cargo: update dependencies
  * Add TMT test structure and basic smoke test
  * build(deps): bump openssl from 0.10.72 to 0.10.73
  * build(deps): bump reqwest from 0.12.15 to 0.12.18
  * docs/release-notes: Update changelog entry
  * dracut: Return 255 in module-setup
  * oraclecloud: add release note and move base URL to constant
  * oraclecloud: implement oraclecloud provider
  * build(deps): bump nix from 0.29.0 to 0.30.1
  * build(deps): bump zbus from 5.7.0 to 5.7.1
  * build(deps): bump serde-xml-rs from 0.6.0 to 0.8.1
  * build(deps): bump ipnetwork from 0.20.0 to 0.21.1
  * build(deps): bump clap from 4.5.38 to 4.5.39
</description>
    <pkglist>
      <collection>
        <package name="afterburn" epoch="0" version="5.9.0.git21.a73f509" release="1.1" arch="src" src="src/afterburn-5.9.0.git21.a73f509-1.1.src.rpm">
          <filename>afterburn-5.9.0.git21.a73f509-1.1.src.rpm</filename>
        </package>
        <package name="afterburn" epoch="0" version="5.9.0.git21.a73f509" release="1.1" arch="x86_64" src="x86_64/afterburn-5.9.0.git21.a73f509-1.1.x86_64.rpm">
          <filename>afterburn-5.9.0.git21.a73f509-1.1.x86_64.rpm</filename>
        </package>
        <package name="afterburn-debuginfo" epoch="0" version="5.9.0.git21.a73f509" release="1.1" arch="x86_64" src="x86_64/afterburn-debuginfo-5.9.0.git21.a73f509-1.1.x86_64.rpm">
          <filename>afterburn-debuginfo-5.9.0.git21.a73f509-1.1.x86_64.rpm</filename>
        </package>
        <package name="afterburn-debugsource" epoch="0" version="5.9.0.git21.a73f509" release="1.1" arch="x86_64" src="x86_64/afterburn-debugsource-5.9.0.git21.a73f509-1.1.x86_64.rpm">
          <filename>afterburn-debugsource-5.9.0.git21.a73f509-1.1.x86_64.rpm</filename>
        </package>
        <package name="afterburn-dracut" epoch="0" version="5.9.0.git21.a73f509" release="1.1" arch="noarch" src="noarch/afterburn-dracut-5.9.0.git21.a73f509-1.1.noarch.rpm">
          <filename>afterburn-dracut-5.9.0.git21.a73f509-1.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>496</id>
    <title>Security update for openssl-3</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1760976989" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250232" id="1250232" title="VUL-0: CVE-2025-9230: compat-openssl098,openssl,openssl-1_0_0,openssl-1_1,openssl-3,openssl1: Out-of-bounds read &amp; write in RFC 3211 KEK Unwrap (CVE-2025-9230)" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230" id="CVE-2025-9230" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230" type="cve" />
      <reference href="https://jira.suse.com/browse/PED-13245" id="PED-13245" title="https://jira.suse.com/browse/PED-13245" type="jira" />
    </references>
    <description>This update for openssl-3 fixes the following issues:

- CVE-2025-9230: Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap (bsc#1250232)
- Disable LTO for userspace livepatching [jsc#PED-13245]

</description>
    <pkglist>
      <collection>
        <package name="libopenssl-3-devel" epoch="0" version="3.1.4" release="10.1" arch="x86_64" src="x86_64/libopenssl-3-devel-3.1.4-10.1.x86_64.rpm">
          <filename>libopenssl-3-devel-3.1.4-10.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider" epoch="0" version="3.1.4" release="10.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-3.1.4-10.1.x86_64.rpm">
          <filename>libopenssl-3-fips-provider-3.1.4-10.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider-debuginfo" epoch="0" version="3.1.4" release="10.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-debuginfo-3.1.4-10.1.x86_64.rpm">
          <filename>libopenssl-3-fips-provider-debuginfo-3.1.4-10.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.1.4" release="10.1" arch="x86_64" src="x86_64/libopenssl3-3.1.4-10.1.x86_64.rpm">
          <filename>libopenssl3-3.1.4-10.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3-debuginfo" epoch="0" version="3.1.4" release="10.1" arch="x86_64" src="x86_64/libopenssl3-debuginfo-3.1.4-10.1.x86_64.rpm">
          <filename>libopenssl3-debuginfo-3.1.4-10.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="10.1" arch="src" src="src/openssl-3-3.1.4-10.1.src.rpm">
          <filename>openssl-3-3.1.4-10.1.src.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="10.1" arch="x86_64" src="x86_64/openssl-3-3.1.4-10.1.x86_64.rpm">
          <filename>openssl-3-3.1.4-10.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debuginfo" epoch="0" version="3.1.4" release="10.1" arch="x86_64" src="x86_64/openssl-3-debuginfo-3.1.4-10.1.x86_64.rpm">
          <filename>openssl-3-debuginfo-3.1.4-10.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debugsource" epoch="0" version="3.1.4" release="10.1" arch="x86_64" src="x86_64/openssl-3-debugsource-3.1.4-10.1.x86_64.rpm">
          <filename>openssl-3-debugsource-3.1.4-10.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>503</id>
    <title>Security update for libxslt</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1761310358" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250553" id="1250553" title="VUL-0: CVE-2025-10911: libxslt: use-after-free with key data stored cross-RVT" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1251979" id="1251979" title="VUL-0: CVE-2025-11731: libxslt: type confusion in exsltFuncResultCompfunction leading to denial of service" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10911" id="CVE-2025-10911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10911" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11731" id="CVE-2025-11731" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11731" type="cve" />
    </references>
    <description>This update for libxslt fixes the following issues:

- CVE-2025-11731: type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979)
- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
</description>
    <pkglist>
      <collection>
        <package name="libexslt0" epoch="0" version="1.1.38" release="7.1" arch="x86_64" src="x86_64/libexslt0-1.1.38-7.1.x86_64.rpm">
          <filename>libexslt0-1.1.38-7.1.x86_64.rpm</filename>
        </package>
        <package name="libexslt0-debuginfo" epoch="0" version="1.1.38" release="7.1" arch="x86_64" src="x86_64/libexslt0-debuginfo-1.1.38-7.1.x86_64.rpm">
          <filename>libexslt0-debuginfo-1.1.38-7.1.x86_64.rpm</filename>
        </package>
        <package name="libxslt" epoch="0" version="1.1.38" release="7.1" arch="src" src="src/libxslt-1.1.38-7.1.src.rpm">
          <filename>libxslt-1.1.38-7.1.src.rpm</filename>
        </package>
        <package name="libxslt-debugsource" epoch="0" version="1.1.38" release="7.1" arch="x86_64" src="x86_64/libxslt-debugsource-1.1.38-7.1.x86_64.rpm">
          <filename>libxslt-debugsource-1.1.38-7.1.x86_64.rpm</filename>
        </package>
        <package name="libxslt1" epoch="0" version="1.1.38" release="7.1" arch="x86_64" src="x86_64/libxslt1-1.1.38-7.1.x86_64.rpm">
          <filename>libxslt1-1.1.38-7.1.x86_64.rpm</filename>
        </package>
        <package name="libxslt1-debuginfo" epoch="0" version="1.1.38" release="7.1" arch="x86_64" src="x86_64/libxslt1-debuginfo-1.1.38-7.1.x86_64.rpm">
          <filename>libxslt1-debuginfo-1.1.38-7.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>510</id>
    <title>Security update for libsoup</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1762260372" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250562" id="1250562" title="VUL-0: CVE-2025-11021: libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11021" id="CVE-2025-11021" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11021" type="cve" />
    </references>
    <description>This update for libsoup fixes the following issues:

- CVE-2025-11021: Ignore invalid date when processing cookies to prevent out-of-bounds read (bsc#1250562).
</description>
    <pkglist>
      <collection>
        <package name="libsoup" epoch="0" version="3.4.2" release="9.1" arch="src" src="src/libsoup-3.4.2-9.1.src.rpm">
          <filename>libsoup-3.4.2-9.1.src.rpm</filename>
        </package>
        <package name="libsoup-3_0-0" epoch="0" version="3.4.2" release="9.1" arch="x86_64" src="x86_64/libsoup-3_0-0-3.4.2-9.1.x86_64.rpm">
          <filename>libsoup-3_0-0-3.4.2-9.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-3_0-0-debuginfo" epoch="0" version="3.4.2" release="9.1" arch="x86_64" src="x86_64/libsoup-3_0-0-debuginfo-3.4.2-9.1.x86_64.rpm">
          <filename>libsoup-3_0-0-debuginfo-3.4.2-9.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-debugsource" epoch="0" version="3.4.2" release="9.1" arch="x86_64" src="x86_64/libsoup-debugsource-3.4.2-9.1.x86_64.rpm">
          <filename>libsoup-debugsource-3.4.2-9.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>504</id>
    <title>Recommended update for sqlite3</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1761811685" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248586" id="1248586" title="sqlite3 won't build when using --with icu" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252217" id="1252217" title="Please fix the %licence tag for sqlite3" type="bugzilla" />
    </references>
    <description>This update for sqlite3 fixes the following issues:

- Add a %license file (bsc#1252217).
- Fix icu-enabled build (bsc#1248586).
- Fix two long-standings cases of the use of uninitialized
  variables in obscure circumstances.
- Fix a possible memory error that can occur if a query is made
  against FTS5 index that has been deliberately corrupted in a very specific way.
- Fix the parser so that it ignored SQL comments in all places of a CREATE TRIGGER statement. 
  This resolves a problem that was introduced by the introduction of 
  the SQLITE_DBCONFIG_ENABLE_COMMENTS feature in version 3.49.0.
- Fix an incorrect answer due to over-optimization of an AND operator.
</description>
    <pkglist>
      <collection>
        <package name="libsqlite3-0" epoch="0" version="3.50.4" release="1.1" arch="x86_64" src="x86_64/libsqlite3-0-3.50.4-1.1.x86_64.rpm">
          <filename>libsqlite3-0-3.50.4-1.1.x86_64.rpm</filename>
        </package>
        <package name="libsqlite3-0-debuginfo" epoch="0" version="3.50.4" release="1.1" arch="x86_64" src="x86_64/libsqlite3-0-debuginfo-3.50.4-1.1.x86_64.rpm">
          <filename>libsqlite3-0-debuginfo-3.50.4-1.1.x86_64.rpm</filename>
        </package>
        <package name="sqlite3" epoch="0" version="3.50.4" release="1.1" arch="src" src="src/sqlite3-3.50.4-1.1.src.rpm">
          <filename>sqlite3-3.50.4-1.1.src.rpm</filename>
        </package>
        <package name="sqlite3-debugsource" epoch="0" version="3.50.4" release="1.1" arch="x86_64" src="x86_64/sqlite3-debugsource-3.50.4-1.1.x86_64.rpm">
          <filename>sqlite3-debugsource-3.50.4-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>509</id>
    <title>Recommended update for libgcrypt</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1762154616" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246934" id="1246934" title="Libgcrypt unit test &quot;t-kdf&quot; fails" type="bugzilla" />
    </references>
    <description>This update for libgcrypt fixes the following issues:

- Fix running the test suite in FIPS mode (bsc#1246934)
</description>
    <pkglist>
      <collection>
        <package name="libgcrypt" epoch="0" version="1.10.3" release="3.1" arch="src" src="src/libgcrypt-1.10.3-3.1.src.rpm">
          <filename>libgcrypt-1.10.3-3.1.src.rpm</filename>
        </package>
        <package name="libgcrypt-debugsource" epoch="0" version="1.10.3" release="3.1" arch="x86_64" src="x86_64/libgcrypt-debugsource-1.10.3-3.1.x86_64.rpm">
          <filename>libgcrypt-debugsource-1.10.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgcrypt20" epoch="0" version="1.10.3" release="3.1" arch="x86_64" src="x86_64/libgcrypt20-1.10.3-3.1.x86_64.rpm">
          <filename>libgcrypt20-1.10.3-3.1.x86_64.rpm</filename>
        </package>
        <package name="libgcrypt20-debuginfo" epoch="0" version="1.10.3" release="3.1" arch="x86_64" src="x86_64/libgcrypt20-debuginfo-1.10.3-3.1.x86_64.rpm">
          <filename>libgcrypt20-debuginfo-1.10.3-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>511</id>
    <title>Recommended update for docker</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1762260721" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250508" id="1250508" title="Remove git-core as a dependency for docker" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252290" id="1252290" title="docker comes without SELinux support enabled by default" type="bugzilla" />
    </references>
    <description>This update for docker fixes the following issues:

- Enable SELinux in default daemon.json config (--selinux-enabled). (bsc#1252290)

- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;

- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;

- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;

- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508

  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).

</description>
    <message>"Updating docker will restart the docker service, which may stop your docker containers. Do you want to proceed with the update?"</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="28.5.1_ce" release="8.1" arch="src" src="src/docker-28.5.1_ce-8.1.src.rpm">
          <filename>docker-28.5.1_ce-8.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="28.5.1_ce" release="8.1" arch="x86_64" src="x86_64/docker-28.5.1_ce-8.1.x86_64.rpm">
          <filename>docker-28.5.1_ce-8.1.x86_64.rpm</filename>
        </package>
        <package name="docker-debuginfo" epoch="0" version="28.5.1_ce" release="8.1" arch="x86_64" src="x86_64/docker-debuginfo-28.5.1_ce-8.1.x86_64.rpm">
          <filename>docker-debuginfo-28.5.1_ce-8.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>512</id>
    <title>Security update for runc</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1762785946" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252110" id="1252110" title="[trackerbug] update runc to v1.3.2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252232" id="1252232" title="VUL-0: CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: runc: Container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31133" id="CVE-2025-31133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31133" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52565" id="CVE-2025-52565" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52565" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52881" id="CVE-2025-52881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52881" type="cve" />
    </references>
    <description>This update for runc fixes the following issues:

Update to runc v1.3.3. Upstream changelog is available from
&lt;https://github.com/opencontainers/runc/releases/tag/v1.3.3&gt;. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881

Update to runc v1.3.2. Upstream changelog is available from
&lt;https://github.com/opencontainers/runc/releases/tag/v1.3.2&gt; bsc#1252110

- Includes an important fix for the CPUSet translation for cgroupv2.
</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.3.3" release="1.1" arch="src" src="src/runc-1.3.3-1.1.src.rpm">
          <filename>runc-1.3.3-1.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.3.3" release="1.1" arch="x86_64" src="x86_64/runc-1.3.3-1.1.x86_64.rpm">
          <filename>runc-1.3.3-1.1.x86_64.rpm</filename>
        </package>
        <package name="runc-debuginfo" epoch="0" version="1.3.3" release="1.1" arch="x86_64" src="x86_64/runc-debuginfo-1.3.3-1.1.x86_64.rpm">
          <filename>runc-debuginfo-1.3.3-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>513</id>
    <title>Security update for podman</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1762786021" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252376" id="1252376" title="VUL-0: CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: podman: Container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252543" id="1252543" title="podman &amp; buildah with runc 1.3.2 fail with lots of warnings as rootless" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31133" id="CVE-2025-31133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31133" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52565" id="CVE-2025-52565" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52565" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52881" id="CVE-2025-52881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52881" type="cve" />
    </references>
    <description>This update for podman fixes the following issues:

- CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: Fixed various container breakouts (bsc#1252376):
- Fixed podman &amp; buildah with runc 1.3.2 fail with lots of warnings as rootless (bsc#1252543)
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.9.5" release="9.1" arch="src" src="src/podman-4.9.5-9.1.src.rpm">
          <filename>podman-4.9.5-9.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="9.1" arch="x86_64" src="x86_64/podman-4.9.5-9.1.x86_64.rpm">
          <filename>podman-4.9.5-9.1.x86_64.rpm</filename>
        </package>
        <package name="podman-debuginfo" epoch="0" version="4.9.5" release="9.1" arch="x86_64" src="x86_64/podman-debuginfo-4.9.5-9.1.x86_64.rpm">
          <filename>podman-debuginfo-4.9.5-9.1.x86_64.rpm</filename>
        </package>
        <package name="podman-docker" epoch="0" version="4.9.5" release="9.1" arch="noarch" src="noarch/podman-docker-4.9.5-9.1.noarch.rpm">
          <filename>podman-docker-4.9.5-9.1.noarch.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="9.1" arch="x86_64" src="x86_64/podman-remote-4.9.5-9.1.x86_64.rpm">
          <filename>podman-remote-4.9.5-9.1.x86_64.rpm</filename>
        </package>
        <package name="podman-remote-debuginfo" epoch="0" version="4.9.5" release="9.1" arch="x86_64" src="x86_64/podman-remote-debuginfo-4.9.5-9.1.x86_64.rpm">
          <filename>podman-remote-debuginfo-4.9.5-9.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>525</id>
    <title>Recommended update for dracut</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1763560667" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253029" id="1253029" title="[HPE Bug] SLES15 SP7 grep warning when installing kmod rpm" type="bugzilla" />
    </references>
    <description>This update for dracut fixes the following issues:

Update to version 059+suse.607.g05002594:

* fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)

</description>
    <pkglist>
      <collection>
        <package name="dracut" epoch="0" version="059+suse.607.g05002594" release="1.1" arch="src" src="src/dracut-059+suse.607.g05002594-1.1.src.rpm">
          <filename>dracut-059+suse.607.g05002594-1.1.src.rpm</filename>
        </package>
        <package name="dracut" epoch="0" version="059+suse.607.g05002594" release="1.1" arch="x86_64" src="x86_64/dracut-059+suse.607.g05002594-1.1.x86_64.rpm">
          <filename>dracut-059+suse.607.g05002594-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-debuginfo" epoch="0" version="059+suse.607.g05002594" release="1.1" arch="x86_64" src="x86_64/dracut-debuginfo-059+suse.607.g05002594-1.1.x86_64.rpm">
          <filename>dracut-debuginfo-059+suse.607.g05002594-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-debugsource" epoch="0" version="059+suse.607.g05002594" release="1.1" arch="x86_64" src="x86_64/dracut-debugsource-059+suse.607.g05002594-1.1.x86_64.rpm">
          <filename>dracut-debugsource-059+suse.607.g05002594-1.1.x86_64.rpm</filename>
        </package>
        <package name="dracut-fips" epoch="0" version="059+suse.607.g05002594" release="1.1" arch="x86_64" src="x86_64/dracut-fips-059+suse.607.g05002594-1.1.x86_64.rpm">
          <filename>dracut-fips-059+suse.607.g05002594-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>514</id>
    <title>Security update for tiff</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1762785947" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236834" id="1236834" title="tiff is not building on s390x as test 12 test_directory fails" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243503" id="1243503" title="magick: The value of field_readcount and field_writecount must be greater than or equal to -3 and not zero.. `TIFFMergeFieldInfo' @ error/tiff.c/TIFFErrors/599." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247106" id="1247106" title="VUL-0: CVE-2025-8177: tiff: possible buffer overflow in tools/thumbnail.c:setrow() when processing malformed TIFF files" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247108" id="1247108" title="VUL-0: CVE-2025-8176: tiff: heap use-after-free in tools/tiffmedian.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247581" id="1247581" title="VUL-0: CVE-2024-13978: tiff: libtiff: LibTIFF Null Pointer Dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247582" id="1247582" title="VUL-0: CVE-2025-8534: tiff: null pointer dereference in function PS_Lvl2page" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248117" id="1248117" title="VUL-0: CVE-2025-8961: tiff: segmentation fault via main function of tiffcrop utility" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248330" id="1248330" title="VUL-0: CVE-2025-9165: tiff: libtiff: local execution manipulation can lead to memory leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250413" id="1250413" title="VUL-0: CVE-2025-9900: tiff: libtiff: Write-What-Where in libtiff via TIFFReadRGBAImageOriented" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52356" id="CVE-2023-52356" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52356" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7006" id="CVE-2024-7006" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7006" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13978" id="CVE-2024-13978" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13978" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8176" id="CVE-2025-8176" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8176" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8177" id="CVE-2025-8177" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8177" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8534" id="CVE-2025-8534" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8534" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8961" id="CVE-2025-8961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8961" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9165" id="CVE-2025-9165" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9165" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9900" id="CVE-2025-9900" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9900" type="cve" />
    </references>
    <description>This update for tiff fixes the following issues:

tiff was updated to 4.7.1:

  Software configuration changes:

  * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h.
  * CMake: define WORDS_BIGENDIAN via tif_config.h
  * doc/CMakeLists.txt: remove useless cmake_minimum_required()
  * CMake: fix build with LLVM/Clang 17 (fixes issue #651)
  * CMake: set CMP0074 new policy
  * Set LINKER_LANGUAGE for C targets with C deps
  * Export tiffxx cmake target (fixes issue #674)
  * autogen.sh: Enable verbose wget.
  * configure.ac: Syntax updates for Autoconf 2.71
  * autogen.sh: Re-implement based on autoreconf. Failure to update
    config.guess/config.sub does not return error (fixes issue #672)
  * CMake: fix CMake 4.0 warning when minimum required version is &lt; 3.10.
  * CMake: Add build option tiff-static (fixes issue #709)

  Library changes:

  * Add TIFFOpenOptionsSetWarnAboutUnknownTags() for explicit control
    about emitting warnings for unknown tags. No longer emit warnings
    about unknown tags by default
  * tif_predict.c: speed-up decompression in some cases.

  Bug fixes:

  * tif_fax3: For fax group 3 data if no EOL is detected, reading is
    retried without synchronisation for EOLs. (fixes issue #54)
  * Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Improving handling when field_name = NULL. (fixes issue #532)
  * tiff.h: add COMPRESSION_JXL_DNG_1_7=52546 as used for JPEGXL compression in
    the DNG 1.7 specification
  * TIFFWriteDirectorySec: Increment string length for ASCII tags for codec tags
    defined with FIELD_xxx bits, as it is done for FIELD_CUSTOM tags. (fixes issue #648)
  * Do not error out on a tag whose tag count value is zero, just issue a warning.
    Fix parsing a private tag 0x80a6 (fixes issue #647)
  * TIFFDefaultTransferFunction(): give up beyond td_bitspersample = 24 
    Fixes https://github.com/OSGeo/gdal/issues/10875)
  * tif_getimage.c: Remove unnecessary calls to TIFFRGBAImageOK() (fixes issue #175)
  * Fix writing a Predictor=3 file with non-native endianness
  * _TIFFVSetField(): fix potential use of unallocated memory (out-of-bounds
  * read / nullptr dereference) in case of out-of-memory situation when dealing with
    custom tags (fixes issue #663)
  * tif_fax3.c: Error out for CCITT fax encoding if SamplesPerPixel is not equal 1 and
    PlanarConfiguration = Contiguous (fixes issue #26)
  * tif_fax3.c: error out after a number of times end-of-line or unexpected bad code
    words have been reached. (fixes issue #670)
  * Fix memory leak in TIFFSetupStrips() (fixes issue #665)
  * tif_zip.c: Provide zlib allocation functions. Otherwise for zlib built with
    -DZ_SOLO inflating will fail.
  * Fix memory leak in _TIFFSetDefaultCompressionState. (fixes issue #676)
  * tif_predict.c: Don’t overwrite input buffer of TIFFWriteScanline() if "prediction"
    is enabled. Use extra working buffer in PredictorEncodeRow(). (fixes issue #5)
  * tif_getimage.c: update some integer overflow checks (fixes issue #79)
  * tif_getimage.c: Fix buffer underflow crash for less raster rows at
    TIFFReadRGBAImageOriented() (fixes issue #704, bsc#1250413, CVE-2025-9900)
  * TIFFReadRGBAImage(): several fixes to avoid buffer overflows.
  * Correct passing arguments to TIFFCvtIEEEFloatToNative() and TIFFCvtIEEEDoubleToNative()
    if HAVE_IEEEFP is not defined. (fixes issue #699)
  * LZWDecode(): avoid nullptr dereference when trying to read again after EOI marker
    has been found with remaining output bytes (fixes issue #698)
  * TIFFSetSubDirectory(): check _TIFFCheckDirNumberAndOffset() return.
  * TIFFUnlinkDirectory() and TIFFWriteDirectorySec(): clear tif_rawcp when clearing
    tif_rawdata (fixes issue #711)
  * JPEGEncodeRaw(): error out if a previous scanline failed to be written, to avoid
    out-of-bounds access (fixes issue #714)
  * tif_jpeg: Fix bug in JPEGDecodeRaw() if JPEG_LIB_MK1_OR_12BIT is defined for 8/12bit
    dual mode, introduced in libjpeg-turbo 2.2, which was actually released as 3.0.
    Fixes issue #717
  * add assert for TIFFReadCustomDirectory infoarray check.
  * ppm2tiff: Fix bug in pack_words trailing bytes, where last two bytes of each line
    were written wrongly. (fixes issue #467)
  * fax2ps: fix regression of commit 28c38d648b64a66c3218778c4745225fe3e3a06d where
    TIFFTAG_FAXFILLFUNC is being used rather than an output buffer (fixes issue #649)
  * tiff2pdf: Check TIFFTAG_TILELENGTH and TIFFTAGTILEWIDTH (fixes issue #650)
  * tiff2pdf: check h_samp and v_samp for range 1 to 4 to avoid division by zero.
    Fixes issue #654
  * tiff2pdf: avoid null pointer dereference. (fixes issue #741)
  * Improve non-secure integer overflow check (comparison of division result with
    multiplicant) at compiler optimisation in tiffcp, rgb2ycbcr and tiff2rgba.
    Fixes issue #546
  * tiff2rgba: fix some "a partial expression can generate an overflow before it is
    assigned to a broader type" warnings. (fixes issue #682)
  * tiffdither/tiffmedian: Don't skip the first line of the input image. (fixes issue #703)
  * tiffdither: avoid out-of-bounds read identified in issue #733
  * tiffmedian: error out if TIFFReadScanline() fails (fixes issue #707)
  * tiffmedian: close input file. (fixes issue #735)
  * thumbail: avoid potential out of bounds access (fixes issue #715)
  * tiffcrop: close open TIFF files and release allocated buffers before exiting in case
    of error to avoid memory leaks. (fixes issue #716)
  * tiffcrop: fix double-free and memory leak exposed by issue #721
  * tiffcrop: avoid buffer overflow. (fixes issue #740)
  * tiffcrop: avoid nullptr dereference. (fixes issue #734)
  * tiffdump: Fix coverity scan issue CID 1373365: Passing tainted expression *datamem
    to PrintData, which uses it as a divisor or modulus.
  * tiff2ps: check return of TIFFGetFiled() for TIFFTAG_STRIPBYTECOUNTS and
    TIFFTAG_TILEBYTECOUNTS to avoid NULL pointer dereference. (fixes issue #718)
  * tiffcmp: fix memory leak when second file cannot be opened. (fixes issue #718 and issue #729)
  * tiffcp: fix setting compression level for lossless codecs. (fixes issue #730)
  * raw2tiff: close input file before exit (fixes issue #742)

  Tools changes:

  * tiffinfo: add a -W switch to warn about unknown tags.
  * tiffdither: process all pages in input TIFF file.

  Documentation:

  * TIFFRGBAImage.rst note added for incorrect saving of images with TIFF orientation
    from 5 (LeftTop) to 8 (LeftBottom) in the raster.
  * TIFFRGBAImage.rst note added about un-associated alpha handling (fixes issue #67)
  * Update "Defining New TIFF Tags" description. (fixes issue #642)
  * Fix return type of TIFFReadEncodedTile()
  * Update the documentation to reflect deprecated typedefs.
  * TIFFWriteDirectory.rst: Clarify TIFFSetWriteOffset() only sets offset for image
    data and not for IFD data.
  * Update documentation on re-entrancy and thread safety.
  * Remove dead links to no more existing Awaresystems web-site.
  * Updating BigTIFF specification and some miscelaneous editions.
  * Replace some last links and remove last todos.
  * Added hints for correct allocation of TIFFYCbCrtoRGB structure and its
    associated buffers. (fixes issue #681)
  * Added chapter to "Using the TIFF Library" with links to handling multi-page TIFF
    and custom directories. (fixes issue #43)
  * update TIFFOpen.rst with the return values of mapproc and unmapproc. (fixes issue #12)

* CVE-2025-8961: Fix segmentation fault via main function of tiffcrop utility [bsc#1248117]
* CVE-2025-8534: Fix null pointer dereference in function PS_Lvl2page [bsc#1247582]
* CVE-2025-9165: Fix local execution manipulation can lead to memory leak [bsc#1248330]
* CVE-2024-13978: Fix null pointer dereference in tiff2pdf [bsc#1247581]
    
  Fix TIFFMergeFieldInfo() read_count=write_count=0 (bsc#1243503)

* CVE-2025-8176: Fix heap use-after-free in tools/tiffmedian.c [bsc#1247108]
* CVE-2025-8177: Fix possible buffer overflow in tools/thumbnail.c:setrow()  [bsc#1247106]

*Fix memory leaks (bsc#1236834)

Update to 4.7.0:

  * This version restores in the default build the availability of
    the tools that had been dropped in v4.6.0
    See https://libtiff.gitlab.io/libtiff/rfcs/rfc2_restoring_needed_tools.html#rfc2-restoring-needed-tools
  * Software configuration changes:

    + autoconf build: configure.ac: avoid -Werror passed to CFLAGS to interfere with feature detection
    + autoconf build: fix error when running make clean (fixes issue #630)
    + autoconf build: back off the minimum required automake version to 1.11
    + autoconf.ac: fix detection of windows.h for mingw (fixes issue #605)
    + libtiff-4.pc: Fix Requires.private missing Lerc. It provides a .pc file
      starting from version 4 (in autoconf builds, we assume that liblerc is at least version 4)
    + CMake: Fix TIFF_INCLUDE_DIRS
    + CMake: MinGW compilers don't need a .def file for shared library
    + CMake: move libdeflate and Lerc to Requires.private
    + CMake: enable resource compilation on all Windows.

  * Library changes:

    + Add TIFFOpenOptionsSetMaxCumulatedMemAlloc(). This function complements
      TIFFOpenOptionsSetMaxSingleMemAlloc() to define the maximum cumulated memory
      allocations in byte, for a given TIFF handle, that libtiff internal memory
      allocation functions are allowed. 
    + TIFFWriteDirectory(): Avoid overwriting following data if an IFD is enlarged.
    + TIFFXYZToRGB: avoid integer overflow (fixes issue #644)
    + uv_decode() and uv_encode(): avoid potential out-of-bounds array index (fixes issue #645)
    + Fix cases where tif_curdir is set incorrectly. Fix cases where the current directory number (tif_curdir)
      is set inconsistently or incorrectly, depending on the previous history.
    + TIFFRead[Scanline/EncodedStrip/EncodeTile]: 0-initialize output buffer if setupdecode fails ;
      most codecs: zero-initialize (not-yet-written parts of) output buffer if failure (fixes issue #375)
    + OJPEG: reset subsampling_convert_state=0 in OJPEGPreDecode (fixes issue #183)
    + ThunderRLE: fix failure when decoding last run. Bug seen with GhostPDL
    + LERC codec: deal with issues with multi-band PlanarConfig=Contig and NaN values
    + tif_fax3.c: error out after a number of times end-of-file has been reached (fixes issue #583)
    + LZW: avoid warning about misaligned address with UBSAN (fixes issue #616)
    + TIFFReadRGBAStrip/TIFFReadRGBATile: add more validation of col/row (fixes issue #622, CVE-2023-52356)
    + tif_dirread.c: only issue TIFFGetFileSize() for large enough RAM requests
    + Avoid FPEs (division by zero) in tif_getimage.c.
    + Avoiding FPE (division by zero) for TIFFhowmany_32() and TIFFhowmany_64() macros by checking for
      denominator not zero before macros are executed. (fixes issue #628)
    + Add non-zero check before division in TIFFComputeStrip()
    + Fix wrong return of TIFFIsBigTIFF() in case byte-swapping is active
    + Setting the TIFFFieldInfo field set_field_type should consider field_writecount not field_readcount
    + Avoid memory leaks when using TIFFCreateDirectory() by releasing the allocated memory in the tif-structure.
    + For non-terminated ASCII arrays, the buffer is first enlarged before a NULL is set at the end to
      avoid deleting the last character. (fixes issue #579)
    + Check return value of _TIFFCreateAnonField(). (fixes issue #624, CVE-2024-7006)
    + Prevent some out-of-memory attacks (https://gitlab.com/libtiff/libtiff/-/issues/614#note_1602683857)
    + Ensure absolute seeking is forced independent of TIFFReadDirectory success. (fixes issue #618)
    + tif_dirinfo.c: re-enable TIFFTAG_EP_CFAREPEATPATTERNDIM and TIFFTAG_EP_CFAPATTERN tags (fixes issue #608)
    + Fix warnings with GCC 14
    + tif_dir.c: Log source file, line number, and input tif for directory count error (fixes issue #627)
    + Last usage of get_field_type of TIFFField structure at TIFFWriteDirectorySec() changed to using set_field_type.
    + tif_jpeg.c/tif_ojpeg.c: remove likely ifdef tricks related to old compilers or unusual setups
    + Remove _TIFFUInt64ToFloat() and _TIFFUInt64ToDouble()
    + Remove support for _MSC_VER &lt; 1500.
    + Use #ifdef _WIN32 to test for Windows, and tiffio.h: remove definition of __WIN32__

  * Documentation:

    + Amend manpages for changes in current directory index behaviour
    + Note on using TIFFFlush() before TIFFClose() to check that the data has been successfully written to the file. (fixes issue #506)
    + Update TIFF documentation about TIFFOpenOptions.rst and TIFFOpenOptionsSetMaxSingleMemAlloc() usage and some other small fixes (relates to CVE-2024-7006)

  * Re-added tools:

    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr (not installed)
    + thumbnail (not installed)
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf

  * New/improved functionality:

     + tiff2rgba: Add background gradient option for alpha compositing
     + tiffcp: -i flag restored

  * Bug fixes for tools:

    + tiffcrop: address Coverity scan issues 1605444, 1605445, and 16054
    + tiffcrop: Apply "Fix heap-buffer-overflow in function extractImageSection"
    + tiffcrop: fix buffer overflows, use after free (fixes issue #542, issue #550, issue #552)
    + tiff2pdf: address Coverity scan issues
    + tiff2pdf: fix inconsistent PLANARCONFIG value for the input and output TIFF
    + tiff2pdf: fix issue with JPEG restart-interval marker when converting from JPEG-compressed files (fixes issue #539)
    + tiff2pdf: red and blue were being swapped for RGBA decoding (fixes issue #253)
    + tiff2pdf: fixes issue #596
    + thumbnail: address Coverity scan issues
    + tiffcp: Add check for limitMalloc return to fix Coverity 1603334
    + tiffcp: preserve TIFFTAG_REFERENCEBLACKWHITE when doing YCbCr JPEG -&gt; YCbCr JPEG
    + tiffcp: replace PHOTOMETRIC_YCBCR with PHOTOMETRIC_RGB when outputing to compression != JPEG (refs issue #571)
    + tiffcp: do not copy tags YCBCRCOEFFICIENTS, YCBCRSUBSAMPLING, YCBCRPOSITIONING, REFERENCEBLACKWHITE. Only set YCBCRSUBSAMPLING when generating YCbCr JPEG
    + tiffcp: Check also codec of input image, not only from output image (fixes issue #606)
    + Add some basic sanity checks for tiffcp and tiffcrop RGB-&gt;YCbCr JPEG conversions.
    + fax2ps and fax2tiff: memory leak fixes (fixes issue #476)
    + tiffmedian: memory leak fixes (fixes issue #599)
    + fax2tiff: fix EOFB interpretation (fixes issue #191)
    + fax2tiff: fix issue with unreasonable width input (fixes issue #249)
    + tiffcp and tiffcrop: fixes issue #228
    + tiff2rgba: fixes issue #469
    + tiffdither: fixes issue #473
    + tiffdump: fix wrong printf formatter in error message (Coverity 1472932)
    + tiffset: avoid false positive Coverity Scan warning on 64-bit builds (Coverity 1518997)
    + tifcp/tiffset: use correct format specifiers


</description>
    <pkglist>
      <collection>
        <package name="libtiff6" epoch="0" version="4.7.1" release="1.1" arch="x86_64" src="x86_64/libtiff6-4.7.1-1.1.x86_64.rpm">
          <filename>libtiff6-4.7.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff6-debuginfo" epoch="0" version="4.7.1" release="1.1" arch="x86_64" src="x86_64/libtiff6-debuginfo-4.7.1-1.1.x86_64.rpm">
          <filename>libtiff6-debuginfo-4.7.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.7.1" release="1.1" arch="src" src="src/tiff-4.7.1-1.1.src.rpm">
          <filename>tiff-4.7.1-1.1.src.rpm</filename>
        </package>
        <package name="tiff-debugsource" epoch="0" version="4.7.1" release="1.1" arch="x86_64" src="x86_64/tiff-debugsource-4.7.1-1.1.x86_64.rpm">
          <filename>tiff-debugsource-4.7.1-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>515</id>
    <title>Recommended update for supportutils-plugin-suse-public-cloud</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1762856415" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218762" id="1218762" title="Update public cloud supportconfig plugin" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218763" id="1218763" title="Update public cloud supportconfig plugin" type="bugzilla" />
    </references>
    <description>This update for supportutils-plugin-suse-public-cloud fixes the following issues:

- Update to version 1.0.9 (bsc#1218762, bsc#1218763)
    * Remove duplicate data collection for the plugin itself
    * Collect archive metering data when available
    * Query billing flavor status
</description>
    <pkglist>
      <collection>
        <package name="supportutils-plugin-suse-public-cloud" epoch="0" version="1.0.9" release="1.1" arch="noarch" src="noarch/supportutils-plugin-suse-public-cloud-1.0.9-1.1.noarch.rpm">
          <filename>supportutils-plugin-suse-public-cloud-1.0.9-1.1.noarch.rpm</filename>
        </package>
        <package name="supportutils-plugin-suse-public-cloud" epoch="0" version="1.0.9" release="1.1" arch="src" src="src/supportutils-plugin-suse-public-cloud-1.0.9-1.1.src.rpm">
          <filename>supportutils-plugin-suse-public-cloud-1.0.9-1.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>521</id>
    <title>Security update for openssh</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1763113946" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1251198" id="1251198" title="VUL-0: CVE-2025-61984: openssh: code execution via control characters in usernames when a ProxyCommand is used" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1251199" id="1251199" title="VUL-0: CVE-2025-61985: openssh: code execution via '\0' character in ssh:// URI when a ProxyCommand is used" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61984" id="CVE-2025-61984" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61984" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61985" id="CVE-2025-61985" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61985" type="cve" />
    </references>
    <description>This update for openssh fixes the following issues:

- CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198). 
- CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyCommand is used (bsc#1251199).
</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="9.6p1" release="4.1" arch="src" src="src/openssh-9.6p1-4.1.src.rpm">
          <filename>openssh-9.6p1-4.1.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="9.6p1" release="4.1" arch="x86_64" src="x86_64/openssh-9.6p1-4.1.x86_64.rpm">
          <filename>openssh-9.6p1-4.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="9.6p1" release="4.1" arch="x86_64" src="x86_64/openssh-clients-9.6p1-4.1.x86_64.rpm">
          <filename>openssh-clients-9.6p1-4.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients-debuginfo" epoch="0" version="9.6p1" release="4.1" arch="x86_64" src="x86_64/openssh-clients-debuginfo-9.6p1-4.1.x86_64.rpm">
          <filename>openssh-clients-debuginfo-9.6p1-4.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="9.6p1" release="4.1" arch="x86_64" src="x86_64/openssh-common-9.6p1-4.1.x86_64.rpm">
          <filename>openssh-common-9.6p1-4.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common-debuginfo" epoch="0" version="9.6p1" release="4.1" arch="x86_64" src="x86_64/openssh-common-debuginfo-9.6p1-4.1.x86_64.rpm">
          <filename>openssh-common-debuginfo-9.6p1-4.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-debuginfo" epoch="0" version="9.6p1" release="4.1" arch="x86_64" src="x86_64/openssh-debuginfo-9.6p1-4.1.x86_64.rpm">
          <filename>openssh-debuginfo-9.6p1-4.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-debugsource" epoch="0" version="9.6p1" release="4.1" arch="x86_64" src="x86_64/openssh-debugsource-9.6p1-4.1.x86_64.rpm">
          <filename>openssh-debugsource-9.6p1-4.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="9.6p1" release="4.1" arch="x86_64" src="x86_64/openssh-fips-9.6p1-4.1.x86_64.rpm">
          <filename>openssh-fips-9.6p1-4.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="9.6p1" release="4.1" arch="x86_64" src="x86_64/openssh-server-9.6p1-4.1.x86_64.rpm">
          <filename>openssh-server-9.6p1-4.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server-config-rootlogin" epoch="0" version="9.6p1" release="4.1" arch="x86_64" src="x86_64/openssh-server-config-rootlogin-9.6p1-4.1.x86_64.rpm">
          <filename>openssh-server-config-rootlogin-9.6p1-4.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server-debuginfo" epoch="0" version="9.6p1" release="4.1" arch="x86_64" src="x86_64/openssh-server-debuginfo-9.6p1-4.1.x86_64.rpm">
          <filename>openssh-server-debuginfo-9.6p1-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>517</id>
    <title>Security update for containerd</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1763110078" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253126" id="1253126" title="VUL-0: CVE-2024-25621: containerd: overly broad default permission vulnerability" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253132" id="1253132" title="VUL-0: CVE-2025-64329: containerd: goroutine leaks can lead to memory exhaustion on the host" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25621" id="CVE-2024-25621" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25621" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64329" id="CVE-2025-64329" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64329" type="cve" />
    </references>
    <description>This update for containerd fixes the following issues:

Update to containerd v1.7.29:

- CVE-2024-25621: Fixed overly broad default permission vulnerability (bsc#1253126).
- CVE-2025-64329: Fixed goroutine leaks that could have led to memory exhaustion on the host (bsc#1253132).
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.7.29" release="1.1" arch="src" src="src/containerd-1.7.29-1.1.src.rpm">
          <filename>containerd-1.7.29-1.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.29" release="1.1" arch="x86_64" src="x86_64/containerd-1.7.29-1.1.x86_64.rpm">
          <filename>containerd-1.7.29-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>518</id>
    <title>Recommended update for mozilla-nspr, mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1763113946" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1081723" id="1081723" title="mozilla-nss package does not build reproducibly from shlibsign" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224113" id="1224113" title="[FIPS 140-3] [NSS] Consider adding the CKM_ECDH1_COFACTOR_DERIVE to the approved mechanisms list." type="bugzilla" />
    </references>
    <description>This update for mozilla-nspr, mozilla-nss fixes the following issues:

mozilla-nspr was updated to version 4.36: 

    * various build, test and automation script fixes
    * major parts of the source code were reformatted

mozilla-nss:

  - Move NSS DB password hash away from SHA-1

Update to NSS 3.112.2:

    * Prevent leaks during pkcs12 decoding.
    * SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates

Update to NSS 3.112.1:

    * restore support for finding certificates by decoded serial number.

Update to NSS 3.112:

     * Fix alias for mac workers on try
     * ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
     * ABI/API break in ssl certificate processing
     * remove unnecessary assertion in sec_asn1d_init_state_based_on_template
     * update taskgraph to v14.2.1
     * Workflow for automation of the release on GitHub when pushing a tag
     * fix faulty assertions in SEC_ASN1DecoderUpdate
     * Renegotiations should use a fresh ECH GREASE buffer
     * update taskgraph to v14.1.1
     * Partial fix for ACVP build CI job
     * Initialize find in sftk_searchDatabase
     * Add clang-18 to extra builds
     * Fault tolerant git fetch for fuzzing
     * Tolerate intermittent failures in ssl_policy_pkix_ocsp
     * fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
     * fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
     * Remove Cryptofuzz CI version check

Update to NSS 3.111:

    * FIPS changes need to be upstreamed: force ems policy
    * Turn off Websites Trust Bit from CAs
    * Update nssckbi version following April 2025 Batch of Changes
    * Disable SMIME ‘trust bit’ for GoDaddy CAs
    * Replaced deprecated sprintf function with snprintf in dbtool.c
    * Need up update NSS for PKCS 3.1
    * avoid leaking localCert if it is already set in ssl3_FillInCachedSID
    * Decrease ASAN quarantine size for Cryptofuzz in CI
    * selfserv: Add support for zlib certificate compression

Update to NSS 3.110:

    * FIPS changes need to be upstreamed: force ems policy
    * Prevent excess allocations in sslBuffer_Grow
    * Remove Crl templates from ASN1 fuzz target
    * Remove CERT_CrlTemplate from ASN1 fuzz target
    * Fix memory leak in NSS_CMSMessage_IsSigned
    * NSS policy updates
    * Improve locking in nssPKIObject_GetInstances
    * Fix race in sdb_GetMetaData
    * Fix member access within null pointer
    * Increase smime fuzzer memory limit
    * Enable resumption when using custom extensions
    * change CN of server12 test certificate
    * Part 2: Add missing check in
                    NSS_CMSDigestContext_FinishSingle
    * Part 1: Fix smime UBSan errors
    * FIPS changes need to be upstreamed: updated key checks
    * Don't build libpkix in static builds
    * handle `-p all` in try syntax
    * fix opt-make builds to actually be opt
    * fix opt-static builds to actually be opt
    * Remove extraneous assert

Update to NSS 3.109:

    * Call BL_Init before RNG_RNGInit() so that special
                    SHA instructions can be used if available
    * NSS policy updates - fix inaccurate key policy issues
    * SMIME fuzz target
    * ASN1 decoder fuzz target
    * Part 2: Revert “Extract testcases from ssl gtests
                    for fuzzing”
    * Add fuzz/README.md
    * Part 4: Fix tstclnt arguments script
    * Extend pkcs7 fuzz target
    * Extend certDN fuzz target
    * revert changes to HACL* files from bug 1866841
    * Part 3: Package frida corpus script

Update to NSS 3.108:

    * libclang-16 -&gt; libclang-19
    * Turn off Secure Email Trust Bit for Security
                    Communication ECC RootCA1
    * Turn off Secure Email Trust Bit for BJCA Global Root
                    CA1 and BJCA Global Root CA2
    * Remove SwissSign Silver CA – G2
    * Add D-Trust 2023 TLS Roots to NSS
    * fix fips test failure on windows
    * change default sensitivity of KEM keys
    * Part 1: Introduce frida hooks and script
    * add missing arm_neon.h include to gcm.c
    * ci: update windows workers to win2022
    * strip trailing carriage returns in tools tests
    * work around unix/windows path translation issues
                    in cert test script
    * ci: let the windows setup script work without $m
    * detect msys
    * add a specialized CTR_Update variant for AES-GCM
    * NSS policy updates
    * FIPS changes need to be upstreamed: FIPS 140-3 RNG
    * FIPS changes need to be upstreamed: Add SafeZero
    * FIPS changes need to be upstreamed - updated POST
    * Segmentation fault in SECITEM_Hash during pkcs12 processing
    * Extending NSS with LoadModuleFromFunction functionality
    * Ensure zero-initialization of collectArgs.cert
    * pkcs7 fuzz target use CERT_DestroyCertificate
    * Fix actual underlying ODR violations issue
    * mozilla::pkix: allow reference ID labels to begin
                    and/or end with hyphens
    * don't look for secmod.db in nssutil_ReadSecmodDB if
                    NSS_DISABLE_DBM is set
    * Fix memory leak in pkcs7 fuzz target
    * Set -O2 for ASan builds in CI
    * Change branch of tlsfuzzer dependency
    * Run tests in CI for ASan builds with detect_odr_violation=1
    * Fix coverage failure in CI
    * Add fuzzing for delegated credentials, DTLS short
                    header and Tls13BackendEch
    * Add fuzzing for SSL_EnableTls13GreaseEch and
                    SSL_SetDtls13VersionWorkaround
    * Part 3: Restructure fuzz/
    * Extract testcases from ssl gtests for fuzzing
    * Force Cryptofuzz to use NSS in CI
    * Fix Cryptofuzz on 32 bit in CI
    * Update Cryptofuzz repository link
    * fix build error from 9505f79d
    * simplify error handling in get_token_objects_for_cache
    * nss doc: fix a warning
    * pkcs12 fixes from RHEL need to be picked up

Update to NSS 3.107:

    * Remove MPI fuzz targets.
    * Remove globals `lockStatus` and `locksEverDisabled`.
    * Enable PKCS8 fuzz target.
    * Integrate Cryptofuzz in CI.
    * Part 2: Set tls server target socket options in config class
    * Part 1: Set tls client target socket options in config class
    * Support building with thread sanitizer.
    * set nssckbi version number to 2.72.
    * remove Websites Trust Bit from Entrust Root
                    Certification Authority - G4.
    * remove Security Communication RootCA3 root cert.
    * remove SecureSign RootCA11 root cert.
    * Add distrust-after for TLS to Entrust Roots.
    * update expected error code in pk12util pbmac1 tests.
    * Use random tstclnt args with handshake collection script
    * Remove extraneous assert in ssl3gthr.c.
    * Adding missing release notes for NSS_3_105.
    * Enable the disabled mlkem tests for dtls.
    * NSS gtests filter cleans up the constucted buffer
                    before the use.
    * Make ssl_SetDefaultsFromEnvironment thread-safe.
    * Remove short circuit test from ssl_Init.

Update to NSS 3.106:

    * NSS 3.106 should be distributed with NSPR 4.36.
    * pk12util: improve error handling in p12U_ReadPKCS12File.
    * Correctly destroy bulkkey in error scenario.
    * PKCS7 fuzz target, r=djackson,nss-reviewers.
    * Extract certificates with handshake collection script.
    * Specify len_control for fuzz targets.
    * Fix memory leak in dumpCertificatePEM.
    * Fix UBSan errors for SECU_PrintCertificate and
                    SECU_PrintCertificateBasicInfo.
    * add new error codes to mozilla::pkix for Firefox to use.
    * allow null phKey in NSC_DeriveKey.
    * Only create seed corpus zip from existing corpus.
    * Use explicit allowlist for for KDF PRFS.
    * Increase optimization level for fuzz builds.
    * Remove incorrect assert.
    * Use libFuzzer options from fuzz/options/\*.options in CI.
    * Polish corpus collection for automation.
    * Detect new and unfuzzed SSL options.
    * PKCS12 fuzzing target.

  - requires NSPR 4.36

Update to NSS 3.105:

    * Allow importing PKCS#8 private EC keys missing public key
    * UBSAN fix: applying zero offset to null pointer in sslsnce.c
    * set KRML_MUSTINLINE=inline in makefile builds
    * Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
    * override default definition of KRML_MUSTINLINE
    * libssl support for mlkem768x25519
    * support for ML-KEM-768 in softoken and pk11wrap
    * Add Libcrux implementation of ML-KEM 768 to FreeBL
    * Avoid misuse of ctype(3) functions
    * part 2: run clang-format
    * part 1: upgrade to clang-format 13
    * clang-format fuzz
    * DTLS client message buffer may not empty be on retransmit
    * Optionally print config for TLS client and server
                    fuzz target
    * Fix some simple documentation issues in NSS.
    * improve performance of NSC_FindObjectsInit when
                    template has CKA_TOKEN attr
    * define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN

Update to NSS 3.104:

    * Copy original corpus to heap-allocated buffer
    * Fix min ssl version for DTLS client fuzzer
    * Remove OS2 support just like we did on NSPR
    * clang-format NSS improvements
    * Adding basicutil.h to use HexString2SECItem function
    * removing dirent.c from build
    * Allow handing in keymaterial to shlibsign to make
                    the output reproducible
    * remove nec4.3, sunos4, riscos and SNI references
    * remove other old OS (BSDI, old HP UX, NCR,
                    openunix, sco, unixware or reliantUnix
    * remove mentions of WIN95
    * remove mentions of WIN16
    * More explicit directory naming
    * Add more options to TLS server fuzz target
    * Add more options to TLS client fuzz target
    * Use OSS-Fuzz corpus in NSS CI
    * set nssckbi version number to 2.70.
    * Remove Email Trust bit from ACCVRAIZ1 root cert.
    * Remove Email Trust bit from certSIGN ROOT CA.
    * Add Cybertrust Japan Roots to NSS.
    * Add Taiwan CA Roots to NSS.
    * remove search by decoded serial in
                    nssToken_FindCertificateByIssuerAndSerialNumber
    * Fix tstclnt CI build failure
    * vfyserv: ensure peer cert chain is in db for
                    CERT_VerifyCertificateNow
    * Enable all supported protocol versions for UDP
    * Actually use random PSK hash type
    * Initialize NSS DB once
    * Additional ECH cipher suites and PSK hash types
    * Automate corpus file generation for TLS client Fuzzer
    * Fix crash with UNSAFE_FUZZER_MODE
    * clang-format shlibsign.c

Update to NSS 3.103:

    * move list size check after lock acquisition in sftk_PutObjectToList.
    * Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
    * Adjust libFuzzer size limits
    * Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
                    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
    * Add fuzzing support for SSL_ENABLE_GREASE and
                    SSL_ENABLE_CH_EXTENSION_PERMUTATION
  - Use a hardcoded, static key to generate the checksums (*.chk-files)
  - FIPS: Enforce approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).

Update to NSS 3.102.1:

    * ChaChaXor to return after the function

Update to NSS 3.102:

    * Add Valgrind annotations to freebl Chacha20-Poly1305.
    * missing sqlite header.
    * GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
    * improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
    * correct length of raw SPKI data before printing in pp utility.

  - Make NSS-build reproducible by using key from openssl (bsc#1081723)

  - FIPS: Exclude the SHA-1 hash from SLI approval.

</description>
    <pkglist>
      <collection>
        <package name="mozilla-nspr" epoch="0" version="4.36" release="1.1" arch="src" src="src/mozilla-nspr-4.36-1.1.src.rpm">
          <filename>mozilla-nspr-4.36-1.1.src.rpm</filename>
        </package>
        <package name="mozilla-nspr" epoch="0" version="4.36" release="1.1" arch="x86_64" src="x86_64/mozilla-nspr-4.36-1.1.x86_64.rpm">
          <filename>mozilla-nspr-4.36-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nspr-debuginfo" epoch="0" version="4.36" release="1.1" arch="x86_64" src="x86_64/mozilla-nspr-debuginfo-4.36-1.1.x86_64.rpm">
          <filename>mozilla-nspr-debuginfo-4.36-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nspr-debugsource" epoch="0" version="4.36" release="1.1" arch="x86_64" src="x86_64/mozilla-nspr-debugsource-4.36-1.1.x86_64.rpm">
          <filename>mozilla-nspr-debugsource-4.36-1.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3" epoch="0" version="3.112.2" release="1.1" arch="x86_64" src="x86_64/libfreebl3-3.112.2-1.1.x86_64.rpm">
          <filename>libfreebl3-3.112.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3-debuginfo" epoch="0" version="3.112.2" release="1.1" arch="x86_64" src="x86_64/libfreebl3-debuginfo-3.112.2-1.1.x86_64.rpm">
          <filename>libfreebl3-debuginfo-3.112.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.112.2" release="1.1" arch="x86_64" src="x86_64/libsoftokn3-3.112.2-1.1.x86_64.rpm">
          <filename>libsoftokn3-3.112.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3-debuginfo" epoch="0" version="3.112.2" release="1.1" arch="x86_64" src="x86_64/libsoftokn3-debuginfo-3.112.2-1.1.x86_64.rpm">
          <filename>libsoftokn3-debuginfo-3.112.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.112.2" release="1.1" arch="src" src="src/mozilla-nss-3.112.2-1.1.src.rpm">
          <filename>mozilla-nss-3.112.2-1.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.112.2" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-3.112.2-1.1.x86_64.rpm">
          <filename>mozilla-nss-3.112.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.112.2" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.112.2-1.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.112.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs-debuginfo" epoch="0" version="3.112.2" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-certs-debuginfo-3.112.2-1.1.x86_64.rpm">
          <filename>mozilla-nss-certs-debuginfo-3.112.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-debuginfo" epoch="0" version="3.112.2" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-debuginfo-3.112.2-1.1.x86_64.rpm">
          <filename>mozilla-nss-debuginfo-3.112.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-debugsource" epoch="0" version="3.112.2" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-debugsource-3.112.2-1.1.x86_64.rpm">
          <filename>mozilla-nss-debugsource-3.112.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.112.2" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.112.2-1.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.112.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools-debuginfo" epoch="0" version="3.112.2" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-tools-debuginfo-3.112.2-1.1.x86_64.rpm">
          <filename>mozilla-nss-tools-debuginfo-3.112.2-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>524</id>
    <title>Recommended update for gpgme</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1763489247" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231055" id="1231055" title="&quot;Valid metadata not found&quot; error when running zypper dup -f after upgrading SLES 15 SP5 to SLES 15 SP6" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252425" id="1252425" title="libgpgme failing when DISPLAY variable is set" type="bugzilla" />
    </references>
    <description>This update for gpgme fixes the following issues:

- Treat empty DISPLAY variable as unset (bsc#1252425, bsc#1231055).
    * To avoid gpgme constructing an invalid gpg command line when
      the DISPLAY variable is empty it can be treated as unset.
    * Reported upstream: dev.gnupg.org/T7919
</description>
    <pkglist>
      <collection>
        <package name="gpgme" epoch="0" version="1.23.0" release="2.1" arch="src" src="src/gpgme-1.23.0-2.1.src.rpm">
          <filename>gpgme-1.23.0-2.1.src.rpm</filename>
        </package>
        <package name="gpgme-debugsource" epoch="0" version="1.23.0" release="2.1" arch="x86_64" src="x86_64/gpgme-debugsource-1.23.0-2.1.x86_64.rpm">
          <filename>gpgme-debugsource-1.23.0-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgpgme11" epoch="0" version="1.23.0" release="2.1" arch="x86_64" src="x86_64/libgpgme11-1.23.0-2.1.x86_64.rpm">
          <filename>libgpgme11-1.23.0-2.1.x86_64.rpm</filename>
        </package>
        <package name="libgpgme11-debuginfo" epoch="0" version="1.23.0" release="2.1" arch="x86_64" src="x86_64/libgpgme11-debuginfo-1.23.0-2.1.x86_64.rpm">
          <filename>libgpgme11-debuginfo-1.23.0-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>526</id>
    <title>Security update for unbound</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1763638570" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252525" id="1252525" title="VUL-0: CVE-2025-11411: unbound: promiscuous records can lead to domain hijacking" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11411" id="CVE-2025-11411" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11411" type="cve" />
    </references>
    <description>This update for unbound fixes the following issues:

- CVE-2025-11411: Fixed promiscuous records leading to domain hijacking (bsc#1252525)
</description>
    <pkglist>
      <collection>
        <package name="libunbound8" epoch="0" version="1.22.0" release="2.1" arch="x86_64" src="x86_64/libunbound8-1.22.0-2.1.x86_64.rpm">
          <filename>libunbound8-1.22.0-2.1.x86_64.rpm</filename>
        </package>
        <package name="libunbound8-debuginfo" epoch="0" version="1.22.0" release="2.1" arch="x86_64" src="x86_64/libunbound8-debuginfo-1.22.0-2.1.x86_64.rpm">
          <filename>libunbound8-debuginfo-1.22.0-2.1.x86_64.rpm</filename>
        </package>
        <package name="unbound" epoch="0" version="1.22.0" release="2.1" arch="src" src="src/unbound-1.22.0-2.1.src.rpm">
          <filename>unbound-1.22.0-2.1.src.rpm</filename>
        </package>
        <package name="unbound-anchor" epoch="0" version="1.22.0" release="2.1" arch="x86_64" src="x86_64/unbound-anchor-1.22.0-2.1.x86_64.rpm">
          <filename>unbound-anchor-1.22.0-2.1.x86_64.rpm</filename>
        </package>
        <package name="unbound-anchor-debuginfo" epoch="0" version="1.22.0" release="2.1" arch="x86_64" src="x86_64/unbound-anchor-debuginfo-1.22.0-2.1.x86_64.rpm">
          <filename>unbound-anchor-debuginfo-1.22.0-2.1.x86_64.rpm</filename>
        </package>
        <package name="unbound-debugsource" epoch="0" version="1.22.0" release="2.1" arch="x86_64" src="x86_64/unbound-debugsource-1.22.0-2.1.x86_64.rpm">
          <filename>unbound-debugsource-1.22.0-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>532</id>
    <title>Security update for glib2</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1765294791" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249055" id="1249055" title="VUL-0: CVE-2025-7039: glib2: glib: Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file()" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7039" id="CVE-2025-7039" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7039" type="cve" />
    </references>
    <description>This update for glib2 fixes the following issues:

- CVE-2025-7039: Fixed Buffer Under-read in gfileutils.c (bsc#1249055)
</description>
    <pkglist>
      <collection>
        <package name="glib2" epoch="0" version="2.76.2" release="10.1" arch="src" src="src/glib2-2.76.2-10.1.src.rpm">
          <filename>glib2-2.76.2-10.1.src.rpm</filename>
        </package>
        <package name="glib2-debugsource" epoch="0" version="2.76.2" release="10.1" arch="x86_64" src="x86_64/glib2-debugsource-2.76.2-10.1.x86_64.rpm">
          <filename>glib2-debugsource-2.76.2-10.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.76.2" release="10.1" arch="x86_64" src="x86_64/glib2-tools-2.76.2-10.1.x86_64.rpm">
          <filename>glib2-tools-2.76.2-10.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools-debuginfo" epoch="0" version="2.76.2" release="10.1" arch="x86_64" src="x86_64/glib2-tools-debuginfo-2.76.2-10.1.x86_64.rpm">
          <filename>glib2-tools-debuginfo-2.76.2-10.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.76.2" release="10.1" arch="x86_64" src="x86_64/libgio-2_0-0-2.76.2-10.1.x86_64.rpm">
          <filename>libgio-2_0-0-2.76.2-10.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0-debuginfo" epoch="0" version="2.76.2" release="10.1" arch="x86_64" src="x86_64/libgio-2_0-0-debuginfo-2.76.2-10.1.x86_64.rpm">
          <filename>libgio-2_0-0-debuginfo-2.76.2-10.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.76.2" release="10.1" arch="x86_64" src="x86_64/libglib-2_0-0-2.76.2-10.1.x86_64.rpm">
          <filename>libglib-2_0-0-2.76.2-10.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0-debuginfo" epoch="0" version="2.76.2" release="10.1" arch="x86_64" src="x86_64/libglib-2_0-0-debuginfo-2.76.2-10.1.x86_64.rpm">
          <filename>libglib-2_0-0-debuginfo-2.76.2-10.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.76.2" release="10.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-2.76.2-10.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-2.76.2-10.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0-debuginfo" epoch="0" version="2.76.2" release="10.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-debuginfo-2.76.2-10.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-debuginfo-2.76.2-10.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.76.2" release="10.1" arch="x86_64" src="x86_64/libgobject-2_0-0-2.76.2-10.1.x86_64.rpm">
          <filename>libgobject-2_0-0-2.76.2-10.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0-debuginfo" epoch="0" version="2.76.2" release="10.1" arch="x86_64" src="x86_64/libgobject-2_0-0-debuginfo-2.76.2-10.1.x86_64.rpm">
          <filename>libgobject-2_0-0-debuginfo-2.76.2-10.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>527</id>
    <title>Security update for sssd</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1764241940" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244325" id="1244325" title="ssh with GSSAPIAuthentication=yes is case sensitive for user/principal" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1251827" id="1251827" title="VUL-0: CVE-2025-11561: sssd: default Kerberos configuration allows privilege escalation on AD-joined Linux systems" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11561" id="CVE-2025-11561" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11561" type="cve" />
    </references>
    <description>This update for sssd fixes the following issues:

- CVE-2025-11561: Fixed default Kerberos configuration allowing 
  privilege escalation on AD-joined Linux systems (bsc#1251827)

Other fixes:
- Install file in krb5.conf.d to include sssd krb5 config snippets
  (bsc#1244325)
</description>
    <pkglist>
      <collection>
        <package name="libsss_certmap0" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/libsss_certmap0-2.8.2-7.1.x86_64.rpm">
          <filename>libsss_certmap0-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_certmap0-debuginfo" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/libsss_certmap0-debuginfo-2.8.2-7.1.x86_64.rpm">
          <filename>libsss_certmap0-debuginfo-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_idmap0" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/libsss_idmap0-2.8.2-7.1.x86_64.rpm">
          <filename>libsss_idmap0-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_idmap0-debuginfo" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/libsss_idmap0-debuginfo-2.8.2-7.1.x86_64.rpm">
          <filename>libsss_idmap0-debuginfo-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/libsss_nss_idmap0-2.8.2-7.1.x86_64.rpm">
          <filename>libsss_nss_idmap0-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="libsss_nss_idmap0-debuginfo" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/libsss_nss_idmap0-debuginfo-2.8.2-7.1.x86_64.rpm">
          <filename>libsss_nss_idmap0-debuginfo-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.8.2" release="7.1" arch="src" src="src/sssd-2.8.2-7.1.src.rpm">
          <filename>sssd-2.8.2-7.1.src.rpm</filename>
        </package>
        <package name="sssd" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/sssd-2.8.2-7.1.x86_64.rpm">
          <filename>sssd-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ad" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/sssd-ad-2.8.2-7.1.x86_64.rpm">
          <filename>sssd-ad-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ad-debuginfo" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/sssd-ad-debuginfo-2.8.2-7.1.x86_64.rpm">
          <filename>sssd-ad-debuginfo-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-debuginfo" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/sssd-debuginfo-2.8.2-7.1.x86_64.rpm">
          <filename>sssd-debuginfo-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-debugsource" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/sssd-debugsource-2.8.2-7.1.x86_64.rpm">
          <filename>sssd-debugsource-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/sssd-krb5-2.8.2-7.1.x86_64.rpm">
          <filename>sssd-krb5-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-common" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/sssd-krb5-common-2.8.2-7.1.x86_64.rpm">
          <filename>sssd-krb5-common-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-common-debuginfo" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/sssd-krb5-common-debuginfo-2.8.2-7.1.x86_64.rpm">
          <filename>sssd-krb5-common-debuginfo-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-krb5-debuginfo" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/sssd-krb5-debuginfo-2.8.2-7.1.x86_64.rpm">
          <filename>sssd-krb5-debuginfo-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ldap" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/sssd-ldap-2.8.2-7.1.x86_64.rpm">
          <filename>sssd-ldap-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        <package name="sssd-ldap-debuginfo" epoch="0" version="2.8.2" release="7.1" arch="x86_64" src="x86_64/sssd-ldap-debuginfo-2.8.2-7.1.x86_64.rpm">
          <filename>sssd-ldap-debuginfo-2.8.2-7.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>535</id>
    <title>Security update 5.0.6 for Multi-Linux Manager Client Tools, Salt and Salt Bundle</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1765869806" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1227207" id="1227207" title="Failure to fetch ext_pillar git" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243611" id="1243611" title="mgrpxy [stop|status|start] --loglevel &lt;loglevel&gt; returns error: unknown flag --loglevel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243704" id="1243704" title="L3-Question: MLM 5.0 installation on server hardened based on CIS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244027" id="1244027" title="L3-Question: /etc/cobbler/settings.yaml has no 'default-suse-efi' key, missing /grub/grub.efi in TFTPd root" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244127" id="1244127" title="Restoring MLM does not work correctly. The server does not start properly after starting it" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244534" id="1244534" title="postgresql.conf is not persistent through a container creation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245099" id="1245099" title="mgradm support config fails on hub server" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245740" id="1245740" title="VUL-0: Default venv-salt-minion environment is activated on the different user accounts." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246068" id="1246068" title="L3-Question: mgradm distribution copy: Error: distribution not found in product map. Please update productmap or provide channel label" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246320" id="1246320" title="Internal server error when creating new snippet or modifying existing snippet." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246553" id="1246553" title="mgrpxy can't install PTFs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246662" id="1246662" title="mgradm upgrade podman error:  &quot;cannot downgrade from version 5.0.4.1 to 5.0.5&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246738" id="1246738" title="mgradm backup create error: no such object: &quot;server&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246789" id="1246789" title="ID used for proxy config creation is changed after a hardware refresh" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246882" id="1246882" title="mgradm distribution copy not possible as root" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246906" id="1246906" title="Changing Backup Folder Path Breaks Server Restore" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246925" id="1246925" title="mgradm backup restore: warnings about missing restorecon on SLE 15 SP6" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247688" id="1247688" title="Monitor is broken after update to 5.1" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247721" id="1247721" title="Bootstrapping a client to a proxy from the webUI  fails with port error" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250520" id="1250520" title="Error fetching Salt gitfs repository: error loading known_hosts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250755" id="1250755" title="salt-minion does not start due to broken symlink" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1251044" id="1251044" title="mgradm migrate podman creates new CA infrastructure." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1251138" id="1251138" title="A proxy of the version 5.1.1 can 't be installed in k3s.  Failed to reload Traefik." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1251776" id="1251776" title="Tumbleweed minion no longer connecting to Leap master: &quot;The payload signature did not validate.'&quot;" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252244" id="1252244" title="Leap 16 Salt and Tornado" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252285" id="1252285" title="shadow module spwd NameError on Leap 16" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254256" id="1254256" title="VUL-0: CVE-2025-62348: salt: Unsafe yaml decoder in junos execution module" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254257" id="1254257" title="VUL-0: CVE-2025-62349: salt: Authentication downgrade" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62348" id="CVE-2025-62348" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62348" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62349" id="CVE-2025-62349" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62349" type="cve" />
    </references>
    <description>This update fixes the following issues:

salt:

- Security issues fixed:

  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)
  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)
  - Backport security fixes for vendored tornado
    * BDSA-2024-3438
    * BDSA-2024-3439
    * BDSA-2024-9026

- Other changes and bugs fixed:

  - Fixed TLS and x509 modules for OSes with older cryptography module
  - Fixed Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)
    * Use external tornado on Python &gt; 3.11
    * Make tls and x509 to use python-cryptography
    * Remove usage of spwd
  - Fixed payload signature verification on Tumbleweed (bsc#1251776)
  - Fixed broken symlink on migration to Leap 16.0 (bsc#1250755)
  - Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
  - Fixed functional.states.test_user for SLES 16 and Micro systems
  - Fixed the tests failing on AlmaLinux 10 and other clones
  - Improved SL Micro 6.2 detection with grains
  - Require Python dependencies only for used Python version
  - Reverted requirement of M2Crypto &gt;= 0.44.0 for SUSE Family distros
  - Set python-CherryPy as required for python-salt-testsuite

uyuni-tools:

- Version 0.1.37-0

  * Added --registry-host, --registry-user and --registry-password to pull images from an authenticate registry
  * Added a lowercase version of --logLevel (bsc#1243611)
  * Added migration for server monitoring configuration (bsc#1247688)
  * Added SLE15SP7 to buildin productmap
  * Adjusted traefik exposed configuration for chart v27+ (bsc#1247721)
  * Automatically get up-to-date systemid file on salt based proxy hosts (bsc#1246789)
  * Check for restorecon presence before calling (bsc#1246925)
  * Convert the traefik install time to local time (bsc#1251138)
  * Deprecated --registry
  * Do not require backups to be at the same location for restoring (bsc#1246906)
  * Do not use sudo when running as a root user (bsc#1246882)
  * Fixed channel override for distro copy
  * Fixed loading product map from mgradm configuration file (bsc#1246068)
  * Fixed recomputing proxy images when installing a ptf or test (bsc#1246553)
  * Handle CA files with symlinks during migration (bsc#1251044)
  * Migrate custom auto installation snippets (bsc#1246320)
  * Run smdba and reindex only during migration (bsc#1244534)
  * Stop executing scripts in temporary folder (bsc#1243704)
  * Support config: collect podman inspect for hub container(bsc#1245099)
  * Use new dedicated path for Cobbler settings (bsc#1244027)

- Version 0.1.36-0

  * Bump the default image tag to 5.0.5.1

- Version 0.1.35-0

  * Restore SELinux contexts for restored backup volumes (bsc#1244127)

- Version 0.1.34-0

  * Fixed mgradm backup create handling of images and systemd files (bsc#1246738)

- Version 0.1.33-0

  * Restore volumes using tar instead of podman import (bsc#1244127)

- Version 0.1.32-0

  * Fixed version compare by backport from main (bsc#1246662)

venv-salt-minion:

- Security issues fixed:

  - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257)
  - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256)
  - Backport security fixes for vendored tornado
    * BDSA-2024-3438
    * BDSA-2024-3439
    * BDSA-2024-9026

- Other changes and bugs fixed:

  - Added `minion_legacy_req_warnings` option to avoid noisy warnings
  - Fixed TLS and x509 modules for OSes with older cryptography module
  - Fixed Salt for Python &gt; 3.11 (bsc#1252285) (bsc#1252244)

    * Use external tornado on Python &gt; 3.11
    * Make tls and x509 to use python-cryptography
    * Remove usage of spwd

  - Filter out zero-length check as the empty files are expected there
  - Filter out env-script-interpreter for ssh-id-wrapper as not used
    with the Salt Bundle, but present inside the salt module
  - Fixed functional.states.test_user for SLES 16 and Micro systems
  - Fixed known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
  - Fixed payload signature verification on Tumbleweed (bsc#1251776)
  - Fixed the tests failing on AlmaLinux 10 and other clones
  - Improve SL Micro 6.2 detection with grains
  - Removed unused activate script (bsc#1245740)
  - Use more strict way to Fixed shebang in the bundle scripts
  - Use versioned python interpreter for salt-ssh

</description>
    <pkglist>
      <collection>
        <package name="salt" epoch="0" version="3006.0" release="14.1" arch="src" src="src/salt-3006.0-14.1.src.rpm">
          <filename>salt-3006.0-14.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="14.1" arch="x86_64" src="x86_64/salt-3006.0-14.1.x86_64.rpm">
          <filename>salt-3006.0-14.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-master" epoch="0" version="3006.0" release="14.1" arch="x86_64" src="x86_64/salt-master-3006.0-14.1.x86_64.rpm">
          <filename>salt-master-3006.0-14.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="14.1" arch="x86_64" src="x86_64/salt-minion-3006.0-14.1.x86_64.rpm">
          <filename>salt-minion-3006.0-14.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="14.1" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-14.1.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-14.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>528</id>
    <title>Recommended update for kmod</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1764578712" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253741" id="1253741" title="L3: modprobe.d confusion on man page [ thread::_PIiP1uSJeKBwDXA3_WZjis:: ]" type="bugzilla" />
    </references>
    <description>This update for kmod fixes the following issues:

- Fix modprobe.d confusion on man page (bsc#1253741):
    * document the config file order handling
</description>
    <pkglist>
      <collection>
        <package name="kmod" epoch="0" version="30" release="11.1" arch="src" src="src/kmod-30-11.1.src.rpm">
          <filename>kmod-30-11.1.src.rpm</filename>
        </package>
        <package name="kmod" epoch="0" version="30" release="11.1" arch="x86_64" src="x86_64/kmod-30-11.1.x86_64.rpm">
          <filename>kmod-30-11.1.x86_64.rpm</filename>
        </package>
        <package name="kmod-debuginfo" epoch="0" version="30" release="11.1" arch="x86_64" src="x86_64/kmod-debuginfo-30-11.1.x86_64.rpm">
          <filename>kmod-debuginfo-30-11.1.x86_64.rpm</filename>
        </package>
        <package name="kmod-debugsource" epoch="0" version="30" release="11.1" arch="x86_64" src="x86_64/kmod-debugsource-30-11.1.x86_64.rpm">
          <filename>kmod-debugsource-30-11.1.x86_64.rpm</filename>
        </package>
        <package name="libkmod2" epoch="0" version="30" release="11.1" arch="x86_64" src="x86_64/libkmod2-30-11.1.x86_64.rpm">
          <filename>libkmod2-30-11.1.x86_64.rpm</filename>
        </package>
        <package name="libkmod2-debuginfo" epoch="0" version="30" release="11.1" arch="x86_64" src="x86_64/libkmod2-debuginfo-30-11.1.x86_64.rpm">
          <filename>libkmod2-debuginfo-30-11.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>529</id>
    <title>Security update for curl</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1765264954" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253757" id="1253757" title="VUL-0: CVE-2025-11563: curl: wcurl path traversal with percent-encoded slashes" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11563" id="CVE-2025-11563" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11563" type="cve" />
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757).
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.14.1" release="2.1" arch="src" src="src/curl-8.14.1-2.1.src.rpm">
          <filename>curl-8.14.1-2.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.14.1" release="2.1" arch="x86_64" src="x86_64/curl-8.14.1-2.1.x86_64.rpm">
          <filename>curl-8.14.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debuginfo" epoch="0" version="8.14.1" release="2.1" arch="x86_64" src="x86_64/curl-debuginfo-8.14.1-2.1.x86_64.rpm">
          <filename>curl-debuginfo-8.14.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debugsource" epoch="0" version="8.14.1" release="2.1" arch="x86_64" src="x86_64/curl-debugsource-8.14.1-2.1.x86_64.rpm">
          <filename>curl-debugsource-8.14.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.14.1" release="2.1" arch="x86_64" src="x86_64/libcurl4-8.14.1-2.1.x86_64.rpm">
          <filename>libcurl4-8.14.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4-debuginfo" epoch="0" version="8.14.1" release="2.1" arch="x86_64" src="x86_64/libcurl4-debuginfo-8.14.1-2.1.x86_64.rpm">
          <filename>libcurl4-debuginfo-8.14.1-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>530</id>
    <title>Security update for python311</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1765266437" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1251305" id="1251305" title="VUL-0: CVE-2025-8291: python,python3,python310,python311,python312,python313,python36,python39: validity of the ZIP64 End of Central Directory (EOCD) is not checked by the 'zipfile' module" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252974" id="1252974" title="VUL-0: CVE-2025-6075: python,python3,python310,python311,python312,python313,python36,python39: If the value passed to os.path.expandvars() is user-controlled a  performance degradation is possible when expanding environment  variables." type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6075" id="CVE-2025-6075" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6075" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8291" id="CVE-2025-8291" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8291" type="cve" />
      <reference href="https://github.com/python/cpython#139257" id="python/cpython#139257" title="https://github.com/python/cpython#139257" type="github" />
    </references>
    <description>This update for python311 fixes the following issues:

Update to 3.11.14:

- CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) is not checked by the 'zipfile' 
  module (bsc#1251305).
- CVE-2025-6075: Fixed the value passed to os.path.expandvars() is user-controlled a performance degradation
  is possible when expanding environment variables (bsc#1252974).
</description>
    <pkglist>
      <collection>
        <package name="python311" epoch="0" version="3.11.14" release="1.1" arch="src" src="src/python311-3.11.14-1.1.src.rpm">
          <filename>python311-3.11.14-1.1.src.rpm</filename>
        </package>
        <package name="python311" epoch="0" version="3.11.14" release="1.1" arch="x86_64" src="x86_64/python311-3.11.14-1.1.x86_64.rpm">
          <filename>python311-3.11.14-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses" epoch="0" version="3.11.14" release="1.1" arch="x86_64" src="x86_64/python311-curses-3.11.14-1.1.x86_64.rpm">
          <filename>python311-curses-3.11.14-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses-debuginfo" epoch="0" version="3.11.14" release="1.1" arch="x86_64" src="x86_64/python311-curses-debuginfo-3.11.14-1.1.x86_64.rpm">
          <filename>python311-curses-debuginfo-3.11.14-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debuginfo" epoch="0" version="3.11.14" release="1.1" arch="x86_64" src="x86_64/python311-debuginfo-3.11.14-1.1.x86_64.rpm">
          <filename>python311-debuginfo-3.11.14-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debugsource" epoch="0" version="3.11.14" release="1.1" arch="x86_64" src="x86_64/python311-debugsource-3.11.14-1.1.x86_64.rpm">
          <filename>python311-debugsource-3.11.14-1.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0" epoch="0" version="3.11.14" release="1.1" arch="x86_64" src="x86_64/libpython3_11-1_0-3.11.14-1.1.x86_64.rpm">
          <filename>libpython3_11-1_0-3.11.14-1.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0-debuginfo" epoch="0" version="3.11.14" release="1.1" arch="x86_64" src="x86_64/libpython3_11-1_0-debuginfo-3.11.14-1.1.x86_64.rpm">
          <filename>libpython3_11-1_0-debuginfo-3.11.14-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base" epoch="0" version="3.11.14" release="1.1" arch="x86_64" src="x86_64/python311-base-3.11.14-1.1.x86_64.rpm">
          <filename>python311-base-3.11.14-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base-debuginfo" epoch="0" version="3.11.14" release="1.1" arch="x86_64" src="x86_64/python311-base-debuginfo-3.11.14-1.1.x86_64.rpm">
          <filename>python311-base-debuginfo-3.11.14-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-core" epoch="0" version="3.11.14" release="1.1" arch="src" src="src/python311-core-3.11.14-1.1.src.rpm">
          <filename>python311-core-3.11.14-1.1.src.rpm</filename>
        </package>
        <package name="python311-core-debugsource" epoch="0" version="3.11.14" release="1.1" arch="x86_64" src="x86_64/python311-core-debugsource-3.11.14-1.1.x86_64.rpm">
          <filename>python311-core-debugsource-3.11.14-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>531</id>
    <title>Security update for libmicrohttpd</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1765294042" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253177" id="1253177" title="VUL-0: CVE-2025-59777: libmicrohttpd: specially crafted packet sent by an attacker could cause a NULL pointer dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253178" id="1253178" title="VUL-0: CVE-2025-62689: libmicrohttpd: specially crafted packet sent by an attacker could cause a heap-based buffer overflow" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59777" id="CVE-2025-59777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59777" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62689" id="CVE-2025-62689" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62689" type="cve" />
    </references>
    <description>This update for libmicrohttpd fixes the following issues:

- CVE-2025-59777: Fixed NULL pointer dereference (bsc#1253177).
- CVE-2025-62689: Fixed heap-based buffer overflow(bsc#1253178).
</description>
    <pkglist>
      <collection>
        <package name="libmicrohttpd" epoch="0" version="0.9.77" release="2.1" arch="src" src="src/libmicrohttpd-0.9.77-2.1.src.rpm">
          <filename>libmicrohttpd-0.9.77-2.1.src.rpm</filename>
        </package>
        <package name="libmicrohttpd-debugsource" epoch="0" version="0.9.77" release="2.1" arch="x86_64" src="x86_64/libmicrohttpd-debugsource-0.9.77-2.1.x86_64.rpm">
          <filename>libmicrohttpd-debugsource-0.9.77-2.1.x86_64.rpm</filename>
        </package>
        <package name="libmicrohttpd12" epoch="0" version="0.9.77" release="2.1" arch="x86_64" src="x86_64/libmicrohttpd12-0.9.77-2.1.x86_64.rpm">
          <filename>libmicrohttpd12-0.9.77-2.1.x86_64.rpm</filename>
        </package>
        <package name="libmicrohttpd12-debuginfo" epoch="0" version="0.9.77" release="2.1" arch="x86_64" src="x86_64/libmicrohttpd12-debuginfo-0.9.77-2.1.x86_64.rpm">
          <filename>libmicrohttpd12-debuginfo-0.9.77-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>533</id>
    <title>Security update for gnutls</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1765295414" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254132" id="1254132" title="VUL-0: CVE-2025-9820: buffer overflow in gnutls_pkcs11_token_init" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9820" id="CVE-2025-9820" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9820" type="cve" />
    </references>
    <description>This update for gnutls fixes the following issues:

- CVE-2025-9820: Fixed buffer overflow in gnutls_pkcs11_token_init (bsc#1254132).
</description>
    <pkglist>
      <collection>
        <package name="gnutls" epoch="0" version="3.8.3" release="5.1" arch="src" src="src/gnutls-3.8.3-5.1.src.rpm">
          <filename>gnutls-3.8.3-5.1.src.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.8.3" release="5.1" arch="x86_64" src="x86_64/gnutls-3.8.3-5.1.x86_64.rpm">
          <filename>gnutls-3.8.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls-debuginfo" epoch="0" version="3.8.3" release="5.1" arch="x86_64" src="x86_64/gnutls-debuginfo-3.8.3-5.1.x86_64.rpm">
          <filename>gnutls-debuginfo-3.8.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls-debugsource" epoch="0" version="3.8.3" release="5.1" arch="x86_64" src="x86_64/gnutls-debugsource-3.8.3-5.1.x86_64.rpm">
          <filename>gnutls-debugsource-3.8.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.8.3" release="5.1" arch="x86_64" src="x86_64/libgnutls30-3.8.3-5.1.x86_64.rpm">
          <filename>libgnutls30-3.8.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30-debuginfo" epoch="0" version="3.8.3" release="5.1" arch="x86_64" src="x86_64/libgnutls30-debuginfo-3.8.3-5.1.x86_64.rpm">
          <filename>libgnutls30-debuginfo-3.8.3-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>534</id>
    <title>Recommended update for runc</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1765443255" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254362" id="1254362" title="SLES 15 SP6: Availability of runc v1.3.4 or v1.4.0" type="bugzilla" />
    </references>
    <description>This update for runc fixes the following issues:

- Update to runc v1.3.4 (bsc#1254362)
- libct: fix mips compilation:
    * When configuring a tmpfs mount, only set the mode= argument if the
      target path already existed.
    * Fix various file descriptor leaks and add additional tests to detect them as
      comprehensively as possible.
- Downgrade github.com/cyphar/filepath-securejoin dependency to v0.5.2,
  which should make it easier for some downstreams to import runc without
  pulling in too many extra packages.
- The runc binary distributed with this release are statically linked with the following 
  GNU LGPL-2.1 licensed libraries, with runc acting as a "work that uses the Library":
     * libseccomp: The versions of these libraries were not modified from their upstream versions
</description>
    <pkglist>
      <collection>
        <package name="runc" epoch="0" version="1.3.4" release="1.1" arch="src" src="src/runc-1.3.4-1.1.src.rpm">
          <filename>runc-1.3.4-1.1.src.rpm</filename>
        </package>
        <package name="runc" epoch="0" version="1.3.4" release="1.1" arch="x86_64" src="x86_64/runc-1.3.4-1.1.x86_64.rpm">
          <filename>runc-1.3.4-1.1.x86_64.rpm</filename>
        </package>
        <package name="runc-debuginfo" epoch="0" version="1.3.4" release="1.1" arch="x86_64" src="x86_64/runc-debuginfo-1.3.4-1.1.x86_64.rpm">
          <filename>runc-debuginfo-1.3.4-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>536</id>
    <title>Security update for libpng16</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1765873985" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254157" id="1254157" title="VUL-0: CVE-2025-64505: libpng12,libpng12-0,libpng15,libpng16: heap buffer over-read in `png_do_quantize` via malformed palette index" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254158" id="1254158" title="VUL-0: CVE-2025-64506: libpng12,libpng12-0,libpng15,libpng16: heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254159" id="1254159" title="VUL-0: CVE-2025-64720: libpng12,libpng12-0,libpng15,libpng16: buffer overflow in `png_image_read_composite` via incorrect palette premultiplication" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254160" id="1254160" title="VUL-0: CVE-2025-65018: libpng12,libpng12-0,libpng15,libpng16: heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254480" id="1254480" title="VUL-0: CVE-2025-66293: libpng: LIBPNG out-of-bounds read in png_image_read_composite" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64505" id="CVE-2025-64505" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64505" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64506" id="CVE-2025-64506" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64506" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64720" id="CVE-2025-64720" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-64720" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65018" id="CVE-2025-65018" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65018" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66293" id="CVE-2025-66293" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66293" type="cve" />
    </references>
    <description>This update for libpng16 fixes the following issues:

- CVE-2025-66293: Fixed out-of-bounds read in png_image_read_composite (bsc#1254480).
- CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157).
- CVE-2025-64506: Fixed heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled (bsc#1254158).
- CVE-2025-64720: Fixed buffer overflow in `png_image_read_composite` via incorrect palette premultiplication (bsc#1254159).
- CVE-2025-65018: Fixed heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` (bsc#1254160).
</description>
    <pkglist>
      <collection>
        <package name="libpng16" epoch="0" version="1.6.43" release="2.1" arch="src" src="src/libpng16-1.6.43-2.1.src.rpm">
          <filename>libpng16-1.6.43-2.1.src.rpm</filename>
        </package>
        <package name="libpng16-16" epoch="0" version="1.6.43" release="2.1" arch="x86_64" src="x86_64/libpng16-16-1.6.43-2.1.x86_64.rpm">
          <filename>libpng16-16-1.6.43-2.1.x86_64.rpm</filename>
        </package>
        <package name="libpng16-16-debuginfo" epoch="0" version="1.6.43" release="2.1" arch="x86_64" src="x86_64/libpng16-16-debuginfo-1.6.43-2.1.x86_64.rpm">
          <filename>libpng16-16-debuginfo-1.6.43-2.1.x86_64.rpm</filename>
        </package>
        <package name="libpng16-debugsource" epoch="0" version="1.6.43" release="2.1" arch="x86_64" src="x86_64/libpng16-debugsource-1.6.43-2.1.x86_64.rpm">
          <filename>libpng16-debugsource-1.6.43-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>537</id>
    <title>Recommended update for systemd</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1765899483" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1224386" id="1224386" title="Please package systemd-resolved seperate from systemd-network" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244449" id="1244449" title="systemd-detect-virt returns 0 in c3-highcpu-metal machine" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245551" id="1245551" title="systemd-update-helper: subsequent package removal and installations do not trigger restart of services" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248356" id="1248356" title="L3-Question: loop module automatically loaded after updating to systemd-254.27-150600.4.43.3.x86_64" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248501" id="1248501" title="systemd-resolved has strange behavior after being set up, e.g resolvectl times out or service fails to start after a reboot" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254563" id="1254563" title="systemd timer units fire immediately after being restarted" type="bugzilla" />
      <reference href="https://jira.suse.com/browse/PED-12669" id="PED-12669" title="https://jira.suse.com/browse/PED-12669" type="jira" />
    </references>
    <description>This update for systemd fixes the following issues:

- timer: rebase last_trigger timestamp if needed
- timer: rebase the next elapse timestamp only if timer didn't already run
- timer: don't run service immediately after restart of a timer (bsc#1254563)
- test: check the next elapse timer timestamp after deserialization
- test: restarting elapsed timer shouldn't trigger the corresponding service
- units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
- units: add dep on systemd-logind.service by user@.service
- detect-virt: add bare-metal support for GCE (bsc#1244449)
- Sync systemd-update-helper with the version shipped in Base:System
- systemd-update-helper: do not stop or disable services when they are migrated
  to other packages. This can occur during package renaming or splitting.
- systemd-update-helper: Fix invalid use of "break" in case statement
- systemd-update-helper: fix regression introduced when support for package
  renaming/splitting was added (bsc#1245551)
- systemd-update-helper:
     * Since user@.service has `Type=notify-reload` and reloading implies reexecuting 
       with `ReloadSignal=RTMIN+25`, reexecuting user managers synchronously 
       can be achieved with `systemctl reload user@*.service" now.
- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre (bsc#1248501)
- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/libsystemd0-254.27-2.1.x86_64.rpm">
          <filename>libsystemd0-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0-debuginfo" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/libsystemd0-debuginfo-254.27-2.1.x86_64.rpm">
          <filename>libsystemd0-debuginfo-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/libudev1-254.27-2.1.x86_64.rpm">
          <filename>libudev1-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1-debuginfo" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/libudev1-debuginfo-254.27-2.1.x86_64.rpm">
          <filename>libudev1-debuginfo-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="254.27" release="2.1" arch="src" src="src/systemd-254.27-2.1.src.rpm">
          <filename>systemd-254.27-2.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/systemd-254.27-2.1.x86_64.rpm">
          <filename>systemd-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/systemd-container-254.27-2.1.x86_64.rpm">
          <filename>systemd-container-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container-debuginfo" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/systemd-container-debuginfo-254.27-2.1.x86_64.rpm">
          <filename>systemd-container-debuginfo-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-coredump" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/systemd-coredump-254.27-2.1.x86_64.rpm">
          <filename>systemd-coredump-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-coredump-debuginfo" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/systemd-coredump-debuginfo-254.27-2.1.x86_64.rpm">
          <filename>systemd-coredump-debuginfo-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-debuginfo" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/systemd-debuginfo-254.27-2.1.x86_64.rpm">
          <filename>systemd-debuginfo-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-debugsource" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/systemd-debugsource-254.27-2.1.x86_64.rpm">
          <filename>systemd-debugsource-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-experimental" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/systemd-experimental-254.27-2.1.x86_64.rpm">
          <filename>systemd-experimental-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-experimental-debuginfo" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/systemd-experimental-debuginfo-254.27-2.1.x86_64.rpm">
          <filename>systemd-experimental-debuginfo-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/systemd-journal-remote-254.27-2.1.x86_64.rpm">
          <filename>systemd-journal-remote-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote-debuginfo" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/systemd-journal-remote-debuginfo-254.27-2.1.x86_64.rpm">
          <filename>systemd-journal-remote-debuginfo-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-portable" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/systemd-portable-254.27-2.1.x86_64.rpm">
          <filename>systemd-portable-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-portable-debuginfo" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/systemd-portable-debuginfo-254.27-2.1.x86_64.rpm">
          <filename>systemd-portable-debuginfo-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/udev-254.27-2.1.x86_64.rpm">
          <filename>udev-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev-debuginfo" epoch="0" version="254.27" release="2.1" arch="x86_64" src="x86_64/udev-debuginfo-254.27-2.1.x86_64.rpm">
          <filename>udev-debuginfo-254.27-2.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>549</id>
    <title>Security update for python-tornado6</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767887315" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254903" id="1254903" title="VUL-0: CVE-2025-67724: python-tornado,python-tornado6: missing validation of the supplied reason phrase" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254904" id="1254904" title="VUL-0: CVE-2025-67726: python-tornado,python-tornado6: inefficient algorithm when parsing parameters for HTTP header values" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254905" id="1254905" title="VUL-0: CVE-2025-67725: python-tornado,python-tornado6: Denial of Service (DoS) via maliciously crafted HTTP request caused by the HTTPHeaders.add method" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67724" id="CVE-2025-67724" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67724" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67725" id="CVE-2025-67725" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67725" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67726" id="CVE-2025-67726" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67726" type="cve" />
    </references>
    <description>This update for python-tornado6 fixes the following issues:

- CVE-2025-67724: Fixed missing validation of the supplied reason phrase (bsc#1254903)
- CVE-2025-67725: Fixed inefficient algorithm when parsing parameters for HTTP header values (bsc#1254905)
- CVE-2025-67726: Fixed Denial of Service (DoS) via maliciously crafted HTTP request caused by the HTTPHeaders.add method (bsc#1254904)
</description>
    <pkglist>
      <collection>
        <package name="python-tornado6" epoch="0" version="6.4" release="4.1" arch="src" src="src/python-tornado6-6.4-4.1.src.rpm">
          <filename>python-tornado6-6.4-4.1.src.rpm</filename>
        </package>
        <package name="python-tornado6-debugsource" epoch="0" version="6.4" release="4.1" arch="x86_64" src="x86_64/python-tornado6-debugsource-6.4-4.1.x86_64.rpm">
          <filename>python-tornado6-debugsource-6.4-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-tornado6" epoch="0" version="6.4" release="4.1" arch="x86_64" src="x86_64/python311-tornado6-6.4-4.1.x86_64.rpm">
          <filename>python311-tornado6-6.4-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-tornado6-debuginfo" epoch="0" version="6.4" release="4.1" arch="x86_64" src="x86_64/python311-tornado6-debuginfo-6.4-4.1.x86_64.rpm">
          <filename>python311-tornado6-debuginfo-6.4-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>550</id>
    <title>Security update for glib2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767887737" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254297" id="1254297" title="VUL-0: CVE-2025-13601: glib2: Integer overflow in in g_escape_uri_string()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254662" id="1254662" title="VUL-0: CVE-2025-14087: glib2:  buffer underflow in GVariant parser leads to heap corruption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254878" id="1254878" title="VUL-0: CVE-2025-14512: glib2: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13601" id="CVE-2025-13601" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13601" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14087" id="CVE-2025-14087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14087" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14512" id="CVE-2025-14512" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14512" type="cve" />
    </references>
    <description>This update for glib2 fixes the following issues:

- CVE-2025-13601: Fixed Integer overflow in in g_escape_uri_string() (bsc#1254297)
- CVE-2025-14087: Fixed buffer underflow in GVariant parser leads to heap corruption (bsc#1254662)
- CVE-2025-14512: Fixed Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow (bsc#1254878)

</description>
    <pkglist>
      <collection>
        <package name="glib2" epoch="0" version="2.76.2" release="11.1" arch="src" src="src/glib2-2.76.2-11.1.src.rpm">
          <filename>glib2-2.76.2-11.1.src.rpm</filename>
        </package>
        <package name="glib2-debugsource" epoch="0" version="2.76.2" release="11.1" arch="x86_64" src="x86_64/glib2-debugsource-2.76.2-11.1.x86_64.rpm">
          <filename>glib2-debugsource-2.76.2-11.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.76.2" release="11.1" arch="x86_64" src="x86_64/glib2-tools-2.76.2-11.1.x86_64.rpm">
          <filename>glib2-tools-2.76.2-11.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools-debuginfo" epoch="0" version="2.76.2" release="11.1" arch="x86_64" src="x86_64/glib2-tools-debuginfo-2.76.2-11.1.x86_64.rpm">
          <filename>glib2-tools-debuginfo-2.76.2-11.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.76.2" release="11.1" arch="x86_64" src="x86_64/libgio-2_0-0-2.76.2-11.1.x86_64.rpm">
          <filename>libgio-2_0-0-2.76.2-11.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0-debuginfo" epoch="0" version="2.76.2" release="11.1" arch="x86_64" src="x86_64/libgio-2_0-0-debuginfo-2.76.2-11.1.x86_64.rpm">
          <filename>libgio-2_0-0-debuginfo-2.76.2-11.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.76.2" release="11.1" arch="x86_64" src="x86_64/libglib-2_0-0-2.76.2-11.1.x86_64.rpm">
          <filename>libglib-2_0-0-2.76.2-11.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0-debuginfo" epoch="0" version="2.76.2" release="11.1" arch="x86_64" src="x86_64/libglib-2_0-0-debuginfo-2.76.2-11.1.x86_64.rpm">
          <filename>libglib-2_0-0-debuginfo-2.76.2-11.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.76.2" release="11.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-2.76.2-11.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-2.76.2-11.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0-debuginfo" epoch="0" version="2.76.2" release="11.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-debuginfo-2.76.2-11.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-debuginfo-2.76.2-11.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.76.2" release="11.1" arch="x86_64" src="x86_64/libgobject-2_0-0-2.76.2-11.1.x86_64.rpm">
          <filename>libgobject-2_0-0-2.76.2-11.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0-debuginfo" epoch="0" version="2.76.2" release="11.1" arch="x86_64" src="x86_64/libgobject-2_0-0-debuginfo-2.76.2-11.1.x86_64.rpm">
          <filename>libgobject-2_0-0-debuginfo-2.76.2-11.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>539</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767111914" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255027" id="1255027" title="systemd-gpt-auto-generator[1470]: Failed to create symlink &quot;/run/systemd/generator.late/local-fs.target.wants/systemd-remount-fs.service&quot;: No such file or directory" type="bugzilla" />
    </references>
    <description>This update for selinux-policy fixes the following issues:

- Fix systemd generator.early and generator.late file contexts (bsc#1255027)
</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230523+git32.d521aa73b" release="2.1" arch="noarch" src="noarch/selinux-policy-20230523+git32.d521aa73b-2.1.noarch.rpm">
          <filename>selinux-policy-20230523+git32.d521aa73b-2.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230523+git32.d521aa73b" release="2.1" arch="src" src="src/selinux-policy-20230523+git32.d521aa73b-2.1.src.rpm">
          <filename>selinux-policy-20230523+git32.d521aa73b-2.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230523+git32.d521aa73b" release="2.1" arch="noarch" src="noarch/selinux-policy-devel-20230523+git32.d521aa73b-2.1.noarch.rpm">
          <filename>selinux-policy-devel-20230523+git32.d521aa73b-2.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230523+git32.d521aa73b" release="2.1" arch="noarch" src="noarch/selinux-policy-targeted-20230523+git32.d521aa73b-2.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230523+git32.d521aa73b-2.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>540</id>
    <title>Recommended update for supportutils</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767111661" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1196933" id="1196933" title="apparmor supportutils plugin outdated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1206608" id="1206608" title="supportconfig - docker - Argument list too long" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1207543" id="1207543" title="supportconfig collects last 30 files but should collect files for last 30 days instead" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1208928" id="1208928" title="Insufficient hwinfo details in supportconfig" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1232351" id="1232351" title="Supportconfig lsof commands" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241284" id="1241284" title="supportconfig missing NetworkManager specific debug information" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244003" id="1244003" title="Supportutils needed to collect rsyslog.d directory content" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244011" id="1244011" title="supportconfig captures proxy password information in the env and updates.txt files" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244937" id="1244937" title="supportutils doesn't collect agama logs" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1245667" id="1245667" title="supportconfig: hostname command not found and other errors" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246011" id="1246011" title="supportconfig: attempts pmap PID in memory.txt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246025" id="1246025" title="supportconfig: missing /proc/pagetypeinfo from memory.txt" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249657" id="1249657" title="Supportconfig: scan for blocking kGraft patching influence database performance" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250224" id="1250224" title="L3: Inconsistencies and delays while gathering supportconfig" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252318" id="1252318" title="supportconfig: extraction failures" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254425" id="1254425" title="supportconfig mentions wrong location for config file" type="bugzilla" />
    </references>
    <description>This update for supportutils fixes the following issues:

- Changes to version 3.2.12:
    * Optimized lsof usage and honors OPTION_OFILES (bsc#1232351)
    * Run in containers without errors (bsc#1245667)
    * Removed pmap PID from memory.txt (bsc#1246011)
    * Added missing /proc/pagetypeinfo to memory.txt (bsc#1246025)
    * Improved database perforce with kGraft patching (bsc#1249657)
    * Using last boot for journalctl for optimization (bsc#1250224)
    * Fixed extraction failures (bsc#1252318)
    * Update supportconfig.conf path in docs (bsc#1254425)
    * drm_sub_info: Catch error when dir doesn't exist
    * Replace remaining `egrep` with `grep -E`
    * Add process affinity to slert logs
    * Reintroduce cgroup statistics (and v2)
    * Minor changes to basic-health-check: improve information level
    * Collect important machine health counters
    * powerpc: collect hot-pluggable PCI and PHB slots
    * podman: collect podman disk usage
    * Exclude binary files in crondir
    * kexec/kdump: collect everything under /sys/kernel/kexec dir
    * Use short-iso for journalctl
- Changes to version 3.2.11:
    * Collect rsyslog frule files (bsc#1244003)
    * Remove proxy passwords (bsc#1244011)
    * Missing NetworkManager information (bsc#1241284)
    * Include agama logs bsc#1244937)
    * Additional NFS conf files
    * New fadump sysfs files
    * Fixed change log dates
</description>
    <pkglist>
      <collection>
        <package name="supportutils" epoch="0" version="3.2.12.2" release="1.1" arch="noarch" src="noarch/supportutils-3.2.12.2-1.1.noarch.rpm">
          <filename>supportutils-3.2.12.2-1.1.noarch.rpm</filename>
        </package>
        <package name="supportutils" epoch="0" version="3.2.12.2" release="1.1" arch="src" src="src/supportutils-3.2.12.2-1.1.src.rpm">
          <filename>supportutils-3.2.12.2-1.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>551</id>
    <title>Security update for rsync</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767887407" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254441" id="1254441" title="VUL-0: CVE-2025-10158: rsync: Out of bounds array access via negative index" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10158" id="CVE-2025-10158" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10158" type="cve" />
    </references>
    <description>This update for rsync fixes the following issues:

- CVE-2025-10158: Fixed out of bounds array access via negative index (bsc#1254441)
</description>
    <pkglist>
      <collection>
        <package name="rsync" epoch="0" version="3.2.7" release="5.1" arch="src" src="src/rsync-3.2.7-5.1.src.rpm">
          <filename>rsync-3.2.7-5.1.src.rpm</filename>
        </package>
        <package name="rsync" epoch="0" version="3.2.7" release="5.1" arch="x86_64" src="x86_64/rsync-3.2.7-5.1.x86_64.rpm">
          <filename>rsync-3.2.7-5.1.x86_64.rpm</filename>
        </package>
        <package name="rsync-debuginfo" epoch="0" version="3.2.7" release="5.1" arch="x86_64" src="x86_64/rsync-debuginfo-3.2.7-5.1.x86_64.rpm">
          <filename>rsync-debuginfo-3.2.7-5.1.x86_64.rpm</filename>
        </package>
        <package name="rsync-debugsource" epoch="0" version="3.2.7" release="5.1" arch="x86_64" src="x86_64/rsync-debugsource-3.2.7-5.1.x86_64.rpm">
          <filename>rsync-debugsource-3.2.7-5.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>541</id>
    <title>Recommended update for shim</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767111661" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1205588" id="1205588" title="Page Fault when booting with PE NX-compatibility DLL Characteristic flag" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247432" id="1247432" title="Using DXE services causes problem in automatically enable MOK_POLICY_REQUIRE_NX in shim" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254336" id="1254336" title="[aarch64] System fails during the boot on Tianocore with Synchronous Exception at 0x000000013C16A000" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254679" id="1254679" title="[Build 20251209] shim pretrans script refuses to install on 'opensuse signed uefi'" type="bugzilla" />
    </references>
    <description>This update for shim fixes the following issues:

This update for shim fixes the following issues:

shim is updated to version 16.1:

- shim_start_image(): fix guid/handle pairing when uninstalling protocols
- Fix uncompressed ipv6 netboot
- fix test segfaults caused by uninitialized memory
- SbatLevel_Variable.txt: minor typo fix.
- Realloc() needs to allocate one more byte for sprintf()
- IPv6: Add more check to avoid multiple double colon and illegal char
- Loader proto v2
- loader-protocol: add workaround for EDK2 2025.02 page fault on FreePages
- Generate Authenticode for the entire PE file
- README: mention new loader protocol and interaction with UKIs
- shim: change automatically enable MOK_POLICY_REQUIRE_NX
- Save var info
- add SbatLevel entry 2025051000 for PSA-2025-00012-1
- Coverity fixes 20250804
- fix http boot
- Fix double free and leak in the loader protocol


shim is updated to version 16.0:


- Validate that a supplied vendor cert is not in PEM format
- sbat: Add grub.peimage,2 to latest (CVE-2024-2312)
- sbat: Also bump latest for grub,4 (and to todays date)
- undo change that limits certificate files to a single file
- shim: don't set second_stage to the empty string
- Fix SBAT.md for today's consensus about numbers
- Update Code of Conduct contact address
- make-certs: Handle missing OpenSSL installation
- Update MokVars.txt
- export DEFINES for sub makefile
- Drop unused EFI_IMAGE_SECURITY_DATABASE_GUID definition
- Null-terminate 'arguments' in fallback
- Fix "Verifiying" typo in error message
- Update Fedora CI targets
- Force gcc to produce DWARF4 so that gdb can use it
- Minor housekeeping 2024121700
- Discard load-options that start with WINDOWS
- Fix the issue that the gBS-&gt;LoadImage pointer was empty.
- shim: Allow data after the end of device path node in load options
- Handle network file not found like disks
- Update gnu-efi submodule for EFI_HTTP_ERROR
- Increase EFI file alignment
- avoid EFIv2 runtime services on Apple x86 machines
- Improve shortcut performance when comparing two boolean expressions
- Provide better error message when MokManager is not found
- tpm: Boot with a warning if the event log is full
- MokManager: remove redundant logical constraints
- Test import_mok_state() when MokListRT would be bigger than available size
- test-mok-mirror: minor bug fix
- Fix file system browser hang when enrolling MOK from disk
- Ignore a minor clang-tidy nit
- Allow fallback to default loader when encountering errors on network boot
- test.mk: don't use a temporary random.bin
- pe: Enhance debug report for update_mem_attrs
- Multiple certificate handling improvements
- Generate SbatLevel Metadata from SbatLevel_Variable.txt
- Apply EKU check with compile option
- Add configuration option to boot an alternative 2nd stage
- Loader protocol (with Device Path resolution support)
- netboot cleanup for additional files
- Document how revocations can be delivered
- post-process-pe: add tests to validate NX compliance
- regression: CopyMem() in ad8692e copies out of bounds
- Save the debug and error logs in mok-variables
- Add features for the Host Security ID program
- Mirror some more efi variables to mok-variables
- This adds DXE Services measurements to HSI and uses them for NX
- Add shim's current NX_COMPAT status to HSIStatus
- README.tpm: reflect that vendor_db is in fact logged as "vendor_db"
- Reject HTTP message with duplicate Content-Length header fields
- Disable log saving
- fallback: don't add new boot order entries backwards
- README.tpm: Update MokList entry to MokListRT
- SBAT Level update for February 2025 GRUB CVEs

</description>
    <pkglist>
      <collection>
        <package name="shim" epoch="0" version="16.1" release="1.1" arch="src" src="src/shim-16.1-1.1.src.rpm">
          <filename>shim-16.1-1.1.src.rpm</filename>
        </package>
        <package name="shim" epoch="0" version="16.1" release="1.1" arch="x86_64" src="x86_64/shim-16.1-1.1.x86_64.rpm">
          <filename>shim-16.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="shim-debuginfo" epoch="0" version="16.1" release="1.1" arch="x86_64" src="x86_64/shim-debuginfo-16.1-1.1.x86_64.rpm">
          <filename>shim-debuginfo-16.1-1.1.x86_64.rpm</filename>
        </package>
        <package name="shim-debugsource" epoch="0" version="16.1" release="1.1" arch="x86_64" src="x86_64/shim-debugsource-16.1-1.1.x86_64.rpm">
          <filename>shim-debugsource-16.1-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>542</id>
    <title>Security update for dpdk</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767126232" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1214724" id="1214724" title="SUSE provided DPDK modules taint the kernel as unsupported [ref:_00D1igLOd._500Tr8odGD:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254161" id="1254161" title="VUL-0: CVE-2025-23259: dpdk: an attacker on a VM in the system can cause information disclosure and denial of service" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234718" id="1234718" title="VUL-0: CVE-2024-11614: dpdk: Denial Of Service from malicious guest on hypervisors using DPDK Vhost library" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11614" id="CVE-2024-11614" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11614" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23259" id="CVE-2025-23259" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23259" type="cve" />
    </references>
    <description>This update for dpdk fixes the following issues:

Update to version 22.11.10.

Security issues fixed:

- CVE-2025-23259: issue in the Poll Mode Driver (PMD) allows an attacker on a VM in the system to leak information and
  cause a denial of service on the network interface (bsc#1254161).

Other updates and bugfixes:

- Fix SUSE provided DPDK modules tainting the kernel as unsupported (bsc#1214724).

Upstream release notes:
- Version 22.11.9
  https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id24
- Version 22.11.8
  https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id21
- Version 22.11.7
  https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id18
- Version 22.11.6
  https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id15
- Version 22.11.5
  https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id12
- Version 22.11.4
  https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id8
- Version 22.11.3
  https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id4
- Version 22.11.2 
  https://doc.dpdk.org/guides-22.11/rel_notes/release_22_11.html#id2
 
</description>
    <pkglist>
      <collection>
        <package name="dpdk" epoch="0" version="22.11.10" release="1.1" arch="src" src="src/dpdk-22.11.10-1.1.src.rpm">
          <filename>dpdk-22.11.10-1.1.src.rpm</filename>
        </package>
        <package name="dpdk" epoch="0" version="22.11.10" release="1.1" arch="x86_64" src="x86_64/dpdk-22.11.10-1.1.x86_64.rpm">
          <filename>dpdk-22.11.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="dpdk-debuginfo" epoch="0" version="22.11.10" release="1.1" arch="x86_64" src="x86_64/dpdk-debuginfo-22.11.10-1.1.x86_64.rpm">
          <filename>dpdk-debuginfo-22.11.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="dpdk-debugsource" epoch="0" version="22.11.10" release="1.1" arch="x86_64" src="x86_64/dpdk-debugsource-22.11.10-1.1.x86_64.rpm">
          <filename>dpdk-debugsource-22.11.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="libdpdk-23" epoch="0" version="22.11.10" release="1.1" arch="x86_64" src="x86_64/libdpdk-23-22.11.10-1.1.x86_64.rpm">
          <filename>libdpdk-23-22.11.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="libdpdk-23-debuginfo" epoch="0" version="22.11.10" release="1.1" arch="x86_64" src="x86_64/libdpdk-23-debuginfo-22.11.10-1.1.x86_64.rpm">
          <filename>libdpdk-23-debuginfo-22.11.10-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>552</id>
    <title>Security update for python311</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767889795" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254400" id="1254400" title="VUL-0: CVE-2025-13836: python,python3,python310,python311,python312,python313,python36,python39: When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254401" id="1254401" title="VUL-0: CVE-2025-13837: python,python3,python310,python311,python312,python313,python36,python39: When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254997" id="1254997" title="VUL-0: CVE-2025-12084: python,python3,python310,python311,python312,python313,python36,python39: cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12084" id="CVE-2025-12084" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12084" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13836" id="CVE-2025-13836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13836" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13837" id="CVE-2025-13837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13837" type="cve" />
    </references>
    <description>This update for python311 fixes the following issues:

- CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997)
- CVE-2025-13836: Fixed default Content-Lenght read amount from HTTP response (bsc#1254400)
- CVE-2025-13837: Fixed plistlib module denial of service (bsc#1254401)
</description>
    <pkglist>
      <collection>
        <package name="python311" epoch="0" version="3.11.14" release="2.1" arch="src" src="src/python311-3.11.14-2.1.src.rpm">
          <filename>python311-3.11.14-2.1.src.rpm</filename>
        </package>
        <package name="python311" epoch="0" version="3.11.14" release="2.1" arch="x86_64" src="x86_64/python311-3.11.14-2.1.x86_64.rpm">
          <filename>python311-3.11.14-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses" epoch="0" version="3.11.14" release="2.1" arch="x86_64" src="x86_64/python311-curses-3.11.14-2.1.x86_64.rpm">
          <filename>python311-curses-3.11.14-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses-debuginfo" epoch="0" version="3.11.14" release="2.1" arch="x86_64" src="x86_64/python311-curses-debuginfo-3.11.14-2.1.x86_64.rpm">
          <filename>python311-curses-debuginfo-3.11.14-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debuginfo" epoch="0" version="3.11.14" release="2.1" arch="x86_64" src="x86_64/python311-debuginfo-3.11.14-2.1.x86_64.rpm">
          <filename>python311-debuginfo-3.11.14-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debugsource" epoch="0" version="3.11.14" release="2.1" arch="x86_64" src="x86_64/python311-debugsource-3.11.14-2.1.x86_64.rpm">
          <filename>python311-debugsource-3.11.14-2.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0" epoch="0" version="3.11.14" release="2.1" arch="x86_64" src="x86_64/libpython3_11-1_0-3.11.14-2.1.x86_64.rpm">
          <filename>libpython3_11-1_0-3.11.14-2.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0-debuginfo" epoch="0" version="3.11.14" release="2.1" arch="x86_64" src="x86_64/libpython3_11-1_0-debuginfo-3.11.14-2.1.x86_64.rpm">
          <filename>libpython3_11-1_0-debuginfo-3.11.14-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base" epoch="0" version="3.11.14" release="2.1" arch="x86_64" src="x86_64/python311-base-3.11.14-2.1.x86_64.rpm">
          <filename>python311-base-3.11.14-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base-debuginfo" epoch="0" version="3.11.14" release="2.1" arch="x86_64" src="x86_64/python311-base-debuginfo-3.11.14-2.1.x86_64.rpm">
          <filename>python311-base-debuginfo-3.11.14-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-core" epoch="0" version="3.11.14" release="2.1" arch="src" src="src/python311-core-3.11.14-2.1.src.rpm">
          <filename>python311-core-3.11.14-2.1.src.rpm</filename>
        </package>
        <package name="python311-core-debugsource" epoch="0" version="3.11.14" release="2.1" arch="x86_64" src="x86_64/python311-core-debugsource-3.11.14-2.1.x86_64.rpm">
          <filename>python311-core-debugsource-3.11.14-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>543</id>
    <title>Security update for podman</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767125749" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253542" id="1253542" title="VUL-0: CVE-2025-47913: podman: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253993" id="1253993" title="VUL-0: CVE-2025-47914: podman: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds read" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47913" id="CVE-2025-47913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47913" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47914" id="CVE-2025-47914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47914" type="cve" />
    </references>
    <description>This update for podman fixes the following issues:

- CVE-2025-47914: lack of message size validation when SSH Agent server is processing new identity requests can lead to
  out-of-bounds read and an application panic (bsc#1253993).
- CVE-2025-47913: receiving an `SSH_AGENT_SUCCESS` reply when the SSH client is expecting a typed response can lead to
  the early termination of the client process (bsc#1253542).
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.9.5" release="10.1" arch="src" src="src/podman-4.9.5-10.1.src.rpm">
          <filename>podman-4.9.5-10.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="10.1" arch="x86_64" src="x86_64/podman-4.9.5-10.1.x86_64.rpm">
          <filename>podman-4.9.5-10.1.x86_64.rpm</filename>
        </package>
        <package name="podman-debuginfo" epoch="0" version="4.9.5" release="10.1" arch="x86_64" src="x86_64/podman-debuginfo-4.9.5-10.1.x86_64.rpm">
          <filename>podman-debuginfo-4.9.5-10.1.x86_64.rpm</filename>
        </package>
        <package name="podman-docker" epoch="0" version="4.9.5" release="10.1" arch="noarch" src="noarch/podman-docker-4.9.5-10.1.noarch.rpm">
          <filename>podman-docker-4.9.5-10.1.noarch.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="10.1" arch="x86_64" src="x86_64/podman-remote-4.9.5-10.1.x86_64.rpm">
          <filename>podman-remote-4.9.5-10.1.x86_64.rpm</filename>
        </package>
        <package name="podman-remote-debuginfo" epoch="0" version="4.9.5" release="10.1" arch="x86_64" src="x86_64/podman-remote-debuginfo-4.9.5-10.1.x86_64.rpm">
          <filename>podman-remote-debuginfo-4.9.5-10.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>545</id>
    <title>Security update for qemu</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767700983" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230042" id="1230042" title="[SLM6.2][PPC64LE] Fail to start QEMU - qemu-system-ppc64" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240157" id="1240157" title="[cockpit] virtual-machines - run imported qcow2 vm got internal error because of  'failed to find romfile efi-virtio.rom'" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243013" id="1243013" title="qemu-aarch64 9.2.3 dumps core (deb-pkg)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246566" id="1246566" title="kubevirt unable to passthrough multiple GPUs in bios mode" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250984" id="1250984" title="VUL-0: CVE-2025-11234: qemu: qemu-kvm: use-after-free in websocket handshake code can lead to denial of service" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252768" id="1252768" title="qemu-system-x86 exists with SIGSEV while installing SLES16 via remote ISO image" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253002" id="1253002" title="VUL-0: CVE-2025-12464: qemu: net: pad packets to minimum length in qemu_receive_packet()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254286" id="1254286" title="cockpit - Virtual machines - Import VM - import qcow2 image failed and it fails to start because of missing 'qemu-hw-display-virtio-gpu' and 'qemu-hw-display-virtio-gpu-pci'" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11234" id="CVE-2025-11234" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11234" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12464" id="CVE-2025-12464" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12464" type="cve" />
    </references>
    <description>This update for qemu fixes the following issues:

Update to version 8.2.10.

Security issues fixed:

- CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious
  guest user to crash the QEMU process on the host (bsc#1253002).
- CVE-2025-11234: use-after-free in WebSocket handshake operations can be exploited by a malicious client with network
  access to the VNC WebSocket port to cause a denial-of-service (bsc#1250984).

Other updates and bugfixes:

- [openSUSE][RPM] spec: require qemu-hw-display-virtio-gpu-pci for x86 too.
- [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286).
- block/curl: fix curl internal handles handling (bsc#1252768).
- [openSUSE][RPM]: spec: qemu-vgabios is required on ppc (bsc#1230042).
- [roms] seabios: include "pciinit: don't misalign large BARs" (bsc#1246566).
- [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es (bsc#1240157).
- [openSUSE][RPM]: disable LTO for userspace emulation on 15.6 (bsc#1243013).

- Version 8.2.10 changes:
  * Full changelog: https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    - hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    - target/ppc: Fix e200 duplicate SPRs
    - linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    - docs/about/emulation: Fix broken link
    - vdpa: Allow vDPA to work on big-endian machine
    - vdpa: Fix endian bugs in shadow virtqueue
    - target/loongarch: Fix vldi inst
    - target/arm: Simplify pstate_sm check in sve_access_check
    - target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    - util/cacheflush: Make first DSB unconditional on aarch64
    - ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    - docs: Rename default-configs to configs
    - block: Zero block driver state before reopening
    - hw/xen/hvm: Fix Aarch64 typo
    - hw/net/smc91c111: Don't allow data register access to overrun buffer
    - hw/net/smc91c111: Sanitize packet length on tx
    - hw/net/smc91c111: Sanitize packet numbers
    - hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    - ppc/pnv/occ: Fix common area sensor offsets
    - net: move backend cleanup to NIC cleanup
    - net: parameterize the removing client from nc list
    - util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    - target/arm: Correct STRD atomicity
    - target/arm: Correct LDRD atomicity and fault behaviour
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="8.2.10" release="1.1" arch="src" src="src/qemu-8.2.10-1.1.src.rpm">
          <filename>qemu-8.2.10-1.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-audio-spice-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-audio-spice-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-audio-spice-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-audio-spice-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-block-curl-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-block-curl-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-block-curl-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-block-curl-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-block-iscsi-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-block-iscsi-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-block-iscsi-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-block-iscsi-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-block-rbd-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-block-rbd-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-block-rbd-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-block-rbd-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-block-ssh-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-block-ssh-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-block-ssh-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-block-ssh-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-chardev-spice-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-chardev-spice-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-chardev-spice-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-chardev-spice-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-debugsource" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-debugsource-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-debugsource-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-guest-agent-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-guest-agent-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-guest-agent-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-guest-agent-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-img" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-img-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-img-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-img-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-img-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-img-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="8.2.10" release="1.1" arch="noarch" src="noarch/qemu-ipxe-8.2.10-1.1.noarch.rpm">
          <filename>qemu-ipxe-8.2.10-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-ksm" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-ksm-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-ksm-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-lang" epoch="0" version="8.2.10" release="1.1" arch="noarch" src="noarch/qemu-lang-8.2.10-1.1.noarch.rpm">
          <filename>qemu-lang-8.2.10-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-pr-helper" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-pr-helper-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-pr-helper-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-pr-helper-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-pr-helper-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-pr-helper-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="8.2.101.16.3_3_ga95067eb" release="1.1" arch="noarch" src="noarch/qemu-seabios-8.2.101.16.3_3_ga95067eb-1.1.noarch.rpm">
          <filename>qemu-seabios-8.2.101.16.3_3_ga95067eb-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-tools-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-tools-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-tools-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-tools-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-tools-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-ui-opengl-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-ui-opengl-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-ui-opengl-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-ui-opengl-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="8.2.101.16.3_3_ga95067eb" release="1.1" arch="noarch" src="noarch/qemu-vgabios-8.2.101.16.3_3_ga95067eb-1.1.noarch.rpm">
          <filename>qemu-vgabios-8.2.101.16.3_3_ga95067eb-1.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-x86-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-x86-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-x86-debuginfo" epoch="0" version="8.2.10" release="1.1" arch="x86_64" src="x86_64/qemu-x86-debuginfo-8.2.10-1.1.x86_64.rpm">
          <filename>qemu-x86-debuginfo-8.2.10-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>544</id>
    <title>Security update for ovmf</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767126393" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218879" id="1218879" title="VUL-0: CVE-2023-45229: edk2, ovmf: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218880" id="1218880" title="VUL-0: CVE-2023-45230: edk2, ovmf: Buffer overflow in the DHCPv6 client via a long Server ID option" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229" id="CVE-2023-45229" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45229" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45230" id="CVE-2023-45230" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45230" type="cve" />
    </references>
    <description>This update for ovmf fixes the following issues:

- CVE-2023-45229: integer underflow and out-of-bounds read when processing IA_NA/IA_TA options in a DHCPv6 Advertise
  message (bsc#1218879).
- CVE-2023-45230: out-of-bounds write in the DHCPv6 client through a long Server ID option (bsc#1218880).
</description>
    <pkglist>
      <collection>
        <package name="ovmf" epoch="0" version="202305" release="2.1" arch="src" src="src/ovmf-202305-2.1.src.rpm">
          <filename>ovmf-202305-2.1.src.rpm</filename>
        </package>
        <package name="qemu-ovmf-x86_64" epoch="0" version="202305" release="2.1" arch="noarch" src="noarch/qemu-ovmf-x86_64-202305-2.1.noarch.rpm">
          <filename>qemu-ovmf-x86_64-202305-2.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>546</id>
    <title>Security update for curl</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767885165" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255731" id="1255731" title="VUL-0: EMBARGOED: CVE-2025-14524: curl: bearer token leak on cross-protocol redirect" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255732" id="1255732" title="VUL-0: EMBARGOED: CVE-2025-14819: curl: openSSL partial chain store policy bypass" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255733" id="1255733" title="VUL-0: EMBARGOED: CVE-2025-15079: curl: libssh global knownhost override" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255734" id="1255734" title="VUL-0: EMBARGOED: CVE-2025-15224: curl: libssh key passphrase bypass without agent set" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14524" id="CVE-2025-14524" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14524" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14819" id="CVE-2025-14819" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14819" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15079" id="CVE-2025-15079" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15079" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15224" id="CVE-2025-15224" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15224" type="cve" />
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731).
- CVE-2025-14819: libssh global knownhost override (bsc#1255732).
- CVE-2025-15079: libssh key passphrase bypass without agent set (bsc#1255733).
- CVE-2025-15224: OpenSSL partial chain store policy bypass (bsc#1255734).
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.14.1" release="3.1" arch="src" src="src/curl-8.14.1-3.1.src.rpm">
          <filename>curl-8.14.1-3.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.14.1" release="3.1" arch="x86_64" src="x86_64/curl-8.14.1-3.1.x86_64.rpm">
          <filename>curl-8.14.1-3.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debuginfo" epoch="0" version="8.14.1" release="3.1" arch="x86_64" src="x86_64/curl-debuginfo-8.14.1-3.1.x86_64.rpm">
          <filename>curl-debuginfo-8.14.1-3.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debugsource" epoch="0" version="8.14.1" release="3.1" arch="x86_64" src="x86_64/curl-debugsource-8.14.1-3.1.x86_64.rpm">
          <filename>curl-debugsource-8.14.1-3.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.14.1" release="3.1" arch="x86_64" src="x86_64/libcurl4-8.14.1-3.1.x86_64.rpm">
          <filename>libcurl4-8.14.1-3.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4-debuginfo" epoch="0" version="8.14.1" release="3.1" arch="x86_64" src="x86_64/libcurl4-debuginfo-8.14.1-3.1.x86_64.rpm">
          <filename>libcurl4-debuginfo-8.14.1-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>553</id>
    <title>Security update for libpcap</title>
    <severity>low</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767889795" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255765" id="1255765" title="VUL-0: CVE-2025-11961: libpcap: out-of-bound-write and out-of-bound-read in pcap_ether_aton() due to missing validation of provided MAC-48 address string" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11961" id="CVE-2025-11961" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11961" type="cve" />
    </references>
    <description>This update for libpcap fixes the following issues:

- CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds
  read and write (bsc#1255765).
</description>
    <pkglist>
      <collection>
        <package name="libpcap" epoch="0" version="1.10.4" release="4.1" arch="src" src="src/libpcap-1.10.4-4.1.src.rpm">
          <filename>libpcap-1.10.4-4.1.src.rpm</filename>
        </package>
        <package name="libpcap-debugsource" epoch="0" version="1.10.4" release="4.1" arch="x86_64" src="x86_64/libpcap-debugsource-1.10.4-4.1.x86_64.rpm">
          <filename>libpcap-debugsource-1.10.4-4.1.x86_64.rpm</filename>
        </package>
        <package name="libpcap1" epoch="0" version="1.10.4" release="4.1" arch="x86_64" src="x86_64/libpcap1-1.10.4-4.1.x86_64.rpm">
          <filename>libpcap1-1.10.4-4.1.x86_64.rpm</filename>
        </package>
        <package name="libpcap1-debuginfo" epoch="0" version="1.10.4" release="4.1" arch="x86_64" src="x86_64/libpcap1-debuginfo-1.10.4-4.1.x86_64.rpm">
          <filename>libpcap1-debuginfo-1.10.4-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>554</id>
    <title>Security update for openvswitch</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767956265" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216002" id="1216002" title="VUL-0: CVE-2023-5366: openvswitch: missing masks on a final stage with ports trie" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1219465" id="1219465" title="VUL-0: CVE-2023-3966: openvswitch, openvswitch3: Invalid memory access in Geneve with HW offload" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1236353" id="1236353" title="VUL-0: CVE-2025-0650: ovn: egress ACLs may be bypassed via specially crafted UDP packet" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255435" id="1255435" title="VUL-0: CVE-2024-2182: openvswitch: ov: insufficient validation of incoming BFD packets may lead to denial of service" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3966" id="CVE-2023-3966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3966" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5366" id="CVE-2023-5366" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5366" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2182" id="CVE-2024-2182" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2182" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0650" id="CVE-2025-0650" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0650" type="cve" />
    </references>
    <description>This update for openvswitch fixes the following issues:

Update OpenvSwitch to v3.1.7 and OVN to v23.03.3.

Security issues fixed:

- CVE-2023-3966: ovs: invalid memory access and potential denial of service via specially crafted Geneve packets
  (bsc#1219465).
- CVE-2023-5366: ovs: OpenFlow rules may be bypassed via specially crafted ICMPv6 Neighbor Advertisement packets sent
  between virtual machines t(bsc#1216002).
- CVE-2024-2182: ovn: denial of service via injection of specially crafted BFD packets from inside unprivileged
  workloads (bsc#1255435).
- CVE-2025-0650: ovn: egress ACLs may be bypassed via specially crafted UDP packet (bsc#1236353).

Other updates and bugfixes:

- OpenvSwitch:
  * https://www.openvswitch.org/releases/NEWS-3.1.7.txt
  * v3.1.7
    - Bug fixes
    - OVS validated with DPDK 22.11.7.
  * v3.1.6
    - Bug fixes
    - OVS validated with DPDK 22.11.6.
  * v3.1.5
    - Bug fixes
    - OVS validated with DPDK 22.11.5.
  * v3.1.4
    - Bug fixes
    - OVS validated with DPDK 22.11.4.
- OVN:
  * https://github.com/ovn-org/ovn/blob/branch-23.03/NEWS
  * v23.03.3
    - Bug fixes
    - Add "garp-max-timeout-sec" config option to vswitchd external-ids to cap the time between when ovn-controller
      sends gARP packets.
  * v23.03.1
    - Bug fixes
    - CT entries are not flushed by default anymore whenever a load balancer backend is removed. A new, per-LB, option
      'ct_flush' can be used to restore the previous behavior. Disabled by default.
    - Always allow IPv6 Router Discovery, Neighbor Discovery, and Multicast Listener Discovery protocols, regardless of
      ACLs defined.
    - Send ICMP Fragmentation Needed packets back to offending ports when communicating with multichassis ports using
      frames that don't fit through a tunnel. This is done only for logical switches that are attached to a physical
      network via a localnet port, in which case multichassis ports may have an effective MTU different from regular
      ports and hence may need this mechanism to maintain connectivity with other peers in the network.
    - ECMP routes use L4_SYM dp-hash by default if the datapath supports it. Existing sessions might get re-hashed to a
      different ECMP path when OVN detects the algorithm support in the datapath during an upgrade or restart of
      ovn-controller.
</description>
    <pkglist>
      <collection>
        <package name="libopenvswitch-3_1-0" epoch="0" version="3.1.7" release="4.1" arch="x86_64" src="x86_64/libopenvswitch-3_1-0-3.1.7-4.1.x86_64.rpm">
          <filename>libopenvswitch-3_1-0-3.1.7-4.1.x86_64.rpm</filename>
        </package>
        <package name="libopenvswitch-3_1-0-debuginfo" epoch="0" version="3.1.7" release="4.1" arch="x86_64" src="x86_64/libopenvswitch-3_1-0-debuginfo-3.1.7-4.1.x86_64.rpm">
          <filename>libopenvswitch-3_1-0-debuginfo-3.1.7-4.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch" epoch="0" version="3.1.7" release="4.1" arch="src" src="src/openvswitch-3.1.7-4.1.src.rpm">
          <filename>openvswitch-3.1.7-4.1.src.rpm</filename>
        </package>
        <package name="openvswitch" epoch="0" version="3.1.7" release="4.1" arch="x86_64" src="x86_64/openvswitch-3.1.7-4.1.x86_64.rpm">
          <filename>openvswitch-3.1.7-4.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-debuginfo" epoch="0" version="3.1.7" release="4.1" arch="x86_64" src="x86_64/openvswitch-debuginfo-3.1.7-4.1.x86_64.rpm">
          <filename>openvswitch-debuginfo-3.1.7-4.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-debugsource" epoch="0" version="3.1.7" release="4.1" arch="x86_64" src="x86_64/openvswitch-debugsource-3.1.7-4.1.x86_64.rpm">
          <filename>openvswitch-debugsource-3.1.7-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>555</id>
    <title>Security update for libvirt</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767956596" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235079" id="1235079" title="virtqemud fails to start when apparmor confinement of VMs is enabled" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253278" id="1253278" title="VUL-0: CVE-2025-12748: libvirt: Denial of service in XML parsing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253703" id="1253703" title="VUL-0: CVE-2025-13193: libvirt: Information disclosure via world-readable VM snapshots" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12748" id="CVE-2025-12748" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12748" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13193" id="CVE-2025-13193" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13193" type="cve" />
    </references>
    <description>This update for libvirt fixes the following issues:

Security issues fixed:

- CVE-2025-13193: external inactive snapshots for shut-down VMs that are incorrectly created as world-readable allow
  unprivileged users to inspect guest OS contents (bsc#1253703).
- CVE-2025-12748: parsing of user-provided XML files before ACL checks can lead to excessive memory consumption and a
  crash when processing a specially crafted XML file (bsc#1253278).

Other updates and bugfixes:

- apparmor: Fix probing of apparmor availability on the VM host when using modular daemons (bsc#1235079).
</description>
    <pkglist>
      <collection>
        <package name="libvirt" epoch="0" version="10.0.0" release="4.1" arch="src" src="src/libvirt-10.0.0-4.1.src.rpm">
          <filename>libvirt-10.0.0-4.1.src.rpm</filename>
        </package>
        <package name="libvirt-client" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-client-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-client-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-client-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-client-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-client-qemu" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-client-qemu-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-client-qemu-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-common" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-common-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-common-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-common-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-common-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-common-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-config-network" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-config-network-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-config-network-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-network-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-network-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-network-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-network-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-network-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nodedev-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nodedev-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nodedev-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nodedev-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nodedev-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nwfilter-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-nwfilter-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-nwfilter-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-nwfilter-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-qemu-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-qemu-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-qemu-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-qemu-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-qemu-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-secret-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-secret-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-secret-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-secret-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-secret-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-core-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-core-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-core-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-core-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-core-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-disk-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-disk-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-disk-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-disk-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-direct-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-iscsi-direct-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-iscsi-direct-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-iscsi-direct-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-logical-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-logical-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-logical-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-logical-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-mpath-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-mpath-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-mpath-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-mpath-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-rbd-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-rbd-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-rbd-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-rbd-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-scsi-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-driver-storage-scsi-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-driver-storage-scsi-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-driver-storage-scsi-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-hooks" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-hooks-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-hooks-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-lock" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-lock-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-lock-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-lock-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-lock-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-lock-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-log" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-log-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-log-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-log-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-log-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-log-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-plugin-lockd" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-plugin-lockd-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-plugin-lockd-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-plugin-lockd-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-plugin-lockd-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-plugin-lockd-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-proxy" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-proxy-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-proxy-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-proxy-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-proxy-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-proxy-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-daemon-qemu" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-daemon-qemu-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-daemon-qemu-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-debugsource" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-debugsource-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-debugsource-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-libs" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-libs-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-libs-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-libs-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-libs-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-libs-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-nss" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-nss-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-nss-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        <package name="libvirt-nss-debuginfo" epoch="0" version="10.0.0" release="4.1" arch="x86_64" src="x86_64/libvirt-nss-debuginfo-10.0.0-4.1.x86_64.rpm">
          <filename>libvirt-nss-debuginfo-10.0.0-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>547</id>
    <title>Security update for bluez</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1767884651" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217877" id="1217877" title="VUL-0: CVE-2023-45866: bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45866" id="CVE-2023-45866" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45866" type="cve" />
    </references>
    <description>This update for bluez fixes the following issues:

- CVE-2023-45866: keystroke injection and arbitrary command execution via HID device connections (bsc#1217877).
</description>
    <pkglist>
      <collection>
        <package name="bluez" epoch="0" version="5.70" release="2.1" arch="src" src="src/bluez-5.70-2.1.src.rpm">
          <filename>bluez-5.70-2.1.src.rpm</filename>
        </package>
        <package name="bluez-debugsource" epoch="0" version="5.70" release="2.1" arch="x86_64" src="x86_64/bluez-debugsource-5.70-2.1.x86_64.rpm">
          <filename>bluez-debugsource-5.70-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbluetooth3" epoch="0" version="5.70" release="2.1" arch="x86_64" src="x86_64/libbluetooth3-5.70-2.1.x86_64.rpm">
          <filename>libbluetooth3-5.70-2.1.x86_64.rpm</filename>
        </package>
        <package name="libbluetooth3-debuginfo" epoch="0" version="5.70" release="2.1" arch="x86_64" src="x86_64/libbluetooth3-debuginfo-5.70-2.1.x86_64.rpm">
          <filename>libbluetooth3-debuginfo-5.70-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>556</id>
    <title>Recommended update for selinux-policy</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1768219835" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1231494" id="1231494" title="[Build 20241008-SELinux] openQA test fails in rsync_server: rsyncd cant start" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255372" id="1255372" title="The rsync service cannot start in SELinux Enforcing state" type="bugzilla" />
    </references>
    <description>This update for selinux-policy fixes the following issues:

Update to version 20230523+git34.7b0eea050:

* rsync: add rsync_exec_commands boolean and enable it by default (bsc#1231494, bsc#1255372)

</description>
    <pkglist>
      <collection>
        <package name="selinux-policy" epoch="0" version="20230523+git34.7b0eea050" release="1.1" arch="noarch" src="noarch/selinux-policy-20230523+git34.7b0eea050-1.1.noarch.rpm">
          <filename>selinux-policy-20230523+git34.7b0eea050-1.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy" epoch="0" version="20230523+git34.7b0eea050" release="1.1" arch="src" src="src/selinux-policy-20230523+git34.7b0eea050-1.1.src.rpm">
          <filename>selinux-policy-20230523+git34.7b0eea050-1.1.src.rpm</filename>
        </package>
        <package name="selinux-policy-devel" epoch="0" version="20230523+git34.7b0eea050" release="1.1" arch="noarch" src="noarch/selinux-policy-devel-20230523+git34.7b0eea050-1.1.noarch.rpm">
          <filename>selinux-policy-devel-20230523+git34.7b0eea050-1.1.noarch.rpm</filename>
        </package>
        <package name="selinux-policy-targeted" epoch="0" version="20230523+git34.7b0eea050" release="1.1" arch="noarch" src="noarch/selinux-policy-targeted-20230523+git34.7b0eea050-1.1.noarch.rpm">
          <filename>selinux-policy-targeted-20230523+git34.7b0eea050-1.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>557</id>
    <title>Security update for libsoup</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1768219835" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254876" id="1254876" title="VUL-0: CVE-2025-14523: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (First- vs Last-Value Wins)" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14523" id="CVE-2025-14523" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14523" type="cve" />
    </references>
    <description>This update for libsoup fixes the following issues:

- CVE-2025-14523: flaw in HTTP header handling can lead to host header parsing discrepancy between servers and proxies
  and allow for request smuggling, cache poisoning and bypass of access controls (bsc#1254876).
</description>
    <pkglist>
      <collection>
        <package name="libsoup" epoch="0" version="3.4.2" release="10.1" arch="src" src="src/libsoup-3.4.2-10.1.src.rpm">
          <filename>libsoup-3.4.2-10.1.src.rpm</filename>
        </package>
        <package name="libsoup-3_0-0" epoch="0" version="3.4.2" release="10.1" arch="x86_64" src="x86_64/libsoup-3_0-0-3.4.2-10.1.x86_64.rpm">
          <filename>libsoup-3_0-0-3.4.2-10.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-3_0-0-debuginfo" epoch="0" version="3.4.2" release="10.1" arch="x86_64" src="x86_64/libsoup-3_0-0-debuginfo-3.4.2-10.1.x86_64.rpm">
          <filename>libsoup-3_0-0-debuginfo-3.4.2-10.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-debugsource" epoch="0" version="3.4.2" release="10.1" arch="x86_64" src="x86_64/libsoup-debugsource-3.4.2-10.1.x86_64.rpm">
          <filename>libsoup-debugsource-3.4.2-10.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>558</id>
    <title>Security update for libtasn1</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1768219225" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256341" id="1256341" title="VUL-0: CVE-2025-13151: libtasn1: stack-based buffer overflow in `asn1_expend_octet_string`" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13151" id="CVE-2025-13151" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13151" type="cve" />
    </references>
    <description>This update for libtasn1 fixes the following issues:

- CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in
  `asn1_expend_octet_string` (bsc#1256341).
</description>
    <pkglist>
      <collection>
        <package name="libtasn1" epoch="0" version="4.19.0" release="5.1" arch="src" src="src/libtasn1-4.19.0-5.1.src.rpm">
          <filename>libtasn1-4.19.0-5.1.src.rpm</filename>
        </package>
        <package name="libtasn1-6" epoch="0" version="4.19.0" release="5.1" arch="x86_64" src="x86_64/libtasn1-6-4.19.0-5.1.x86_64.rpm">
          <filename>libtasn1-6-4.19.0-5.1.x86_64.rpm</filename>
        </package>
        <package name="libtasn1-6-debuginfo" epoch="0" version="4.19.0" release="5.1" arch="x86_64" src="x86_64/libtasn1-6-debuginfo-4.19.0-5.1.x86_64.rpm">
          <filename>libtasn1-6-debuginfo-4.19.0-5.1.x86_64.rpm</filename>
        </package>
        <package name="libtasn1-debugsource" epoch="0" version="4.19.0" release="5.1" arch="x86_64" src="x86_64/libtasn1-debugsource-4.19.0-5.1.x86_64.rpm">
          <filename>libtasn1-debugsource-4.19.0-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>559</id>
    <title>Security update for libsodium</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1768309793" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256070" id="1256070" title="VUL-0: CVE-2025-15444: libsodium: Cryptographic bypass via improper elliptic curve point validation" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15444" id="CVE-2025-15444" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15444" type="cve" />
    </references>
    <description>This update for libsodium fixes the following issues:

- CVE-2025-15444: missing checks when validating elliptic curve points allows for cryptographic bypass (bsc#1256070).
</description>
    <pkglist>
      <collection>
        <package name="libsodium" epoch="0" version="1.0.18" release="4.1" arch="src" src="src/libsodium-1.0.18-4.1.src.rpm">
          <filename>libsodium-1.0.18-4.1.src.rpm</filename>
        </package>
        <package name="libsodium-debugsource" epoch="0" version="1.0.18" release="4.1" arch="x86_64" src="x86_64/libsodium-debugsource-1.0.18-4.1.x86_64.rpm">
          <filename>libsodium-debugsource-1.0.18-4.1.x86_64.rpm</filename>
        </package>
        <package name="libsodium23" epoch="0" version="1.0.18" release="4.1" arch="x86_64" src="x86_64/libsodium23-1.0.18-4.1.x86_64.rpm">
          <filename>libsodium23-1.0.18-4.1.x86_64.rpm</filename>
        </package>
        <package name="libsodium23-debuginfo" epoch="0" version="1.0.18" release="4.1" arch="x86_64" src="x86_64/libsodium23-debuginfo-1.0.18-4.1.x86_64.rpm">
          <filename>libsodium23-debuginfo-1.0.18-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>560</id>
    <title>Security update for gpg2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1768383789" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255715" id="1255715" title="VUL-0: CVE-2025-68973: gpg2: gpg.fail/memcpy: Memory Corruption in ASCII-Armor Parsing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256243" id="1256243" title="VUL-0: gpg2: agent: Fix a memory leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256244" id="1256244" title="VUL-0: gpg2: gpg.fail/detached: Error out on unverified output for non-detached signatures" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256246" id="1256246" title="VUL-0: gpg2: gpg.fail/sha1: GnuPG may downgrade digest algorithm to SHA1 during key signature checking" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256390" id="1256390" title="VUL-0: gpg2: gpg.fail/notdash: Cleartext Signature Forgery in the NotDashEscaped header implementation in GnuPG" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68973" id="CVE-2025-68973" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68973" type="cve" />
    </references>
    <description>This update for gpg2 fixes the following issues:

- CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption (bsc#1255715).

Other security fixes:

- gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures (bsc#1256246).
- gpg: Error out on unverified output for non-detached signatures (bsc#1256244).
- agent: Fix a memory leak (bsc#1256243).
- gpg: Deprecate the option --not-dash-escaped (bsc#1256390).
</description>
    <pkglist>
      <collection>
        <package name="gpg2" epoch="0" version="2.4.4" release="6.1" arch="src" src="src/gpg2-2.4.4-6.1.src.rpm">
          <filename>gpg2-2.4.4-6.1.src.rpm</filename>
        </package>
        <package name="gpg2" epoch="0" version="2.4.4" release="6.1" arch="x86_64" src="x86_64/gpg2-2.4.4-6.1.x86_64.rpm">
          <filename>gpg2-2.4.4-6.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2-debuginfo" epoch="0" version="2.4.4" release="6.1" arch="x86_64" src="x86_64/gpg2-debuginfo-2.4.4-6.1.x86_64.rpm">
          <filename>gpg2-debuginfo-2.4.4-6.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2-debugsource" epoch="0" version="2.4.4" release="6.1" arch="x86_64" src="x86_64/gpg2-debugsource-2.4.4-6.1.x86_64.rpm">
          <filename>gpg2-debugsource-2.4.4-6.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>562</id>
    <title>Security update for ovmf</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1768568729" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1218680" id="1218680" title="VUL-0: CVE-2022-36765: ovmf,EDK2 is susceptible to a vulnerability in the CreateHob() function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36765" id="CVE-2022-36765" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36765" type="cve" />
    </references>
    <description>This update for ovmf fixes the following issues:

- CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability (bsc#1218680).
</description>
    <pkglist>
      <collection>
        <package name="ovmf" epoch="0" version="202305" release="3.1" arch="src" src="src/ovmf-202305-3.1.src.rpm">
          <filename>ovmf-202305-3.1.src.rpm</filename>
        </package>
        <package name="qemu-ovmf-x86_64" epoch="0" version="202305" release="3.1" arch="noarch" src="noarch/qemu-ovmf-x86_64-202305-3.1.noarch.rpm">
          <filename>qemu-ovmf-x86_64-202305-3.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>569</id>
    <title>Security update for curl</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1770904915" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256105" id="1256105" title="VUL-0: CVE-2025-14017: curl: broken TLS options for threaded LDAPS" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14017" id="CVE-2025-14017" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14017" type="cve" />
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105).
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.14.1" release="4.1" arch="src" src="src/curl-8.14.1-4.1.src.rpm">
          <filename>curl-8.14.1-4.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.14.1" release="4.1" arch="x86_64" src="x86_64/curl-8.14.1-4.1.x86_64.rpm">
          <filename>curl-8.14.1-4.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debuginfo" epoch="0" version="8.14.1" release="4.1" arch="x86_64" src="x86_64/curl-debuginfo-8.14.1-4.1.x86_64.rpm">
          <filename>curl-debuginfo-8.14.1-4.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debugsource" epoch="0" version="8.14.1" release="4.1" arch="x86_64" src="x86_64/curl-debugsource-8.14.1-4.1.x86_64.rpm">
          <filename>curl-debugsource-8.14.1-4.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.14.1" release="4.1" arch="x86_64" src="x86_64/libcurl4-8.14.1-4.1.x86_64.rpm">
          <filename>libcurl4-8.14.1-4.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4-debuginfo" epoch="0" version="8.14.1" release="4.1" arch="x86_64" src="x86_64/libcurl4-debuginfo-8.14.1-4.1.x86_64.rpm">
          <filename>libcurl4-debuginfo-8.14.1-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>564</id>
    <title>Security update for net-snmp</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1768899120" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255491" id="1255491" title="VUL-0: CVE-2025-68615: net-snmp: a specially crafted packet can cause a buffer overflow and the daemon to crash" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68615" id="CVE-2025-68615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68615" type="cve" />
    </references>
    <description>This update for net-snmp fixes the following issues:

- CVE-2025-68615: Fixed snmptrapd buffer overflow (bsc#1255491).
</description>
    <pkglist>
      <collection>
        <package name="libsnmp40" epoch="0" version="5.9.4" release="2.1" arch="x86_64" src="x86_64/libsnmp40-5.9.4-2.1.x86_64.rpm">
          <filename>libsnmp40-5.9.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="libsnmp40-debuginfo" epoch="0" version="5.9.4" release="2.1" arch="x86_64" src="x86_64/libsnmp40-debuginfo-5.9.4-2.1.x86_64.rpm">
          <filename>libsnmp40-debuginfo-5.9.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="net-snmp" epoch="0" version="5.9.4" release="2.1" arch="src" src="src/net-snmp-5.9.4-2.1.src.rpm">
          <filename>net-snmp-5.9.4-2.1.src.rpm</filename>
        </package>
        <package name="net-snmp-debugsource" epoch="0" version="5.9.4" release="2.1" arch="x86_64" src="x86_64/net-snmp-debugsource-5.9.4-2.1.x86_64.rpm">
          <filename>net-snmp-debugsource-5.9.4-2.1.x86_64.rpm</filename>
        </package>
        <package name="snmp-mibs" epoch="0" version="5.9.4" release="2.1" arch="x86_64" src="x86_64/snmp-mibs-5.9.4-2.1.x86_64.rpm">
          <filename>snmp-mibs-5.9.4-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>570</id>
    <title>Security update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1770904545" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254666" id="1254666" title="VUL-0: CVE-2025-14104: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104" id="CVE-2025-14104" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104" type="cve" />
      <reference href="https://jira.suse.com/browse/PED-13682" id="PED-13682" title="https://jira.suse.com/browse/PED-13682" type="jira" />
    </references>
    <description>This update for util-linux fixes the following issues:

- CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666).
- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682).
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/libblkid1-2.39.3-4.1.x86_64.rpm">
          <filename>libblkid1-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1-debuginfo" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/libblkid1-debuginfo-2.39.3-4.1.x86_64.rpm">
          <filename>libblkid1-debuginfo-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/libfdisk1-2.39.3-4.1.x86_64.rpm">
          <filename>libfdisk1-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1-debuginfo" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/libfdisk1-debuginfo-2.39.3-4.1.x86_64.rpm">
          <filename>libfdisk1-debuginfo-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/libmount1-2.39.3-4.1.x86_64.rpm">
          <filename>libmount1-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1-debuginfo" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/libmount1-debuginfo-2.39.3-4.1.x86_64.rpm">
          <filename>libmount1-debuginfo-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/libsmartcols1-2.39.3-4.1.x86_64.rpm">
          <filename>libsmartcols1-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1-debuginfo" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/libsmartcols1-debuginfo-2.39.3-4.1.x86_64.rpm">
          <filename>libsmartcols1-debuginfo-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/libuuid1-2.39.3-4.1.x86_64.rpm">
          <filename>libuuid1-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1-debuginfo" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/libuuid1-debuginfo-2.39.3-4.1.x86_64.rpm">
          <filename>libuuid1-debuginfo-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.39.3" release="4.1" arch="src" src="src/util-linux-2.39.3-4.1.src.rpm">
          <filename>util-linux-2.39.3-4.1.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/util-linux-2.39.3-4.1.x86_64.rpm">
          <filename>util-linux-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-debuginfo" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/util-linux-debuginfo-2.39.3-4.1.x86_64.rpm">
          <filename>util-linux-debuginfo-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-debugsource" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/util-linux-debugsource-2.39.3-4.1.x86_64.rpm">
          <filename>util-linux-debugsource-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.39.3" release="4.1" arch="src" src="src/util-linux-systemd-2.39.3-4.1.src.rpm">
          <filename>util-linux-systemd-2.39.3-4.1.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/util-linux-systemd-2.39.3-4.1.x86_64.rpm">
          <filename>util-linux-systemd-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd-debuginfo" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/util-linux-systemd-debuginfo-2.39.3-4.1.x86_64.rpm">
          <filename>util-linux-systemd-debuginfo-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd-debugsource" epoch="0" version="2.39.3" release="4.1" arch="x86_64" src="x86_64/util-linux-systemd-debugsource-2.39.3-4.1.x86_64.rpm">
          <filename>util-linux-systemd-debugsource-2.39.3-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>566</id>
    <title>Security update for python-urllib3</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1769000506" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256331" id="1256331" title="VUL-0: CVE-2026-21441: python-urllib3,python-urllib3_1,python36-urlliurlllibb3: excessive resource consumption during decompression of data in HTTP redirect responses" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21441" id="CVE-2026-21441" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21441" type="cve" />
    </references>
    <description>This update for python-urllib3 fixes the following issues:

- CVE-2026-21441: Fixed excessive resource consumption during decompression of data in HTTP redirect responses (bsc#1256331).
</description>
    <pkglist>
      <collection>
        <package name="python-urllib3" epoch="0" version="2.1.0" release="4.1" arch="src" src="src/python-urllib3-2.1.0-4.1.src.rpm">
          <filename>python-urllib3-2.1.0-4.1.src.rpm</filename>
        </package>
        <package name="python311-urllib3" epoch="0" version="2.1.0" release="4.1" arch="noarch" src="noarch/python311-urllib3-2.1.0-4.1.noarch.rpm">
          <filename>python311-urllib3-2.1.0-4.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>563</id>
    <title>Security update for libsoup</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1768568057" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256399" id="1256399" title="VUL-0: CVE-2026-0719: libsoup,libsoup2: stack-based buffer overflow in NTLM authentication can lead to arbitrary code execution" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256418" id="1256418" title="VUL-0: CVE-2026-0716: libsoup: improper bounds handling may allow out-of-bounds read" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0716" id="CVE-2026-0716" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0716" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0719" id="CVE-2026-0719" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0719" type="cve" />
    </references>
    <description>This update for libsoup fixes the following issues:

- CVE-2026-0716: Fixed out-of-bounds read for websocket (bsc#1256418).
- CVE-2026-0719: Fixed overflow for password md4sum (bsc#1256399).
</description>
    <pkglist>
      <collection>
        <package name="libsoup" epoch="0" version="3.4.2" release="11.1" arch="src" src="src/libsoup-3.4.2-11.1.src.rpm">
          <filename>libsoup-3.4.2-11.1.src.rpm</filename>
        </package>
        <package name="libsoup-3_0-0" epoch="0" version="3.4.2" release="11.1" arch="x86_64" src="x86_64/libsoup-3_0-0-3.4.2-11.1.x86_64.rpm">
          <filename>libsoup-3_0-0-3.4.2-11.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-3_0-0-debuginfo" epoch="0" version="3.4.2" release="11.1" arch="x86_64" src="x86_64/libsoup-3_0-0-debuginfo-3.4.2-11.1.x86_64.rpm">
          <filename>libsoup-3_0-0-debuginfo-3.4.2-11.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-debugsource" epoch="0" version="3.4.2" release="11.1" arch="x86_64" src="x86_64/libsoup-debugsource-3.4.2-11.1.x86_64.rpm">
          <filename>libsoup-debugsource-3.4.2-11.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>575</id>
    <title>Recommended update for linuxptp</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1771001438" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256059" id="1256059" title="ptp4l default service configuration doesn't allow for /dev/ptp0 access" type="bugzilla" />
    </references>
    <description>This update for linuxptp contains the following fix:

- Move to DevicePolicy=closed instead of -PrivateDevices=true
  to allow access to devices (bsc#1256059)

</description>
    <pkglist>
      <collection>
        <package name="linuxptp" epoch="0" version="4.1" release="2.1" arch="src" src="src/linuxptp-4.1-2.1.src.rpm">
          <filename>linuxptp-4.1-2.1.src.rpm</filename>
        </package>
        <package name="linuxptp" epoch="0" version="4.1" release="2.1" arch="x86_64" src="x86_64/linuxptp-4.1-2.1.x86_64.rpm">
          <filename>linuxptp-4.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="linuxptp-debuginfo" epoch="0" version="4.1" release="2.1" arch="x86_64" src="x86_64/linuxptp-debuginfo-4.1-2.1.x86_64.rpm">
          <filename>linuxptp-debuginfo-4.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="linuxptp-debugsource" epoch="0" version="4.1" release="2.1" arch="x86_64" src="x86_64/linuxptp-debugsource-4.1-2.1.x86_64.rpm">
          <filename>linuxptp-debugsource-4.1-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>580</id>
    <title>Security update for python-pyasn1</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1771251799" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256902" id="1256902" title="VUL-0: CVE-2026-23490: python-pyasn1: Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23490" id="CVE-2026-23490" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23490" type="cve" />
    </references>
    <description>This update for python-pyasn1 fixes the following issues:

- CVE-2026-23490: Fixed malformed RELATIVE-OID with excessive continuation octets leading to Denial of Service (bsc#1256902).
</description>
    <pkglist>
      <collection>
        <package name="python-pyasn1" epoch="0" version="0.5.0" release="3.1" arch="src" src="src/python-pyasn1-0.5.0-3.1.src.rpm">
          <filename>python-pyasn1-0.5.0-3.1.src.rpm</filename>
        </package>
        <package name="python311-pyasn1" epoch="0" version="0.5.0" release="3.1" arch="noarch" src="noarch/python311-pyasn1-0.5.0-3.1.noarch.rpm">
          <filename>python311-pyasn1-0.5.0-3.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>578</id>
    <title>Security update for libxml2</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1771230470" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256805" id="1256805" title="VUL-0: CVE-2026-0989: libxml2: libxml2: call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth when resolving `&lt;include&gt;` directives" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0989" id="CVE-2026-0989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0989" type="cve" />
    </references>
    <description>This update for libxml2 fixes the following issues:

- CVE-2026-0989: Fixed call stack exhaustion leading to application crash 
  due to RelaxNG parser not limiting the recursion depth when 
  resolving `&lt;include&gt;` directives (bsc#1256805).
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.11.6" release="11.1" arch="x86_64" src="x86_64/libxml2-2-2.11.6-11.1.x86_64.rpm">
          <filename>libxml2-2-2.11.6-11.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2-debuginfo" epoch="0" version="2.11.6" release="11.1" arch="x86_64" src="x86_64/libxml2-2-debuginfo-2.11.6-11.1.x86_64.rpm">
          <filename>libxml2-2-debuginfo-2.11.6-11.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.11.6" release="11.1" arch="src" src="src/libxml2-2.11.6-11.1.src.rpm">
          <filename>libxml2-2.11.6-11.1.src.rpm</filename>
        </package>
        <package name="libxml2-debugsource" epoch="0" version="2.11.6" release="11.1" arch="x86_64" src="x86_64/libxml2-debugsource-2.11.6-11.1.x86_64.rpm">
          <filename>libxml2-debugsource-2.11.6-11.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.11.6" release="11.1" arch="x86_64" src="x86_64/libxml2-tools-2.11.6-11.1.x86_64.rpm">
          <filename>libxml2-tools-2.11.6-11.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-tools-debuginfo" epoch="0" version="2.11.6" release="11.1" arch="x86_64" src="x86_64/libxml2-tools-debuginfo-2.11.6-11.1.x86_64.rpm">
          <filename>libxml2-tools-debuginfo-2.11.6-11.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>572</id>
    <title>Security update for openssl-3</title>
    <severity>critical</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1770907679" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256830" id="1256830" title="VUL-0: EMBARGOED: CVE-2025-15467: openssl-3: Stack buffer overflow in CMS AuthEnvelopedData parsing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256834" id="1256834" title="VUL-0: EMBARGOED: CVE-2025-68160: openssl, openssl-3: Heap out-of-bounds write in BIO_f_linebuffer on short writes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256835" id="1256835" title="VUL-0: EMBARGOED: CVE-2025-69418: openssl, openssl-3: Unauthenticated/unencrypted trailing bytes with low-level OCB function calls" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256836" id="1256836" title="VUL-0: EMBARGOED: CVE-2025-69419: openssl, openssl-3: Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256837" id="1256837" title="VUL-0: EMBARGOED: CVE-2025-69420: openssl, openssl-3: Missing ASN1_TYPE validation in TS_RESP_verify_response() function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256838" id="1256838" title="VUL-0: EMBARGOED: CVE-2025-69421: openssl, openssl-3: NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256839" id="1256839" title="VUL-0: EMBARGOED: CVE-2026-22795: openssl, openssl-3: Missing ASN1_TYPE validation in PKCS#12 parsing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256840" id="1256840" title="VUL-0: EMBARGOED: CVE-2026-22796: openssl, openssl-3: ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467" id="CVE-2025-15467" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15467" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160" id="CVE-2025-68160" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418" id="CVE-2025-69418" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419" id="CVE-2025-69419" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420" id="CVE-2025-69420" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421" id="CVE-2025-69421" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795" id="CVE-2026-22795" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796" id="CVE-2026-22796" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796" type="cve" />
    </references>
    <description>This update for openssl-3 fixes the following issues:
  
 - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830).
 - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834).
 - CVE-2025-69418: Unauthenticated/unencrypted trailing bytes with low-level OCB function calls (bsc#1256835).
 - CVE-2025-69419: Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion (bsc#1256836).
 - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837).
 - CVE-2025-69421: NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function (bsc#1256838).
 - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839).
 - CVE-2026-22796: ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function (bsc#1256840).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-3-devel" epoch="0" version="3.1.4" release="11.1" arch="x86_64" src="x86_64/libopenssl-3-devel-3.1.4-11.1.x86_64.rpm" embargo_date="2026-01-27">
          <filename>libopenssl-3-devel-3.1.4-11.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider" epoch="0" version="3.1.4" release="11.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-3.1.4-11.1.x86_64.rpm" embargo_date="2026-01-27">
          <filename>libopenssl-3-fips-provider-3.1.4-11.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider-debuginfo" epoch="0" version="3.1.4" release="11.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-debuginfo-3.1.4-11.1.x86_64.rpm" embargo_date="2026-01-27">
          <filename>libopenssl-3-fips-provider-debuginfo-3.1.4-11.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.1.4" release="11.1" arch="x86_64" src="x86_64/libopenssl3-3.1.4-11.1.x86_64.rpm" embargo_date="2026-01-27">
          <filename>libopenssl3-3.1.4-11.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3-debuginfo" epoch="0" version="3.1.4" release="11.1" arch="x86_64" src="x86_64/libopenssl3-debuginfo-3.1.4-11.1.x86_64.rpm" embargo_date="2026-01-27">
          <filename>libopenssl3-debuginfo-3.1.4-11.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="11.1" arch="src" src="src/openssl-3-3.1.4-11.1.src.rpm" embargo_date="2026-01-27">
          <filename>openssl-3-3.1.4-11.1.src.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="11.1" arch="x86_64" src="x86_64/openssl-3-3.1.4-11.1.x86_64.rpm" embargo_date="2026-01-27">
          <filename>openssl-3-3.1.4-11.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debuginfo" epoch="0" version="3.1.4" release="11.1" arch="x86_64" src="x86_64/openssl-3-debuginfo-3.1.4-11.1.x86_64.rpm" embargo_date="2026-01-27">
          <filename>openssl-3-debuginfo-3.1.4-11.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debugsource" epoch="0" version="3.1.4" release="11.1" arch="x86_64" src="x86_64/openssl-3-debugsource-3.1.4-11.1.x86_64.rpm" embargo_date="2026-01-27">
          <filename>openssl-3-debugsource-3.1.4-11.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>585</id>
    <title>Security update for libsodium</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1771317253" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255764" id="1255764" title="VUL-0: CVE-2025-69277: libsodium: incorrect validation of elliptic curve points certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256070" id="1256070" title="VUL-0: CVE-2025-15444: libsodium: Cryptographic bypass via improper elliptic curve point validation" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15444" id="CVE-2025-15444" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15444" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69277" id="CVE-2025-69277" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69277" type="cve" />
    </references>
    <description>This update for libsodium fixes the following issues:

- CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation (bsc#1256070).
- CVE-2025-69277: Fixed incorrect validation of elliptic curve points in crypto_core_ed25519_is_valid_point function (bsc#1255764).
</description>
    <pkglist>
      <collection>
        <package name="libsodium" epoch="0" version="1.0.18" release="5.1" arch="src" src="src/libsodium-1.0.18-5.1.src.rpm">
          <filename>libsodium-1.0.18-5.1.src.rpm</filename>
        </package>
        <package name="libsodium-debugsource" epoch="0" version="1.0.18" release="5.1" arch="x86_64" src="x86_64/libsodium-debugsource-1.0.18-5.1.x86_64.rpm">
          <filename>libsodium-debugsource-1.0.18-5.1.x86_64.rpm</filename>
        </package>
        <package name="libsodium23" epoch="0" version="1.0.18" release="5.1" arch="x86_64" src="x86_64/libsodium23-1.0.18-5.1.x86_64.rpm">
          <filename>libsodium23-1.0.18-5.1.x86_64.rpm</filename>
        </package>
        <package name="libsodium23-debuginfo" epoch="0" version="1.0.18" release="5.1" arch="x86_64" src="x86_64/libsodium23-debuginfo-1.0.18-5.1.x86_64.rpm">
          <filename>libsodium23-debuginfo-1.0.18-5.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>581</id>
    <title>Security update for python-urllib3</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1771251671" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254866" id="1254866" title="VUL-0: CVE-2025-66418: python-urllib3,python-urllib3_1,python36-urllib3: resource exhaustion via unbounded number of links in the decompression chain" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254867" id="1254867" title="VUL-0: CVE-2025-66471: python-urllib3,python-urllib3_1,python36-urllib3: excessive resource consumption via decompression of highly compressed data in Streaming API" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66418" id="CVE-2025-66418" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66418" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66471" id="CVE-2025-66471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66471" type="cve" />
    </references>
    <description>This update for python-urllib3 fixes the following issues:

- CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867).
- CVE-2025-66418: resource exhaustion via unbounded number of links in the decompression chain (bsc#1254866).
</description>
    <pkglist>
      <collection>
        <package name="python-urllib3" epoch="0" version="2.1.0" release="5.1" arch="src" src="src/python-urllib3-2.1.0-5.1.src.rpm">
          <filename>python-urllib3-2.1.0-5.1.src.rpm</filename>
        </package>
        <package name="python311-urllib3" epoch="0" version="2.1.0" release="5.1" arch="noarch" src="noarch/python311-urllib3-2.1.0-5.1.noarch.rpm">
          <filename>python311-urllib3-2.1.0-5.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>579</id>
    <title>Security update for glib2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1771251752" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257049" id="1257049" title="VUL-0: CVE-2026-0988: glib2: integer overflow in `g_buffered_input_stream_peek()` can lead to segmentation fault and application crash" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257353" id="1257353" title="VUL-0: CVE-2026-1489: glib2: undersized heap allocation followed by out-of-bounds access due to integer overflow in Unicode case conversion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257354" id="1257354" title="VUL-0: CVE-2026-1485: glib2: buffer underflow and out-of-bounds access due to integer wraparound in content type parsing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257355" id="1257355" title="VUL-0: CVE-2026-1484: glib2: buffer underflow and out-of-bounds access due to miscalculated buffer boundaries in the Base64 encoding routine" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0988" id="CVE-2026-0988" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0988" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1484" id="CVE-2026-1484" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1484" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1485" id="CVE-2026-1485" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1485" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1489" id="CVE-2026-1489" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1489" type="cve" />
    </references>
    <description>This update for glib2 fixes the following issues:

- CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354).
- CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalculated buffer boundaries in the Base64 encoding routine (bsc#1257355).
- CVE-2026-1489: Fixed undersized heap allocation followed by out-of-bounds access due to integer overflow in Unicode case conversion (bsc#1257353).
- CVE-2026-0988: Fixed a potential integer overflow in g_buffered_input_stream_peek (bsc#1257049).
</description>
    <pkglist>
      <collection>
        <package name="glib2" epoch="0" version="2.76.2" release="12.1" arch="src" src="src/glib2-2.76.2-12.1.src.rpm">
          <filename>glib2-2.76.2-12.1.src.rpm</filename>
        </package>
        <package name="glib2-debugsource" epoch="0" version="2.76.2" release="12.1" arch="x86_64" src="x86_64/glib2-debugsource-2.76.2-12.1.x86_64.rpm">
          <filename>glib2-debugsource-2.76.2-12.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools" epoch="0" version="2.76.2" release="12.1" arch="x86_64" src="x86_64/glib2-tools-2.76.2-12.1.x86_64.rpm">
          <filename>glib2-tools-2.76.2-12.1.x86_64.rpm</filename>
        </package>
        <package name="glib2-tools-debuginfo" epoch="0" version="2.76.2" release="12.1" arch="x86_64" src="x86_64/glib2-tools-debuginfo-2.76.2-12.1.x86_64.rpm">
          <filename>glib2-tools-debuginfo-2.76.2-12.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0" epoch="0" version="2.76.2" release="12.1" arch="x86_64" src="x86_64/libgio-2_0-0-2.76.2-12.1.x86_64.rpm">
          <filename>libgio-2_0-0-2.76.2-12.1.x86_64.rpm</filename>
        </package>
        <package name="libgio-2_0-0-debuginfo" epoch="0" version="2.76.2" release="12.1" arch="x86_64" src="x86_64/libgio-2_0-0-debuginfo-2.76.2-12.1.x86_64.rpm">
          <filename>libgio-2_0-0-debuginfo-2.76.2-12.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0" epoch="0" version="2.76.2" release="12.1" arch="x86_64" src="x86_64/libglib-2_0-0-2.76.2-12.1.x86_64.rpm">
          <filename>libglib-2_0-0-2.76.2-12.1.x86_64.rpm</filename>
        </package>
        <package name="libglib-2_0-0-debuginfo" epoch="0" version="2.76.2" release="12.1" arch="x86_64" src="x86_64/libglib-2_0-0-debuginfo-2.76.2-12.1.x86_64.rpm">
          <filename>libglib-2_0-0-debuginfo-2.76.2-12.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0" epoch="0" version="2.76.2" release="12.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-2.76.2-12.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-2.76.2-12.1.x86_64.rpm</filename>
        </package>
        <package name="libgmodule-2_0-0-debuginfo" epoch="0" version="2.76.2" release="12.1" arch="x86_64" src="x86_64/libgmodule-2_0-0-debuginfo-2.76.2-12.1.x86_64.rpm">
          <filename>libgmodule-2_0-0-debuginfo-2.76.2-12.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0" epoch="0" version="2.76.2" release="12.1" arch="x86_64" src="x86_64/libgobject-2_0-0-2.76.2-12.1.x86_64.rpm">
          <filename>libgobject-2_0-0-2.76.2-12.1.x86_64.rpm</filename>
        </package>
        <package name="libgobject-2_0-0-debuginfo" epoch="0" version="2.76.2" release="12.1" arch="x86_64" src="x86_64/libgobject-2_0-0-debuginfo-2.76.2-12.1.x86_64.rpm">
          <filename>libgobject-2_0-0-debuginfo-2.76.2-12.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>571</id>
    <title>Recommended update for podman</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1770904915" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248988" id="1248988" title="catatonit missing in /usr/libexec/podman/" type="bugzilla" />
    </references>
    <description>This update for podman fixes the following issues:

- Add symlink to catatonit in /usr/libexec/podman (bsc#1248988)
</description>
    <pkglist>
      <collection>
        <package name="podman" epoch="0" version="4.9.5" release="11.1" arch="src" src="src/podman-4.9.5-11.1.src.rpm">
          <filename>podman-4.9.5-11.1.src.rpm</filename>
        </package>
        <package name="podman" epoch="0" version="4.9.5" release="11.1" arch="x86_64" src="x86_64/podman-4.9.5-11.1.x86_64.rpm">
          <filename>podman-4.9.5-11.1.x86_64.rpm</filename>
        </package>
        <package name="podman-debuginfo" epoch="0" version="4.9.5" release="11.1" arch="x86_64" src="x86_64/podman-debuginfo-4.9.5-11.1.x86_64.rpm">
          <filename>podman-debuginfo-4.9.5-11.1.x86_64.rpm</filename>
        </package>
        <package name="podman-docker" epoch="0" version="4.9.5" release="11.1" arch="noarch" src="noarch/podman-docker-4.9.5-11.1.noarch.rpm">
          <filename>podman-docker-4.9.5-11.1.noarch.rpm</filename>
        </package>
        <package name="podman-remote" epoch="0" version="4.9.5" release="11.1" arch="x86_64" src="x86_64/podman-remote-4.9.5-11.1.x86_64.rpm">
          <filename>podman-remote-4.9.5-11.1.x86_64.rpm</filename>
        </package>
        <package name="podman-remote-debuginfo" epoch="0" version="4.9.5" release="11.1" arch="x86_64" src="x86_64/podman-remote-debuginfo-4.9.5-11.1.x86_64.rpm">
          <filename>podman-remote-debuginfo-4.9.5-11.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>582</id>
    <title>Security update for gpg2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1771251671" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256389" id="1256389" title="VUL-0: gpg2: gpg.fail/filename: GnuPG Accepts Path Separators and Path Traversals in Literal Data &quot;Filename&quot; Field" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257396" id="1257396" title="VUL-0: CVE-2026-24882: gpg2: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24882" id="CVE-2026-24882" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24882" type="cve" />
    </references>
    <description>This update for gpg2 fixes the following issues:

- CVE-2026-24882: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396).
- gpg.fail/filename: GnuPG Accepts Path Separators and Path Traversals in Literal Data "Filename" Field (bsc#1256389).
</description>
    <pkglist>
      <collection>
        <package name="gpg2" epoch="0" version="2.4.4" release="7.1" arch="src" src="src/gpg2-2.4.4-7.1.src.rpm">
          <filename>gpg2-2.4.4-7.1.src.rpm</filename>
        </package>
        <package name="gpg2" epoch="0" version="2.4.4" release="7.1" arch="x86_64" src="x86_64/gpg2-2.4.4-7.1.x86_64.rpm">
          <filename>gpg2-2.4.4-7.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2-debuginfo" epoch="0" version="2.4.4" release="7.1" arch="x86_64" src="x86_64/gpg2-debuginfo-2.4.4-7.1.x86_64.rpm">
          <filename>gpg2-debuginfo-2.4.4-7.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2-debugsource" epoch="0" version="2.4.4" release="7.1" arch="x86_64" src="x86_64/gpg2-debugsource-2.4.4-7.1.x86_64.rpm">
          <filename>gpg2-debugsource-2.4.4-7.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>589</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1771318605" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230861" id="1230861" title="AWS/Azure: SUSEconnect -d message misleading, referes to on demand even on BYOS" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1239439" id="1239439" title="SUSEConnect shows link to SLE15 documentation instead of SLE16 on SLE 16 systems" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241002" id="1241002" title="Allow lower-case SAP instance types in telemetry" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244550" id="1244550" title="Detection of SAP instances is broken and gives more results than it should" type="bugzilla" />
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

Update version to 1.20:

  - Update error message for Public Cloud instances with registercloudguest
    installed. SUSEConnect -d is disabled on PYAG and BYOS when the
    registercloudguest command is available. (bsc#1230861)
  - Enhanced SAP detected. Take TREX into account and remove empty values when
    only /usr/sap but no installation exists (bsc#1241002)
  - Fixed modules and extension link to point to version less documentation. (bsc#1239439)
  - Fixed SAP instance detection (bsc#1244550)
  - Remove link to extensions documentation (bsc#1239439)
  - Migrate to the public library

Version 1.14 public library release:

  This version is only available on Github as a tag to release the
  new golang public library which can be consumed without the need
  to interface with SUSEConnect directly.

</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.20.0" release="1.1" arch="src" src="src/suseconnect-ng-1.20.0-1.1.src.rpm">
          <filename>suseconnect-ng-1.20.0-1.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.20.0" release="1.1" arch="x86_64" src="x86_64/suseconnect-ng-1.20.0-1.1.x86_64.rpm">
          <filename>suseconnect-ng-1.20.0-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>568</id>
    <title>Recommended update for libzypp, libsolv</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1770026726" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249435" id="1249435" title="zypper 1.14.93 writes files into /var/tmp and copies it to /var/cache, needs SELinux labelling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257068" id="1257068" title="The bootaa64.efi can not be updated by transactional-update patch command" type="bugzilla" />
    </references>
    <description>This update for libzypp, libsolv fixes the following issues:


libsolv was udpated to 0.7.35:

  - fixed rare crash in the handling of allowuninstall in combination
    with forcebest updates
  - new pool_satisfieddep_map feature to test if a set of packages
    satisfies a dependency

libzypp was updated to 17.38.2:

  - Prepare a legacy /etc/zypp/zypp.conf to be installed on old distros.
    See the ZYPP.CONF(5) man page for details.
  - Fix runtime check for broken rpm --runposttrans (bsc#1257068)
  - Avoid libcurl-mini4 when building as it does not support ftp
    protocol.
  - Translation: updated .pot file.
  - zypp.conf: follow the UAPI configuration file specification
    (PED-14658)
    In short terms it means we will no longer ship an
    /etc/zypp/zypp.conf, but store our own defaults in
    /usr/etc/zypp/zypp.conf. The systems administrator may choose to
    keep a full copy in /etc/zypp/zypp.conf ignoring our config file
    settings completely, or - the preferred way - to overwrite
    specific settings via /etc/zypp/zypp.conf.d/*.conf overlay files.
    See the ZYPP.CONF(5) man page for details.
  - cmake: correctly detect rpm6 (fixes #689)
  - Use 'zypp.tmp' as temp directory component to ease setting up
    SELinux policies (bsc#1249435)
  - zyppng: Update Provider to current MediaCurl2 download
    approach, drop Metalink ( fixes #682 )
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.35" release="1.1" arch="src" src="src/libsolv-0.7.35-1.1.src.rpm">
          <filename>libsolv-0.7.35-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-debugsource" epoch="0" version="0.7.35" release="1.1" arch="x86_64" src="x86_64/libsolv-debugsource-0.7.35-1.1.x86_64.rpm">
          <filename>libsolv-debugsource-0.7.35-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.35" release="1.1" arch="x86_64" src="x86_64/libsolv-tools-base-0.7.35-1.1.x86_64.rpm">
          <filename>libsolv-tools-base-0.7.35-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base-debuginfo" epoch="0" version="0.7.35" release="1.1" arch="x86_64" src="x86_64/libsolv-tools-base-debuginfo-0.7.35-1.1.x86_64.rpm">
          <filename>libsolv-tools-base-debuginfo-0.7.35-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.38.2" release="1.1" arch="src" src="src/libzypp-17.38.2-1.1.src.rpm">
          <filename>libzypp-17.38.2-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.38.2" release="1.1" arch="x86_64" src="x86_64/libzypp-17.38.2-1.1.x86_64.rpm">
          <filename>libzypp-17.38.2-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp-debuginfo" epoch="0" version="17.38.2" release="1.1" arch="x86_64" src="x86_64/libzypp-debuginfo-17.38.2-1.1.x86_64.rpm">
          <filename>libzypp-debuginfo-17.38.2-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp-debugsource" epoch="0" version="17.38.2" release="1.1" arch="x86_64" src="x86_64/libzypp-debugsource-17.38.2-1.1.x86_64.rpm">
          <filename>libzypp-debugsource-17.38.2-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>586</id>
    <title>Security update for kernel-firmware</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1771317406" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256483" id="1256483" title="VUL-0: kernel-firmware: ucode-amd: update AMD firmware" type="bugzilla" />
    </references>
    <description>This update for kernel-firmware fixes the following issues:

- Update AMD ucode to 20251203 (bsc#1256483)

</description>
    <pkglist>
      <collection>
        <package name="kernel-firmware" epoch="0" version="20241128" release="2.1" arch="src" src="src/kernel-firmware-20241128-2.1.src.rpm">
          <filename>kernel-firmware-20241128-2.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-all" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-all-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-all-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-amdgpu" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-amdgpu-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-amdgpu-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath10k" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-ath10k-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-ath10k-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath11k" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-ath11k-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-ath11k-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ath12k" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-ath12k-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-ath12k-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-atheros" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-atheros-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-atheros-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bluetooth" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-bluetooth-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-bluetooth-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-bnx2" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-bnx2-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-bnx2-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-brcm" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-brcm-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-brcm-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-chelsio" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-chelsio-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-chelsio-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-dpaa2" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-dpaa2-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-dpaa2-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-i915" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-i915-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-i915-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-intel" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-intel-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-intel-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-iwlwifi" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-iwlwifi-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-iwlwifi-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-liquidio" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-liquidio-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-liquidio-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-marvell" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-marvell-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-marvell-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-media" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-media-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-media-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mediatek" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-mediatek-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-mediatek-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mellanox" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-mellanox-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-mellanox-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-mwifiex" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-mwifiex-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-mwifiex-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-network" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-network-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-network-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nfp" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-nfp-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-nfp-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-nvidia" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-nvidia-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-nvidia-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-platform" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-platform-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-platform-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-prestera" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-prestera-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-prestera-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qcom" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-qcom-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-qcom-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-qlogic" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-qlogic-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-qlogic-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-radeon" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-radeon-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-radeon-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-realtek" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-realtek-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-realtek-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-serial" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-serial-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-serial-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-sound" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-sound-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-sound-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ti" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-ti-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-ti-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-ueagle" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-ueagle-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-ueagle-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="kernel-firmware-usb-network" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/kernel-firmware-usb-network-20241128-2.1.noarch.rpm">
          <filename>kernel-firmware-usb-network-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-amd" epoch="0" version="20241128" release="2.1" arch="noarch" src="noarch/ucode-amd-20241128-2.1.noarch.rpm">
          <filename>ucode-amd-20241128-2.1.noarch.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>576</id>
    <title>Security update for expat</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1771001300" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257144" id="1257144" title="VUL-0: CVE-2026-24515: expat: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257496" id="1257496" title="VUL-0: CVE-2026-25210: expat: lack of buffer size check can lead to an integer overflow" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24515" id="CVE-2026-24515" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24515" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25210" id="CVE-2026-25210" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25210" type="cve" />
    </references>
    <description>This update for expat fixes the following issues:

- CVE-2026-24515: failure to copy the encoding handler data passed to XML_SetUnknownEncodingHandler may cause a NULL
  dereference (bsc#1257144).
- CVE-2026-25210: lack of buffer size check can lead to an integer overflow (bsc#1257496).
</description>
    <pkglist>
      <collection>
        <package name="expat" epoch="0" version="2.7.1" release="4.1" arch="src" src="src/expat-2.7.1-4.1.src.rpm">
          <filename>expat-2.7.1-4.1.src.rpm</filename>
        </package>
        <package name="expat-debugsource" epoch="0" version="2.7.1" release="4.1" arch="x86_64" src="x86_64/expat-debugsource-2.7.1-4.1.x86_64.rpm">
          <filename>expat-debugsource-2.7.1-4.1.x86_64.rpm</filename>
        </package>
        <package name="libexpat1" epoch="0" version="2.7.1" release="4.1" arch="x86_64" src="x86_64/libexpat1-2.7.1-4.1.x86_64.rpm">
          <filename>libexpat1-2.7.1-4.1.x86_64.rpm</filename>
        </package>
        <package name="libexpat1-debuginfo" epoch="0" version="2.7.1" release="4.1" arch="x86_64" src="x86_64/libexpat1-debuginfo-2.7.1-4.1.x86_64.rpm">
          <filename>libexpat1-debuginfo-2.7.1-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>587</id>
    <title>Security update for docker-compose</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1771318387" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253584" id="1253584" title="VUL-0: CVE-2025-47913: docker,docker-compose,docker-stable: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254041" id="1254041" title="VUL-0: CVE-2025-47914: docker-stable,docker-compose,docker: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds read" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47913" id="CVE-2025-47913" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47913" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47914" id="CVE-2025-47914" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47914" type="cve" />
    </references>
    <description>This update for docker-compose fixes the following issues:

- CVE-2025-47914: non validated message size can cause a panic due to an out of bounds read (bsc#1254041). 
- CVE-2025-47913: client process termination when receiving an unexpected message type in response to a key listing or
  signing request (bsc#1253584).
</description>
    <pkglist>
      <collection>
        <package name="docker-compose" epoch="0" version="2.33.1" release="3.1" arch="src" src="src/docker-compose-2.33.1-3.1.src.rpm">
          <filename>docker-compose-2.33.1-3.1.src.rpm</filename>
        </package>
        <package name="docker-compose" epoch="0" version="2.33.1" release="3.1" arch="x86_64" src="x86_64/docker-compose-2.33.1-3.1.x86_64.rpm">
          <filename>docker-compose-2.33.1-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>590</id>
    <title>Security update for cockpit</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1771318606" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257324" id="1257324" title="VUL-0: CVE-2025-13465: cockpit,cockpit-podman: lodash: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465" id="CVE-2025-13465" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465" type="cve" />
    </references>
    <description>This update for cockpit fixes the following issues:

- CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global
  prototypes (bsc#1257324).
</description>
    <pkglist>
      <collection>
        <package name="cockpit" epoch="0" version="309" release="8.1" arch="src" src="src/cockpit-309-8.1.src.rpm">
          <filename>cockpit-309-8.1.src.rpm</filename>
        </package>
        <package name="cockpit" epoch="0" version="309" release="8.1" arch="x86_64" src="x86_64/cockpit-309-8.1.x86_64.rpm">
          <filename>cockpit-309-8.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-bridge" epoch="0" version="309" release="8.1" arch="x86_64" src="x86_64/cockpit-bridge-309-8.1.x86_64.rpm">
          <filename>cockpit-bridge-309-8.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-bridge-debuginfo" epoch="0" version="309" release="8.1" arch="x86_64" src="x86_64/cockpit-bridge-debuginfo-309-8.1.x86_64.rpm">
          <filename>cockpit-bridge-debuginfo-309-8.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-debuginfo" epoch="0" version="309" release="8.1" arch="x86_64" src="x86_64/cockpit-debuginfo-309-8.1.x86_64.rpm">
          <filename>cockpit-debuginfo-309-8.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-debugsource" epoch="0" version="309" release="8.1" arch="x86_64" src="x86_64/cockpit-debugsource-309-8.1.x86_64.rpm">
          <filename>cockpit-debugsource-309-8.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-networkmanager" epoch="0" version="309" release="8.1" arch="noarch" src="noarch/cockpit-networkmanager-309-8.1.noarch.rpm">
          <filename>cockpit-networkmanager-309-8.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-selinux" epoch="0" version="309" release="8.1" arch="noarch" src="noarch/cockpit-selinux-309-8.1.noarch.rpm">
          <filename>cockpit-selinux-309-8.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-storaged" epoch="0" version="309" release="8.1" arch="noarch" src="noarch/cockpit-storaged-309-8.1.noarch.rpm">
          <filename>cockpit-storaged-309-8.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-system" epoch="0" version="309" release="8.1" arch="noarch" src="noarch/cockpit-system-309-8.1.noarch.rpm">
          <filename>cockpit-system-309-8.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-ws" epoch="0" version="309" release="8.1" arch="x86_64" src="x86_64/cockpit-ws-309-8.1.x86_64.rpm">
          <filename>cockpit-ws-309-8.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-ws-debuginfo" epoch="0" version="309" release="8.1" arch="x86_64" src="x86_64/cockpit-ws-debuginfo-309-8.1.x86_64.rpm">
          <filename>cockpit-ws-debuginfo-309-8.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>583</id>
    <title>Security update for libsoup</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1771251705" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257440" id="1257440" title="VUL-0: CVE-2026-1536: libsoup,libsoup2: HTTP header injection or response splitting via CRLF injection in the Content-Disposition header" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257598" id="1257598" title="VUL-0: CVE-2026-1761: libsoup,libsoup2: incorrect length calculation when parsing of multipart HTTP responses can lead to a stack-based buffer overflow" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1536" id="CVE-2026-1536" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1536" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1761" id="CVE-2026-1761" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1761" type="cve" />
    </references>
    <description>This update for libsoup fixes the following issues:

- CVE-2026-1536: HTTP header injection or response splitting via CRLF injection in the Content-Disposition header
  (bsc#1257440).
- CVE-2026-1761: incorrect length calculation when parsing of multipart HTTP responses can lead to a stack-based
  buffer overflow (bsc#1257598).
</description>
    <pkglist>
      <collection>
        <package name="libsoup" epoch="0" version="3.4.2" release="12.1" arch="src" src="src/libsoup-3.4.2-12.1.src.rpm">
          <filename>libsoup-3.4.2-12.1.src.rpm</filename>
        </package>
        <package name="libsoup-3_0-0" epoch="0" version="3.4.2" release="12.1" arch="x86_64" src="x86_64/libsoup-3_0-0-3.4.2-12.1.x86_64.rpm">
          <filename>libsoup-3_0-0-3.4.2-12.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-3_0-0-debuginfo" epoch="0" version="3.4.2" release="12.1" arch="x86_64" src="x86_64/libsoup-3_0-0-debuginfo-3.4.2-12.1.x86_64.rpm">
          <filename>libsoup-3_0-0-debuginfo-3.4.2-12.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-debugsource" epoch="0" version="3.4.2" release="12.1" arch="x86_64" src="x86_64/libsoup-debugsource-3.4.2-12.1.x86_64.rpm">
          <filename>libsoup-debugsource-3.4.2-12.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>588</id>
    <title>Security update for crun</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1771318387" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1237421" id="1237421" title="VUL-0: CVE-2025-24965: crun: crun: .krun_config.json symlink attack creates or overwrites file on the host" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24965" id="CVE-2025-24965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24965" type="cve" />
    </references>
    <description>This update for crun fixes the following issues:

- CVE-2025-24965: .krun_config.json symlink attack creates or overwrites file on the host (bsc#1237421).
</description>
    <pkglist>
      <collection>
        <package name="crun" epoch="0" version="1.14" release="2.1" arch="src" src="src/crun-1.14-2.1.src.rpm">
          <filename>crun-1.14-2.1.src.rpm</filename>
        </package>
        <package name="crun" epoch="0" version="1.14" release="2.1" arch="x86_64" src="x86_64/crun-1.14-2.1.x86_64.rpm">
          <filename>crun-1.14-2.1.x86_64.rpm</filename>
        </package>
        <package name="crun-debuginfo" epoch="0" version="1.14" release="2.1" arch="x86_64" src="x86_64/crun-debuginfo-1.14-2.1.x86_64.rpm">
          <filename>crun-debuginfo-1.14-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>592</id>
    <title>Recommended update for regionServiceClientConfigGCE, python-gcemetadata</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772018875" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1045148" id="1045148" title="gcemetadata aborts with stack trace" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1053687" id="1053687" title="gcemetadata needs to accept value for identity argument" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1053695" id="1053695" title="Instance verification" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1097505" id="1097505" title="gcemetadata throws exception on systems with multiple network interfaces" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1134510" id="1134510" title="Registration fails with confusing error when instance has no access to metadata url" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1173136" id="1173136" title="Instance with python3-gcemetadata-1.0.3-3.6.1.noarch failing to register via Cloud NAT" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246995" id="1246995" title="[SLES-16.0.x86_64-0.9.4-EC2-Build1.1.raw.xz]  guestregister.service fails with invalid credentials" type="bugzilla" />
      <reference href="https://fate.suse.com/318435" id="318435" title="https://fate.suse.com/318435" type="fate" />
      <reference href="https://jira.suse.com/browse/PED-8944" id="PED-8944" title="https://jira.suse.com/browse/PED-8944" type="jira" />
      <reference href="https://jira.suse.com/browse/PM-1900" id="PM-1900" title="https://jira.suse.com/browse/PM-1900" type="jira" />
    </references>
    <description>This update for regionServiceClientConfigGCE, python-gcemetadata fixes the following issues:

Changes for python-gcemetadata:
  
- Update to version 1.1.0 (jsc#PCT-590, jsc#PED-8944):
    * Add licenses option in identity command.
- Switch the SLE 15 build setup to also use a macro instead of referencing
  the Python 3.11 interpreter directly.
- Switch to a defined Python interpreter. Use the primary interpreter
  in SLE 16 and later distributions and Python 3.11 for SLE 15 SP4 and later.
- Obsolete the Python 3.6 build
- Replace python3-gcemetadata with universal packaging
- Rename to python-gcemetadata.
- Update to version 1.0.4 (bsc#1173136):
    * Fix typo, missing "=" for "identity" option in processed command
      line options causes mis-identification of instance as missing identity data access
- Include in SLE 12 (jsc#PM-1900)
- Update to version 1.0.3 (bsc#1134510):
    * Handle the condition where the identity data of the instance may
      not be accessible from the metadata server and provide proper error messaging
- From 1.0.2:
    * Avoid traceback when not running in GCE, by testing access to the
      metdata server first before performing othre operations
- Use noun phrase in summary.
- Update to version 1.0.1 (bsc#1097505):
    * Support instances with multiple Nics
- Update to version 1.0.0:
    * Port to Python 3
- Update to version 0.3.2 (bsc#1053695, bsc#1053695):
    * Implement new feature to generate license verification token
    * Add man page
- From 0.3.1 (bsc#1053687):
    * The --identity argument must accept a value and the value is required
- From 0.3.0:
    * Properly handle overlapping enpoint names
- From 0.2.2:
    * Support writing data to a file and as XML snippets
- Update to version 0.2.1 (bsc#1045148):
    * Set proper value for dict lookup to avoid traceback
- Update to version 0.2.0:
    * Implement query functionality for all options
- Initial build, include in SLE 12
    * Version 0.0.5
  
Changes for regionServiceClientConfigGCE:
  
- Update to version 5.2.0:
    * Drop the if condition for gcemetdata requirement
- Update to version 5.1.0 (jsc#PCT-590):
    * Add licenses info in the metdata
- Accomodate build setup
    * SLE 16 python-requests requires SSL v3 certificates. Update 2
</description>
    <pkglist>
      <collection>
        <package name="regionServiceClientConfigGCE" epoch="0" version="5.2.0" release="1.1" arch="noarch" src="noarch/regionServiceClientConfigGCE-5.2.0-1.1.noarch.rpm">
          <filename>regionServiceClientConfigGCE-5.2.0-1.1.noarch.rpm</filename>
        </package>
        <package name="regionServiceClientConfigGCE" epoch="0" version="5.2.0" release="1.1" arch="src" src="src/regionServiceClientConfigGCE-5.2.0-1.1.src.rpm">
          <filename>regionServiceClientConfigGCE-5.2.0-1.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>593</id>
    <title>Security update for libpng16</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772103058" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256525" id="1256525" title="VUL-0: CVE-2026-22695: libpng16: Heap buffer over-read in png_image_finish_read" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256526" id="1256526" title="VUL-0: CVE-2026-22801: libpng16: Integer truncation causing heap buffer over-read in png_image_write_*" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257364" id="1257364" title="VUL-0: CVE-2025-28162: libpng16: memory leaks when running `pngimage`" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257365" id="1257365" title="VUL-0: CVE-2025-28164: libpng16: memory leaks when running `pngimage`" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258020" id="1258020" title="VUL-0: CVE-2026-25646: libpng12,libpng15,libpng16: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-28162" id="CVE-2025-28162" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-28162" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-28164" id="CVE-2025-28164" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-28164" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22695" id="CVE-2026-22695" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22695" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22801" id="CVE-2026-22801" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22801" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25646" id="CVE-2026-25646" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25646" type="cve" />
    </references>
    <description>This update for libpng16 fixes the following issues:

- CVE-2025-28162: memory leaks when running `pngimage` (bsc#1257364).
- CVE-2025-28164: memory leaks when running `pngimage` (bsc#1257365).
- CVE-2026-22695: heap buffer over-read in png_image_finish_read (bsc#1256525).
- CVE-2026-22801: integer truncation causing heap buffer over-read in png_image_write_* (bsc#1256526).
- CVE-2026-25646: heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020).
</description>
    <pkglist>
      <collection>
        <package name="libpng16" epoch="0" version="1.6.43" release="3.1" arch="src" src="src/libpng16-1.6.43-3.1.src.rpm">
          <filename>libpng16-1.6.43-3.1.src.rpm</filename>
        </package>
        <package name="libpng16-16" epoch="0" version="1.6.43" release="3.1" arch="x86_64" src="x86_64/libpng16-16-1.6.43-3.1.x86_64.rpm">
          <filename>libpng16-16-1.6.43-3.1.x86_64.rpm</filename>
        </package>
        <package name="libpng16-16-debuginfo" epoch="0" version="1.6.43" release="3.1" arch="x86_64" src="x86_64/libpng16-16-debuginfo-1.6.43-3.1.x86_64.rpm">
          <filename>libpng16-16-debuginfo-1.6.43-3.1.x86_64.rpm</filename>
        </package>
        <package name="libpng16-debugsource" epoch="0" version="1.6.43" release="3.1" arch="x86_64" src="x86_64/libpng16-debugsource-1.6.43-3.1.x86_64.rpm">
          <filename>libpng16-debugsource-1.6.43-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>594</id>
    <title>Security update for libssh</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772103167" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258045" id="1258045" title="VUL-0: CVE-2026-0965: libssh: Denial of Service via improper configuration file handling" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258049" id="1258049" title="VUL-0: CVE-2026-0964: libssh: Improper sanitation of paths received from SCP servers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258054" id="1258054" title="VUL-0: CVE-2026-0966: libssh: Buffer underflow in ssh_get_hexa() on invalid input" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258080" id="1258080" title="VUL-0: CVE-2026-0968: libssh: Denial of Service due to malformed SFTP message" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258081" id="1258081" title="VUL-0: CVE-2026-0967: libssh: Denial of Service via inefficient regular expression processing" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0964" id="CVE-2026-0964" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0964" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0965" id="CVE-2026-0965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0965" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0966" id="CVE-2026-0966" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0966" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0967" id="CVE-2026-0967" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0967" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0968" id="CVE-2026-0968" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0968" type="cve" />
    </references>
    <description>This update for libssh fixes the following issues:

- CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)
- CVE-2026-0965: Possible Denial of Service when parsing unexpected configuration files (bsc#1258045)
- CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)
- CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)
- CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)
</description>
    <pkglist>
      <collection>
        <package name="libssh" epoch="0" version="0.10.6" release="4.1" arch="src" src="src/libssh-0.10.6-4.1.src.rpm">
          <filename>libssh-0.10.6-4.1.src.rpm</filename>
        </package>
        <package name="libssh-config" epoch="0" version="0.10.6" release="4.1" arch="x86_64" src="x86_64/libssh-config-0.10.6-4.1.x86_64.rpm">
          <filename>libssh-config-0.10.6-4.1.x86_64.rpm</filename>
        </package>
        <package name="libssh-debugsource" epoch="0" version="0.10.6" release="4.1" arch="x86_64" src="x86_64/libssh-debugsource-0.10.6-4.1.x86_64.rpm">
          <filename>libssh-debugsource-0.10.6-4.1.x86_64.rpm</filename>
        </package>
        <package name="libssh4" epoch="0" version="0.10.6" release="4.1" arch="x86_64" src="x86_64/libssh4-0.10.6-4.1.x86_64.rpm">
          <filename>libssh4-0.10.6-4.1.x86_64.rpm</filename>
        </package>
        <package name="libssh4-debuginfo" epoch="0" version="0.10.6" release="4.1" arch="x86_64" src="x86_64/libssh4-debuginfo-0.10.6-4.1.x86_64.rpm">
          <filename>libssh4-debuginfo-0.10.6-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>595</id>
    <title>Security update for avahi</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772103245" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1233421" id="1233421" title="VUL-0: CVE-2024-52615: avahi: Avahi Wide-Area DNS Uses Constant Source Port" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256498" id="1256498" title="VUL-0: CVE-2025-68276: avahi: reachable assertion in `avahi_wide_area_scan_cache` can lead to crash of avahi-daemon" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256499" id="1256499" title="VUL-0: CVE-2025-68468: avahi: reachable assertion in `lookup_multicast_callback` can lead to crash of avahi-daemon" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256500" id="1256500" title="VUL-0: CVE-2025-68471: avahi: reachable assertion in `lookup_start` can lead to crash of avahi-daemon" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52615" id="CVE-2024-52615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52615" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68276" id="CVE-2025-68276" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68276" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68468" id="CVE-2025-68468" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68468" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68471" id="CVE-2025-68471" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68471" type="cve" />
    </references>
    <description>This update for avahi fixes the following issues:

- CVE-2024-52615: Resolve fixed source ports for wide-area DNS queries cause DNS responses be injected. (bsc#1233421)
- CVE-2025-68468: Fixed DoS bug by removing incorrect assertion. (bsc#1256499)
- CVE-2025-68471: Fixed DoS bug by changing assert to return. (bsc#1256500)
- CVE-2025-68276: Refuse to create wide-area record browsers when wide-area is off. (bsc#1256498)
</description>
    <pkglist>
      <collection>
        <package name="avahi" epoch="0" version="0.8" release="7.1" arch="src" src="src/avahi-0.8-7.1.src.rpm">
          <filename>avahi-0.8-7.1.src.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="7.1" arch="x86_64" src="x86_64/avahi-0.8-7.1.x86_64.rpm">
          <filename>avahi-0.8-7.1.x86_64.rpm</filename>
        </package>
        <package name="avahi-debuginfo" epoch="0" version="0.8" release="7.1" arch="x86_64" src="x86_64/avahi-debuginfo-0.8-7.1.x86_64.rpm">
          <filename>avahi-debuginfo-0.8-7.1.x86_64.rpm</filename>
        </package>
        <package name="avahi-debugsource" epoch="0" version="0.8" release="7.1" arch="x86_64" src="x86_64/avahi-debugsource-0.8-7.1.x86_64.rpm">
          <filename>avahi-debugsource-0.8-7.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="7.1" arch="x86_64" src="x86_64/libavahi-client3-0.8-7.1.x86_64.rpm">
          <filename>libavahi-client3-0.8-7.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3-debuginfo" epoch="0" version="0.8" release="7.1" arch="x86_64" src="x86_64/libavahi-client3-debuginfo-0.8-7.1.x86_64.rpm">
          <filename>libavahi-client3-debuginfo-0.8-7.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="7.1" arch="x86_64" src="x86_64/libavahi-common3-0.8-7.1.x86_64.rpm">
          <filename>libavahi-common3-0.8-7.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3-debuginfo" epoch="0" version="0.8" release="7.1" arch="x86_64" src="x86_64/libavahi-common3-debuginfo-0.8-7.1.x86_64.rpm">
          <filename>libavahi-common3-debuginfo-0.8-7.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="7.1" arch="x86_64" src="x86_64/libavahi-core7-0.8-7.1.x86_64.rpm">
          <filename>libavahi-core7-0.8-7.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7-debuginfo" epoch="0" version="0.8" release="7.1" arch="x86_64" src="x86_64/libavahi-core7-debuginfo-0.8-7.1.x86_64.rpm">
          <filename>libavahi-core7-debuginfo-0.8-7.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>596</id>
    <title>Security update for rust-keylime</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772103322" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257908" id="1257908" title="VUL-0: CVE-2026-25727: rust-keylime: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25727" id="CVE-2026-25727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25727" type="cve" />
    </references>
    <description>This update for rust-keylime fixes the following issues:

Update to version 0.2.8+116.

Security issues fixed:

- CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257908).

Other updates and bugfixes:

- Update to version 0.2.8+116:
  * build(deps): bump bytes from 1.7.2 to 1.11.1
  * api: Modify /version endpoint output in version 2.5
  * Add API v2.5 with backward-compatible /v2.5/quotes/integrity
  * tests: add unit test for resolve_agent_id (#1182)
  * (pull-model): enable retry logic for registration
  * rpm: Update specfiles to apply on master
  * workflows: Add test to detect unused crates
  * lib: Drop unused crates
  * push-model: Drop unused crates
  * keylime-agent: Drop unused crates
  * build(deps): bump uuid from 1.18.1 to 1.19.0
  * Update reqwest-retry to 0.8, retry-policies to 0.5
  * rpm: Fix cargo_build macro usage on CentOS Stream
  * fix(push-model): resolve hash_ek uuid to actual EK hash
  * build(deps): bump thiserror from 2.0.16 to 2.0.17
  * workflows: Separate upstream test suite from e2e coverage
  * Send UEFI measured boot logs as raw bytes (#1173)
  * auth: Add unit tests for SecretToken implementation
  * packit: Enable push-attestation tests
  * resilient_client: Prevent authentication token leakage in logs

- Update to version 0.2.8+96:
  * build(deps): bump wiremock from 0.6.4 to 0.6.5
  * build(deps): bump actions/checkout from 5 to 6
  * build(deps): bump chrono from 0.4.41 to 0.4.42
  * packit: Get coverage from Fedora 43 runs
  * Fix issues pointed out by clippy
  * Replace mutex unwraps with proper error handling in TPM library
  * Remove unused session request methods from StructureFiller
  * Fix config panic on missing ek_handle in push model agent
  * build(deps): bump tempfile from 3.21.0 to 3.23.0
  * build(deps): bump actions/upload-artifact from 4 to 6 (#1163)
  * Fix clippy warnings project-wide
  * Add KEYLIME_DIR support for verifier TLS certificates in push model agent
  * Thread privileged resources and use MeasurementList for IMA reading
  * Add privileged resource initialization and privilege dropping to push model agent
  * Fix privilege dropping order in run_as()
  * add documentation on FQDN hostnames
  * Remove confusing logs for push mode agent
  * Set correct default Verifier port (8891-&gt;8881) (#1159)
  * Add verifier_url to reference configuration file (#1158)
  * Add TLS support for Registrar communication (#1139)
  * Fix agent handling of 403 registration responses (#1154)
  * Add minor README.md rephrasing (#1151)
  * build(deps): bump actions/checkout from 5 to 6 (#1153)
  * ci: update spec files for packit COPR build
  * docs: improve challenge encoding and async TPM documentation
  * refactor: improve middleware and error handling
  * feat: add authentication client with middleware integration
  * docker: Include keylime_push_model_agent binary
  * Include attestation_interval configuration (#1146)
  * Persist payload keys to avoid attestation failure on restart
  * crypto: Implement the load or generate pattern for keys
  * Use simple algorithm specifiers in certification_keys object (#1140)
  * tests: Enable more tests in CI
  * Fix RSA2048 algorithm reporting in keylime agent
  * Remove disabled_signing_algorithms configuration
  * rpm: Fix metadata patches to apply to current code
  * workflows/rpm.yml: Use more strict patching
  * build(deps): bump uuid from 1.17.0 to 1.18.1
  * Fix ECC algorithm selection and reporting for keylime agent
  * Improve logging consistency and coherency
  * Implement minimal RFC compliance for Location header and URI parsing (#1125)
  * Use separate keys for payload mechanism and mTLS
  * docker: update rust to 1.81 for distroless Dockerfile
  * Ensure UEFI log capabilities are set to false
  * build(deps): bump http from 1.1.0 to 1.3.1
  * build(deps): bump log from 0.4.27 to 0.4.28
  * build(deps): bump cfg-if from 1.0.1 to 1.0.3
  * build(deps): bump actix-rt from 2.10.0 to 2.11.0
  * build(deps): bump async-trait from 0.1.88 to 0.1.89
  * build(deps): bump trybuild from 1.0.105 to 1.0.110
  * Accept evidence handling structures null entries
  * workflows: Add test to check if RPM patches still apply
  * CI: Enable test add-agent-with-malformed-ek-cert
  * config: Fix singleton tests
  * FSM: Remove needless lifetime annotations (#1105)
  * rpm: Do not remove wiremock which is now available in Fedora
  * Use latest Fedora httpdate version (1.0.3)
  * Enhance coverage with parse_retry_after test
  * Fix issues reported by CI regarding unwrap() calls
  * Reuse max retries indicated to the ResilientClient
  * Include limit of retries to 5 for Retry-After
  * Add policy to handle Retry-After response headers
  * build(deps): bump wiremock from 0.6.3 to 0.6.4
  * build(deps): bump serde_json from 1.0.140 to 1.0.143
  * build(deps): bump pest_derive from 2.8.0 to 2.8.1
  * build(deps): bump syn from 2.0.90 to 2.0.106
  * build(deps): bump tempfile from 3.20.0 to 3.21.0
  * build(deps): bump thiserror from 2.0.12 to 2.0.16
  * rpm: Fix patches to apply to current master code
  * build(deps): bump anyhow from 1.0.98 to 1.0.99
  * state_machine: Automatically clean config override during tests
  * config: Implement singleton and factory pattern
  * testing: Support overriding configuration during tests
  * feat: implement standalone challenge-response authentication module
  * structures: rename session structs for clarity and fix typos
  * tpm: refactor certify_credential_with_iak() into a more generic function
  * Add Push Model Agent Mermaid FSM chart (#1095)
  * Add state to avoid exiting on wrong attestation (#1093)
  * Add 6 alphanumeric lowercase X-Request-ID header
  * Enhance Evidence Handling response parsing
  * build(deps): bump quote from 1.0.35 to 1.0.40
  * build(deps): bump libc from 0.2.172 to 0.2.175
  * build(deps): bump glob from 0.3.2 to 0.3.3
  * build(deps): bump actix-web from 4.10.2 to 4.11.0

</description>
    <pkglist>
      <collection>
        <package name="rust-keylime" epoch="0" version="0.2.8+116" release="1.1" arch="src" src="src/rust-keylime-0.2.8+116-1.1.src.rpm">
          <filename>rust-keylime-0.2.8+116-1.1.src.rpm</filename>
        </package>
        <package name="rust-keylime" epoch="0" version="0.2.8+116" release="1.1" arch="x86_64" src="x86_64/rust-keylime-0.2.8+116-1.1.x86_64.rpm">
          <filename>rust-keylime-0.2.8+116-1.1.x86_64.rpm</filename>
        </package>
        <package name="rust-keylime-debuginfo" epoch="0" version="0.2.8+116" release="1.1" arch="x86_64" src="x86_64/rust-keylime-debuginfo-0.2.8+116-1.1.x86_64.rpm">
          <filename>rust-keylime-debuginfo-0.2.8+116-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>606</id>
    <title>Recommended update for cockpit-podman</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772705211" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257324" id="1257324" title="VUL-0: CVE-2025-13465: cockpit,cockpit-podman: lodash: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes" type="bugzilla" />
    </references>
    <description>This update for cockpit-podman fixes the following issues:

- Update dependencies to fix building on non-x86 arches
- Update lodash to 4.17.23 (bsc#1257324)
</description>
    <pkglist>
      <collection>
        <package name="cockpit-podman" epoch="0" version="83" release="2.1" arch="noarch" src="noarch/cockpit-podman-83-2.1.noarch.rpm">
          <filename>cockpit-podman-83-2.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-podman" epoch="0" version="83" release="2.1" arch="src" src="src/cockpit-podman-83-2.1.src.rpm">
          <filename>cockpit-podman-83-2.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>597</id>
    <title>Security update for glibc</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772105008" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246965" id="1246965" title="VUL-0: CVE-2025-8058: glibc: a malloc failure in regcomp function can lead to a double free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256766" id="1256766" title="VUL-0: CVE-2026-0861: glibc: inadequate size check in the memalign suite may result in an integer overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256822" id="1256822" title="VUL-0: CVE-2026-0915: glibc: Uninitialized stack buffer used as DNS query name when net==0 in _nss_dns_getnetbyaddr_r" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257005" id="1257005" title="VUL-0: CVE-2025-15281: glibc: uninitialized memory may cause the process abort" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8058" id="CVE-2025-8058" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8058" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15281" id="CVE-2025-15281" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15281" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0861" id="CVE-2026-0861" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0861" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0915" id="CVE-2026-0915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0915" type="cve" />
    </references>
    <description>This update for glibc fixes the following issues:

- CVE-2026-0861: inadequate size check in the memalign suite may result in an integer overflow (bsc#1256766).
- CVE-2026-0915: uninitialized stack buffer used as DNS query name when net==0 in _nss_dns_getnetbyaddr_r (bsc#1256822).
- CVE-2025-15281: uninitialized memory may cause the process abort (bsc#1257005).
- CVE-2025-8058: a malloc failure in regcomp function can lead to a double free (bsc#1246965).

</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.38" release="11.1" arch="src" src="src/glibc-2.38-11.1.src.rpm">
          <filename>glibc-2.38-11.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.38" release="11.1" arch="x86_64" src="x86_64/glibc-2.38-11.1.x86_64.rpm">
          <filename>glibc-2.38-11.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-debuginfo" epoch="0" version="2.38" release="11.1" arch="x86_64" src="x86_64/glibc-debuginfo-2.38-11.1.x86_64.rpm">
          <filename>glibc-debuginfo-2.38-11.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-debugsource" epoch="0" version="2.38" release="11.1" arch="x86_64" src="x86_64/glibc-debugsource-2.38-11.1.x86_64.rpm">
          <filename>glibc-debugsource-2.38-11.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.38" release="11.1" arch="x86_64" src="x86_64/glibc-devel-2.38-11.1.x86_64.rpm">
          <filename>glibc-devel-2.38-11.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel-debuginfo" epoch="0" version="2.38" release="11.1" arch="x86_64" src="x86_64/glibc-devel-debuginfo-2.38-11.1.x86_64.rpm">
          <filename>glibc-devel-debuginfo-2.38-11.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.38" release="11.1" arch="x86_64" src="x86_64/glibc-locale-2.38-11.1.x86_64.rpm">
          <filename>glibc-locale-2.38-11.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.38" release="11.1" arch="x86_64" src="x86_64/glibc-locale-base-2.38-11.1.x86_64.rpm">
          <filename>glibc-locale-base-2.38-11.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base-debuginfo" epoch="0" version="2.38" release="11.1" arch="x86_64" src="x86_64/glibc-locale-base-debuginfo-2.38-11.1.x86_64.rpm">
          <filename>glibc-locale-base-debuginfo-2.38-11.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>602</id>
    <title>Security update for docker</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772605343" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253904" id="1253904" title="VUL-0: CVE-2025-58181: docker,docker-compose,docker-stable: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58181" id="CVE-2025-58181" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58181" type="cve" />
    </references>
    <description>This update for docker fixes the following issues:

- CVE-2025-58181: an invalid number of mechanisms may cause unbounded memory consumption (bcs#1253904).
</description>
    <message>"Updating docker will restart the docker service, which may stop your docker containers. Do you want to proceed with the update?"</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="28.5.1_ce" release="9.1" arch="src" src="src/docker-28.5.1_ce-9.1.src.rpm">
          <filename>docker-28.5.1_ce-9.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="28.5.1_ce" release="9.1" arch="x86_64" src="x86_64/docker-28.5.1_ce-9.1.x86_64.rpm">
          <filename>docker-28.5.1_ce-9.1.x86_64.rpm</filename>
        </package>
        <package name="docker-debuginfo" epoch="0" version="28.5.1_ce" release="9.1" arch="x86_64" src="x86_64/docker-debuginfo-28.5.1_ce-9.1.x86_64.rpm">
          <filename>docker-debuginfo-28.5.1_ce-9.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>600</id>
    <title>Security update for cups</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772457449" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244057" id="1244057" title="VUL-0: CVE-2025-58436: cups: slow client can basically halt cupsd (possible DoS attack)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249049" id="1249049" title="VUL-0: CVE-2025-58060: cups: Authentication bypass with AuthType Negotiate" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249128" id="1249128" title="VUL-0: CVE-2025-58364: cups: Remote DoS via null dereference" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253783" id="1253783" title="VUL-0: CVE-2025-61915: cups: Local denial-of-service via cupsd.conf update and related issues" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254353" id="1254353" title="Cups version 2.2.7-150000.3.77.1 will hang GTK applications" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58060" id="CVE-2025-58060" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58060" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58364" id="CVE-2025-58364" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58364" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58436" id="CVE-2025-58436" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58436" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61915" id="CVE-2025-61915" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61915" type="cve" />
      <reference href="https://jira.suse.com/browse/PED-14688" id="PED-14688" title="https://jira.suse.com/browse/PED-14688" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-14775" id="PED-14775" title="https://jira.suse.com/browse/PED-14775" type="jira" />
    </references>
    <description>This update for cups fixes the following issues:

Update to version 2.4.16.

Security issues fixed:

- CVE-2025-58436: single client sending slow messages to cupsd can delay the application and make it unusable for other
  clients (bsc#1244057).
- CVE-2025-58060: authentication bypass with AuthType negotiate (bsc#1249049).
- CVE-2025-58364: unsafe deserialization and validation of printer attributes can lead to null dereference
  (bsc#1249128).
- CVE-2025-61915: local denial-of-service via cupsd.conf update and related issues (bsc#1253783).

Other updates and bugfixes:

- Version upgrade to 2.4.16:

  * 'cupsUTF8ToCharset' didn't validate 2-byte UTF-8 sequences,
    potentially reading past the end of the source string
    (Issue #1438)
  * The web interface did not support domain usernames fully
    (Issue #1441)
  * Fixed an infinite loop issue in the GTK+ print dialog
    (Issue #1439 bsc#1254353)
  * Fixed stopping scheduler on unknown directive in
    configuration (Issue #1443)
  
- Version upgrade to 2.4.15:

  * Fixed potential crash in 'cups-driverd' when there are
    duplicate PPDs (Issue #1355)
  * Fixed error recovery when scanning for PPDs
    in 'cups-driverd' (Issue #1416)
  
- Fix packages for Immutable Mode - cups (jsc#PED-14775,jsc#PED-14688)

- Version upgrade to 2.4.14.
  
- Version upgrade to 2.4.13:

  * Added 'print-as-raster' printer and job attributes
    for forcing rasterization (Issue #1282)
  * Updated documentation (Issue #1086)
  * Updated IPP backend to try a sanitized user name if the
    printer/server does not like the value (Issue #1145)
  * Updated the scheduler to send the "printer-added"
    or "printer-modified" events  whenever an IPP Everywhere PPD
    is installed (Issue #1244)
  * Updated the scheduler to send the "printer-modified" event
    whenever the system default printer is changed (Issue #1246)
  * Fixed a memory leak in 'httpClose' (Issue #1223)
  * Fixed missing commas in 'ippCreateRequestedArray'
    (Issue #1234)
  * Fixed subscription issues in the scheduler and D-Bus notifier
    (Issue #1235)
  * Fixed media-default reporting for custom sizes (Issue #1238)
  * Fixed support for IPP/PPD options with periods or underscores
    (Issue #1249)
  * Fixed parsing of real numbers in PPD compiler source files
    (Issue #1263)
  * Fixed scheduler freezing with zombie clients (Issue #1264)
  * Fixed support for the server name in the ErrorLog filename
    (Issue #1277)
  * Fixed job cleanup after daemon restart (Issue #1315)
  * Fixed handling of buggy DYMO USB printer serial numbers
   (Issue #1338)
  * Fixed unreachable block in IPP backend (Issue #1351)
  * Fixed memory leak in _cupsConvertOptions (Issue #1354)

- Version upgrade to 2.4.12:
  
  * GnuTLS follows system crypto policies now (Issue #1105)
  * Added `NoSystem` SSLOptions value (Issue #1130)
  * Now we raise alert for certificate issues (Issue #1194)
  * Added Kyocera USB quirk (Issue #1198)
  * The scheduler now logs a job's debugging history
    if the backend fails (Issue #1205)
  * Fixed a potential timing issue with `cupsEnumDests`
    (Issue #1084)
  * Fixed a potential "lost PPD" condition in the scheduler
    (Issue #1109)
  * Fixed a compressed file error handling bug (Issue #1070)
  * Fixed a bug in the make-and-model whitespace trimming
    code (Issue #1096)
  * Fixed a removal of IPP Everywhere permanent queue
    if installation failed (Issue #1102)
  * Fixed `ServerToken None` in scheduler (Issue #1111)
  * Fixed invalid IPP keyword values created from PPD
    option names (Issue #1118)
  * Fixed handling of "media" and "PageSize" in the same
    print request (Issue #1125)
  * Fixed client raster printing from macOS (Issue #1143)
  * Fixed the default User-Agent string.
  * Fixed a recursion issue in `ippReadIO`.
  * Fixed handling incorrect radix in `scan_ps()` (Issue #1188)
  * Fixed validation of dateTime values with time zones
    more than UTC+11 (Issue #1201)
  * Fixed attributes returned by the Create-Xxx-Subscriptions
    requests (Issue #1204)
  * Fixed `ippDateToTime` when using a non GMT/UTC timezone
    (Issue #1208)
  * Fixed `job-completed` event notifications for jobs that are
    cancelled before started (Issue #1209)
  * Fixed DNS-SD discovery with `ippfind` (Issue #1211)
</description>
    <pkglist>
      <collection>
        <package name="cups" epoch="0" version="2.4.16" release="1.1" arch="src" src="src/cups-2.4.16-1.1.src.rpm">
          <filename>cups-2.4.16-1.1.src.rpm</filename>
        </package>
        <package name="cups-config" epoch="0" version="2.4.16" release="1.1" arch="x86_64" src="x86_64/cups-config-2.4.16-1.1.x86_64.rpm">
          <filename>cups-config-2.4.16-1.1.x86_64.rpm</filename>
        </package>
        <package name="cups-debugsource" epoch="0" version="2.4.16" release="1.1" arch="x86_64" src="x86_64/cups-debugsource-2.4.16-1.1.x86_64.rpm">
          <filename>cups-debugsource-2.4.16-1.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2" epoch="0" version="2.4.16" release="1.1" arch="x86_64" src="x86_64/libcups2-2.4.16-1.1.x86_64.rpm">
          <filename>libcups2-2.4.16-1.1.x86_64.rpm</filename>
        </package>
        <package name="libcups2-debuginfo" epoch="0" version="2.4.16" release="1.1" arch="x86_64" src="x86_64/libcups2-debuginfo-2.4.16-1.1.x86_64.rpm">
          <filename>libcups2-debuginfo-2.4.16-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>605</id>
    <title>Recommended update for open-vm-tools</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772639166" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250692" id="1250692" title="open-vm-tools version 13.0.5 has been released - please rebaseopen-vm-tools 13.0.5 was released on Sept 29, 2025 - based on build 24915695  There are no new features in the open-vm-tools 13.0.5 release.  This is primarily a maintenance release that addres" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257357" id="1257357" title="open-vm-tools version 13.0.10 has been released - please rebase to currently supported SLES" type="bugzilla" />
    </references>
    <description>This update for open-vm-tools fixes the following issues:

- update to 13.0.10 based on build 25056151 (boo#1257357):
    * There are no new features in the open-vm-tools 13.0.10 release.
    * This is primarily a maintenance release that addresses a fix.
    * A minor enhancement has been made for Guest OS Customization.
    * The DeployPkg plugin has been updated to handle a new cloud-init error code that
      signals a recoverable error and allow cloud-init to finish running.

- update to 13.0.5 based on build 24915695 (bsc#1250692).
</description>
    <pkglist>
      <collection>
        <package name="libvmtools0" epoch="0" version="13.0.10" release="1.1" arch="x86_64" src="x86_64/libvmtools0-13.0.10-1.1.x86_64.rpm">
          <filename>libvmtools0-13.0.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="libvmtools0-debuginfo" epoch="0" version="13.0.10" release="1.1" arch="x86_64" src="x86_64/libvmtools0-debuginfo-13.0.10-1.1.x86_64.rpm">
          <filename>libvmtools0-debuginfo-13.0.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="13.0.10" release="1.1" arch="src" src="src/open-vm-tools-13.0.10-1.1.src.rpm">
          <filename>open-vm-tools-13.0.10-1.1.src.rpm</filename>
        </package>
        <package name="open-vm-tools" epoch="0" version="13.0.10" release="1.1" arch="x86_64" src="x86_64/open-vm-tools-13.0.10-1.1.x86_64.rpm">
          <filename>open-vm-tools-13.0.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools-debuginfo" epoch="0" version="13.0.10" release="1.1" arch="x86_64" src="x86_64/open-vm-tools-debuginfo-13.0.10-1.1.x86_64.rpm">
          <filename>open-vm-tools-debuginfo-13.0.10-1.1.x86_64.rpm</filename>
        </package>
        <package name="open-vm-tools-debugsource" epoch="0" version="13.0.10" release="1.1" arch="x86_64" src="x86_64/open-vm-tools-debugsource-13.0.10-1.1.x86_64.rpm">
          <filename>open-vm-tools-debugsource-13.0.10-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>603</id>
    <title>Security update for cockpit-machines</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772605384" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257325" id="1257325" title="VUL-0: CVE-2025-13465: cockpit-machines,cockpit-packages,cockpit-repos,cockpit-subscriptions: lodash: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465" id="CVE-2025-13465" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13465" type="cve" />
    </references>
    <description>This update for cockpit-machines fixes the following issues:

- CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global
  prototypes (bsc#1257325).
</description>
    <pkglist>
      <collection>
        <package name="cockpit-machines" epoch="0" version="305" release="2.1" arch="noarch" src="noarch/cockpit-machines-305-2.1.noarch.rpm">
          <filename>cockpit-machines-305-2.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-machines" epoch="0" version="305" release="2.1" arch="src" src="src/cockpit-machines-305-2.1.src.rpm">
          <filename>cockpit-machines-305-2.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>604</id>
    <title>Security update for ca-certificates-mozilla</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772613483" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258002" id="1258002" title="VUL-0: ca-certificates-mozilla: 2.84 update" type="bugzilla" />
    </references>
    <description>This update for ca-certificates-mozilla fixes the following issues:

- Updated to 2.84 state of Mozilla SSL root CAs (bsc#1258002)

  - Removed:
    - Baltimore CyberTrust Root
    - CommScope Public Trust ECC Root-01
    - CommScope Public Trust ECC Root-02
    - CommScope Public Trust RSA Root-01
    - CommScope Public Trust RSA Root-02
    - DigiNotar Root CA

  - Added: 
    - e-Szigno TLS Root CA 2023
    - OISTE Client Root ECC G1
    - OISTE Client Root RSA G1
    - OISTE Server Root ECC G1
    - OISTE Server Root RSA G1
    - SwissSign RSA SMIME Root CA 2022 - 1
    - SwissSign RSA TLS Root CA 2022 - 1
    - TrustAsia SMIME ECC Root CA
    - TrustAsia SMIME RSA Root CA
    - TrustAsia TLS ECC Root CA
    - TrustAsia TLS RSA Root CA
</description>
    <pkglist>
      <collection>
        <package name="ca-certificates-mozilla" epoch="0" version="2.84" release="1.1" arch="noarch" src="noarch/ca-certificates-mozilla-2.84-1.1.noarch.rpm">
          <filename>ca-certificates-mozilla-2.84-1.1.noarch.rpm</filename>
        </package>
        <package name="ca-certificates-mozilla" epoch="0" version="2.84" release="1.1" arch="src" src="src/ca-certificates-mozilla-2.84-1.1.src.rpm">
          <filename>ca-certificates-mozilla-2.84-1.1.src.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>607</id>
    <title>Security update for python-cryptography</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772716579" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258074" id="1258074" title="VUL-0: CVE-2026-26007: python-cryptography: Subgroup Attack Due to Missing Subgroup Validation for SECT Curves" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26007" id="CVE-2026-26007" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26007" type="cve" />
    </references>
    <description>This update for python-cryptography fixes the following issues:

- CVE-2026-26007: missing validation can lead to security issues for signature verification (ECDSA) and shared key
  negotiation (ECDH) (bsc#1258074).
</description>
    <pkglist>
      <collection>
        <package name="python-cryptography" epoch="0" version="42.0.4" release="3.1" arch="src" src="src/python-cryptography-42.0.4-3.1.src.rpm">
          <filename>python-cryptography-42.0.4-3.1.src.rpm</filename>
        </package>
        <package name="python311-cryptography" epoch="0" version="42.0.4" release="3.1" arch="x86_64" src="x86_64/python311-cryptography-42.0.4-3.1.x86_64.rpm">
          <filename>python311-cryptography-42.0.4-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>598</id>
    <title>Security update for ucode-intel</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772102925" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1229129" id="1229129" title="VUL-0: ucode-intel: 20240813 release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258046" id="1258046" title="VUL-0: CVE-2024-24853, CVE-2025-31648: ucode-intel: 20260210 release" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24853" id="CVE-2024-24853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24853" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31648" id="CVE-2025-31648" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31648" type="cve" />
    </references>
    <description>This update for ucode-intel fixes the following issues:

- Intel CPU Microcode was updated to the 20260210 release (bsc#1258046):

  - CVE-2024-24853: Updated fix for incorrect behavior order in transition
    between executive monitor and SMI transfer monitor (STM) in some Intel(R)
    Processor may allow a privileged user to potentially enable escalation
    of privilege via local access (bsc#1229129).

  - CVE-2025-31648: Improper handling of values in the
    microcode flow for some Intel Processor Family may allow
    an escalation of privilege (bsc#1258046).
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20260210" release="1.1" arch="src" src="src/ucode-intel-20260210-1.1.src.rpm">
          <filename>ucode-intel-20260210-1.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-intel" epoch="0" version="20260210" release="1.1" arch="x86_64" src="x86_64/ucode-intel-20260210-1.1.x86_64.rpm">
          <filename>ucode-intel-20260210-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>610</id>
    <title>Security update for zlib</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773050167" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1216378" id="1216378" title="VUL-0: CVE-2023-45853: zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258392" id="1258392" title="VUL-0: CVE-2026-27171: zlib: infinite loop via the `crc32_combine64` and `crc32_combine_gen64` functions due to missing checks for negative lengths" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45853" id="CVE-2023-45853" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45853" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27171" id="CVE-2026-27171" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27171" type="cve" />
    </references>
    <description>This update for zlib fixes the following issues:

- CVE-2026-27171: Fixed an infinite loop via the crc32_combine64 and crc32_combine_gen64 functions due to missing checks for negative lengths. (bsc#1258392)
- CVE-2023-45853: Fixed an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6. (bsc#1216378)
</description>
    <pkglist>
      <collection>
        <package name="libz1" epoch="0" version="1.2.13" release="7.1" arch="x86_64" src="x86_64/libz1-1.2.13-7.1.x86_64.rpm">
          <filename>libz1-1.2.13-7.1.x86_64.rpm</filename>
        </package>
        <package name="libz1-debuginfo" epoch="0" version="1.2.13" release="7.1" arch="x86_64" src="x86_64/libz1-debuginfo-1.2.13-7.1.x86_64.rpm">
          <filename>libz1-debuginfo-1.2.13-7.1.x86_64.rpm</filename>
        </package>
        <package name="zlib" epoch="0" version="1.2.13" release="7.1" arch="src" src="src/zlib-1.2.13-7.1.src.rpm">
          <filename>zlib-1.2.13-7.1.src.rpm</filename>
        </package>
        <package name="zlib-debugsource" epoch="0" version="1.2.13" release="7.1" arch="x86_64" src="x86_64/zlib-debugsource-1.2.13-7.1.x86_64.rpm">
          <filename>zlib-debugsource-1.2.13-7.1.x86_64.rpm</filename>
        </package>
        <package name="zlib-devel" epoch="0" version="1.2.13" release="7.1" arch="x86_64" src="x86_64/zlib-devel-1.2.13-7.1.x86_64.rpm">
          <filename>zlib-devel-1.2.13-7.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>611</id>
    <title>Security update for python311</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773054244" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257029" id="1257029" title="VUL-0: CVE-2025-11468: python3: header injection when folding a long comment in an email header containing exclusively unfoldable characters" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257031" id="1257031" title="VUL-0: CVE-2026-0672: python3: HTTP header injection via user-controlled cookie values and parameters when using http.cookies.Morsel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257041" id="1257041" title="VUL-0: CVE-2025-15367: python: control characters may allow the injection of additional commands" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257042" id="1257042" title="VUL-0: CVE-2026-0865: python: user-controlled header containing newlines can allow injecting HTTP headers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257044" id="1257044" title="VUL-0: CVE-2025-15366: python: user-controlled command can allow additional commands injected using newlines" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257046" id="1257046" title="VUL-0: CVE-2025-15282: python: user-controlled data URLs parsed may allow injecting headers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257108" id="1257108" title="VUL-0: CVE-2025-12781: python: inadequate parameter check can cause data integrity issues" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11468" id="CVE-2025-11468" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11468" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12781" id="CVE-2025-12781" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12781" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15282" id="CVE-2025-15282" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15282" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15366" id="CVE-2025-15366" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15366" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15367" id="CVE-2025-15367" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15367" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0672" id="CVE-2026-0672" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0672" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0865" id="CVE-2026-0865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0865" type="cve" />
    </references>
    <description>This update for python311 fixes the following issues:

- CVE-2025-11468: preserving parens when folding comments in email headers. (bsc#1257029)
- CVE-2026-0672: rejects control characters in http cookies. (bsc#1257031)
- CVE-2026-0865: rejecting control characters in wsgiref.headers.Headers, which could be abused for injecting false HTTP headers. (bsc#1257042)
- CVE-2025-15366: basically the same as the previous patch for IMAP protocol. (bsc#1257044)
- CVE-2025-15282: basically the same as the previous patch for urllib library. (bsc#1257046)
- CVE-2025-15367: basically the same as the previous patch for poplib library. (bsc#1257041)
- CVE-2025-12781: fix decoding with non-standard Base64 alphabet (bsc#1257108)
</description>
    <pkglist>
      <collection>
        <package name="python311" epoch="0" version="3.11.14" release="3.1" arch="src" src="src/python311-3.11.14-3.1.src.rpm">
          <filename>python311-3.11.14-3.1.src.rpm</filename>
        </package>
        <package name="python311" epoch="0" version="3.11.14" release="3.1" arch="x86_64" src="x86_64/python311-3.11.14-3.1.x86_64.rpm">
          <filename>python311-3.11.14-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses" epoch="0" version="3.11.14" release="3.1" arch="x86_64" src="x86_64/python311-curses-3.11.14-3.1.x86_64.rpm">
          <filename>python311-curses-3.11.14-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses-debuginfo" epoch="0" version="3.11.14" release="3.1" arch="x86_64" src="x86_64/python311-curses-debuginfo-3.11.14-3.1.x86_64.rpm">
          <filename>python311-curses-debuginfo-3.11.14-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debuginfo" epoch="0" version="3.11.14" release="3.1" arch="x86_64" src="x86_64/python311-debuginfo-3.11.14-3.1.x86_64.rpm">
          <filename>python311-debuginfo-3.11.14-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debugsource" epoch="0" version="3.11.14" release="3.1" arch="x86_64" src="x86_64/python311-debugsource-3.11.14-3.1.x86_64.rpm">
          <filename>python311-debugsource-3.11.14-3.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0" epoch="0" version="3.11.14" release="3.1" arch="x86_64" src="x86_64/libpython3_11-1_0-3.11.14-3.1.x86_64.rpm">
          <filename>libpython3_11-1_0-3.11.14-3.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0-debuginfo" epoch="0" version="3.11.14" release="3.1" arch="x86_64" src="x86_64/libpython3_11-1_0-debuginfo-3.11.14-3.1.x86_64.rpm">
          <filename>libpython3_11-1_0-debuginfo-3.11.14-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base" epoch="0" version="3.11.14" release="3.1" arch="x86_64" src="x86_64/python311-base-3.11.14-3.1.x86_64.rpm">
          <filename>python311-base-3.11.14-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base-debuginfo" epoch="0" version="3.11.14" release="3.1" arch="x86_64" src="x86_64/python311-base-debuginfo-3.11.14-3.1.x86_64.rpm">
          <filename>python311-base-debuginfo-3.11.14-3.1.x86_64.rpm</filename>
        </package>
        <package name="python311-core" epoch="0" version="3.11.14" release="3.1" arch="src" src="src/python311-core-3.11.14-3.1.src.rpm">
          <filename>python311-core-3.11.14-3.1.src.rpm</filename>
        </package>
        <package name="python311-core-debugsource" epoch="0" version="3.11.14" release="3.1" arch="x86_64" src="x86_64/python311-core-debugsource-3.11.14-3.1.x86_64.rpm">
          <filename>python311-core-debugsource-3.11.14-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>614</id>
    <title>Security update for qemu</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773168626" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255400" id="1255400" title="VUL-0: CVE-2025-14876: kvm,qemu: qemu-kvm: Unbounded allocation in virtio-crypto" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256484" id="1256484" title="VUL-0: CVE-2026-0665: qemu: out-of-bounds heap access can lead to a denial of service or potential memory corruption" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14876" id="CVE-2025-14876" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14876" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0665" id="CVE-2026-0665" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0665" type="cve" />
    </references>
    <description>This update for qemu fixes the following issues:

- CVE-2025-14876: Fixed unbounded allocation in virtio-crypto. (bsc#1255400)
- CVE-2026-0665: Fixed PIRQ bounds check in xen_physdev_map_pirq. (bsc#1256484)
</description>
    <pkglist>
      <collection>
        <package name="qemu" epoch="0" version="8.2.10" release="2.1" arch="src" src="src/qemu-8.2.10-2.1.src.rpm">
          <filename>qemu-8.2.10-2.1.src.rpm</filename>
        </package>
        <package name="qemu" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-accel-tcg-x86-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-accel-tcg-x86-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-accel-tcg-x86-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-audio-spice-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-audio-spice-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-audio-spice-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-audio-spice-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-audio-spice-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-block-curl-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-block-curl-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-curl-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-block-curl-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-block-curl-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-block-iscsi-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-block-iscsi-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-iscsi-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-block-iscsi-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-block-iscsi-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-block-rbd-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-block-rbd-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-rbd-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-block-rbd-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-block-rbd-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-block-ssh-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-block-ssh-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-block-ssh-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-block-ssh-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-block-ssh-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-chardev-spice-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-chardev-spice-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-chardev-spice-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-chardev-spice-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-chardev-spice-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-debugsource" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-debugsource-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-debugsource-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-guest-agent-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-guest-agent-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-guest-agent-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-guest-agent-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-guest-agent-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-qxl-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-hw-display-qxl-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-hw-display-qxl-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-gpu-pci-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-gpu-pci-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-gpu-pci-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-display-virtio-vga-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-hw-display-virtio-vga-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-hw-display-virtio-vga-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-host-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-hw-usb-host-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-hw-usb-host-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-hw-usb-redirect-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-hw-usb-redirect-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-hw-usb-redirect-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-img" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-img-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-img-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-img-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-img-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-img-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ipxe" epoch="0" version="8.2.10" release="2.1" arch="noarch" src="noarch/qemu-ipxe-8.2.10-2.1.noarch.rpm">
          <filename>qemu-ipxe-8.2.10-2.1.noarch.rpm</filename>
        </package>
        <package name="qemu-ksm" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-ksm-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-ksm-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-lang" epoch="0" version="8.2.10" release="2.1" arch="noarch" src="noarch/qemu-lang-8.2.10-2.1.noarch.rpm">
          <filename>qemu-lang-8.2.10-2.1.noarch.rpm</filename>
        </package>
        <package name="qemu-pr-helper" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-pr-helper-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-pr-helper-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-pr-helper-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-pr-helper-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-pr-helper-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-seabios" epoch="0" version="8.2.101.16.3_3_ga95067eb" release="2.1" arch="noarch" src="noarch/qemu-seabios-8.2.101.16.3_3_ga95067eb-2.1.noarch.rpm">
          <filename>qemu-seabios-8.2.101.16.3_3_ga95067eb-2.1.noarch.rpm</filename>
        </package>
        <package name="qemu-tools" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-tools-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-tools-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-tools-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-tools-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-tools-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-ui-opengl-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-ui-opengl-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-opengl-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-ui-opengl-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-ui-opengl-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-ui-spice-core-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-ui-spice-core-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-ui-spice-core-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-vgabios" epoch="0" version="8.2.101.16.3_3_ga95067eb" release="2.1" arch="noarch" src="noarch/qemu-vgabios-8.2.101.16.3_3_ga95067eb-2.1.noarch.rpm">
          <filename>qemu-vgabios-8.2.101.16.3_3_ga95067eb-2.1.noarch.rpm</filename>
        </package>
        <package name="qemu-x86" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-x86-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-x86-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        <package name="qemu-x86-debuginfo" epoch="0" version="8.2.10" release="2.1" arch="x86_64" src="x86_64/qemu-x86-debuginfo-8.2.10-2.1.x86_64.rpm">
          <filename>qemu-x86-debuginfo-8.2.10-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>601</id>
    <title>Security update for libsoup</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772457557" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240751" id="1240751" title="VUL-0: CVE-2025-32049: libsoup: Denial of Service attack to websocket server" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252555" id="1252555" title="VUL-0: CVE-2025-12105: libsoup,libsoup2: heap use-after-free in message queue handling during HTTP/2 read completion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258120" id="1258120" title="VUL-0: CVE-2026-2369: libsoup,libsoup2: Buffer overread due to integer underflow when handling zero-length resources" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258170" id="1258170" title="VUL-0: CVE-2026-2443: libsoup,libsoup2: out-of-bounds read when processing specially crafted HTTP Range headers can lead to heap information disclosure to remote attackers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258508" id="1258508" title="VUL-0: CVE-2026-2708: libsoup,libsoup2: HTTP request smuggling via duplicate Content-Length headers" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12105" id="CVE-2025-12105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12105" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32049" id="CVE-2025-32049" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32049" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2369" id="CVE-2026-2369" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2369" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2443" id="CVE-2026-2443" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2443" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2708" id="CVE-2026-2708" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2708" type="cve" />
    </references>
    <description>This update for libsoup fixes the following issues:

- CVE-2025-12105: Fixed heap use-after-free in message queue handling during HTTP/2 read completion. (bsc#1252555)
- CVE-2025-32049: Fixed a Denial of Service attack to websocket server. (bsc#1240751)
- CVE-2026-2443: Fixed an out-of-bounds read when processing specially crafted HTTP Range headers can lead to heap information disclosure to remote attackers. (bsc#1258170)
- CVE-2026-2369: Fixed a buffer overread due to integer underflow when handling zero-length resources. (bsc#1258120)
- CVE-2026-2708: Fixed HTTP request smuggling via duplicate Content-Length headers. (bsc#1258508)
</description>
    <pkglist>
      <collection>
        <package name="libsoup" epoch="0" version="3.4.2" release="13.1" arch="src" src="src/libsoup-3.4.2-13.1.src.rpm">
          <filename>libsoup-3.4.2-13.1.src.rpm</filename>
        </package>
        <package name="libsoup-3_0-0" epoch="0" version="3.4.2" release="13.1" arch="x86_64" src="x86_64/libsoup-3_0-0-3.4.2-13.1.x86_64.rpm">
          <filename>libsoup-3_0-0-3.4.2-13.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-3_0-0-debuginfo" epoch="0" version="3.4.2" release="13.1" arch="x86_64" src="x86_64/libsoup-3_0-0-debuginfo-3.4.2-13.1.x86_64.rpm">
          <filename>libsoup-3_0-0-debuginfo-3.4.2-13.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-debugsource" epoch="0" version="3.4.2" release="13.1" arch="x86_64" src="x86_64/libsoup-debugsource-3.4.2-13.1.x86_64.rpm">
          <filename>libsoup-debugsource-3.4.2-13.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>608</id>
    <title>Security update for libxslt, libxml2</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772798329" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247850" id="1247850" title="VUL-0: CVE-2025-8732: TRACKERBUG: libxml2: infinite recursion in catalog parsing functions when processing malformed SGML catalog files" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247858" id="1247858" title="VUL-0: CVE-2025-8732: libxml2: libxml2: infinite recursion in catalog parsing functions when processing malformed SGML catalog files" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1250553" id="1250553" title="VUL-0: CVE-2025-10911: libxslt: use-after-free with key data stored cross-RVT" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256804" id="1256804" title="VUL-0: CVE-2026-0989: TRACKERBUG: libxml2: call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth when resolving `&lt;include&gt;` directives" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256805" id="1256805" title="VUL-0: CVE-2026-0989: libxml2: libxml2: call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth when resolving `&lt;include&gt;` directives" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256807" id="1256807" title="VUL-0: CVE-2026-0990: libxml2: libxml2: call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256808" id="1256808" title="VUL-0: CVE-2026-0992: TRACKERBUG: libxml2: excessive resource consumption when processing XML catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256809" id="1256809" title="VUL-0: CVE-2026-0992: libxml2: libxml2: excessive resource consumption when processing XML catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256810" id="1256810" title="VUL-0: CVE-2026-0989: python-libxml2, python-libxml2-python: libxml2: call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth when resolving `&lt;include&gt;` directives" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256811" id="1256811" title="VUL-0: CVE-2026-0990: python-libxml2, python-libxml2-python: libxml2: call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256812" id="1256812" title="VUL-0: CVE-2026-0992: python-libxml2, python-libxml2-python: libxml2: excessive resource consumption when processing XML catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257593" id="1257593" title="VUL-0: CVE-2026-1757: TRACKERBUG: libxml2: memory leak in the `xmllint` interactive shell" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257594" id="1257594" title="VUL-0: CVE-2026-1757: libxml2: libxml2: memory leak in the `xmllint` interactive shell" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257595" id="1257595" title="VUL-0: CVE-2026-1757: python-libxml2: libxml2: memory leak in the `xmllint` interactive shell" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8732" id="CVE-2025-8732" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8732" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10911" id="CVE-2025-10911" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10911" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0989" id="CVE-2026-0989" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0989" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0990" id="CVE-2026-0990" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0990" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0992" id="CVE-2026-0992" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0992" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1757" id="CVE-2026-1757" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1757" type="cve" />
    </references>
    <description>This update for libxslt, libxml2 fixes the following issues:

Changes in libxml2:

- CVE-2026-0990: call stack overflow may lead to application crash due to infinite recursion in
  `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811).
- CVE-2026-0992: excessive resource consumption when processing XML catalogs due to exponential behavior when handling
  `nextCatalog` elements (bsc#1256809, bsc#1256812).
- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files
  (bsc#1247858).
- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257594, bsc#1257595).
- CVE-2025-10911: parsing xsl nodes may lead to use-after-free with key data stored cross-RVT (bsc#1250553).
</description>
    <pkglist>
      <collection>
        <package name="libxml2-2" epoch="0" version="2.11.6" release="12.1" arch="x86_64" src="x86_64/libxml2-2-2.11.6-12.1.x86_64.rpm">
          <filename>libxml2-2-2.11.6-12.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-2-debuginfo" epoch="0" version="2.11.6" release="12.1" arch="x86_64" src="x86_64/libxml2-2-debuginfo-2.11.6-12.1.x86_64.rpm">
          <filename>libxml2-2-debuginfo-2.11.6-12.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2" epoch="0" version="2.11.6" release="12.1" arch="src" src="src/libxml2-2.11.6-12.1.src.rpm">
          <filename>libxml2-2.11.6-12.1.src.rpm</filename>
        </package>
        <package name="libxml2-debugsource" epoch="0" version="2.11.6" release="12.1" arch="x86_64" src="x86_64/libxml2-debugsource-2.11.6-12.1.x86_64.rpm">
          <filename>libxml2-debugsource-2.11.6-12.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-tools" epoch="0" version="2.11.6" release="12.1" arch="x86_64" src="x86_64/libxml2-tools-2.11.6-12.1.x86_64.rpm">
          <filename>libxml2-tools-2.11.6-12.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-tools-debuginfo" epoch="0" version="2.11.6" release="12.1" arch="x86_64" src="x86_64/libxml2-tools-debuginfo-2.11.6-12.1.x86_64.rpm">
          <filename>libxml2-tools-debuginfo-2.11.6-12.1.x86_64.rpm</filename>
        </package>
        <package name="libxml2-python" epoch="0" version="2.11.6" release="12.1" arch="src" src="src/libxml2-python-2.11.6-12.1.src.rpm">
          <filename>libxml2-python-2.11.6-12.1.src.rpm</filename>
        </package>
        <package name="libxml2-python-debugsource" epoch="0" version="2.11.6" release="12.1" arch="x86_64" src="x86_64/libxml2-python-debugsource-2.11.6-12.1.x86_64.rpm">
          <filename>libxml2-python-debugsource-2.11.6-12.1.x86_64.rpm</filename>
        </package>
        <package name="python311-libxml2" epoch="0" version="2.11.6" release="12.1" arch="x86_64" src="x86_64/python311-libxml2-2.11.6-12.1.x86_64.rpm">
          <filename>python311-libxml2-2.11.6-12.1.x86_64.rpm</filename>
        </package>
        <package name="python311-libxml2-debuginfo" epoch="0" version="2.11.6" release="12.1" arch="x86_64" src="x86_64/python311-libxml2-debuginfo-2.11.6-12.1.x86_64.rpm">
          <filename>python311-libxml2-debuginfo-2.11.6-12.1.x86_64.rpm</filename>
        </package>
        <package name="libexslt0" epoch="0" version="1.1.38" release="8.1" arch="x86_64" src="x86_64/libexslt0-1.1.38-8.1.x86_64.rpm">
          <filename>libexslt0-1.1.38-8.1.x86_64.rpm</filename>
        </package>
        <package name="libexslt0-debuginfo" epoch="0" version="1.1.38" release="8.1" arch="x86_64" src="x86_64/libexslt0-debuginfo-1.1.38-8.1.x86_64.rpm">
          <filename>libexslt0-debuginfo-1.1.38-8.1.x86_64.rpm</filename>
        </package>
        <package name="libxslt" epoch="0" version="1.1.38" release="8.1" arch="src" src="src/libxslt-1.1.38-8.1.src.rpm">
          <filename>libxslt-1.1.38-8.1.src.rpm</filename>
        </package>
        <package name="libxslt-debugsource" epoch="0" version="1.1.38" release="8.1" arch="x86_64" src="x86_64/libxslt-debugsource-1.1.38-8.1.x86_64.rpm">
          <filename>libxslt-debugsource-1.1.38-8.1.x86_64.rpm</filename>
        </package>
        <package name="libxslt1" epoch="0" version="1.1.38" release="8.1" arch="x86_64" src="x86_64/libxslt1-1.1.38-8.1.x86_64.rpm">
          <filename>libxslt1-1.1.38-8.1.x86_64.rpm</filename>
        </package>
        <package name="libxslt1-debuginfo" epoch="0" version="1.1.38" release="8.1" arch="x86_64" src="x86_64/libxslt1-debuginfo-1.1.38-8.1.x86_64.rpm">
          <filename>libxslt1-debuginfo-1.1.38-8.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>612</id>
    <title>Security update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773131712" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258859" id="1258859" title="VUL-0: CVE-2026-3184: util-linux: access control bypass due to improper hostname canonicalization in `login`" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3184" id="CVE-2026-3184" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3184" type="cve" />
    </references>
    <description>This update for util-linux fixes the following issue:

- CVE-2026-3184: access control bypass due to improper hostname canonicalization in `login` (bsc#1258859).
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/libblkid1-2.39.3-5.1.x86_64.rpm">
          <filename>libblkid1-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1-debuginfo" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/libblkid1-debuginfo-2.39.3-5.1.x86_64.rpm">
          <filename>libblkid1-debuginfo-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/libfdisk1-2.39.3-5.1.x86_64.rpm">
          <filename>libfdisk1-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1-debuginfo" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/libfdisk1-debuginfo-2.39.3-5.1.x86_64.rpm">
          <filename>libfdisk1-debuginfo-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/libmount1-2.39.3-5.1.x86_64.rpm">
          <filename>libmount1-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1-debuginfo" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/libmount1-debuginfo-2.39.3-5.1.x86_64.rpm">
          <filename>libmount1-debuginfo-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/libsmartcols1-2.39.3-5.1.x86_64.rpm">
          <filename>libsmartcols1-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1-debuginfo" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/libsmartcols1-debuginfo-2.39.3-5.1.x86_64.rpm">
          <filename>libsmartcols1-debuginfo-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/libuuid1-2.39.3-5.1.x86_64.rpm">
          <filename>libuuid1-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1-debuginfo" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/libuuid1-debuginfo-2.39.3-5.1.x86_64.rpm">
          <filename>libuuid1-debuginfo-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.39.3" release="5.1" arch="src" src="src/util-linux-2.39.3-5.1.src.rpm">
          <filename>util-linux-2.39.3-5.1.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/util-linux-2.39.3-5.1.x86_64.rpm">
          <filename>util-linux-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-debuginfo" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/util-linux-debuginfo-2.39.3-5.1.x86_64.rpm">
          <filename>util-linux-debuginfo-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-debugsource" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/util-linux-debugsource-2.39.3-5.1.x86_64.rpm">
          <filename>util-linux-debugsource-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.39.3" release="5.1" arch="src" src="src/util-linux-systemd-2.39.3-5.1.src.rpm">
          <filename>util-linux-systemd-2.39.3-5.1.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/util-linux-systemd-2.39.3-5.1.x86_64.rpm">
          <filename>util-linux-systemd-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd-debuginfo" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/util-linux-systemd-debuginfo-2.39.3-5.1.x86_64.rpm">
          <filename>util-linux-systemd-debuginfo-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd-debugsource" epoch="0" version="2.39.3" release="5.1" arch="x86_64" src="x86_64/util-linux-systemd-debugsource-2.39.3-5.1.x86_64.rpm">
          <filename>util-linux-systemd-debugsource-2.39.3-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>618</id>
    <title>Security update for virtiofsd</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773309493" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257912" id="1257912" title="VUL-0: CVE-2026-25727: virtiofsd: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25727" id="CVE-2026-25727" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25727" type="cve" />
    </references>
    <description>This update for virtiofsd fixes the following issue:

- CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion
  (bsc#1257912).
</description>
    <pkglist>
      <collection>
        <package name="virtiofsd" epoch="0" version="1.10.1" release="2.1" arch="src" src="src/virtiofsd-1.10.1-2.1.src.rpm">
          <filename>virtiofsd-1.10.1-2.1.src.rpm</filename>
        </package>
        <package name="virtiofsd" epoch="0" version="1.10.1" release="2.1" arch="x86_64" src="x86_64/virtiofsd-1.10.1-2.1.x86_64.rpm">
          <filename>virtiofsd-1.10.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="virtiofsd-debuginfo" epoch="0" version="1.10.1" release="2.1" arch="x86_64" src="x86_64/virtiofsd-debuginfo-1.10.1-2.1.x86_64.rpm">
          <filename>virtiofsd-debuginfo-1.10.1-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>620</id>
    <title>Security update for libsoup</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773392296" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257398" id="1257398" title="VUL-0: CVE-2026-1467: libsoup,libsoup2: lack of input sanitization can lead to unintended or unauthorized HTTP requests" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257441" id="1257441" title="VUL-0: CVE-2026-1539: libsoup,libsoup2: proxy authentication credentials leaked via the Proxy-Authorization header when handling HTTP redirects" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257597" id="1257597" title="VUL-0: CVE-2026-1760: libsoup,libsoup2: improper handling of HTTP requests combining certain headers by SoupServer can lead to HTTP request smuggling and potential DoS" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1467" id="CVE-2026-1467" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1467" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1539" id="CVE-2026-1539" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1539" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1760" id="CVE-2026-1760" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1760" type="cve" />
    </references>
    <description>This update for libsoup fixes the following issues:

- CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests (bsc#1257398).
- CVE-2026-1539: proxy authentication credentials leaked via the Proxy-Authorization header when handling HTTP redirects
  (bsc#1257441).
- CVE-2026-1760: improper handling of HTTP requests combining certain headers by SoupServer can lead to HTTP request
  smuggling and potential DoS (bsc#1257597).
</description>
    <pkglist>
      <collection>
        <package name="libsoup" epoch="0" version="3.4.2" release="14.1" arch="src" src="src/libsoup-3.4.2-14.1.src.rpm">
          <filename>libsoup-3.4.2-14.1.src.rpm</filename>
        </package>
        <package name="libsoup-3_0-0" epoch="0" version="3.4.2" release="14.1" arch="x86_64" src="x86_64/libsoup-3_0-0-3.4.2-14.1.x86_64.rpm">
          <filename>libsoup-3_0-0-3.4.2-14.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-3_0-0-debuginfo" epoch="0" version="3.4.2" release="14.1" arch="x86_64" src="x86_64/libsoup-3_0-0-debuginfo-3.4.2-14.1.x86_64.rpm">
          <filename>libsoup-3_0-0-debuginfo-3.4.2-14.1.x86_64.rpm</filename>
        </package>
        <package name="libsoup-debugsource" epoch="0" version="3.4.2" release="14.1" arch="x86_64" src="x86_64/libsoup-debugsource-3.4.2-14.1.x86_64.rpm">
          <filename>libsoup-debugsource-3.4.2-14.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>616</id>
    <title>Recommended update for gpg2</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773308309" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1251214" id="1251214" title="gpg2 quick-key-manipulation test FTBFS-2038" type="bugzilla" />
    </references>
    <description>This update for gpg2 fixes the following issues:

Changes for gpg2:

- Fix Y2K38 FTBFS:
  * gpg2 quick-key-manipulation test FTBFS-2038 (bsc#1251214)
  * Upstream issue: dev.gnupg.org/T8096
</description>
    <pkglist>
      <collection>
        <package name="gpg2" epoch="0" version="2.4.4" release="8.1" arch="src" src="src/gpg2-2.4.4-8.1.src.rpm">
          <filename>gpg2-2.4.4-8.1.src.rpm</filename>
        </package>
        <package name="gpg2" epoch="0" version="2.4.4" release="8.1" arch="x86_64" src="x86_64/gpg2-2.4.4-8.1.x86_64.rpm">
          <filename>gpg2-2.4.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2-debuginfo" epoch="0" version="2.4.4" release="8.1" arch="x86_64" src="x86_64/gpg2-debuginfo-2.4.4-8.1.x86_64.rpm">
          <filename>gpg2-debuginfo-2.4.4-8.1.x86_64.rpm</filename>
        </package>
        <package name="gpg2-debugsource" epoch="0" version="2.4.4" release="8.1" arch="x86_64" src="x86_64/gpg2-debugsource-2.4.4-8.1.x86_64.rpm">
          <filename>gpg2-debugsource-2.4.4-8.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>609</id>
    <title>Security update for gnutls</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1772799360" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257960" id="1257960" title="VUL-0: CVE-2025-14831: gnutls: excessive resource consumption when verifying  specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258083" id="1258083" title="[NetApp SLES15 SP7 Bug]: Update libgnutls package to avoid binder always getting calculated with SHA256" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14831" id="CVE-2025-14831" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14831" type="cve" />
      <reference href="https://jira.suse.com/browse/PED-15752" id="PED-15752" title="https://jira.suse.com/browse/PED-15752" type="jira" />
      <reference href="https://jira.suse.com/browse/PED-15753" id="PED-15753" title="https://jira.suse.com/browse/PED-15753" type="jira" />
    </references>
    <description>This update for gnutls fixes the following issues:

Add the functionality to allow to specify the hash algorithm for
the PSK. This fixes a bug in the current implementation where the
binder is always calculated with SHA256.

  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred

Security fix:

* CVE-2025-14831: DoS via excessive resource consumption during
  certificate verification (bsc#1257960)

</description>
    <pkglist>
      <collection>
        <package name="gnutls" epoch="0" version="3.8.3" release="6.1" arch="src" src="src/gnutls-3.8.3-6.1.src.rpm">
          <filename>gnutls-3.8.3-6.1.src.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.8.3" release="6.1" arch="x86_64" src="x86_64/gnutls-3.8.3-6.1.x86_64.rpm">
          <filename>gnutls-3.8.3-6.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls-debuginfo" epoch="0" version="3.8.3" release="6.1" arch="x86_64" src="x86_64/gnutls-debuginfo-3.8.3-6.1.x86_64.rpm">
          <filename>gnutls-debuginfo-3.8.3-6.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls-debugsource" epoch="0" version="3.8.3" release="6.1" arch="x86_64" src="x86_64/gnutls-debugsource-3.8.3-6.1.x86_64.rpm">
          <filename>gnutls-debugsource-3.8.3-6.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.8.3" release="6.1" arch="x86_64" src="x86_64/libgnutls30-3.8.3-6.1.x86_64.rpm">
          <filename>libgnutls30-3.8.3-6.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30-debuginfo" epoch="0" version="3.8.3" release="6.1" arch="x86_64" src="x86_64/libgnutls30-debuginfo-3.8.3-6.1.x86_64.rpm">
          <filename>libgnutls30-debuginfo-3.8.3-6.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>622</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773651826" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257490" id="1257490" title="the latest version of libsuseconnect-1.20 ignore product in announce call" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257625" id="1257625" title="Registration to SMT server with suseconnect-ng-1.20.0-3.31.1 failed. Error: Registration server returned 'Not Found' (404)" type="bugzilla" />
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

- Regressions found during QA test runs:
    * Ignore product in announce call (bsc#1257490)
    * Registration to SMT server with failed (bsc#1257625)
</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.20.0" release="2.1" arch="src" src="src/suseconnect-ng-1.20.0-2.1.src.rpm">
          <filename>suseconnect-ng-1.20.0-2.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.20.0" release="2.1" arch="x86_64" src="x86_64/suseconnect-ng-1.20.0-2.1.x86_64.rpm">
          <filename>suseconnect-ng-1.20.0-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>621</id>
    <title>Recommended update for tar</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773651755" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246607" id="1246607" title="The delete flag in tar 1.35 generates a tarball that is unreadable by podman, and possibly by other tools using the Go tar implementation" type="bugzilla" />
    </references>
    <description>This update for tar fixes the following issues:

- Fixes tar creating invalid tarballs when used with --delete (bsc#1246607)
- Add makeinfo build requirement, needed after the addition of the patch
</description>
    <pkglist>
      <collection>
        <package name="tar" epoch="0" version="1.35" release="2.1" arch="src" src="src/tar-1.35-2.1.src.rpm">
          <filename>tar-1.35-2.1.src.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.35" release="2.1" arch="x86_64" src="x86_64/tar-1.35-2.1.x86_64.rpm">
          <filename>tar-1.35-2.1.x86_64.rpm</filename>
        </package>
        <package name="tar-debuginfo" epoch="0" version="1.35" release="2.1" arch="x86_64" src="x86_64/tar-debuginfo-1.35-2.1.x86_64.rpm">
          <filename>tar-debuginfo-1.35-2.1.x86_64.rpm</filename>
        </package>
        <package name="tar-debugsource" epoch="0" version="1.35" release="2.1" arch="x86_64" src="x86_64/tar-debugsource-1.35-2.1.x86_64.rpm">
          <filename>tar-debugsource-1.35-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>615</id>
    <title>Security update for vim</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773227557" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246602" id="1246602" title="VUL-0: CVE-2025-53906: vim: malicious zip archive may cause a path traversal in Vim’s zip" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258229" id="1258229" title="VUL-0: CVE-2026-26269: vim: Netbeans specialKeys stack buffer overflow" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53906" id="CVE-2025-53906" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53906" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26269" id="CVE-2026-26269" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26269" type="cve" />
    </references>
    <description>This update for vim fixes the following issues:

Update Vim to version 9.2.0045:

- CVE-2025-53906: malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602).
- CVE-2026-26269: Netbeans specialKeys stack buffer overflow (bsc#1258229).
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.2.0045" release="1.1" arch="src" src="src/vim-9.2.0045-1.1.src.rpm">
          <filename>vim-9.2.0045-1.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.2.0045" release="1.1" arch="noarch" src="noarch/vim-data-common-9.2.0045-1.1.noarch.rpm">
          <filename>vim-data-common-9.2.0045-1.1.noarch.rpm</filename>
        </package>
        <package name="vim-debugsource" epoch="0" version="9.2.0045" release="1.1" arch="x86_64" src="x86_64/vim-debugsource-9.2.0045-1.1.x86_64.rpm">
          <filename>vim-debugsource-9.2.0045-1.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.2.0045" release="1.1" arch="x86_64" src="x86_64/vim-small-9.2.0045-1.1.x86_64.rpm">
          <filename>vim-small-9.2.0045-1.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small-debuginfo" epoch="0" version="9.2.0045" release="1.1" arch="x86_64" src="x86_64/vim-small-debuginfo-9.2.0045-1.1.x86_64.rpm">
          <filename>vim-small-debuginfo-9.2.0045-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>636</id>
    <title>Security update for salt</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1774331330" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1240532" id="1240532" title="Salt Keys page is loading for abnormally long interval of time" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246130" id="1246130" title="Hardware profile refresh takes 3 hours on top of SLE Micro arm client" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254325" id="1254325" title="salt.modules.postgres fails to modify privileges with PostgreSQL" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254903" id="1254903" title="VUL-0: CVE-2025-67724: python-tornado,python-tornado6: missing validation of the supplied reason phrase" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254904" id="1254904" title="VUL-0: CVE-2025-67726: python-tornado,python-tornado6: inefficient algorithm when parsing parameters for HTTP header values" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254905" id="1254905" title="VUL-0: CVE-2025-67725: python-tornado,python-tornado6: Denial of Service (DoS) via maliciously crafted HTTP request caused by the HTTPHeaders.add method" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254400" id="1254400" title="VUL-0: CVE-2025-13836: python,python3,python310,python311,python312,python313,python36,python39: When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length." type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13836" id="CVE-2025-13836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13836" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67724" id="CVE-2025-67724" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67724" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67725" id="CVE-2025-67725" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67725" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67726" id="CVE-2025-67726" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67726" type="cve" />
    </references>
    <description>This update for salt fixes the following issues:

- Security issues fixed:
  * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903)
  * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905)
  * CVE-2025-67726: Fixed HTTP header parameter parsing algorithm (bsc#1254904)
  * CVE-2025-13836: Set a safe limit to http.client response read (bsc#1254400)

- Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325)
- Use internal deb classes instead of external aptsource lib
- Improved performance of wheel key.finger call (bsc#1240532)
- Improved performance of utils.find_json function (bsc#1246130)
- Extended warn_until period to 2027

</description>
    <pkglist>
      <collection>
        <package name="salt" epoch="0" version="3006.0" release="15.1" arch="src" src="src/salt-3006.0-15.1.src.rpm">
          <filename>salt-3006.0-15.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt" epoch="0" version="3006.0" release="15.1" arch="x86_64" src="x86_64/salt-3006.0-15.1.x86_64.rpm">
          <filename>salt-3006.0-15.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-master" epoch="0" version="3006.0" release="15.1" arch="x86_64" src="x86_64/salt-master-3006.0-15.1.x86_64.rpm">
          <filename>salt-master-3006.0-15.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-minion" epoch="0" version="3006.0" release="15.1" arch="x86_64" src="x86_64/salt-minion-3006.0-15.1.x86_64.rpm">
          <filename>salt-minion-3006.0-15.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="salt-transactional-update" epoch="0" version="3006.0" release="15.1" arch="x86_64" src="x86_64/salt-transactional-update-3006.0-15.1.x86_64.rpm">
          <filename>salt-transactional-update-3006.0-15.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>619</id>
    <title>Security update for busybox</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773336360" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1192869" id="1192869" title="VUL-0: busybox: v1.34.0 bugfixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217580" id="1217580" title="VUL-0: CVE-2023-42363: busybox: use-after-free vulnerability in xasprintf function in xfuncs_printf.c" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217584" id="1217584" title="VUL-0: CVE-2023-42364: busybox: use-after-free in the awk.c evaluate function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1217585" id="1217585" title="VUL-0: CVE-2023-42365: busybox: use-after-free in the awk.c copyvar function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1241661" id="1241661" title="VUL-0: CVE-2025-46394: busybox: files in a TAR archive can have their filenames hidden from a listing if terminal escape sequences are used when naming other files included in the archive" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253245" id="1253245" title="VUL-0: CVE-2025-60876: busybox: request line incorrectly neutralized mat lead to header injection" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258163" id="1258163" title="VUL-0: CVE-2026-26157: busybox: Arbitrary file overwrite and potential code execution via incomplete path sanitization" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258167" id="1258167" title="VUL-0: CVE-2026-26158: busybox: Arbitrary file modification and privilege escalation via unvalidated tar archive entries" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42380" id="CVE-2021-42380" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42380" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42363" id="CVE-2023-42363" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42363" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42364" id="CVE-2023-42364" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42364" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42365" id="CVE-2023-42365" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42365" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46394" id="CVE-2025-46394" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46394" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-60876" id="CVE-2025-60876" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-60876" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26157" id="CVE-2026-26157" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26157" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26158" id="CVE-2026-26158" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26158" type="cve" />
    </references>
    <description>This update for busybox fixes the following issues:

- CVE-2023-42363: use-after-free vulnerability in xasprintf function in xfuncs_printf.c (bsc#1217580).
- CVE-2023-42364: use-after-free in the awk.c evaluate function (bsc#1217584).
- CVE-2023-42365: use-after-free in the awk.c copyvar function (bsc#1217585).
- CVE-2025-46394: files in a TAR archive can have their filenames hidden from a listing if terminal escape sequences are
  used when naming other files included in the archive (bsc#1241661).
- CVE-2025-60876: request line incorrectly neutralized mat lead to header injection (bsc#1253245).
- CVE-2026-26157: Arbitrary file overwrite and potential code execution via incomplete path sanitization (bsc#1258163).
- CVE-2026-26158: Arbitrary file modification and privilege escalation via unvalidated tar archive entries
  (bsc#1258167).
- CVE-2021-42380: Additional fix for use-after-realloc in awk (bsc#1192869).
</description>
    <pkglist>
      <collection>
        <package name="busybox" epoch="0" version="1.36.1" release="3.1" arch="src" src="src/busybox-1.36.1-3.1.src.rpm">
          <filename>busybox-1.36.1-3.1.src.rpm</filename>
        </package>
        <package name="busybox" epoch="0" version="1.36.1" release="3.1" arch="x86_64" src="x86_64/busybox-1.36.1-3.1.x86_64.rpm">
          <filename>busybox-1.36.1-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>623</id>
    <title>Security update for freetype2</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773667454" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252148" id="1252148" title="Please fix the %licence tag for freetype2" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259118" id="1259118" title="VUL-0: CVE-2026-23865: freetype2: Integer overflow in the tt_var_load_item_variation_store function" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23865" id="CVE-2026-23865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23865" type="cve" />
    </references>
    <description>This update for freetype2 fixes the following issue:

Update to freetype2 2.14.2:

- CVE-2026-23865: Integer overflow in the tt_var_load_item_variation_store function (bsc#1259118).

Changelog:

 * Several changes related to LCD filtering are implemented to
 achieve better performance and encourage sound practices.
 * Instead of blanket LCD filtering over the entire bitmap, it
 is now applied only to non-zero spans using direct rendering.
 This speeds up the ClearType-like rendering by more than 40%
 at sizes above 32 ppem.
 * Setting the filter weights with FT_Face_Properties is no
 longer supported. The default and light filters are optimized
 to work with any face.
 * The legacy libXft LCD filter algorithm is no longer provided.
 * The italic angle in `PS_FontInfo` is now stored as a fixed-point
 value in degrees for all Type 1 fonts and their derivatives,
 consistent with CFF fonts and common practices. The broken
 underline position and thickness values are fixed for CFF fonts.
 * The `x` field in the `FT_Span` structure is now unsigned.
 * Demo program `ftgrid` got an option `-m` to select a start
 character to display.
 * Similarly, demo program `ftmulti` got an option `-m` to select a
 text string for rendering.
 * Option `-d` in the demo program `ttdebug` is now called `-a`,
 expecting a comma-separated list of axis values. The user
 interface is also slightly improved.
 * The `ftinspect` demo program can now be compiled with Qt6, too.
 * The auto-hinter got new abilities. It can now better separate
 diacritic glyphs from base glyphs at small sizes by
 artificially moving diacritics up (or down) if necessary
 * Tilde accent glyphs get vertically stretched at small sizes so
 that they don't degenerate to horizontal lines.
 * Diacritics directly attached to a base glyph (like the ogonek in
 character 'ę') no longer distort the shape of the base glyph
 * The TrueType instruction interpreter was optimized to
 produce a 15% gain in the glyph loading speed.
 * Handling of Variation Fonts is now considerably faster
 * TrueType and CFF glyph loading speed has been improved by 5-10%
 on modern 64-bit platforms as a result of better handling of
 fixed-point multiplication.
 * The BDF driver now loads fonts 75% faster.
</description>
    <pkglist>
      <collection>
        <package name="freetype2" epoch="0" version="2.14.2" release="1.1" arch="src" src="src/freetype2-2.14.2-1.1.src.rpm">
          <filename>freetype2-2.14.2-1.1.src.rpm</filename>
        </package>
        <package name="freetype2-debugsource" epoch="0" version="2.14.2" release="1.1" arch="x86_64" src="x86_64/freetype2-debugsource-2.14.2-1.1.x86_64.rpm">
          <filename>freetype2-debugsource-2.14.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="libfreetype6" epoch="0" version="2.14.2" release="1.1" arch="x86_64" src="x86_64/libfreetype6-2.14.2-1.1.x86_64.rpm">
          <filename>libfreetype6-2.14.2-1.1.x86_64.rpm</filename>
        </package>
        <package name="libfreetype6-debuginfo" epoch="0" version="2.14.2" release="1.1" arch="x86_64" src="x86_64/libfreetype6-debuginfo-2.14.2-1.1.x86_64.rpm">
          <filename>libfreetype6-debuginfo-2.14.2-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>626</id>
    <title>Recommended update for cockpit-machines</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773762718" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228187" id="1228187" title="Error opening VM management" type="bugzilla" />
    </references>
    <description>This update for cockpit-machines fixes the following issues:

- Fix: Error opening VM management (bsc#1228187)
</description>
    <pkglist>
      <collection>
        <package name="cockpit-machines" epoch="0" version="305" release="3.1" arch="noarch" src="noarch/cockpit-machines-305-3.1.noarch.rpm">
          <filename>cockpit-machines-305-3.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-machines" epoch="0" version="305" release="3.1" arch="src" src="src/cockpit-machines-305-3.1.src.rpm">
          <filename>cockpit-machines-305-3.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>617</id>
    <title>Security update for curl</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773308309" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259362" id="1259362" title="VUL-0: EMBARGOED: CVE-2026-1965: curl: bad reuse of HTTP Negotiate connection" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259363" id="1259363" title="VUL-0: EMBARGOED: CVE-2026-3783: curl: token leak with redirect and netrc" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259364" id="1259364" title="VUL-0: EMBARGOED: CVE-2026-3784: curl: wrong proxy connection reuse with credentials" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259365" id="1259365" title="VUL-0: EMBARGOED: CVE-2026-3805: curl: use after free in SMB connection reuse" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1965" id="CVE-2026-1965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1965" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3783" id="CVE-2026-3783" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3783" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3784" id="CVE-2026-3784" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3784" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3805" id="CVE-2026-3805" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3805" type="cve" />
    </references>
    <description>This update for curl fixes the following issues:

- CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362).
- CVE-2026-3783: token leak with redirect and netrc (bsc#1259363).
- CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259364).
- CVE-2026-3805: use after free in SMB connection reuse (bsc#1259365).
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.14.1" release="5.1" arch="src" src="src/curl-8.14.1-5.1.src.rpm" embargo_date="2026-03-11 00:00">
          <filename>curl-8.14.1-5.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.14.1" release="5.1" arch="x86_64" src="x86_64/curl-8.14.1-5.1.x86_64.rpm" embargo_date="2026-03-11 00:00">
          <filename>curl-8.14.1-5.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debuginfo" epoch="0" version="8.14.1" release="5.1" arch="x86_64" src="x86_64/curl-debuginfo-8.14.1-5.1.x86_64.rpm" embargo_date="2026-03-11 00:00">
          <filename>curl-debuginfo-8.14.1-5.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debugsource" epoch="0" version="8.14.1" release="5.1" arch="x86_64" src="x86_64/curl-debugsource-8.14.1-5.1.x86_64.rpm" embargo_date="2026-03-11 00:00">
          <filename>curl-debugsource-8.14.1-5.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.14.1" release="5.1" arch="x86_64" src="x86_64/libcurl4-8.14.1-5.1.x86_64.rpm" embargo_date="2026-03-11 00:00">
          <filename>libcurl4-8.14.1-5.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4-debuginfo" epoch="0" version="8.14.1" release="5.1" arch="x86_64" src="x86_64/libcurl4-debuginfo-8.14.1-5.1.x86_64.rpm" embargo_date="2026-03-11 00:00">
          <filename>libcurl4-debuginfo-8.14.1-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>625</id>
    <title>Security update for vim</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773740152" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259051" id="1259051" title="VUL-0: CVE-2026-28417: vim: crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28417" id="CVE-2026-28417" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28417" type="cve" />
    </references>
    <description>This update for vim fixes the following issue:

Update Vim to version 9.2.0110:

- CVE-2026-28417: crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051).
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.2.0110" release="1.1" arch="src" src="src/vim-9.2.0110-1.1.src.rpm">
          <filename>vim-9.2.0110-1.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.2.0110" release="1.1" arch="noarch" src="noarch/vim-data-common-9.2.0110-1.1.noarch.rpm">
          <filename>vim-data-common-9.2.0110-1.1.noarch.rpm</filename>
        </package>
        <package name="vim-debugsource" epoch="0" version="9.2.0110" release="1.1" arch="x86_64" src="x86_64/vim-debugsource-9.2.0110-1.1.x86_64.rpm">
          <filename>vim-debugsource-9.2.0110-1.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.2.0110" release="1.1" arch="x86_64" src="x86_64/vim-small-9.2.0110-1.1.x86_64.rpm">
          <filename>vim-small-9.2.0110-1.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small-debuginfo" epoch="0" version="9.2.0110" release="1.1" arch="x86_64" src="x86_64/vim-small-debuginfo-9.2.0110-1.1.x86_64.rpm">
          <filename>vim-small-debuginfo-9.2.0110-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>629</id>
    <title>Security update for dpkg</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773923518" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259385" id="1259385" title="VUL-0: CVE-2026-2219: dpkg: dpkg-deb: malformed .deb archives can cause a denial of service" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2219" id="CVE-2026-2219" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2219" type="cve" />
    </references>
    <description>This update for dpkg fixes the following issue:

- CVE-2026-2219: dpkg-deb: malformed .deb archives can cause a denial of service (bsc#1259385).
</description>
    <pkglist>
      <collection>
        <package name="update-alternatives" epoch="0" version="1.22.0" release="3.1" arch="src" src="src/update-alternatives-1.22.0-3.1.src.rpm">
          <filename>update-alternatives-1.22.0-3.1.src.rpm</filename>
        </package>
        <package name="update-alternatives" epoch="0" version="1.22.0" release="3.1" arch="x86_64" src="x86_64/update-alternatives-1.22.0-3.1.x86_64.rpm">
          <filename>update-alternatives-1.22.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="update-alternatives-debuginfo" epoch="0" version="1.22.0" release="3.1" arch="x86_64" src="x86_64/update-alternatives-debuginfo-1.22.0-3.1.x86_64.rpm">
          <filename>update-alternatives-debuginfo-1.22.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="update-alternatives-debugsource" epoch="0" version="1.22.0" release="3.1" arch="x86_64" src="x86_64/update-alternatives-debugsource-1.22.0-3.1.x86_64.rpm">
          <filename>update-alternatives-debugsource-1.22.0-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>630</id>
    <title>Security update for python311</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773925479" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252974" id="1252974" title="VUL-0: CVE-2025-6075: python,python27,python3,python310,python311,python312,python313,python36,python39: If the value passed to os.path.expandvars() is user-controlled a  performance degradation is possible when expanding environment  variables." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254400" id="1254400" title="VUL-0: CVE-2025-13836: python,python3,python310,python311,python312,python313,python36,python39: When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254401" id="1254401" title="VUL-0: CVE-2025-13837: python,python3,python310,python311,python312,python313,python36,python39: When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254997" id="1254997" title="VUL-0: CVE-2025-12084: python,python3,python310,python311,python312,python313,python36,python39: cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257029" id="1257029" title="VUL-0: CVE-2025-11468: python3: header injection when folding a long comment in an email header containing exclusively unfoldable characters" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257031" id="1257031" title="VUL-0: CVE-2026-0672: python3: HTTP header injection via user-controlled cookie values and parameters when using http.cookies.Morsel" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257042" id="1257042" title="VUL-0: CVE-2026-0865: python: user-controlled header containing newlines can allow injecting HTTP headers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257046" id="1257046" title="VUL-0: CVE-2025-15282: python: user-controlled data URLs parsed may allow injecting headers" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6075" id="CVE-2025-6075" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6075" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11468" id="CVE-2025-11468" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11468" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12084" id="CVE-2025-12084" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12084" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13836" id="CVE-2025-13836" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13836" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13837" id="CVE-2025-13837" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13837" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15282" id="CVE-2025-15282" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15282" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0672" id="CVE-2026-0672" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0672" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0865" id="CVE-2026-0865" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0865" type="cve" />
    </references>
    <description>This update for python311 fixes the following issues:

Updated to Python 3.11.15:
  
- CVE-2025-6075: quadratic complexity in os.path.expandvars() (bsc#1252974).
- CVE-2025-11468: header injection with carefully crafted inputs (bsc#1257029).
- CVE-2025-12084: quadratic complexity in xml.minidom node ID cache clearing (bsc#1254997).
- CVE-2025-13836: potential memory denial of service in the http.client module (bsc#1254400).
- CVE-2025-13837: potential memory denial of service in the plistlib module (bsc#1254401).
- CVE-2025-15282: control characters in URL media types data (bsc#1257046).
- CVE-2026-0672: control characters in http.cookies.Morsel fields and values (bsc#1257031).
- CVE-2026-0865: C0 control characters within wsgiref.headers.Headers fields, values, and parameters (bsc#1257042).
</description>
    <pkglist>
      <collection>
        <package name="python311" epoch="0" version="3.11.15" release="1.1" arch="src" src="src/python311-3.11.15-1.1.src.rpm">
          <filename>python311-3.11.15-1.1.src.rpm</filename>
        </package>
        <package name="python311" epoch="0" version="3.11.15" release="1.1" arch="x86_64" src="x86_64/python311-3.11.15-1.1.x86_64.rpm">
          <filename>python311-3.11.15-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses" epoch="0" version="3.11.15" release="1.1" arch="x86_64" src="x86_64/python311-curses-3.11.15-1.1.x86_64.rpm">
          <filename>python311-curses-3.11.15-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses-debuginfo" epoch="0" version="3.11.15" release="1.1" arch="x86_64" src="x86_64/python311-curses-debuginfo-3.11.15-1.1.x86_64.rpm">
          <filename>python311-curses-debuginfo-3.11.15-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debuginfo" epoch="0" version="3.11.15" release="1.1" arch="x86_64" src="x86_64/python311-debuginfo-3.11.15-1.1.x86_64.rpm">
          <filename>python311-debuginfo-3.11.15-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debugsource" epoch="0" version="3.11.15" release="1.1" arch="x86_64" src="x86_64/python311-debugsource-3.11.15-1.1.x86_64.rpm">
          <filename>python311-debugsource-3.11.15-1.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0" epoch="0" version="3.11.15" release="1.1" arch="x86_64" src="x86_64/libpython3_11-1_0-3.11.15-1.1.x86_64.rpm">
          <filename>libpython3_11-1_0-3.11.15-1.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0-debuginfo" epoch="0" version="3.11.15" release="1.1" arch="x86_64" src="x86_64/libpython3_11-1_0-debuginfo-3.11.15-1.1.x86_64.rpm">
          <filename>libpython3_11-1_0-debuginfo-3.11.15-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base" epoch="0" version="3.11.15" release="1.1" arch="x86_64" src="x86_64/python311-base-3.11.15-1.1.x86_64.rpm">
          <filename>python311-base-3.11.15-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base-debuginfo" epoch="0" version="3.11.15" release="1.1" arch="x86_64" src="x86_64/python311-base-debuginfo-3.11.15-1.1.x86_64.rpm">
          <filename>python311-base-debuginfo-3.11.15-1.1.x86_64.rpm</filename>
        </package>
        <package name="python311-core" epoch="0" version="3.11.15" release="1.1" arch="src" src="src/python311-core-3.11.15-1.1.src.rpm">
          <filename>python311-core-3.11.15-1.1.src.rpm</filename>
        </package>
        <package name="python311-core-debugsource" epoch="0" version="3.11.15" release="1.1" arch="x86_64" src="x86_64/python311-core-debugsource-3.11.15-1.1.x86_64.rpm">
          <filename>python311-core-debugsource-3.11.15-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>703</id>
    <title>Security update for dnsmasq</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1778578732" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1226091" id="1226091" title="VUL-0: CVE-2023-49441: dnsmasq: integer overflow via forward_query" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235517" id="1235517" title="unknown user or group: dnsmasq with latest proposed dnsmasq update when doing virsh net-start" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235834" id="1235834" title="libidn2 support missing in dnsmasq 2.90 update on SLE-15-SP4 and newer" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258251" id="1258251" title="VUL-0: EMBARGOED: CVE-2026-2291: dnsmasq:  VU#471747: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49441" id="CVE-2023-49441" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49441" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2291" id="CVE-2026-2291" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2291" type="cve" />
    </references>
    <description>This update for dnsmasq fixes the following issues:

Security issues:

- CVE-2023-49441: integer overflow via forward_query (bsc#1226091).
- CVE-2026-2291: VU#471747: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect
  (bsc#1258251).

Non security issue:

- Reintroduce nogroup (bsc#1235517).
</description>
    <pkglist>
      <collection>
        <package name="dnsmasq" epoch="0" version="2.90" release="2.1" arch="src" src="src/dnsmasq-2.90-2.1.src.rpm" embargo_date="2026-03-27 00:00">
          <filename>dnsmasq-2.90-2.1.src.rpm</filename>
        </package>
        <package name="dnsmasq" epoch="0" version="2.90" release="2.1" arch="x86_64" src="x86_64/dnsmasq-2.90-2.1.x86_64.rpm" embargo_date="2026-03-27 00:00">
          <filename>dnsmasq-2.90-2.1.x86_64.rpm</filename>
        </package>
        <package name="dnsmasq-debuginfo" epoch="0" version="2.90" release="2.1" arch="x86_64" src="x86_64/dnsmasq-debuginfo-2.90-2.1.x86_64.rpm" embargo_date="2026-03-27 00:00">
          <filename>dnsmasq-debuginfo-2.90-2.1.x86_64.rpm</filename>
        </package>
        <package name="dnsmasq-debugsource" epoch="0" version="2.90" release="2.1" arch="x86_64" src="x86_64/dnsmasq-debugsource-2.90-2.1.x86_64.rpm" embargo_date="2026-03-27 00:00">
          <filename>dnsmasq-debugsource-2.90-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>631</id>
    <title>Security update for sqlite3</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1773923357" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254670" id="1254670" title="VUL-0: CVE-2025-7709: sqlite3: Integer Overflow in FTS5 Extension" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259619" id="1259619" title="VUL-0: CVE-2025-70873: sqlite3: SQLite zipfile extension may disclose uninitialized heap memory during inflation" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7709" id="CVE-2025-7709" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-7709" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70873" id="CVE-2025-70873" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-70873" type="cve" />
    </references>
    <description>This update for sqlite3 fixes the following issues:

Update to version 3.51.3:

- CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670).
- CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation (bsc#1259619).

Changelog:

Update to version 3.51.3:
  
 * Fix the WAL-reset database corruption bug:
   https://sqlite.org/wal.html#walresetbug
 * Other minor bug fixes.
  
Update to version 3.51.2:
 
 * Fix an obscure deadlock in the new broken-posix-lock detection
   logic.
 * Fix multiple problems in the EXISTS-to-JOIN optimization.
  
Update to version 3.51.1:
 
 * Fix incorrect results from nested EXISTS queries caused by the
   optimization in item 6b in the 3.51.0 release.
 * Fix a latent bug in fts5vocab virtual table, exposed by new
   optimizations in the 3.51.0 release
  
Update to version 3.51.0:
 
 * New macros in sqlite3.h:
   - SQLITE_SCM_BRANCH -&gt; the name of the branch from which the
     source code is taken.
   - SQLITE_SCM_TAGS -&gt; space-separated list of tags on the source
     code check-in.
   - SQLITE_SCM_DATETIME -&gt; ISO-8601 date and time of the source
 * Two new JSON functions, jsonb_each() and jsonb_tree() work the
   same as the existing json_each() and json_tree() functions
   except that they return JSONB for the "value" column when the
   "type" is 'array' or 'object'.
 * The carray and percentile extensions are now built into the
   amalgamation, though they are disabled by default and must be
   activated at compile-time using the -DSQLITE_ENABLE_CARRAY
   and/or -DSQLITE_ENABLE_PERCENTILE options, respectively.
 * Enhancements to TCL Interface:
   - Add the -asdict flag to the eval command to have it set the
     row data as a dict instead of an array.
   - User-defined functions may now break to return an SQL NULL.
 * CLI enhancements:
   - Increase the precision of ".timer" to microseconds.
   - Enhance the "box" and "column" formatting modes to deal with
     double-wide characters.
   - The ".imposter" command provides read-only imposter tables
     that work with VACUUM and do not require the --unsafe-testing
     option.
   - Add the --ifexists option to the CLI command-line option and
     to the .open command.
   - Limit columns widths set by the ".width" command to 30,000 or
     less, as there is not good reason to have wider columns, but
     supporting wider columns provides opportunity to malefactors.
 * Performance enhancements:
   - Use fewer CPU cycles to commit a read transaction.
   - Early detection of joins that return no rows due to one or
     more of the tables containing no rows.
   - Avoid evaluation of scalar subqueries if the result of the
     subquery does not change the result of the overall expression.
   - Faster window function queries when using
     "BETWEEN :x FOLLOWING AND :y FOLLOWING" with a large :y.
 * Add the PRAGMA wal_checkpoint=NOOP; command and the
   SQLITE_CHECKPOINT_NOOP argument for sqlite3_wal_checkpoint_v2().
 * Add the sqlite3_set_errmsg() API for use by extensions.
 * Add the sqlite3_db_status64() API, which works just like the
   existing sqlite3_db_status() API except that it returns 64-bit
   results.
 * Add the SQLITE_DBSTATUS_TEMPBUF_SPILL option to the
   sqlite3_db_status() and sqlite3_db_status64() interfaces.
 * In the session extension add the sqlite3changeset_apply_v3()
   interface.
 * For the built-in printf() and the format() SQL function, omit
   the leading '-' from negative floating point numbers if the '+'
   flag is omitted and the "#" flag is present and all displayed
   digits are '0'. Use '%#f' or similar to avoid outputs like
   '-0.00' and instead show just '0.00'.
 * Improved error messages generated by FTS5.
 * Enforce STRICT typing on computed columns.
 * Improved support for VxWorks
 * JavaScript/WASM now supports 64-bit WASM. The canonical builds
   continue to be 32-bit but creating one's own 64-bit build is
   now as simple as running "make".
</description>
    <pkglist>
      <collection>
        <package name="libsqlite3-0" epoch="0" version="3.51.3" release="1.1" arch="x86_64" src="x86_64/libsqlite3-0-3.51.3-1.1.x86_64.rpm">
          <filename>libsqlite3-0-3.51.3-1.1.x86_64.rpm</filename>
        </package>
        <package name="libsqlite3-0-debuginfo" epoch="0" version="3.51.3" release="1.1" arch="x86_64" src="x86_64/libsqlite3-0-debuginfo-3.51.3-1.1.x86_64.rpm">
          <filename>libsqlite3-0-debuginfo-3.51.3-1.1.x86_64.rpm</filename>
        </package>
        <package name="sqlite3" epoch="0" version="3.51.3" release="1.1" arch="src" src="src/sqlite3-3.51.3-1.1.src.rpm">
          <filename>sqlite3-3.51.3-1.1.src.rpm</filename>
        </package>
        <package name="sqlite3-debugsource" epoch="0" version="3.51.3" release="1.1" arch="x86_64" src="x86_64/sqlite3-debugsource-3.51.3-1.1.x86_64.rpm">
          <filename>sqlite3-debugsource-3.51.3-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>634</id>
    <title>Security update for python-tornado6</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1774257416" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259553" id="1259553" title="VUL-0: CVE-2026-31958: python-tornado,python-tornado6: python-tornado: parsing large multipart bodies with many parts can cause a denial of service" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259630" id="1259630" title="VUL-0: python-tornado,python-tornado6: incomplete validation of cookie attributes allows for injection of user-controlled values in other cookie attributes" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31958" id="CVE-2026-31958" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31958" type="cve" />
    </references>
    <description>This update for python-tornado6 fixes the following issues:

- CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553).
- incomplete validation of cookie attributes allows for injection of user-controlled values in other cookie attributes
  (bsc#1259630).
</description>
    <pkglist>
      <collection>
        <package name="python-tornado6" epoch="0" version="6.4" release="5.1" arch="src" src="src/python-tornado6-6.4-5.1.src.rpm">
          <filename>python-tornado6-6.4-5.1.src.rpm</filename>
        </package>
        <package name="python-tornado6-debugsource" epoch="0" version="6.4" release="5.1" arch="x86_64" src="x86_64/python-tornado6-debugsource-6.4-5.1.x86_64.rpm">
          <filename>python-tornado6-debugsource-6.4-5.1.x86_64.rpm</filename>
        </package>
        <package name="python311-tornado6" epoch="0" version="6.4" release="5.1" arch="x86_64" src="x86_64/python311-tornado6-6.4-5.1.x86_64.rpm">
          <filename>python311-tornado6-6.4-5.1.x86_64.rpm</filename>
        </package>
        <package name="python311-tornado6-debuginfo" epoch="0" version="6.4" release="5.1" arch="x86_64" src="x86_64/python311-tornado6-debuginfo-6.4-5.1.x86_64.rpm">
          <filename>python311-tornado6-debuginfo-6.4-5.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>653</id>
    <title>Recommended update for cloud-init</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1775568009" />
    <references>
    </references>
    <description>This update for cloud-init contains the following fixes:

- Fix dependency replace -serial with -pyserial

- Drop unneeded test dependency on httpretty, fixed long ago

</description>
    <pkglist>
      <collection>
        <package name="cloud-init" epoch="0" version="25.1.3" release="2.1" arch="src" src="src/cloud-init-25.1.3-2.1.src.rpm">
          <filename>cloud-init-25.1.3-2.1.src.rpm</filename>
        </package>
        <package name="cloud-init" epoch="0" version="25.1.3" release="2.1" arch="x86_64" src="x86_64/cloud-init-25.1.3-2.1.x86_64.rpm">
          <filename>cloud-init-25.1.3-2.1.x86_64.rpm</filename>
        </package>
        <package name="cloud-init-config-suse" epoch="0" version="25.1.3" release="2.1" arch="x86_64" src="x86_64/cloud-init-config-suse-25.1.3-2.1.x86_64.rpm">
          <filename>cloud-init-config-suse-25.1.3-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>639</id>
    <title>Recommended update for pcr-oracle</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1774358632" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258119" id="1258119" title="pcr-oracle command segment fault" type="bugzilla" />
    </references>
    <description>This update for pcr-oracle fixes the following issues:

- Fix the potential crash when processing the stop event (bsc#1258119)
</description>
    <pkglist>
      <collection>
        <package name="pcr-oracle" epoch="0" version="0.4.6" release="8.1" arch="src" src="src/pcr-oracle-0.4.6-8.1.src.rpm">
          <filename>pcr-oracle-0.4.6-8.1.src.rpm</filename>
        </package>
        <package name="pcr-oracle" epoch="0" version="0.4.6" release="8.1" arch="x86_64" src="x86_64/pcr-oracle-0.4.6-8.1.x86_64.rpm">
          <filename>pcr-oracle-0.4.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="pcr-oracle-debuginfo" epoch="0" version="0.4.6" release="8.1" arch="x86_64" src="x86_64/pcr-oracle-debuginfo-0.4.6-8.1.x86_64.rpm">
          <filename>pcr-oracle-debuginfo-0.4.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="pcr-oracle-debugsource" epoch="0" version="0.4.6" release="8.1" arch="x86_64" src="x86_64/pcr-oracle-debugsource-0.4.6-8.1.x86_64.rpm">
          <filename>pcr-oracle-debugsource-0.4.6-8.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>640</id>
    <title>Recommended update for libzypp, libsolv, zypper</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1774424344" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1158038" id="1158038" title="xen_server/xen_tools patterns have conflicting pkgs kernel-default-base and kernel-default" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247948" id="1247948" title="zypper fails to download packages if running unprivileged" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252744" id="1252744" title="openSUSE-repos-Leap disables repo on update" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253740" id="1253740" title="keeppackages does not work in Leap 16.0" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257882" id="1257882" title="Need for reporting from zypper which mirror is in use while getting updates with zypper ref or zypper up" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258193" id="1258193" title="[Build25.1]Missing ucode-intel and ucode-amd package after system installation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259311" id="1259311" title="Conflict between two packages providing the same product" type="bugzilla" />
    </references>
    <description>This update for libzypp, libsolv, zypper fixes the following issues:

Changes for libsolv:

- bump version to 0.7.36:
    * respect the "default" attribute in environment optionlist in the comps parser
    * support suse namespace deps in boolean dependencies (bsc#1258193)
    * support for the Elbrus2000 (e2k) architecture
    * support language() suse namespace rewriting

Changes for libzypp:

- Update to version 17.38.5:
    * Fix preloader not caching packages from arch specific subrepos (bsc#1253740)
    * Deprioritize invalid mirrors
- Update to version 17.38.4:
    * Fix Product::referencePackage lookup (bsc#1259311)
      Use a provided autoproduct() as hint to the package name of the release package. 
      It might be that not just multiple versions of the same release package provide 
      the same product version, but also different release packages.
- Update to version 17.38.3:
    * specfile: on fedora use %{_prefix}/share as zyppconfdir if %{_distconfdir} is undefined
      This will set '-DZYPPCONFDIR=%{zyppconfdir}' for cmake.
    * Fall back to a writable location when precaching packages without root (bsc#1247948)
  
Changes for zypper:

- Update to version 1.14.95:
    * Report download progress for command line rpms
    * Hint to '-vv ref' to see the mirrors used to download the metadata (bsc#1257882)
    * Service: Allow "zypper ls SERVICE ..." to test whether 
      a service with this alias is defined (bsc#1252744)
      The command prints an abstract of all services passed on the command line. 
      It returns 3-ZYPPER_EXIT_ERR_INVALID_ARGS if some argument does not name an existing service.
    * Keep repo data when updating the service settings (bsc#1252744)
    * info: Enhance pattern content table (bsc#1158038)
      Alternatives are now listed as a single entry in the content table. 
      The entry shows either the installed package which satisfies the
      requirement or the requirement itself as type 'Provides'.
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.36" release="1.1" arch="src" src="src/libsolv-0.7.36-1.1.src.rpm">
          <filename>libsolv-0.7.36-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-debugsource" epoch="0" version="0.7.36" release="1.1" arch="x86_64" src="x86_64/libsolv-debugsource-0.7.36-1.1.x86_64.rpm">
          <filename>libsolv-debugsource-0.7.36-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.36" release="1.1" arch="x86_64" src="x86_64/libsolv-tools-base-0.7.36-1.1.x86_64.rpm">
          <filename>libsolv-tools-base-0.7.36-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base-debuginfo" epoch="0" version="0.7.36" release="1.1" arch="x86_64" src="x86_64/libsolv-tools-base-debuginfo-0.7.36-1.1.x86_64.rpm">
          <filename>libsolv-tools-base-debuginfo-0.7.36-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.38.5" release="1.1" arch="src" src="src/libzypp-17.38.5-1.1.src.rpm">
          <filename>libzypp-17.38.5-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.38.5" release="1.1" arch="x86_64" src="x86_64/libzypp-17.38.5-1.1.x86_64.rpm">
          <filename>libzypp-17.38.5-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp-debuginfo" epoch="0" version="17.38.5" release="1.1" arch="x86_64" src="x86_64/libzypp-debuginfo-17.38.5-1.1.x86_64.rpm">
          <filename>libzypp-debuginfo-17.38.5-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp-debugsource" epoch="0" version="17.38.5" release="1.1" arch="x86_64" src="x86_64/libzypp-debugsource-17.38.5-1.1.x86_64.rpm">
          <filename>libzypp-debugsource-17.38.5-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.95" release="1.1" arch="src" src="src/zypper-1.14.95-1.1.src.rpm">
          <filename>zypper-1.14.95-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.95" release="1.1" arch="x86_64" src="x86_64/zypper-1.14.95-1.1.x86_64.rpm">
          <filename>zypper-1.14.95-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-debuginfo" epoch="0" version="1.14.95" release="1.1" arch="x86_64" src="x86_64/zypper-debuginfo-1.14.95-1.1.x86_64.rpm">
          <filename>zypper-debuginfo-1.14.95-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-debugsource" epoch="0" version="1.14.95" release="1.1" arch="x86_64" src="x86_64/zypper-debugsource-1.14.95-1.1.x86_64.rpm">
          <filename>zypper-debugsource-1.14.95-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.95" release="1.1" arch="noarch" src="noarch/zypper-needs-restarting-1.14.95-1.1.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.95-1.1.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>637</id>
    <title>Security update for python-pyasn1</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1774343392" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259803" id="1259803" title="VUL-0: CVE-2026-30922: python-pyasn1: Denial of Service via Unbounded Recursion" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-30922" id="CVE-2026-30922" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-30922" type="cve" />
    </references>
    <description>This update for python-pyasn1 fixes the following issue:

- CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).
</description>
    <pkglist>
      <collection>
        <package name="python-pyasn1" epoch="0" version="0.5.0" release="4.1" arch="src" src="src/python-pyasn1-0.5.0-4.1.src.rpm">
          <filename>python-pyasn1-0.5.0-4.1.src.rpm</filename>
        </package>
        <package name="python311-pyasn1" epoch="0" version="0.5.0" release="4.1" arch="noarch" src="noarch/python311-pyasn1-0.5.0-4.1.noarch.rpm">
          <filename>python311-pyasn1-0.5.0-4.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>641</id>
    <title>Security update for capstone</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1774431143" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255309" id="1255309" title="VUL-0: CVE-2025-67873: capstone: Skipdata length unchecked leads to cs_insn.bytes heap buffer overflow" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1255310" id="1255310" title="VUL-0: CVE-2025-68114: capstone: Unchecked vsnprintf return in SStream_concat allows stack buffer underflow&amp;overflow" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67873" id="CVE-2025-67873" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-67873" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68114" id="CVE-2025-68114" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68114" type="cve" />
    </references>
    <description>This update for capstone fixes the following issues:

- CVE-2025-67873: Skipdata length unchecked leads to cs_insn.bytes heap buffer overflow (bsc#1255309).
- CVE-2025-68114: Unchecked vsnprintf return in SStream_concat allows stack buffer overflow (bsc#1255310).
</description>
    <pkglist>
      <collection>
        <package name="capstone" epoch="0" version="4.0.2" release="6.1" arch="src" src="src/capstone-4.0.2-6.1.src.rpm">
          <filename>capstone-4.0.2-6.1.src.rpm</filename>
        </package>
        <package name="capstone-debugsource" epoch="0" version="4.0.2" release="6.1" arch="x86_64" src="x86_64/capstone-debugsource-4.0.2-6.1.x86_64.rpm">
          <filename>capstone-debugsource-4.0.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libcapstone4" epoch="0" version="4.0.2" release="6.1" arch="x86_64" src="x86_64/libcapstone4-4.0.2-6.1.x86_64.rpm">
          <filename>libcapstone4-4.0.2-6.1.x86_64.rpm</filename>
        </package>
        <package name="libcapstone4-debuginfo" epoch="0" version="4.0.2" release="6.1" arch="x86_64" src="x86_64/libcapstone4-debuginfo-4.0.2-6.1.x86_64.rpm">
          <filename>libcapstone4-debuginfo-4.0.2-6.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>642</id>
    <title>Security update for python-PyJWT</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1774431143" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259616" id="1259616" title="VUL-0: CVE-2026-32597: python-PyJWT: PyJWT accepts unknown `crit` header extensions" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32597" id="CVE-2026-32597" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32597" type="cve" />
    </references>
    <description>This update for python-PyJWT fixes the following issue:

- CVE-2026-32597: validate the `crit` Header Parameter defined in RFC 7515 (bsc#1259616).
</description>
    <pkglist>
      <collection>
        <package name="python-PyJWT" epoch="0" version="2.9.0" release="2.1" arch="src" src="src/python-PyJWT-2.9.0-2.1.src.rpm">
          <filename>python-PyJWT-2.9.0-2.1.src.rpm</filename>
        </package>
        <package name="python311-PyJWT" epoch="0" version="2.9.0" release="2.1" arch="noarch" src="noarch/python311-PyJWT-2.9.0-2.1.noarch.rpm">
          <filename>python311-PyJWT-2.9.0-2.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>643</id>
    <title>Security update for docker-compose</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1774516147" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252752" id="1252752" title="VUL-0: CVE-2025-62725: docker-compose: OCI compose artifacts can be used to escape the cache directory and overwrite arbitrary files" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62725" id="CVE-2025-62725" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-62725" type="cve" />
    </references>
    <description>This update for docker-compose fixes the following issue:

- CVE-2025-62725: OCI compose artifacts can be used to escape the cache directory and overwrite arbitrary files
  (bsc#1252752).
</description>
    <pkglist>
      <collection>
        <package name="docker-compose" epoch="0" version="2.33.1" release="4.1" arch="src" src="src/docker-compose-2.33.1-4.1.src.rpm">
          <filename>docker-compose-2.33.1-4.1.src.rpm</filename>
        </package>
        <package name="docker-compose" epoch="0" version="2.33.1" release="4.1" arch="x86_64" src="x86_64/docker-compose-2.33.1-4.1.x86_64.rpm">
          <filename>docker-compose-2.33.1-4.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>644</id>
    <title>Security update for nghttp2</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1774516111" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259845" id="1259845" title="VUL-0: CVE-2026-27135: TRACKERBUG: nghttp2: assertion failure due to missing state validation can lead to DoS" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135" id="CVE-2026-27135" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27135" type="cve" />
    </references>
    <description>This update for nghttp2 fixes the following issue:

- CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
</description>
    <pkglist>
      <collection>
        <package name="libnghttp2-14" epoch="0" version="1.52.0" release="6.1" arch="x86_64" src="x86_64/libnghttp2-14-1.52.0-6.1.x86_64.rpm">
          <filename>libnghttp2-14-1.52.0-6.1.x86_64.rpm</filename>
        </package>
        <package name="libnghttp2-14-debuginfo" epoch="0" version="1.52.0" release="6.1" arch="x86_64" src="x86_64/libnghttp2-14-debuginfo-1.52.0-6.1.x86_64.rpm">
          <filename>libnghttp2-14-debuginfo-1.52.0-6.1.x86_64.rpm</filename>
        </package>
        <package name="nghttp2" epoch="0" version="1.52.0" release="6.1" arch="src" src="src/nghttp2-1.52.0-6.1.src.rpm">
          <filename>nghttp2-1.52.0-6.1.src.rpm</filename>
        </package>
        <package name="nghttp2-debugsource" epoch="0" version="1.52.0" release="6.1" arch="x86_64" src="x86_64/nghttp2-debugsource-1.52.0-6.1.x86_64.rpm">
          <filename>nghttp2-debugsource-1.52.0-6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>645</id>
    <title>Security update for cockpit</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1774605197" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258641" id="1258641" title="VUL-0: CVE-2026-26996: cockpit,cockpit-tukit,cockpit-machines,cockpit-podman: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996" id="CVE-2026-26996" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996" type="cve" />
    </references>
    <description>This update for cockpit fixes the following issue:

- CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character
  that doesn't appear in the test string (bsc#1258641).
</description>
    <pkglist>
      <collection>
        <package name="cockpit" epoch="0" version="309" release="9.1" arch="src" src="src/cockpit-309-9.1.src.rpm">
          <filename>cockpit-309-9.1.src.rpm</filename>
        </package>
        <package name="cockpit" epoch="0" version="309" release="9.1" arch="x86_64" src="x86_64/cockpit-309-9.1.x86_64.rpm">
          <filename>cockpit-309-9.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-bridge" epoch="0" version="309" release="9.1" arch="x86_64" src="x86_64/cockpit-bridge-309-9.1.x86_64.rpm">
          <filename>cockpit-bridge-309-9.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-bridge-debuginfo" epoch="0" version="309" release="9.1" arch="x86_64" src="x86_64/cockpit-bridge-debuginfo-309-9.1.x86_64.rpm">
          <filename>cockpit-bridge-debuginfo-309-9.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-debuginfo" epoch="0" version="309" release="9.1" arch="x86_64" src="x86_64/cockpit-debuginfo-309-9.1.x86_64.rpm">
          <filename>cockpit-debuginfo-309-9.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-debugsource" epoch="0" version="309" release="9.1" arch="x86_64" src="x86_64/cockpit-debugsource-309-9.1.x86_64.rpm">
          <filename>cockpit-debugsource-309-9.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-networkmanager" epoch="0" version="309" release="9.1" arch="noarch" src="noarch/cockpit-networkmanager-309-9.1.noarch.rpm">
          <filename>cockpit-networkmanager-309-9.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-selinux" epoch="0" version="309" release="9.1" arch="noarch" src="noarch/cockpit-selinux-309-9.1.noarch.rpm">
          <filename>cockpit-selinux-309-9.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-storaged" epoch="0" version="309" release="9.1" arch="noarch" src="noarch/cockpit-storaged-309-9.1.noarch.rpm">
          <filename>cockpit-storaged-309-9.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-system" epoch="0" version="309" release="9.1" arch="noarch" src="noarch/cockpit-system-309-9.1.noarch.rpm">
          <filename>cockpit-system-309-9.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-ws" epoch="0" version="309" release="9.1" arch="x86_64" src="x86_64/cockpit-ws-309-9.1.x86_64.rpm">
          <filename>cockpit-ws-309-9.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-ws-debuginfo" epoch="0" version="309" release="9.1" arch="x86_64" src="x86_64/cockpit-ws-debuginfo-309-9.1.x86_64.rpm">
          <filename>cockpit-ws-debuginfo-309-9.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>638</id>
    <title>Security update for systemd</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1774344667" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1228081" id="1228081" title="&quot;systemd-cryptsetup-generator[2606]: Assertion 'i-&gt;idx &gt; 0' failed at src/basic/hashmap.c&quot; messages spewed on tty when systemd is updated" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254293" id="1254293" title="[Build :41692:systemd] openQA test fails in run_ltp. systemd-detect-virt returns non-zero exit code" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1256427" id="1256427" title="SLES 15 SP6: Assertion 'i-&gt;idx &gt; 0' failed at src/basic/hashmap.c:658, function hashmap_iterate_in_internal_order()." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259418" id="1259418" title="VUL-0: EMBARGOED: CVE-2026-29111: systemd: local unprivileged user can trigger an assert in systemd" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259650" id="1259650" title="VUL-0: CVE-2026-4105: systemd: privilege escalation due to improper access control in RegisterMachine D-Bus method" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259697" id="1259697" title="VUL-0: EMBARGOED: systemd: udev: local root execution via malicious hardware devices and unsanitized kernel output" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4105" id="CVE-2026-4105" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4105" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29111" id="CVE-2026-29111" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29111" type="cve" />
    </references>
    <description>This update for systemd fixes the following issues:

Security issues:

- CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650).
- CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418).
- udev: check for invalid chars in various fields received from the kernel (bsc#1259697).

Non security issues:

- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081, bsc#1256427)
- detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)

Changelog:

- a943e3ce2f machined: reject invalid class types when registering machines
- 71593f77db udev: fix review mixup
- 73a89810b4 udev-builtin-net-id: print cescaped bad attributes
- 0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
- 40905232e2 udev: ensure tag parsing stays within bounds
- 7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
- d018ac1ea3 udev: check for invalid chars in various fields received from the kernel
- aef6e11921 core/cgroup: avoid one unnecessary strjoina()
- cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
- 26a748f727 core: validate input cgroup path more prudently
- 99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs
- 8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386
</description>
    <pkglist>
      <collection>
        <package name="libsystemd0" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/libsystemd0-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>libsystemd0-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libsystemd0-debuginfo" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/libsystemd0-debuginfo-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>libsystemd0-debuginfo-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/libudev1-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>libudev1-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="libudev1-debuginfo" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/libudev1-debuginfo-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>libudev1-debuginfo-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="254.27" release="3.1" arch="src" src="src/systemd-254.27-3.1.src.rpm" embargo_date="2026-03-23 20:00">
          <filename>systemd-254.27-3.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/systemd-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>systemd-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/systemd-container-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>systemd-container-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-container-debuginfo" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/systemd-container-debuginfo-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>systemd-container-debuginfo-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-coredump" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/systemd-coredump-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>systemd-coredump-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-coredump-debuginfo" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/systemd-coredump-debuginfo-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>systemd-coredump-debuginfo-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-debuginfo" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/systemd-debuginfo-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>systemd-debuginfo-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-debugsource" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/systemd-debugsource-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>systemd-debugsource-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-experimental" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/systemd-experimental-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>systemd-experimental-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-experimental-debuginfo" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/systemd-experimental-debuginfo-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>systemd-experimental-debuginfo-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/systemd-journal-remote-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>systemd-journal-remote-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-journal-remote-debuginfo" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/systemd-journal-remote-debuginfo-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>systemd-journal-remote-debuginfo-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-portable" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/systemd-portable-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>systemd-portable-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="systemd-portable-debuginfo" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/systemd-portable-debuginfo-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>systemd-portable-debuginfo-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/udev-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>udev-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="udev-debuginfo" epoch="0" version="254.27" release="3.1" arch="x86_64" src="x86_64/udev-debuginfo-254.27-3.1.x86_64.rpm" embargo_date="2026-03-23 20:00">
          <filename>udev-debuginfo-254.27-3.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>648</id>
    <title>Recommended update for rust-keylime</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1774950960" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259963" id="1259963" title="Boot menu listing contains several issues" type="bugzilla" />
    </references>
    <description>This update for rust-keylime fixes the following issues:

- Suggests only the IMA policy package, and keep it as example (bsc#1259963)
- Add a patch to re-generate TSS bindings
- Update to version 0.2.9+8:
    * build(deps):
        + bump thiserror from 2.0.17 to 2.0.18
        + bump docker/login-action from 3 to 4
        + bump docker/metadata-action from 5 to 6
        + bump docker/build-push-action from 6 to 7
        + bump actions/upload-artifact from 6 to 7
        + bump mockoon/cli-action from 2 to 3
        + bump http from 1.3.1 to 1.4.0
        + bump serde from 1.0.219 to 1.0.228
        + bump clap from 4.5.45 to 4.5.54
        + bump actix-web from 4.11.0 to 4.12.1
    * Remove generate-bindings feature from tss-esapi
    * Use port constants instead of hardcoded values in tests
    * push-attestation:
        + use registrar TLS port when TLS is enabled
        + drop support for mTLS to registrar
        + drop mTLS support and require PoP authentication
        + drop self-signed mTLS certificate generation
    * dist: Make the services to conflict with each other
    * cargo:
        + bump tracing_subscriber to version 0.3.20
        + bump time to version 0.3.47
    * Update reqwest from 0.12 to 0.13
    * auth:
        + load CA certificate in authentication client
        + reuse existing ContextInfo to avoid duplicate TPM objects
    * packit: add missing e2e tests
    * registrar: rename insecure option to disable_tls
    * config:
        + add missing config options to keylime-agent.conf
        + add support for "default" in registrar_api_versions option
        + add support for "default" in registrar_tls_ca_cert option
        + drop unused config options and constants
  * resilient_client: reauthenticate if a 403 error is received
</description>
    <pkglist>
      <collection>
        <package name="rust-keylime" epoch="0" version="0.2.9+8" release="1.1" arch="src" src="src/rust-keylime-0.2.9+8-1.1.src.rpm">
          <filename>rust-keylime-0.2.9+8-1.1.src.rpm</filename>
        </package>
        <package name="rust-keylime" epoch="0" version="0.2.9+8" release="1.1" arch="x86_64" src="x86_64/rust-keylime-0.2.9+8-1.1.x86_64.rpm">
          <filename>rust-keylime-0.2.9+8-1.1.x86_64.rpm</filename>
        </package>
        <package name="rust-keylime-debuginfo" epoch="0" version="0.2.9+8" release="1.1" arch="x86_64" src="x86_64/rust-keylime-debuginfo-0.2.9+8-1.1.x86_64.rpm">
          <filename>rust-keylime-debuginfo-0.2.9+8-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>647</id>
    <title>Security update for python311</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1774950108" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257181" id="1257181" title="VUL-0: CVE-2026-1299: python,python3,python310,python311,python312,python313,python36,python39: header injection when an email is serialized due to improper newline quoting in `BytesGenerator`" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259240" id="1259240" title="VUL-0: CVE-2026-2297: python: cpython: incorrectly handled hook in FileLoader can lead to validation bypass" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1299" id="CVE-2026-1299" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1299" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2297" id="CVE-2026-2297" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2297" type="cve" />
    </references>
    <description>This update for python311 fixes the following issues:

- CVE-2026-1299: header injection when an email is serialized due to improper newline quoting (bsc#1257181).
- CVE-2026-2297: validation bypass via incorrectly handled hook in FileLoader (bsc#1259240).
</description>
    <pkglist>
      <collection>
        <package name="python311" epoch="0" version="3.11.15" release="2.1" arch="src" src="src/python311-3.11.15-2.1.src.rpm">
          <filename>python311-3.11.15-2.1.src.rpm</filename>
        </package>
        <package name="python311" epoch="0" version="3.11.15" release="2.1" arch="x86_64" src="x86_64/python311-3.11.15-2.1.x86_64.rpm">
          <filename>python311-3.11.15-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses" epoch="0" version="3.11.15" release="2.1" arch="x86_64" src="x86_64/python311-curses-3.11.15-2.1.x86_64.rpm">
          <filename>python311-curses-3.11.15-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses-debuginfo" epoch="0" version="3.11.15" release="2.1" arch="x86_64" src="x86_64/python311-curses-debuginfo-3.11.15-2.1.x86_64.rpm">
          <filename>python311-curses-debuginfo-3.11.15-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debuginfo" epoch="0" version="3.11.15" release="2.1" arch="x86_64" src="x86_64/python311-debuginfo-3.11.15-2.1.x86_64.rpm">
          <filename>python311-debuginfo-3.11.15-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debugsource" epoch="0" version="3.11.15" release="2.1" arch="x86_64" src="x86_64/python311-debugsource-3.11.15-2.1.x86_64.rpm">
          <filename>python311-debugsource-3.11.15-2.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0" epoch="0" version="3.11.15" release="2.1" arch="x86_64" src="x86_64/libpython3_11-1_0-3.11.15-2.1.x86_64.rpm">
          <filename>libpython3_11-1_0-3.11.15-2.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0-debuginfo" epoch="0" version="3.11.15" release="2.1" arch="x86_64" src="x86_64/libpython3_11-1_0-debuginfo-3.11.15-2.1.x86_64.rpm">
          <filename>libpython3_11-1_0-debuginfo-3.11.15-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base" epoch="0" version="3.11.15" release="2.1" arch="x86_64" src="x86_64/python311-base-3.11.15-2.1.x86_64.rpm">
          <filename>python311-base-3.11.15-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base-debuginfo" epoch="0" version="3.11.15" release="2.1" arch="x86_64" src="x86_64/python311-base-debuginfo-3.11.15-2.1.x86_64.rpm">
          <filename>python311-base-debuginfo-3.11.15-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-core" epoch="0" version="3.11.15" release="2.1" arch="src" src="src/python311-core-3.11.15-2.1.src.rpm">
          <filename>python311-core-3.11.15-2.1.src.rpm</filename>
        </package>
        <package name="python311-core-debugsource" epoch="0" version="3.11.15" release="2.1" arch="x86_64" src="x86_64/python311-core-debugsource-3.11.15-2.1.x86_64.rpm">
          <filename>python311-core-debugsource-3.11.15-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>649</id>
    <title>Security update for python-pyOpenSSL</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1775037929" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259804" id="1259804" title="VUL-0: CVE-2026-27448: python-pyOpenSSL: unhandled exception can result in connection not being cancelled" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259808" id="1259808" title="VUL-0: CVE-2026-27459: python-pyOpenSSL: large cookie value can lead to a buffer overflow" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27448" id="CVE-2026-27448" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27448" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27459" id="CVE-2026-27459" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27459" type="cve" />
    </references>
    <description>This update for python-pyOpenSSL fixes the following issues:

- CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804).
- CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).
</description>
    <pkglist>
      <collection>
        <package name="python-pyOpenSSL" epoch="0" version="24.0.0" release="2.1" arch="src" src="src/python-pyOpenSSL-24.0.0-2.1.src.rpm">
          <filename>python-pyOpenSSL-24.0.0-2.1.src.rpm</filename>
        </package>
        <package name="python311-pyOpenSSL" epoch="0" version="24.0.0" release="2.1" arch="noarch" src="noarch/python311-pyOpenSSL-24.0.0-2.1.noarch.rpm">
          <filename>python311-pyOpenSSL-24.0.0-2.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>650</id>
    <title>Security update for tar</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1775037751" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1246399" id="1246399" title="VUL-0: CVE-2025-45582: tar: file overwrite via directory traversal in crafted TAR archives" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-45582" id="CVE-2025-45582" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-45582" type="cve" />
    </references>
    <description>This update for tar fixes the following issue:

- CVE-2025-45582: file overwrite via directory traversal in crafted TAR archives (bsc#1246399).
</description>
    <pkglist>
      <collection>
        <package name="tar" epoch="0" version="1.35" release="3.1" arch="src" src="src/tar-1.35-3.1.src.rpm">
          <filename>tar-1.35-3.1.src.rpm</filename>
        </package>
        <package name="tar" epoch="0" version="1.35" release="3.1" arch="x86_64" src="x86_64/tar-1.35-3.1.x86_64.rpm">
          <filename>tar-1.35-3.1.x86_64.rpm</filename>
        </package>
        <package name="tar-debuginfo" epoch="0" version="1.35" release="3.1" arch="x86_64" src="x86_64/tar-debuginfo-1.35-3.1.x86_64.rpm">
          <filename>tar-debuginfo-1.35-3.1.x86_64.rpm</filename>
        </package>
        <package name="tar-debugsource" epoch="0" version="1.35" release="3.1" arch="x86_64" src="x86_64/tar-debugsource-1.35-3.1.x86_64.rpm">
          <filename>tar-debugsource-1.35-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>651</id>
    <title>Recommended update for crypto-policies</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1775135522" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258311" id="1258311" title="openssh-9.6p1-150600.6.34.1.x86_64 prints warning not ready for post-quantum key exchange algorithms" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259825" id="1259825" title="L3-Question: Crypto policy disables post-quantum OpenSSH KEX" type="bugzilla" />
    </references>
    <description>This update for crypto-policies fixes the following issues:

- Add PQC support for OpenSSH (bsc#1258311, bsc#1259825)
    * Enable and prioritize sntrup761x25519-sha512 for OpenSSH by default
</description>
    <pkglist>
      <collection>
        <package name="crypto-policies" epoch="0" version="20230920.570ea89" release="2.1" arch="noarch" src="noarch/crypto-policies-20230920.570ea89-2.1.noarch.rpm">
          <filename>crypto-policies-20230920.570ea89-2.1.noarch.rpm</filename>
        </package>
        <package name="crypto-policies" epoch="0" version="20230920.570ea89" release="2.1" arch="src" src="src/crypto-policies-20230920.570ea89-2.1.src.rpm">
          <filename>crypto-policies-20230920.570ea89-2.1.src.rpm</filename>
        </package>
        <package name="crypto-policies-scripts" epoch="0" version="20230920.570ea89" release="2.1" arch="noarch" src="noarch/crypto-policies-scripts-20230920.570ea89-2.1.noarch.rpm">
          <filename>crypto-policies-scripts-20230920.570ea89-2.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>654</id>
    <title>Security update for expat</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1775587945" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259711" id="1259711" title="VUL-0: CVE-2026-32777: expat: libexpat: denial of service due to infinite loop in DTD content parsing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259726" id="1259726" title="VUL-0: CVE-2026-32776: expat: libexpat: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259729" id="1259729" title="VUL-0: CVE-2026-32778: expat: libexpat: NULL pointer dereference in `setContext` on retry after an out-of-memory condition" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32776" id="CVE-2026-32776" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32776" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32777" id="CVE-2026-32777" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32777" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32778" id="CVE-2026-32778" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32778" type="cve" />
    </references>
    <description>This update for expat fixes the following issues:

- CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity
  declaration value (bsc#1259726).
- CVE-2026-32777: denial of service due to infinite loop in DTD content parsing (bsc#1259711).
- CVE-2026-32778: NULL pointer dereference in `setContext` on retry after an out-of-memory condition (bsc#1259729).
</description>
    <pkglist>
      <collection>
        <package name="expat" epoch="0" version="2.7.1" release="5.1" arch="src" src="src/expat-2.7.1-5.1.src.rpm">
          <filename>expat-2.7.1-5.1.src.rpm</filename>
        </package>
        <package name="expat-debugsource" epoch="0" version="2.7.1" release="5.1" arch="x86_64" src="x86_64/expat-debugsource-2.7.1-5.1.x86_64.rpm">
          <filename>expat-debugsource-2.7.1-5.1.x86_64.rpm</filename>
        </package>
        <package name="libexpat1" epoch="0" version="2.7.1" release="5.1" arch="x86_64" src="x86_64/libexpat1-2.7.1-5.1.x86_64.rpm">
          <filename>libexpat1-2.7.1-5.1.x86_64.rpm</filename>
        </package>
        <package name="libexpat1-debuginfo" epoch="0" version="2.7.1" release="5.1" arch="x86_64" src="x86_64/libexpat1-debuginfo-2.7.1-5.1.x86_64.rpm">
          <filename>libexpat1-debuginfo-2.7.1-5.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>652</id>
    <title>Security update for polkit</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1775562564" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260859" id="1260859" title="VUL-0: CVE-2026-4897: polkit: missing checks allow for unbounded memory allocation and can lead to an OOM condition when `polkit-agent-helper-1` is provided specially crafted input" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4897" id="CVE-2026-4897" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4897" type="cve" />
    </references>
    <description>This update for polkit fixes the following issue:

- CVE-2026-4897: Fixed possible OOM condition via specially crafted input to `polkit-agent-helper-1` (bsc#1260859).
</description>
    <pkglist>
      <collection>
        <package name="libpolkit-agent-1-0" epoch="0" version="121" release="4.1" arch="x86_64" src="x86_64/libpolkit-agent-1-0-121-4.1.x86_64.rpm">
          <filename>libpolkit-agent-1-0-121-4.1.x86_64.rpm</filename>
        </package>
        <package name="libpolkit-agent-1-0-debuginfo" epoch="0" version="121" release="4.1" arch="x86_64" src="x86_64/libpolkit-agent-1-0-debuginfo-121-4.1.x86_64.rpm">
          <filename>libpolkit-agent-1-0-debuginfo-121-4.1.x86_64.rpm</filename>
        </package>
        <package name="libpolkit-gobject-1-0" epoch="0" version="121" release="4.1" arch="x86_64" src="x86_64/libpolkit-gobject-1-0-121-4.1.x86_64.rpm">
          <filename>libpolkit-gobject-1-0-121-4.1.x86_64.rpm</filename>
        </package>
        <package name="libpolkit-gobject-1-0-debuginfo" epoch="0" version="121" release="4.1" arch="x86_64" src="x86_64/libpolkit-gobject-1-0-debuginfo-121-4.1.x86_64.rpm">
          <filename>libpolkit-gobject-1-0-debuginfo-121-4.1.x86_64.rpm</filename>
        </package>
        <package name="polkit" epoch="0" version="121" release="4.1" arch="src" src="src/polkit-121-4.1.src.rpm">
          <filename>polkit-121-4.1.src.rpm</filename>
        </package>
        <package name="polkit" epoch="0" version="121" release="4.1" arch="x86_64" src="x86_64/polkit-121-4.1.x86_64.rpm">
          <filename>polkit-121-4.1.x86_64.rpm</filename>
        </package>
        <package name="polkit-debuginfo" epoch="0" version="121" release="4.1" arch="x86_64" src="x86_64/polkit-debuginfo-121-4.1.x86_64.rpm">
          <filename>polkit-debuginfo-121-4.1.x86_64.rpm</filename>
        </package>
        <package name="polkit-debugsource" epoch="0" version="121" release="4.1" arch="x86_64" src="x86_64/polkit-debugsource-121-4.1.x86_64.rpm">
          <filename>polkit-debugsource-121-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>655</id>
    <title>Security update for python-requests</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1775657471" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260589" id="1260589" title="VUL-0: CVE-2026-25645: python-requests: `extract_zipped_paths()` uses predictable filenames when extracting files from zip archives and reuses target files that already exist without validation" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25645" id="CVE-2026-25645" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25645" type="cve" />
    </references>
    <description>This update for python-requests fixes the following issue:

- CVE-2026-25645: `extract_zipped_paths()` uses predictable filenames when extracting files from zip archives and reuses
  target files that already exist without validation (bsc#1260589).
</description>
    <pkglist>
      <collection>
        <package name="python-requests" epoch="0" version="2.32.3" release="3.1" arch="src" src="src/python-requests-2.32.3-3.1.src.rpm">
          <filename>python-requests-2.32.3-3.1.src.rpm</filename>
        </package>
        <package name="python311-requests" epoch="0" version="2.32.3" release="3.1" arch="noarch" src="noarch/python311-requests-2.32.3-3.1.noarch.rpm">
          <filename>python311-requests-2.32.3-3.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>656</id>
    <title>Security update for libtpms</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1775657790" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1244528" id="1244528" title="VUL-0: CVE-2025-49133: libtpms: potential out of bounds (OOB) read vulnerability" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49133" id="CVE-2025-49133" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49133" type="cve" />
    </references>
    <description>This update for libtpms fixes the following issues:

- CVE-2025-49133: out-of-bounds (OOB) access due to HMAC signing issue leads to abort and vTPM DoS (bsc#1244528).
</description>
    <pkglist>
      <collection>
        <package name="libtpms" epoch="0" version="0.9.6" release="2.1" arch="src" src="src/libtpms-0.9.6-2.1.src.rpm">
          <filename>libtpms-0.9.6-2.1.src.rpm</filename>
        </package>
        <package name="libtpms-debugsource" epoch="0" version="0.9.6" release="2.1" arch="x86_64" src="x86_64/libtpms-debugsource-0.9.6-2.1.x86_64.rpm">
          <filename>libtpms-debugsource-0.9.6-2.1.x86_64.rpm</filename>
        </package>
        <package name="libtpms0" epoch="0" version="0.9.6" release="2.1" arch="x86_64" src="x86_64/libtpms0-0.9.6-2.1.x86_64.rpm">
          <filename>libtpms0-0.9.6-2.1.x86_64.rpm</filename>
        </package>
        <package name="libtpms0-debuginfo" epoch="0" version="0.9.6" release="2.1" arch="x86_64" src="x86_64/libtpms0-debuginfo-0.9.6-2.1.x86_64.rpm">
          <filename>libtpms0-debuginfo-0.9.6-2.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>664</id>
    <title>Recommended update for dpdk</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776153280" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260007" id="1260007" title="dpdk-testpmd fail when using ice drivers with &quot;EAL: libarchive not linked &lt;snip&gt; ice.pkg.xz cannot be decompressed&quot;" type="bugzilla" />
    </references>
    <description>This update for dpdk fixes the following issues:

- Update to version 22.11.11:
    * upstream bugfix release
    * Summary:
        + app/testpmd: fix conntrack action query, fix DCB Rx queues,
          fix DCB Tx port, fix flex item link parsing
        + common/cnxk: fix async event handling
        + common/mlx5: release unused mempool entries
        + crypto/ipsec_mb: fix QP release in secondary
        + dmadev: fix debug build with tracepoints
        + dma/hisilicon: fix stop with pending transfers
        + doc: improve documentation for conntrack state inspect
          command, device argument in txgbe and ionic
        + eal: fix DMA mask validation with IOVA mode option
        + efd: fix AVX2 support
        + event/cnxk: fix Rx offload flags
        + eventdev: fix listing timer adapters with telemetry
        + fib6: fix tbl8 allocation check logic
        + graph: fix unaligned access in stats
        + hash: fix unaligned access in predictable RSS
        + net/af_packet: fix crash in secondary process
        + net/ark: remove double mbuf free
        + net/bonding: fix MAC address propagation in 802.3ad mode
        + net/dpaa2: fix duplicate call of close
        + net/dpaa2: fix L3/L4 checksum results
        + net/dpaa2: receive packets with additional parse errors
        + net/dpaa: fix resource leak
        + net/ena/base: fix unsafe memcpy on invalid memory
        + net/ena: fix PCI BAR mapping on 64K page size
        + net/enetfec: fix checksum flag handling and error return
        + net/enetfec: fix file descriptor leak on read error
        + net/enetfec: fix memory leak in Rx buffer cleanup
        + net/enetfec: fix out-of-bounds access in UIO mapping
        + net/enetfec: fix Tx queue free
        + net: fix L2 length for GRE packets
        + net/hns3: fix VLAN resources freeing
        + net/hns3: fix VLAN tag loss for short tunnel frame
        + net/i40e: fix symmetric Toeplitz hashing for SCTP
        + net/ice/base: fix integer overflow on NVM init
        + net/ice/base: fix memory leak in HW profile handling
        + net/ice/base: fix memory leak in recipe handling
        + net/ice: fix initialization with 8 ports
        + net/ice: fix memory leak in raw pattern parse
        + net/ice: fix path selection for QinQ Tx offload
        + net/ice: fix vector Rx VLAN offload flags
        + net/mlx5: fix connection tracking state item validation
        + net/mlx5: fix control flow leakage for external SQ
        + net/mlx5: fix ESP header match after UDP for group 0
        + net/mlx5: fix flow aging race condition
        + net/mlx5: fix min and max MTU reporting
        + net/mlx5/hws: fix buddy memory allocation
        + net/ngbe: reduce memory size of ring descriptors
        + net/tap: fix interrupt callback crash after failed start
        + net/txgbe: various FDIR fixes
        + net/vmxnet3: fix mapping of mempools to queues
        + test/crypto: fix vector initialization
        + test/debug: fix crash with mlx5 devices
        + test/debug: fix IOVA mode on PPC64 without huge pages
        + vfio: fix custom containers in multiprocess
        + vhost: fix double fetch when dequeue offloading
- Add libarchive as dependency, avoid errors like
 '/lib/firmware/... cannot be decompressed' (bsc#1260007)
</description>
    <pkglist>
      <collection>
        <package name="dpdk" epoch="0" version="22.11.11" release="1.1" arch="src" src="src/dpdk-22.11.11-1.1.src.rpm">
          <filename>dpdk-22.11.11-1.1.src.rpm</filename>
        </package>
        <package name="dpdk" epoch="0" version="22.11.11" release="1.1" arch="x86_64" src="x86_64/dpdk-22.11.11-1.1.x86_64.rpm">
          <filename>dpdk-22.11.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="dpdk-debuginfo" epoch="0" version="22.11.11" release="1.1" arch="x86_64" src="x86_64/dpdk-debuginfo-22.11.11-1.1.x86_64.rpm">
          <filename>dpdk-debuginfo-22.11.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="dpdk-debugsource" epoch="0" version="22.11.11" release="1.1" arch="x86_64" src="x86_64/dpdk-debugsource-22.11.11-1.1.x86_64.rpm">
          <filename>dpdk-debugsource-22.11.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="libdpdk-23" epoch="0" version="22.11.11" release="1.1" arch="x86_64" src="x86_64/libdpdk-23-22.11.11-1.1.x86_64.rpm">
          <filename>libdpdk-23-22.11.11-1.1.x86_64.rpm</filename>
        </package>
        <package name="libdpdk-23-debuginfo" epoch="0" version="22.11.11" release="1.1" arch="x86_64" src="x86_64/libdpdk-23-debuginfo-22.11.11-1.1.x86_64.rpm">
          <filename>libdpdk-23-debuginfo-22.11.11-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>659</id>
    <title>Security update for glibc</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1775731318" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260078" id="1260078" title="VUL-0: CVE-2026-4437: glibc: incorrect DNS response parsing via crafted DNS server response" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260082" id="1260082" title="VUL-0: CVE-2026-4438: glibc: invalid DNS hostname returned via gethostbyaddr functions" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4437" id="CVE-2026-4437" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4437" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4438" id="CVE-2026-4438" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4438" type="cve" />
    </references>
    <description>This update for glibc fixes the following issues:

- CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078).
- CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082).
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.38" release="12.1" arch="src" src="src/glibc-2.38-12.1.src.rpm">
          <filename>glibc-2.38-12.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.38" release="12.1" arch="x86_64" src="x86_64/glibc-2.38-12.1.x86_64.rpm">
          <filename>glibc-2.38-12.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-debuginfo" epoch="0" version="2.38" release="12.1" arch="x86_64" src="x86_64/glibc-debuginfo-2.38-12.1.x86_64.rpm">
          <filename>glibc-debuginfo-2.38-12.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-debugsource" epoch="0" version="2.38" release="12.1" arch="x86_64" src="x86_64/glibc-debugsource-2.38-12.1.x86_64.rpm">
          <filename>glibc-debugsource-2.38-12.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.38" release="12.1" arch="x86_64" src="x86_64/glibc-devel-2.38-12.1.x86_64.rpm">
          <filename>glibc-devel-2.38-12.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel-debuginfo" epoch="0" version="2.38" release="12.1" arch="x86_64" src="x86_64/glibc-devel-debuginfo-2.38-12.1.x86_64.rpm">
          <filename>glibc-devel-debuginfo-2.38-12.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.38" release="12.1" arch="x86_64" src="x86_64/glibc-locale-2.38-12.1.x86_64.rpm">
          <filename>glibc-locale-2.38-12.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.38" release="12.1" arch="x86_64" src="x86_64/glibc-locale-base-2.38-12.1.x86_64.rpm">
          <filename>glibc-locale-base-2.38-12.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base-debuginfo" epoch="0" version="2.38" release="12.1" arch="x86_64" src="x86_64/glibc-locale-base-debuginfo-2.38-12.1.x86_64.rpm">
          <filename>glibc-locale-base-debuginfo-2.38-12.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>660</id>
    <title>Security update for libpng16</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1775729735" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260754" id="1260754" title="VUL-0: CVE-2026-33416: libpng12,libpng15,libpng16: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260755" id="1260755" title="VUL-0: CVE-2026-33636: libpng16: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and crashes" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33416" id="CVE-2026-33416" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33416" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33636" id="CVE-2026-33636" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33636" type="cve" />
    </references>
    <description>This update for libpng16 fixes the following issues:

- CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code
  execution (bsc#1260754).
- CVE-2026-33636: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and
  crashes (bsc#1260755).
</description>
    <pkglist>
      <collection>
        <package name="libpng16" epoch="0" version="1.6.43" release="4.1" arch="src" src="src/libpng16-1.6.43-4.1.src.rpm">
          <filename>libpng16-1.6.43-4.1.src.rpm</filename>
        </package>
        <package name="libpng16-16" epoch="0" version="1.6.43" release="4.1" arch="x86_64" src="x86_64/libpng16-16-1.6.43-4.1.x86_64.rpm">
          <filename>libpng16-16-1.6.43-4.1.x86_64.rpm</filename>
        </package>
        <package name="libpng16-16-debuginfo" epoch="0" version="1.6.43" release="4.1" arch="x86_64" src="x86_64/libpng16-16-debuginfo-1.6.43-4.1.x86_64.rpm">
          <filename>libpng16-16-debuginfo-1.6.43-4.1.x86_64.rpm</filename>
        </package>
        <package name="libpng16-debugsource" epoch="0" version="1.6.43" release="4.1" arch="x86_64" src="x86_64/libpng16-debugsource-1.6.43-4.1.x86_64.rpm">
          <filename>libpng16-debugsource-1.6.43-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>662</id>
    <title>Security update for NetworkManager</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1775825029" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257359" id="1257359" title="VUL-0: CVE-2025-9615: NetworkManager: NetworkManager File Access" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9615" id="CVE-2025-9615" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9615" type="cve" />
    </references>
    <description>This update for NetworkManager fixes the following issues:

- CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359).
</description>
    <pkglist>
      <collection>
        <package name="NetworkManager" epoch="0" version="1.42.6" release="8.1" arch="src" src="src/NetworkManager-1.42.6-8.1.src.rpm">
          <filename>NetworkManager-1.42.6-8.1.src.rpm</filename>
        </package>
        <package name="NetworkManager" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/NetworkManager-1.42.6-8.1.x86_64.rpm">
          <filename>NetworkManager-1.42.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-bluetooth" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/NetworkManager-bluetooth-1.42.6-8.1.x86_64.rpm">
          <filename>NetworkManager-bluetooth-1.42.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-bluetooth-debuginfo" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/NetworkManager-bluetooth-debuginfo-1.42.6-8.1.x86_64.rpm">
          <filename>NetworkManager-bluetooth-debuginfo-1.42.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-cloud-setup" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/NetworkManager-cloud-setup-1.42.6-8.1.x86_64.rpm">
          <filename>NetworkManager-cloud-setup-1.42.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-cloud-setup-debuginfo" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/NetworkManager-cloud-setup-debuginfo-1.42.6-8.1.x86_64.rpm">
          <filename>NetworkManager-cloud-setup-debuginfo-1.42.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-debuginfo" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/NetworkManager-debuginfo-1.42.6-8.1.x86_64.rpm">
          <filename>NetworkManager-debuginfo-1.42.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-debugsource" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/NetworkManager-debugsource-1.42.6-8.1.x86_64.rpm">
          <filename>NetworkManager-debugsource-1.42.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-pppoe" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/NetworkManager-pppoe-1.42.6-8.1.x86_64.rpm">
          <filename>NetworkManager-pppoe-1.42.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-pppoe-debuginfo" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/NetworkManager-pppoe-debuginfo-1.42.6-8.1.x86_64.rpm">
          <filename>NetworkManager-pppoe-debuginfo-1.42.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-tui" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/NetworkManager-tui-1.42.6-8.1.x86_64.rpm">
          <filename>NetworkManager-tui-1.42.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-tui-debuginfo" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/NetworkManager-tui-debuginfo-1.42.6-8.1.x86_64.rpm">
          <filename>NetworkManager-tui-debuginfo-1.42.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-wwan" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/NetworkManager-wwan-1.42.6-8.1.x86_64.rpm">
          <filename>NetworkManager-wwan-1.42.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="NetworkManager-wwan-debuginfo" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/NetworkManager-wwan-debuginfo-1.42.6-8.1.x86_64.rpm">
          <filename>NetworkManager-wwan-debuginfo-1.42.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="libnm0" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/libnm0-1.42.6-8.1.x86_64.rpm">
          <filename>libnm0-1.42.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="libnm0-debuginfo" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/libnm0-debuginfo-1.42.6-8.1.x86_64.rpm">
          <filename>libnm0-debuginfo-1.42.6-8.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-NM-1_0" epoch="0" version="1.42.6" release="8.1" arch="x86_64" src="x86_64/typelib-1_0-NM-1_0-1.42.6-8.1.x86_64.rpm">
          <filename>typelib-1_0-NM-1_0-1.42.6-8.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>666</id>
    <title>Security update for python-cryptography</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776153469" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260876" id="1260876" title="VUL-0: CVE-2026-34073: python-cryptography: X.509 bypass of name constraints on wildcard SANs with matching peer names" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34073" id="CVE-2026-34073" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34073" type="cve" />
    </references>
    <description>This update for python-cryptography fixes the following issues:

- CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. (bsc#1260876)
</description>
    <pkglist>
      <collection>
        <package name="python-cryptography" epoch="0" version="42.0.4" release="4.1" arch="src" src="src/python-cryptography-42.0.4-4.1.src.rpm">
          <filename>python-cryptography-42.0.4-4.1.src.rpm</filename>
        </package>
        <package name="python311-cryptography" epoch="0" version="42.0.4" release="4.1" arch="x86_64" src="x86_64/python311-cryptography-42.0.4-4.1.x86_64.rpm">
          <filename>python311-cryptography-42.0.4-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>661</id>
    <title>Recommended update for cloud-regionsrv-client</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1775729735" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247539" id="1247539" title="credentials do not get cleaned up under certain scenario" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253777" id="1253777" title="[sle-15-SP5-Azure-BYOS] registration pass but not repos are added" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254702" id="1254702" title="smt server entry twice in /etc/hosts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254960" id="1254960" title="Confusing &quot;sessions must be restarted&quot; message from registercloudguest" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254982" id="1254982" title="Occasional zypper login failed errors after successful registration" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254984" id="1254984" title="Occasional registration issues on Azure and GCE OnDemand issues" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260421" id="1260421" title="cloud-regionsrv-client is missing dependency on iputils" type="bugzilla" />
      <reference href="https://jira.suse.com/browse/PED-14732" id="PED-14732" title="https://jira.suse.com/browse/PED-14732" type="jira" />
    </references>
    <description>This update for cloud-regionsrv-client fixes the following issues:

Update to version 11.0.2 (bsc#1260421)

  + Add iputils as a dependency to make automatic NVIDIA repo enablement
    work

Update to version 11.0.1

  + Fix attempt to read a deleted file resulting in an error. Refresh
    the file list for repos and services for each pass over the
    server domains we are looking to clean up the registration.
  + Update user visible messages only showing messages for the
    application configuration file.

Update to version 11.0.0 (bsc#1254960, bsc#1254982, bsc#1253777)

  + Major version bump for main package and plugin sub-packages due to
    interpreter change in SLE 15 SP4+ from Python 3.6 to Python 3.11
  + Create cache directory in code and drop from package (jsc#PED-14732)
  + Fix race condition between license watcher timer and registration
    (bsc#1254984)
  + Fix cleanup issue in hosts (bsc#1254702)
  + Fix cache clean up
  + Fix exit condition from container registry setup
  + Lock the registration process to ensure single execution (bsc#1254984)
  + Fix traceback on FP and cert mismatch
  + Switch remaining code to updated logging implementation
  + Increase loggin information in log to help with issue debugging
  + Fix exit code on partial registration success
  + Remove obsolete switchcloudguestservices

Update to version 10.5.3

  + Move project setup to poetry and apply python standards
  + Fix use of logging facility
    Use logging facility in the desired way throughout the entire
    code base. This includes the following changes and refactor
    * Add handler and formatter for the logfile containing more
      information about function and position in code for the message
    * Add handler for stdout (INFO and WARNING)
    * Add handler for stderr (ERROR).
    * Implement Logger class providing the logging setup and methods
    * Drop the start_logging() method.
    * Fix and refactor all unit tests around the use of logging
      with a proper fixture and place all tests for registerutils
      into its own class TestRegisterUtils.
    * Add --debug switch for registercloudguest. Allow to increase
      logfile information. All messages produced via log.debug(...)
      in code will be part of the logfile. Debug messages will not
      be shown on the console
    * Update SLE12 patches due to logging refactor
    * Use --debug flag in guestregister service
</description>
    <pkglist>
      <collection>
        <package name="cloud-regionsrv-client" epoch="0" version="11.0.2" release="8.1" arch="noarch" src="noarch/cloud-regionsrv-client-11.0.2-8.1.noarch.rpm">
          <filename>cloud-regionsrv-client-11.0.2-8.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client" epoch="0" version="11.0.2" release="8.1" arch="src" src="src/cloud-regionsrv-client-11.0.2-8.1.src.rpm">
          <filename>cloud-regionsrv-client-11.0.2-8.1.src.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-generic-config" epoch="0" version="1.0.0" release="8.1" arch="noarch" src="noarch/cloud-regionsrv-client-generic-config-1.0.0-8.1.noarch.rpm">
          <filename>cloud-regionsrv-client-generic-config-1.0.0-8.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-azure" epoch="0" version="3.0.0" release="8.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-azure-3.0.0-8.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-azure-3.0.0-8.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-ec2" epoch="0" version="2.0.0" release="8.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-ec2-2.0.0-8.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-ec2-2.0.0-8.1.noarch.rpm</filename>
        </package>
        <package name="cloud-regionsrv-client-plugin-gce" epoch="0" version="2.0.0" release="8.1" arch="noarch" src="noarch/cloud-regionsrv-client-plugin-gce-2.0.0-8.1.noarch.rpm">
          <filename>cloud-regionsrv-client-plugin-gce-2.0.0-8.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>667</id>
    <title>Security update for avahi</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776153702" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257235" id="1257235" title="VUL-0: CVE-2026-24401: avahi,avahi-glib2: avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24401" id="CVE-2026-24401" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24401" type="cve" />
    </references>
    <description>This update for avahi fixes the following issues:

- CVE-2026-24401: Fix unsolicited mDNS response containing a recursive CNAME record. (bsc#1257235)
</description>
    <pkglist>
      <collection>
        <package name="avahi" epoch="0" version="0.8" release="8.1" arch="src" src="src/avahi-0.8-8.1.src.rpm">
          <filename>avahi-0.8-8.1.src.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="8.1" arch="x86_64" src="x86_64/avahi-0.8-8.1.x86_64.rpm">
          <filename>avahi-0.8-8.1.x86_64.rpm</filename>
        </package>
        <package name="avahi-debuginfo" epoch="0" version="0.8" release="8.1" arch="x86_64" src="x86_64/avahi-debuginfo-0.8-8.1.x86_64.rpm">
          <filename>avahi-debuginfo-0.8-8.1.x86_64.rpm</filename>
        </package>
        <package name="avahi-debugsource" epoch="0" version="0.8" release="8.1" arch="x86_64" src="x86_64/avahi-debugsource-0.8-8.1.x86_64.rpm">
          <filename>avahi-debugsource-0.8-8.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="8.1" arch="x86_64" src="x86_64/libavahi-client3-0.8-8.1.x86_64.rpm">
          <filename>libavahi-client3-0.8-8.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3-debuginfo" epoch="0" version="0.8" release="8.1" arch="x86_64" src="x86_64/libavahi-client3-debuginfo-0.8-8.1.x86_64.rpm">
          <filename>libavahi-client3-debuginfo-0.8-8.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="8.1" arch="x86_64" src="x86_64/libavahi-common3-0.8-8.1.x86_64.rpm">
          <filename>libavahi-common3-0.8-8.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3-debuginfo" epoch="0" version="0.8" release="8.1" arch="x86_64" src="x86_64/libavahi-common3-debuginfo-0.8-8.1.x86_64.rpm">
          <filename>libavahi-common3-debuginfo-0.8-8.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="8.1" arch="x86_64" src="x86_64/libavahi-core7-0.8-8.1.x86_64.rpm">
          <filename>libavahi-core7-0.8-8.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7-debuginfo" epoch="0" version="0.8" release="8.1" arch="x86_64" src="x86_64/libavahi-core7-debuginfo-0.8-8.1.x86_64.rpm">
          <filename>libavahi-core7-debuginfo-0.8-8.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>665</id>
    <title>Security update for vim</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776153249" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259985" id="1259985" title="VUL-0: CVE-2026-33412: vim: command injection via newline in glob()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261191" id="1261191" title="VUL-0: CVE-2026-34714: vim: crafted file can allow code execution" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261271" id="1261271" title="VUL-0: CVE-2026-34982: vim: Vim modeline bypass via various options affects Vim &lt; 9.2.0276" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33412" id="CVE-2026-33412" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33412" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34714" id="CVE-2026-34714" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34714" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34982" id="CVE-2026-34982" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34982" type="cve" />
    </references>
    <description>This update for vim fixes the following issues:

- Update to 9.2.0280
- CVE-2026-33412: command injection via newline in glob() (bsc#1259985).
- CVE-2026-34714: crafted file can allow code execution (bsc#1261191).
- CVE-2026-34982: Vim modeline bypass via various options (bsc#1261271).
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.2.0280" release="1.1" arch="src" src="src/vim-9.2.0280-1.1.src.rpm">
          <filename>vim-9.2.0280-1.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.2.0280" release="1.1" arch="noarch" src="noarch/vim-data-common-9.2.0280-1.1.noarch.rpm">
          <filename>vim-data-common-9.2.0280-1.1.noarch.rpm</filename>
        </package>
        <package name="vim-debugsource" epoch="0" version="9.2.0280" release="1.1" arch="x86_64" src="x86_64/vim-debugsource-9.2.0280-1.1.x86_64.rpm">
          <filename>vim-debugsource-9.2.0280-1.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.2.0280" release="1.1" arch="x86_64" src="x86_64/vim-small-9.2.0280-1.1.x86_64.rpm">
          <filename>vim-small-9.2.0280-1.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small-debuginfo" epoch="0" version="9.2.0280" release="1.1" arch="x86_64" src="x86_64/vim-small-debuginfo-9.2.0280-1.1.x86_64.rpm">
          <filename>vim-small-debuginfo-9.2.0280-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>668</id>
    <title>Security update for ignition</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776153702" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260251" id="1260251" title="VUL-0: CVE-2026-33186: ignition: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo-header" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33186" id="CVE-2026-33186" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33186" type="cve" />
    </references>
    <description>This update for ignition fixes the following issue:

- CVE-2026-33186: Fixed an authorization bypass due to improper validation of the HTTP/2: path pseudo-header (bsc#1260251).
</description>
    <pkglist>
      <collection>
        <package name="ignition" epoch="0" version="2.19.0" release="3.1" arch="src" src="src/ignition-2.19.0-3.1.src.rpm">
          <filename>ignition-2.19.0-3.1.src.rpm</filename>
        </package>
        <package name="ignition" epoch="0" version="2.19.0" release="3.1" arch="x86_64" src="x86_64/ignition-2.19.0-3.1.x86_64.rpm">
          <filename>ignition-2.19.0-3.1.x86_64.rpm</filename>
        </package>
        <package name="ignition-debuginfo" epoch="0" version="2.19.0" release="3.1" arch="x86_64" src="x86_64/ignition-debuginfo-2.19.0-3.1.x86_64.rpm">
          <filename>ignition-debuginfo-2.19.0-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>657</id>
    <title>Security update for openssl-3</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1775666101" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260441" id="1260441" title="VUL-0: CVE-2026-28387: openssl, openssl-3: Potential use-after-free in DANE client code" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260442" id="1260442" title="VUL-0: CVE-2026-28388: openssl, openssl-3: NULL Pointer Dereference When Processing a Delta CRL" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260443" id="1260443" title="VUL-0: CVE-2026-28389: openssl, openssl-3: Possible NULL dereference when processing CMS KeyAgreeRecipientInfo" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260444" id="1260444" title="VUL-0: CVE-2026-31789: openssl, openssl-3: Heap buffer overflow in hexadecimal conversion" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260445" id="1260445" title="VUL-0: CVE-2026-31790: openssl, openssl-3: Incorrect failure handling in RSA KEM RSASVE encapsulation" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28387" id="CVE-2026-28387" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28387" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28388" id="CVE-2026-28388" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28388" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28389" id="CVE-2026-28389" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28389" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31789" id="CVE-2026-31789" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31789" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31790" id="CVE-2026-31790" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31790" type="cve" />
    </references>
    <description>This update for openssl-3 fixes the following issues:

- CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441).
- CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442).
- CVE-2026-28389: Possible NULL dereference when processing CMS KeyAgreeRecipientInfo (bsc#1260443).
- CVE-2026-31789: Heap buffer overflow in hexadecimal conversion (bsc#1260444).
- CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE encapsulation (bsc#1260445).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-3-devel" epoch="0" version="3.1.4" release="12.1" arch="x86_64" src="x86_64/libopenssl-3-devel-3.1.4-12.1.x86_64.rpm">
          <filename>libopenssl-3-devel-3.1.4-12.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider" epoch="0" version="3.1.4" release="12.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-3.1.4-12.1.x86_64.rpm">
          <filename>libopenssl-3-fips-provider-3.1.4-12.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider-debuginfo" epoch="0" version="3.1.4" release="12.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-debuginfo-3.1.4-12.1.x86_64.rpm">
          <filename>libopenssl-3-fips-provider-debuginfo-3.1.4-12.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.1.4" release="12.1" arch="x86_64" src="x86_64/libopenssl3-3.1.4-12.1.x86_64.rpm">
          <filename>libopenssl3-3.1.4-12.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3-debuginfo" epoch="0" version="3.1.4" release="12.1" arch="x86_64" src="x86_64/libopenssl3-debuginfo-3.1.4-12.1.x86_64.rpm">
          <filename>libopenssl3-debuginfo-3.1.4-12.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="12.1" arch="src" src="src/openssl-3-3.1.4-12.1.src.rpm">
          <filename>openssl-3-3.1.4-12.1.src.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="12.1" arch="x86_64" src="x86_64/openssl-3-3.1.4-12.1.x86_64.rpm">
          <filename>openssl-3-3.1.4-12.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debuginfo" epoch="0" version="3.1.4" release="12.1" arch="x86_64" src="x86_64/openssl-3-debuginfo-3.1.4-12.1.x86_64.rpm">
          <filename>openssl-3-debuginfo-3.1.4-12.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debugsource" epoch="0" version="3.1.4" release="12.1" arch="x86_64" src="x86_64/openssl-3-debugsource-3.1.4-12.1.x86_64.rpm">
          <filename>openssl-3-debugsource-3.1.4-12.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>670</id>
    <title>Security update for cockpit-machines</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776690377" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257836" id="1257836" title="VUL-0: CVE-2026-25547: cockpit-podman,cockpit,cockpit-machines,cockpit-tukit: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258641" id="1258641" title="VUL-0: CVE-2026-26996: cockpit,cockpit-tukit,cockpit-machines,cockpit-podman: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25547" id="CVE-2026-25547" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25547" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996" id="CVE-2026-26996" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996" type="cve" />
    </references>
    <description>This update for cockpit-machines fixes the following issues:
 
- CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash
  a Node.js process (bsc#1257836).
- CVE-2026-26996: minimatch: processing of glob pattern containing repeated wildcards followed by a literal character
  that doesn't appear in the test string can lead to ReDoS (bsc#1258641).
</description>
    <pkglist>
      <collection>
        <package name="cockpit-machines" epoch="0" version="305" release="4.1" arch="noarch" src="noarch/cockpit-machines-305-4.1.noarch.rpm">
          <filename>cockpit-machines-305-4.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-machines" epoch="0" version="305" release="4.1" arch="src" src="src/cockpit-machines-305-4.1.src.rpm">
          <filename>cockpit-machines-305-4.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>672</id>
    <title>Security update for openssl-3</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776690074" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261678" id="1261678" title="VUL-0: CVE-2026-28390: openssl: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28390" id="CVE-2026-28390" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28390" type="cve" />
    </references>
    <description>This update for openssl-3 fixes the following issues:

- CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with
  KeyTransportRecipientInfo (bsc#1261678).
</description>
    <pkglist>
      <collection>
        <package name="libopenssl-3-devel" epoch="0" version="3.1.4" release="13.1" arch="x86_64" src="x86_64/libopenssl-3-devel-3.1.4-13.1.x86_64.rpm">
          <filename>libopenssl-3-devel-3.1.4-13.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider" epoch="0" version="3.1.4" release="13.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-3.1.4-13.1.x86_64.rpm">
          <filename>libopenssl-3-fips-provider-3.1.4-13.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl-3-fips-provider-debuginfo" epoch="0" version="3.1.4" release="13.1" arch="x86_64" src="x86_64/libopenssl-3-fips-provider-debuginfo-3.1.4-13.1.x86_64.rpm">
          <filename>libopenssl-3-fips-provider-debuginfo-3.1.4-13.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3" epoch="0" version="3.1.4" release="13.1" arch="x86_64" src="x86_64/libopenssl3-3.1.4-13.1.x86_64.rpm">
          <filename>libopenssl3-3.1.4-13.1.x86_64.rpm</filename>
        </package>
        <package name="libopenssl3-debuginfo" epoch="0" version="3.1.4" release="13.1" arch="x86_64" src="x86_64/libopenssl3-debuginfo-3.1.4-13.1.x86_64.rpm">
          <filename>libopenssl3-debuginfo-3.1.4-13.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="13.1" arch="src" src="src/openssl-3-3.1.4-13.1.src.rpm">
          <filename>openssl-3-3.1.4-13.1.src.rpm</filename>
        </package>
        <package name="openssl-3" epoch="0" version="3.1.4" release="13.1" arch="x86_64" src="x86_64/openssl-3-3.1.4-13.1.x86_64.rpm">
          <filename>openssl-3-3.1.4-13.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debuginfo" epoch="0" version="3.1.4" release="13.1" arch="x86_64" src="x86_64/openssl-3-debuginfo-3.1.4-13.1.x86_64.rpm">
          <filename>openssl-3-debuginfo-3.1.4-13.1.x86_64.rpm</filename>
        </package>
        <package name="openssl-3-debugsource" epoch="0" version="3.1.4" release="13.1" arch="x86_64" src="x86_64/openssl-3-debugsource-3.1.4-13.1.x86_64.rpm">
          <filename>openssl-3-debugsource-3.1.4-13.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>673</id>
    <title>Security update for cockpit-tukit</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776690343" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257836" id="1257836" title="VUL-0: CVE-2026-25547: cockpit-podman,cockpit,cockpit-machines,cockpit-tukit: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258641" id="1258641" title="VUL-0: CVE-2026-26996: cockpit,cockpit-tukit,cockpit-machines,cockpit-podman: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25547" id="CVE-2026-25547" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25547" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996" id="CVE-2026-26996" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996" type="cve" />
    </references>
    <description>This update for cockpit-tukit fixes the following issues:

- CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash
  a Node.js process (bsc#1257836).
- CVE-2026-26996: minimatch: processing of glob pattern containing repeated wildcards followed by a literal character
  that doesn't appear in the test string can lead to ReDoS (bsc#1258641).
</description>
    <pkglist>
      <collection>
        <package name="cockpit-tukit" epoch="0" version="0.1.2~git0.647b3e3" release="2.1" arch="noarch" src="noarch/cockpit-tukit-0.1.2~git0.647b3e3-2.1.noarch.rpm">
          <filename>cockpit-tukit-0.1.2~git0.647b3e3-2.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-tukit" epoch="0" version="0.1.2~git0.647b3e3" release="2.1" arch="src" src="src/cockpit-tukit-0.1.2~git0.647b3e3-2.1.src.rpm">
          <filename>cockpit-tukit-0.1.2~git0.647b3e3-2.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>685</id>
    <title>Security update for cockpit-podman</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776862067" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257836" id="1257836" title="VUL-0: CVE-2026-25547: cockpit-podman,cockpit,cockpit-machines,cockpit-tukit: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258641" id="1258641" title="VUL-0: CVE-2026-26996: cockpit,cockpit-tukit,cockpit-machines,cockpit-podman: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25547" id="CVE-2026-25547" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25547" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996" id="CVE-2026-26996" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26996" type="cve" />
    </references>
    <description>This update for cockpit-podman fixes the following issues:

- CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash
  a Node.js process (bsc#1257836).
- CVE-2026-26996: minimatch: processing of glob pattern containing repeated wildcards followed by a literal character
  that doesn't appear in the test string can lead to ReDoS (bsc#1258641).
</description>
    <pkglist>
      <collection>
        <package name="cockpit-podman" epoch="0" version="83" release="3.1" arch="noarch" src="noarch/cockpit-podman-83-3.1.noarch.rpm">
          <filename>cockpit-podman-83-3.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-podman" epoch="0" version="83" release="3.1" arch="src" src="src/cockpit-podman-83-3.1.src.rpm">
          <filename>cockpit-podman-83-3.1.src.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>675</id>
    <title>Security update for libcap</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776689089" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261809" id="1261809" title="VUL-0: CVE-2026-4878: libcap: Address a potential TOCTOU race condition in cap_set_file()" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4878" id="CVE-2026-4878" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4878" type="cve" />
    </references>
    <description>This update for libcap fixes the following issues:

- CVE-2026-4878: local privilege escalation through file capability injection due to TOCTOU race condition in
  `cap_set_file()` (bsc#1261809).
</description>
    <pkglist>
      <collection>
        <package name="libcap" epoch="0" version="2.69" release="3.1" arch="src" src="src/libcap-2.69-3.1.src.rpm">
          <filename>libcap-2.69-3.1.src.rpm</filename>
        </package>
        <package name="libcap-debugsource" epoch="0" version="2.69" release="3.1" arch="x86_64" src="x86_64/libcap-debugsource-2.69-3.1.x86_64.rpm">
          <filename>libcap-debugsource-2.69-3.1.x86_64.rpm</filename>
        </package>
        <package name="libcap2" epoch="0" version="2.69" release="3.1" arch="x86_64" src="x86_64/libcap2-2.69-3.1.x86_64.rpm">
          <filename>libcap2-2.69-3.1.x86_64.rpm</filename>
        </package>
        <package name="libcap2-debuginfo" epoch="0" version="2.69" release="3.1" arch="x86_64" src="x86_64/libcap2-debuginfo-2.69-3.1.x86_64.rpm">
          <filename>libcap2-debuginfo-2.69-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>678</id>
    <title>Security update for openvswitch</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776761863" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261273" id="1261273" title="VUL-0: CVE-2026-34956: openvswitch,openvswitch3: Invalid memory access in conntrack FTP alg." type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34956" id="CVE-2026-34956" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34956" type="cve" />
    </references>
    <description>This update for openvswitch fixes the following issue:

- CVE-2026-34956: Invalid memory access in conntrack FTP alg (bsc#1261273).
</description>
    <pkglist>
      <collection>
        <package name="libopenvswitch-3_1-0" epoch="0" version="3.1.7" release="5.1" arch="x86_64" src="x86_64/libopenvswitch-3_1-0-3.1.7-5.1.x86_64.rpm">
          <filename>libopenvswitch-3_1-0-3.1.7-5.1.x86_64.rpm</filename>
        </package>
        <package name="libopenvswitch-3_1-0-debuginfo" epoch="0" version="3.1.7" release="5.1" arch="x86_64" src="x86_64/libopenvswitch-3_1-0-debuginfo-3.1.7-5.1.x86_64.rpm">
          <filename>libopenvswitch-3_1-0-debuginfo-3.1.7-5.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch" epoch="0" version="3.1.7" release="5.1" arch="src" src="src/openvswitch-3.1.7-5.1.src.rpm">
          <filename>openvswitch-3.1.7-5.1.src.rpm</filename>
        </package>
        <package name="openvswitch" epoch="0" version="3.1.7" release="5.1" arch="x86_64" src="x86_64/openvswitch-3.1.7-5.1.x86_64.rpm">
          <filename>openvswitch-3.1.7-5.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-debuginfo" epoch="0" version="3.1.7" release="5.1" arch="x86_64" src="x86_64/openvswitch-debuginfo-3.1.7-5.1.x86_64.rpm">
          <filename>openvswitch-debuginfo-3.1.7-5.1.x86_64.rpm</filename>
        </package>
        <package name="openvswitch-debugsource" epoch="0" version="3.1.7" release="5.1" arch="x86_64" src="x86_64/openvswitch-debugsource-3.1.7-5.1.x86_64.rpm">
          <filename>openvswitch-debugsource-3.1.7-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>679</id>
    <title>Recommended update for suseconnect-ng</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776761679" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257490" id="1257490" title="the latest version of libsuseconnect-1.20 ignore product in announce call" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257625" id="1257625" title="Registration to SMT server with suseconnect-ng-1.20.0-3.31.1 failed. Error: Registration server returned 'Not Found' (404)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257667" id="1257667" title="[QE][Build 1.64] rollback service failure, after rollback system boots with wrong repolinks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257825" id="1257825" title="Yas2_registration all modules selected and crashes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261155" id="1261155" title="Using suseconnect-ng (v1.20) to enable an extension requiring a regcode without specifying any regcode causes duplicate system entries in SCC" type="bugzilla" />
    </references>
    <description>This update for suseconnect-ng fixes the following issues:

Update version to 1.21.1:

  - Fix nil token handling (bsc#1261155)
  - Switch to using go1.24-openssl as the default Go version to
    install to support building the package (jsc#SCC-585).

Update version to 1.21:

  - Add expanded metric collection for kernel modules and hardware
    detection (jsc#TEL-226).
  - Support new profile based metric collection
  - Fix ignored --root parameter hanbling when reading and
    writing configuration (bsc#1257667)
  - Add expanded metric collection for system vendor/manfacturer
    (jsc#TEL-260).
  - Add missing product id to allow yast2-registration to not break (bsc#1257825)
  - Fix libsuseconnect APIError detection logic (bsc#1257825)

- Regressions found during QA test runs:

  - Ignore product in announce call (bsc#1257490)
  - Registration to SMT server with failed (bsc#1257625)

Update version to 1.20:

  - Update error message for Public Cloud instances with registercloudguest
    installed. SUSEConnect -d is disabled on PYAG and BYOS when the
    registercloudguest command is available. (bsc#1230861)
  - Enhanced SAP detected. Take TREX into account and remove empty values when
    only /usr/sap but no installation exists (bsc#1241002)
  - Fixed modules and extension link to point to version less documentation. (bsc#1239439)
  - Fixed SAP instance detection (bsc#1244550)
  - Remove link to extensions documentation (bsc#1239439)
  - Migrate to the public library

Update version to 1.21.1:

  - Fix nil token handling (bsc#1261155)
  - Switch to using go1.24-openssl as the default Go version to
    install to support building the package (jsc#SCC-585).

Update version to 1.21:

  - Add expanded metric collection for kernel modules and hardware
    detection (jsc#TEL-226).
  - Support new profile based metric collection
  - Fix ignored --root parameter hanbling when reading and
    writing configuration (bsc#1257667)
  - Add expanded metric collection for system vendor/manfacturer
    (jsc#TEL-260).
  - Add missing product id to allow yast2-registration to not break (bsc#1257825)
  - Fix libsuseconnect APIError detection logic (bsc#1257825)

</description>
    <pkglist>
      <collection>
        <package name="suseconnect-ng" epoch="0" version="1.21.1" release="1.1" arch="src" src="src/suseconnect-ng-1.21.1-1.1.src.rpm">
          <filename>suseconnect-ng-1.21.1-1.1.src.rpm</filename>
        </package>
        <package name="suseconnect-ng" epoch="0" version="1.21.1" release="1.1" arch="x86_64" src="x86_64/suseconnect-ng-1.21.1-1.1.x86_64.rpm">
          <filename>suseconnect-ng-1.21.1-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>680</id>
    <title>Security update for libpng16</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776761863" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261957" id="1261957" title="VUL-0: CVE-2026-34757: libpng12,libpng15,libpng16: libpng: Information disclosure and data corruption via use-after-free vulnerability" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34757" id="CVE-2026-34757" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34757" type="cve" />
    </references>
    <description>This update for libpng16 fixes the following issue:

- CVE-2026-34757: libpng: Information disclosure and data corruption via use-after-free vulnerability (bsc#1261957).
</description>
    <pkglist>
      <collection>
        <package name="libpng16" epoch="0" version="1.6.43" release="5.1" arch="src" src="src/libpng16-1.6.43-5.1.src.rpm">
          <filename>libpng16-1.6.43-5.1.src.rpm</filename>
        </package>
        <package name="libpng16-16" epoch="0" version="1.6.43" release="5.1" arch="x86_64" src="x86_64/libpng16-16-1.6.43-5.1.x86_64.rpm">
          <filename>libpng16-16-1.6.43-5.1.x86_64.rpm</filename>
        </package>
        <package name="libpng16-16-debuginfo" epoch="0" version="1.6.43" release="5.1" arch="x86_64" src="x86_64/libpng16-16-debuginfo-1.6.43-5.1.x86_64.rpm">
          <filename>libpng16-16-debuginfo-1.6.43-5.1.x86_64.rpm</filename>
        </package>
        <package name="libpng16-debugsource" epoch="0" version="1.6.43" release="5.1" arch="x86_64" src="x86_64/libpng16-debugsource-1.6.43-5.1.x86_64.rpm">
          <filename>libpng16-debugsource-1.6.43-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>681</id>
    <title>Security update for ncurses</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776761552" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259924" id="1259924" title="VUL-0: CVE-2025-69720: ncurses: buffer overflow in function `analyze_string()`of `progs/infocmp.c`" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720" id="CVE-2025-69720" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720" type="cve" />
    </references>
    <description>This update for ncurses fixes the following issue:

- CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).
</description>
    <pkglist>
      <collection>
        <package name="libncurses6" epoch="0" version="6.4.20240224" release="11.1" arch="x86_64" src="x86_64/libncurses6-6.4.20240224-11.1.x86_64.rpm">
          <filename>libncurses6-6.4.20240224-11.1.x86_64.rpm</filename>
        </package>
        <package name="libncurses6-debuginfo" epoch="0" version="6.4.20240224" release="11.1" arch="x86_64" src="x86_64/libncurses6-debuginfo-6.4.20240224-11.1.x86_64.rpm">
          <filename>libncurses6-debuginfo-6.4.20240224-11.1.x86_64.rpm</filename>
        </package>
        <package name="ncurses" epoch="0" version="6.4.20240224" release="11.1" arch="src" src="src/ncurses-6.4.20240224-11.1.src.rpm">
          <filename>ncurses-6.4.20240224-11.1.src.rpm</filename>
        </package>
        <package name="ncurses-debugsource" epoch="0" version="6.4.20240224" release="11.1" arch="x86_64" src="x86_64/ncurses-debugsource-6.4.20240224-11.1.x86_64.rpm">
          <filename>ncurses-debugsource-6.4.20240224-11.1.x86_64.rpm</filename>
        </package>
        <package name="ncurses-utils" epoch="0" version="6.4.20240224" release="11.1" arch="x86_64" src="x86_64/ncurses-utils-6.4.20240224-11.1.x86_64.rpm">
          <filename>ncurses-utils-6.4.20240224-11.1.x86_64.rpm</filename>
        </package>
        <package name="ncurses-utils-debuginfo" epoch="0" version="6.4.20240224" release="11.1" arch="x86_64" src="x86_64/ncurses-utils-debuginfo-6.4.20240224-11.1.x86_64.rpm">
          <filename>ncurses-utils-debuginfo-6.4.20240224-11.1.x86_64.rpm</filename>
        </package>
        <package name="terminfo-base" epoch="0" version="6.4.20240224" release="11.1" arch="x86_64" src="x86_64/terminfo-base-6.4.20240224-11.1.x86_64.rpm">
          <filename>terminfo-base-6.4.20240224-11.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>684</id>
    <title>Security update for opensc</title>
    <severity>low</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776861476" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261214" id="1261214" title="VUL-0: CVE-2025-49010: opensc: stack-buffer-overflow via crafted smart card or USB device responses" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261218" id="1261218" title="VUL-0: CVE-2025-66037: opensc: crafted input can cause an out-of-bounds read" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261219" id="1261219" title="VUL-0: CVE-2025-66038: opensc: improper compact-TLV length validation can lead to crash or unexpected behavior" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261220" id="1261220" title="VUL-0: CVE-2025-66215: opensc: crafted smart card or USB device can cause a stack-buffer-overflow write" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49010" id="CVE-2025-49010" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49010" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66037" id="CVE-2025-66037" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66037" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66038" id="CVE-2025-66038" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66038" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66215" id="CVE-2025-66215" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66215" type="cve" />
    </references>
    <description>This update for opensc fixes the following issues:

- CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214).
- CVE-2025-66037: crafted input can cause an out-of-bounds read (bsc#1261218).
- CVE-2025-66038: improper compact-TLV length validation can lead to crash or unexpected behavior (bsc#1261219).
- CVE-2025-66215: crafted smart card or USB device can cause a stack-buffer-overflow write (bsc#1261220).
</description>
    <pkglist>
      <collection>
        <package name="opensc" epoch="0" version="0.24.0" release="5.1" arch="src" src="src/opensc-0.24.0-5.1.src.rpm">
          <filename>opensc-0.24.0-5.1.src.rpm</filename>
        </package>
        <package name="opensc" epoch="0" version="0.24.0" release="5.1" arch="x86_64" src="x86_64/opensc-0.24.0-5.1.x86_64.rpm">
          <filename>opensc-0.24.0-5.1.x86_64.rpm</filename>
        </package>
        <package name="opensc-debuginfo" epoch="0" version="0.24.0" release="5.1" arch="x86_64" src="x86_64/opensc-debuginfo-0.24.0-5.1.x86_64.rpm">
          <filename>opensc-debuginfo-0.24.0-5.1.x86_64.rpm</filename>
        </package>
        <package name="opensc-debugsource" epoch="0" version="0.24.0" release="5.1" arch="x86_64" src="x86_64/opensc-debugsource-0.24.0-5.1.x86_64.rpm">
          <filename>opensc-debugsource-0.24.0-5.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>683</id>
    <title>Security update for haproxy</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776855224" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1262103" id="1262103" title="VUL-0: CVE-2026-33555: haproxy: Request smuggling via HTTP/3 parser desynchronization" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33555" id="CVE-2026-33555" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33555" type="cve" />
    </references>
    <description>This update for haproxy fixes the following issue:

- CVE-2026-33555: improper validation when matching a received body length to a previously announced `Content-Length`
  can lead to request smuggling due to HTTP/3 parser desynchronization (bsc#1262103).
</description>
    <pkglist>
      <collection>
        <package name="haproxy" epoch="0" version="2.8.11+git0.01c1056a4" release="3.1" arch="src" src="src/haproxy-2.8.11+git0.01c1056a4-3.1.src.rpm">
          <filename>haproxy-2.8.11+git0.01c1056a4-3.1.src.rpm</filename>
        </package>
        <package name="haproxy" epoch="0" version="2.8.11+git0.01c1056a4" release="3.1" arch="x86_64" src="x86_64/haproxy-2.8.11+git0.01c1056a4-3.1.x86_64.rpm">
          <filename>haproxy-2.8.11+git0.01c1056a4-3.1.x86_64.rpm</filename>
        </package>
        <package name="haproxy-debuginfo" epoch="0" version="2.8.11+git0.01c1056a4" release="3.1" arch="x86_64" src="x86_64/haproxy-debuginfo-2.8.11+git0.01c1056a4-3.1.x86_64.rpm">
          <filename>haproxy-debuginfo-2.8.11+git0.01c1056a4-3.1.x86_64.rpm</filename>
        </package>
        <package name="haproxy-debugsource" epoch="0" version="2.8.11+git0.01c1056a4" release="3.1" arch="x86_64" src="x86_64/haproxy-debugsource-2.8.11+git0.01c1056a4-3.1.x86_64.rpm">
          <filename>haproxy-debugsource-2.8.11+git0.01c1056a4-3.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>686</id>
    <title>Security update for gdk-pixbuf</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1776949431" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261210" id="1261210" title="VUL-0: CVE-2026-5201: gdk-pixbuf,gtk2: gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5201" id="CVE-2026-5201" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5201" type="cve" />
    </references>
    <description>This update for gdk-pixbuf fixes the following issue:

- CVE-2026-5201: improper validation of color component counts when processing a specially crafted JPEG image can lead
  to a heap buffer overflow (bsc#1261210).
</description>
    <pkglist>
      <collection>
        <package name="gdk-pixbuf" epoch="0" version="2.42.12" release="4.1" arch="src" src="src/gdk-pixbuf-2.42.12-4.1.src.rpm">
          <filename>gdk-pixbuf-2.42.12-4.1.src.rpm</filename>
        </package>
        <package name="gdk-pixbuf-debugsource" epoch="0" version="2.42.12" release="4.1" arch="x86_64" src="x86_64/gdk-pixbuf-debugsource-2.42.12-4.1.x86_64.rpm">
          <filename>gdk-pixbuf-debugsource-2.42.12-4.1.x86_64.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders" epoch="0" version="2.42.12" release="4.1" arch="x86_64" src="x86_64/gdk-pixbuf-query-loaders-2.42.12-4.1.x86_64.rpm">
          <filename>gdk-pixbuf-query-loaders-2.42.12-4.1.x86_64.rpm</filename>
        </package>
        <package name="gdk-pixbuf-query-loaders-debuginfo" epoch="0" version="2.42.12" release="4.1" arch="x86_64" src="x86_64/gdk-pixbuf-query-loaders-debuginfo-2.42.12-4.1.x86_64.rpm">
          <filename>gdk-pixbuf-query-loaders-debuginfo-2.42.12-4.1.x86_64.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0" epoch="0" version="2.42.12" release="4.1" arch="x86_64" src="x86_64/libgdk_pixbuf-2_0-0-2.42.12-4.1.x86_64.rpm">
          <filename>libgdk_pixbuf-2_0-0-2.42.12-4.1.x86_64.rpm</filename>
        </package>
        <package name="libgdk_pixbuf-2_0-0-debuginfo" epoch="0" version="2.42.12" release="4.1" arch="x86_64" src="x86_64/libgdk_pixbuf-2_0-0-debuginfo-2.42.12-4.1.x86_64.rpm">
          <filename>libgdk_pixbuf-2_0-0-debuginfo-2.42.12-4.1.x86_64.rpm</filename>
        </package>
        <package name="typelib-1_0-GdkPixbuf-2_0" epoch="0" version="2.42.12" release="4.1" arch="x86_64" src="x86_64/typelib-1_0-GdkPixbuf-2_0-2.42.12-4.1.x86_64.rpm">
          <filename>typelib-1_0-GdkPixbuf-2_0-2.42.12-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>687</id>
    <title>Security update for Mesa</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1777035787" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261998" id="1261998" title="VUL-0: CVE-2026-40393: Mesa: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40393" id="CVE-2026-40393" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40393" type="cve" />
    </references>
    <description>This update for Mesa fixes the following issues:

- CVE-2026-40393: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party (bsc#1261998).
</description>
    <pkglist>
      <collection>
        <package name="Mesa" epoch="0" version="23.3.4" release="9.1" arch="src" src="src/Mesa-23.3.4-9.1.src.rpm">
          <filename>Mesa-23.3.4-9.1.src.rpm</filename>
        </package>
        <package name="Mesa" epoch="0" version="23.3.4" release="9.1" arch="x86_64" src="x86_64/Mesa-23.3.4-9.1.x86_64.rpm">
          <filename>Mesa-23.3.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-debugsource" epoch="0" version="23.3.4" release="9.1" arch="x86_64" src="x86_64/Mesa-debugsource-23.3.4-9.1.x86_64.rpm">
          <filename>Mesa-debugsource-23.3.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-libEGL1" epoch="0" version="23.3.4" release="9.1" arch="x86_64" src="x86_64/Mesa-libEGL1-23.3.4-9.1.x86_64.rpm">
          <filename>Mesa-libEGL1-23.3.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-libEGL1-debuginfo" epoch="0" version="23.3.4" release="9.1" arch="x86_64" src="x86_64/Mesa-libEGL1-debuginfo-23.3.4-9.1.x86_64.rpm">
          <filename>Mesa-libEGL1-debuginfo-23.3.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-libGL1" epoch="0" version="23.3.4" release="9.1" arch="x86_64" src="x86_64/Mesa-libGL1-23.3.4-9.1.x86_64.rpm">
          <filename>Mesa-libGL1-23.3.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-libGL1-debuginfo" epoch="0" version="23.3.4" release="9.1" arch="x86_64" src="x86_64/Mesa-libGL1-debuginfo-23.3.4-9.1.x86_64.rpm">
          <filename>Mesa-libGL1-debuginfo-23.3.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-libglapi0" epoch="0" version="23.3.4" release="9.1" arch="x86_64" src="x86_64/Mesa-libglapi0-23.3.4-9.1.x86_64.rpm">
          <filename>Mesa-libglapi0-23.3.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-libglapi0-debuginfo" epoch="0" version="23.3.4" release="9.1" arch="x86_64" src="x86_64/Mesa-libglapi0-debuginfo-23.3.4-9.1.x86_64.rpm">
          <filename>Mesa-libglapi0-debuginfo-23.3.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="libgbm1" epoch="0" version="23.3.4" release="9.1" arch="x86_64" src="x86_64/libgbm1-23.3.4-9.1.x86_64.rpm">
          <filename>libgbm1-23.3.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="libgbm1-debuginfo" epoch="0" version="23.3.4" release="9.1" arch="x86_64" src="x86_64/libgbm1-debuginfo-23.3.4-9.1.x86_64.rpm">
          <filename>libgbm1-debuginfo-23.3.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-dri" epoch="0" version="23.3.4" release="9.1" arch="x86_64" src="x86_64/Mesa-dri-23.3.4-9.1.x86_64.rpm">
          <filename>Mesa-dri-23.3.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-dri-debuginfo" epoch="0" version="23.3.4" release="9.1" arch="x86_64" src="x86_64/Mesa-dri-debuginfo-23.3.4-9.1.x86_64.rpm">
          <filename>Mesa-dri-debuginfo-23.3.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-drivers" epoch="0" version="23.3.4" release="9.1" arch="src" src="src/Mesa-drivers-23.3.4-9.1.src.rpm">
          <filename>Mesa-drivers-23.3.4-9.1.src.rpm</filename>
        </package>
        <package name="Mesa-drivers-debugsource" epoch="0" version="23.3.4" release="9.1" arch="x86_64" src="x86_64/Mesa-drivers-debugsource-23.3.4-9.1.x86_64.rpm">
          <filename>Mesa-drivers-debugsource-23.3.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-gallium" epoch="0" version="23.3.4" release="9.1" arch="x86_64" src="x86_64/Mesa-gallium-23.3.4-9.1.x86_64.rpm">
          <filename>Mesa-gallium-23.3.4-9.1.x86_64.rpm</filename>
        </package>
        <package name="Mesa-gallium-debuginfo" epoch="0" version="23.3.4" release="9.1" arch="x86_64" src="x86_64/Mesa-gallium-debuginfo-23.3.4-9.1.x86_64.rpm">
          <filename>Mesa-gallium-debuginfo-23.3.4-9.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>688</id>
    <title>Security update for sed</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1777310697" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1262144" id="1262144" title="VUL-0: CVE-2026-5958: sed: a TOCTOU race can allow to read attacker-controlled content and write it to an unintended file" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5958" id="CVE-2026-5958" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5958" type="cve" />
    </references>
    <description>This update for sed fixes the following issue:

- CVE-2026-5958: TOCTOU race allows write of user-controlled content to unintended files and can lead to arbitrary file
  overwrite (bsc#1262144).
</description>
    <pkglist>
      <collection>
        <package name="sed" epoch="0" version="4.9" release="3.1" arch="src" src="src/sed-4.9-3.1.src.rpm">
          <filename>sed-4.9-3.1.src.rpm</filename>
        </package>
        <package name="sed" epoch="0" version="4.9" release="3.1" arch="x86_64" src="x86_64/sed-4.9-3.1.x86_64.rpm">
          <filename>sed-4.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="sed-debuginfo" epoch="0" version="4.9" release="3.1" arch="x86_64" src="x86_64/sed-debuginfo-4.9-3.1.x86_64.rpm">
          <filename>sed-debuginfo-4.9-3.1.x86_64.rpm</filename>
        </package>
        <package name="sed-debugsource" epoch="0" version="4.9" release="3.1" arch="x86_64" src="x86_64/sed-debugsource-4.9-3.1.x86_64.rpm">
          <filename>sed-debugsource-4.9-3.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>690</id>
    <title>Security update for python311</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1777388907" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261970" id="1261970" title="VUL-0: CVE-2026-3446: python: Base64 decoding stops at first padded quad by default" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3446" id="CVE-2026-3446" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3446" type="cve" />
    </references>
    <description>This update for python311 fixes the following issue:

- CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be
  processed (bsc#1261970).
</description>
    <pkglist>
      <collection>
        <package name="python311" epoch="0" version="3.11.15" release="4.1" arch="src" src="src/python311-3.11.15-4.1.src.rpm">
          <filename>python311-3.11.15-4.1.src.rpm</filename>
        </package>
        <package name="python311" epoch="0" version="3.11.15" release="4.1" arch="x86_64" src="x86_64/python311-3.11.15-4.1.x86_64.rpm">
          <filename>python311-3.11.15-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses" epoch="0" version="3.11.15" release="4.1" arch="x86_64" src="x86_64/python311-curses-3.11.15-4.1.x86_64.rpm">
          <filename>python311-curses-3.11.15-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-curses-debuginfo" epoch="0" version="3.11.15" release="4.1" arch="x86_64" src="x86_64/python311-curses-debuginfo-3.11.15-4.1.x86_64.rpm">
          <filename>python311-curses-debuginfo-3.11.15-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debuginfo" epoch="0" version="3.11.15" release="4.1" arch="x86_64" src="x86_64/python311-debuginfo-3.11.15-4.1.x86_64.rpm">
          <filename>python311-debuginfo-3.11.15-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-debugsource" epoch="0" version="3.11.15" release="4.1" arch="x86_64" src="x86_64/python311-debugsource-3.11.15-4.1.x86_64.rpm">
          <filename>python311-debugsource-3.11.15-4.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0" epoch="0" version="3.11.15" release="4.1" arch="x86_64" src="x86_64/libpython3_11-1_0-3.11.15-4.1.x86_64.rpm">
          <filename>libpython3_11-1_0-3.11.15-4.1.x86_64.rpm</filename>
        </package>
        <package name="libpython3_11-1_0-debuginfo" epoch="0" version="3.11.15" release="4.1" arch="x86_64" src="x86_64/libpython3_11-1_0-debuginfo-3.11.15-4.1.x86_64.rpm">
          <filename>libpython3_11-1_0-debuginfo-3.11.15-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base" epoch="0" version="3.11.15" release="4.1" arch="x86_64" src="x86_64/python311-base-3.11.15-4.1.x86_64.rpm">
          <filename>python311-base-3.11.15-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-base-debuginfo" epoch="0" version="3.11.15" release="4.1" arch="x86_64" src="x86_64/python311-base-debuginfo-3.11.15-4.1.x86_64.rpm">
          <filename>python311-base-debuginfo-3.11.15-4.1.x86_64.rpm</filename>
        </package>
        <package name="python311-core" epoch="0" version="3.11.15" release="4.1" arch="src" src="src/python311-core-3.11.15-4.1.src.rpm">
          <filename>python311-core-3.11.15-4.1.src.rpm</filename>
        </package>
        <package name="python311-core-debugsource" epoch="0" version="3.11.15" release="4.1" arch="x86_64" src="x86_64/python311-core-debugsource-3.11.15-4.1.x86_64.rpm">
          <filename>python311-core-debugsource-3.11.15-4.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>691</id>
    <title>Security update for vim</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1777386701" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261833" id="1261833" title="VUL-0: CVE-2026-39881: vim: command injection in NetBeans interface can lead to  arbitrary file reads and writes" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39881" id="CVE-2026-39881" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39881" type="cve" />
    </references>
    <description>This update for vim fixes the following issue:

Update to version 9.2.0398.

Security issues fixed:

- CVE-2026-39881: missing sanitization in `defineAnnoType` and `specialKeys` can lead to arbitrary Ex command injection
  via a malicious NetBeans server (bsc#1261833).
</description>
    <pkglist>
      <collection>
        <package name="vim" epoch="0" version="9.2.0398" release="1.1" arch="src" src="src/vim-9.2.0398-1.1.src.rpm">
          <filename>vim-9.2.0398-1.1.src.rpm</filename>
        </package>
        <package name="vim-data-common" epoch="0" version="9.2.0398" release="1.1" arch="noarch" src="noarch/vim-data-common-9.2.0398-1.1.noarch.rpm">
          <filename>vim-data-common-9.2.0398-1.1.noarch.rpm</filename>
        </package>
        <package name="vim-debugsource" epoch="0" version="9.2.0398" release="1.1" arch="x86_64" src="x86_64/vim-debugsource-9.2.0398-1.1.x86_64.rpm">
          <filename>vim-debugsource-9.2.0398-1.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small" epoch="0" version="9.2.0398" release="1.1" arch="x86_64" src="x86_64/vim-small-9.2.0398-1.1.x86_64.rpm">
          <filename>vim-small-9.2.0398-1.1.x86_64.rpm</filename>
        </package>
        <package name="vim-small-debuginfo" epoch="0" version="9.2.0398" release="1.1" arch="x86_64" src="x86_64/vim-small-debuginfo-9.2.0398-1.1.x86_64.rpm">
          <filename>vim-small-debuginfo-9.2.0398-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>695</id>
    <title>Security update for curl</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1777561611" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1259362" id="1259362" title="VUL-0: CVE-2026-1965: curl: bad reuse of HTTP Negotiate connection" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1262631" id="1262631" title="VUL-0: EMBARGOED: CVE-2026-4873: curl: connection reuse ignores TLS requirement" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1262632" id="1262632" title="VUL-0: EMBARGOED: CVE-2026-5545: curl: wrong reuse of HTTP Negotiate connection" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1262635" id="1262635" title="VUL-0: EMBARGOED: CVE-2026-6253: curl: proxy credentials leak over redirect-to proxy" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1262636" id="1262636" title="VUL-0: EMBARGOED: CVE-2026-6276: curl: stale custom cookie host causes cookie leak" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1262638" id="1262638" title="VUL-0: EMBARGOED: CVE-2026-6429: curl: netrc credential leak with reused proxy connection" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1965" id="CVE-2026-1965" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1965" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4873" id="CVE-2026-4873" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4873" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5545" id="CVE-2026-5545" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5545" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6253" id="CVE-2026-6253" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6253" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6276" id="CVE-2026-6276" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6276" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6429" id="CVE-2026-6429" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6429" type="cve" />
    </references>
    <description>This update for curl fixes the following issues:

Security issues fixed:

- CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631).
- CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632).
- CVE-2026-6253: proxy credentials leak over redirect-to proxy (bsc#1262635).
- CVE-2026-6276: stale custom cookie host causes cookie leak (bsc#1262636).
- CVE-2026-6429: netrc credential leak with reused proxy connection (bsc#1262638).

Other updates and bugfixes:

- sws: prevent "connection monitor" to say disconnect twice (bsc#1259362).
</description>
    <pkglist>
      <collection>
        <package name="curl" epoch="0" version="8.14.1" release="6.1" arch="src" src="src/curl-8.14.1-6.1.src.rpm" embargo_date="2026-04-29 13:00">
          <filename>curl-8.14.1-6.1.src.rpm</filename>
        </package>
        <package name="curl" epoch="0" version="8.14.1" release="6.1" arch="x86_64" src="x86_64/curl-8.14.1-6.1.x86_64.rpm" embargo_date="2026-04-29 13:00">
          <filename>curl-8.14.1-6.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debuginfo" epoch="0" version="8.14.1" release="6.1" arch="x86_64" src="x86_64/curl-debuginfo-8.14.1-6.1.x86_64.rpm" embargo_date="2026-04-29 13:00">
          <filename>curl-debuginfo-8.14.1-6.1.x86_64.rpm</filename>
        </package>
        <package name="curl-debugsource" epoch="0" version="8.14.1" release="6.1" arch="x86_64" src="x86_64/curl-debugsource-8.14.1-6.1.x86_64.rpm" embargo_date="2026-04-29 13:00">
          <filename>curl-debugsource-8.14.1-6.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4" epoch="0" version="8.14.1" release="6.1" arch="x86_64" src="x86_64/libcurl4-8.14.1-6.1.x86_64.rpm" embargo_date="2026-04-29 13:00">
          <filename>libcurl4-8.14.1-6.1.x86_64.rpm</filename>
        </package>
        <package name="libcurl4-debuginfo" epoch="0" version="8.14.1" release="6.1" arch="x86_64" src="x86_64/libcurl4-debuginfo-8.14.1-6.1.x86_64.rpm" embargo_date="2026-04-29 13:00">
          <filename>libcurl4-debuginfo-8.14.1-6.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>692</id>
    <title>Recommended update for mozilla-nss</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1777389568" />
    <references>
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1935995" id="1935995" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1935995" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=1964722" id="1964722" title="https://bugzilla.mozilla.org/show_bug.cgi?id=1964722" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2009552" id="2009552" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2009552" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2019224" id="2019224" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2019224" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2019357" id="2019357" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2019357" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2023207" id="2023207" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2023207" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2023209" id="2023209" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2023209" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2026089" id="2026089" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2026089" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2026156" id="2026156" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2026156" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2026311" id="2026311" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2026311" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2027345" id="2027345" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2027345" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2027365" id="2027365" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2027365" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2027378" id="2027378" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2027378" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2028001" id="2028001" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2028001" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2029323" id="2029323" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2029323" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2029425" id="2029425" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2029425" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2029462" id="2029462" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2029462" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2029752" id="2029752" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2029752" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2030135" id="2030135" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2030135" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2033783" id="2033783" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2033783" type="bugzilla" />
      <reference href="https://bugzilla.mozilla.org/show_bug.cgi?id=2034185" id="2034185" title="https://bugzilla.mozilla.org/show_bug.cgi?id=2034185" type="bugzilla" />
      <reference href="https://jira.suse.com/browse/PED-15633" id="PED-15633" title="https://jira.suse.com/browse/PED-15633" type="jira" />
    </references>
    <description>This update for mozilla-nss fixes the following issues:

Update to NSS 3.112.5:

  * reject DTLS 1.3 Server Hello after HVR without capping ss-&gt;vrange.max.
  * update to version 2.84 of builtins module.

- Added "Suggests: p11-kit-nss-trust" to favor over mozilla-nss-certs
    (Jira:jsc#PED-15633)

Update to NSS 3.112.4:

  * improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.
  * Improving the allocation of S/MIME DecryptSymKey.
  * store email on subject cache_entry in NSS trust domain.
  * Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.
  * Improve size calculations in CMS content buffering.
  * avoid integer overflow while escaping RFC822 Names.
  * Reject excessively large ASN.1 SEQUENCE OF in quickder.
  * Deep copy profile data in CERT_FindSMimeProfile.
  * Improve input validation in DSAU signature decoding.
  * avoid integer overflow in RSA_EMSAEncodePSS.
  * RSA_EMSAEncodePSS should validate the length of mHash.
  * Add a maximum cert uncompressed len and tests.
  * Clarify extension negotiation mechanism for TLS Handshakes.
  * ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.
  * Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.
  * Remove invalid PORT_Free().
  * free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.
  * make ss-&gt;ssl3.hs.cookie an owned-copy of the cookie. 

Update to NSS 3.112.3:

  * avoid integer overflow in platform-independent ghash

</description>
    <pkglist>
      <collection>
        <package name="libfreebl3" epoch="0" version="3.112.5" release="1.1" arch="x86_64" src="x86_64/libfreebl3-3.112.5-1.1.x86_64.rpm">
          <filename>libfreebl3-3.112.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="libfreebl3-debuginfo" epoch="0" version="3.112.5" release="1.1" arch="x86_64" src="x86_64/libfreebl3-debuginfo-3.112.5-1.1.x86_64.rpm">
          <filename>libfreebl3-debuginfo-3.112.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3" epoch="0" version="3.112.5" release="1.1" arch="x86_64" src="x86_64/libsoftokn3-3.112.5-1.1.x86_64.rpm">
          <filename>libsoftokn3-3.112.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="libsoftokn3-debuginfo" epoch="0" version="3.112.5" release="1.1" arch="x86_64" src="x86_64/libsoftokn3-debuginfo-3.112.5-1.1.x86_64.rpm">
          <filename>libsoftokn3-debuginfo-3.112.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.112.5" release="1.1" arch="src" src="src/mozilla-nss-3.112.5-1.1.src.rpm">
          <filename>mozilla-nss-3.112.5-1.1.src.rpm</filename>
        </package>
        <package name="mozilla-nss" epoch="0" version="3.112.5" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-3.112.5-1.1.x86_64.rpm">
          <filename>mozilla-nss-3.112.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs" epoch="0" version="3.112.5" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-certs-3.112.5-1.1.x86_64.rpm">
          <filename>mozilla-nss-certs-3.112.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-certs-debuginfo" epoch="0" version="3.112.5" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-certs-debuginfo-3.112.5-1.1.x86_64.rpm">
          <filename>mozilla-nss-certs-debuginfo-3.112.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-debuginfo" epoch="0" version="3.112.5" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-debuginfo-3.112.5-1.1.x86_64.rpm">
          <filename>mozilla-nss-debuginfo-3.112.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-debugsource" epoch="0" version="3.112.5" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-debugsource-3.112.5-1.1.x86_64.rpm">
          <filename>mozilla-nss-debugsource-3.112.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools" epoch="0" version="3.112.5" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-tools-3.112.5-1.1.x86_64.rpm">
          <filename>mozilla-nss-tools-3.112.5-1.1.x86_64.rpm</filename>
        </package>
        <package name="mozilla-nss-tools-debuginfo" epoch="0" version="3.112.5" release="1.1" arch="x86_64" src="x86_64/mozilla-nss-tools-debuginfo-3.112.5-1.1.x86_64.rpm">
          <filename>mozilla-nss-tools-debuginfo-3.112.5-1.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>693</id>
    <title>Security update for avahi</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1777461612" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261546" id="1261546" title="VUL-0: CVE-2026-34933: avahi: Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34933" id="CVE-2026-34933" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34933" type="cve" />
    </references>
    <description>This update for avahi fixes the following issues:

- CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546).
</description>
    <pkglist>
      <collection>
        <package name="avahi" epoch="0" version="0.8" release="9.1" arch="src" src="src/avahi-0.8-9.1.src.rpm">
          <filename>avahi-0.8-9.1.src.rpm</filename>
        </package>
        <package name="avahi" epoch="0" version="0.8" release="9.1" arch="x86_64" src="x86_64/avahi-0.8-9.1.x86_64.rpm">
          <filename>avahi-0.8-9.1.x86_64.rpm</filename>
        </package>
        <package name="avahi-debuginfo" epoch="0" version="0.8" release="9.1" arch="x86_64" src="x86_64/avahi-debuginfo-0.8-9.1.x86_64.rpm">
          <filename>avahi-debuginfo-0.8-9.1.x86_64.rpm</filename>
        </package>
        <package name="avahi-debugsource" epoch="0" version="0.8" release="9.1" arch="x86_64" src="x86_64/avahi-debugsource-0.8-9.1.x86_64.rpm">
          <filename>avahi-debugsource-0.8-9.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3" epoch="0" version="0.8" release="9.1" arch="x86_64" src="x86_64/libavahi-client3-0.8-9.1.x86_64.rpm">
          <filename>libavahi-client3-0.8-9.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-client3-debuginfo" epoch="0" version="0.8" release="9.1" arch="x86_64" src="x86_64/libavahi-client3-debuginfo-0.8-9.1.x86_64.rpm">
          <filename>libavahi-client3-debuginfo-0.8-9.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3" epoch="0" version="0.8" release="9.1" arch="x86_64" src="x86_64/libavahi-common3-0.8-9.1.x86_64.rpm">
          <filename>libavahi-common3-0.8-9.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-common3-debuginfo" epoch="0" version="0.8" release="9.1" arch="x86_64" src="x86_64/libavahi-common3-debuginfo-0.8-9.1.x86_64.rpm">
          <filename>libavahi-common3-debuginfo-0.8-9.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7" epoch="0" version="0.8" release="9.1" arch="x86_64" src="x86_64/libavahi-core7-0.8-9.1.x86_64.rpm">
          <filename>libavahi-core7-0.8-9.1.x86_64.rpm</filename>
        </package>
        <package name="libavahi-core7-debuginfo" epoch="0" version="0.8" release="9.1" arch="x86_64" src="x86_64/libavahi-core7-debuginfo-0.8-9.1.x86_64.rpm">
          <filename>libavahi-core7-debuginfo-0.8-9.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>694</id>
    <title>Security update for firewalld</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1777462377" />
    <references>
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4948" id="CVE-2026-4948" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4948" type="cve" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260903" id="1260903" title="VUL-0: CVE-2026-4948: firewalld: local unprivileged users can modify firewall state due to D-Bus setter mis-authorizations" type="bugzilla" />
    </references>
    <description>This update for firewalld fixes the following issues:

- CVE-2026-4948: local unprivileged users can modify the runtime firewall state without proper authentication due to
  D-Bus setter mis-authorizations (bsc#1260903).
</description>
    <pkglist>
      <collection>
        <package name="firewalld" epoch="0" version="2.0.0" release="2.1" arch="noarch" src="noarch/firewalld-2.0.0-2.1.noarch.rpm">
          <filename>firewalld-2.0.0-2.1.noarch.rpm</filename>
        </package>
        <package name="firewalld" epoch="0" version="2.0.0" release="2.1" arch="src" src="src/firewalld-2.0.0-2.1.src.rpm">
          <filename>firewalld-2.0.0-2.1.src.rpm</filename>
        </package>
        <package name="python3-firewall" epoch="0" version="2.0.0" release="2.1" arch="noarch" src="noarch/python3-firewall-2.0.0-2.1.noarch.rpm">
          <filename>python3-firewall-2.0.0-2.1.noarch.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>696</id>
    <title>Security update for containerd</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1777988179" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260296" id="1260296" title="VUL-0: CVE-2026-33186: containerd: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo-header" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33186" id="CVE-2026-33186" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33186" type="cve" />
    </references>
    <description>This update for containerd fixes the following issue:

- CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 `:path`
  pseudo-header (bsc#1260296).
</description>
    <pkglist>
      <collection>
        <package name="containerd" epoch="0" version="1.7.29" release="2.1" arch="src" src="src/containerd-1.7.29-2.1.src.rpm">
          <filename>containerd-1.7.29-2.1.src.rpm</filename>
        </package>
        <package name="containerd" epoch="0" version="1.7.29" release="2.1" arch="x86_64" src="x86_64/containerd-1.7.29-2.1.x86_64.rpm">
          <filename>containerd-1.7.29-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>699</id>
    <title>Security update for python-pyOpenSSL</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1778343374" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1262803" id="1262803" title="VUL-0: CVE-2026-40475: python-pyOpenSSL: improper input handling of null bytes can lead to silent data truncation and security-state inconsistency" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40475" id="CVE-2026-40475" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40475" type="cve" />
    </references>
    <description>This update for python-pyOpenSSL fixes the following issue

- CVE-2026-40475: improper input handling of null bytes can lead to silent data truncation and security-state
  inconsistency (bsc#1262803).
</description>
    <pkglist>
      <collection>
        <package name="python-pyOpenSSL" epoch="0" version="24.0.0" release="3.1" arch="src" src="src/python-pyOpenSSL-24.0.0-3.1.src.rpm">
          <filename>python-pyOpenSSL-24.0.0-3.1.src.rpm</filename>
        </package>
        <package name="python311-pyOpenSSL" epoch="0" version="24.0.0" release="3.1" arch="noarch" src="noarch/python311-pyOpenSSL-24.0.0-3.1.noarch.rpm">
          <filename>python311-pyOpenSSL-24.0.0-3.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>700</id>
    <title>Security update for python-lxml</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1778343284" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1263254" id="1263254" title="VUL-0: CVE-2026-41066: python-lxml: Information disclosure via untrusted XML input leading to local file read" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41066" id="CVE-2026-41066" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41066" type="cve" />
    </references>
    <description>This update for python-lxml fixes the following issue

- CVE-2026-41066: Information disclosure via untrusted XML input leading to local file read (bsc#1263254).
</description>
    <pkglist>
      <collection>
        <package name="python-lxml" epoch="0" version="4.9.3" release="2.1" arch="src" src="src/python-lxml-4.9.3-2.1.src.rpm">
          <filename>python-lxml-4.9.3-2.1.src.rpm</filename>
        </package>
        <package name="python-lxml-debugsource" epoch="0" version="4.9.3" release="2.1" arch="x86_64" src="x86_64/python-lxml-debugsource-4.9.3-2.1.x86_64.rpm">
          <filename>python-lxml-debugsource-4.9.3-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-lxml" epoch="0" version="4.9.3" release="2.1" arch="x86_64" src="x86_64/python311-lxml-4.9.3-2.1.x86_64.rpm">
          <filename>python311-lxml-4.9.3-2.1.x86_64.rpm</filename>
        </package>
        <package name="python311-lxml-debuginfo" epoch="0" version="4.9.3" release="2.1" arch="x86_64" src="x86_64/python311-lxml-debuginfo-4.9.3-2.1.x86_64.rpm">
          <filename>python311-lxml-debuginfo-4.9.3-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>701</id>
    <title>Security update for krb5</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1778343284" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1263366" id="1263366" title="VUL-0: CVE-2026-40355: krb5: Denial of Service via NULL pointer dereference in NegoEx mechanism" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1263367" id="1263367" title="VUL-0: CVE-2026-40356: krb5: Denial of Service via integer underflow and out-of-bounds read" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40355" id="CVE-2026-40355" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40355" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40356" id="CVE-2026-40356" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40356" type="cve" />
    </references>
    <description>This update for krb5 fixes the following issues

- CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#1263366).
- CVE-2026-40356: Denial of Service via integer underflow and out-of-bounds read (bsc#1263367).
</description>
    <pkglist>
      <collection>
        <package name="krb5" epoch="0" version="1.20.1" release="8.1" arch="src" src="src/krb5-1.20.1-8.1.src.rpm">
          <filename>krb5-1.20.1-8.1.src.rpm</filename>
        </package>
        <package name="krb5" epoch="0" version="1.20.1" release="8.1" arch="x86_64" src="x86_64/krb5-1.20.1-8.1.x86_64.rpm">
          <filename>krb5-1.20.1-8.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-debuginfo" epoch="0" version="1.20.1" release="8.1" arch="x86_64" src="x86_64/krb5-debuginfo-1.20.1-8.1.x86_64.rpm">
          <filename>krb5-debuginfo-1.20.1-8.1.x86_64.rpm</filename>
        </package>
        <package name="krb5-debugsource" epoch="0" version="1.20.1" release="8.1" arch="x86_64" src="x86_64/krb5-debugsource-1.20.1-8.1.x86_64.rpm">
          <filename>krb5-debugsource-1.20.1-8.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>702</id>
    <title>Security update for grub2</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1778489180" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252930" id="1252930" title="VUL-0: CVE-2025-54770: grub2: Missing unregister call for net_set_vlan command may lead to use-after-free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252931" id="1252931" title="VUL-0: CVE-2025-54771: grub2: grub_file_close() does not properly controls the fs refcount" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252932" id="1252932" title="VUL-0: CVE-2025-61661: grub2: Out-of-bounds write in grub_usb_get_string() function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252933" id="1252933" title="VUL-0: CVE-2025-61662: grub2: Missing unregister call for gettext command may lead to use-after-free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252934" id="1252934" title="VUL-0: CVE-2025-61663: grub2: Missing unregister call for normal commands may lead to use-after-free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1252935" id="1252935" title="VUL-0: CVE-2025-61664: grub2: Missing unregister call for normal_exit command may lead to use-after-free" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54770" id="CVE-2025-54770" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54770" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54771" id="CVE-2025-54771" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54771" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61661" id="CVE-2025-61661" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61661" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61662" id="CVE-2025-61662" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61662" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61663" id="CVE-2025-61663" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61663" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61664" id="CVE-2025-61664" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61664" type="cve" />
    </references>
    <description>This update for grub2 fixes the following issues

- CVE-2025-54770: Missing unregister call for net_set_vlan command may lead to use-after-free (bsc#1252930).
- CVE-2025-54771: grub_file_close() does not properly controls the fs refcount (bsc#1252931).
- CVE-2025-61661: Out-of-bounds write in grub_usb_get_string() function (bsc#1252932).
- CVE-2025-61662: Missing unregister call for gettext command may lead to use-after-free (bsc#1252933).
- CVE-2025-61663: Missing unregister call for normal commands may lead to use-after-free (bsc#1252934).
- CVE-2025-61664: Missing unregister call for normal_exit command may lead to use-after-free (bsc#1252935).

Changes for grub2:

- Bump upstream SBAT generation to 6
</description>
    <pkglist>
      <collection>
        <package name="grub2" epoch="0" version="2.12~rc1" release="8.1" arch="src" src="src/grub2-2.12~rc1-8.1.src.rpm">
          <filename>grub2-2.12~rc1-8.1.src.rpm</filename>
        </package>
        <package name="grub2" epoch="0" version="2.12~rc1" release="8.1" arch="x86_64" src="x86_64/grub2-2.12~rc1-8.1.x86_64.rpm">
          <filename>grub2-2.12~rc1-8.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-debuginfo" epoch="0" version="2.12~rc1" release="8.1" arch="x86_64" src="x86_64/grub2-debuginfo-2.12~rc1-8.1.x86_64.rpm">
          <filename>grub2-debuginfo-2.12~rc1-8.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-debugsource" epoch="0" version="2.12~rc1" release="8.1" arch="x86_64" src="x86_64/grub2-debugsource-2.12~rc1-8.1.x86_64.rpm">
          <filename>grub2-debugsource-2.12~rc1-8.1.x86_64.rpm</filename>
        </package>
        <package name="grub2-i386-pc" epoch="0" version="2.12~rc1" release="8.1" arch="noarch" src="noarch/grub2-i386-pc-2.12~rc1-8.1.noarch.rpm">
          <filename>grub2-i386-pc-2.12~rc1-8.1.noarch.rpm</filename>
        </package>
        <package name="grub2-snapper-plugin" epoch="0" version="2.12~rc1" release="8.1" arch="noarch" src="noarch/grub2-snapper-plugin-2.12~rc1-8.1.noarch.rpm">
          <filename>grub2-snapper-plugin-2.12~rc1-8.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-efi" epoch="0" version="2.12~rc1" release="8.1" arch="noarch" src="noarch/grub2-x86_64-efi-2.12~rc1-8.1.noarch.rpm">
          <filename>grub2-x86_64-efi-2.12~rc1-8.1.noarch.rpm</filename>
        </package>
        <package name="grub2-x86_64-xen" epoch="0" version="2.12~rc1" release="8.1" arch="noarch" src="noarch/grub2-x86_64-xen-2.12~rc1-8.1.noarch.rpm">
          <filename>grub2-x86_64-xen-2.12~rc1-8.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>704</id>
    <title>Security update for openssh</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1778578733" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261427" id="1261427" title="VUL-0: CVE-2026-35385: openssh: a file downloaded by scp may be installed setuid or setgid" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261430" id="1261430" title="VUL-0: CVE-2026-35414: openssh: mishandling of authorized_keys principals option" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35385" id="CVE-2026-35385" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35385" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35414" id="CVE-2026-35414" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35414" type="cve" />
    </references>
    <description>This update for openssh fixes the following issues


</description>
    <pkglist>
      <collection>
        <package name="openssh" epoch="0" version="9.6p1" release="5.1" arch="src" src="src/openssh-9.6p1-5.1.src.rpm">
          <filename>openssh-9.6p1-5.1.src.rpm</filename>
        </package>
        <package name="openssh" epoch="0" version="9.6p1" release="5.1" arch="x86_64" src="x86_64/openssh-9.6p1-5.1.x86_64.rpm">
          <filename>openssh-9.6p1-5.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients" epoch="0" version="9.6p1" release="5.1" arch="x86_64" src="x86_64/openssh-clients-9.6p1-5.1.x86_64.rpm">
          <filename>openssh-clients-9.6p1-5.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-clients-debuginfo" epoch="0" version="9.6p1" release="5.1" arch="x86_64" src="x86_64/openssh-clients-debuginfo-9.6p1-5.1.x86_64.rpm">
          <filename>openssh-clients-debuginfo-9.6p1-5.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common" epoch="0" version="9.6p1" release="5.1" arch="x86_64" src="x86_64/openssh-common-9.6p1-5.1.x86_64.rpm">
          <filename>openssh-common-9.6p1-5.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-common-debuginfo" epoch="0" version="9.6p1" release="5.1" arch="x86_64" src="x86_64/openssh-common-debuginfo-9.6p1-5.1.x86_64.rpm">
          <filename>openssh-common-debuginfo-9.6p1-5.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-debuginfo" epoch="0" version="9.6p1" release="5.1" arch="x86_64" src="x86_64/openssh-debuginfo-9.6p1-5.1.x86_64.rpm">
          <filename>openssh-debuginfo-9.6p1-5.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-debugsource" epoch="0" version="9.6p1" release="5.1" arch="x86_64" src="x86_64/openssh-debugsource-9.6p1-5.1.x86_64.rpm">
          <filename>openssh-debugsource-9.6p1-5.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-fips" epoch="0" version="9.6p1" release="5.1" arch="x86_64" src="x86_64/openssh-fips-9.6p1-5.1.x86_64.rpm">
          <filename>openssh-fips-9.6p1-5.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server" epoch="0" version="9.6p1" release="5.1" arch="x86_64" src="x86_64/openssh-server-9.6p1-5.1.x86_64.rpm">
          <filename>openssh-server-9.6p1-5.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server-config-rootlogin" epoch="0" version="9.6p1" release="5.1" arch="x86_64" src="x86_64/openssh-server-config-rootlogin-9.6p1-5.1.x86_64.rpm">
          <filename>openssh-server-config-rootlogin-9.6p1-5.1.x86_64.rpm</filename>
        </package>
        <package name="openssh-server-debuginfo" epoch="0" version="9.6p1" release="5.1" arch="x86_64" src="x86_64/openssh-server-debuginfo-9.6p1-5.1.x86_64.rpm">
          <filename>openssh-server-debuginfo-9.6p1-5.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>706</id>
    <title>Security update for freeipmi</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1778842086" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260414" id="1260414" title="VUL-0: CVE-2026-33554: freeipmi: improper memory handling and data validation can lead to stack buffer overflows and acceptance of malformed payloads/responses" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33554" id="CVE-2026-33554" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33554" type="cve" />
    </references>
    <description>This update for freeipmi fixes the following issue

- CVE-2026-33554: improper memory handling and data validation can lead to stack buffer overflows and acceptance of
  malformed payloads/responses (bsc#1260414).
</description>
    <pkglist>
      <collection>
        <package name="freeipmi" epoch="0" version="1.6.11" release="2.1" arch="src" src="src/freeipmi-1.6.11-2.1.src.rpm">
          <filename>freeipmi-1.6.11-2.1.src.rpm</filename>
        </package>
        <package name="freeipmi-debugsource" epoch="0" version="1.6.11" release="2.1" arch="x86_64" src="x86_64/freeipmi-debugsource-1.6.11-2.1.x86_64.rpm">
          <filename>freeipmi-debugsource-1.6.11-2.1.x86_64.rpm</filename>
        </package>
        <package name="libfreeipmi17" epoch="0" version="1.6.11" release="2.1" arch="x86_64" src="x86_64/libfreeipmi17-1.6.11-2.1.x86_64.rpm">
          <filename>libfreeipmi17-1.6.11-2.1.x86_64.rpm</filename>
        </package>
        <package name="libfreeipmi17-debuginfo" epoch="0" version="1.6.11" release="2.1" arch="x86_64" src="x86_64/libfreeipmi17-debuginfo-1.6.11-2.1.x86_64.rpm">
          <filename>libfreeipmi17-debuginfo-1.6.11-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>707</id>
    <title>Security update for tiff</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1778841828" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1260411" id="1260411" title="VUL-0: CVE-2026-4775: tiff: signed integer overflow in the `putcontig8bitYCbCr44tile` function" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4775" id="CVE-2026-4775" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4775" type="cve" />
    </references>
    <description>This update for tiff fixes the following issue

- CVE-2026-4775: signed integer overflow in the `putcontig8bitYCbCr44tile` function (bsc#1260411).
</description>
    <pkglist>
      <collection>
        <package name="libtiff6" epoch="0" version="4.7.1" release="2.1" arch="x86_64" src="x86_64/libtiff6-4.7.1-2.1.x86_64.rpm">
          <filename>libtiff6-4.7.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="libtiff6-debuginfo" epoch="0" version="4.7.1" release="2.1" arch="x86_64" src="x86_64/libtiff6-debuginfo-4.7.1-2.1.x86_64.rpm">
          <filename>libtiff6-debuginfo-4.7.1-2.1.x86_64.rpm</filename>
        </package>
        <package name="tiff" epoch="0" version="4.7.1" release="2.1" arch="src" src="src/tiff-4.7.1-2.1.src.rpm">
          <filename>tiff-4.7.1-2.1.src.rpm</filename>
        </package>
        <package name="tiff-debugsource" epoch="0" version="4.7.1" release="2.1" arch="x86_64" src="x86_64/tiff-debugsource-4.7.1-2.1.x86_64.rpm">
          <filename>tiff-debugsource-4.7.1-2.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>708</id>
    <title>Security update for rsync</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1778841828" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1262223" id="1262223" title="VUL-0: CVE-2026-41035: rsync: count of entries mismatch can lead to a use-after-free" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41035" id="CVE-2026-41035" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41035" type="cve" />
    </references>
    <description>This update for rsync fixes the following issue

- CVE-2026-41035: count of entries mismatch can lead to a use-after-free (bsc#1262223).
</description>
    <pkglist>
      <collection>
        <package name="rsync" epoch="0" version="3.2.7" release="6.1" arch="src" src="src/rsync-3.2.7-6.1.src.rpm">
          <filename>rsync-3.2.7-6.1.src.rpm</filename>
        </package>
        <package name="rsync" epoch="0" version="3.2.7" release="6.1" arch="x86_64" src="x86_64/rsync-3.2.7-6.1.x86_64.rpm">
          <filename>rsync-3.2.7-6.1.x86_64.rpm</filename>
        </package>
        <package name="rsync-debuginfo" epoch="0" version="3.2.7" release="6.1" arch="x86_64" src="x86_64/rsync-debuginfo-3.2.7-6.1.x86_64.rpm">
          <filename>rsync-debuginfo-3.2.7-6.1.x86_64.rpm</filename>
        </package>
        <package name="rsync-debugsource" epoch="0" version="3.2.7" release="6.1" arch="x86_64" src="x86_64/rsync-debugsource-3.2.7-6.1.x86_64.rpm">
          <filename>rsync-debugsource-3.2.7-6.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>709</id>
    <title>Security update for dnsmasq</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1778841829" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1247812" id="1247812" title="aardvark-dns upstream tests make dnsmasq dump core" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257934" id="1257934" title="libnettle: update to 4.0 breaks dnsmasq and gnutls" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1258251" id="1258251" title="VUL-0: CVE-2026-2291: dnsmasq:  VU#471747: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1262487" id="1262487" title="VUL-0: CVE-2026-6507: dnsmasq: out-of-bounds write in DHCP BOOTREPLY processing can lead to denial of service" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1265001" id="1265001" title="VUL-0: CVE-2026-4890: dnsmasq: DoS vulnerability in the DNSSEC validation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1265002" id="1265002" title="VUL-0: CVE-2026-4891: dnsmasq: heap-based out-of-bounds read vulnerability in the DNSSEC validation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1265003" id="1265003" title="VUL-0: CVE-2026-4892: dnsmasq: heap-based out-of-bounds write vulnerability in the DHCPv6 implementation" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1265004" id="1265004" title="VUL-0: CVE-2026-4893: dnsmasq: information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1265006" id="1265006" title="VUL-0: CVE-2026-5172: dnsmasq: buffer overflow in dnsmasq’s extract_addresses() function" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2291" id="CVE-2026-2291" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2291" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4890" id="CVE-2026-4890" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4890" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4891" id="CVE-2026-4891" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4891" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4892" id="CVE-2026-4892" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4892" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4893" id="CVE-2026-4893" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4893" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5172" id="CVE-2026-5172" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5172" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6507" id="CVE-2026-6507" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6507" type="cve" />
      <reference href="https://jira.suse.com/browse/PED-266" id="PED-266" title="https://jira.suse.com/browse/PED-266" type="jira" />
    </references>
    <description>This update for dnsmasq fixes the following issues

Security issues:

- CVE-2026-2291: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect
  (bsc#1258251).
- CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001).
- CVE-2026-4891: heap-based out-of-bounds read vulnerability in the DNSSEC validation (bsc#1265002).
- CVE-2026-4892: heap-based out-of-bounds write vulnerability in the DHCPv6 implementation (bsc#1265003).
- CVE-2026-4893: information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks
  (bsc#1265004).
- CVE-2026-5172: buffer overflow in dnsmasq's extract_addresses() function (bsc#1265006).
- CVE-2026-6507: out-of-bounds write in DHCP BOOTREPLY processing can lead to denial of service (bsc#1262487).

Non security issues:

- aardvark-dns upstream tests make dnsmasq dump core (bsc#1247812).
- Drop rcFOO symlinks for CODE16 (jsc#PED-266).
- libnettle: update to 4.0 breaks dnsmasq and gnutls (bsc#1257934).

Changes for dnsmasq:

- Update to security release 2.92rel2
</description>
    <pkglist>
      <collection>
        <package name="dnsmasq" epoch="0" version="2.92rel2" release="1.1" arch="src" src="src/dnsmasq-2.92rel2-1.1.src.rpm">
          <filename>dnsmasq-2.92rel2-1.1.src.rpm</filename>
        </package>
        <package name="dnsmasq" epoch="0" version="2.92rel2" release="1.1" arch="x86_64" src="x86_64/dnsmasq-2.92rel2-1.1.x86_64.rpm">
          <filename>dnsmasq-2.92rel2-1.1.x86_64.rpm</filename>
        </package>
        <package name="dnsmasq-debuginfo" epoch="0" version="2.92rel2" release="1.1" arch="x86_64" src="x86_64/dnsmasq-debuginfo-2.92rel2-1.1.x86_64.rpm">
          <filename>dnsmasq-debuginfo-2.92rel2-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>710</id>
    <title>Security update for glibc</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1778843441" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261206" id="1261206" title="VUL-0: CVE-2026-4046: glibc: assertion failure when converting inputs may be used to remotely crash an application" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1262464" id="1262464" title="VUL-0: CVE-2026-5928: glibc: libio: ungetwc could be used to leak data on special conditions" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1262465" id="1262465" title="VUL-0: CVE-2026-5450: glibc: stdio-common: scanf %mc pattern will cause heap overflow when width &gt; 1024" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4046" id="CVE-2026-4046" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4046" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5450" id="CVE-2026-5450" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5450" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5928" id="CVE-2026-5928" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5928" type="cve" />
    </references>
    <description>This update for glibc fixes the following issues

- CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261206).
- CVE-2026-5450: stdio-common: scanf %mc pattern will cause heap overflow when width &gt; 1024 (bsc#1262465).
- CVE-2026-5928: libio: ungetwc could be used to leak data on special conditions (bsc#1262464).
</description>
    <pkglist>
      <collection>
        <package name="glibc" epoch="0" version="2.38" release="13.1" arch="src" src="src/glibc-2.38-13.1.src.rpm">
          <filename>glibc-2.38-13.1.src.rpm</filename>
        </package>
        <package name="glibc" epoch="0" version="2.38" release="13.1" arch="x86_64" src="x86_64/glibc-2.38-13.1.x86_64.rpm">
          <filename>glibc-2.38-13.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-debuginfo" epoch="0" version="2.38" release="13.1" arch="x86_64" src="x86_64/glibc-debuginfo-2.38-13.1.x86_64.rpm">
          <filename>glibc-debuginfo-2.38-13.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-debugsource" epoch="0" version="2.38" release="13.1" arch="x86_64" src="x86_64/glibc-debugsource-2.38-13.1.x86_64.rpm">
          <filename>glibc-debugsource-2.38-13.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel" epoch="0" version="2.38" release="13.1" arch="x86_64" src="x86_64/glibc-devel-2.38-13.1.x86_64.rpm">
          <filename>glibc-devel-2.38-13.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-devel-debuginfo" epoch="0" version="2.38" release="13.1" arch="x86_64" src="x86_64/glibc-devel-debuginfo-2.38-13.1.x86_64.rpm">
          <filename>glibc-devel-debuginfo-2.38-13.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale" epoch="0" version="2.38" release="13.1" arch="x86_64" src="x86_64/glibc-locale-2.38-13.1.x86_64.rpm">
          <filename>glibc-locale-2.38-13.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base" epoch="0" version="2.38" release="13.1" arch="x86_64" src="x86_64/glibc-locale-base-2.38-13.1.x86_64.rpm">
          <filename>glibc-locale-base-2.38-13.1.x86_64.rpm</filename>
        </package>
        <package name="glibc-locale-base-debuginfo" epoch="0" version="2.38" release="13.1" arch="x86_64" src="x86_64/glibc-locale-base-debuginfo-2.38-13.1.x86_64.rpm">
          <filename>glibc-locale-base-debuginfo-2.38-13.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>725</id>
    <title>Security update for gnutls</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1779441486" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1263704" id="1263704" title="VUL-0: CVE-2026-33845: gnutls: buffers: switch from end_offset over to frag_length" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1263705" id="1263705" title="VUL-0: CVE-2026-33846: gnutls: buffers: add more checks to DTLS reassembly" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1263707" id="1263707" title="VUL-0: CVE-2026-3833: gnutls: x509/name-constraints: compare domain names case-insensitive" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1263708" id="1263708" title="VUL-0: CVE-2026-42009: gnutls: lib/buffers: ensure packets have differing sequence numbers" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1263709" id="1263709" title="VUL-0: CVE-2026-42010: gnutls: lib/auth/rsa_psk: fix binary PSK identity lookup" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1263710" id="1263710" title="VUL-0: CVE-2026-42011: gnutls: x509/name_constraints: fix intersecting empty constraints" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1263711" id="1263711" title="VUL-0: CVE-2026-42012: gnutls: x509/hostname-verify: make URI/SRV SAN preclude CN fallback" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1263712" id="1263712" title="VUL-0: CVE-2026-42013: gnutls: x509: prevent fallback on oversized SAN" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1263713" id="1263713" title="VUL-0: CVE-2026-42014: gnutls: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1263714" id="1263714" title="VUL-0: CVE-2026-42015: gnutls: x509/pkcs12_bag: fix off-by-one in bag element bounds chec" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1263715" id="1263715" title="VUL-0: CVE-2026-5260: gnutls: lib/pkcs11_privkey: guard against overreading on short ciphertexts" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1263716" id="1263716" title="VUL-0: CVE-2026-5419: gnutls: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3833" id="CVE-2026-3833" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3833" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5260" id="CVE-2026-5260" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5260" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5419" id="CVE-2026-5419" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5419" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33845" id="CVE-2026-33845" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33845" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33846" id="CVE-2026-33846" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33846" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42009" id="CVE-2026-42009" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42009" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42010" id="CVE-2026-42010" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42010" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42011" id="CVE-2026-42011" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42011" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42012" id="CVE-2026-42012" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42012" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42013" id="CVE-2026-42013" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42013" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42014" id="CVE-2026-42014" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42014" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42015" id="CVE-2026-42015" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42015" type="cve" />
    </references>
    <description>This update for gnutls fixes the following issues

- CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).
- CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).
- CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).
- CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).
- CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).
- CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).
- CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).
- CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).
- CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).
- CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).
- CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).
- CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).
</description>
    <pkglist>
      <collection>
        <package name="gnutls" epoch="0" version="3.8.3" release="7.1" arch="src" src="src/gnutls-3.8.3-7.1.src.rpm">
          <filename>gnutls-3.8.3-7.1.src.rpm</filename>
        </package>
        <package name="gnutls" epoch="0" version="3.8.3" release="7.1" arch="x86_64" src="x86_64/gnutls-3.8.3-7.1.x86_64.rpm">
          <filename>gnutls-3.8.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls-debuginfo" epoch="0" version="3.8.3" release="7.1" arch="x86_64" src="x86_64/gnutls-debuginfo-3.8.3-7.1.x86_64.rpm">
          <filename>gnutls-debuginfo-3.8.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="gnutls-debugsource" epoch="0" version="3.8.3" release="7.1" arch="x86_64" src="x86_64/gnutls-debugsource-3.8.3-7.1.x86_64.rpm">
          <filename>gnutls-debugsource-3.8.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30" epoch="0" version="3.8.3" release="7.1" arch="x86_64" src="x86_64/libgnutls30-3.8.3-7.1.x86_64.rpm">
          <filename>libgnutls30-3.8.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="libgnutls30-debuginfo" epoch="0" version="3.8.3" release="7.1" arch="x86_64" src="x86_64/libgnutls30-debuginfo-3.8.3-7.1.x86_64.rpm">
          <filename>libgnutls30-debuginfo-3.8.3-7.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>712</id>
    <title>Recommended update for docker</title>
    <severity>low</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1778842425" />
    <references>
    </references>
    <description>This update for docker fixes the following issue

Changes for docker:

- Update to Docker 29.4.0. 
- Update to buildx 0.33.0.
</description>
    <message>Updating docker will restart the docker service, which may stop your docker containers. Do you want to proceed with the update?</message>
    <pkglist>
      <collection>
        <package name="docker" epoch="0" version="29.4.0_ce" release="10.1" arch="src" src="src/docker-29.4.0_ce-10.1.src.rpm">
          <filename>docker-29.4.0_ce-10.1.src.rpm</filename>
        </package>
        <package name="docker" epoch="0" version="29.4.0_ce" release="10.1" arch="x86_64" src="x86_64/docker-29.4.0_ce-10.1.x86_64.rpm">
          <filename>docker-29.4.0_ce-10.1.x86_64.rpm</filename>
        </package>
        <package name="docker-debuginfo" epoch="0" version="29.4.0_ce" release="10.1" arch="x86_64" src="x86_64/docker-debuginfo-29.4.0_ce-10.1.x86_64.rpm">
          <filename>docker-debuginfo-29.4.0_ce-10.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>715</id>
    <title>Recommended update for libzypp, zypper, libsolv</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1778851764" />
    <references>
      <reference href="https://jira.suse.com/browse/PED-11922" id="PED-11922" title="Deliver and Verify Post Quantum Signatures for product repositories" type="jira" />
    </references>
    <description>This update for libzypp, zypper, libsolv fixes the following issues:

Changes in libsolv:

- update to version 0.7.37:
    * fix parsing of sha512 checksums in debian repositories
    * improve speed of dirpool_add_dir makeing parsing of filelists.xml twice as fast
    * fix parsing of recommands in the old Mandriva synthesis format

Changes in libzypp:

- update to version 17.38.8:
    * Mandatory signature verification plugin support (jsc#PED-11922)

Changes in zypper:

- update to version 1.14.97:
    * Add --filter-version-change to zypper lu.
      Adds filtering by version change significance to reduce noise in
      update listings. Supports levels: rebuild (hides rebuild-only changes) 
      and package (hides all release-only changes).
</description>
    <pkglist>
      <collection>
        <package name="libsolv" epoch="0" version="0.7.37" release="1.1" arch="src" src="src/libsolv-0.7.37-1.1.src.rpm">
          <filename>libsolv-0.7.37-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-debugsource" epoch="0" version="0.7.37" release="1.1" arch="x86_64" src="x86_64/libsolv-debugsource-0.7.37-1.1.x86_64.rpm">
          <filename>libsolv-debugsource-0.7.37-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base" epoch="0" version="0.7.37" release="1.1" arch="x86_64" src="x86_64/libsolv-tools-base-0.7.37-1.1.x86_64.rpm">
          <filename>libsolv-tools-base-0.7.37-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libsolv-tools-base-debuginfo" epoch="0" version="0.7.37" release="1.1" arch="x86_64" src="x86_64/libsolv-tools-base-debuginfo-0.7.37-1.1.x86_64.rpm">
          <filename>libsolv-tools-base-debuginfo-0.7.37-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.38.8" release="1.1" arch="src" src="src/libzypp-17.38.8-1.1.src.rpm">
          <filename>libzypp-17.38.8-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp" epoch="0" version="17.38.8" release="1.1" arch="x86_64" src="x86_64/libzypp-17.38.8-1.1.x86_64.rpm">
          <filename>libzypp-17.38.8-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp-debuginfo" epoch="0" version="17.38.8" release="1.1" arch="x86_64" src="x86_64/libzypp-debuginfo-17.38.8-1.1.x86_64.rpm">
          <filename>libzypp-debuginfo-17.38.8-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="libzypp-debugsource" epoch="0" version="17.38.8" release="1.1" arch="x86_64" src="x86_64/libzypp-debugsource-17.38.8-1.1.x86_64.rpm">
          <filename>libzypp-debugsource-17.38.8-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.97" release="1.1" arch="src" src="src/zypper-1.14.97-1.1.src.rpm">
          <filename>zypper-1.14.97-1.1.src.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper" epoch="0" version="1.14.97" release="1.1" arch="x86_64" src="x86_64/zypper-1.14.97-1.1.x86_64.rpm">
          <filename>zypper-1.14.97-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-debuginfo" epoch="0" version="1.14.97" release="1.1" arch="x86_64" src="x86_64/zypper-debuginfo-1.14.97-1.1.x86_64.rpm">
          <filename>zypper-debuginfo-1.14.97-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-debugsource" epoch="0" version="1.14.97" release="1.1" arch="x86_64" src="x86_64/zypper-debugsource-1.14.97-1.1.x86_64.rpm">
          <filename>zypper-debugsource-1.14.97-1.1.x86_64.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
        <package name="zypper-needs-restarting" epoch="0" version="1.14.97" release="1.1" arch="noarch" src="noarch/zypper-needs-restarting-1.14.97-1.1.noarch.rpm">
          <filename>zypper-needs-restarting-1.14.97-1.1.noarch.rpm</filename>
          <restart_suggested>True</restart_suggested>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>714</id>
    <title>Security update for iproute2</title>
    <severity>low</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1778841829" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204562" id="1204562" title="L3-Question: Improve visibility of created and bound - but not connected nor listening - TCP ports" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234383" id="1234383" title="'ss -lneput' triggers &quot;Failed to open cgroup2 by ID&quot; messages [ref:_00D1igLOd._500TrOxhmH:ref]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1243005" id="1243005" title="iproute2: tracking bug for post-6.4 folow-up fixes" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1248660" id="1248660" title="L3-Question: IPsec encryption offloading to Nvidia Connectx NIC cards [ thread::Es_DHvVVLKS6i-hcz9GBNCs:: ]" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254324" id="1254324" title="VUL-0: CVE-2024-58251: iproute2: denial of service via terminal escape sequences" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58251" id="CVE-2024-58251" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58251" type="cve" />
    </references>
    <description>This update for iproute2 fixes the following issue

- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324).

Changes for iproute2:

- support display of bound but unconnected sockets (bsc#1204562).
- avoid spurious cgroup warning (bsc#1234383).
- add post-6.4 follow-up fixes (bsc#1243005).
- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660).
</description>
    <pkglist>
      <collection>
        <package name="iproute2" epoch="0" version="6.4" release="1.1" arch="src" src="src/iproute2-6.4-1.1.src.rpm">
          <filename>iproute2-6.4-1.1.src.rpm</filename>
        </package>
        <package name="iproute2" epoch="0" version="6.4" release="1.1" arch="x86_64" src="x86_64/iproute2-6.4-1.1.x86_64.rpm">
          <filename>iproute2-6.4-1.1.x86_64.rpm</filename>
        </package>
        <package name="iproute2-debuginfo" epoch="0" version="6.4" release="1.1" arch="x86_64" src="x86_64/iproute2-debuginfo-6.4-1.1.x86_64.rpm">
          <filename>iproute2-debuginfo-6.4-1.1.x86_64.rpm</filename>
        </package>
        <package name="iproute2-debugsource" epoch="0" version="6.4" release="1.1" arch="x86_64" src="x86_64/iproute2-debugsource-6.4-1.1.x86_64.rpm">
          <filename>iproute2-debugsource-6.4-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>721</id>
    <title>Security update for util-linux</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1779362195" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261606" id="1261606" title="VUL-0: CVE-2026-27456: util-linux: TOCTOU in the mount program when setting up loop devices" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456" id="CVE-2026-27456" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456" type="cve" />
    </references>
    <description>This update for util-linux fixes the following issue

- CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606).
</description>
    <pkglist>
      <collection>
        <package name="libblkid1" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/libblkid1-2.39.3-7.1.x86_64.rpm">
          <filename>libblkid1-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="libblkid1-debuginfo" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/libblkid1-debuginfo-2.39.3-7.1.x86_64.rpm">
          <filename>libblkid1-debuginfo-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/libfdisk1-2.39.3-7.1.x86_64.rpm">
          <filename>libfdisk1-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="libfdisk1-debuginfo" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/libfdisk1-debuginfo-2.39.3-7.1.x86_64.rpm">
          <filename>libfdisk1-debuginfo-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/libmount1-2.39.3-7.1.x86_64.rpm">
          <filename>libmount1-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="libmount1-debuginfo" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/libmount1-debuginfo-2.39.3-7.1.x86_64.rpm">
          <filename>libmount1-debuginfo-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/libsmartcols1-2.39.3-7.1.x86_64.rpm">
          <filename>libsmartcols1-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="libsmartcols1-debuginfo" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/libsmartcols1-debuginfo-2.39.3-7.1.x86_64.rpm">
          <filename>libsmartcols1-debuginfo-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/libuuid1-2.39.3-7.1.x86_64.rpm">
          <filename>libuuid1-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="libuuid1-debuginfo" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/libuuid1-debuginfo-2.39.3-7.1.x86_64.rpm">
          <filename>libuuid1-debuginfo-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.39.3" release="7.1" arch="src" src="src/util-linux-2.39.3-7.1.src.rpm">
          <filename>util-linux-2.39.3-7.1.src.rpm</filename>
        </package>
        <package name="util-linux" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/util-linux-2.39.3-7.1.x86_64.rpm">
          <filename>util-linux-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-debuginfo" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/util-linux-debuginfo-2.39.3-7.1.x86_64.rpm">
          <filename>util-linux-debuginfo-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-debugsource" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/util-linux-debugsource-2.39.3-7.1.x86_64.rpm">
          <filename>util-linux-debugsource-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.39.3" release="7.1" arch="src" src="src/util-linux-systemd-2.39.3-7.1.src.rpm">
          <filename>util-linux-systemd-2.39.3-7.1.src.rpm</filename>
        </package>
        <package name="util-linux-systemd" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/util-linux-systemd-2.39.3-7.1.x86_64.rpm">
          <filename>util-linux-systemd-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd-debuginfo" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/util-linux-systemd-debuginfo-2.39.3-7.1.x86_64.rpm">
          <filename>util-linux-systemd-debuginfo-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        <package name="util-linux-systemd-debugsource" epoch="0" version="2.39.3" release="7.1" arch="x86_64" src="x86_64/util-linux-systemd-debugsource-2.39.3-7.1.x86_64.rpm">
          <filename>util-linux-systemd-debugsource-2.39.3-7.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>726</id>
    <title>Security update for cockpit</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1779442005" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1257836" id="1257836" title="VUL-0: CVE-2026-25547: cockpit-podman,cockpit,cockpit-machines,cockpit-tukit: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1265040" id="1265040" title="VUL-0: CVE-2026-4802: cockpit: remote command execution via unsanitized user-controlled parameters within crafted links in system logs UI" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4802" id="CVE-2026-4802" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4802" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25547" id="CVE-2026-25547" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25547" type="cve" />
    </references>
    <description>This update for cockpit fixes the following issues

- CVE-2026-4802: remote command execution via unsanitized user-controlled parameters within crafted links in system logs
  UI (bsc#1265040).
- CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and
  may crash a Node.js process (bsc#1257836).
</description>
    <pkglist>
      <collection>
        <package name="cockpit" epoch="0" version="309" release="10.1" arch="src" src="src/cockpit-309-10.1.src.rpm">
          <filename>cockpit-309-10.1.src.rpm</filename>
        </package>
        <package name="cockpit" epoch="0" version="309" release="10.1" arch="x86_64" src="x86_64/cockpit-309-10.1.x86_64.rpm">
          <filename>cockpit-309-10.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-bridge" epoch="0" version="309" release="10.1" arch="x86_64" src="x86_64/cockpit-bridge-309-10.1.x86_64.rpm">
          <filename>cockpit-bridge-309-10.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-bridge-debuginfo" epoch="0" version="309" release="10.1" arch="x86_64" src="x86_64/cockpit-bridge-debuginfo-309-10.1.x86_64.rpm">
          <filename>cockpit-bridge-debuginfo-309-10.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-debuginfo" epoch="0" version="309" release="10.1" arch="x86_64" src="x86_64/cockpit-debuginfo-309-10.1.x86_64.rpm">
          <filename>cockpit-debuginfo-309-10.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-debugsource" epoch="0" version="309" release="10.1" arch="x86_64" src="x86_64/cockpit-debugsource-309-10.1.x86_64.rpm">
          <filename>cockpit-debugsource-309-10.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-networkmanager" epoch="0" version="309" release="10.1" arch="noarch" src="noarch/cockpit-networkmanager-309-10.1.noarch.rpm">
          <filename>cockpit-networkmanager-309-10.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-selinux" epoch="0" version="309" release="10.1" arch="noarch" src="noarch/cockpit-selinux-309-10.1.noarch.rpm">
          <filename>cockpit-selinux-309-10.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-storaged" epoch="0" version="309" release="10.1" arch="noarch" src="noarch/cockpit-storaged-309-10.1.noarch.rpm">
          <filename>cockpit-storaged-309-10.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-system" epoch="0" version="309" release="10.1" arch="noarch" src="noarch/cockpit-system-309-10.1.noarch.rpm">
          <filename>cockpit-system-309-10.1.noarch.rpm</filename>
        </package>
        <package name="cockpit-ws" epoch="0" version="309" release="10.1" arch="x86_64" src="x86_64/cockpit-ws-309-10.1.x86_64.rpm">
          <filename>cockpit-ws-309-10.1.x86_64.rpm</filename>
        </package>
        <package name="cockpit-ws-debuginfo" epoch="0" version="309" release="10.1" arch="x86_64" src="x86_64/cockpit-ws-debuginfo-309-10.1.x86_64.rpm">
          <filename>cockpit-ws-debuginfo-309-10.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>722</id>
    <title>Security update for python-urllib3</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1779364441" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1265267" id="1265267" title="VUL-0: CVE-2026-44431: python-urllib3,python-urllib3_1,python36-urllib3: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44431" id="CVE-2026-44431" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44431" type="cve" />
    </references>
    <description>This update for python-urllib3 fixes the following issue

- CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied
  low-level redirects (bsc#1265267).
</description>
    <pkglist>
      <collection>
        <package name="python-urllib3" epoch="0" version="2.1.0" release="6.1" arch="src" src="src/python-urllib3-2.1.0-6.1.src.rpm">
          <filename>python-urllib3-2.1.0-6.1.src.rpm</filename>
        </package>
        <package name="python311-urllib3" epoch="0" version="2.1.0" release="6.1" arch="noarch" src="noarch/python311-urllib3-2.1.0-6.1.noarch.rpm">
          <filename>python311-urllib3-2.1.0-6.1.noarch.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>723</id>
    <title>Security update for xz</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1779365025" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1261280" id="1261280" title="VUL-0: CVE-2026-34743: xz: buffer overflow in lzma_index_append()" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34743" id="CVE-2026-34743" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34743" type="cve" />
    </references>
    <description>This update for xz fixes the following issue

- CVE-2026-34743: buffer overflow in lzma_index_append() (bsc#1261280).
</description>
    <pkglist>
      <collection>
        <package name="liblzma5" epoch="0" version="5.4.3" release="6.1" arch="x86_64" src="x86_64/liblzma5-5.4.3-6.1.x86_64.rpm">
          <filename>liblzma5-5.4.3-6.1.x86_64.rpm</filename>
        </package>
        <package name="liblzma5-debuginfo" epoch="0" version="5.4.3" release="6.1" arch="x86_64" src="x86_64/liblzma5-debuginfo-5.4.3-6.1.x86_64.rpm">
          <filename>liblzma5-debuginfo-5.4.3-6.1.x86_64.rpm</filename>
        </package>
        <package name="xz" epoch="0" version="5.4.3" release="6.1" arch="src" src="src/xz-5.4.3-6.1.src.rpm">
          <filename>xz-5.4.3-6.1.src.rpm</filename>
        </package>
        <package name="xz" epoch="0" version="5.4.3" release="6.1" arch="x86_64" src="x86_64/xz-5.4.3-6.1.x86_64.rpm">
          <filename>xz-5.4.3-6.1.x86_64.rpm</filename>
        </package>
        <package name="xz-debuginfo" epoch="0" version="5.4.3" release="6.1" arch="x86_64" src="x86_64/xz-debuginfo-5.4.3-6.1.x86_64.rpm">
          <filename>xz-debuginfo-5.4.3-6.1.x86_64.rpm</filename>
        </package>
        <package name="xz-debugsource" epoch="0" version="5.4.3" release="6.1" arch="x86_64" src="x86_64/xz-debugsource-5.4.3-6.1.x86_64.rpm">
          <filename>xz-debugsource-5.4.3-6.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>719</id>
    <title>Security update for ucode-intel</title>
    <severity>moderate</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1779355646" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1230400" id="1230400" title="VUL-0: CVE-2024-23984,CVE-2024-24968: ucode-intel: 20240910 release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1249138" id="1249138" title="TW 20250826 Kernel 6.16.3 tainted with value of 4 after reboot." type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1253319" id="1253319" title="ucode-intel: 20251111 release" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1265189" id="1265189" title="VUL-0: CVE-2025-35979: microcode_ctl,ucode-intel: data leaks fixed in 20260512 release" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-35979" id="CVE-2025-35979" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-35979" type="cve" />
    </references>
    <description>This update for ucode-intel fixes the following issues

Security issue:

- CVE-2025-35979: data leaks fixed in 20260512 release (bsc#1265189).

Non security issues:

- TW 20250826 Kernel 6.16.3 tainted with value of 4 after reboot. (bsc#1249138).
- Intel CPU Microcode was updated to the 20260512 release (bsc#1265189)
 ### New Platforms
 | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products
 |:---------------|:---------|:------------|:---------|:---------|:---------
 | PTL 404 | A1 | 06-cc-03/90 | | 0000011b | Intel Core Ultra Processor (Series 3)
 | PTL-H 484/12Xe | A0/B0 | 06-cc-02/90 | | 0000011b | Intel Core Ultra Processor (Series 3)
 ### Updated Platforms
 | ARL-H | A1 | 06-c5-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2)
 | ARL-S/HX (8P) | B0 | 06-c6-02/82 | 0000011b | 00000121 | Core Ultra Processor (Series 2)
 | EMR-SP | A1 | 06-cf-02/87 | 210002d3 | 210002e0 | Xeon Scalable Gen5
 | GNR-AP/SP | Bx/Hx/Lx | 06-ad-01/95 | 01000405 | 01000423 | Xeon 6900/6700/6500 Series Processors with P-Cores
 | GNR-D | B0/B1 | 06-ae-01/97 | 01000303 | 01000307 | Xeon 6700P-B/6500P-B Series SoC with P-Cores
 | GNR-SP R1S | Bx/Hx/Lx | 06-ad-01/20 | 0a000133 | 0a000142 | Xeon 6700/6500-Series Processors with P-Cores
 | LNL | B0 | 06-bd-01/80 | 00000125 | 00000126 | Core Ultra 200 V Series Processor
 | SPR-SP | E4/S2 | 06-8f-07/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4
 | SPR-SP | E5/S3 | 06-8f-08/87 | 2b000661 | 2b000670 | Xeon Scalable Gen4
 | SRF-AP/SP | C0 | 06-af-03/01 | 03000382 | 030003a3 | Xeon 6900/6700-Series Processors with E-Cores
</description>
    <pkglist>
      <collection>
        <package name="ucode-intel" epoch="0" version="20260512" release="1.1" arch="src" src="src/ucode-intel-20260512-1.1.src.rpm">
          <filename>ucode-intel-20260512-1.1.src.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
        <package name="ucode-intel" epoch="0" version="20260512" release="1.1" arch="x86_64" src="x86_64/ucode-intel-20260512-1.1.x86_64.rpm">
          <filename>ucode-intel-20260512-1.1.x86_64.rpm</filename>
          <reboot_suggested>True</reboot_suggested>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="security" version="1">
    <id>720</id>
    <title>Security update for rsync</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1779361423" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1201840" id="1201840" title="VUL-0: CVE-2022-29154: rsync: arbitrary file write vulnerability via do_server_recv function" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1202970" id="1202970" title="rsync command fails with  ERROR: rejecting excluded file-list name - ref:_00D1igLOd._5005qAMOCZ:ref" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1204538" id="1204538" title="rsync --delay-updates never updates after interruption" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234100" id="1234100" title="VUL-0: CVE-2024-12084: rsync: Heap Buffer Overflow in Checksum Parsing" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234101" id="1234101" title="VUL-0: CVE-2024-12085: rsync: Info Leak via uninitialized Stack contents defeats ASLR" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234102" id="1234102" title="VUL-0: CVE-2024-12086: rsync: server leaks arbitrary client files" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234103" id="1234103" title="VUL-0: CVE-2024-12087: rsync: server can make client write files outside of destination directory using symbolic links" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1234104" id="1234104" title="VUL-0: CVE-2024-12088: rsync: --safe-links bypass" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1235475" id="1235475" title="VUL-0: CVE-2024-12747: rsync: Race Condition in rsync Handling Symbolic Links" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1254441" id="1254441" title="VUL-0: CVE-2025-10158: rsync: Out of bounds array access via negative index" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1262223" id="1262223" title="VUL-0: CVE-2026-41035: rsync: count of entries mismatch can lead to a use-after-free" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1264511" id="1264511" title="VUL-0: EMBARGOED: CVE-2026-29518: rsync: Symlink-Race TOCTOU in Daemon (use chroot = no)" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1264512" id="1264512" title="VUL-0: EMBARGOED: CVE-2026-43618: rsync: Integer Overflow Information Disclosure" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1264513" id="1264513" title="VUL-0: EMBARGOED: CVE-2026-43620: rsync: Out-of-Bounds Array Read via recv_files()" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1264514" id="1264514" title="VUL-0: EMBARGOED: CVE-2026-43619: rsync: Symlink Race Condition via Path-Based Syscalls" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1264515" id="1264515" title="VUL-0: EMBARGOED: CVE-2026-43617: rsync: Authorization Bypass via Hostname Resolution" type="bugzilla" />
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1265296" id="1265296" title="VUL-0: EMBARGOED: CVE-2026-45232: rsync: Off-by-one stack OOB write in HTTP CONNECT proxy response parsing" type="bugzilla" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29154" id="CVE-2022-29154" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29154" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12084" id="CVE-2024-12084" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12084" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12085" id="CVE-2024-12085" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12085" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12086" id="CVE-2024-12086" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12086" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12087" id="CVE-2024-12087" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12087" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12088" id="CVE-2024-12088" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12088" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12747" id="CVE-2024-12747" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12747" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10158" id="CVE-2025-10158" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10158" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29518" id="CVE-2026-29518" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29518" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41035" id="CVE-2026-41035" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41035" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43617" id="CVE-2026-43617" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43617" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43618" id="CVE-2026-43618" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43618" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43619" id="CVE-2026-43619" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43619" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43620" id="CVE-2026-43620" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43620" type="cve" />
      <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45232" id="CVE-2026-45232" title="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45232" type="cve" />
      <reference href="https://jira.suse.com/browse/SLE-21252" id="SLE-21252" title="https://jira.suse.com/browse/SLE-21252" type="jira" />
    </references>
    <description>This update for rsync fixes the following issues

Security issues:

- CVE-2026-29518: Symlink-Race TOCTOU in Daemon (bsc#1264511).
- CVE-2026-43617: Authorization Bypass via Hostname Resolution (bsc#1264515).
- CVE-2026-43618: Integer Overflow Information Disclosure (bsc#1264512).
- CVE-2026-43619: Symlink Race Condition via Path-Based Syscalls (bsc#1264514).
- CVE-2026-43620: Out-of-Bounds Array Read via recv_files() (bsc#1264513).
- CVE-2026-45232: Off-by-one stack OOB write in HTTP CONNECT proxy response parsing (bsc#1265296).

Non security issues:

- rsync --delay-updates never updates after interruption (bsc#1204538).
- Fix duplication of flag causing illegal hashkey failures.
</description>
    <pkglist>
      <collection>
        <package name="rsync" epoch="0" version="3.2.7" release="7.1" arch="src" src="src/rsync-3.2.7-7.1.src.rpm" embargo_date="2026-05-20 23:59">
          <filename>rsync-3.2.7-7.1.src.rpm</filename>
        </package>
        <package name="rsync" epoch="0" version="3.2.7" release="7.1" arch="x86_64" src="x86_64/rsync-3.2.7-7.1.x86_64.rpm" embargo_date="2026-05-20 23:59">
          <filename>rsync-3.2.7-7.1.x86_64.rpm</filename>
        </package>
        <package name="rsync-debuginfo" epoch="0" version="3.2.7" release="7.1" arch="x86_64" src="x86_64/rsync-debuginfo-3.2.7-7.1.x86_64.rpm" embargo_date="2026-05-20 23:59">
          <filename>rsync-debuginfo-3.2.7-7.1.x86_64.rpm</filename>
        </package>
        <package name="rsync-debugsource" epoch="0" version="3.2.7" release="7.1" arch="x86_64" src="x86_64/rsync-debugsource-3.2.7-7.1.x86_64.rpm" embargo_date="2026-05-20 23:59">
          <filename>rsync-debugsource-3.2.7-7.1.x86_64.rpm</filename>
        </package>
      </collection>
    </pkglist>
    </update>
<update from="maint-coord@suse.de" status="stable" type="recommended" version="1">
    <id>724</id>
    <title>Recommended update for timezone</title>
    <severity>important</severity>
    <release>SUSE ALP Source Standard Core 1.0 Build</release>
    <issued date="1779366446" />
    <references>
      <reference href="https://bugzilla.suse.com/show_bug.cgi?id=1264965" id="1264965" title="L3-Question: british columbia timezone permanent daylight savings [thread::PJOFympVKziKyngouwYBQSs::]" type="bugzilla" />
    </references>
    <description>This update for timezone fixes the following issues:

- Update to 2026b:
    * British Columbia moved to permanent -07 on 2026-03-09. (bsc#1264965)
    * Some more overflow bugs have been fixed in zic.
- Update to 2026a:
    * Moldova has used EU transition times since 2022.
    * The "right" TZif files are no longer installed by default.
    * -DTZ_RUNTIME_LEAPS=0 disables runtime support for leap seconds.
    * TZif files are no longer limited to 50 bytes of abbreviations.
    * zic is no longer limited to 50 leap seconds.
    * Several integer overflow bugs have been fixed.
- Update to 2025c:
    * Update Baja California DST rules in 1953, 1961-1975
    * An unset TZ is no longer invalid when /etc/localtime is
      missing, and is abbreviated "UTC" not "-00". This reverts to 2024b behavior
    * tzset etc. are now more cautious about questionable TZ settings.
    * tzset etc. now treat ' ' like '_' in time zone abbreviations
    * tzfree now preserves errno, consistently with POSIX.1-2024 "free".
    * zic has new options inspired by FreeBSD.
    * multiple changes visible to developers
- Use "REDO=posix_right" to keep installing "right" TZif files.
</description>
    <pkglist>
      <collection>
        <package name="timezone" epoch="0" version="2026b" release="1.1" arch="src" src="src/timezone-2026b-1.1.src.rpm">
          <filename>timezone-2026b-1.1.src.rpm</filename>
        </package>
        <package name="timezone" epoch="0" version="2026b" release="1.1" arch="x86_64" src="x86_64/timezone-2026b-1.1.x86_64.rpm">
          <filename>timezone-2026b-1.1.x86_64.rpm</filename>
        </package>
        <package name="timezone-debuginfo" epoch="0" version="2026b" release="1.1" arch="x86_64" src="x86_64/timezone-debuginfo-2026b-1.1.x86_64.rpm">
          <filename>timezone-debuginfo-2026b-1.1.x86_64.rpm</filename>
        </package>
        <package name="timezone-debugsource" epoch="0" version="2026b" release="1.1" arch="x86_64" src="x86_64/timezone-debugsource-2026b-1.1.x86_64.rpm">
          <filename>timezone-debugsource-2026b-1.1.x86_64.rpm</filename>
        </package>
        </collection>
    </pkglist>
    </update>
</updates>
