Packages changed:
  cloud-init
  dracut (050+suse.61.g0fe0e854 -> 050+suse.63.g796e020e)
  flatpak
  glib2-branding-openSUSE
  grub2
  kernel-source (5.6.12 -> 5.6.14)
  libarchive (3.4.2 -> 3.4.3)
  libpwquality
  libressl (3.1.1 -> 3.1.2)
  nss-mdns
  pipewire (0.3.2 -> 0.3.5)
  ppp

=== Details ===

==== cloud-init ====

- Update cloud-init-write-routes.patch
  + Explicitly test for netconfig version 1 as well as 2
- Update cloud-init-write-routes.patch
  + Handle netconfig v2 device configurations (bsc#1171546)

==== dracut ====
Version update (050+suse.61.g0fe0e854 -> 050+suse.63.g796e020e)
Subpackages: dracut-ima

- Update to version 050+suse.63.g796e020e:
  * suse.spec: Move /bin/* and /sbin/* to /usr
  * suse.spec: Remove long unused mkinitrd_setup file

==== flatpak ====
Subpackages: libflatpak0 system-user-flatpak typelib-1_0-Flatpak-1_0

- When SLE uses GNOME desktop environment, GNOME Software is
  automatically started to provide key update features. During the
  startup, it setups flatpak repository so that related features
  can function properly. In a system environment of no flatpak
  repository has ever been setup before, this triggers
  "org.freedesktop.Flatpak.modify-repo" polkit action.
  Therefore in systems which use a restrictive security policy
  (eg. SLES) for the aforementioned policy action, a polkit
  authentication dialog will pop up without any user interaction
  for the first time login. This is not user friendly.
  This submission creates /var/lib/flatpak/repo at package
  installation to avoid such a confusing authentication pop-up, at
  nearly 0 cost of security compromise (bsc#1169619, bsc#1170416).

==== glib2-branding-openSUSE ====

- Only recommend wallpaper-branding-%{branding_name} when
  gnome-shell is present. Allows gio to be installed on text-only
  systems without pulling wallpapers in (boo#1162600).

==== grub2 ====
Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi

- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch

==== kernel-source ====
Version update (5.6.12 -> 5.6.14)

- Linux 5.6.14 (bnc#1012628).
- KVM: nVMX: Consolidate nested MTF checks to helper function
  (bnc#1012628).
- kvm: nVMX: reflect MTF VM-exits if injected by L1 (bnc#1012628).
- xprtrdma: Clean up the post_send path (bnc#1012628).
- xprtrdma: Fix trace point use-after-free race (bnc#1012628).
- drm/i915/tgl: Add Wa_14010477008:tgl (bnc#1012628).
- drm/i915/tgl: TBT AUX should use TC power well ops
  (bnc#1012628).
- drm/i915/display: Load DP_TP_CTL/STATUS offset before use it
  (bnc#1012628).
- shmem: fix possible deadlocks on shmlock_user_lock
  (bnc#1012628).
- net: phy: microchip_t1: add lan87xx_phy_init to initialize
  the lan87xx phy (bnc#1012628).
- KVM: arm: vgic: Synchronize the whole guest on
  GIC{D,R}_I{S,C}ACTIVER read (bnc#1012628).
- KVM: arm: vgic-v2: Only use the virtual state when userspace
  accesses pending bits (bnc#1012628).
- gpio: pca953x: Fix pca953x_gpio_set_config (bnc#1012628).
- SUNRPC: Add "@len" parameter to gss_unwrap() (bnc#1012628).
- SUNRPC: Fix GSS privacy computation of auth->au_ralign
  (bnc#1012628).
- net/sonic: Fix a resource leak in an error handling path in
  'jazz_sonic_probe()' (bnc#1012628).
- net: moxa: Fix a potential double 'free_irq()' (bnc#1012628).
- ftrace/selftests: workaround cgroup RT scheduling issues
  (bnc#1012628).
- hv_netvsc: Fix netvsc_start_xmit's return type (bnc#1012628).
- drop_monitor: work around gcc-10 stringop-overflow warning
  (bnc#1012628).
- virtio-blk: handle block_device_operations callbacks after
  hot unplug (bnc#1012628).
- sun6i: dsi: fix gcc-4.8 (bnc#1012628).
- net_sched: fix tcm_parent in tc filter dump (bnc#1012628).
- net: stmmac: gmac5+: fix potential integer overflow on 32 bit
  multiply (bnc#1012628).
- iommu/amd: Fix race in increase_address_space()/fetch_pte()
  (bnc#1012628).
- iommu/amd: Update Device Table in increase_address_space()
  (bnc#1012628).
- net: dsa: ocelot: the MAC table on Felix is twice as large
  (bnc#1012628).
- net: mscc: ocelot: ANA_AUTOAGE_AGE_PERIOD holds a value in
  seconds, not ms (bnc#1012628).
- mmc: sdhci-acpi: Add SDHCI_QUIRK2_BROKEN_64_BIT_DMA for AMDI0040
  (bnc#1012628).
- dpaa2-eth: properly handle buffer size restrictions
  (bnc#1012628).
- mptcp: set correct vfs info for subflows (bnc#1012628).
- net: fix a potential recursive NETDEV_FEAT_CHANGE (bnc#1012628).
- netlabel: cope with NULL catmap (bnc#1012628).
- net: phy: fix aneg restart in phy_ethtool_set_eee (bnc#1012628).
- net: stmmac: fix num_por initialization (bnc#1012628).
- pppoe: only process PADT targeted at local interfaces
  (bnc#1012628).
- Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu"
  (bnc#1012628).
- tcp: fix error recovery in tcp_zerocopy_receive() (bnc#1012628).
- tcp: fix SO_RCVLOWAT hangs with fat skbs (bnc#1012628).
- virtio_net: fix lockdep warning on 32 bit (bnc#1012628).
- dpaa2-eth: prevent array underflow in update_cls_rule()
  (bnc#1012628).
- hinic: fix a bug of ndo_stop (bnc#1012628).
- net: dsa: loop: Add module soft dependency (bnc#1012628).
- net: ipv4: really enforce backoff for redirects (bnc#1012628).
- netprio_cgroup: Fix unlimited memory leak of v2 cgroups
  (bnc#1012628).
- net: tcp: fix rx timestamp behavior for tcp_recvmsg
  (bnc#1012628).
- nfp: abm: fix error return code in nfp_abm_vnic_alloc()
  (bnc#1012628).
- r8169: re-establish support for RTL8401 chip version
  (bnc#1012628).
- umh: fix memory leak on execve failure (bnc#1012628).
- net: broadcom: Select BROADCOM_PHY for BCMGENET (bnc#1012628).
- dmaengine: xilinx_dma: Add missing check for empty list
  (bnc#1012628).
- riscv: fix vdso build with lld (bnc#1012628).
- dmaengine: pch_dma.c: Avoid data race between probe and irq
  handler (bnc#1012628).
- dmaengine: mmp_tdma: Do not ignore slave config validation
  errors (bnc#1012628).
- dmaengine: mmp_tdma: Reset channel error on release
  (bnc#1012628).
- drm/amd/display: blank dp stream before re-train the link
  (bnc#1012628).
- selftests/ftrace: Check the first record for kprobe_args_type.tc
  (bnc#1012628).
- cpufreq: intel_pstate: Only mention the BIOS disabling turbo
  mode once (bnc#1012628).
- ALSA: hda/hdmi: fix race in monitor detection during probe
  (bnc#1012628).
- drm/amd/powerplay: avoid using pm_en before it is initialized
  revised (bnc#1012628).
- drm/amd/display: check if REFCLK_CNTL register is present
  (bnc#1012628).
- drm/amd/display: Defer cursor update around VUPDATE for all ASIC
  (bnc#1012628).
- drm/amd/display: Update downspread percent to match spreadsheet
  for DCN2.1 (bnc#1012628).
- drm/qxl: lost qxl_bo_kunmap_atomic_page in
  qxl_image_init_helper() (bnc#1012628).
- fibmap: Warn and return an error in case of block > INT_MAX
  (bnc#1012628).
- io_uring: use cond_resched() in io_ring_ctx_wait_and_kill()
  (bnc#1012628).
- io_uring: check non-sync defer_list carefully (bnc#1012628).
- ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse (bnc#1012628).
- gfs2: Another gfs2_walk_metadata fix (bnc#1012628).
- mmc: sdhci-pci-gli: Fix no irq handler from suspend
  (bnc#1012628).
- IB/hfi1: Fix another case where pq is left on waitlist
  (bnc#1012628).
- ACPI: EC: PM: Avoid premature returns from acpi_s2idle_wake()
  (bnc#1012628).
- pinctrl: sunrisepoint: Fix PAD lock register offset for SPT-H
  (bnc#1012628).
- pinctrl: baytrail: Enable pin configuration setting for GPIO
  chip (bnc#1012628).
- pinctrl: qcom: fix wrong write in update_dual_edge
  (bnc#1012628).
- pinctrl: cherryview: Add missing spinlock usage in
  chv_gpio_irq_handler (bnc#1012628).
- drm/tegra: Fix SMMU support on Tegra124 and Tegra210
  (bnc#1012628).
- bpf: Fix error return code in map_lookup_and_delete_elem()
  (bnc#1012628).
- ALSA: firewire-lib: fix 'function sizeof not defined' error
  of tracepoints format (bnc#1012628).
- cachefiles: Fix corruption of the return value in
  cachefiles_read_or_alloc_pages() (bnc#1012628 boo#1168841).
- i40iw: Fix error handling in i40iw_manage_arp_cache()
  (bnc#1012628).
- drm/i915/gt: Make timeslicing an explicit engine property
  (bnc#1012628).
- drm/i915: Don't enable WaIncreaseLatencyIPCEnabled when IPC
  is disabled (bnc#1012628).
- bpf, sockmap: msg_pop_data can incorrecty set an sge length
  (bnc#1012628).
- bpf, sockmap: bpf_tcp_ingress needs to subtract bytes from
  sg.size (bnc#1012628).
- drm/i915/gem: Remove object_is_locked assertion from
  unpin_from_display_plane (bnc#1012628).
- mmc: alcor: Fix a resource leak in the error path for ->probe()
  (bnc#1012628).
- mmc: sdhci-pci-gli: Fix can not access GL9750 after reboot
  from Windows 10 (bnc#1012628).
- mmc: core: Check request type before completing the request
  (bnc#1012628).
- mmc: core: Fix recursive locking issue in CQE recovery path
  (bnc#1012628).
- mmc: block: Fix request completion in the CQE timeout path
  (bnc#1012628).
- gfs2: More gfs2_find_jhead fixes (bnc#1012628).
- fork: prevent accidental access to clone3 features
  (bnc#1012628).
- drm/amdgpu: force fbdev into vram (bnc#1012628).
- NFS: Fix fscache super_cookie index_key from changing after
  umount (bnc#1012628).
- NFS: Fix fscache super_cookie allocation (bnc#1012628).
- NFSv4: Fix fscache cookie aux_data to ensure change_attr is
  included (bnc#1012628).
- hwmon: (drivetemp) Fix SCT support if SCT data tables are not
  supported (bnc#1012628).
- netfilter: conntrack: avoid gcc-10 zero-length-bounds warning
  (bnc#1012628).
- drm/i915/gvt: Fix kernel oops for 3-level ppgtt guest
  (bnc#1012628).
- arm64: fix the flush_icache_range arguments in machine_kexec
  (bnc#1012628).
- netfilter: conntrack: fix infinite loop on rmmod (bnc#1012628).
- drm/i915: Mark concurrent submissions with a weak-dependency
  (bnc#1012628).
- nfs: fix NULL deference in nfs4_get_valid_delegation
  (bnc#1012628).
- SUNRPC: Signalled ASYNC tasks need to exit (bnc#1012628).
- netfilter: flowtable: set NF_FLOW_TEARDOWN flag on entry
  expiration (bnc#1012628).
- netfilter: nft_set_rbtree: Add missing expired checks
  (bnc#1012628).
- RDMA/rxe: Always return ERR_PTR from rxe_create_mmap_info()
  (bnc#1012628).
- IB/mlx4: Test return value of calls to ib_get_cached_pkey
  (bnc#1012628).
- IB/core: Fix potential NULL pointer dereference in pkey cache
  (bnc#1012628).
- RDMA/core: Fix double put of resource (bnc#1012628).
- RDMA/iw_cxgb4: Fix incorrect function parameters (bnc#1012628).
- x86/ftrace: Have ftrace trampolines turn read-only at the end
  of system boot up (bnc#1012628).
- hwmon: (da9052) Synchronize access with mfd (bnc#1012628).
- s390/ism: fix error return code in ism_probe() (bnc#1012628).
- drm/i915: Handle idling during i915_gem_evict_something busy
  loops (bnc#1012628).
- mm, memcg: fix inconsistent oom event behavior (bnc#1012628).
- epoll: call final ep_events_available() check under the lock
  (bnc#1012628).
- bpf: Fix bug in mmap() implementation for BPF array map
  (bnc#1012628).
- NFSv3: fix rpc receive buffer size for MOUNT call (bnc#1012628).
- pnp: Use list_for_each_entry() instead of open coding
  (bnc#1012628).
- net/rds: Use ERR_PTR for rds_message_alloc_sgs() (bnc#1012628).
- Stop the ad-hoc games with -Wno-maybe-initialized (bnc#1012628).
- gcc-10: disable 'zero-length-bounds' warning for now
  (bnc#1012628).
- gcc-10: disable 'array-bounds' warning for now (bnc#1012628).
- gcc-10: disable 'stringop-overflow' warning for now
  (bnc#1012628).
- gcc-10: disable 'restrict' warning for now (bnc#1012628).
- gcc-10 warnings: fix low-hanging fruit (bnc#1012628).
- gcc-10: mark more functions __init to avoid section mismatch
  warnings (bnc#1012628).
- gcc-10: avoid shadowing standard library 'free()' in crypto
  (bnc#1012628).
- bootconfig: Fix to remove bootconfig data from initrd while boot
  (bnc#1012628).
- bootconfig: Fix to prevent warning message if no bootconfig
  option (bnc#1012628).
- usb: usbfs: correct kernel->user page attribute mismatch
  (bnc#1012628).
- USB: usbfs: fix mmap dma mismatch (bnc#1012628).
- ALSA: hda/realtek - Add COEF workaround for ASUS ZenBook UX431DA
  (bnc#1012628).
- ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
  (bnc#1012628).
- ALSA: usb-audio: Add control message quirk delay for Kingston
  HyperX headset (bnc#1012628).
- usb: core: hub: limit HUB_QUIRK_DISABLE_AUTOSUSPEND to USB5534B
  (bnc#1012628).
- usb: host: xhci-plat: keep runtime active when removing host
  (bnc#1012628).
- usb: cdns3: gadget: prev_req->trb is NULL for ep0 (bnc#1012628).
- USB: gadget: fix illegal array access in binding with UDC
  (bnc#1012628).
- usb: xhci: Fix NULL pointer dereference when enqueuing trbs
  from urb sg list (bnc#1012628).
- ARM: dts: dra7: Fix bus_dma_limit for PCIe (bnc#1012628).
- ARM: dts: imx27-phytec-phycard-s-rdk: Fix the I2C1 pinctrl
  entries (bnc#1012628).
- ARM: dts: imx6dl-yapp4: Fix Ursa board Ethernet connection
  (bnc#1012628).
- drm/amd/display: add basic atomic check for cursor plane
  (bnc#1012628).
- drm/amd/amdgpu: add raven1 part to the gfxoff quirk list
  (bnc#1012628).
- drm/i915/tgl+: Fix interrupt handling for DP AUX transactions
  (bnc#1012628).
- powerpc/vdso32: Fallback on getres syscall when clock is unknown
  (bnc#1012628).
- powerpc/32s: Fix build failure with CONFIG_PPC_KUAP_DEBUG
  (bnc#1012628).
- cifs: fix leaked reference on requeued write (bnc#1012628).
- KVM: x86: Fix pkru save/restore when guest CR4.PKE=0, move it
  to x86.c (bnc#1012628).
- x86/unwind/orc: Fix error handling in __unwind_start()
  (bnc#1012628).
- exec: Move would_dump into flush_old_exec (bnc#1012628).
- clk: rockchip: fix incorrect configuration of rk3228 aclk_gpu*
  clocks (bnc#1012628).
- dwc3: Remove check for HWO flag in
  dwc3_gadget_ep_reclaim_trb_sg() (bnc#1012628).
- fanotify: fix merging marks masks with FAN_ONDIR (bnc#1012628).
- arm64: dts: meson-g12b-ugoos-am6: fix usb vbus-supply
  (bnc#1012628).
- usb: gadget: tegra-xudc: Fix idle suspend/resume (bnc#1012628).
- usb: gadget: net2272: Fix a memory leak in an error handling
  path in 'net2272_plat_probe()' (bnc#1012628).
- usb: gadget: audio: Fix a missing error return value in
  audio_bind() (bnc#1012628).
- usb: gadget: legacy: fix error return code in gncm_bind()
  (bnc#1012628).
- usb: gadget: legacy: fix error return code in cdc_bind()
  (bnc#1012628).
- Revert "ALSA: hda/realtek: Fix pop noise on ALC225"
  (bnc#1012628).
- clk: ti: clkctrl: Fix Bad of_node_put within clkctrl_get_name
  (bnc#1012628).
- clk: Unlink clock if failed to prepare or enable (bnc#1012628).
- arm64: dts: meson-g12b-khadas-vim3: add missing frddr_a status
  property (bnc#1012628).
- arm64: dts: qcom: msm8996: Reduce vdd_apc voltage (bnc#1012628).
- arm64: dts: meson-g12-common: fix dwc2 clock names
  (bnc#1012628).
- arm64: dts: rockchip: Replace RK805 PMIC node name with "pmic"
  on rk3328 boards (bnc#1012628).
- arm64: dts: rockchip: Rename dwc3 device nodes on rk3399 to
  make dtc happy (bnc#1012628).
- arm64: dts: imx8mn: Change SDMA1 ahb clock for imx8mn
  (bnc#1012628).
- ARM: dts: r8a73a4: Add missing CMT1 interrupts (bnc#1012628).
- arm64: dts: renesas: r8a77980: Fix IPMMU VIP[01] nodes
  (bnc#1012628).
- ARM: dts: r8a7740: Add missing extal2 to CPG node (bnc#1012628).
- dt-bindings: dma: fsl-edma: fix ls1028a-edma compatible
  (bnc#1012628).
- SUNRPC: Revert 241b1f419f0e ("SUNRPC: Remove xdr_buf_trim()")
  (bnc#1012628).
- bpf: Fix sk_psock refcnt leak when receiving message
  (bnc#1012628).
- powerpc/uaccess: Evaluate macro arguments once, before user
  access is allowed (bnc#1012628).
- powerpc/ima: Fix secure boot rules in ima arch policy
  (bnc#1012628).
- RDMA/uverbs: Do not discard the IB_EVENT_DEVICE_FATAL event
  (bnc#1012628).
- RDMA/uverbs: Move IB_EVENT_DEVICE_FATAL to destroy_uobj
  (bnc#1012628).
- riscv: perf: RISCV_BASE_PMU should be independent (bnc#1012628).
- KVM: x86: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce
  (bnc#1012628).
- bpf: Enforce returning 0 for fentry/fexit progs (bnc#1012628).
- selftests/bpf: Enforce returning 0 for fentry/fexit programs
  (bnc#1012628).
- bpf: Restrict bpf_trace_printk()'s %s usage and add %pks,
  %pus specifier (bnc#1012628).
- Delete patches.suse/cachefiles-fix.patch.
- commit b0ab48a
- Makefile: disallow data races on gcc-10 as well (gcc 10).
- commit 3c26bf7
- Replace gcc10 fix with the upstream one
- commit 1adb363
- Refresh
  patches.suse/ipc-util.c-sysvipc_find_ipc-incorrectly-updates-posi.patch.
  Update upstream status.
- commit f322baa
- ALSA: hda/realtek - Limit int mic boost for Thinkpad T530
  (bsc#1171293).
- commit 60a84bf
- tracing: Wait for preempt irq delay thread to execute
  (git-fixes).
- commit 5f84268
- Linux 5.6.13 (bnc#1012628).
- thunderbolt: Check return value of tb_sw_read() in
  usb4_switch_op() (bnc#1012628).
- USB: serial: qcserial: Add DW5816e support (bnc#1012628).
- drm/amdgpu: move kfd suspend after ip_suspend_phase1
  (bnc#1012628).
- drm/amdgpu: drop redundant cg/pg ungate on runpm enter
  (bnc#1012628).
- vt: fix unicode console freeing with a common interface
  (bnc#1012628).
- tty: xilinx_uartps: Fix missing id assignment to the console
  (bnc#1012628).
- ext4: don't set dioread_nolock by default for blocksize <
  pagesize (bnc#1012628).
- ext4: disable dioread_nolock whenever delayed allocation is
  disabled (bnc#1012628).
- nvme: refactor nvme_identify_ns_descs error handling
  (bnc#1012628).
- nvme: fix possible hang when ns scanning fails during error
  recovery (bnc#1012628).
- tracing/kprobes: Fix a double initialization typo (bnc#1012628).
- net: macb: Fix runtime PM refcounting (bnc#1012628).
- cxgb4: fix EOTID leak when disabling TC-MQPRIO offload
  (bnc#1012628).
- devlink: Fix reporter's recovery condition (bnc#1012628).
- devlink: fix return value after hitting end in region read
  (bnc#1012628).
- dp83640: reverse arguments to list_add_tail (bnc#1012628).
- fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks
  (bnc#1012628).
- ipv6: Use global sernum for dst validation with nexthop objects
  (bnc#1012628).
- mlxsw: spectrum_acl_tcam: Position vchunk in a vregion list
  properly (bnc#1012628).
- neigh: send protocol value in neighbor create notification
  (bnc#1012628).
- net: bridge: vlan: Add a schedule point during VLAN processing
  (bnc#1012628).
- net: dsa: Do not leave DSA master with NULL netdev_ops
  (bnc#1012628).
- net: dsa: Do not make user port errors fatal (bnc#1012628).
- net: macb: fix an issue about leak related system resources
  (bnc#1012628).
- net: macsec: preserve ingress frame ordering (bnc#1012628).
- net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc()
  (bnc#1012628).
- net: phy: marvell10g: fix temperature sensor on 2110
  (bnc#1012628).
- net_sched: sch_skbprio: add message validation to
  skbprio_change() (bnc#1012628).
- net: stricter validation of untrusted gso packets (bnc#1012628).
- net: tc35815: Fix phydev supported/advertising mask
  (bnc#1012628).
- net/tls: Fix sk_psock refcnt leak in bpf_exec_tx_verdict()
  (bnc#1012628).
- net/tls: Fix sk_psock refcnt leak when in tls_data_ready()
  (bnc#1012628).
- net: usb: qmi_wwan: add support for DW5816e (bnc#1012628).
- nfp: abm: fix a memory leak bug (bnc#1012628).
- sch_choke: avoid potential panic in choke_reset() (bnc#1012628).
- sch_sfq: validate silly quantum values (bnc#1012628).
- selftests: net: tcp_mmap: clear whole tcp_zerocopy_receive
  struct (bnc#1012628).
- selftests: net: tcp_mmap: fix SO_RCVLOWAT setting (bnc#1012628).
- tipc: fix partial topology connection closure (bnc#1012628).
- tunnel: Propagate ECT(1) when decapsulating as recommended by
  RFC6040 (bnc#1012628).
- bnxt_en: Fix VF anti-spoof filter setup (bnc#1012628).
- bnxt_en: Reduce BNXT_MSIX_VEC_MAX value to supported CQs per PF
  (bnc#1012628).
- bnxt_en: Improve AER slot reset (bnc#1012628).
- bnxt_en: Return error when allocating zero size context memory
  (bnc#1012628).
- bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features()
  (bnc#1012628).
- net/mlx5: DR, On creation set CQ's arm_db member to right value
  (bnc#1012628).
- net/mlx5: Fix forced completion access non initialized command
  entry (bnc#1012628).
- net/mlx5: Fix command entry leak in Internal Error State
  (bnc#1012628).
- net/mlx5e: Fix q counters on uplink representors (bnc#1012628).
- net: mvpp2: prevent buffer overflow in mvpp22_rss_ctx()
  (bnc#1012628).
- net: mvpp2: cls: Prevent buffer overflow in
  mvpp2_ethtool_cls_rule_del() (bnc#1012628).
- wireguard: queueing: cleanup ptr_ring in error path of
  packet_queue_init (bnc#1012628).
- wireguard: receive: use tunnel helpers for decapsulating ECN
  markings (bnc#1012628).
- net: enetc: fix an issue about leak system resources
  (bnc#1012628).
- wireguard: socket: remove errant restriction on looping to self
  (bnc#1012628).
- wireguard: send/receive: cond_resched() when processing worker
  ringbuffers (bnc#1012628).
- HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic
  devices (bnc#1012628).
- sctp: Fix bundling of SHUTDOWN with COOKIE-ACK (bnc#1012628).
- Revert "HID: wacom: generic: read the number of expected
  touches on a per collection basis" (bnc#1012628).
- HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
  (bnc#1012628).
- HID: wacom: Report 2nd-gen Intuos Pro S center button status
  over BT (bnc#1012628).
- USB: uas: add quirk for LaCie 2Big Quadra (bnc#1012628).
- usb: chipidea: msm: Ensure proper controller reset using role
  switch API (bnc#1012628).
- USB: serial: garmin_gps: add sanity checking for data length
  (bnc#1012628).
- tracing/boottime: Fix kprobe event API usage (bnc#1012628).
- tracing/kprobes: Reject new event if loc is NULL (bnc#1012628).
- tracing: Wait for preempt irq delay thread to finish
  (bnc#1012628).
- tracing: Add a vmalloc_sync_mappings() for safe measure
  (bnc#1012628).
- crypto: arch/nhpoly1305 - process in explicit 4k chunks
  (bnc#1012628).
- crypto: arch/lib - limit simd usage to 4k chunks (bnc#1012628).
- KVM: s390: Remove false WARN_ON_ONCE for the PQAP instruction
  (bnc#1012628).
- KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit
  RSB path (bnc#1012628).
- KVM: arm: vgic: Fix limit condition when writing to
  GICD_I[CS]ACTIVER (bnc#1012628).
- KVM: arm64: Fix 32bit PC wrap-around (bnc#1012628).
- arm64: hugetlb: avoid potential NULL dereference (bnc#1012628).
- driver core: platform: Initialize dma_parms for platform devices
  (bnc#1012628).
- amba: Initialize dma_parms for amba devices (bnc#1012628).
- mei: me: disable mei interface on LBG servers (bnc#1012628).
- drm: ingenic-drm: add MODULE_DEVICE_TABLE (bnc#1012628).
- drm/amd/display: work around fp code being emitted outside of
  DC_FP_START/END (bnc#1012628).
- ipc/mqueue.c: change __do_notify() to bypass
  check_kill_permission() (bnc#1012628).
- epoll: atomically remove wait entry on wake up (bnc#1012628).
- eventpoll: fix missing wakeup for ovflist in ep_poll_callback
  (bnc#1012628).
- mm/page_alloc: fix watchdog soft lockups during
  set_zone_contiguous() (bnc#1012628).
- mm: limit boost_watermark on small zones (bnc#1012628).
- ceph: fix endianness bug when handling MDS session feature bits
  (bnc#1012628).
- ceph: demote quotarealm lookup warning to a debug message
  (bnc#1012628).
- staging: gasket: Check the return value of
  gasket_get_bar_index() (bnc#1012628).
- coredump: fix crash when umh is disabled (bnc#1012628).
- riscv: set max_pfn to the PFN of the last page (bnc#1012628).
- iocost: protect iocg->abs_vdebt with iocg->waitq.lock
  (bnc#1012628).
- batman-adv: fix batadv_nc_random_weight_tq (bnc#1012628).
- batman-adv: Fix refcnt leak in batadv_show_throughput_override
  (bnc#1012628).
- batman-adv: Fix refcnt leak in batadv_store_throughput_override
  (bnc#1012628).
- batman-adv: Fix refcnt leak in batadv_v_ogm_process
  (bnc#1012628).
- x86/mm/cpa: Flush direct map alias during cpa (bnc#1012628).
- x86/entry/64: Fix unwind hints in register clearing code
  (bnc#1012628).
- x86/entry/64: Fix unwind hints in kernel exit path
  (bnc#1012628).
- x86/entry/64: Fix unwind hints in __switch_to_asm()
  (bnc#1012628).
- x86/entry/64: Fix unwind hints in rewind_stack_do_exit()
  (bnc#1012628).
- x86/unwind/orc: Don't skip the first frame for inactive tasks
  (bnc#1012628).
- x86/unwind/orc: Prevent unwinding before ORC initialization
  (bnc#1012628).
- x86/unwind/orc: Fix error path for bad ORC entry type
  (bnc#1012628).
- x86/unwind/orc: Fix premature unwind stoppage due to IRET frames
  (bnc#1012628).
- KVM: x86: Fixes posted interrupt check for IRQs delivery modes
  (bnc#1012628).
- arch/x86/kvm/svm/sev.c: change flag passed to GUP fast in
  sev_pin_memory() (bnc#1012628).
- netfilter: nat: never update the UDP checksum when it's 0
  (bnc#1012628).
- netfilter: nf_osf: avoid passing pointer to local var
  (bnc#1012628).
- objtool: Fix stack offset tracking for indirect CFAs
  (bnc#1012628).
- iommu/virtio: Reverse arguments to list_add (bnc#1012628).
- scripts/decodecode: fix trapping instruction formatting
  (bnc#1012628).
- mm, memcg: fix error return value of mem_cgroup_css_alloc()
  (bnc#1012628).
- bdi: move bdi_dev_name out of line (bnc#1012628).
- bdi: add a ->dev_name field to struct backing_dev_info
  (bnc#1012628).
- io_uring: don't use 'fd' for openat/openat2/statx (bnc#1012628).
- fsnotify: replace inode pointer with an object id (bnc#1012628).
- fanotify: merge duplicate events on parent and child
  (bnc#1012628).
- Refresh
  patches.suse/Revert-ext4-make-dioread_nolock-the-default.patch.
- commit 77f44b9
- rpm/check-for-config-changes: Ignore CONFIG_CC_VERSION_TEXT
- commit 8e6b05f

==== libarchive ====
Version update (3.4.2 -> 3.4.3)

- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)

==== libpwquality ====
Subpackages: libpwquality1 pam_pwquality

- Register with pam-config in %post(un)

==== libressl ====
Version update (3.1.1 -> 3.1.2)
Subpackages: libcrypto46 libssl48 libtls20

- Update to release 3.1.2
  * A TLS client with peer verification disabled may crash when
    contacting a server that sends an empty certificate list.

==== nss-mdns ====

- nss-mdns-config: Use /usr/etc/nsswitch.conf as input if
  /etc/nsswitch.conf doesn't exist yet

==== pipewire ====
Version update (0.3.2 -> 0.3.5)
Subpackages: libpipewire-0_3-0 pipewire-modules pipewire-spa-tools pipewire-tools

- Filter out libpulse.so.0 and libjack.so.0 automatic provides so
  this is not considered an alternative when resolving dependencies
  in the distribution.
- Add patch to fix build in SLE/Leap where alsa doesn't have a
  snd_pcm_ioplug_hw_avail function:
  * do-not-use-snd_pcm_ioplug_hw_avail.patch
- Update to version 0.3.5:
  * Compiler fixes
  * Add pw-midiplay and pw-midirecord aliases
  * Add pw-mididump tool
  * Add pw-metadata tool to inspect, add and remove metadata
    for objects.
  * Docs updates, man pages
  * install alsa config files
  * Fix linked sink/source in pulseaudio
  * ratelimit graph processing warnings
  * improve buffer handling in GStreamer elements
  * Fix power usage by removing the queue for the alsa
    sequencer system announce messages.
  * Fix metadata clear() method dispatch.
  * Improve parameter enumeration, make it possible to detect
    missing parameters vs no-compatible parameters so that we
    can use defaults in the first case and error in the second
    case.
  * Fix cleanup of proxy objects. Stability improvements on
    plug/unplug in session manager.
  * Make it possible to set log level from config file
  * improve debug of param negotiation errors. Log the
    parameters to stderr/journal.
  * Make it possible to configure global logger
    implementation.
  * Fix NEON detection
  * JACK and PulseAudio compatibility improvements
- Update to version 0.3.4:
  * A quick update with some important stability fixes.
- Update to version 0.3.3:
  * NEON optimizations for audio conversion (32 and 64 bits)
  * rework of session manager implementation
  * Add option to disable modules in the session manager
  * Release midi hardware devices when suspended
  * various build fixes
  * Clean up options of various utils
  * Stability improvements
  * Mayor improvements in pulseaudio emulation. Improved
    timings and compatibility.
  * Implementation of drain and flush in pulse and alsa
    emulation.
  * Implement poll on file descriptors.
  * Improvement of metadata for jack emulation.
  * Fix memory and thread problems in jack emulation.
  * Simplification of state changes. Should make more use
    cases work in the jack emulation.
  * Improvements in the gstreamer elements. Removal of
    extra internal queue. pipewiresink can now be used to
    play audio.
  * Add pw-jack and pw-pulse scripts to run pulseaudio and
    jack applications with the right library path.
- Replace libpulse* replacement packages with a single
  pipewire-libpulse-0_3 package that includes all libraries
  installed in the non-standard directory
  %{_libdir}/pipewire-0.3/pulse and a new pw-pulse wrapper script.
  Likewise for the jack replacement libraries in a new
  pipewire-libjack-0_3 package.
- Use update-alternatives for the wrapper scripts.

==== ppp ====

- Fixup previous fix: use the defined macro %_unitdir for the
  systemd unit.
- /usr/lib/systemd instead %{_libexecdir}/systemd