------------------------------------------------------------------
--- Changelog.all ----------- Fri Nov 29 04:14:02 UTC 2024 ------
------------------------------------------------------------------
------------------------------------------------------------------
------------------  2024-11-29  -  Nov 29 2024  -------------------
------------------------------------------------------------------

++++ openSUSE-release:

  - automatically generated by openSUSE-release-tools/pkglistgen

------------------------------------------------------------------
------------------  2024-11-28  -  Nov 28 2024  -------------------
------------------------------------------------------------------

++++ foliate:

  - Update to version 3.2.0:
    * Revamped translation tool, which now remembers the last target
    language, and allows filtering languages
    * Improved PDF support: the rendering is faster and no longer
    blurry
    * Improved rendering of fixed layout EPUBs (see comments in #1318)
    * Improved focus handling: the focus is no longer lost when
    navigating to new sections, and tabbing no longer breaks layout
    * Improved text selection across pages, allowing selecting
    to the previous page
    * It now only shows more than one column when the viewport is in
    landscape (or, for vertical writing, in portrait)
    * Changed shortcut for the table of contents from Ctrl+Alt+T
    to Ctrl+T.
    * Added Space/Shift+Space shortcuts for turning pages.
    * Added option to open books with external application from
    the library view.
    * Fixed formatting of copied text.
    * Fixed extra border in CBZ files.
    * Fixed handling of bare search template URL in OPDS feeds.

++++ installation-images-openSUSE:

  - merge gh#openSUSE/installation-images#746
  - add extra sync before removing zram swap device (bsc#1233893)
  - 17.146
  - merge gh#openSUSE/installation-images#745
  - Drop gamin-server BuildRequires: no longer relevant
  - 17.145

++++ python-ipysheet:

  - Skip python313: no pscript

++++ libqxmpp-qt5:

  - Update to 1.9.1
    * MixManager: Fix update node subscriptions adds and removes
    all nodes with default parameters

++++ libqxmpp-qt6:

  - Update to 1.9.1
    * MixManager: Fix update node subscriptions adds and removes
    all nodes with default parameters

++++ sysprof:

  - Update to version 47.2:
    + Use pid when generating counter IDs in SysprofCollector.
    + Fix potential UB in GtkBitset.
    + Avoid UB in bsearch() with no data.
    + Increased safety in SysprofDocumentLoader.
    + Increased safety when parsing CPU counters with async IO.

++++ python-pysol-cards:

  - remove unneeded dependencies

++++ python-asdf-astropy:

  - Update to 0.7.0
    * strip None factor for spectral_density in equivalency converter
    to avoid deprecation warnings for astropy 7. [#229]
    * drop support for python 3.9. [#232]
    * replace usages of copy_arrays with memmap [#230]
    * require asdf 2.14.4 [#241]
    * Add support for astropy.nddata.uncertainty classes [#239]
    * Add support for astropy.wcs.WCS and
    astropy.wcs.wcsapi.SlicedLowLevelWCS [#246]

++++ python-discogs-client:

  - Update to 2.7.1:
    * Small fixes for Python 3.12 references
    * Parse artist role field
  - Drop seperate LICENSE file

++++ python-jsonformatter:

  - Update to 0.3.4:
    * Support python 3.13
    * fix: python < 3.7 using pip install failed
  - Use pytest and license macros.
  - Remove patch remove-failing-test.py, no longer required.

++++ python-redis:

  - Pin tests to pytest-asyncio < 0.24
  - Only require async-timeout for older pythons

++++ tcsh:

  - Update to tcsh 6.24.14 - 2024-11-26
    * Fix issues with S-JIS handling (T. Nosaka)
    * Handle redirections in bracketed expressions
    if { foo > /dev/null } (christos)
    * Recognize history searches in history expansion
    !?foo<tab> (christos)

++++ termotp:

  - Update to 0.0.11:
    * 45175e7 Remove upx compression (causes issues with MacOS).

------------------------------------------------------------------
------------------  2024-11-27  -  Nov 27 2024  -------------------
------------------------------------------------------------------

++++ Mesa:

  - trying to make buildservice happy by adding both tarballs to
    specfile ...

++++ Mesa-drivers:

  - trying to make buildservice happy by adding both tarballs to
    specfile ...

++++ webkit2gtk3-soup2:

  - Update to version 2.46.4:
    + Improve memory consumption and performance of Canvas
    getImageData.
    + Fix preserve-3D intersection rendering.
    + Fix video dimensions since GStreamer 1.24.9.
    + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
    + Fix content filters not working on about:blank iframes.
    + Fix several crashes and rendering issues.
    + Security fixes: CVE-2024-44308, CVE-2024-44309.
  - Drop patches fixed upstream:
    + 9e9ea966373d3858668f6a29d8ba91a5807c8dd8.patch
    + webkit2gtk3-CVE-2024-44308.patch
    + webkit2gtk3-CVE-2024-44309.patch

++++ webkit2gtk3:

  - Update to version 2.46.4:
    + Improve memory consumption and performance of Canvas
    getImageData.
    + Fix preserve-3D intersection rendering.
    + Fix video dimensions since GStreamer 1.24.9.
    + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
    + Fix content filters not working on about:blank iframes.
    + Fix several crashes and rendering issues.
    + Security fixes: CVE-2024-44308, CVE-2024-44309.
  - Drop patches fixed upstream:
    + 9e9ea966373d3858668f6a29d8ba91a5807c8dd8.patch
    + webkit2gtk3-CVE-2024-44308.patch
    + webkit2gtk3-CVE-2024-44309.patch

++++ webkit2gtk4:

  - Update to version 2.46.4:
    + Improve memory consumption and performance of Canvas
    getImageData.
    + Fix preserve-3D intersection rendering.
    + Fix video dimensions since GStreamer 1.24.9.
    + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
    + Fix content filters not working on about:blank iframes.
    + Fix several crashes and rendering issues.
    + Security fixes: CVE-2024-44308, CVE-2024-44309.
  - Drop patches fixed upstream:
    + 9e9ea966373d3858668f6a29d8ba91a5807c8dd8.patch
    + webkit2gtk3-CVE-2024-44308.patch
    + webkit2gtk3-CVE-2024-44309.patch

++++ argocd-autopilot:

  - Update to version 0.4.18:
    * updated changelog
    * fixed `project create` help text
    * created new release
    * Sec-fixes (#598)
    * add sudo command for linux installation (#589)
    * fix bootstrap for Azure DevOps (#594)
    * fix clone repo from azure (#595)
    * updated golang to 1.22 (#555)
    * Bump github.com/ktrysmt/go-bitbucket from 0.9.73 to 0.9.75
    (#553)
    * Bump github.com/xanzy/go-gitlab from 0.95.2 to 0.97.0 (#552)
    * bump argo-cd to `v2.10.0` (#554)
    * Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#546)
    * Bump code.gitea.io/sdk/gitea from 0.17.0 to 0.17.1 (#544)
    * Bump github.com/spf13/viper from 1.18.1 to 1.18.2 (#543)
    * Bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#542)
    * Bump github.com/ktrysmt/go-bitbucket from 0.9.72 to 0.9.73
    (#540)
    * Bump github.com/xanzy/go-gitlab from 0.94.0 to 0.95.2 (#541)
    * Bump github.com/go-git/go-git/v5 from 5.10.1 to 5.11.0 (#539)
    * Bump github.com/spf13/viper from 1.17.0 to 1.18.1 (#537)
    * Bump code.gitea.io/sdk/gitea from 0.16.0 to 0.17.0 (#532)
    * Bump github.com/go-git/go-git/v5 from 5.10.0 to 5.10.1 (#531)
    * Bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 (#528)
    * Bump github.com/xanzy/go-gitlab from 0.93.2 to 0.94.0 (#526)
    * Bump github.com/ktrysmt/go-bitbucket from 0.9.71 to 0.9.72
    (#527)
    * Bump
    go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
    (#525)
    * Bump github.com/ktrysmt/go-bitbucket from 0.9.70 to 0.9.71
    (#524)
    * Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (#523)
    * Bump github.com/xanzy/go-gitlab from 0.93.1 to 0.93.2 (#518)
    * Bump github.com/go-git/go-git/v5 from 5.9.0 to 5.10.0 (#519)
    * Release v0.4.17 (#515)

++++ ast-grep:

  - Update to 0.30.1:
    * fix: fix --config=config.yml arg parse #1617
    * fix: update python version #1614
    * fix(deps): update dependency @swc/core to v1.9.3 63c1c8d
    * chore: revert pyo3 2022f38
    * feat: add rule entity inspection c569ec7
  - Update to 0.30.0:
    * Breaking change: feat: semi-structured tracing output #1574
    * fix: error=unused-suppression should change exit code #1585
    * refactor: move stdErr into inspect mod #1575
    * infra: switch to llvm-cov #1570
    * Breaking change: refactor: rename --tracing to --inspect 105945e
    * Breaking change: refactor: remove --json format for tracing ed05be4
    * Breaking change: fix: remove builtin dart support cd25a62
    * Breaking change: fix: report unused suppression always 893df63
    * fix(deps): update babel monorepo b8803ce

++++ autocutsel:

  - do not compress the manual page manually; it's done by a brp
    script during build automatically giving us more flexibility

++++ buildpacks-cli:

  - Update to version 0.36.0:
    * Emit a performance warning if containerd is enabled and we're
    exporting to the daemon
    * build(deps): bump the go-dependencies group across 1 directory
    with 9 updates
    * Cleanup after running acceptance tests
    * Try lifecycle binary 0.20.3
    * Bump lifecycle binary version also
    * Fixing lifecycle validation to use fully qualified names
    * Allow trusted builders by repo and tag
    * Use released lifecycle
    * build(deps): bump buildpacks/github-actions from 5.8.0 to 5.8.1
    * build(deps): bump buildpacks/github-actions from 5.7.4 to 5.8.0
    * build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to
    4.5.1
    * Update actions
    * Pin BurntSushi/toml as test failures seem related to
    https://github.com/BurntSushi/toml/issues/417
    * FIXME: update lifecycle (to non-released version) so that we
    can bump docker
    * Bump deps and run tidy
    * Fix lint
    * Update go and run tidy
    * Use an existing directory instead of creating and deleting
    directories for each '--path' flag case to ensure no temp
    directories are left behind in case of a test failure.
    * build(deps): bump github.com/docker/docker
    * build(deps): bump buildpacks/github-actions from 5.5.4 to 5.7.4
    * avoid using os.MkdirTemp() to prevent test failures on macOS
    * rephrase the test description
    * Make it warns only when a local path with the same string as
    the specified image name exists
    * Don't warn about clear-env key while parsing buildpack.toml as
    this is actually expected.
    * Fix deletion of ephemeral builder
    * Improve descriptions for some test cases.
    * Add a test case for when the 'pack build' is called with the
    '--path' flag.
    * Make the 'pack build' command warn that the positional argument
    will not be treated as the source directory path.
    * handled case sensitivity
    * build(deps): bump anchore/scan-action from 3 to 4
    * Update image references in internal documents and ci settings
    to use fully qualified names.
    * Update references to lifecycle image to use fully qualified
    image name.

++++ clipscreen:

  - new package

++++ crmsh:

  - Update to version 5.0.0+20241127.3e90e46f:
    * Fix: report: Fix a regression for irregular file collection

++++ ddcutil-service:

  - 1.0.12
  - Return the error status-code if enable_ddca_watch_displays fails - was returning OK even on failure.

++++ xdm:

  - Split out displaymanager-sycconfig package: The central
    configuration part that is used by all display managers. This is
    needed in order to progress towards 'xdm' not acting as wrapper
    around DMs, but only be used as Dislplay Manager when XDM is
    supposed to be used, or use the real systemd services of the
    various DMs (e.g gdm.service, sddm.service).

++++ emacs:

  - Avoid trouble with unknown X pointer shapes below Wayland (boo#1233795)

++++ exfatprogs:

  - Update to 1.2.6:
    CHANGES :
    * exfatprogs: replace obsolete autoconf and libtool
    macros.
    * mkfs.exfat: prefer the physical block size over
    the logical block size for the exFAT sector size.
    * mkfs.exfat: add notes about the format of the volume
    GUID to the man page.
    * mkfs.exfat: fix an incorrect calculation of the number
    of used clusters.
    BUG FIXES :
    * exfatlabel: fix an user input error when setting
    a volume serial or label.

++++ forgejo-runner:

  - update to 5.0.3:
    * fix: it wasn't possible to mount the docker socket in each container

++++ gnome-session:

  - Build gnome-session-wayland also on s390x: It was originally
    excluded because xwayland did not exist. That has been solved in
    2021 though.

++++ intel-lpmd:

  - Avoid double include of cpuid.h and fix older distro builds
    (could be a gcc7 vs gcc14 issue).
    Add fix_cpuid_double_include.patch.
  - Only build for x86 and, as it's an Intel tool, it's probably only
    intended to run and work on x86 machines, add:
    ExclusiveArch:  %ix86 x86_64

++++ jupyter-filesystem:

  - Update to 20241127
    * new metapackage jupyter 1.1.1

++++ lxpanel:

  - fix build by adjust CFLAGS with -Wno-incompatible-pointer-types
  - remove update-desktop-files from BR

++++ proj:

  - Update data to version 1.19
  - Bump gcc version used for Leap building to 13

++++ raylib:

  - Update to 5.5:
    * NEW raylib pre-configured Windows package: The new raylib portable and
    self-contained Windows package for raylib 5.5, intended for nobel devs that
    start in programming world, comes with one big addition: support for C code
    building for Web platform with one-single-mouse-click! For the last 10
    years, the pre-configured raylib Windows package allowed to edit simple C
    projects on Notepad++ and easely compile Windows executables with an
    automatic script; this new release adds the possibility to compile the same
    C projects for Web platform with a simple mouse click. This new addition
    greatly simplifies C to WebAssembly project building for new users. The
    raylib Windows Installer package can be downloaded for free from raylib on
    itch.io.
    * NEW raylib project creator tool: A brand new tool developed to help raylib
    users to setup new projects in a professional way. raylib project creator
    generates a complete project structure with multiple build systems
    ready-to-use and GitHub CI/CD actions pre-configured. It only requires
    providing some C files and basic project parameters! The tools is free and
    open-source, and it can be used online!.
    * NEW Platform backend supported: RGFW: Thanks to the rcore platform-split
    implemented in raylib 5.0, adding new platforms backends has been greatly
    simplified, new backends can be added using provided template,
    self-contained in a single C module, completely portable. A new platform
    backend has been added: RGFW. RGFW is a new single-file header-only
    portable library (RGFW.h) intended for platform-functionality management
    (windowing and inputs); in this case for desktop platforms (Windows, Linux,
    macOS) but also for Web platform. It adds a new alternative to the already
    existing GLFW and SDL platform backends.
    * NEW Platform backend version supported: SDL3: Previous raylib 5.0 added
    support for SDL2 library, and raylib 5.5 not only improves SDL2
    functionality, with several issues reviewed, but also adds support for the
    recently released big SDL update in years: SDL3. Now users can select at
    compile time the desired SDL version to use, increasing the number of
    potential platforms supported in the future!
    * NEW Retro-console platforms supported: Dreamcast, N64, PSP, PSVita, PS4:
    Thanks to the platform-split on raylib 5.0, supporting new platform
    backends is easier than ever! Along the raylib rlgl module support for the
    OpenGL 1.1 graphics API, it opened the door to multiple homebrew
    retro-consoles backend implementations! It's amazing to see raylib running
    on +20 year old consoles like Dreamcast, PSP or PSVita, considering the
    hardware constraints of those platforms and proves raylib outstanding
    versability! Those additional platforms can be found in separate
    repositories and have been created by the amazing programmer Antonio Jose
    Ramos Marquez (@psxdev).
    * NEW GPU Skinning support: After lots of requests for this feature, it has
    been finally added to raylib thanks to the contributor Daniel Holden
    (@orangeduck), probably the developer that has further pushed models
    animations with raylib, developing two amazing tools to visualize and test
    animations: GenoView and BVHView. Adding GPU skinning was a tricky feature,
    considering it had to be available for all raylib supported platforms,
    including limited ones like Raspberry Pi with OpenGL ES 2.0, where some
    advance OpenGL features are not available (UBO, SSBO, Transform Feedback)
    but a multi-platform solution was found to make it possible. A new example,
    models_gpu_skinning has been added to illustrate this new functionality. As
    an extra, previous existing CPU animation system has been greatly improved,
    multiplying performance by a factor (simplifiying required maths).
    * NEW raymath C++ operators: After several requested for this feature, C++
    math operators for Vector2, Vector3, Vector4, Quaternion and Matrix has
    been added to raymath as an extension to current implementation. Despite
    being only available for C++ because C does not support it, these operators
    simplify C++ code when doing math operations.
    * Normals support on batching system
    * Clipboard images reading support
    * CRC32/MD5/SHA1 hash computation
    * Gamepad vibration support
    * Improved font loading (no GPU required) with BDF fonts support
    * Time-based camera movement
    * Improved GLTF animations loading

++++ libsecp256k1:

  - Update to 0.6.0:
    * Add a musig module
    * Add a significantly more robust method to clear secrets from the stack
    * Remove the unused secp256k1_scratch_space functions

++++ unbound:

  - add workaround for bug
    https://github.com/NLnetLabs/unbound/issues/509
    Starting up with 127.0.0.1 in the /etc/resolv.conf leads to long
    delays if the anchor update is being run as ExecStartPre in the
    unbound service

++++ linkerd-cli-edge:

  - Update to version 24.11.8:
    no CLI-related changes in changelog

++++ melange:

  - Update to version 0.16.0:
    * Include locked melange config in control section
    * build(deps): bump github.com/stretchr/testify from 1.9.0 to
    1.10.0
    * build(deps): bump the gomod group with 2 updates
    * build(deps): bump step-security/harden-runner in the actions
    group

++++ mesheryctl:

  - update to 0.7.162:
    * Meshery CLI
  - Add comment @Jougan-0 (#12756)
    * Maintenance
  - fix: permission keys pull 404 pages @jerensl (#12765)
  - Bump path-to-regexp and serve in /ui @dependabot (#12748)
  - Bump dawidd6/action-download-artifact from 2 to 6 in
    /.github/workflows @dependabot (#12758)

++++ nerdctl:

  - Set build version to package version and revision to unknown

++++ netavark:

  - Fix source definition for netavark-iptables.conf and netavark-nftables.conf

++++ netty:

  - Clean a bit the spec file and adapt to the recent changes in
    netty-tcnative package
  - Removed patches:
    * 0005-Do-not-use-the-Graal-annotations.patch
    * 0006-Do-not-use-the-Jetbrains-annotations.patch
    + remove the annotations with a macro in the jurand tool
    * 0007-Do-not-require-the-tcnative-native-library.patch
    + we are building now the artifact, so we can require it

++++ nginx:

  - Updated to 1.27.3
    * https://github.com/nginx/nginx/releases/tag/release-1.27.3
    * Added the "server" directive in the "upstream" block supports the "resolve" parameter.
    * Added the "resolver" and "resolver_timeout" directives in the "upstream" block.
    * Added SmarterMail specific mode support for IMAP LOGIN with
    untagged CAPABILITY response in the mail proxy module.
    * Changed TLSv1 and TLSv1.1 protocols are disabled by default.
    * Changed IPv6 address in square brackets and no port can be specified in the
    "proxy_bind", "fastcgi_bind", "grpc_bind", "memcached_bind", "scgi_bind",
    and "uwsgi_bind" directives, and as client address in ngx_http_realip_module.
    * Fixed ngx_http_mp4_module and "proxy_store" directive.

++++ nodejs-electron:

  - New upstream release 31.7.6
    * no user-visible changes
  - Leap: build with gcc 14
  - Drop Fedora 39 support

++++ obs-service-cargo:

  - Update to version 4.3.5:
    * fix: finally added the alias. 🫠
    * chore: update roast to 5.1.7. update other dependencies as well.

++++ roast:

  - Update to version 5.1.7:
    * feat: add zstd as another alias for zst
    * prepare structure for roast-scm
    * minor: improve error message here
    * fix: added trace feature

++++ passt:

  - Update to version 20241127.c0fbc7e:
    * dhcp: Honour broadcast flag (RFC 2131, 4.1)
    * dhcp: Introduce support for Rapid Commit (option 80, RFC 4039)
    * dhcp: Use -1 as "missing option" length instead of 0
    * treewide: Introduce 'local mode' for disconnected setups
    * test: Improve logic for waiting for SLAAC & DAD to complete in NDP tests
    * ndp: Don't send first periodic router advertisement right after guest connects
    * test/perf: Select a single IPv6 namespace address in pasta tests
    * conf, passt.1: Update --mac-addr default in usage() and man page
    * passt.1: Fix "default" note about --map-guest-addr

++++ python-azure-communication-callautomation:

  - New upstream release
    + Version 1.3.0
    + For detailed information about changes see the
    CHANGELOG.md file provided with this package
  - Adjust upstream source name in spec file
  - Drop extra LICENSE.txt as upstream now ships its own
  - Rename LICENSE.txt to LICENSE in %files section
  - Update Requires from setup.py

++++ python-bokeh:

  - Update to 3.6.1
    [#]# bugfixes:
    * #14082 [BUG] p.circle(..) can't be added as renderer to
    PointDrawTool since 3.6
    * #14090 [component: bokehjs] [BUG] Google Chrome 130 fails to
    draw figure, throws `TypeError: Failed to execute 'fill' on
    'CanvasRenderingContext2D'`
    * #14107 [component: bokehjs] [BUG] Loss of mobile touch
    scrolling with update to Bokeh 3.6.0
    [#]# tasks:
    * #14096 Backports for 3.6.1
  - Release 3.6.0
    [#]# bugfixes:
    * #4951 ModelExtensions - all resources from a whole module are
    loaded
    * #7524 GroupFilter only accepts strings
    * #13827 [component: bokehjs] [BUG] Lack of range expansion when
    there remains unbounded directions, even when
    `maintain_focus=False`
    * #13886 [component: bokehjs] [BUG] NPM package has types
    (*.d.ts) in incorrect location
    * #13957 [component: bokehjs] Explicit selection glyph example
    broken
    * #13959 [BUG] Reset Tool Error in Bokeh Gridplot with Single
    Plot
    * #13964 [component: bokehjs] [BUG] page won't render if CustomJS
    args has a dict with key "constructor"
    * #13965 [component: bokehjs] [BUG] CategoricalSlider shows
    ‘undefined’ value and skip that value
    * #13972 BOKEH_MINIFIED not working
    * #13984 [component: tests] [BUG] Deprecation warning treated as
    error in pytest hook
    * #14014 [component: bokehjs] [BUG] StringFormatter `nan_format`
    seems broken
    * #14054 [component: bokehjs] [BUG] Custom hover tooltip on image
    plot shows all the image data.
    * #14058 [component: bokehjs] [BUG] Clearing selection with ESC
    only works on first selection tool
    * #14068 [component: bokehjs] [BUG] Unable to change figures
    displayed by altering children attribute of gridplot (or other
    layout classes) in JS callback
    * #14072 [component: bokehjs] [BUG] Spinner input not responding
    to wheel event
    * #13968 [component: docs] fix indentation in `offset` parameter
    for `Title`
    * #14038 [component: bokehjs] Allow `is_equal(0, -0)` to be true
    to match `===`
    * #14055 [component: docs] fix some typos
    * #14065 [component: build] Generate correct `*.d.ts` files for
    CSS modules
    [#]# features:
    * #601 [component: bokehjs] Add support for click events on
    categorical axes
    * #11104 [component: bokehjs] [FEATURE] Option for DataTable
    column sorting to place NaNs last
    * #13130 [component: bokehjs] Add CustomJSTicker
    * #13893 [component: bokehjs] [FEATURE] Custom sorting of columns
    in a table
    * #13905 [component: bokehjs] [FEATURE] triangle relative size by
    data units
    * #13921 [FEATURE] Attach ScaleBar to subplot range
    * #14035 [component: bokehjs] Add WebGL implementation for Ngon
    glyph
    * #14031 [component: bokehjs] Add "open image in a new tab" mode
    to save tool
    * #14033 Add support for click-style pan tools
    [#]# tasks:
    * #12303 [FEATURE] Improved error message on token expiry
    * #13835 [FEATURE] NumPy 2.0 support
    * #13960 [component: docs] Remove sampledata download in
    contributing guide
    * #13963 [FEATURE] Add a conda channel for rc releases
    * #13969 [component: bokehjs] [BUG] Plots fail in Firefox
    115.12.0esr (64-bit)
    * #13946 [component: build] Upgrade to TypeScript 5.5
    * #13977 [component: bokehjs] Make `GlyphRenderer` generic in
    glyph type and remove a lot of `any` types
    * #13992 Remove docker and old integration tests cruft
    * #14019 [component: docs] Python docstring argument fixes
    * #14021 [component: docs] Fix HTML/CSS warning for palette group
    detail
    * #14023 [component: docs] Remove outdated known issues list from
    BokehJS docs
    * #14024 [component: docs] Update setup and testing docs dev
    guide
    * #14037 [component: bokehjs] Clean up factor range and add
    factor method
    * #14048 [component: bokehjs] Add missing `abstract` modifier to
    classes
    * #14051 [component: bokehjs] Use pseudo type members to avoid
    casting
    * #14052 [component: bokehjs] Make `PaletteSelect` use
    stylehseets instead of inline styles
    * #14056 [component: bokehjs] Upgrade to TypeScript 5.6
    * #14064 [component: build] Add `script:watch` task for
    incremental builds
    * #14067 [component: build] Upgrade `@types/node` and fix npm
    audit's concerns
    * #14071 [component: docs] fix a typo
    * #14074 [component: docs] Bring 3.5.x point release notes to
    3.6.0
    * #14075 [component: docs] Add release notes for bokeh 3.6.0

++++ python-cloudpickle:

  - Update to 3.1.0
    * Some improvements to make cloudpickle more deterministic when
    pickling dynamic functions and classes, in particular with
    CPython 3.13. (PR #524 and PR #534)
    * Fix a problem with the joint usage of cloudpickle's
    _whichmodule and multiprocessing. (PR #529)
  - Drop Fix-test_extract_class_dict-for-Python-313.patch

++++ python-dask:

  - Skip tokenize test on python313
    * See gh#dask/dask#11456, gh#dask/dask#11457

++++ python-junos-eznc:

  - Add get-telnetlib-from-netmiko.patch, telnetlib was removed from
    the standardlibrary in Python 3.13
    * https://github.com/Juniper/py-junos-eznc/issues/1324

++++ python-libtmux:

  - update to 0.39.0:
    * Drop Python 3.8 by @tony in #548
    Python 3.8 reached end-of-life on October 7th, 2024 (see
    devguide.python.org, Status of Python Versions, Unsupported
    versions
    See also:
    https://devguide.python.org/versions/#unsupported-versions
  - update to 0.38.1:
    * Minimum Python back to 3.8 for now.
  - update to 0.38.0:
    * Development
  - Project and package management: poetry to uv (#547)
    uv is the new package and project manager for the project,
    replacing Poetry.
  - Code quality: Use f-strings in more places (#540)
    via ruff 0.4.2.
    * Documentation
  - [docs] Sphinx v8 compatibility: configure a non-empty
    inventory name for Python Intersphinx mapping. by @jayaddison
    in #542
  - Fix docstrings in query_list for MultipleObjectsReturned and
    ObjectDoesNotExist.
    * Other
  - Bump dev dependencies, including ruff 0.4.2, f-string tweaks
    by @tony in #540

++++ python-mrcz:

  - Update to 0.5.7
    * Renamed np.product to np.prod as the old name is deprecated in NumPy 2.0.
  - Add patch new-pythons.patch to fix build with Python 3.13
  - Python 2 can be finally gone

++++ python-pandas:

  - Drop tests-nomkl.patch and tests-wasm.patch, not needed anymore
  - Skip a test failing with new xarray

++++ python-pdm:

  - Update to 2.21.0
    * Support dependency groups as standardized by PEP 735. By default, dev
    dependencies will be written to [dependency-groups] table.
    * Fix a bug that strategy.inherit_metadata config is not honored when using
  - -lockfile option.
    * Update resolvelib to 1.1.0.
    * Add a fixer to remove the deprecated cross_platform strategy from lock file.
    * Pass original working directory as env variable to pdm scripts.
    * Output similar commands or script command when the input command is not
    correct.
    * Print task name by default when using pdm run
    * Make OrderedSet.__contains__ run in O(1)
    * Drop support of Python 3.8

++++ python-pycha:

  - Add patch remove-makesuite.patch:
    * Do not use testsuite.makeSuite to construct the testsuite.
  - Switch to pyproject macros.
  - Update URL.

++++ python-quantities:

  - Update to 0.16.1:
    * Fixed a couple of small bugs
    * Added umath funcs: `maximum` & `minimum`
    * Added support for NumPy 2.0, while maintaining support for older
    versions back to 1.22
    * Fixed a potential security hole
    * Dropped support for Python 3.8

++++ python-scikit-build:

  - Add scikit-build-pr1120-upddistutils.patch
    * gh#scikit-build/scikit-build#1120

++++ python-zxcvbn-rs-py:

  - update to 0.1.1+5:
    * Upgrade to zxcvbn 3.1.0
    * Upgrade to PyO3 0.23

++++ sqlmap:

  - update to 1.8.11:
    * fixed #5772, #5761 unhandled exception
    * fixed #5763 Can not perform sql blind injection again latest dvwa
    * fixed #5798 Some bugs with common tables and columns check
    * fixed #5767 direct connection to oracle database not working
    * update translations

++++ updatecli:

  - Update to version 0.88.0:
    * doc: add mermaid to manifest show command output (#3173)
    * fix: flavour to flavor
    * feat: add Pipeline graph to issue template
    * feat: add mermaid graph flavour
    * fix: only look at target when target has dependsonchange: true
    (#3160)
    * deps: bump updatecli version to v0.87.0 (#3148)
    * doc(e2e tests) add a minimalistic documentation (#1120)

++++ vdu_controls:

  - Version 2.1.2
    * Replace the Preset-scheduler with an implementation that remains accurate after PC-sleep/hibernation.
    * Fix the day-rollover which was scheduling for the wrong day if triggered at 12:59:59.
    * When performing a set-vcp, don't increment the NVRAM write count if the VDU doesn't respond.
    * When reconfiguring VDU controllers, discard pending VDU VCP changes from previous controllers.
    * Eliminate a potential for deadlock when handling change-events from ddcutil-service.
    * Better handle ddcutil-service unexpected event types (don't raise an error dialog).
    * The main window height will now automatically resize to accommodate the number of controls present.
    * Toggling lux brightness-interpolation now immediately updates the profile-plot to reflect the change.
    * Fix the Lux Dialog, it was turning off interpolation when first constructed.

++++ werf:

  - Update to version 2.14.0:
    * chore: release 2.14.0 Signed-off-by: Aleksei Igrychev
    <aleksei.igrychev@palark.com>
    * docs(build, dockerfile, giterminism): add secrets description
    (#6443)
    * refactor(util): fix ExpandPath does not support "~"
    * refactor(util): enhance path utility functions
    * fix(cleanup): fix cleanup for Buildah images by switching to
    tag-based logic
    * refactor(cleanup): make it juicy
    * feat(giterminism): add build secrets (#6436)
    * chore(test): do not user artifacts
    * feat(build, docker, buildah, dockerfile): add secrets support
    (#6429)
    * fix: unsorted Set.ToSlice usage in parallel task execution
    * chore(release): add registry cleanup workflow (#6428)
    * feat(release): publish werf images for linux/arm64 platform
    (#6427)
    * refactor(cleanup): do not override the keep reason
    * refactor(cleanup): introduce StageDescSet and unify array
    handling
    * fix(cleanup): keep relatives for
    keepImagesBuiltWithinLastNHours policy
    * refactor(build): deduplicate selectSuitableStageDesc
    * refactor: introduce StageDescSet and unify array handling
    * refactor: standardize usage of StageDesc naming
    * refactor(cli): add common components manager to deduplicate
    code (#6414)
    * chore(ci): fix the workflow is not valid
    * chore(release): 1.2 beta,rock-solid 2 all

++++ whatsie:

  - Update to 4.16.3:
    * prevent crashes due to custom notification (dde6e02)

------------------------------------------------------------------
------------------  2024-11-26  -  Nov 26 2024  -------------------
------------------------------------------------------------------

++++ Komikku:

  - update to 1.64.0:
    * [Servers] Added Weeb Central (EN)
    * [Servers] Flame Comics (EN): Update
    * [Servers] Manga Demon (EN): Update
    * [Servers] Fr-Scan (FR): Disabled
    * [Servers] Manga Scan (FR): Disabled
    * [L10n] Updated French translation

++++ Mesa:

  - on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
  - adjusted patches for Mesa 24.1.7:
    * python36-buildfix1-s390x.patch
    * u_dep_xcb-s390x.patch
    * u_mesa-CVE-2023-45913-s390x.patch

++++ Mesa-drivers:

  - on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
  - adjusted patches for Mesa 24.1.7:
    * python36-buildfix1-s390x.patch
    * u_dep_xcb-s390x.patch
    * u_mesa-CVE-2023-45913-s390x.patch

++++ MozillaThunderbird:

  - Mozilla Thunderbird 128.5.0
    * IMAP could crash when reading cached messages
    * Enabling "Show Folder Size" on Maildir profile could render
    Thunderbird unusable
    * Messages corrupted by folder compaction were only fixed by user
    intervention
    * Reading a message from past the end of an mbox file did not
    cause an error
    * View -> Folders had duplicate F access keys
    * Add-ons adding columns to the message list could fail and cause
    display issue
    * "Empty trash on exit" and "Expunge inbox on exit" did not
    always work
    * Selecting a display option in View -> Tasks did not apply in
    the Task interface
    MFSA 2024-68 (bsc#1233695)
    * CVE-2024-11691 (bmo#1914707, bmo#1924184)
    Memory corruption in Apple GPU drivers
    * CVE-2024-11692 (bmo#1909535)
    Select list elements could be shown over another site
    * CVE-2024-11693 (bmo#1921458)
    Download Protections were bypassed by .library-ms files on Windows
    * CVE-2024-11694 (bmo#1924167)
    CSP Bypass and XSS Exposure via Web Compatibility Shims
    * CVE-2024-11695 (bmo#1925496)
    URL Bar Spoofing via Manipulated Punycode and Whitespace Characters
    * CVE-2024-11696 (bmo#1929600)
    Unhandled Exception in Add-on Signature Verification
    * CVE-2024-11697 (bmo#1842187)
    Improper Keypress Handling in Executable File Confirmation Dialog
    * CVE-2024-11698 (bmo#1916152)
    Fullscreen Lock-Up When Modal Dialog Interrupts Transition on macOS
    * CVE-2024-11699 (bmo#1880582, bmo#1929911)
    Memory safety bugs fixed in Firefox 133, Thunderbird 133,
    Firefox ESR 128.5, and Thunderbird 128.5
  - appid is thunderbird-esr currently; use the matching desktop
    file name (boo#1233650)

++++ autocutsel:

  - add man pages from Debian
  - changed LICENSE file from %doc to %license

++++ bluedevil6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ breeze6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ buildkit:

  - Update to version 0.17.2:
    * Use view transaction for metadata read
    * http: fix etag cache scoping
    * ci: test sandbox build with multiple platforms
    * dockerfile: use lld linker for containerd build
    * dockerd: skip content check with containerd snapshotter
    * vendor: update containerd to v1.7.24
    * vendor: update github.com/tonistiigi/fsutil to 31cf1f437184
    * Remove pre-Go 1.17 build tags
    * solver: release unreferenced cache keys after gc
    * improve stacks of cancels from defers
    * util/system: remove Atime implementation for containerd/continuity/fs
    * vendor: github.com/containerd/continuity v0.4.5
    * vendor: github.com/docker/cli v27.4.0-rc.2
    * vendor: github.com/docker/docker v27.4.0-rc.2
    * dockerfile: update runc binary to 1.2.2
    * vendor: github.com/tonistiigi/go-actions-cache@v0.0.0-20241108014124-394979b8119e
    * vendor: update grpc to v1.66.3
    * docs: remove duplicate parser directives bullet list
    * tests: add `testDockerfileFromHTTP` for WCOW
    * protobuf: fix casing of json attributes with the switch from gogo
    * history: handle gracefulstop when history is active
    * contenthash: don't delete records when a directory is only modified
    * build(deps): bump codecov/codecov-action from 4 to 5
    * gateway: ensure llb digests are deterministic when sent by frontends
    * detect: use newer semconv for resource and add unit test
    * Dockerfile: update containerd binary to v2.0.0
    * client: improve releasable condition in tests
    * testutil: use containerd config version 2
    * fix gc after delete history records
    * Bump typeurl to 2.2.3
    * fix leaving unreleased references behind after SBOM generation
    * build(deps): bump softprops/action-gh-release from 2.0.9 to 2.1.0
    * dockerfile: fix duplicate keys for same arg in history line
    * detect: sever semconv relationship to otel sdk
    * dockerfile: add delve to binaries-for-test

++++ cava:

  - Update to 0.10.3:
    * added horizontal split view #575
    * Fix crash when using pulseaudio #569
    * Synchronized Sync (Mode 2026) #576
    * add android source code #552

++++ clpeak:

  - Update to version 1.1.3
    * Add a few more parameters.
    * Add 24-bit integer compute to RX 5500XT results.
    * [cmake] use GNUInstallDirs to get canonical paths.
    * Add log files for additional devices.
    * Fix compute integer unit reported in xml files.
    * add profiling for char & short integer types.
    * Adding results for Tesla P40.
    * Adding results for MTT S80.
    * Use stricter host buffer alignment (64B) required by modern
    CPUs.

++++ libdb-4_8:

  - Add libdb-4_8-sequence.patch: Fix code to detect/enable 64-bit
    integral type support for sequences. The m4 macros were not
    complying with GCC 14's strictness.
  - Rebase db-4.8.30.patch and libdb-fix-atomic.patch to also apply
    using -p1 and use the autosetup macro.

++++ discover6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release
    * Hide irrelevant stuff for Flatpak runtimes (kde#496330,kde#496329)
    * 🍒 LabelBackground: improve text readability (kde#492656)
    * update: disable quitting on eventloop locker (kde#471548)
    * update version for new release

++++ drkonqi6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ eza:

  - Update to 0.20.9:
    Bug Fixes:
    * Remove newline after doc comment of regen recipe
    Refactor:
    * List all recipes by default
    * Group related recipes
  - Update to 0.20.8:
    Bug Fixes:
    * Cross-compiling by updating to libz-sys to 1.1.20
  - Update to 0.20.7:
    Bug Fixes:
    * Palette v0.7.6 -> v0.7.5
  - Update to 0.20.6:
    * Fix typo --get-repos-no-status to --git-repos-no-status

++++ featherpad:

  - Update to 1.5.2:
    * The printing thread is fixed (previously, it caused a warning message about QBasicTimer).
    * An old issue is fixed in replacement highlighting of multiple tabs.
    * Fixed the localization of date and time with Qt6.
    * Demand attention under Wayland when a window needs activation (although
    some Wayland compositors may ignore it).
    * Small fixes and enhancements.

++++ flatpak-kcm6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * Update selected app when activating the running KCM

++++ fwts:

  - Update to version 24.11.00:
    * lib: fwts_version.h - update to V24.11.00
    * debian: update changelog
    * hdaaudio: fix the the build errors under plucky amd64
    * auto-packager: mkpackage.sh: add plucky
    * dmicheck: add more types for version length test.
    * dmicheck: update for supporting DMI version to 3.8.0
    * acpi: iort: memory access flag update.
    * src/acpi: Fix a few spelling mistakes
    * acpi/wmi: Warn if WMI GUIDs from the Windows driver samples are found
    * lib: fwts_acpi_object_eval: Do not return FWTS_OK if method lookup fails
    * script: fix bash-completion-with-hashbang lintian warning
    * dmicheck: update for supporting DMI version to 3.7.1
    * tpmevlog: Ensure the event log matches the actual TPM PCRs

++++ libjxl-gtk:

  - Update to release 0.11.1
    * Huffman lookup table size fix [CVE-2024-11403]
    * Check height limit in modular trees [CVE-2024-11498]

++++ glasskube-cli:

  - Update to version 0.26.0:
    * no CLI-related changes in the changelog

++++ go-sendxmpp:

  - Update to 0.12.1:
    Changed:
    * Print error instead of quitting if a message of type error is received.
    * Allow upload of multiple files.
    Added:
    * Add flag --suppress-root-warning to suppress the warning when go-sendxmpp is used by the root user.
  - Update to 0.12.0:
    Added:
    * Add possibility to look up direct TLS connection endpoint via hostmeta2 (requires xmppsrv >= 0.3.3).
    * Add flag --allow-plain to allow PLAIN authentication (requires go-xmpp >= 0.2.5).
    Changed:
    * Disable PLAIN authentication per default.
    * Disable PLAIN authentication after first use of a SCRAM auth mechanism (overrides --allow-plain) (requires
    go-xmpp >= 0.2.5).

++++ grandorgue:

  - Update to version 3.15.3.
    Changelog: https://github.com/GrandOrgue/grandorgue/releases/tag/3.15.3-1
  - Fixed crash of reference pipes with the "--justgui" option https://github.com/GrandOrgue/grandorgue/issues/2019
  - Fixed crash on attempt of loading an organ if it's files did not exist https://github.com/GrandOrgue/grandorgue/issues/1990
  - Fixed the sequencer "Save file" button not lightening after inserting or deleting a combination https://github.com/GrandOrgue/grandorgue/issues/2024
  - Fixed appearence, sizing and the scrollbar issues with the Stops window https://github.com/GrandOrgue/grandorgue/issues/1961

++++ grml-zsh-config:

  - Update to 0.19.8:
    * Stop shipping /etc/zsh/zlogout to avoid clearing terminal screen
    * debian/preinst: drop deprecated dpkg-divert
    * debian: update Vcs-Git and Vcs-Browser

++++ grype-db:

  - Update to version 0.27.2:
    * ignore NVD data age + tests (#441)
    * ignore NVD data age (#440)
    * remove v1 & v2 processors (#438)

++++ pipewire:

  - Update to version 1.2.7:
    + Highlights
  - Backport support for lazy scheduling.
  - Handle the case where processing would stop when an ALSA
    driver is destroyed.
  - Add support for v4l2loopback in the v4l2 plugin.
  - Small bug fixes and improvements.
    + PipeWire
  - Invalidate the proxy ID when removed.
  - Backport support for lazy scheduling.
  - Fix profiler stats for async nodes.
  - Fix EARLY_PROCESS again in pw-stream. (#3480)
    + Modules
  - Fix a crasher issue when nodes are created in the wrong
    order in module-filter-chain.
  - Fix unmap bug in lv2 uri tables.
  - Add ratelimit to jack-tunnel xruns.
  - Remove hardcoded limit in filter-chain sofa plugin.
  - Handle the MTU size correctly in module-rtp and handle large
    MTUs. (#4396)
  - Fix JSON float parsing errors in equalizer module. (#4418)
    + SPA
  - Fix crash in audiotestsrc when using spa-inspect (#4365).
  - Improve JSON float infinity checks.
  - Improve resampler performace a little.
  - Make audioconvert only output when there is something to
    output.
  - Fix regression in v4l2 port flags which would disable support
    for EXPBUF.
  - Handle the case where an ALSA driver is destroyed and the
    follower becomes a driver. Processing would stop. (#4401)
  - Add support for v4l2loopback in the v4l2 plugin.
    + Pulse-server
  - Give a better error message when running out of fds.
  - Ensure positive latency reporting.
    + GStreamer
  - Fix memory leak in deviceprovider.
  - Fix locking when emitting an error.
    + Tools
  - Fix pw-dot link labels.

++++ breeze6-gtk:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * checkbox: Apply indeterminate after checked
    * update version for new release

++++ haproxy:

  - Update to version 3.1.0+git0.f2b97918e:
    https://www.haproxy.com/blog/announcing-haproxy-3-1

++++ imagej:

  -  update to 1.53u:
    * the Image>Transform>Bin command now supports z-binning of 4D
    hyperstacks.
    * the Analyze>Plot Profile command works with rotated rectangles.
    * The Edit>Selection>Line to Area command converts straight line
    selections to rotated rectangle selections.
    * improved recording of the Edit>Selection>Properties command and
    added a comment to the Edit>Options>Line Width dialog to make
    it clearer what the command does.
    * the Selection Brush Tool is no longer disabled when activating a
    selection in an overlay by double clicking on it.
    * made GenericDialog.resetCounters() public so it can be called by
    plugins using GenericDialog.addButton() (example).
    * added the recordable Image.removeScale() macro function and the
    ImagePlus.removeScale() method.
    * Added the ImageProcessor.setColor(String) method.
    * fixed a bug that caused toolbar contextual menus to ignore the
    Edit>Options>Appearance "GUI scale" setting.
    * fixed a bug that caused the "Results" menu in a table to
    disappear if the table was renamed.
    * fixed a bug that caused the File>Import>TIFF Virtual Stack
    command to not correctly calibrate TIFF stacks that were not
    created by ImageJ.
    * fixed a bug that caused the Image>Overlay>From ROI Manager menu
    command to not transfer the ROI positions.
    * fixed a bug that caused the Edit>Selection>Straighten command
    to change the global line selection width.
    * fixed a bug that caused ROIs with x or y coordinates greater than
    60,535 and less than 65,535 to be saved incorrectly.
    * fixed a bug that caused ImageJ to create TIFF files with invalid
    RowsPerStrip tags when the image height was greater than 65,535.
    * fixed several bugs with Image>Stacks>Plot Z-axis Profile "Live"
    plots.
    * fixed a bug that caused the "CP" window to not be updated when
    the Color Picker tool was used to pick new colors from the active
    image.
    * fixed a bug that caused the Opener.openAndAddToRecent() method to
    return 'false' when the file was opened successfully.
    * worked around a Java bug on Windows that caused the main menu bar
    sub-menus to not scale to larger than 17 points. Unfortunately,
    the main menu bar font size on Windows is still limited to 17
    points regardless of the "GUI scale" setting.
    * fixed a bug that caused the Roi.Paste macro function to not work
    as expected.
    * fixed a scale bar width rounding error.
    * fixed a bug that caused the Edit>Selection>Rotate command to
    convert Rotated Rectangle selections to Polygon selections.
    * fixed bugs that caused the Scale and Rotate commands in the ROI
    Manager to only work correctly when processing all the ROIs.
    * fixed a 1.53t regression that caused the Image>Stacks>Z Project
    command to ignore the last slice when doing "Average" projection
    of 32-bit stacks.
    * fixed a 1.53o regression that caused unexpected error messages
    when double clicking on a line in a table or in the ROI Manager
    when a custom action was not defined (example).

++++ imgui:

  - update to 1.91.0:
    Breaking Changes:
    * IO, IME: renamed platform IME hook and added explicit context for
    consistency and future-proofness.
    old: io.SetPlatformImeDataFn(ImGuiViewport* viewport,
    ImGuiPlatformImeData* data);
    new: io.PlatformSetImeDataFn(ImGuiContext* ctx, ImGuiViewport*
    viewport, ImGuiPlatformImeData* data);
    It is expected that for a vast majority of users this is
    automatically set by core library and/or platform backend so
    it won't have any effect.
    * Obsoleted GetContentRegionMax(), GetWindowContentRegionMin() and
    GetWindowContentRegionMax(). (information thread: #7838)
    You should never need those functions! You can do everything in
    less a confusing manner by only using GetCursorScreenPos() and
    GetContentRegionAvail(). Also always consider that if you are
    using GetWindowPos() and GetCursorPos() you may also be making
    things unnecessarily complicated.
    I repeat: You can do everything with GetCursorScreenPos()
    and GetContentRegionAvail()!
    GetWindowContentRegionMax().x - GetCursorPos().x -->
    GetContentRegionAvail().x
    GetWindowContentRegionMax().x + GetWindowPos().x -->
    GetCursorScreenPos().x + GetContentRegionAvail().x
    // when called from left edge of window
    GetContentRegionMax() --> GetContentRegionAvail() + GetCursorScreenPos()
  - GetWindowPos() // right edge in local coordinates
    GetWindowContentRegionMax().x - GetWindowContentRegionMin().x -->
    GetContentRegionAvail() // when called from left edge of window
    * Item flag changes:
    Obsoleted PushButtonRepeat()/PopButtonRepeat() in favor of using
    new PushItemFlag()/PopItemFlag() with ImGuiItemFlags_ButtonRepeat.
    Kept inline redirecting functions (will obsolete).
    Obsoleted PushTabStop()/PopTabStop() in favor of using new
    PushItemFlag()/PopItemFlag() with ImGuiItemFlags_NoTabStop.
    Kept inline redirecting functions (will obsolete).
    Renamed ImGuiSelectableFlags_DontClosePopups to
    ImGuiSelectableFlags_NoAutoClosePopups for consistency. Kept inline
    redirecting functions (will obsolete). + Internals:
    changed/inverted ImGuiItemFlags_SelectableDontClosePopup (default==false) to
    ImGuiItemFlags_AutoClosePopups (default==true), same logic,
    only inverted behavior. (#1379, #1468, #2200, #4936, #5216, #7302, #7573)
    * Commented out obsolete ImGuiModFlags (renamed to ImGuiKeyChord in 1.89).
    (#4921, #456)
    * Commented out obsolete ImGuiModFlags_XXX values
    (renamed to ImGuiMod_XXX in 1.89). (#4921, #456)
    ImGuiModFlags_Ctrl -> ImGuiMod_Ctrl, ImGuiModFlags_Shift ->
    ImGuiMod_Shift etc.
    * Backends: GLFW+Emscripten: Renamed
    ImGui_ImplGlfw_InstallEmscriptenCanvasResizeCallback()
    to ImGui_ImplGlfw_InstallEmscriptenCallbacks(), with an
    additional GLFWWindow* parameter. (#7647) [@ypujante]
    Other Changes
    * Added TextLink(), TextLinkOpenURL() hyperlink widgets. (#7660)
    * IO: added io.PlatformOpenInShellFn() handler to open a
    link/folder/file in OS shell. (#7660)
    Added IMGUI_DISABLE_DEFAULT_SHELL_FUNCTIONS to disable
    default Windows/Linux/Mac implementation.
    * IO: added io.ConfigNavSwapGamepadButtons to swap Activate/Cancel
    (A<>B) buttons, to match the typical "Nintendo/Japanese consoles"
    button layout when using Gamepad navigation. (#787, #5723)
    * Added PushItemFlag()/PopItemFlags(), ImGuiItemFlags to modify shared
    item flags:
    Added ImGuiItemFlags_NoTabStop to disable tabbing through items.
    Added ImGuiItemFlags_NoNav to disable any navigation and focus
    of items. (#787)
    Added ImGuiItemFlags_NoNavDefaultFocus to disable item being
    default focus. (#787)
    Added ImGuiItemFlags_ButtonRepeat to enable repeat on any
    button-like behavior.
    Added ImGuiItemFlags_AutoClosePopups to disable menu
    items/selection auto closing parent popups.
    Disabling this was previously possible for Selectable() via a direct
    flag but not for MenuItem(). (#1379, #1468, #2200, #4936, #5216, #7302, #7573)
    This was mostly all previously in imgui_internal.h.
    * Multi-Select: added multi-select API and demos. (#1861, #6518)
    This system implements standard multi-selection idioms (CTRL+mouse
    click, CTRL+keyboard moves, SHIFT+mouse click, SHIFT+keyboard moves,
    etc.) with support for clipper (not submitting non-visible items),
    box-selection with scrolling, and many other details.
    In the spirit of Dear ImGui design, your code owns both items and actual
    selection data. This is designed to allow all kinds of selection storage
    you may use in your application (e.g. set/map/hash, intrusive selection,
    interval trees, up to you).
    The supported widgets are Selectable(), Checkbox(). TreeNode() is also
    technically supported but... using this correctly is more complicated.
    You need some sort of linear/random access to your tree, which is suited
    to advanced trees setups already implementing filters and clipper.
    We will work toward simplifying our existing demo for trees.
    A helper ImGuiSelectionBasicStorage is provided to facilitate getting
    started in a typical app (likely to suit a majority of users).
    Documentation:
    Wiki page https://github.com/ocornut/imgui/wiki/Multi-Select for
    API overview.
    Demo code + headers are well commented.
    Added BeginMultiSelect(), EndMultiSelect(), SetNextItemSelectionUserData().
    Added IsItemToggledSelection() for use if you need latest selection
    update during current iteration.
    Added ImGuiMultiSelectIO and ImGuiSelectionRequest structures:
    BeginMultiSelect() and EndMultiSelect() return a ImGuiMultiSelectIO
    structure, which is mostly an array of ImGuiSelectionRequest actions
    (clear, select all, set range, etc.)
    Other fields are helpful when using a clipper, or wanting to handle
    deletion nicely.
    Added ImGuiSelectionBasicStorage helper to store and maintain a
    selection (optional):
    This is similar to if you used e.g. a std::set to store a selection,
    with all the right glue to honor ImGuiMultiSelectIO requests.
    Most applications can use that.
    Added ImGuiSelectionExternalStorage helper to maintain an externally
    stored selection (optional):
    Helpful to easily bind multi-selection to e.g. an array of checkboxes.
    Added ImGuiMultiSelectFlags options:
    ImGuiMultiSelectFlags_SingleSelect: Disable selecting more than one item.
    This is available to allow single-selection code to share same code/logic
    if desired. It essential...

++++ istioctl:

  - update to 1.24.0:
    https://istio.io/latest/news/releases/1.24.x/announcing-1.24.1/
    CLI-related changes:
    * Fixed an issue where istioctl install was not working as
    expected on Windows.
    * Fixed an issue where istioctl install deadlocks if multiple
    ingress gateways are specified in the IstioOperator file.
    (Issue #53875)

++++ kactivitymanagerd6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ kde-cli-tools6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ kde-gtk-config6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ kdecoration6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ kdeplasma6-addons:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ kgamma6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ kglobalacceld6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ kinfocenter6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ kmenuedit6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ kpipewire6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ krdp6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * Hide desktop file for krdpserver
    * update version for new release

++++ kscreen6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ kscreenlocker6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ ksshaskpass6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ libksysguard6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * faces: Ensure the temporary dir for a preset remains until installed (kde#485164)
    * faces/piechart: Use GraphicalEffects.Glow for rendering outline of compact text (kde#494495)
    * update version for new release

++++ ksystemstats6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release
    * plugins/cpu: Use simpler names when CPU core info is missing
    * plugins/cpu: Test for the proper CPU property, skip nonexistent CPUs (kde#495524)
    * update version for new release

++++ kubectl-node-shell:

  - Update to version 1.11.0:
    * bump version v1.11.0
    * Replicate nsenter options to pod spec (#69)
    * Adding ability to mount CSI volumes in privildeged shell (#64)
    * add KUBECTL_NODE_SHELL_IMAGE_PULL_SECRET_NAME to enable
    imagePullSecrets (#62)
    * Add flags for netns attach (#68)

++++ kubesec:

  - Update to version 2.14.2:
    * docs: add release note for v2.14.2
    * chore(deps): bump the gomod group across 1 directory with 6
    updates
    * chore(deps): bump the gha group across 1 directory with 2
    updates
    * Update go to 1.22.7 for fixing High vulnerability
    * Update go to 1.22.7 for fixing High vulnerability

++++ kwayland-integration6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * Initialize xdg activation
    * Fix obtaining wl_surface from WId (kde#496365)
    * update version for new release

++++ kwayland6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ kwin6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release
    * Cancel interactive move resize only on Wayland
    * backends/drm: reject cursor updates already in beginFrame
    * compositor_wayland: don't commit cursor changes if the layer wasn't actually enabled (kde#495843)
    * backends/drm: don't set the dpms mode to AboutToTurnOff if the screen is already off
    * layers: add null check
    * outputconfigurationstore: fix choosing the default mode
    * plugins/screencast, screenshot: switch color transforms to relative colorimetric (kde#496185)
    * effects/overview: Properly map the windowHeap geometry
    * effects/overview: Don't make thumbnails fly off the screen (kde#495444)
    * core: Set object ownership for Output
    * backends/drm: re-allow HDR on NVidia with driver version 565.57.01+
    * backends/drm: re-allow HDR on Intel by default
    * Revert "scene: Ignore xwayland window shape" (kde#493934)
    * tiling: fix some asserts from scripts
    * utils: Use QList::removeLast() in DamageJournal::add()
    * Ensure active window isn't focused when screen is locked (kde#495325)
    * Cancel interactive move resize when outputs change
    * backends/drm: fix DrmGpu::needsModeset check with leased outputs (kde#495400)
    * effect/offscreenquickview: ensure the view that accepts touch down also gets touch up
    * workspace: fix the dpms input event filter sometimes being wrongly deleted
    * Close layer shell window if its preferred output has been removed
    * activation: don't activate windows that don't accept keyboard input (kde#495537)
    * tabbox: Do not add windows that have modal children
    * core/colorspace: fix the max luminance of linear (kde#494930)
    * update version for new release

++++ kwrited6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ layer-shell-qt6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ libkscreen6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * doctor: clarify the meaning of max. brightness zero (kde#495557)
    * Update Plasma Wayland Protocols to 1.14
    * update version for new release

++++ plasma5support6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ libplasma6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release
    * FlatButtonBackground: Fix background disappearing when pressing checkable ToolButton Pressed seems to go false, causing the animation to run to hide the background, and then checked becomes true immediately after, restoring the background. Using a NumberAnimation instead will interrupt itself and make no visible change.
    * update version for new release

++++ plasma6-activities:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ plasma6-activities-stats:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ mozilla-nss:

  - Remove upstreamed bmo-1400603.patch
  - Added nss-bmo1930797.patch to fix failing tests in testsuite

++++ libjxl:

  - Update to release 0.11.1
    * Huffman lookup table size fix [CVE-2024-11403]
    * Check height limit in modular trees [CVE-2024-11498]

++++ xmlrpc-c:

  - update to 1.59.03:
    * Build of client libraries: fix failure to find Curl stuff.
    * Build: Fix link failure in several tools because they fail to
    link the Curl library. Don't know how long this was broken.
    * Build: Eliminate compiler warnings with GCC 6.3
    * Build: fix bug: won't compile with --enable-libxml2,
    introduced with Release 1.44 (December 2015).
    * Build: update config.guess and config.sub so Configure can
    recognize newer environments.
    * Abyss XML-RPC server 'runConn' method: throw exception
    instead of exiting program when unable to execute an HTTP
    transaction.
    * Build: fix bug: ignores LDFLAGS_FOR_BUILD, LDFLAGS_PERSONAL,
    and LDFLAGS_PTHREAD when building the build tool Gennmtab.
  - add skip-expat.patch: add patch to skip using expat

++++ linkerd-cli-edge:

  - Update to version 24.11.7:
    no CLI-related changes in changelog
  - Update to version 24.11.6:
    no CLI-related changes in changelog
  - Update to version 24.11.5:
    * feat(cli): add check for link version (#13376)

++++ matrix-synapse:

  - Update to 1.120.0
    This release enables the enforcement of authenticated media by
    default, with exemptions for media that is already present in the
    homeserver's media store.
    Most homeservers operating in the public federation will not be
    impacted by this change, given that the large homeserver
    matrix.org enabled this in September 2024 and therefore most
    clients and servers will already have updated as a result.
    Some server administrators may still wish to disable this
    enforcement for the time being, in the interest of compatibility
    with older clients and older federated homeservers.
    See the upgrade notes for more information.
    https://element-hq.github.io/synapse/v1.120/upgrade.html#authenticated-media-is-now-enforced-by-default
  - Bugfixes
  - Fix a bug introduced in Synapse v1.120rc1 which would cause
    the newly-introduced `delete_old_otks` job to fail in
    worker-mode deployments. (#17960)
  - Features
  - Enforce authenticated media by default. Administrators can
    revert this by configuring enable_authenticated_media to
    false. In a future release of Synapse, this option will be
    removed and become always-on. (#17889)
  - Add a one-off task to delete old One-Time Keys, to guard
    against us having old OTKs in the database that the client
    has long forgotten about. (#17934)
  - Improved Documentation
  - Clarify the semantics of the enable_authenticated_media
    configuration option. (#17913)
  - Add documentation about backing up Synapse. (#17931)
  - Deprecations and Removals
  - Remove support for MSC3886: Simple client rendezvous
    capability, which has been superseded by MSC4108 and
    therefore closed. (#17638)
  - Internal Changes
  - Addressed some typos in docs and returned error message for
    unknown MXC ID. (#17865)
  - Unpin the upload release GHA action. (#17923)
  - Bump macos version used to build wheels during release, as
    current version used is end-of-life. (#17924)
  - Move server event filtering logic to rust. (#17928)
  - Support new package name of PyPI package python-multipart
    0.0.13 so that distro packagers do not need to work around
    name conflict with PyPI package multipart. (#17932)
  - Speed up slow initial sliding syncs on large servers.
    (#17946)
  - Updates to locked dependencies
  - Bump anyhow from 1.0.92 to 1.0.93. (#17920)
  - Bump bleach from 6.1.0 to 6.2.0. (#17918)
  - Bump immutabledict from 4.2.0 to 4.2.1. (#17941)
  - Bump packaging from 24.1 to 24.2. (#17940)
  - Bump phonenumbers from 8.13.49 to 8.13.50. (#17942)
  - Bump pygithub from 2.4.0 to 2.5.0. (#17917)
  - Bump ruff from 0.7.2 to 0.7.3. (#17919)
  - Bump serde from 1.0.214 to 1.0.215. (#17938)

++++ maven-shade-plugin:

  - Upgrade to upstream version 3.6.0
    * Bug
    + MSHADE-428: Typo causes mysterious NPE in build
    + MSHADE-443: Fix problems with shadeSourcesContent
    + MSHADE-454: Shade Plugin does not work with JDK 20
    + MSHADE-420: Reproducible Builds timestamp issue in some cases
    + MSHADE-462: 3.5.1 not compatible with 3.4.1: The version
    cannot be empty
    + MSHADE-467: Dependency-reduced POM with missing exclusions in
    concurrent build
    + MSHADE-469: Cannot generate a jar since switching from 3.4.1
    to 3.5.x
    + MSHADE-471: still timestamp issues with timezones (DST)
    * New Feature
    + MSHADE-400: Self-minimisation with custom entry points
    + MSHADE-478: Add ability to inject extra artifacts into shaded
    output
    * Improvement
    + MSHADE-459: Prepare to build and pass tests with Java 21
    + MSHADE-461: multi-release jars with java 22 classes cause
    class version issues
    + MSHADE-468: add plugin system requirements history section
    * Task
    + MSHADE-438: Update to Maven 3.2.5
    + MSHADE-450: Upgrade to parent POM 39, reformat
    + MSHADE-458: Refresh download page
    + MSHADE-472: upgrade parent POM
    + MSHADE-473: Drop legacy and superfluous deps:
    maven-dependency-tree and commons-collections4
    * Dependency upgrade
    + MSHADE-446: Update dependencies
    + MSHADE-447: Move off forked Guice
    + MSHADE-448: Upgrade ASM to 9.5
    + MSHADE-449: Upgrade plexus-utils to 3.5.1
    + MSHADE-457: Upgrade Parent to 40
    + MSHADE-463: Bump asmVersion from 9.5 to 9.6
    + MSHADE-464: Maven 3.6.3 as minimum requirements
    + MSHADE-470: Upgrade ASM to 9.7 (Java 23)
    + MSHADE-474: Align dependencies with Maven 3 (as this is Maven3 plugin)
    + MSHADE-475: Upgrade commons-io to 2.16.1
    + MSHADE-476: Upgrade commons-compress to 1.26.2
    + MSHADE-477: (test) Upgrade test dependencies

++++ melange:

  - Update to version 0.15.14:
    * fix(pipeline): validate expected commit before passing to
    git-checkout pipeline (#1667)
    * Add git version to Summarize output
    * RELEASE.md update, add statement that tags and releases will
    update

++++ mesheryctl:

  - update to 0.7.161:
    * no CLI-related changes in this release
  - update to 0.7.160:
    * no CLI-related changes in this release
  - update to 0.7.159:
    * no CLI-related changes in this release
  - update to 0.7.158:
    * no CLI-related changes in this release

++++ milou6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ netty-tcnative:

  - Upgrade to version 2.0.68 Final
    * No formal changelog present
  - Build also the dynamic openssl provider and alias it to the
    static openssl, libressl and boringssl ones.

++++ nodejs-electron:

  - Fix ffmpeg refusing to play opus audio files (disable-FFmpegAllowLists.patch)

++++ notejot:

  - fix build by adding 0001-Simplify-an-overcomplicated-Boolean-expression.patch
  - update spec file for Leap 16.0:
    * remove %suse_update_desktop_file
    * remove recommending lang package
    * use autosetup

++++ ocean-sound-theme6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ oxygen6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ pam_kwallet6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ patterns-base:

  - fips: change description from 140-2 to 140-3
  - fips: require crypto-policies-scripts when openssh is used
    (bsc#1224802)
  - fips: drop -hmac packages as they have been merged into the main
    package (bsc#1185116)

++++ pcsc-eco5000:

  - Fix compilationo with gcc14 and fix some warnings
    * Added pcsc-eco5000-fix-compile-gcc14.patch
    * Added pcsc-eco5000-clean-warnings.patch

++++ plasma6-openSUSE:

  - Update to 6.2.4

++++ plasma6-browser-integration:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ plasma6-desktop:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release
    * Fill panel width/height in custom/fit content modes when flexible spacer is in panel (kde#495378)
    * update version for new release

++++ plasma6-disks:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ plasma6-firewall:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ plasma6-integration:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ plasma6-mobile:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Too many changes to list here

++++ plasma6-nano:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ plasma6-nm:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release
    * ConnectivityMonitor: Don't manually set m_notification to null
    * Create a random-default password for hotspots if one is not set
    * update version for new release

++++ plasma6-pa:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release
    * listitemmenu: guard activePort against null
    * kcm: Fix speaker test layout for Pro-Audio profile (kde#495752)
    * update version for new release

++++ plasma6-print-manager:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release
    * DevicesModel: Register QList of QStringList to DBus
    * update version for new release

++++ plasma6-sdk:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ plasma6-workspace:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release
    * BatteryIcon: Add headphone icon
    * plasmashell: begin earlier to watch for panel destruction (kde#487684)
    * plasmawindowed: Use shared contexts analogue to plasmashell
    * applets/notifications: Be explicit about "when" binding on notificationAction
    * devicenotifier: An optical disc can also be storage access (kde#469706)
    * ksmserver: Fix copying of auth data (kde#491130)
    * applets/systemtray: suppress useless tooltips (kde#494463)
    * X11/multiscreen: Always emit outputOrderChanged when a screen is disconnected
    * coloreditor: Hide titlebar color buttons if header is set (kde#433059)
    * devicenotifier: Fix ejecting busy optical media
    * panelview: Fix resized panel with NoBackground not receiving input in new space
    * wallpapers/image: Fix wallpaper item resize for screen dimension change
    * kcms/users: refactor cropping
    * update version for new release

++++ plasma6-systemmonitor:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release
    * EditablePage: Set loadOverlay margins explicitly, set loader invisible during loading (kde#494902)
    * BaseCellDelegate: Use correct colorSet when selected (kde#494261)
    * update version for new release

++++ plasma6-thunderbolt:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - No code changes since 6.2.3

++++ plasma6-vault:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ plasma6-welcome:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ plasma6-workspace-wallpapers:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ plymouth-theme-breeze6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ podman:

  - Update to version 5.3.1:
    * Bump to v5.3.1
    * Update release notes for v5.3.1
    * Update windows installer tests
    * Windows: don't install WSL/HyperV on update
    * Switch to non-installing WSL by default
    * docs: add 5.3 as Reference version
    * only read ssh_config for non machine connections
    * ssh_config: allow IdentityFile file with tilde
    * ssh_config: do not overwrite values from config file
    * connection: ignore errors when parsing ssh_config
    * spec: clamp rlimits in a userns
    * cirrus: set proper DEST_BRANCH for 5.3
    * libpod: addHosts() prevent nil deref
    * Bump bundled krunkit to 0.1.4
    * fix podman machine init --ignition-path
    * Bump to v5.3.1-dev

++++ polkit-kde-agent-6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ postgresql12-orafce:

  - Update to version 4.14.0+git0.f0ecbd3:
    * prepare for 4.14.0
    * prepare for 4.13.6
    * remove invalid alternative results of dbms_random test
    * fix dbms_random test for pg 12
    * fix error when orafce's triggers was executed on table with dropped columns
    * update year in info comment
    * fix white chars
    * Oracle does switch of low, high when low is higher than high arg of dbms_random.value. Do this in orafce too. Some cleaning in related regress tests. Attention: this change breaks alternative expected results.
    * regress test for new nvl function
    * fix Makefile and return type previously added nvl function
    * Add support to nvl(double precision, integer) and to_date(integer, text).

++++ postgresql13-orafce:

  - Update to version 4.14.0+git0.f0ecbd3:
    * prepare for 4.14.0
    * prepare for 4.13.6
    * remove invalid alternative results of dbms_random test
    * fix dbms_random test for pg 12
    * fix error when orafce's triggers was executed on table with dropped columns
    * update year in info comment
    * fix white chars
    * Oracle does switch of low, high when low is higher than high arg of dbms_random.value. Do this in orafce too. Some cleaning in related regress tests. Attention: this change breaks alternative expected results.
    * regress test for new nvl function
    * fix Makefile and return type previously added nvl function
    * Add support to nvl(double precision, integer) and to_date(integer, text).

++++ postgresql14-orafce:

  - Update to version 4.14.0+git0.f0ecbd3:
    * prepare for 4.14.0
    * prepare for 4.13.6
    * remove invalid alternative results of dbms_random test
    * fix dbms_random test for pg 12
    * fix error when orafce's triggers was executed on table with dropped columns
    * update year in info comment
    * fix white chars
    * Oracle does switch of low, high when low is higher than high arg of dbms_random.value. Do this in orafce too. Some cleaning in related regress tests. Attention: this change breaks alternative expected results.
    * regress test for new nvl function
    * fix Makefile and return type previously added nvl function
    * Add support to nvl(double precision, integer) and to_date(integer, text).

++++ postgresql15-orafce:

  - Update to version 4.14.0+git0.f0ecbd3:
    * prepare for 4.14.0
    * prepare for 4.13.6
    * remove invalid alternative results of dbms_random test
    * fix dbms_random test for pg 12
    * fix error when orafce's triggers was executed on table with dropped columns
    * update year in info comment
    * fix white chars
    * Oracle does switch of low, high when low is higher than high arg of dbms_random.value. Do this in orafce too. Some cleaning in related regress tests. Attention: this change breaks alternative expected results.
    * regress test for new nvl function
    * fix Makefile and return type previously added nvl function
    * Add support to nvl(double precision, integer) and to_date(integer, text).

++++ postgresql16-orafce:

  - Update to version 4.14.0+git0.f0ecbd3:
    * prepare for 4.14.0
    * prepare for 4.13.6
    * remove invalid alternative results of dbms_random test
    * fix dbms_random test for pg 12
    * fix error when orafce's triggers was executed on table with dropped columns
    * update year in info comment
    * fix white chars
    * Oracle does switch of low, high when low is higher than high arg of dbms_random.value. Do this in orafce too. Some cleaning in related regress tests. Attention: this change breaks alternative expected results.
    * regress test for new nvl function
    * fix Makefile and return type previously added nvl function
    * Add support to nvl(double precision, integer) and to_date(integer, text).

++++ postgresql17-orafce:

  - Update to version 4.14.0+git0.f0ecbd3:
    * prepare for 4.14.0
    * prepare for 4.13.6
    * remove invalid alternative results of dbms_random test
    * fix dbms_random test for pg 12
    * fix error when orafce's triggers was executed on table with dropped columns
    * update year in info comment
    * fix white chars
    * Oracle does switch of low, high when low is higher than high arg of dbms_random.value. Do this in orafce too. Some cleaning in related regress tests. Attention: this change breaks alternative expected results.
    * regress test for new nvl function
    * fix Makefile and return type previously added nvl function
    * Add support to nvl(double precision, integer) and to_date(integer, text).

++++ powerdevil6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release
    * Add dedicated headset and headphone icon for low battery notification
    * applets/brightness: toggle nightlight only, when enabled (kde#496457)
    * applets: allow to detect tlp without solid or upower (kde#495918)
    * applets/brightness: Make brightness of multiple applets stay in sync (kde#495661)
    * update version for new release

++++ prometheus-simpleclient-java:

  - Update to upstream version 0.16.0
    * Bugfixes:
    + Don't throw NPE if .help() wasn't called
    + Don't wrap a RuntimeException in another RuntimeException.
    + Make pushgateway module compile on Java 11
    + Make sure GZIPOutputStream is always closed for httpserver
    + Specify the charset of HTTPServer response for systems not
    using utf-8 by default
    + Use <packaging>bundle</packaging> everywhere so that
    client_java works with OSGI again.
    + use the correct name for the metric type gaugehistogram in
    OpenMetrics (previously this was wrongly named
    gauge_histogram)
    + Correct handling of HEAD requests.
    + Apply ServletConfig during Servlet initialization in
    simpleclient_servlet and simpleclient_servlet_jakarta
    + HTTPServer: Don't send a Content-Length header when
    Transfer-Encoding is chunked.
    + simpleclient_log4j set the log4j dependency scope as provided
    so that users don't accidentally pull the log4j version used
    in client_java.
    Note: This module is for monitoring log4j version 1,
    in simpleclient_log4j2 the dependency is already provided.
    + simpleclient_dropwizard set the Dropwizard dependency scope as
    provided so that users don't accidentally pull the Dropwizard
    version used in client_java.
    + Fix missing Dropwizard metrics in Vertx.
    + Fix incorrect buffer size in the Servlet exporter.
    + Fix sample name filter for the JMX metric
    jvm_memory_bytes_committed.
    * Enhancements:
    + Bump caffeine dependency to 2.7.0 to support AsyncCache.
    + Added health check api to simpleclient_httpserver.
    + Remove dependency on sun.misc.Unsafe, allowing building on
    JDK11
    + Wrap PrintWriter with BufferedWriter, making servlet
    exposition about 2x faster
    + Handle empty label values for the pushgateway
    + Add Bill of Materials
    + Count HTTP statuses returned for servlet filter
    + Introduce TestContainers integration test, for example for
    testing different Java versions. This means you need Docker
    installed to run ./mvnw verify.
    + HTTPServer: Set request/response timeouts.
    + HTTPServer: Make HTTPMetricHandler public so that it can be
    used in a custom HTTPServer.
    + New JVM memory metrics: jvm_memory_pool_collection_used_bytes,
    jvm_memory_pool_collection_committed_bytes,
    jvm_memory_pool_collection_max_bytes,
    jvm_memory_pool_collection_init_bytes,
    jvm_memory_objects_pending_finalization.
    + Version bumps (junit, jetty, maven plugins)
    + add support for Jakarta Servlet, implemented in the new
    simpleclient_servlet_jakarta module.
    + provide a way for filtering metrics by name / name prefix.
    This can be configured either in the HTTPServer, or in the
    Servlet exporter (both javax and Jakarta). For example, if
    some JMX metrics cause performance issues, this can be used
    for excluding these metrics.
    + for the Servlet filter (both javax and Jakarta): Add a
    parameter to strip the deployment path from the path label.
    + Add HTTP Authentication to the HTTPServer #682.
    + Allow passing a custom registry to the logback
    InstrumentedAppender.
    + Lots of more integration tests and tests with different Java
    versions.
    + Make HTTPMetricHandler public so that users can use them in
    their own HttpServers.
    + Make Base64 encoding in the HTTP authentication for the
    PushGateway work with all Java versions.
    + The HTTPServer can now be configured to use SSL.
    + Lots of dependency version bumps.
    + Environment variable PROMETHEUS_DISABLE_CREATED_SERIES=true
    for disabling _created metrics.
    + Support for OpenTelemetry trace sampling: Only traces that are
    sampled will be used as exemplars.
    + Handle thread IDs <= 0. Apparently Apache Zookeeper generates
    negative thread IDs, which causes issues in jmx_exporter.
    + Mark opentelemetry-api as optional to make it an optional
    dependency in OSGi.
    + Move servlet adapters to an internal package to avoid
    duplicating classes when building OSGi bundles.
    + Extend the API of the HTTPServer.Builder to allow custom
    ExecutorService instances.
    + Reduce the number of core threads in HTTPServer from 5 to 1.
    The HTTPServer will still start up to 5 threads on demand if
    there are parallel requests, but it will use only 1 thread as
    long as requests are sequential.
    + Optimize metric name sanitization: Replace the regular
    expression with a hard-coded optimized algorithm to improve
    performance.
    + Lots of dependency version bumps.
    * Changes:
    + Switch data model to OpenMetrics. Primarily this means that
    _total if present is stripped from the metric name of
    counters, and _total is now always a suffix on the sample
    value. This means that all Counter samples now have a _total
    suffix
    + The io.prometheus.client.Collector.Type enum's value UNTYPED
    renamed to UNKNOWN
    * Features:
    + Add Info and Enumeration metric types for direct
    instrumentation
    + Counter, Summary, and Histogram metrics now expose a _created
    sample with when their child was created
    + Add support for units
    + Add gauge histograms, info, stateset for custom collectors
    + Support negotiating and exposing OpenMetrics for all HTTP
    server exposition
    + Add ability to filter metrics in DropwizardExports
    + Exemplars: API for adding OpenMetrics Exemplars and
    out-of-the-box integration with OpenTelemetry tracing.
  - Added patch:
    * remove_opentelemetry_tracer.patch
    + remove dependency on opentelemetry

++++ pt2-clone:

  - Update to vaersion 1.71
    * MOD2WAV now exports to the current "modules" path, instead of
    the current open path (regardless of samples/modules mode) in
    Disk Op.

++++ python-audible:

  - Add remove-python-restriction.patch to enable build for python313

++++ python-audioread:

  - Add patch no-removed-formats.patch:
    * Only use the rawread backend for Python 3.12 and below.

++++ python-cma:

  - Update to 4.0.0:
    * majorly improved mixed-integer handling based on a more concise lower
    bound of variances and on so-called integer centering
    * moved options and parameters code into a new file
    * many small-ish fixes and improvements
    * fix compatibility to numpy 2.0 (thanks to Sait Cakmak)
    * improved interface to noise_handler argument which accepts True as value
    * improved interface to ScaleCoordinates now also with lower and upper
    value mapping to [0, 1], see issue #210
    * changed: 'ftarget' triggers with <= instead of <
    * assign surrogate attribute (for the record) when calling fmin_lq_surr
    * various (minor) bug fixes
    * various (small) improvements of the plots and their usability
    * display iterations, evaluations and population size and termination
    criteria in the plots
    * subtract any recorded x from the plotted x-values by x_opt=index
    * plots are now versus iteration number instead of evaluations by default
    * provide legacy bbobbenchmarks without downloading
    * new: CMADataLogger.zip allows sharing plotting data more easily by a
    zip file
    * new: tolxstagnation termination condition for when the incumbent
    seems stuck
    * new: collect restart terminations in cma.evalution_strategy.all_stoppings
    * new: stall_sigma_change_on_divergence_iterations option to stall sigma
    change when the median fitness is worsening
    * new: limit active C update for integer variables
    * new: provide a COCO single function
  - Remove upper bound on numpy.
  - Update URL.

++++ python-django-rq:

  - Update to 3.0
    * Added support for RQ 2.0. Thanks @selwin!
    * Many typing improvements. Thanks @SpecLad and @terencehonles!
    * Added management command to suspend and resume workers. Thanks @jackkinsella!
    * Better support for Redis Sentinel. Thanks @alaouimehdi1995!

++++ python-line_profiler:

  - Update to 4.1.3:
    * FIX: duration summary now respects the stripzeros argument.
    * FIX: minor test fixes.
    * ENH: building osx wheels for x86 and arm64.
    * ENH: documentation improvements.
    * Invoke subshell with the current python interpreter
    * Respect stripzeros in summary report
    * Normalize path before comparison
  - Switch to pyproject macros.
  - Drop patch use-sys-executable-python.patch, included upstream.

++++ python-podman:

  - update to 5.3.0:
    * [skip-ci] Packit: downstream_package_name for each package key
    by @lsm5 in #416
    * Make "images.push" method support "format" parameter by
    @milanbalazs in #415
    * Add test of container create with DNS option by @Honny1 in #417
    * Fix podman search flake + update CI VM images by @cevich in
    [#418]
    * Update dependency containers/automation_images to v20240529 by
    @renovate in #389
    * Remove wait condition in run() by @inknos in #428
    * Update dependency containers/automation_images to v20240821 by
    @renovate in #423
    * domain/networks_manager.py: use specified driver in IPAMConfig
    by @jtluka in #429
    * Fix/Disable Pylint R0917 by @inknos in #432
    * Extend the parameters of 'images.load' and 'login' methods by
    @milanbalazs in #434
    * Don't use root as default user for exec_run by @aparcar in #431
    * Renovate: Update default assignment by @cevich in #437
    * Packit: enable c9s downstream update by @lsm5 in #440
    * Audit and Update OWNERS file by @baude in #441
    * Update dependency ubuntu to v24 by @renovate in #436
    * Remove the container in case of detach mode by @milanbalazs in
    [#435]
    * Update CI VM images by @inknos in #430
    * Fix cyclic-import by @Honny1 in #450
    * Packit: constrain koji and bodhi jobs to fedora package by
    @lsm5 in #442
    * Fix default stderr value of container.logs() to match
    documentation. by @MattBelle in #452
    * [skip-ci] RPM: remove conditionals from changelog by @lsm5 in
    [#453]
    * Added stream support to Container.exec_run(). by @MattBelle in
    [#454]
    * Accept integer ports in containers_create.create by @krrhodes
    in #447
    * Container.labels now returns an empty dict instead of None. by
    @MattBelle in #462
    * Fix typos by @kianmeng in #464
    * fix[docs]: Unindented example code on the index page by
    @Mr-Sunglasses in #467
    * Added support for mounting directories through the volume
    keyword. by @MattBelle in #460
    * docs: Add Installation and docs in README.md by @Mr-Sunglasses
    in #471
    * fix: name filter in images.list() by @Mr-Sunglasses in #468
    * Bump release to 5.3.0 and drop python<3.8 by @inknos in #469

++++ python-sparse:

  - Re-enable python 3.13 since numba has been patched to support it

++++ qemu:

  - Fix bsc#1233530:
    * docs: use consistent markup for footnotes (bsc#1233530)
    * docs: avoid footnotes consisting of just URLs (bsc#1233530)
    * docs: fix invalid footnote syntax (bsc#1233692)
  - Fix bsc#1233530:
    * scsi: megasas: Internal cdbs have 16-byte length (bsc#1233530)
  - Fix bsc#1221812, bsc#1232283, bsc#1230978:
    * [openSUSE] block: Move qcow2 invalidation query-block op_blocker
  - Update to version 9.1.2:
    Full changelog here:
    https://lore.kernel.org/qemu-devel/21ba2773-11a6-45ad-bf98-9b5c2cdccb9b@tls.msk.ru/
    Some of the most notable features:
    * usb-hub: Fix handling port power control messages
    * hw/audio/hda: fix memory leak on audio setup
    * Revert "hw/audio/hda: fix memory leak on audio setup" (bsc#1232728)
    * hw/misc/mos6522: Fix bad class definition of the MOS6522 device
    * vfio/container: Fix container object destruction
    * target/i386: fix hang when using slow path for ptw_setl
    * tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
    * linux-user/arm: Select vdso for be8 and be32 modes
    * linux-user/arm: Reduce vdso alignment to 4k
    * linux-user: Tolerate CONFIG_LSM_MMAP_MIN_ADDR
    * accel/tcg: Fix user-only probe_access_internal plugin check
    * target/arm: Drop user-only special case in sve_stN_r
    * linux-user: Fix setreuid and setregid to use direct syscalls
    * hw/i386/pc: Don't try to init PCI NICs if there is no PCI bus
    * target/i386: Fix legacy page table walk
    * 9pfs: fix crash on 'Treaddir' request
    * hw/nvme: fix handling of over-committed queues
    * migration: Ensure vmstate_save() sets errp
    * target/arm: Fix SVE SDOT/UDOT/USDOT (4-way, indexed)
    * target/arm: Add new MMU indexes for AArch32 Secure PL1&0
    * Revert "target/arm: Fix usage of MMU indexes when EL3 is AArch32"
    * acpi/disassemle-aml.sh: fix up after dir reorg
    * hw/acpi: Fix ordering of BDF in Generic Initiator PCI Device Handle.
    * qemu-ga: Fix a SIGSEGV in ga_run_command() helper
    * hw/sd/sdcard: Fix calculation of size when using eMMC boot partitions
    * tests/tcg: Replace -mpower8-vector with -mcpu=power8
    * hw/ssi/pnv_spi: Fixes Coverity CID 1558831
    * hw/ssi/pnv_spi: Return early in transfer()

++++ qemu-linux-user:

  - Fix bsc#1233530:
    * docs: use consistent markup for footnotes (bsc#1233530)
    * docs: avoid footnotes consisting of just URLs (bsc#1233530)
    * docs: fix invalid footnote syntax (bsc#1233692)
  - Fix bsc#1233530:
    * scsi: megasas: Internal cdbs have 16-byte length (bsc#1233530)
  - Fix bsc#1221812, bsc#1232283, bsc#1230978:
    * [openSUSE] block: Move qcow2 invalidation query-block op_blocker
  - Update to version 9.1.2:
    Full changelog here:
    https://lore.kernel.org/qemu-devel/21ba2773-11a6-45ad-bf98-9b5c2cdccb9b@tls.msk.ru/
    Some of the most notable features:
    * usb-hub: Fix handling port power control messages
    * hw/audio/hda: fix memory leak on audio setup
    * Revert "hw/audio/hda: fix memory leak on audio setup" (bsc#1232728)
    * hw/misc/mos6522: Fix bad class definition of the MOS6522 device
    * vfio/container: Fix container object destruction
    * target/i386: fix hang when using slow path for ptw_setl
    * tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
    * linux-user/arm: Select vdso for be8 and be32 modes
    * linux-user/arm: Reduce vdso alignment to 4k
    * linux-user: Tolerate CONFIG_LSM_MMAP_MIN_ADDR
    * accel/tcg: Fix user-only probe_access_internal plugin check
    * target/arm: Drop user-only special case in sve_stN_r
    * linux-user: Fix setreuid and setregid to use direct syscalls
    * hw/i386/pc: Don't try to init PCI NICs if there is no PCI bus
    * target/i386: Fix legacy page table walk
    * 9pfs: fix crash on 'Treaddir' request
    * hw/nvme: fix handling of over-committed queues
    * migration: Ensure vmstate_save() sets errp
    * target/arm: Fix SVE SDOT/UDOT/USDOT (4-way, indexed)
    * target/arm: Add new MMU indexes for AArch32 Secure PL1&0
    * Revert "target/arm: Fix usage of MMU indexes when EL3 is AArch32"
    * acpi/disassemle-aml.sh: fix up after dir reorg
    * hw/acpi: Fix ordering of BDF in Generic Initiator PCI Device Handle.
    * qemu-ga: Fix a SIGSEGV in ga_run_command() helper
    * hw/sd/sdcard: Fix calculation of size when using eMMC boot partitions
    * tests/tcg: Replace -mpower8-vector with -mcpu=power8
    * hw/ssi/pnv_spi: Fixes Coverity CID 1558831
    * hw/ssi/pnv_spi: Return early in transfer()

++++ qqc2-breeze-style6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * Fix displaying combo box content from abstract item models
    * update version for new release

++++ ruqola:

  - Update to 2.3.2
    * Many fixes for RocketChat 7.0
    * Fix administrator refresh user list
    * Fix menu when we select video conference message
    * Fix RocketChat 7.0 server support
    * Fix create video message
    * Fix update cache when we change video/attachment description
    * Fix export message job
    * Fix show userOffline when we have a group
    * Fix enable/disable ok button when search room in team dialog
    * Fix crash when we remove room in team dialog
    * Fix update channel selection when we reconnect server

++++ sddm-kcm6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ sqlite-jdbc:

  - Update to v3.47.1.0
    * Features
    ~ sqlite
    + upgrade to sqlite 3.47.1 (67d28cb)
    * Fixes
    ~ possible StringIndexOutOfBoundsException in ExtendedCommand
    (2fdb1e9), closes #1141
    ~ update module-info.java to make org.slf4j static requirement
    (81b05ec)
    * Build
    ~ deps
    + bump org.codehaus.mojo:versions-maven-plugin (da8596c)
    + bump org.apache.maven.plugins:maven-javadoc-plugin
    (6e4c691)
    + bump org.jreleaser:jreleaser-maven-plugin (9f354be)
    + bump surefire.version from 3.5.1 to 3.5.2 (aa92c59)
    * Documentation
    ~ add supported API level for Android (4a41998), closes #1204

++++ strongswan:

  - rename -hmac subpackage to -fips because it isn't providing
    the hmac files, it provides the configuration drop in to
    enforce fips mode.

++++ systemsettings6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ terragrunt:

  - Update to version 0.69.1:
    * feat: Adding test for slash in source name (#3591)
    * fix: Adjusting `run-all` docs (#3589)
    * feat: `-detailed-exitcode` with `run-all` commands (#3585)

++++ tree:

  - update to 2.2.1
    * Fix regression where I free a pointer that should not have been freed due
    to a variable renaming that wasn't completed. (Daniel Li / Landon Bourma)
    * Put back, in a modified form, HTML href directory path fixing that was
    removed in 2.1.2. If the "baseHREF" part after the -H begins with a dash
    (-), the dash is removed and the lead directory name is removed from the
    href, otherwise it is left as-is.  It can be very difficult to know how to
    handle the host and directory part given the plethora of protocols and
    what-not, so hopefully this should give enough control over that to suit
    most requirements.
    Version 2.2.0 (11/24/2024)
    * Add option --opt-toggle which turns on the ability to toggle options such
    as -a, -p, etc.  Useful to add to an alias for turning an option off when
    using said alias. (Christoph Anton Mitterer)
    * Add --hyperlink option to print OSC 8 terminal hyperlinks for files. Also
    adds the --scheme and --authority options to modify the schema and hostname/
    authority of the links. (Nicolai Dagestad)
    OSC 8 Terminal hyperlinks:
    https://gist.github.com/egmontkob/eb114294efbcd5adb1944c9f3cb5feda
    * Maybe finally fix JSON error reporting when unable to open a directory and a
    full tree is required, such as when using --du. (Alchemyst@github)
    * Fix small rounding error in human readable size (-h) output, where 9.99K is
    rounded to 10.0K rather than 10K (Ivan Ivanovich)
    * Fix the totals report for sizes when --du option is used.  The directory
    size total was correct, but the final report was an accumulation of all
    the directory totals rather than just the top most directory total.
    (Alchemyst@github)
    * Add .gitignore file to distribution for those wanting that. (Kenta Arai)
    * Add 'none' as a valid --sort option (i.e. -U).
    * Add ability to cross compile for Android (freemedom@github)
    * List charsets again if --charsets is not given an argument.
    * Allow --help and usage to use ANSI bold and italic if colorization is
    enabled.
    * General code cleanups:
  - Removed unused externs where possible.
  - Clean up some warnings issued by -Wextra (Kenta Arai)
  - Update Makefile to allow CC and the CFLAGS -O3 option to be overridden,
    move CPPFLAGS into their own variable, add -Wstrict-prototypes
    (David Seifert)
  - Long over-due move to stdbool.h, removes custom bool type and changes all
    occurrences of TRUE/FALSE to true/false. (David Seifert / others)  This
    likely makes C99+ even more of a requirement now. Please let me know if
    this requires a work-around for your system.
  - Went ahead and added -Wconversion to the Makefile as well. This required a
    large number of type conversion fixing which may have unexpected side
    effects, but should hopefully help with tree safely dealing with absurd
    sizes/number of things in the future as this promotes using size_t more.
    This probably needs more work to do properly however.
  - Apply the const constraint on parameter strings wherever possible.

++++ updatecli:

  - Update to version 0.87.0:
    * deps: use go-scm upstream project (#3146)
    * chore: deps(go): bump module github.com/drone/go-scm to v1.39.0
    (#3137)
    * deps(go): bump module cuelang.org/go (#3131)
    * deps(go): bump module helm.sh/helm/v3 (#3126)
    * deps(go): bump module github.com/stretchr/testify (#3119)
    * deps(go): bump module github.com/goccy/go-yaml (#3111)
    * deps(go): bump module github.com/Masterminds/semver/v3 (#3101)
    * chore: deps(go): bump module github.com/drone/go-scm to v1.38.9
    (#3091)
    * feat(autodiscovery/helm): allow to set target.SkipPackaging for
    helmchart (#3062)
    * fix: message for golang update in go.mod (#3068)
    * feat(temurin): introduces condition to check for Adoptium
    releases existence (#3063)
    * deps(go): bump module github.com/hashicorp/hcl/v2 (#3055)
    * deps(go): bump module github.com/goccy/go-yaml (#3044)
    * deps: Bump Golang version to 1.23.3 (#3031)
    * deps(go): bump module golang.org/x/text (#3027)
    * deps(go): bump module golang.org/x/oauth2 (#3011)
    * deps(go): bump module golang.org/x/mod (#3012)
    * fix: print Updatecli log to stdout instead of sterr (#2997)
    * deps(go): bump module github.com/goccy/go-yaml (#2989)
    * deps: bump updatecli version to v0.86.1 (#2979)

++++ virt-manager:

  - Update to Version 5.0.0 (jsc#PED-8910)
    * virt-clone: colne serial files (Oleg Vasilev)
    * virt-clone: Copy disk permissions as well (Martin Kletzander)
    * virt-install: Add properties for AMD SEV-SNP (Daniel P. Berrangé)
    * virt-install: Add passt backend for user network interface
    * virt-install: Add support for --sound multichannel,stream (Lin Ma)
    * virt-install: Add support for --tpm backend.debug,backend.source (Lin Ma)
    * virt-xml: add --edit --convert-to-q35
    * virt-xml: add --edit --convert-to-vnc
    * virt-xml: Add --edit --boot uefi
    * virt-manager: Fix opening graphical console with egl-headless (Feng Jiang)
    * virt-manager: Add support to create external snapshots
    * virt-manager: Default to scaling=Always for consoles
    * virt-manager: switch to not forking by default
    * cli: Add more --disk options (Lin Ma)
    * cli: Add --memdev target.address_base for virtio-mem and virtio-pmem (Lin Ma)
    * cli: Add --features kvm.pv-ipi.state=on|off (Lin Ma)
    * cli: Add --video model.blob=on|off (Lin Ma)
    * Add missing Hyper-V features and enable most of them by default
    * Add loongarch support (Xianglai Li)
    * Add support for hvf domain type (Mohamed Akram)
    * Support creating sparse volumes on ZFS pools (Iain Buclaw)
    * UEFI improvements for riscv64 and loongarch64 VMs (Andrea Bolognani)
    * Add graphcis to riscv64 and aarch64
    * build: swtich from setuptools to meson
    * diskbackend: Drop support for sheepdog (Lin Ma)
    * cli: Deprecate --cpu host in favor of --cpu host-model (Andrea Bolognani)
  - Drop the following upstream patches contained in new tarball
    001-cli-disk-Add-driver.metadata_cache-options.patch
    002-tests-cli-Fix-test-output-after-previous-commit.patch
    003-fsdetails-Fix-an-error-with-source.socket-of-virtiofs.patch
    004-cli-Drop-unnecessary-disk-prop-aliases.patch
    005-tests-testdriver-Add-filesystem-socket-example.patch
    006-virtinstall-split-no_install-conditional-apart-to-track-code-coverage.patch
    007-virtinstall-fix-regression-with-boot-and-no-install-method.patch
    008-tests-Add-a-compat-check-for-linux2020-in-amd-sev-test-case.patch
    009-cli-cpu-Add-maxphysaddr.mode-bits-options.patch
    010-virt-install-help-required-options-are-wrong.patch
    011-cloner-Sync-uuid-and-sysinfo-system-uuid.patch
    012-virt-install-unattended-and-cloud-init-conflict.patch
    013-virt-install-Reuse-cli.fail_conflicting.patch
    014-cli-support-boot-loader.stateless-.patch
    015-diskbackend-Drop-support-for-sheepdog.patch
    016-Fix-pylint-pycodestyle-warnings-with-latest-versions.patch
    017-tests-cpio-set-owner-to-00.patch
    018-addhardware-Fix-backtrace-when-controller.index-is-None.patch
    019-Clean-up-FileChooser-usage-a-bit.patch
    020-guest-Query-availability-of-usb-redirdevs-in-domcaps.patch
    021-guest-Query-availability-of-spicevmc-channels-in-domcaps.patch
    022-tests-Add-domcaps-coverage-for-usb-redir-spicevmc-channel-checks.patch
    023-tests-Update-to-latest-kvm-domcaps.patch
    024-progress-Fix-showing-correct-final-total.patch
    025-virtinstall-Fix-the-allocating-disk-size-printed-by-the-progress-bar.patch
    026-virtinstall-Hide-total_size-in-the-progress-bar-if-it-doesnt-need.patch
    027-asyncjob-Fix-backtrace-when-no-cursor-theme-installed.patch
    029-asyncjob-Remove-unused-import.patch
    030-Packit-initial-enablement.patch
    031-virt-install-Recommend-boot-uefi.patch
    032-virt-install-Document-Secure-Boot-setups.patch
    033-cloner-clone-serial-files.patch
    034-tests-cli-test-serial-file-clone.patch
    035-man-virt-install-Add-a-note-about-different-behavior-of-boot-on-s390x.patch
    036-tests-uitests-Fix-window-reposition-on-f38.patch
    037-tests-livetests-work-around-qemu-media-change-regression.patch
    038-tests-uitests-Fix-manager-window-repositioning-test.patch
    039-tests-Default-uitests-to-verbosity-2.patch
    040-uitests-Make-hotplug-test-pass-on-both-f37-and-f38.patch
    041-uitests-More-attempts-at-making-manager-reposition-test-reliable.patch
    042-tests-uitests-make-menu-operations-more-robust.patch
    043-rpm-convert-license-to-SPDX-format.patch
    044-uitests-Drop-hotplug-work-around-f38-libvirt-is-fixed-now.patch
    045-virtinst-delay-lookup_capsinfo-until-we-really-need-it.patch
    046-virtinst-suppress-lookup_capsinfo-exception-in-machine-type-alias-check.patch
    047-tests-data-refresh-Fedora-tree-URLs-in-virt-install-osinfo-expected-XMLs.patch
    048-tests-Add-unit-test-coverage-for-539.patch
    049-fix-indentation-of-multiline-log.exception-invocations.patch
    050-virt-clone-Copy-disk-permissions-as-well.patch
    051-data-appstream-add-launchable-tag.patch
    052-Fix-some-pylint.patch
    055-connectauth-Drop-sanity-checking-for-libvirtd.patch
    056-delete-Fix-ambiguity-that-confused-pylint.patch
    057-Fix-filesystem-socket.source.patch
    058-uri-Mock-domcaps-returning-NO_SUPPORT.patch
    059-tests-cli-Adjust-hotplug-test-for-latest-libvirt.patch
    060-Fix-some-pylint.patch
    061-tests-ui-make-newvm-test-start-less-flakey.patch
    062-tests-ui-make-creatnet-test-start-less-flakey.patch
    063-Support-creating-sparse-volumes-on-ZFS-pools.patch
    064-domain-rename-handle-firmware-ending-with-.qcow2.patch
    065-testdriver-Add-portgroups-example-to-test-many-devices.patch
    066-netlist-Fix-UI-error-when-virtual-network-doesnt-exist.patch
    067-ui-details-fix-Applications-width.patch
    068-ui-details-Increased-scrolledview6s-height-request.patch
    069-uitests-Fix-walkUI-flakyness.patch
    070-uitests-Handle-slow-app-launch-on-fedora-39.patch
    071-createvm-Replace-deprecated-pkgutil.find_loader.patch
    072-Fix-pylint-3.1.0-issues.patch
    073-console-Move-embeddable_graphics-to-console.py.patch
    074-domain-Add-idx-parameter-to-open_graphics_fd.patch
    075-console-Select-the-first-embeddable-graphics-device-as-graphical-console.patch
    076-console-Cleanup-and-improve-console-menu-handling.patch
    077-cli-add-show-systray-option.patch
    078-man-document-show-systray-option.patch
    079-baseclass-Avoid-glib-Source-ID-XX-not-found-at-app-shutdown.patch
    080-uitests-More-handling-for-slow-startup-on-f39.patch
    081-systray-Cleanups-and-improvements-for-show-systray.patch
    082-virtinst-add-external-snapshot-capability.patch
    083-virtinst-snapshot-add-memory-file-attribute.patch
    084-virtManager-domain-allow-disk-only-snapshots.patch
    085-virtManager-add-support-to-create-external-snapshots.patch
    086-virtManager-ignore-agen-livecycle-event-for-shutoff-VMs.patch
    087-Allow-serial-console-resize-to-beyond-80-columns.patch
    088-tests-Fix-host-copy-XML-with-libvirt-10.1.0.patch
    089-hostdev-Fix-error-when-mdev-type_id-is-missing.patch
    090-db1b2fbc-Use-GtkFileChooserNative.patch
    091-uitests-Fix-with-GtkFileChooserNative.patch
    092-cli-Use-regex-for-grep-and-nogrep-args.patch
    093-cli-Fix-with-latest-libvirt.patch
    094-uitests-handle-newer-libvirt-test-driver-UpdateDevice-support.patch
    095-uitests-force-internal-snapshots-in-test_snapshot.py.patch
  - Drop the following downstream patches no longer required
    virtinst-dont-create-storage-pool-for-dryrun.patch
    virtinst-add-pvh-support.patch
    virtinst-enable-video-virtio-for-arm.patch
    virtinst-add-hyperv-performance-options.patch
    virtman-dont-specify-gtksource-version.patch
    virtman-language-fixes.patch

++++ wacomtablet-kcm6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

++++ xdg-desktop-portal-kde6:

  - Update to 6.2.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.2.4
  - Changes since 6.2.3:
    * update version for new release

------------------------------------------------------------------
------------------  2024-11-25  -  Nov 25 2024  -------------------
------------------------------------------------------------------

++++ Jamulus:

  - Update to 3.11.0
  - Client: Added "Delete Entry" button to Advanced Settings, Custom Directories (#3260).
    (contributed by @AdamGLIN)
  - Client: Added "delete server" button to connect dialog (#3159).
    (contributed by @pljones)
  - Client: Fixed the display of delete buttons on Mac (#3305).
    (contributed by @softins)
  - Client/Server: Display Qt versions for both build and runtime (#3231).
    (contributed by @softins)
  - Client/Server: Improved start up logging (#3117).
    (contributed by @pljones)
  - Server: Fix systemd ExecStart command line to support start/stop recording signal (#3187).
    (contributed by @rdica)
  - Server: Only de-register on quit (#3302).
    (contributed by @pljones)
  - Mac: Changed bundle ID. You may need to re configure Jamulus to your liking after a new install (#3353).
    (contributed by @ann0see)
  - Android: save settings on app state change (#3144).
    (contributed by @pljones)
  - Refactor Release upload to two step process (#3374).
    (contributed by @ann0see)
  - Refactoring: Decouple App Store upload from dmg build (#3350).
    (contributed by @ann0see)
  - Refactor some CHostAddress parameters to be const references (#3259).
    (contributed by @softins)
  - Refactor src/main.cpp (#3191).
    (contributed by @pljones)
  - Translations updated from Hosted Weblate (#3193, #3246, #3284, #3325, #3363).
    (contributed by @weblate)
  - Documentation: Improved link for Server CLI options (#3303).
    (contributed by @gilgongo)
  - Documentation: updated TRANSLATING.md for current build process (#3312).
    (contributed by @softins)
  - Build: adds macOS signed pkg build automation (#2624).
    (contributed by @danryu)
  - Build: Bump actions/cache from 3 to 4 (#3232).
    (contributed by @app/dependabot)
  - Build: Bump actions/checkout from 3 to 4 (#3168).
    (contributed by @app/dependabot)
  - Build: Bump actions/download-artifact from 3 to 4 (#3211).
    (contributed by @app/dependabot)
  - Build: Bump actions/upload-artifact from 3 to 4 (#3213).
    (contributed by @app/dependabot)
  - Build: Bump DoozyX/clang-format-lint-action from 0.16 to 0.17 (#3215).
    (contributed by @app/dependabot)
  - Build: Bump github/codeql-action from 2 to 3 (#3212).
    (contributed by @app/dependabot)
  - Build: Bump maxim-lobanov/setup-xcode from 1.5.1 to 1.6.0 (#3181).
    (contributed by @app/dependabot)
  - Build: checkout of submodules only needed for Android (#3289).
    (contributed by @softins)
  - Build: Ensure apt version >=2.4 to prove that the system is Debian based
    (using apt and dpkg) and can validate the repo (#3199).
    (contributed by @houbsta)
  - Build: Generate qm files and embedded resource during build (#3288).
    (contributed by @softins)
  - Build: Place build files in separate directories instead of project root (#3299).
    (contributed by @softins)
  - Build: Replace deprecated Q_OS_MACX with Q_OS_MACOS
    (Jamulus now requires building with Qt >= 5.7.1) (#3227).
    (contributed by @softins)
  - Build: Updated bundled Qt6 to version 6.6.3 (#3182, #3204, #3236).
    (contributed by @app/github-actions)
  - Build: Updated Mac Legacy build to use Qt 5.15.2, now compatible with MacOS 10.13
    (High Sierra) or newer (#3235).
    (contributed by @softins)
  - Build: Updated the build runner for iOS in Github from macos-11 to macos-12 (#3292).
    (contributed by @softins)
  - Build: Updated Windows Installer base (NSIS) to version 3.10 (#3254).
    (contributed by @app/github-actions)
  - Build: Upgrade main macOS build to macOS 14 and Apple Silicon build (#3297).
    (contributed by @ann0see)
  - Autobuild: Build Linux releases on Ubuntu 20.04 instead of 18.04 (#3229).
    (contributed by @softins)
  - Autobuild: Prevent CodeQL-induced build failures for MacOS (#3223).
    (contributed by @softins)
  - Autobuild: Use notarytool instead of action for macOS notarization (#3352).
    (contributed by @ann0see)
  - Switch build to Qt6.

++++ MozillaFirefox:

  - Mozilla Firefox 133.0
    https://www.mozilla.org/en-US/firefox/133.0/releasenotes
    MFSA 2024-63 (bsc#1233695)
    * CVE-2024-11691 (bmo#1914707, bmo#1924184)
    Memory corruption in Apple GPU drivers
    * CVE-2024-11700 (bmo#1836921)
    Potential Tapjacking Exploit for Intent Confirmation on Android
    * CVE-2024-11692 (bmo#1909535)
    Select list elements could be shown over another site
    * CVE-2024-11701 (bmo#1914797)
    Misleading Address Bar State During Navigation Interruption
    * CVE-2024-11702 (bmo#1918884)
    Inadequate Clipboard Protection in Private Browsing Mode on
    Android
    * CVE-2024-11693 (bmo#1921458)
    Download Protections were bypassed by .library-ms files on
    Windows
    * CVE-2024-11694 (bmo#1924167)
    CSP Bypass and XSS Exposure via Web Compatibility Shims
    * CVE-2024-11695 (bmo#1925496)
    URL Bar Spoofing via Manipulated Punycode and Whitespace Characters
    * CVE-2024-11703 (bmo#1928779)
    Password access without authentication via PIN bypass on Android
    * CVE-2024-11696 (bmo#1929600)
    Unhandled Exception in Add-on Signature Verification
    * CVE-2024-11697 (bmo#1842187)
    Improper Keypress Handling in Executable File Confirmation Dialog
    * CVE-2024-11704 (bmo#1899402)
    Potential Double-Free Vulnerability in PKCS#7 Decryption Handling
    * CVE-2024-11698 (bmo#1916152)
    Fullscreen Lock-Up When Modal Dialog Interrupts Transition on macOS
    * CVE-2024-11705 (bmo#1921768)
    Null Pointer Dereference in NSC_DeriveKey
    * CVE-2024-11706 (bmo#1923767)
    Null Pointer Dereference in PKCS#12 Utility
    * CVE-2024-11708 (bmo#1922912)
    Data race with PlaybackParams
    * CVE-2024-11699 (bmo#1880582, bmo#1929911)
    Memory safety bugs fixed in Firefox 133, Firefox ESR 128.5,
    and Thunderbird 128.5
  - requires NSS 3.106
  - remove obsolete mozilla-python313.patch

++++ webkit2gtk3-soup2:

  - Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
    after a slow path (boo#1233631 CVE-2024-44308).
  - Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
    issue (boo#1233632 CVE-2024-44309).

++++ webkit2gtk3:

  - Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
    after a slow path (boo#1233631 CVE-2024-44308).
  - Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
    issue (boo#1233632 CVE-2024-44309).

++++ webkit2gtk4:

  - Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
    after a slow path (boo#1233631 CVE-2024-44308).
  - Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
    issue (boo#1233632 CVE-2024-44309).

++++ clisp:

  - Make it build with latest pari version

++++ cloudflared:

  - Update version to 2024.11.1
    * Add cloudflared tunnel health command
    * PPIP-2310: Update quick tunnel disclaimer
    * TUN-8621: Prevent QUIC connection from closing before grace period
    after unregistering
    * TUN-8484: Print response when QuickTunnel can't be unmarshalled
    * TUN-8592: Use metadata from the edge to determine if request body is
    empty for QUIC transport
    * TUN-8621: Fix cloudflared version in change notes to account for
    release date
    * TUN-8638: Add datagram v3 serializers and deserializers
    * TUN-8685: Bump coredns dependency
    * TUN-8688: Correct UDP bind for IPv6 edge connectivity on macOS
    * TUN-8694: Fix github release script
    * TUN-8694: Rework release script
    * TUN-8661: Refactor connection methods to support future different
    datagram muxing methods
    * TUN-8692: remove dashes from session id
    * TUN-8708: Bump python min version to 3.10
    * TUN-8667: Add datagram v3 session manager
    * TUN-8553: Bump go to 1.22.5 and go-boring 1.22.5-1
    * TUN-8700: Add datagram v3 muxer
    * TUN-8646: Allow experimental feature support for datagram v3
    * TUN-8641: Expose methods to simplify V3 Datagram parsing on the edge
    * VULN-66059: remove ssh server tests
    * TUN-8709: Add session migration for datagram v3
    * TUN-8701: Add metrics and adjust logs for datagram v3
    * add: new go-fuzz targets
    * TUN-8701: Simplify flow registration logs for datagram v3

++++ crmsh:

  - Update to version 5.0.0+20241125.ae21432f:
    * Dev: unittests: Adjust unit test for previous commit
    * Dev: bootstrap: Remove import_ssh_key function
    * Dev: unittests: Adjust unit test for previous commits
    * Dev: ssh_key: Split fetch_public_key_list into two functions
    * Dev: bootstrap: Improve shell script in generate_ssh_key_pair_on_remote
    * Dev: bootstrap: Reuse AuthorizedKeyManager to add key to authorized_keys
    * Dev: bootstrap: Adjust the docstring of configure_ssh_key function
    * Dev: bootstrap: Change the parameter name in swap_public_ssh_key function
    * Dev: bootstrap: Avoid hardcoding the ssh key type as RSA
    * Dev: ssh_key: Avoid hardcoding the ssh key type as RSA
    * Dev: utils: Avoid hardcoding the ssh key type as RSA

++++ gala:

  - small fix for Leap 1500
  - update to 8.0.3:
    * DragDropAction: Fix actor_clicked emission on touch event
    * Introduce AnimationsSettings
    * DragDropAction: properly handle button release event
    * Introduce a WindowPositioner
    * Pass Meta.Display instead of Gala.WindowManager where possible
    * Add support for Mutter47
    * AnimationSettings: Introduce get_animation_duration
    * HideTracker: Take windows that are only vertically maximized
    * Add panel hide delay
  - update to 8.0.2:
    * WindowIcon: reload icon if more info about the window becomes available
    * ManagedClient: Inherit fds
    * Fix autohide
    * Fix stacking order after workspace switch
    * ScreenshotManager: Fix cursor inclusion for non window screenshots
    * Fix panel sometimes being behind windows
  - remove support-libmutter15.patch, as upstream integrated the patch

++++ gede:

  - New upstream version 2.20.2
    * Fixed incorrect cursor position in console output

++++ git:

  - update to 2.47.1:
    * Use after free and double freeing at the end in
    "git log -L... -p" had been identified and fixed.
    * "git maintenance start" crashed due to an uninitialized
    variable reference, which has been corrected.
    * Fail gracefully instead of crashing when attempting to write
    the contents of a corrupt in-core index as a tree object.
    * A "git fetch" from the superproject going down to a submodule
    used a wrong remote when the default remote names are set
    differently between them.
    * The "gitk" project tree has been synchronized again

++++ gnome-control-center:

  - Update to version 47.2:
    + Accessibility: Remove "screen" labels that take too much space
    + Appearance: Fix accidental reset of accent colors config
    + Apps: Fix some memory leaks
    + Color: Ensure profiles are connected before operating on them
    + Mobile Networks: Fix alignment of status pages
    + Mouse:
  - Fix illustration assets requiring gstreamer-plugins-bad
  - Update illustration assets
    + Printers: Remove wrong tooltip in the "Add Printer" button
    + Updated translations.

++++ gnome-shell:

  - Update to version 47.2:
    + Fix graphical artifacts in partially-rounded buttons
    + Fix caret tracking in magnifier
    + Improve accessibility of keyboard backlight quick settings
    toggle
    + Fix resetting non-caps shift key in on-screen keyboard
    + Misc. bug fixes and cleanups
    + Updated translations.

++++ gnome-music:

  - Update to version 47.1:
    + Bugs fixed:
  - Do not open multiple preferences windows using keyboard
    shortcut.
  - Show MPRIS albumart on delayed retrieval.

++++ gnome-shell-extensions:

  - Update to version 47.2:
    + places-menu: Fix a11y labelling
    + screenshot-window-sizer: Mention shortcut in description
    + Misc. bug fixes and cleanups
    + Updated translations.

++++ gnome-software:

  - Update to version 47.2:
    + Fix distro upgrade when certain version of PackageKit is used
    + Fix a crash when uninstalling a Snap app
    + Make uninstall dialog adaptive for small screens
    + Prefer Appstream data from swcatalog instead of app-info
    directories
    + Updated translations.

++++ gnome-user-share:

  - Adjust _service definition: upstream has changed their tag format
    to be a simple VERSION tag.

++++ golangci-lint:

  - Update to version 1.62.2:
    * dev: fix release workflow (#5156)
  - Update to version 1.62.1:
    * build(deps): bump github.com/uudashr/iface from 1.2.0 to 1.2.1 (#5154)
    * dev: publish snap (#5130)
    * build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#5152)
    * build(deps): bump github.com/Crocmagnon/fatcontext from 0.5.2 to 0.5.3 (#5153)
    * dev: add missing AUR_KEY secret (#5151)
    * dev: simplify sort results processors (#5150)
    * docs: Simplify team and contributors section (#5148)
    * dev: publish AUR -bin automatically (#5146)
    * build(deps): bump cross-spawn from 6.0.5 to 6.0.6 in /.github/contributors (#5145)
    * docs: remove golint on 'performance' page (#5139)
    * docs: fix URL for revive.ignore-generated-header (#5140)
    * build(deps): bump github.com/polyfloyd/go-errorlint from 1.6.0 to 1.7.0 (#5134)
    * build(deps): bump cross-spawn from 7.0.3 to 7.0.5 in /.github/peril (#5136)
    * build(deps): bump github.com/nunnatsa/ginkgolinter from 0.18.0 to 0.18.3 (#5133)
    * build(deps): bump github.com/mgechev/revive from 1.5.0 to 1.5.1 (#5135)
    * build(deps): bump github.com/Antonboom/testifylint from 1.5.0 to 1.5.2 (#5132)
    * docs: improve testifylint description of require-f-funcs flag (#5131)
    * fix: ignore cache error when file not found (#5129)
    * build(deps): bump golang.org/x/oauth2 from 0.23.0 to 0.24.0 in /scripts/gen_github_action_config (#5128)
    * docs: missing doc link for sloglint.args-on-sep-lines (#5126)
    * docs: fix links to gocritic checks (#5125)
    * docs: update documentation (#5124)
    * docs: update documentation assets (#5122)
    * docs: update GitHub Action assets (#5123)

++++ kernel-firmware:

  - Update to version 20241125 (git commit 508d770ee6f3):
    * ice: update ice DDP wireless_edge package to 1.3.20.0
    * ice: update ice DDP comms package to 1.3.52.0
    * ice: update ice DDP package to ice-1.3.41.0
    * amdgpu: update DMCUB to v9.0.10.0 for DCN314
    * amdgpu: update DMCUB to v9.0.10.0 for DCN351

++++ libqt5-qt3d:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16
    * Doc: Add missing leading asterisk to qdoc command

++++ libqt5-qtconnectivity:

  - Update to version 5.15.16+kde1, rebased upstream:
    * sdpscanner: fix format strings for (u)int64_t
    * Bump version to 5.15.16

++++ libqt5-qtlottie:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtbase:

  - Update to version 5.15.16+kde130, rebased upstream:
    * xcb: Sync XCB connection after reparenting window
    * xcb: check validity of RandR output info before using it
    * QDuplicateTracker: fix redundant ;
    * qxmlstreamparser_p.h: fix -Wshadow in parse()
    * Fix -Wdouble-promotion in FP overload of convertDoubleTo()
    * Protect headers against min/max macros
    * Add __attribute__((format(printf()))) to q(v)nprintf()
    * qsavefile_p.h: fix missing qsavefile.h include
    * qendian_p.h: fix -Wshadow warning
    * qtextstream_p.h: fix -Wshadow in QDeviceClosedNotifier
    * QFutureInterface: fix build with GCC14/C++20: template-id not allowed
    * qfuturewatcher_p.h: fix missing qfuturewatcher.h include
    * qhttpmultipart_p.h: add missing qiodevice.h include
    * Fix crash in font distancefield computation
    * Avoid crash in font distancefield computation
    * Revert "Update Harfbuzz to 7.2.0"
    * Revert "Update Harfbuzz to 7.2.0"
    * Fix WinRT/ARM build
    * Update Harfbuzz to version 8.2.2
    * Upgrade Harfbuzz to version 8.2.0
    * Update bundled libjpeg-turbo to version 3.0.1
    * SQLite: Update SQLite to v3.43.2
    * Add a script for updating from publicsuffix/list.git
    * Fix undefined symbol qt_version_tag with lld(16.0) for non core lib
    * QInputMethod: check if focusobject supports the "new" IM function before calling it
    * Un-deprecate qSwap()
    * Doc: state that models are not thread-safe
    * Fix android build error
    * xcb: replace a warning with debug info
    * qurl-generateTLDs: filter empty and comment lines
    * qurltlds_p.h: support easier automatic updates
    * SQLite: Update SQLite to v3.43.1
    * Upgrade to Freetype 2.13.2
    * Fix crash when reading corrupt font data (CVE-2023-43114)
    * qmake: Don't error out if QMAKE_DEFAULT_LIBDIRS is empty on macOS
    * qxkbcommon: Keep lower case as Qt key when upper case is not in Latin1
    * Doc: Fix documented default for QCalendarWidget maximumDate, minimumDate
    * QDataStream: clarify QDataStream::operator>>(char *&s) API docs
    * doc: Remove QSettings' paths for embedded linux
    * Update bundled zlib to version 1.3
    * tst_QDtls: use DTLS v 1.0 test data conditionally
    * Bump version to 5.15.16
    * Android: fix handling of tree content uri with sub-document
    * QTextFormat: documentation fix
    * SQLite: Update SQLite to v3.43.0
    * tst_QSslSocket: skip tests requiring TLS v 1.0 downgrade
    * Update to Harfbuzz 8.1.1
    * Update version of FreeType attribution
    * tst_QHashFunctions: use actual seed in consistent() test function
    * Android: fix content URI handling for non-ascii file names
    * Upgrade Harfbuzz to 7.3.0
    * Update download location for Harfbuzz as well
  - Commits dropped by the rebase:
    * Add missing line continuations for memory_resource opt-out on Apple systems
    * Fix CVE-2023-43114

++++ libqt5-qtcharts:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtdatavis3d:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qttools:

  - Update to version 5.15.16+kde3, rebased upstream:
    * Bump version to 5.15.16
    * Qt Designer: Fix invalid QIcon entry "<normaloff>.</normaloff>"

++++ libqt5-qtgamepad:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtvirtualkeyboard:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Fix repeated style loading
    * Bump version to 5.15.16

++++ libqt5-qtlocation:

  - Update to version 5.15.16+kde7, rebased upstream:
    * Android: fix null array when requesting available providers
    * WeatherInfo example: fix a potential crash
    * Bump version to 5.15.16

++++ libqt5-qtmultimedia:

  - Update to version 5.15.16+kde2, rebased upstream:
    * supportedResolutions() - do not append the same resolution twice
    * pulseaudio: Use pa_context_new_with_propslist
    * Stop using std::unary_function
    * Bump version to 5.15.16

++++ libqt5-qtnetworkauth:

  - Update to version 5.15.16+kde1, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtquick3d:

  - Update to version 5.15.16+kde1, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtquickcontrols2:

  - Update to version 5.15.16+kde5, rebased upstream:
    * Don't leak buttons in QQuickDialogButtonBox
    * Fix connection leak in header proxy model
    * Bump version to 5.15.16

++++ libqt5-qtremoteobjects:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtscxml:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtsensors:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtserialbus:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtserialport:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtsvg:

  - Update to version 5.15.16+kde5, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtspeech:

  - Update to version 5.15.16+kde1, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtwayland:

  - Update to version 5.15.16+kde59, rebased upstream:
    * client: use current modifiers in repeat keys
    * fix: variable not initialized
    * Add license headers to shader files
    * Bump version to 5.15.16

++++ libqt5-qtwebchannel:

  - Update to version 5.15.16+kde3, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtwebsockets:

  - Update to version 5.15.16+kde2, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtwebview:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtx11extras:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtxmlpatterns:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtdeclarative:

  - Update to version 5.15.16+kde22, rebased upstream:
    * QML Debugger: Don't crash when looking up values from imported modules
    * Avoid memory leaks in QQuickListView and tst_qqmlinstantiator
    * QQuickItemView: avoid leaking of highlights and animators
    * Doc: Fix unqualified access in PathView example
    * QQmlSequence: fix compilation with GCC12/C++20
    * Context properties: Don't trigger an assert for numeric names
    * pixmapcache: avoid deadlock when canceling async image load
    * Fix positioning of text decoration with some fonts
    * Bump version to 5.15.16
    * Doc: fix Qt Quick Test header

++++ libfvalue:

  - Update 0001-Export-libfvalue_value_get_entry.patch so libnk2
    does not fail to build

++++ ncurses:

  - Add ncurses patch 20241123
    + remove dependency on stdbool.h from configure script check for type
    of bool when C++ binding is omitted (report by Sam James).
    + compiler-warning fixes

++++ libnetfilter_conntrack:

  - Specfile modernization

++++ libnvme:

  - Fix tests on s390
    * add 0002-test-mock-pass-thru-unknown-ioctls.patch

++++ libqt5-qtgraphicaleffects:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtimageformats:

  - Update to version 5.15.16+kde2, rebased upstream:
    * Revert "Update bundled libtiff to version 4.5.1"
    * Revert "Update bundled libwebp to version 1.3.1"
    * Bump version to 5.15.16

++++ libqt5-qtquickcontrols:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qtquicktimeline:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libqt5-qttranslations:

  - Update to version 5.15.16+kde0, rebased upstream:
    * Bump version to 5.15.16

++++ libsndfile:

  - Fix out-of-bounds read in function vorbis_analysis_wrote in
    ogg_vorbis.c (CVE-2024-50612, bsc#1232438):
    libsndfile-CVE-2024-50612.patch

++++ libsndfile-progs:

  - Fix out-of-bounds read in function vorbis_analysis_wrote in
    ogg_vorbis.c (CVE-2024-50612, bsc#1232438):
    libsndfile-CVE-2024-50612.patch

++++ libt3key:

  - Update to release 0.2.11
    * GCC 14 support
  - Delete ncurses.patch (merged)

++++ tesseract-ocr:

  - Update versioned dependencies and add missing buildrequirements
  - Bump Leap version of gcc
  - Update to 5.5.0
  - Fix TARGET_PDB_FILE error for static linking. in #4271
  - Make regular usage of CMAKE_INSTALL_LIBDIR and GNUInstallDirs in #4272
  - Ignore illegal TESSDATA_PREFIX (not existing filesystem entry, issue #4277) in #4278
  - Fix confidence output for the PAGE XML renderer in #4283
  - Set hOCR capabilities ocrp_dir and ocrp_lang unconditionally in #4301
  - Reduce clock syscalls in #4303
  - Calculate row bounding box in single-word mode per #4304 in #4305
  - Replace access/_access by std::filesystem::exists in #4307
  - Modernize code for list of available models in #4308
  - Fix performance and other issues reported by Codacy in #4309
  - Remove unnecessary assignment and assertions in #4313
  - Update code for tprintf in #4306
  - Add C++ stream for log messages and use it in two debug messages in #4314
  - cmake: Correctly set the soversion based on SemVer properties in #4319
  - Replace deprecated runner macos-12 by macos-latest in GitHub actions in #4326
  - Modernize code for renderers and remove filename conversion for Windows in #4330
  - Fix some typos and grammer issues in #4337
  - Add GitHub action and Makefile target for Windows installer in #4341
  - Support symbolic values for --oem and --psm options in #4344
  - Replace some tprintf by tesserr stream (fixes Windows compiler warnings) in #4345
  - Add RISC-V V support #4346
  - Fix and improve Windows installer in #4348
  - Remove Tensorflow support in #4350
  - Update submodule googletest to release v1.15.2 in #4352

++++ libtranscript:

  - Update to release 0.3.4
    * GCC 14 support
  - Delete 0001-build-fix-configure-failure-in-gcc-14.patch (merged)

++++ lxqt-panel:

  - Update to version 2.1.2:
    * Fixed changing of desktop names under X11

++++ mozilla-nspr:

  - update to version 4.36
    * remove support for OS/2
    * remove support for Unixware, Bsdi, old AIX, old HPUX9 & scoos
    * remove support for Windows 16 bit
    * renamed the prwin16.h header to prwin.h
    * configure was updated from 2.69 to 2.71
    * various build, test and automation script fixes
    * major parts of the source code were reformatted

++++ mutter:

  - Update to version 47.2:
    + Fix warping pointer after releasing pointer constraints
    + Default to high thread instead of realtime priority for KMS
    thread
    + Avoid CPU stalls with NVIDIA secondary GPUs with
    directly-attached monitors
    + Fix updating cursor immediately when starting window drag
    + Add pipeline hooks to user program pipelines
    + Prefer GPUs with built-in panels connected as primary GPU
    + Fix cursor glitches when using virtual monitors
    + Ensure frame events are sent for cursor surfaces
    + Allow BGRX8888 format on big endian
    + Fix touchscreen drag-and-drop on wayland
    + Fixed crashes
    + Misc. bug fixes and cleanups

++++ openafs:

  - update to latest git branch stable-1_8_x, includes security update 1.8.13
  - change version to openafs-1.8.13.g... since the new stable release is 1.8.13
  - remove patch handle_backports.diff, it is now included upstream
  - remove intermediate patches:
    * 03b280649f5e22ed74c217d7c98c3416a2fa9052: Linux-6.10: remove includes for asm/ia32_unistd.h
    * 0f6a3a402f4a66114da9231032bd68cdc4dee7bc: Linux-6.10: Use filemap_alloc_folio when avail
    * 658942f2791fad5e33ec7542158c16dfc66eed39: Linux-6.10: define a wrapper for vmalloc
    * d8b56f21994ce66d8daebb7d69e792f34c1a19ed: afs: avoid empty-body warning
    * 7097eec17bc01bcfc12c4d299136b2d3b94ec3d7: Linux 6.10: Move 'inline' before func return type

++++ opencl-headers:

  - Update to version 2024.10.24:
    * Temporarily disable PPA builds (#267)
    * Update headers regenerated from latest xml (#264)
    * Add properties parameter to all command-buffer commands (#260)
    * Use array for clUpdateMutableCommandsKHR (#245)
    * Disable gcc-11 on MacOS (#262)
    * Update generated headers and remove CL/GL types from cl_platform.h (#257)
    * Fix CI failures (#256)
    * Introduce extension macros (#251)
    * Update CI matrix (#252)
    * Updated CI, added CD (#239)

++++ openqa-mon:

  - Update to version 1.3.1:
    * Prepeare maintenance release
    * Update cmd/openqa-mon/util.go
    * Update dependencies
    * Add SLEM6
    * Refactor util with generics and cleanup
    * Consider no arguments wrong usage
    * Update module dependencies
    * Update QE-C Maintenance template
    * Remove unneeded code
    * Move project to os-autoinst
    * ci: Run workflow on pull requests as well
    * Set version not go to 1.21  in workflows
    * Propagate err in checkReviewed
    * Set version to release

++++ openttd:

  - Add upstreamed but unreleased patch 0001-icu-build-fix.patch to fix builds
    with ICU >= 76

++++ pantheon-camera:

  - update to 8.0.1:
    * Workflows/Merge: install rust extension for gettext
    * MainWindow: Make headerbar buttons insensitive by default
    * Always use decimal point
    * Updated translations

++++ pantheon-onboarding:

  - update to 8.0.2:
    * WelcomeView: Fix missing handler when a row activated
    * Updated translations
  - update to 8.0.1:
    * AbstractOnboardingView: replace skip all with back on non-welcome
    * WelcomeView: copy links redesign from Settings
    * Update onboarding.metainfo.xml.in

++++ pantheon-shortcut-overlay:

  - update to 8.0.1:
    * Use new keybindings schema

++++ pantheon-sideload:

  - update to 6.3.0:
    * Handle flatpak+https scheme
    * MainWindow: fix invalid bundle cast

++++ passt:

  - Update to version 20241121.238c69f:
    * tcp: Acknowledge keep-alive segments, ignore them for the rest
    * tcp: Reset ACK_TO_TAP_DUE flag whenever an ACK isn't needed anymore
    * ndp: Don't send unsolicited RAs if NDP is disabled
    * ndp: Don't send unsolicited router advertisement if we can't, yet
    * selinux: Use auth_read_passwd() interface for all our getpwnam() needs
    * ndp: Send unsolicited Router Advertisements
    * passt: Seed libc's pseudo random number generator
    * util: Add general low-level random bytes helper
    * ndp: Make route lifetime a #define
    * ndp: Use struct assignment in preference to memcpy() for IPv6 addresses
    * ndp: Split out helpers for sending specific NDP message types
    * ndp: Add ndp_send() helper
    * ndp: Remove redundant update to addr_seen
    * cppcheck: Don't check the system headers
    * linux_dep: Fix CLOSE_RANGE_UNSHARE availability handling
    * linux_dep: Move close_range() conditional handling to linux_dep.h
    * log: Only check for FALLOC_FL_COLLAPSE_RANGE availability at runtime
    * tap, tcp, util: Add some missing SOCK_CLOEXEC flags
    * passt: Use NOLINT clang-tidy block instead of NOLINTNEXTLINE
    * util: Define small and big thresholds for socket buffers as unsigned long long
    * tap: Cast TAP_BUF_BYTES - ETH_MAX_MTU to ssize_t, not TAP_BUF_BYTES
    * dhcpv6: Turn some option headers pointers to const
    * dhcpv6: Use for loop instead of goto to avoid false positive cppcheck warning
    * tcp: unify payload and flags l2 frames array
    * test: Improve test for NDP assigned prefix
    * test: Don't require 64-bit prefixes in perf tests
    * test: Make nstool hold robust against interruptions to control clients
    * test: Rename propagating signal handler
    * util: Work around cppcheck bug 6936
    * udp: Don't dereference uflow before NULL check in udp_reply_sock_handler()
    * ndp: Use const pointer for ndp_ns packet
    * linux_dep: Generalise tcp_info.h to handling Linux extension compatibility
    * fwd: Squash different-signedness comparison warning
    * util: Remove unused ffsl() function
    * clang: Add rudimentary clangd configuration
    * Makefile: Don't attempt to auto-detect stack size
    * Makefile: Use -DARCH for qrap only
    * seccomp: Simplify handling of AUDIT_ARCH
    * Makefile: Move NETNS_RUN_DIR definition to C code
    * netlink: RTA_PAYLOAD() returns int, not size_t
    * flow: Correct type of flowside_at_sidx()
    * arch: Avoid explicit access to 'environ'
    * clang: Move clang-tidy configuration from Makefile to .clang-tidy
    * Makefile: Simplify exclusion of qrap from static checks
    * clang: Add .clang-format file
    * test: Adjust misplaced sleeps in two_guests code
    * tap: Explicitly cast TUNSETIFF to fix build warning with musl on ppc64le
    * tcp: Fix build against musl, __sum16 comes from linux/types.h

++++ python-ara:

  - Update to 1.7.2
    * When recording diffs, properly format and display the "prepared" key
    for the modules that use it (apt, git, cli_config and others)
    * Sorting task results by duration when browsing playbook results works once again
    * Updated bootstrap css from 5.3.0 to 5.3.3
    * Catch SIGINT and SIGTERM signals resulting in the interruption of playbooks to
    set the status of the playbook to "expired" instead of keeping it running forever
    unless expired with `ara playbook expire` from the CLI.
    * Add support for UTF-8 encoded usernames and passwords
    * Add .readthedocs.yaml to fix broken documentation builds
    * Formally include ara as a dependency in order to include --help commands in the docs
    * Added an introduction page
    * Made dependency on ruamel.yaml explicit rather than implicit
    * Update usage of logging.warn to logging.warning for
    python 3.13
    * Updated versions of Ansible tested in CI to Ansible 10 and ansible-core 2.17

++++ python-Deprecated:

  - Update to 1.2.15
    * Resolve Python 2.7 support issue introduced in v1.2.14 in ``sphinx.py``.
    * Fix #69: Add ``extra_stacklevel`` argument for interoperating with
    other wrapper functions (refer to #68 for a concrete use case).
    * Fix #73: Update class method deprecation warnings for Python 3.13.
    * Fix #75: Update GitHub workflows and fix development dependencies for Python 3.12.
    * Fix #66: discontinue TravisCI and AppVeyor due to end of free support.
  - Adjust upstream source name in spec file
  - Drop fix-python3.13-ftbfs.patch, merged upstream

++++ python-Pympler:

  - Disable test_otracker_diff on aarch64 as it randomly makes the
    check to fail due to worker slowness

++++ python-aiohttp-socks:

  - Update to 0.9.1
    * Update Github CI configuration
    * Update README.md
    * Update .gitignore
    * Move project metadata to pyproject.toml
    * Update pyproject.toml, bump version

++++ python-azure-mgmt-containerinstance:

  - New upstream release
    + Version 10.2.0b1
    + For detailed information about changes see the
    CHANGELOG.md file provided with this package
  - Adjust upstream source name in spec file
  - Drop extra LICENSE.txt as upstream now ships its own
  - Override upstream version with 10.2.0~b1
  - Remove unzip package from BuildRequires
  - Rename LICENSE.txt to LICENSE in %files section
  - Switch source archive format to TAR.GZ
  - Update Requires from setup.py

++++ python-azure-mgmt-datalake-store:

  - New upstream release
    + Version 1.1.0
    + For detailed information about changes see the
    CHANGELOG.md file provided with this package
  - Drop extra LICENSE.txt as upstream now ships its own
  - Override upstream version with 1.1.0~b1
  - Rename LICENSE.txt to LICENSE in %files section
  - Update Requires from setup.py

++++ python-azure-mgmt-postgresqlflexibleservers:

  - New upstream release
    + Version 1.1.0b1
    + For detailed information about changes see the
    CHANGELOG.md file provided with this package
  - Override upstream version with 1.1.0~b1

++++ python-caldav:

  - Update to 1.4.0
    * Lots of work lifting the project up to more modern standards and improving code,
    thanks to Georges Toth (github @sim0nx), Matthias Urlichs (github @smurfix) and
    @ArtemIsmagilov.  While this shouldn't matter for existing users, it will make
    the library more future-proof.
    * Quite long lists of fixes, improvements and some few changes, nothing big, main
    focus is on ensuring compatibility with as many server implementations as possible.
    See below.
    * Partial workaround for https://github.com/python-caldav/caldav/issues/401 - some
    servers require comptype in the search query -
    * At least one bugfix, possibly fixing #399 - the `accept_invite`-method not working
  - https://github.com/python-caldav/caldav/pull/403
    * Fix/workaround for servers sending MAILTO in uppercase
  - https://github.com/python-caldav/caldav/issues/388,
    https://github.com/python-caldav/caldav/issues/399
    and https://github.com/python-caldav/caldav/pull/403
    * `get_duration`: make sure the algorithm doesn't raise an exception comparing dates
    with timestamps - https://github.com/python-caldav/caldav/pull/381
    * `set_due`: make sure the algorithm doesn't raise an exception comparing naive timestamps
    with timezone timestamps - https://github.com/python-caldav/caldav/pull/381
    * Code formatting / style fixes.
    * Jason Yau introduced the possibility to add arbitrary headers - but things like User-Agent
    would anyway always be overwritten.  Now the custom logic takes precedence.  Pull request
    https://github.com/python-caldav/caldav/pull/386, issue https://github.com/python-caldav/caldav/issues/385
    * Search method has some logic handling non-conformant servers (loading data from the server
    if the search response didn't include the icalendar data, ignoring trash from the Google
    server when it returns data without a VTODO/VEVENT/VJOURNAL component), but it was inside
    an if-statement and applied only if Expanded-flag was set to True.  Moved the logic out
    of the if, so it always applies.
    * Revisited a problem that Google sometimes delivers junk when doing searches - credits to
    github user @zhwei in https://github.com/python-caldav/caldav/pull/366
    * There were some compatibility-logic loading objects if the server does not deliver icalendar
    data (as it's suppsoed to do according to the RFC), but only if passing the `expand`-flag to
    the `search`-method.  Fixed that it loads regardless of weather `expand` is set or not.
    Also in https://github.com/python-caldav/caldav/pull/366
    * Tests - lots of work getting as much test code as possible to pass on different servers, and
    now testing also for Python 3.12 - ref https://github.com/python-caldav/caldav/pull/368
    https://github.com/python-caldav/caldav/issues/360 https://github.com/python-caldav/caldav/pull/447
    https://github.com/python-caldav/caldav/pull/369 https://github.com/python-caldav/caldav/pull/370
    https://github.com/python-caldav/caldav/pull/441 https://github.com/python-caldav/caldav/pull/443a
    * The vcal fixup method was converting implicit dates into timestamps in the COMPLETED property, as
    it should be a timestamp according to the RFC - however, the regexp failed on explicit dates.
    Now it will take explicit dates too.  https://github.com/python-caldav/caldav/pull/387
    * Code cleanups and modernizing the code - https://github.com/python-caldav/caldav/pull/404
    https://github.com/python-caldav/caldav/pull/405 https://github.com/python-caldav/caldav/pull/406
    https://github.com/python-caldav/caldav/pull/407 https://github.com/python-caldav/caldav/pull/408
    https://github.com/python-caldav/caldav/pull/409 https://github.com/python-caldav/caldav/pull/412
    https://github.com/python-caldav/caldav/pull/414 https://github.com/python-caldav/caldav/pull/415
    https://github.com/python-caldav/caldav/pull/418 https://github.com/python-caldav/caldav/pull/419
    https://github.com/python-caldav/caldav/pull/417 https://github.com/python-caldav/caldav/pull/421
    https://github.com/python-caldav/caldav/pull/423 https://github.com/python-caldav/caldav/pull/430
    https://github.com/python-caldav/caldav/pull/431 https://github.com/python-caldav/caldav/pull/440
    https://github.com/python-caldav/caldav/pull/365
    * Doc - improved examples, https://github.com/python-caldav/caldav/pull/427
    * Purelymail sends absolute URLs, which is allowed by the RFC but was not supported by the library.
    Fixed in https://github.com/python-caldav/caldav/pull/442
    * In https://github.com/python-caldav/caldav/pull/366, I optimized the logic in `search` a bit, now
    all data from the server not containing a VEVENT, VTODO or VJOURNAL will be thrown away.  I believe
    this won't cause any problems for anyone, as the server should only deliver such components, but
    I may be wrong.
    * Default User-Agent changed from `Mozilla/5` to `python-caldav/{__version__}`
  - https://github.com/python-caldav/caldav/pull/392
    * Change fixup log lvl to warning and merge diff log messages into related parent log by @MrEbbinghaus
    in https://github.com/python-caldav/caldav/pull/438
    * Mandatory fields are now added if trying to save incomplete icalendar data,
    https://github.com/python-caldav/caldav/pull/447
    * Allow to reverse the sorting order on search function by @twissell
  - in https://github.com/python-caldav/caldav/pull/433
    * Work on integrating typing information. Details in
    https://github.com/python-caldav/caldav/pull/358
    * Remove dependency on pytz. Details in https://github.com/python-caldav/caldav/issues/231
    and https://github.com/python-caldav/caldav/pull/363
    * Use setuptools-scm / pyproject.toml (modern packaging). Details in
    https://github.com/python-caldav/caldav/pull/364 and https://github.com/python-caldav/caldav/pull/367
    * Debugging tool - an environment variable can be set, causing the library to spew out server
    communications into files under /tmp.  Details in https://github.com/python-caldav/caldav/pull/249
    and https://github.com/python-caldav/caldav/issues/248
    * Comaptibility matrix for posteo.de servers in `tests/compatibility_issues.py`
    * Added sort_reverse option to the search function to reverse the sorting order of the found objects.
    * It's now possible to specify if `expand` should be done on the server side or client side.  Default
    is as before, expanding on server side, then on the client side if unexpanded data is returned.
    It was found that some servers does expanding, but does not add `RECURRENCE-ID`.
    https://github.com/python-caldav/caldav/pull/447
    * The debug information gathering hook has been in the limbo for a long time, due to security concerns:
  - An attacker that has access to alter the environment the application is running under may cause a
    DoS-attack, filling up available disk space with debug logging.
  - An attacker that has access to alter the environment the application is running under, and access
    to read files under /tmp (files being 0600 and owned by the uid the application is running under),
    will be able to read the communication between the server and the client, communication that may
    be private and confidential.
    * Thinking it through three times, I'm not too concerned - if someone has access to alter the environment
    the process is running under and access to read files run by the uid of the application, then this
    someone should already be trusted and will probably have the possibility to DoS the system or gather
    this communication through other means.
  - Switch build system from setuptools to pyproject.toml
    * Add python-pip and python-wheel to BuildRequires
    * Replace %python_build with %pyproject_wheel
    * Replace %python_install with %pyproject_install
    * Update name for dist directory in %files section

++++ python-exiv2:

  - Fix building
  - Enable tests
  - Add skip_network_tests.patch to mark network-requiring tests
    and skip them

++++ python-hypothesis:

  - Skip tests matching `test_adds_note_showing_which_strategy`
    (gh#HypothesisWorks/hypothesis#4185).
  - Add missing BR: rich.

++++ python-legacycrypt:

  - Initial release of 0.3

++++ python-numpy1:

  - Drop meson-python upper bound
    * https://github.com/numpy/numpy/pull/26301
  - Skip some tests failing on Python 3.13

++++ python-pytest-benchmark:

  - update to 5.1.0:
    * Fixed broken hooks handling on pytest 8.1 or later (the
    TypeError: import_path() missing 1 required keyword-only
    argument: 'consider_namespace_packages' issue). Unfortunately
    this sets the minimum supported pytest version to 8.1.
    * Fixed bad fixture check that broke down then nbmake was
    enabled.
    * Dropped support for now EOL Python 3.8. Also moved tests
    suite to only test the latest pytest versions (8.3.x).
    * Fix generate parametrize tests benchmark csv report errors
    (issue #268). Contributed by Johnny Huang in #269.
    * Added the --benchmark-time-unit cli option for overriding the
    measurement unit used for display. Contributed by Tony Kuo in
    [#257].
    * Fixes spelling in some help texts. Contributed by Eugeniy in
    [#267].
    * Added new cprofile options: --benchmark-cprofile-loops=LOOPS
  - previously profiling only ran the function once, this allow
    customization. --benchmark-cprofile-top=COUNT - allows
    showing more rows. --benchmark-cprofile-dump=[FILENAME-
    PREFIX] - allows saving to a file (that you can load in
    snakeviz, RunSnakeRun or other tools).
    * --benchmark-cprofile-loops=LOOPS - previously profiling only
    ran the function once, this allow customization.
    * --benchmark-cprofile-top=COUNT - allows showing more rows.
    * --benchmark-cprofile-dump=[FILENAME-PREFIX] - allows saving
    to a file (that you can load in snakeviz, RunSnakeRun or
    other tools).
    * Removed hidden dependency on py.path (replaced with pathlib).
  - drop fix-test-fast.patch, py311.patch, fix-test-fast.patch: upstream

++++ python-pytest-httpx:

  - update to 0.34.0:
    * `is_optional` parameter is now available on responses and
    callbacks registration. Allowing to add optional responses
    while keeping other responses as mandatory. Refer to
    documentation for more details.
    * `is_reusable` parameter is now available on responses and
    callbacks registration. Allowing to add multi-match responses
    while keeping other responses as single-match. Refer to
    documentation for more details.
    * `httpx_mock.get_request` will now also propose to refine
    filters if more than one request is found instead of only
    proposing to switch to `httpx_mock.get_requests`.
    * Explicit support for python `3.13`.
    * `should_mock` option (callable returning a boolean) is now
    available, defaulting to always returning `True`. Refer to
    documentation for more details.
    * Matching on the full multipart body can now be performed
    using `match_files` and `match_data` parameters. Refer to
    documentation for more details.
    * Matching on extensions (including timeout) can now be
    performed using `match_extensions` parameter. Refer to
    documentation for more details.
    * The following option is now available:
    * `can_send_already_matched_responses` (boolean), defaulting to
    `False`.
    * Assertion failure message in case of unmatched responses is
    now linking documentation on how to deactivate the check.
    * Assertion failure message in case of unmatched requests is
    now linking documentation on how to deactivate the check.
    * `httpx.TimeoutException` message issued in case of unmatched
    request is now linking documentation on how to reuse
    responses (in case some responses are already matched).
    * Documentation now clearly state the risks associated with
    changing the default options.
    * Assertion failure message in case of unmatched requests at
    teardown is now describing requests in a more user-friendly
    way.
    * Assertion failure message in case of unmatched requests at
    teardown is now prefixing requests with `- ` to highlight the
    fact that this is a list, preventing misapprehension in case
    only one element exists.
    * Assertion failure message in case of unmatched responses at
    teardown is now prefixing responses with `- ` to highlight
    the fact that this is a list, preventing misapprehension in
    case only one element exists.
    * `httpx.TimeoutException` message issued in case of unmatched
    request is now prefixing available responses with `- ` to
    highlight the fact that this is a list, preventing
    misapprehension in case only one element exists.
    * `httpx.TimeoutException` message issued in case of unmatched
    request is now listing unmatched responses (in registration
    order) before already matched one (still in registration
    order).
    * The incentive behind this change is to help identify a
    potential mismatch faster as the first unmatched response is
    the most likely to be the one expected to match.
    * Response description in failure messages
    (`httpx.TimeoutException` message issued in case of unmatched
    request or assertion failure message in case of unmatched
    responses at teardown) is now displaying if the response was
    already matched or not and less misleading in it's phrasing
    about what it can match (a single request by default).
    * ### Changed
    * Last registered matching response will not be reused by
    default anymore in case all matching responses have already
    been sent.
    * This behavior can be changed thanks to the new `pytest.mark.h
    ttpx_mock(can_send_already_matched_responses=True)` option.
    * The incentive behind this change is to spot regression if a
    request was issued more than the expected number of times.
    * `HTTPXMock` class was only exposed for type hinting purpose.
    This is now explained in the class docstring.
    * As a result this is the last time a change to `__init__`
    signature will be documented and considered a breaking
    change.
    * Future changes will not be documented and will be considered
    as internal refactoring not worth a version bump.
    * `__init__` now expects one parameter, the newly introduced
    (since [0.31.0]) options.
    * `HTTPXMockOptions` class was never intended to be exposed and
    is now marked as private.
    * `httpx_mock` marker can now be defined at different levels
    for a single test.
    * It is now possible to match on content provided as async
    iterable by the client.
    * Tests will now fail at teardown by default if some requests
    were issued but were not matched.
    * This behavior can be changed thanks to the new `pytest.mark.h
    ttpx_mock(assert_all_requests_were_expected=False)` option.
    * The incentive behind this change is to spot unexpected
    requests in case code is swallowing `httpx.TimeoutException`.
    * The `httpx_mock` fixture is now configured using a marker
    (many thanks to `Frazer McLean`).
    * ```python
    * # Apply marker to whole module
    * pytestmark = pytest.mark.httpx_mock(assert_all_responses_were
    _requested=False)
    * # Or to specific tests
    * @pytest.mark.httpx_mock(non_mocked_hosts=[...])
    * def test_foo(httpx_mock):
    * ...
    * ```
    * The following options are available:
    * `assert_all_responses_were_requested` (boolean), defaulting
    to `True`.
    * `assert_all_requests_were_expected` (boolean), defaulting to
    `True`.
    * `non_mocked_hosts` (iterable), defaulting to an empty list,
    meaning all hosts are mocked.
    * `httpx_mock.reset` do not expect any parameter anymore and
    will only reset the mock state (no assertions will be
    performed).
    * `pytest` `7` is not supported anymore (`pytest` `8` has been
    out for 9 months already).
    * `assert_all_responses_were_requested` fixture is not
    available anymore, use `pytest.mark.httpx_mock(assert_all_res
    ponses_were_requested=False)` instead.
    * `non_mocked_hosts` fixture is not available anymore, use
    `pytest.mark.httpx_mock(non_mocked_hosts=[])` instead.

++++ python-pytest-rerunfailures:

  - update to 15.0:
    * Drop support for Python 3.8.
    * Drop support for pytest < 7.4.
    * Fix compatibility with pytest 8.2.
    * Add support for pytest 8.2, 8.3.
    * Add --fail-on-flaky option to fail the test run with custom
    exit code when test passed on rerun.

++++ python-pytest-spec:

  - update to 4.0.0:
    * v.4.0.0
    * Drop support for Python 2.7, 3.5, 3.6, 3.7
    * Added support for Python 3.11, 3.12
    * Migrate project back to pip from poetry
    * Replace mock by version from stdlib
  - drop python-pytest-spec-nopython2.patch: upstream

++++ python-python-gvm:

  - Add opensuse-fix-tests-1-core.patch custom patch to fix tests
    running in OBS with limited resources, running on 1-core-VM.
    bsc#1233398

++++ python-tornado6:

  - Update to 6.4.2:
    + Security Improvements:
    * Parsing of the cookie header is now much more efficient. The older
    algorithm sometimes had quadratic performance which allowed for a
    denial-of-service attack in which the server would spend excessive
    CPU time parsing cookies and block the event loop.
    (CVE-2024-52804, bsc#1233668)

++++ qjackctl:

  - Update to 1.0.3
  - Long missing D-Bus method slot added: "reset"
    (dbus-send --system / org.rncbc.qjackctl.reset).
  - Graph: Node reference positioning changed to the top-left corner,
    improving the base snapping-to-grid perception.
  - Prepping up next development cycle (Qt >= 6.8)
  - Changes from 1.0.2
  - Graph: when visible the thumb-view may now be drag-moved over
    to a different corner position anytime.
  - Session: introducing new Save session name/directory dialog.
  - Connections: connector line colors are now uniquely mapped on
    a (readable/output) client name basis.

++++ qubesome:

  - Update to version 0.0.7:
    * host-run: Convert output to string
    * start: Refactor Config loading Config loading needs to behave in different ways than other commands like xdg-open and run. Move it inside the start package instead.
    * run: Simplify GITDIR sourcing
    * inception: Ignore config and profile selection
    * build(deps): bump github.com/urfave/cli/v3
    * build(deps): bump anchore/sbom-action from 0.17.7 to 0.17.8
    * build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
    * build(deps): bump google.golang.org/protobuf from 1.34.2 to 1.35.2
    * Add examples for cli commands
    * Make profile setting optional Some commands in specific scenarios can infer the profile, decreasing the amount of parameters or flags to be used. Examples:
    * wayland: Show experimental warning for all subcommands
    * Add host-run subcommand
    * Refactor inception to use gRPC
    * build: Fix gofmt violations
    * build: Enable dependabot
    * build: Lock goreleaser to v2
    * Add autocomplete subcommand
    * Add flag -runner to enable runner override Runners can be defined at the workload level. Now those runners can be overriden by the -runner flag.
    * deps: Print output in tabular format
    * build: Add GH attestation for release artefacts
    * build: Add version field to goreleaser config
    * build: Bump goreleaser-action to v6
    * clipboard: Add subcommand to-host
    * build: Use urfave/cli for CLI wiring
    * profile: Fix issue finding workloads dir For profiles started from a Git repository, the Config.RootDir was being initiated with a full path. Later in the workload run process, that full path was being joined to another full path, leading to an invalid workload dir.
    * build: Update main.go reference on goreleaser.
    * profiles: Preemptive pull workload images
    * profiles: Clean up CLI messages
    * wayland: Set additional params for xwayland-run Disable testing extensions and ensure the auth file is set.
    * Add QS_DEBUG=true to run on debug mode
    * wayland: Pass XDG_RUNTIME_DIR to profile container
    * wayland: Initial support for profiles
    * build: Fix golangci-lint warnings
    * profiles: Remove dbus code This feature was work in progress and can be removed until it is fully implemented.
    * build: Bump golangci-lint to v1.62.0
    * build: Run make test and make verify on push
    * build: Bump Go to v1.23
    * build: Bump dependencies
    * build: Move main.go for easier installation
    * Add initial support for podman
    * mime: Rename default mime handler to qubesome
    * Add version subcommand
    * Increase workload args max length to 250
    * Update install steps

++++ re-flex:

  - Update to version 5.0.1:
    * faster SIMD regex search methods
    * improved anchor and word boundary matching speed and support
    * new std::string_view strview() matcher method

++++ rss-glx:

  - Moved binaries to libexecdir to avoid conflicts with other packages

++++ scsh:

  - Update scsh to git commit 6770db2
  - Delete scsh-install-lib-1.3.0.tar.gz as not used anymore
  - Make it build even with scheme48 >= 1.9.2

++++ scsh-base:

  - Update scsh to git commit 6770db2
  - Delete scsh-install-lib-1.3.0.tar.gz as not used anymore
  - Make it build even with scheme48 >= 1.9.2

++++ seamonkey:

  - disable --with-system-icu on Tumbleweed due to
    https://bugzilla.mozilla.org/show_bug.cgi?id=1933117
  - remove obsolete patch mozilla-bmo1862601.patch

++++ shared-mime-info:

  - Uninstall silently if update-mime-database is not present
    (bsc#1231463).

++++ systemd-presets-branding-openSUSE:

  - enable the supergfxd service for hybrid graphic systems

++++ urlscan:

  - Update to urlscan 1.0.6
    * Bugfix in GitHub Action
    * Github action update to release to pypi and github on tag push
    and release to testpypi on commit.
    * Keybindings for page up/down

++++ yast2-trans:

  - Update to version 84.87.20241123.891024d88b:
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Finnish)
    * Translated using Weblate (Swedish)

------------------------------------------------------------------
------------------  2024-11-24  -  Nov 24 2024  -------------------
------------------------------------------------------------------

++++ alsa:

  - Fix header inclusions for implicit dependnecies (bsc#1233682)
    0002-configure-Make-sequencer-dependent-on-rawmidi.patch
    0003-seq-include-UMP-headers.patch

++++ aqbanking:

  - Update to 6.5.9 (beta)
  - Changelog for 6.5.6 (beta)
    + fixed bugs with "Decoupled TAN"
    + first server tests successful (thanks to Anselm!)
  - Changelog for 6.5.6 (beta)
    + first version with support for HKTAN#7 and first implementation
    of "Decoupled TAN" for app-based TAN entry

++++ extension-manager:

  - update to 0.5.1+244:
    * general: Handle not found errors with empty page
    * local: Regenerate shell-dbus-interface
    * cleanup: Add and update license headers
    * installed-page: Add local search
    * manager: Unify user and system extensions list property
    * resource: Make path dependent on app_id
    * comment-dialog: Add license header
    * comment-dialog: Improve network error handling
    * upgrade-assistant: Improve network error handling
    * detail-view: Improve network error handling
    * browse-page: Improve network error handling
    * workflows: Add missing libxml2 dependency
    * drop text-engine
    * request-handler: Handle http status code
    * readme: Update dependencies
    * comment: Use the new HTML viewer
    * utils: Introduce a simple HTML viewer
    * comment-tile: Use GtkLabel as a comment text viewer
    * browse-page: Port load more results button to AdwButtonRow
    * rating: Fix warnings when finalizing with remaining child widgets
    * comment-tile: Fix warnings when finalizing with remaining child widgets
    * upgrade-assistant: g_print -> g_info
    * window: Stop manually setting a shortcut controller
    * detail-view: Remove unused variables
    * window: Stop explicitly setting toast timeout
    * window: Drop unused version check code
    * accessibility improvements
    * browse-page: Focus first new row after loading more results
    * window: Add mnemonic to toast button
    * info-bar: Rework items into AdwActionRow
    * rating: Add tooltip
    * extension-row: Hide version label if unavailable
    * extension-row: Improve accessibility
    * upgrade-assistant: Improve accessibility
    * detail-view: Improve accessibility
    * screenshot: Set accessible role
    * installed-page: Port updates info bar to AdwBanner
    * browse-page: Remove unused header
    * browse-page: Use search entry setter
    * browse-page: Enable type-ahead search
    * search-row: Remove unused import
    * local: Add support for version-name
    * window: Show badge number when updates are available
    * browse-page: Increase search-delay value
    * app: Add back help overlay
    * icons: Remove zoom symbolics
    * app: Fix criticals in master runtime
    * backtrace: Fix incompatible pointer types
    * comment-tile: Adapt to text-engine changes
    * Update com.mattjakeman.ExtensionManager.desktop.in.in
    * comment-tile: Add date label
    * comment: Add date property
    * Display info icon for Initialized/Inactive extension state
    * Set the extension state as a tooltip for extension toggle button
    * detail-view: Add donation row
    * search-result: Add donation urls property
    * Fix some warnings

++++ file-roller:

  - Update to version 44.4:
    + Features:
  - Added bzip3 support.
  - File selector: show volumes and allow to mount unmounted
    volumes.
  - New archive dialog: allow to use all the possible extensions
    a mime type supports, and allow to specify a name without
    extension, which will be concatenated to the selected
    extension to get the full name.
  - File selector: save and restore the sort order.
  - Properties dialog: show an icon, make the headerbar flat.
    + Bugfixes:
  - Error opening rar archive in RAR4 format and password
    protected.
  - Rar: fixed file list parsing for some encrypted archives.
  - Fixed error when renaming a file inside an encrypted archive.
  - Disabled the native appchooser by default.
  - 'Show destination' sometimes opens the wrong folder.
  - 'Show destination' sometimes doesn't show anything.
  - Use the native appchooser only for a single file.
  - Show flat headerbar in empty state.
  - Fixed error messages impossible to close.
  - Fixed segfaults when opening an empty .deb file.
  - --extract-to keeps asking to create a directory.
  - Fixed wrong context menu item activation.
  - Avoid the exit timeout unless file-roller was launched with
    `--service`.
  - Error when opening the created archive after saving as 7zip
    multi-volume.
    + Updated translations.

++++ gtk4:

  - Update to version 4.16.7:
    + Text: Reduce the size of error underlines.
    + Accessibility:
  - Fix a wrong return value type.
  - Fix an invalid free call.

++++ gnome-remote-desktop:

  - Update to version 47.2:
    + Updated translations.

++++ gnome-terminal:

  - Update to version 3.54.2:
    + Updated translations.

++++ gnucash:

  - Add gnucash-icu.patch: Fix build with recent ICU libraries
  - Add gnucash-swig43.patch: Fix build with SWIG 4.3

++++ gpxsee:

  - Update to version 13.32
    * Improved Mapsforge maps rendering performance.
    * Improved Mapsforge map render theme.

++++ gwenhywfar:

  - Update to 5.11.2 (beta)
  - Changelog for 5.11.0 (beta)
    + first version with support for HKTAN#7 and first implementation
    of "Decoupled TAN" for app-based TAN input

++++ spooles:

  - Fix build failure due to stricter GCC checks, add
    0001-Fix-compile-error-due-to-apparent-invalid-cast.patch

++++ spooles-openmpi:

  - Fix build failure due to stricter GCC checks, add
    0001-Fix-compile-error-due-to-apparent-invalid-cast.patch

++++ vte:

  - Update to version 0.78.2:
    + build: Fix typo in pread check
    + emulation: Use U+2426 for SUB
    + lib: Remove an unnecessary move
    + widget:
  - Use correct type for out param
  - Use correct termprop name

++++ nasc:

  - fix build by using CFLAGS="-Wno-implicit-function-declaration"
  - update spec file for Leap 16.0:
    * remove %suse_update_desktop_file
    * use autosetup
    * remove packaging for Leap < 1500
    * update to newer upstream url

++++ ofono:

  - Update to version 2.13
    * Add support for handling QMI PIN and Lock methods.
    * Add support for handling QMI WWAN interfaces.
    * Add support for handling RMNet interfaces.

++++ python-exiv2:

  - Update to 0.17.1:
    * Update README and INSTALL docs
    * Allow linux libdir name to be 'lib64' or 'lib'
    * Test localised exception with non-ASCII characters
  - Updates from 0.17.0:
    * API change: derived classes of BasicIo are omitted from Python.
    * enableBMFF() function is deprecated.
    * Documentation is available on
    https://python-exiv2.readthedocs.io/
  - Updates from 0.16.2:
    * Removed AnyError alias of Exiv2Error exception.
    * Metadatum.print() method is no longer renamed to _print.
    * Improved handling of enums:
    * Enum results are returned as Python enum instead of int.
    * Passing ints as enum parameters is deprecated.
    * Added dict-like behaviour to "data" structs.
    * Log handlers can be set/cleared from Python.
    * SWIG v4.1.0 or later required to run SWIG.
  - Updates from 0.16.0:
    * Include native language support in Windows binary wheel builds.
    * API change: DateValue.getDate() returns Python dict.
    * API change: TimeValue.getTime() returns Python dict.
    * Deprecated: exiv2.Date and exiv2.Time objects.
    * Added buffer interface to PreviewImage
    * Set datum value from Python object directly instead of via
    string.
    * Moved Position enum to BasicIo class.
    * Moved CharsetId enum to CommentValue class.
    * Moved XmpArrayType and XmpStruct enums to XmpValue class.
    * Added enums for LogMsg.Level
    * More exiv2 structs are iterable for easy conversion to Python
    dict.
  - Updates from 0.15.0:
    * Added __version_tuple__ for easy runtime version testing.
    * exiv2.testVersion() can be called from Python.
    * exiv2.DataBuf can be created from Python data.
    * Most data() methods return a Python memoryview.
    * exiv2.DataBuf and exiv2.BasicIo have writeable Python buffer
    interface.

++++ python-statsd:

  - update to 4.0.1:
    * Updated trove classifiers, see #174
  - update to 4.0.0:
    * Updates support to Python 3.7 through 3.11.
    * Added `close()` method to UDP-based `StatsClient`.
    * Drops support for Python 2.
    * Using a timing decorator on an async function should now
    properly measure the execution time, instead of counting
    immediately. See #119.

++++ python-xarray:

  - skip test test_asi8 on 32bit, results in "OverflowError: Python int too large to convert to C long"
  - delete obsolete patches xarray-pr9356-dasktests.patch, xarray-pr9321-dasktests.patch and xarray-pr9403-np2.1-scalar.patch
  - update to version .2024.11.0:
  - This release brings better support for wrapping JAX arrays and Astropy Quantity objects, :py:meth:`DataTree.persist`, algorithmic improvements:
  - to many methods with dask (:py:meth:`Dataset.polyfit`, :py:meth:`Dataset.ffill`, :py:meth:`Dataset.bfill`, rolling reductions), and bug fixes.:
  - Thanks to the 22 contributors to this release:
  - Benoit Bovy, Deepak Cherian, Dimitri Papadopoulos Orfanos, Holly Mandel, James Bourbeau, Joe Hamman, Justus Magin, Kai Mühlbauer, Lukas Trippe, Mathias Hauser, Maximilian Roos, Michael Niklas, Pascal Bourgault, Patrick Hoefler, Sam Levang, Sarah Charlotte Johnson, Scott Huberty, Stephan Hoyer, Tom Nicholas, Virgile Andreani, joseph nowak and tvo:
  - New Features:
  - Added :py:meth:`DataTree.persist` method (:issue:`9675`, :pull:`9682`).
    By `Sam Levang <https://github.com/slevang>`_.
  - Added ``write_inherited_coords`` option to :py:meth:`DataTree.to_netcdf`
    and :py:meth:`DataTree.to_zarr` (:pull:`9677`).
    By `Stephan Hoyer <https://github.com/shoyer>`_.
  - Support lazy grouping by dask arrays, and allow specifying ordered groups with ``UniqueGrouper(labels=["a", "b", "c"])``
    (:issue:`2852`, :issue:`757`).
    By `Deepak Cherian <https://github.com/dcherian>`_.
  - Add new ``automatic_rechunk`` kwarg to :py:meth:`DataArrayRolling.construct` and
    :py:meth:`DatasetRolling.construct`. This is only useful on ``dask>=2024.11.0``
    (:issue:`9550`). By `Deepak Cherian <https://github.com/dcherian>`_.
  - Optimize ffill, bfill with dask when limit is specified
    (:pull:`9771`).
    By `Joseph Nowak <https://github.com/josephnowak>`_, and
    `Patrick Hoefler <https://github.com/phofl>`_.
  - Allow wrapping ``np.ndarray`` subclasses, e.g. ``astropy.units.Quantity`` (:issue:`9704`, :pull:`9760`).
    By `Sam Levang <https://github.com/slevang>`_ and `Tien Vo <https://github.com/tien-vo>`_.
  - Optimize :py:meth:`DataArray.polyfit` and :py:meth:`Dataset.polyfit` with dask, when used with
    arrays with more than two dimensions.
    (:issue:`5629`). By `Deepak Cherian <https://github.com/dcherian>`_.
  - Support for directly opening remote files as string paths (for example, ``s3://bucket/data.nc``)
    with ``fsspec`` when using the ``h5netcdf`` engine (:issue:`9723`, :pull:`9797`).
    By `James Bourbeau <https://github.com/jrbourbeau>`_.
  - Re-implement the :py:mod:`ufuncs` module, which now dynamically dispatches to the
    underlying array's backend. Provides better support for certain wrapped array types
    like ``jax.numpy.ndarray``. (:issue:`7848`, :pull:`9776`).
    By `Sam Levang <https://github.com/slevang>`_.
  - Speed up loading of large zarr stores using dask arrays. (:issue:`8902`)
    By `Deepak Cherian <https://github.com/dcherian>`_.
  - Breaking Changes:
  - The minimum versions of some dependencies were changed
    ===================== =========  =======
    Package                    Old      New
    ===================== =========  =======
    boto3                    1.28     1.29
    dask-core             2023.9   2023.11
    distributed           2023.9   2023.11
    h5netcdf                 1.2      1.3
    numbagg                0.2.1      0.6
    typing_extensions       4.7       4.8
    ===================== =========  =======
  - Deprecations:
  - Grouping by a chunked array (e.g. dask or cubed) currently eagerly loads that variable in to
    memory. This behaviour is deprecated. If eager loading was intended, please load such arrays
    manually using ``.load()`` or ``.compute()``. Else pass ``eagerly_compute_group=False``, and
    provide expected group labels using the ``labels`` kwarg to a grouper object such as
    :py:class:`grouper.UniqueGrouper` or :py:class:`grouper.BinGrouper`.
  - Bug fixes:
  - Fix inadvertent deep-copying of child data in DataTree (:issue:`9683`,
    :pull:`9684`).
    By `Stephan Hoyer <https://github.com/shoyer>`_.
  - Avoid including parent groups when writing DataTree subgroups to Zarr or
    netCDF (:pull:`9682`).
    By `Stephan Hoyer <https://github.com/shoyer>`_.
  - Fix regression in the interoperability of :py:meth:`DataArray.polyfit` and :py:meth:`xr.polyval` for date-time coordinates. (:pull:`9691`).
    By `Pascal Bourgault <https://github.com/aulemahal>`_.
  - Fix CF decoding of ``grid_mapping`` to allow all possible formats, add tests (:issue:`9761`, :pull:`9765`).
    By `Kai Mühlbauer <https://github.com/kmuehlbauer>`_.
  - Add ``User-Agent`` to request-headers when retrieving tutorial data (:issue:`9774`, :pull:`9782`)
    By `Kai Mühlbauer <https://github.com/kmuehlbauer>`_.
  - Documentation:
  - Mention attribute peculiarities in docs/docstrings (:issue:`4798`, :pull:`9700`).
    By `Kai Mühlbauer <https://github.com/kmuehlbauer>`_.
  - Internal Changes:
  - ``persist`` methods now route through the :py:class:`xr.core.parallelcompat.ChunkManagerEntrypoint` (:pull:`9682`).
    By `Sam Levang <https://github.com/slevang>`_.
  - update to version 2024.10.0:
  - This release brings official support for ``xarray.DataTree``, and compatibility with zarr-python v3!:
  - Aside from these two huge features, it also improves support for vectorised interpolation and fixes various bugs.:
  - Thanks to the 31 contributors to this release:
  - Alfonso Ladino, DWesl, Deepak Cherian, Eni, Etienne Schalk, Holly Mandel, Ilan Gold, Illviljan, Joe Hamman, Justus Magin, Kai Mühlbauer, Karl Krauth, Mark Harfouche, Martey Dodoo, Matt Savoie, Maximilian Roos, Patrick Hoefler, Peter Hill, Renat Sibgatulin, Ryan Abernathey, Spencer Clark, Stephan Hoyer, Tom Augspurger, Tom Nicholas, Vecko, Virgile Andreani, Yvonne Fröhlich, carschandler, joseph nowak, mgunyho and owenlittlejohns:
  - New Features:
  - ``DataTree`` related functionality is now exposed in the main ``xarray`` public
    API. This includes: ``xarray.DataTree``, ``xarray.open_datatree``, ``xarray.open_groups``,
    ``xarray.map_over_datasets``, ``xarray.group_subtrees``,
    ``xarray.register_datatree_accessor`` and ``xarray.testing.assert_isomorphic``.
    By `Owen Littlejohns <https://github.com/owenlittlejohns>`_,
    `Eni Awowale <https://github.com/eni-awowale>`_,
    `Matt Savoie <https://github.com/flamingbear>`_,
    `Stephan Hoyer <https://github.com/shoyer>`_,
    `Tom Nicholas <https://github.com/TomNicholas>`_,
    `Justus Magin <https://github.com/keewis>`_, and
    `Alfonso Ladino <https://github.com/aladinor>`_.
  - A migration guide for users of the prototype `xarray-contrib/datatree repository <https://github.com/xarray-contrib/datatree>`_ has been added, and can be found in the ``DATATREE_MIGRATION_GUIDE.md`` file in the repository root.
    By `Tom Nicholas <https://github.com/TomNicholas>`_.
  - Support for Zarr-Python 3 (:issue:`95515`, :pull:`9552`).
    By `Tom Augspurger <https://github.com/TomAugspurger>`_,
    `Ryan Abernathey <https://github.com/rabernat>`_ and
    `Joe Hamman <https://github.com/jhamman>`_.
  - Added zarr backends for :py:func:`open_groups` (:issue:`9430`, :pull:`9469`).
    By `Eni Awowale <https://github.com/eni-awowale>`_.
  - Added support for vectorized interpolation using additional interpolators
    from the ``scipy.interpolate`` module (:issue:`9049`, :pull:`9526`).
    By `Holly Mandel <https://github.com/hollymandel>`_.
  - Implement handling of complex numbers (netcdf4/h5netcdf) and enums (h5netcdf) (:issue:`9246`, :issue:`3297`, :pull:`9509`).
    By `Kai Mühlbauer <https://github.com/kmuehlbauer>`_.
  - Fix passing missing arguments to when opening hdf5 and netCDF4 datatrees
    (:issue:`9427`, :pull:`9428`).
    By `Alfonso Ladino <https://github.com/aladinor>`_.
  - Bug fixes:
  - Make illegal path-like variable names when constructing a DataTree from a Dataset
    (:issue:`9339`, :pull:`9378`)
    By `Etienne Schalk <https://github.com/etienneschalk>`_.
  - Work around `upstream pandas issue
    <https://github.com/pandas-dev/pandas/issues/56996>`_ to ensure that we can
    decode times encoded with small integer dtype values (e.g. ``np.int32``) in
    environments with NumPy 2.0 or greater without needing to fall back to cftime
    (:pull:`9518`). By `Spencer Clark <https://github.com/spencerkclark>`_.
  - Fix bug when encoding times with missing values as floats in the case when
    the non-missing times could in theory be encoded with integers
    (:issue:`9488`, :pull:`9497`). By `Spencer Clark
    <https://github.com/spencerkclark>`_.
  - Fix a few bugs affecting groupby reductions with ``flox``. (:issue:`8090`, :issue:`9398`, :issue:`9648`).
  - Fix a few bugs affecting groupby reductions with ``flox``. (:issue:`8090`, :issue:`9398`).
    By `Deepak Cherian <https://github.com/dcherian>`_.
  - Fix the safe_chunks validation option on the to_zarr method
    (:issue:`5511`, :pull:`9559`). By `Joseph Nowak
    <https://github.com/josephnowak>`_.
  - Fix binning by multiple variables where some bins have no observations. (:issue:`9630`).
    By `Deepak Cherian <https://github.com/dcherian>`_.
  - Fix issue where polyfit wouldn't handle non-dimension coordinates. (:issue:`4375`, :pull:`9369`)
    By `Karl Krauth <https://github.com/Karl-Krauth>`_.
  - Documentation:
  - Migrate documentation for ``datatree`` into main ``xarray`` documentation (:pull:`9033`).
    For information on previous ``datatree`` releases, please see:
    `datatree's historical release notes <https://xarray-datatree.readthedocs.io/en/latest/>`_.
    By `Owen Littlejohns <https://github.com/owenlittlejohns>`_, `Matt Savoie <https://github.com/flamingbear>`_, and
    `Tom Nicholas <https://github.com/TomNicholas>`_.
  - Internal Changes:
  - update to version 2024.09.0:
  - This release drops support for Python 3.9, and adds support for grouping by :ref:`multiple arrays <groupby.multiple>`, while providing numerous performance improvements and bug fixes.:
  - Thanks to the 33 contributors to this release:
  - Alfonso Ladino, Andrew Scherer, Anurag Nayak, David Hoese, Deepak Cherian, Diogo Teles Sant'Anna, Dom, Elliott Sales de Andrade, Eni, Holly Mandel, Illviljan, Jack Kelly, Julius Busecke, Justus Magin, Kai Mühlbauer, Manish Kumar Gupta, Matt Savoie, Maximilian Roos, Michele Claus, Miguel Jimenez, Niclas Rieger, Pascal Bourgault, Philip Chmielowiec, Spencer Clark, Stephan Hoyer, Tao Xin, Tiago Sanona, TimothyCera-NOAA, Tom Nicholas, Tom White, Virgile Andreani, oliverhiggs and tiago:
  - New Features:
  - Add :py:attr:`~core.accessor_dt.DatetimeAccessor.days_in_year` and
    :py:attr:`~core.accessor_dt.DatetimeAccessor.decimal_year` to the
    ``DatetimeAccessor`` on ``xr.DataArray``. (:pull:`9105`).
    By `Pascal Bourgault <https://github.com/aulemahal>`_.
  - Performance:
  - Make chunk manager an option in ``set_options`` (:pull:`9362`).
    By `Tom White <https://github.com/tomwhite>`_.
  - Support for :ref:`grouping by multiple variables <groupby.multiple>`.
    This is quite new, so please check your results and report bugs.
    Binary operations after grouping by multiple arrays are not supported yet.
    (:issue:`1056`, :issue:`9332`, :issue:`324`, :pull:`9372`).
    By `Deepak Cherian <https://github.com/dcherian>`_.
  - Allow data variable specific ``constant_values`` in the dataset ``pad`` function (:pull:`9353`).
    By `Tiago Sanona <https://github.com/tsanona>`_.
  - Speed up grouping by avoiding deep-copy of non-dimension coordinates (:issue:`9426`, :pull:`9393`)
    By `Deepak Cherian <https://github.com/dcherian>`_.
  - Breaking changes:
  - Support for ``python 3.9`` has been dropped (:pull:`8937`)
  - The minimum versions of some dependencies were changed
    ===================== =========  =======
    Package                    Old      New
    ===================== =========  =======
    boto3                   1.26      1.28
    cartopy                 0.21      0.22
    dask-core             2023.4    2023.9
    distributed           2023.4    2023.9
    h5netcdf                1.1        1.2
    iris                    3.4        3.7
    numba                   0.56      0.57
    numpy                   1.23      1.24
    pandas                  2.0        2.1
    scipy                   1.10      1.11
    typing_extensions       4.5        4.7
    zarr                    2.14      2.16
    ===================== =========  =======
  - Bug fixes:
  - Fix bug with rechunking to a frequency when some periods contain no data (:issue:`9360`).
    By `Deepak Cherian <https://github.com/dcherian>`_.
  - Fix bug causing ``DataTree.from_dict`` to be sensitive to insertion order (:issue:`9276`, :pull:`9292`).
    By `Tom Nicholas <https://github.com/TomNicholas>`_.
  - Fix resampling error with monthly, quarterly, or yearly frequencies with
    cftime when the time bins straddle the date "0001-01-01". For example, this
    can happen in certain circumstances when the time coordinate contains the
    date "0001-01-01". (:issue:`9108`, :pull:`9116`) By `Spencer Clark
    <https://github.com/spencerkclark>`_ and `Deepak Cherian
    <https://github.com/dcherian>`_.
  - Fix issue with passing parameters to ZarrStore.open_store when opening
    datatree in zarr format (:issue:`9376`, :pull:`9377`).
    By `Alfonso Ladino <https://github.com/aladinor>`_
  - Fix deprecation warning that was raised when calling ``np.array`` on an ``xr.DataArray``
    in NumPy 2.0 (:issue:`9312`, :pull:`9393`)
    By `Andrew Scherer <https://github.com/andrew-s28>`_.
  - Fix passing missing arguments to when opening hdf5 and netCDF4 datatrees
    (:issue:`9427`, :pull:`9428`).
    By `Alfonso Ladino <https://github.com/aladinor>`_.
  - Fix support for using ``pandas.DateOffset``, ``pandas.Timedelta``, and
    ``datetime.timedelta`` objects as ``resample`` frequencies
    (:issue:`9408`, :pull:`9413`).
    By `Oliver Higgs <https://github.com/oliverhiggs>`_.
  - Internal Changes:
  - Re-enable testing ``pydap`` backend with ``numpy>=2`` (:pull:`9391`).
    By `Miguel Jimenez <https://github.com/Mikejmnez>`_ .
  - disable the 'parallel' subpackage because dask is unavailable 3.12, which is because numba is unavailable on 3.13
    https://build.opensuse.org/request/show/1225144
    https://github.com/numba/numba/issues/9760
  - disabled tests requiring dask

++++ quilter:

  - fix build by passing -Wno-int-conversion -Wno-incompatible-pointer-types
    as CFLAGS
  - update spec file for Leap 16.0:
    * remove %suse_update_desktop_file
    * remove recommending lang package
    * remove mentions of elementary

++++ screencast:

  - fix build by using CFLAGS="-Wno-implicit-function-declaration"
  - update spec file for Leap 16.0:
    * remove %suse_update_desktop_file
    * remove recommending lang package
    * use autosetup
    * remove HiDPI workaround

++++ typescript:

  - Update to version 5.7.2
    * New features:
    + Checks for Never-Initialized Variables
    + Path Rewriting for Relative Paths
    + Support for --target es2024 and --lib es2024
    + Searching Ancestor Configuration Files for Project Ownership
    + Faster Project Ownership Checks in Editors for Composite Projects
    + Validated JSON Imports in --module nodenext
    + Support for V8 Compile Caching in Node.js
    * Notable Behavioral Changes:
    + lib.d.ts Types generated for the DOM may have an impact on type-checking
    your codebase.
    + TypedArrays Are Now Generic Over ArrayBufferLike
    + Creating Index Signatures from Non-Literal Method Names in Classes
    + More Implicit any Errors on Functions Returning null and undefined
    For the full changelog see https://devblogs.microsoft.com/typescript/announcing-typescript-5-7/

++++ zk:

  - added fix_test.patch to fix build fail due to test TestFormatDateHelperElapsedYear

------------------------------------------------------------------
------------------  2024-11-23  -  Nov 23 2024  -------------------
------------------------------------------------------------------

++++ AdwSteamGtk:

  - update to 0.7.2:
    * Improved error handling when retrieving window control settings through portal
  - switch to _datadir/icons, so Leap16 builds

++++ LiE:

  - Add reproducible-noaslr.patch (boo#1231626)

++++ MozillaFirefox:

  - add mozilla-python313.patch to fix build with python 3.13+

++++ crmsh:

  - Update to version 5.0.0+20241123.9b1d80fb:
    * Fix: behave: systemd bpf-restrict-fs fails in opensuse tumbleweed

++++ dxvk:

  - Update to 2.5.1:
    * Fixed a major regression where anisotropic filtering would not work correctly in D3D9 games
    * Fixed some build issues with dxvk-native
    * Fixed some build issues with recent versions of clang
    * GTA Trilogy Definitive Edition: Work around a crash when HDR is enabled
    * Note: Since these games use Unreal Engine 4, HDR is unsupported in D3D11 mode

++++ gnome-doc-utils:

  - add python3-setuptools to fix build with python 3.13+

++++ gnome-maps:

  - Update to version 47.2:
    + Fix a bug where the zoom level was reset to 0 when opening a
    geo: URI not specifying an explicit zoom level.
    + Updated translatations.

++++ gnome-online-accounts:

  - Update to version 3.52.2:
    + Bugs fixed:
  - goadavclient.c: add WebDAV default candidate to test
  - goafedoraprovider: fix use-after-free
    + Updated translations.

++++ gnome-user-share:

  - Update to version 47.2:
    + Fix a compiling issue for non-gnu C toolchain.

++++ jack:

  - add python313-waflib.patch to fix build with python 3.13

++++ luajit2:

  - Updated to 2.1.20241113 (2.1.1731486438).
    * Upstream doesn't provide a ChangeLog.

++++ opencv:

  - fix build with python 3.13 (needs python-setuptools)

++++ vkd3d:

  - Update to version 1.14:
  - libvkd3d
    Depth bounds can be changed dynamically using the
    OMSetDepthBounds() method of the ID3D12GraphicsCommandList1
    interface.
    The new VKD3D_CAPS_OVERRIDE environment variable can be used
    to override the value of capabilities like the maximum feature
    level and resource binding tier reported to applications.
  - libvkd3d-shader
    Too long for changelog, for full changes, visit:
    https://gitlab.winehq.org/wine/vkd3d/-/blob/master/ChangeLog.md
  - libvkd3d-utils
    The GetDesc() method of the ID3D12ShaderReflection interface
    returned by D3DReflect() returns shader version information.
    New interfaces:
    D3DCompile2VKD3D() is a variant of D3DCompile2() that
    allows targeting the behaviour of a specific d3dcompiler
    version.
  - vkd3d-compiler
    The ‘--alias-double-as-float’ option specifies that the
    ‘double’ type behaves as an alias for the ‘float’ type in HLSL
    sources with shader model 1-3 target profiles.
    The ‘fx’ source type specifies binary Direct3D effects.
    The ‘msl’ target type specifies Metal Shading Language
    shaders.

++++ loupe:

  - Update to version 47.2:
    + Don't call style manager in application constructor since this
    is too early. Do it in startup instead. Without this fix, GTK
    4.17.0 will terminate the app on startup.

++++ minetest:

  - Update to version 5.10.0:
    * Note: The engine has renamed to Luanti and this is the first
    release with the new name! For more information read:
    https://blog.minetest.net/2024/10/13/Introducing-Our-New-Name/
    * Full changes:
    https://dev.minetest.net/Changelog#5.9.1_.E2.86.92_5.10.0

++++ python-Pallets-Sphinx-Themes:

  - update to 2.3.0:
    * When getting the canonical URL on Read the Docs, replace the
    path with /en/stable/ instead of /page/. This can be
    configured with rtd_canonical_path. :pr:`122`
    * The version banner can be disabled by setting version_banner
    = False. On Read the Docs, it is disabled when building the
    stable version or PRs. :pr:`123`

++++ python-beniget:

  - update to 0.4.2.post1:
    * remove setuptools from runtime dependencies

++++ python-cmd2:

  - Update to version 2.5.7
    * Fixed issue where argument parsers for overridden commands
    were not being created..
    * Fixed issue where Cmd.ppaged() was not writing to the passed
    in destination.

++++ python-cmyt:

  - skip failing test on 32bit platforms

++++ python-django-environ:

  - update to 0.11.2:
    * Revert "Add variable expansion." feature
    * Revert "Add interpolate argument to avoid resolving proxied
    values." feature
    * Added support for Django 4.2
    * Added support for secure Elasticsearch connections
    * Added variable expansion
    * Added capability to handle comments after #, after quoted values,
    * Added support for ``interpolate`` parameter
    * Use the core redis library by default if running Django >= 4.0
    * Value of dict can now contain an equal sign
    * Added support for Python 3.11.
    * Added ``CONN_HEALTH_CHECKS`` to database base options
    * Added ``encoding`` parameter to ``read_env`` with default
    value 'utf8'
    * Added support for Django 4.1

++++ python-dulwich:

  - update to 0.22.6:
    * ``ObjectStore.iter_prefix``: fix handling of missing
    loose object directories. (Jelmer Vernooij)
    * Reject invalid refcontainer values (not 40 characters or
    symref).
    * Add type hints to various functions. (Castedo Ellerman)
    * Drop support for Python 3.8. (Jelmer Vernooij)
    * Fix refspec handling in porcelain.pull. (Jelmer Vernooij)
    * Drop broken refspec support in porcelain.clone.
    * Provide ``ref_prefix`` functionality client-side
    if the server does not support it.
    * Consistently honor ``ref_prefix`` and ``protocol_version``
    arguments in client. (Jelmer Vernooij)
    * Strip pkt-line when negotiating protocol v2. Fixes
    compatibility with gerrit. (Rémy Pecqueur, #1423)
    * Don't pull in ``setuptools_rust`` when building pure
    package. (Eli Schwartz)
    * Return peeled refs from ``GitClient.get_refs`` if protocol-v2
    is used. (Stefan Sperling, #1410)
    * Drop outdated performance file. (Jelmer Vernooij, #1411)
    * Fix handling of symrefs with protocol v2.
    * Add ``ObjectStore.iter_prefix``.  (Jelmer Vernooij)
    * Revert back to version 3 of ``Cargo.lock``, to allow
    building with older Cargo versions.
    * Use a default ref-prefix when fetching with git protocol v2
    * Add `ObjectStore.iter_prefix`. (Jelmer Vernooij)
    * Improve wheel building in CI, so we can upload wheels for the
    next release.
    * Ship ``Cargo.lock``. (Jelmer Vernooij, #1287)
    * Ship ``tests/`` and ``testdata/`` in sdist. (Jelmer Vernooij,
    * Add initial integration with OSS-Fuzz for continuous fuzz
    testing and first fuzzing test (David Lakin, #1302)
    * Drop Python 3.7 support. (Jelmer Vernooij)
    * Improve fuzzing coverage (David Lakin)
    * Support Python 3.13. (Edgar Ramírez-Mondragón, #1352)
    * Initial support for smart protocol v2. (Stefan Sperling)
  - drop geventhttpclient-compat.patch (upstream)

++++ python-et_xmlfile:

  - update to 2.0.0:
    * Add new writer method and namespace Element / parsing
    * Readd the Element with namespaces
    * Add el_has_namespaces to ElementTree classes
    * Deprecate python 3.6 and 3.7 as nsetree requires a more recent XMLParser
    * Fix docstrings of _IncrementalFileWriter

++++ python-fastparquet:

  - update to 2024.11.0:
    * feat: support for writing to buffers
    * fix(_dtypes): np.float_ was deprecated
    * update for py3.13

++++ python-mutmut:

  - Remove unneeded {Build,}Requires on hammett.
  - We only need rich for the testsuite.
  - We need toml for Python 3.10 only.

++++ python-pulsectl:

  - update to 24.11.0:
    * pulsectl: check return from pa_context_new to be not NULL

++++ python-pymssql:

  - Update to version 2.3.2
    * Update FreeTDS to 1.4.23.
    * Workaround setuptools-74.0 changes.

++++ python-pyproj:

  - Update to 3.7.0
    [#]# Dependencies:
    * DEP: Minimum PROJ version 9.2 by @snowman2 in #1394
    [#]# Enhancements:
    * PERF: drop GIL during long-running proj database calls by
    @tpwrules in #1354
    * PERF: thread local context by @snowman2 in #1419
    * ENH: Add is_deprecated and get_non_deprecated() to CRS by
    @jjimenezshaw in #1383
    * ENH: Add runtime & compiled PROJ versions by @snowman2 in #1427
    [#]# Bug fixes:
    * BUG: Handle changes to HotineObliqueMercatorBConversion by
    @snowman2 in #1430
    * BUG: Support azimuthal_equidistant coordinate operation to CF
    by @snowman2 in #1380
  - Drop v3.6.1-BUG-Support-azimuthal_equidistant-coordinate-operati.patch
  - Drop v3.6.1-test-datum-ensemble-allowing-new-members.patch

++++ python-sentry-sdk:

  - update to 2.19.0:
    * New: introduce `rust_tracing` integration. See https://docs.s
    entry.io/platforms/python/integrations/rust_tracing/ (#3717)
    * Auto enable Litestar integration
    * Deprecate `sentry_sdk.init` context manager
    * feat(spotlight): Send PII to Spotlight when no DSN is set
    * feat(spotlight): Add info logs when Sentry is enabled
    * feat(spotlight): Inject Spotlight button on Django
    * feat(spotlight): Auto enable cache_spans for Spotlight on
    DEBUG
    * fix(logging): Handle parameter `stack_info` for the
    `LoggingIntegration`
    * fix(pure-eval): Make sentry-sdk[pure-eval] installable with
    pip==24.0
    * fix(rust_tracing): include_tracing_fields arg to control
    unvetted data in rust_tracing integration
    * fix(aws) Fix aws lambda tests (by reducing event size)
    * fix(arq): fix integration with Worker settings as a dict
    * fix(httpx): Prevent Sentry baggage duplication
    * fix(falcon): Don't exhaust request body stream
    * fix(integrations): Check `retries_left` before capturing
    exception
    * fix(openai): Use name instead of description
    * test(gcp): Only run GCP tests when they should

++++ python-types-humanfriendly:

  - update to 10.0.1.20241105:
    * remove unused io-related allowlist entries
    * fallout from https://github.com/python/typeshed/pull/12947
    * fixes https://github.com/python/typeshed/issues/12954

++++ python-ufoLib2:

  - update to 0.17.0:
    * Added `outputImpliedClosingLine` parameter to Glyph.draw() method

++++ python-webauthn:

  - update to 2.3.0:
    * The minimum supported version of Python has been bumped up to
    Python 3.9, with ongoing testing from Python 3.9 through
    Python 3.13. Dependencies have been updated as well,
    including upgrading to `cryptography==43.0.3`

++++ python-wheel:

  - update to 0.45.1:
    * Fixed pure Python wheels converted from eggs and wininst
    files having the ABI tag in the file name

++++ python-xdg-base-dirs:

  - update to 6.0.2:
    * Use GitHub's alert syntax for rename warning
    * Test with Python 3.12 in CI
    * Check `# type: ignore` directives include error code
    * Add Python 3.13 to CI
    * Bump version to 6.0.2

++++ strawberry:

  - Update to version 1.2.2
    + Bugfixes:
    + Fixed crash when creating a new smart playlist (#1609).
    + Fixed last playlist column being added when dragging a song and switching playlists.

++++ tomcat10:

  - Update to Tomcat 10.1.33
    * Fixed CVEs:
    + CVE-2024-52316: If the Jakarta Authentication fails with an exception,
    set a 500 status (bsc#1233434)
    * Catalina
    + Add: Add support for the new Servlet API method HttpServletResponse.sendEarlyHints(). (markt)
    + Add: 55470: Add debug logging that reports the class path when a
    ClassNotFoundException occurs in the digester or the web application class loader.
    Based on a patch by Ralf Hauser. (markt)
    + Update: 69374: Properly separate between table header and body in
    DefaultServlet's listing. (michaelo)
    + Update: 69373: Make DefaultServlet's HTML listing file last modified
    rendering better (flexible). (michaelo)
    + Update: Improve HTML output of DefaultServlet. (michaelo)
    + Code: Refactor RateLimitFilter to use FilterBase as the base class.
    The primary advantage is less code to process init-param values. (markt)
    + Update: 69370: DefaultServlet's HTML listing uses incorrect labels.
    (michaelo)
    + Fix: Avoid NPE in CrawlerSessionManagerValve for partially mapped requests. (remm)
    + Fix: Add missing WebDAV Lock-Token header in the response when locking
    a folder. (remm)
    + Fix: Invalid WebDAV lock requests should be rejected with 400. (remm)
    + Fix: Fix regression in WebDAV when attempting to unlock a collection. (remm)
    + Fix: Verify that destination is not locked for a WebDAV copy operation. (remm)
    + Fix: Send 415 response to WebDAV MKCOL operations that include a request
    body since this is optional and unsupported. (remm)
    + Fix: Enforce DAV: namespace on WebDAV XML elements. (remm)
    + Fix: Do not allow a new WebDAV lock on a child resource if a parent
    collection is locked (RFC 4918 section 6.1). (remm)
    + Fix: WebDAV DELETE should remove any existing lock on successfully
    deleted resources. (remm)
    + Update: Remove WebDAV lock null support in accordance with RFC 4918
    section 7.3 and annex D. Instead, a lock on a non-existing resource will
    create an empty file locked with a regular lock. (remm)
    + Update: Rewrite implementation of WebDAV shared locks to comply with
    RFC 4918. (remm)
    + Update: Implement WebDAV If header using code from the Apache Jackrabbit
    project. (remm)
    + Add: Add PropertyStore interface in the WebDAV Servlet, to allow
    implementation of dead properties storage. The store used can be configured
    using the propertyStore init parameter of the WebDAV servlet by specifying
    the class name of the store. A simple non-persistent implementation is
    used if no custom store is configured. (remm)
    + Update: Implement WebDAV PROPPATCH method using the newly added
    PropertyStore, and update PROPFIND to support it. (remm)
    + Fix: Cache not found results when searching for web application class
    loader resources. This addresses performance problems caused by components
    such as java.sql.DriverManager, which in some circumstances will search
    for the same class repeatedly. The size of the cache can be controlled
    via the new notFoundClassResourceCacheSize on the StandardContext. (markt)
    + Fix: Stop after INITIALIZED state should be a noop since it is possible
    for subcomponents to be in FAILED after init. (remm)
    + Fix: Fix incorrect web resource cache size calculations when there are
    concurrent PUT and DELETE requests for the same resource. (markt)
    + Add: Add debug logging for the web resource cache so the current size
    can be tracked as resources are added and removed. (markt)
    + Update: Replace legacy WebDAV opaquelocktoken: scheme for lock tokens
    with urn:uuid: as recommended by RFC 4918, and remove secret init
    parameter. (remm)
    + Fix: Concurrent reads and writes (e.g. GET and PUT / DELETE) for the
    same path caused corruption of the FileResource where some of the fields
    were set as if the file exists and some as set as if it does not. This
    resulted in inconsistent metadata. (markt)
    + Fix: 69415: Ensure that the ExpiresFilter only sets cache headers on
    GET and HEAD requests. Also, skip requests where the application has
    set Cache-Control: no-store. (markt)
    + Fix: 69419: Improve the performance of ServletRequest.getAttribute()
    when there are multiple levels of nested includes. Based on a patch
    provided by John Engebretson. (markt)
    + Add: All applications to send an early hints informational response
    by calling HttpServletResponse.sendError() with a status code of 103.
    (schultz)
    + Fix: Ensure that ServerAuthModule.initialize() is called when a
    Jakarta Authentication module is configured via registerServerAuthModule().
    (markt)
    + Fix: Ensure that the Jakarta Authentication CallbackHandler only creates
    one GenericPrincipal in the Subject. (markt)
    + Fix: If the Jakarta Authentication process fails with an Exception,
    explicitly set the HTTP response status to 500 as the ServerAuthContext
    may not have set it. (markt)
    + Fix: When persisting the Jakarta Authentication provider configuration,
    create any necessary parent directories that don't already exist. (markt)
    + Fix: Correct the logic used to detect errors when deleting temporary files
    associated with persisting the Jakarta Authentication provider
    configuration. (markt)
    + Fix: When processing Jakarta Authentication callbacks, don't overwrite
    a Principal obtained from the PasswordValidationCallback with null if the
    CallerPrincipalCallback does not provide a Principal. (markt)
    + Fix: Avoid store config backup loss when storing one configuration more
    than once per second. (remm)
    + Fix: 69359: WebdavServlet duplicates getRelativePath() method from
    super class with incorrect Javadoc. (michaelo)
    + Fix: 69360: Inconsistent DELETE behavior between WebdavServlet and
    DefaultServlet. (michaelo)
    + Fix: Make WebdavServlet properly return the Allow header when deletion
    of a resource is not allowed. (michaelo)
    + Fix: Add log warning if non-wildcard mappings are used with the WebdavServlet.
    (remm)
    + Fix: 69361: Ensure that the order of entries in a multi-status response
    to a WebDAV is consistent with the order in which resources were processed.
    (markt)
    + Fix: 69362: Provide a better multi-status response when deleting a
    collection via WebDAV fails. Empty directories that cannot be deleted
    will now be included in the response. (markt)
    + Fix: 69363: Use getPathPrefix() consistently in the WebDAV servlet to
    ensure that the correct path is used when the WebDAV servlet is mounted
    at a sub-path within the web application. (markt)
    + Fix 69320, a regression in the fix for 69302 that meant the HTTP/2 processing
    was likely to be broken for all clients once any client sent an HTTP/2
    reset frame. (markt)
    + Fix: Improve performance of ApplicationHttpRequest.parseParameters().
    Based on sample code and test cases provided by John Engebretson. (markt)
    + Fix:  Correct regressions in the refactoring that added recycling of the coyote
    request and response to the HTTP/2 processing. (markt)
    + Add: Add support for RFC 8297 (Early Hints). Applications can use this
    feature by casting the HttpServletResponse to org.apache.catalina.connector.
    Response and then calling the method void sendEarlyHints(). This method
    will be added to the Servlet API (removing the need for the cast) in Servlet
    6.2 onwards. (markt)
    + Fix: 69214: Do not reject a CORS request that uses POST but does not include
    a content-type header. Tomcat now correctly processes this as a simple CORS
    request. Based on a patch suggested by thebluemountain. (markt)
    + Fix: Refactor SpnegoAuthenticator so it uses Subject.callAs() rather than
    Subject.doAs() when available. (markt)
    + Fix: Allow JAASRealm to use the configuration source to load a configured
    configFile, for easier use with testing. (remm)
    + Fix: Add missing algorithm callback to the JAASCallbackHandler. (remm)
    + Fix: Add the OpenSSL version number on the APR and OpenSSL status classes.
    (remm)
    + Fix: 69131: Expand the implementation of the filter value of the Authenticator
    attribute allowCorsPreflight, so that it applies to all requests that match
    the configured URL patterns for the CORS filter, rather than only applying
    if the CORS filter is mapped to /*. (markt)
    + Fix: Using the OpenSSLListener will now cause the connector to use OpenSSL
    if available. (remm)
    * Coyote
    + Fix: Return null SSL session id on zero-length byte array returned
    from the SSL implementation. (remm)
    + Fix: Skip OpenSSLConf with BoringSSL since it is unsupported. (remm)
    + Fix: Create the HttpParser in Http11Processor if it is not present on
    the AbstractHttp11Protocol to provide better lifecycle robustness for
    regular HTTP/1.1. The new behavior was introduced in a previous refactoring
    to improve HTTP/2 performance. (remm)
    + Fix: OpenSSLContext will now throw a KeyManagementException if something
    is known to have gone wrong in the init method, which is the behavior
    documented by javax.net.ssl.SSLContext.init. This makes error handling
    more consistent. (remm)
    + Fix: 69379: The default HEAD response no longer includes the payload
    HTTP header fields as per section 9.3.2 of RFC 9110. (markt)
    + Fix: 69316: Ensure that FastHttpDateFormat#getCurrentDate() (used to
    generate Date headers for HTTP responses) generates the correct string
    for the given input. Prior to this change, the output may have been
    wrong by one second in some cases. Pull request #751 provided by Chenjp.
    (markt)
    + Fix: Request start time may not have been accurately recorded for HTTP/1.1
    requests preceded by a large number of blank lines. (markt)
    + Add: Add server and serverRemoveAppProvidedValues to the list of attributes
    the HTTP/2 protocol will inherit from the HTTP/1.1 connector it is nested
    within. (markt)
    + Fix: Avoid possible crashes when using Apache Tomcat Native, caused by
    destroying SSLContext objects through GC after APR has been terminated.
    (remm)
    + Fix: Improve HTTP/2 handling of trailer fields for requests. Trailer fields
    no longer need to be received before the headers of the subsequent stream,
    nor are trailer fields for an in-progress stream swallowed if the Connector
    is paused before the trailer fields are received. (markt)
    + Fix: Ensure the request and response are not recycled too soon for an
    HTTP/2 stream when a stream-level error is detected during the processing
    of incoming HTTP/2 frames. This could lead to incorrect processing times
    appearing in the access log. (markt)
    + Fix: Correct a regression in the fix for non-blocking reads of chunked
    request bodies that caused InputStream.available() to return a non-zero
    value when there was no data to read. In some circumstances this could
    cause a blocking read to block waiting for more data rather than return
    the data it had already received. (markt)
    + Add: Add a new attribute cookiesWithoutEquals to the Rfc6265CookieProcessor.
    The default behaviour is unchanged. (markt)
    + Fix: Ensure that Tomcat sends a TLS close_notify message after receiving
    one from the client when using the OpenSSLImplementation. (markt)
    + Fix: 69301: Fix trailer headers replacing non-trailer headers when writing
    response headers to the access log. Based on a patch and test case
    provided by hypnoce. (markt)
    + Fix: 69302: If an HTTP/2 client resets a stream before the request body
    is fully written, ensure that any ReadListener is notified via a call
    to ReadListener.onError(). (markt)
    + Fix: Ensure that HTTP/2 stream input buffers are only created when there is
    a request body to be read. (markt)
    + Code: Refactor creation of HttpParser instances from the Processor level to
    the Protocol level since the parser configuration depends on the protocol
    and the parser is, otherwise, stateless. (markt)
    + Add: Align HTTP/2 with HTTP/1.1 and recycle the container internal request
    and response processing objects by default. This behaviour can be controlled
    via the new discardRequestsAndResponses attribute on the HTTP/2 upgrade protocol.
    (markt)
    + Fix: Clean and log OpenSSL errors before processing of OpenSSL conf commands
    in the FFM code. (remm)
    + Fix: 69121: Ensure that the onComplete() event is triggered if AsyncListener.
    onError() dispatches to a target that throws an exception. (markt)
    + Fix: Following the trailer header field refactoring, -1 is no longer an allowed
    value for maxTrailerSize. Adjust documentation accordingly. (remm)
    + Update: Move OpenSSL support using FFM to a separate JAR named tomcat-coyote-ffm.
    jar that advertises Java 22 in its manifest. (remm)
    + Fix: Fix search for OpenSSL library for FFM on Mac OS so that java.library.path
    is searched. (markt)
    + Update: Add FFM compatibility methods for LibreSSL support. Renegotiation is
    not supported at the moment. (remm)
    + Update: Add org.apache.tomcat.util.openssl.LIBRARY_NAME (specifies the name
    of the library to load) and org.apache.tomcat.util.openssl.USE_SYSTEM_LOAD_LIBRARY
    (set to true to use System.loadLibrary rather than the FFM library loading code)
    to configure the OpenSSL library loading using FFM. (remm)
    + Update: Add FFM compatibility methods for BoringSSL support. Renegotiation is
    not supported in many cases. (remm)
    * Jasper
    + Fix: Add back tag release method as deprecated in the runtime for
    compatibility with old generated code. (remm)
    + Fix: 69399: Fix regression caused by improvement 69333, which caused
    the tag release to be called when using tag pooling, and to be skipped
    when not using it. Patch submitted by Michal Sobkiewicz. (remm)
    + Fix: 69381: Improve method lookup performance in expression language.
    When the required method has no arguments, there is no need to consider
    casting or coercion, and the method lookup process can be simplified.
    Based on a pull request by John Engebretson. (markt)
    + Fix: 69382: Improve the performance of the JSP include action by re-using
    results of relatively expensive method calls in the generated code rather
    than repeating them. Patch provided by John Engebretson. (markt)
    + Fix: 69398: Avoid unnecessary object allocation in PageContextImpl.
    Based on a suggestion by John Engebretson. (markt)
    + Fix: 69406: When using StringInterpreterEnum, do not throw an
    IllegalArgumentException when an invalid Enum is encountered. Instead,
    resolve the value at runtime. Patch provided by John Engebretson. (markt)
    + Fix: 69429: Optimize EL evaluation of method parameters for methods
    that do not accept any parameters. Patch provided by John Engebretson. (markt)
    + Fix: Further optimize EL evaluation of method parameters. Patch provided
    by Paolo B. (markt)
    + Fix: 69333: Remove unnecessary code from generated JSPs. (markt)
    + Fix: 69338: Improve the performance of processing expressions that include
    AND or OR operations with more than two operands and expressions that use
    not empty. (markt)
    + Fix: 69348: Reduce memory consumption in ELContext by using lazy
    initialization for the data structure used to track lambda arguments. (markt)
    + Fix: Switch the TldScanner back to logging detailed scan results at debug
    level rather than trace level. (markt)
    + Fix: Update the optimisation in jakarta.el.ImportHandler so it is aware of
    new classes added to the java.lang package in Java 23. (markt)
    + Fix: Ensure that an exception in toString() still results in an ELException
    when an object is coerced to a String using ExpressionFactory.coerceToType().
    (markt)
    + Add: Add support for specifying Java 24 (with the value 24) as the compiler
    source and/or compiler target for JSP compilation. If used with an Eclipse JDT
    compiler version that does not support these values, a warning will be logged
    and the default will be used. (markt)
    + Fix: 69135: When using include directives in a tag file packaged in a JAR file,
    ensure that context relative includes are processed correctly. (markt)
    + Fix: 69135: When using include directives in a tag file packaged in a JAR file,
    ensure that file relative includes are processed correctly. (markt)
    + Fix: 69135: When using include directives in a tag file packaged in a JAR file,
    ensure that file relative includes are not permitted to access files outside
    of the /META_INF/tags/ directory nor outside of the JAR file. (markt)
    * WebSocket
    + Fix: If a blocking message write exceeds the timeout, don't attempt the
    write again before throwing the exception. (markt)
    + Fix: An EncodeException being thrown during a message write should not
    automatically cause the connection to close. The application should handle
    the exception and make the decision whether or not to close the connection.
    (markt)
    * Web applications
    + Fix: The manager webapp will now be able to access certificates again
    when OpenSSL is used. (remm)
    + Fix: Documentation. Align the logging configuration documentation with
    the current defaults. (markt)
    + Fix: Fix status servlet detailed view of the connectors when using automatic
    port. (remm)
    * jdbc-pool
    + Fix: 69255: Correct a regression in the fix for 69206 that meant exceptions
    executing statements were wrapped in a java.lang.reflect.UndeclaredThrowableException
    rather than the application seeing the original SQLException. Fixed by pull
    request #744 provided by Michael Clarke. (markt)
    + Fix: 69279: Correct a regression in the fix for 69206 that meant that methods
    that previously returned a null ResultSet were returning a proxy with a
    null delegate. Fixed by pull request #745 provided by Huub de Beer. (markt)
    + Fix: 69206: Ensure statements returned from Statement methods executeQuery(),
    getResultSet() and getGeneratedKeys() are correctly wrapped before being returned
    to the caller. Based on pull request #742 provided by Michael Clarke. (markt)
    * Other
    + Update: Switch from DigiCert ONE to ssl.com eSigner for code signing. (markt)
    + Update: Update Byte Buddy to 1.15.10. (markt)
    + Update: Update CheckStyle to 10.20.0. (markt)
    + Add: Improvements to German translations. (remm)
    + Update: Update Byte Buddy to 1.15.3. (markt)
    + Update: Update CheckStyle to 10.18.2. (markt)
    + Add: Improvements to French translations. (remm)
    + Add: Improvements to Japanese translations by tak7iji. (markt)
    + Add: Improvements to Chinese translations by Ch_jp. (markt)
    + Add: Exclude the tomcat-coyote-ffm.jar from JAR scanning by default. (markt)
    + Fix: Change the default log handler level to ALL so log messages are not
    dropped by default if a logger is configured to use trace (FINEST) level
    logging. (markt)
    + Update: Update Hamcrest to 3.0. (markt)
    + Update: Update EasyMock to 5.4.0. (markt)
    + Update: Update Byte Buddy to 1.15.0. (markt)
    + Update: Update CheckStyle to 10.18.0. (markt)
    + Update: Update the internal fork of Apache Commons BCEL to 6.10.0. (markt)
    + Add: Improvements to Spanish translations by Fernando. (markt)
    + Add: Improvements to French translations. (remm)
    + Add: Improvements to Japanese translations by tak7iji. (markt)
    + Fix: Fix packaging regression with missing osgi information following addition
    of the test-only build target. (remm)
    + Update: Update Tomcat Native to 2.0.8. (markt)
    + Update: Update Byte Buddy to 1.14.18. (markt)
    + Add: Improvements to French translations. (remm)
    + Add: Improvements to Japanese translations by tak7iji. (markt)
    + Update: Add test-only build target to allow running only the testsuite,
    supporting Java versions down to the minimum supported to run Tomcat. (rjung)
    + Update: Update UnboundID to 7.0.1. (markt)
    + Update: Update to SpotBugs 4.8.6. (markt)
    + Update: Remove cglib dependency as it is not required by the version of EasyMock
    used by the unit tests. (markt)
    + Update: Update EasyMock to 5.3.0. This adds a test dependency on Byte-Buddy
    1.14.17. (markt)
    + Add: Improvements to Czech translations by Vladimír Chlup. (markt)
    + Add: Improvements to French translations. (remm)
    + Add: Improvements to Japanese translations by tak7iji. (markt)
    + Add: Improvements to Chinese translations by fangzheng. (markt)

++++ ugrep:

  - Update to version 7.1.0:
    * add TUI glob editor syntax highlighting
    * bin/ug(|rep)+: Let the helper script work if no helper is
    available

------------------------------------------------------------------
------------------  2024-11-22  -  Nov 22 2024  -------------------
------------------------------------------------------------------

++++ 0ad:

  - Add 0ad-link-icu-76.patch: Fix build against ICU 76.x.

++++ Mesa:

  - Update to release 24.3.0
  - -> https://docs.mesa3d.org/relnotes/24.3.0

++++ Mesa-drivers:

  - Update to release 24.3.0
  - -> https://docs.mesa3d.org/relnotes/24.3.0

++++ tre:

  - update to 0.9.0:
    * Modify the bound parser to allow the minimum and maximum count
    to be omitted, defaulting to zero and infinity, respectively.
    * Add API variants for operating on raw byte vectors:
    tre_regnexecb, tre_regexecb, tre_regncompb, tre_regaexecb,
    tre_regcompb
    * Bug fixes
  - drop unneeded patches or patches included upstream:
    * 0001-Remove-broken-agrep-test-entry.patch
    * CVE-2016-8859.patch
    * tre-chicken.patch
    * tre.diff
  - drop legacy obsoletes/provides

++++ ansible-core-2.16:

  - Backport patch to relax resolvelib dependency:
    771f7ad29ca4d259761eaa88673c2e32f6412bbe.patch
  - Added necessary test dependencies: pytest-xdist, pytest-mock,
    pytz, passlib, git-core, and openssh to ensure proper test
    execution.
  - Introduced the `ansible_python_version` variable and updated the
    test command.

++++ ansible-core:

  - Backport patch to relax resolvelib dependency:
    771f7ad29ca4d259761eaa88673c2e32f6412bbe.patch

++++ codespell:

  - update to 2.3.0:
    * Add schematrion->schematron
    * Add explicit Python 3.12 support
    * Add miscellaneous typos
    * Add more labour* variants
    * Return exit status in __main__.py
    * Fix ruff alerts (currently) not caught by pre-commit
    * Added new word
    * Add Gelma's typos that start with "a"
    * Add Gelma's typos from "b" to "cl"
    * Add Gelma's typos from "co" to "cy"
    * Add Gelma's typos that start with "d"
    * Add Gelma's typos that start with "e"
    * Add Gelma's typos from "f" to "h"
    * Add entries to rare dictionary
    * Add Gelma's typos that start with "i"
    * diagional -> diagonal
    * Add Gelma's typos from "j" to "m"
    * Add Gelma's typos from "n" to "o"
    * Add corrections for vulnerbailit(y|ies)->vulnerabilit(y|ies).
    * Add Gelma's typos that start with "p"
    * Add Gelma's typos from "q" to "r"
    * openign->opening
    * Add Gelma's typos that start with "s"
    * Add Gelma's typos from "t" to "z"
    * Improve existing suggestions
    * Add a timeout to jobs that may benefit from it
    * don't show stacktrace from KeyboardInterrupt #3217
    * Adding 'hareware' to spelling corrections.
    * Add typos for knownledge->knowledge, analyzis->analysis and
    compialtion->compilation
    * Add --stdin-single-line option
    * Add spelling corrections for parameters
    * Ignore line endings in exclude-file
    * Add typo offsers
    * add velcoity -> velocity
    * ot is a typo also for it, which i is close to o
    * test: remove warning when aspell is not installed
    * Add carrets->carets
    * Add support for ANSI colors on Windows
    * Add prettier to pre-commit
    * Apply Repo-Review suggestions
    * dictionary: pathes can be patches
    * fix: typos in comments
    * doc: Specify .codespellrc is INI formatted
    * Add sanetize->sanitize
    * sampe->sample
    * Assorted mispellings
    * Add corrections for all *in->*ing words starting with "A"
    * Add corrections for all *in->*ing words starting with "B"
    * Add corrections for all *in->*ing words starting with "C"
    * Add corrections for all *in->*ing words starting with "D"
    * Add corrections for all *in->*ing words starting with "E"
    * Add corrections for all *in->*ing words starting with "F"
    * Add correction for spoofing and spoofed.
    * Add reliabe->reliable
    * Add corrections for all *in->*ing words starting with "G"
    * Add corrections for all *in->*ing words starting with "H"
    * Add corrections for all *in->*ing words starting with "I"
    * Add corrections for all *in->*ing words starting with "J"
    * Add corrections for all *in->*ing words starting with "K"
    * Add corrections for all *in->*ing words starting with "L"
    * Add corrections for all *in->*ing words starting with "M"
    * Add corrections for all *in->*ing words starting with "N"
    * Add corrections for all *in->*ing words starting with "O"
    * Add corrections for all *in->*ing words starting with "R"
    * Add corrections for all *in->*ing words starting with "S"
    * Add corrections for all *in->*ing words starting with "P"
    * Add corrections for all *in->*ing words starting with "Q"
    * Add corrections for all *in->*ing words starting with "T"
    * Add corrections for all *in->*ing words starting with "U"
    * Add corrections for all *in->*ing words starting with "V"
    * Add corrections for all *in->*ing words starting with "W"
    * Add corrections for all *in->*ing words starting with "Y"
    * Add corrections for all *in->*ing words starting with "Z"
    * Add 'quotted->quoted'
  - drop patch_version.patch: obsolete, use pypi tarball instead

++++ coredns:

  - Update to version 1.12.0:
    * New multisocket plugin - allows CoreDNS to listen on multiple sockets
    * bump deps

++++ crmsh:

  - Update to version 5.0.0+20241122.37cd25b6:
    * Dev: behave: add CAP_SYS_ADMIN to container for systemd hardening

++++ dracut:

  - Update to version 059+suse.665.gd2af7028:
    * feat(systemd-coredump): save coredumps to journal
    * fix(suse-initrd): shellcheck SC1007
    * fix(pcsc): add libpcsclite_real.so.*
    * fix(dracut-systemd): use expected PS1 in the emergency shell
    * fix(dracut-systemd): unquote systemd conf strings
    * feat: add header comment to generators
    * refactor: change TimeoutSec=0 to TimeoutSec=infinity
    * fix(dracut.sh): do not add cmdline for force_drivers if --kernel-only
    * fix(btrfs): write cmdline in install()
    * fix(dracut.sh): omit compressed kernel modules from find searching exec files
    * fix(dracut): don't apply aggressive strip to kernel modules
    * fix(dracut-install): copy xattr when use clone ioctl

++++ evolution:

  - Update to version 3.54.2:
    + Bug Fixes:
  - Composer: Possible crash on paste
  - Correct certificate key usage constants
  - ToDo bar sometimes does not display due tasks
    + Miscellaneous: Default inbox email: Update URIs, remove link to
    defunct mailing list.
    + Updated translations.

++++ evolution-data-server:

  - Update to version 3.54.2:
    + Bug Fixed:
  - libedataserverui: Avoid initializing the icon_theme when
    building introspection data
  - Fails to build/link against icu 76.1
  - Correct certificate key usage constants
    + Updated translations.

++++ evolution-ews:

  - Update to version 3.54.2:
    + Bug Fixes: m365: Calendar color reset on calendar list refresh.
    + Miscellaneous: m365: Fix cancel of an instance of a recurring
    meeting.
    + Updated translations.

++++ extension-manager:

  - fix CFLAGS, as with the earlier try, there was a typo with optflags

++++ gnome-settings-daemon:

  - Only recommend xf86-input-libinput if xorg-x11-server is present:
    wayland does not rely on the xf86 drivers.

++++ gnome-text-editor:

  - Update to version 47.2:
    + Unescaping URIs for tooltips to improve legibility
    + Fix initial-trailing-newline when settings auto-discovery is
    disabled
    + Fix save-as when using admin:// URIs
    + Pin document encoding when loading a file
    + Override extend_selection for multi-mouse-press to avoid some
    slow corner cases in minified JSON files
    + Markup fixes in properties dialog
    + Updated translations.

++++ gnome-user-docs:

  - Update to version 47.2:
    + Updated translations.

++++ v2ray-core:

  - Update version to 5.22.0
    * Add packetEncoding for Hysteria
    * Add ECH Client Support
    * Add support for parsing some shadowsocks links
    * Add Mekya Transport
    * Fix bugs

++++ gpxsee:

  - Update to version 13.31
    * Improved Mapsforge maps rendering performance.
    * Improved Mapsforge map render theme.

++++ grype:

  - Update to version 0.85.0:
    * dependencies: latest syft and stereoscope (#2275)
    * chore(deps): bump github/codeql-action from 3.27.4 to 3.27.5
    (#2272)
    * chore(deps): bump github.com/charmbracelet/bubbletea from 1.2.2
    to 1.2.3 (#2273)
    * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.6
    to 1.4.7 (#2274)
    * chore(deps): update tools to latest versions (#2269)
    * fix: bump clio to fix logging when no tty present (#2268)
    * chore(deps): bump github/codeql-action from 3.27.3 to 3.27.4
    (#2260)
    * fix failing tests (#2261)
    * Add v6 DB curator (#2151)
    * Add affected CPE store (#2258)
    * chore(deps): bump github.com/charmbracelet/bubbletea from 1.1.2
    to 1.2.2 (#2256)
    * Add AffectedPackage store (#2245)
    * Add v6 vulnerability & blob stores (#2243)
    * chore(deps): bump anchore/sbom-action from 0.17.6 to 0.17.7
    (#2238)
    * chore(deps): bump github.com/anchore/stereoscope (#2246)
    * chore(deps): bump github/codeql-action from 3.27.0 to 3.27.3
    (#2257)
    * Add v6 distribution client (#2150)
    * restore log on ui teardown (#2248)
    * Merge indirect matches with direct matches (#2241)
    * doc: Add official Grype logo license information (#2244)
    * add v6 provider store (#2232)

++++ grype-db:

  - Update to version 0.27.1:
    * Update Grype to v0.85.0 (#435)
    * remove push event for code gen
    * Remove support for v1 & v2 schemas (#434)
    * add os codename fetcher/helper method (#433)
    * Migrate common processor code to internal (#432)
    * chore(deps): Bump golang.org/x/text from 0.19.0 to 0.20.0
    (#426)
    * chore(deps-dev): Bump werkzeug from 3.0.3 to 3.0.6 (#427)
    * Update grype-db bootstrap tools to latest versions. (#428)
    * chore(deps): Bump github.com/anchore/grype from 0.83.0 to
    0.84.0 (#424)

++++ hubble:

  - Update to version 1.16.4:
    * Prepare for v1.16.4 release
    * chore(deps): update docker.io/library/alpine:3.20.3 docker
    digest to 1e42bbe
    * chore(deps): update golang
    * chore(deps): update dependency helm/helm to v3.16.3
    * chore(deps): update dependency kubernetes-sigs/kind to v0.25.0
    * chore(deps): update golang to v1.23.3
    * Update stable release to 1.16.3

++++ hugin:

  - Update to version 2024.0.1:
    * Removed more event tables and replaced with Bind calls
    * Fixes missing include for older wxWidgets version (3.1 series)

++++ icingaweb2-module-director:

  - Update to 1.11.2
    * UI
  - FIX: No more errors when changing import source modifier priorities (#2270)
  - FIX: Choosing HTTP proxy in import source type REST API no longer causes deprecation notice (#2889)
  - FIX: Deleting data lists when using PostgreSQL as backend no longer yields errors (#2913)
  - FIX: Previewing sync rules with boolean properties now functions without errors (#2905)
  - FIX: Basket snapshots correctly display content if present (#2901)
  - FIX: Time periods now include Add to basket functionality (#2542)
    * API
  - FIX: API updates for notifications return 304 instead of 200 when unchanged (#2882)
    * Internals
  - FIX: The apply_changes setting from sync jobs restored from a basket is applied properly (#2904)
  - FIX: The Get host by name (DNS lookup) modifier handles failed lookups without errors (#2877)
    * Director Branches
  - FIX: Cloning a host retains its services and service sets (#2897)
  - FIX: Service sets are now clonable (#2890)
    * Integrations
  - Show Director labels in monitoring module and Icinga DB custom vars section (#2239)
    * Fixed issues
  - You can find issues and feature requests related to this release on our roadmap

++++ libimobiledevice:

  - add python3-setuptools for python 3.13 support

++++ imv:

  - imv-link-icu-uc.patch: specify icu-uc as dependency instead of
    icu-io: IMV does not use the Stream & I/O parts of ICU, the
    common library is sufficient (and required).

++++ kdump:

  - upgrade to version 2.0.12
    * fadump: pass additional parameters for capture kernel (jsc#PED-9889)

++++ kernel-source-longterm:

  - Linux 6.6.63 (bsc#1218260).
  - mm/damon/core: copy nr_accesses when splitting region
    (bsc#1218260).
  - mm/damon/core: handle zero schemes apply interval (bsc#1218260).
  - mm/damon/core: check apply interval in damon_do_apply_schemes()
    (bsc#1218260).
  - mm: resolve faulty mmap_region() error path behaviour
    (bsc#1218260).
  - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
    (bsc#1218260).
  - mm: refactor map_deny_write_exec() (bsc#1218260).
  - mm: unconditionally close VMAs on error (bsc#1218260).
  - mm: avoid unsafe VMA hook invocation when error arises on mmap
    hook (bsc#1218260).
  - leds: mlxreg: Use devm_mutex_init() for mutex initialization
    (bsc#1218260).
  - fs/9p: fix uninitialized values during inode evict
    (bsc#1218260).
  - drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
    (bsc#1218260).
  - mptcp: pm: use _rcu variant under rcu_read_lock (bsc#1218260).
  - mptcp: drop lookup_by_id in lookup_addr (bsc#1218260).
  - mptcp: hold pm lock when deleting entry (bsc#1218260).
  - mptcp: update local address flags when setting it (bsc#1218260).
  - mptcp: add userspace_pm_lookup_addr_by_id helper (bsc#1218260).
  - mptcp: define more local variables sk (bsc#1218260).
  - NFSD: Never decrement pending_async_copies on error
    (bsc#1218260).
  - NFSD: Initialize struct nfsd4_copy earlier (bsc#1218260).
  - NFSD: Limit the number of concurrent async COPY operations
    (bsc#1218260).
  - NFSD: Async COPY result needs to return a write verifier
    (bsc#1218260).
  - NFSD: initialize copy->cp_clp early in nfsd4_copy for use by
    trace point (bsc#1218260).
  - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
    (bsc#1218260).
  - lib/buildid: Fix build ID parsing logic (bsc#1218260).
  - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state
    allocation (bsc#1218260).
  - staging: vchiq_arm: Get the rid off struct vchiq_2835_state
    (bsc#1218260).
  - mm/damon/core: handle zero {aggregation,ops_update} intervals
    (bsc#1218260).
  - mm/damon/core: implement scheme-specific apply interval
    (bsc#1218260).
  - drm/amd/display: Adjust VSDB parser for replay feature
    (bsc#1218260).
  - drm/amd: Fix initialization mistake for NBIO 7.7.0
    (bsc#1218260).
  - nouveau: fw: sync dma after setup is called (bsc#1218260).
  - pmdomain: imx93-blk-ctrl: correct remove path (bsc#1218260).
  - drm/bridge: tc358768: Fix DSI command tx (bsc#1218260).
  - mmc: sunxi-mmc: Fix A100 compatible description (bsc#1218260).
  - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger
    than 4K" (bsc#1218260).
  - LoongArch: Make KASAN work with 5-level page-tables
    (bsc#1218260).
  - LoongArch: Disable KASAN if PGDIR_SIZE is too large for
    cpu_vabits (bsc#1218260).
  - LoongArch: Fix early_numa_add_cpu() usage for FDT systems
    (bsc#1218260).
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
    (bsc#1218260).
  - ocfs2: fix UBSAN warning in ocfs2_verify_volume() (bsc#1218260).
  - ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook
    645 G10 (bsc#1218260).
  - ALSA: hda/realtek - Fixed Clevo platform headset Mic issue
    (bsc#1218260).
  - nommu: pass NULL argument to vma_iter_prealloc() (bsc#1218260).
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
    (bsc#1218260).
  - KVM: VMX: Bury Intel PT virtualization (guest/host mode)
    behind CONFIG_BROKEN (bsc#1218260).
  - KVM: x86: Unconditionally set irr_pending when updating APICv
    state (bsc#1218260).
  - KVM: nVMX: Treat vpid01 as current if L2 is active, but with
    VPID disabled (bsc#1218260).
  - ima: fix buffer overrun in ima_eventdigest_init_common
    (bsc#1218260).
  - vp_vdpa: fix id_table array not null terminated error
    (bsc#1218260).
  - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
    (bsc#1218260).
  - vdpa: solidrun: Fix UB bug with devres (bsc#1218260).
  - mm: revert "mm: shmem: fix data-race in shmem_getattr()"
    (bsc#1218260).
  - ocfs2: uncache inode which has failed entering the group
    (bsc#1218260).
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
    (bsc#1218260).
  - x86/mm: Fix a kdump kernel failure on SME system when
    CONFIG_IMA_KEXEC=y (bsc#1218260).
  - tools/mm: fix compile error (bsc#1218260).
  - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels
    (bsc#1218260).
  - bonding: add ns target multicast address to slave device
    (bsc#1218260).
  - net: ti: icssg-prueth: Fix 1 PPS sync (bsc#1218260).
  - stmmac: dwmac-intel-plat: fix call balance of tx_clk handling
    routines (bsc#1218260).
  - net: stmmac: rename stmmac_pltfr_remove_no_dt to
    stmmac_pltfr_remove (bsc#1218260).
  - net: stmmac: dwmac-visconti: use devm_stmmac_probe_config_dt()
    (bsc#1218260).
  - net: stmmac: dwmac-intel-plat: use devm_stmmac_probe_config_dt()
    (bsc#1218260).
  - net: Make copy_safe_from_sockptr() match documentation
    (bsc#1218260).
  - net: stmmac: dwmac-mediatek: Fix inverted handling of
    mediatek,mac-wol (bsc#1218260).
  - samples: pktgen: correct dev to DEV (bsc#1218260).
  - net: sched: cls_u32: Fix u32's systematic failure to free IDR
    entries for hnodes (bsc#1218260).
  - net/sched: cls_u32: replace int refcounts with proper refcounts
    (bsc#1218260).
  - Bluetooth: btintel: Direct exception event to bluetooth stack
    (bsc#1218260).
  - Bluetooth: hci_core: Fix calling mgmt_device_connected
    (bsc#1218260).
  - Revert "RDMA/core: Fix ENODEV error for iWARP test over vlan"
    (bsc#1218260).
  - virtio/vsock: Fix accept_queue memory leak (bsc#1218260).
  - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
    (bsc#1218260).
  - net/mlx5e: clear xdp features on non-uplink representors
    (bsc#1218260).
  - net/mlx5e: kTLS, Fix incorrect page refcounting (bsc#1218260).
  - net/mlx5: fs, lock FTE when checking if active (bsc#1218260).
  - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
    (bsc#1218260).
  - mptcp: error out earlier on disconnect (bsc#1218260).
  - drm/rockchip: vop: Fix a dereferenced before check warning
    (bsc#1218260).
  - net: vertexcom: mse102x: Fix tx_bytes calculation (bsc#1218260).
  - sctp: fix possible UAF in sctp_v6_available() (bsc#1218260).
  - netlink: terminate outstanding dump on socket close
    (bsc#1218260).
  - commit bd50075

++++ kernel-firmware:

  - Update to version 20241121 (git commit 48bb90cceb88):
    * linux-firmware: Update AMD cpu microcode
    * xe: Update GUC to v70.36.0 for BMG, LNL
    * i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL

++++ kubefirst:

  - Update to version 2.7.5:
    * set next macro chart for kubefirst - 2.7.5
    * bump api (#2326)
    * update blog link (#2325)
    * fix: delete k1dir instead of kubeconfig file

++++ kubeone:

  - Update to version 1.9.0:
    * Urgent Upgrade Notes
    https://docs.kubermatic.com/kubeone/v1.9/tutorials/upgrading/upgrading-from-1.8-to-1.9/
    (No, really, you MUST read this before you upgrade)
  - Add support for Ubuntu 24.04. Example Terraform configs for
    all providers are now using Ubuntu 24.04 by default. If
    you're using the latest Terraform configs with an existing
    cluster, make sure to bind the operating system/image to the
    image that you're currently using, otherwise your
    instances/cluster might get recreated by Terraform. On some
    providers, machine-controller will use Ubuntu 24.04 if the
    image is not explicitly specified. (#3302, @SimonTheLeg)
  - Example Terraform configs for Hetzner are now using cx22
    instead of cx21 instance type by default. If you use the
    latest Terraform configs with an existing cluster, make sure
    to override the instance type as needed, otherwise your
    instances/cluster might get recreated by Terraform. (#3370,
    @kron4eg)
  - KubeOne is now validating that IP addresses and hostnames
    provided for control plane nodes and static worker nodes are
    different. In other words, it's not possible to use the same
    machine both as a control plane node and a static worker
    node. This behavior has never been supported by KubeOne; if
    you want a control plane node that can schedule any pod, you
    can provision it as a control plane node and remove the
    control plane taint
    (node-role.kubernetes.io/control-plane:NoSchedule). (#3334,
    @kron4eg)
  - Update Cilium to v1.16.3. This change might affect users that
    have nodes that are low on capacity (pods or resources wise).
    The Cilium architecture has been changed so that the Envoy
    Proxy is not integrated into Cilium, but is a dedicated
    component/DaemonSet. If you have nodes that are low on
    capacity, you might encounter issues when trying to start
    Envoy Proxy pods on those nodes. In this case, you'll need to
    override the Cilium addon to use the old architecture with
    Envoy Proxy integrated into Cilium. (#3415, @xmudrii) kubeone
    install and kubeone upgrade subcommands are removed. We have
    deprecated these commands in KubeOne 1.4, and made them
    hidden in KubeOne 1.5. With this change, we're permanently
    removing these two commands. kubeone apply should be used
    instead. (#3349, @mohamed-rafraf)

++++ lego:

  - Update to version 4.20.4:
    * Prepare release v4.20.4
    * chore: publish snap to the stable channel
    * Detach v4.20.3
  - Update to version 4.20.3:
    * Prepare release v4.20.3
    * technitium: fix status code handling (#2357)
    * chore: publish aur lego-bin (#2356)
    * chore: check DNSProvider interface (#2352)
    * directadmin: fix timeout configuration (#2351)
    * chore: fix snap name (#2349)
    * chore: restore snap packaging (#2348)
    * docs: fix typos
    * docs: improve changelog style (#2346)
    * fix: HTTP server IPv6 matching (#2345)
    * Detach v4.20.2

++++ libadwaita:

  - Update to version 1.6.2:
    + AdwDialog: Fix accessible role critical when using
    window-backed dialogs.
    + AdwHeaderBar: Fix a typo in docs.
    + AdwMessageDialog: Fix a typo in adw_message_dialog_response()
    deprecation message.
    + AdwStyleManager: Fix initial color scheme value on Windows.
    + Updated translations.

++++ libpwquality:

  - Drop python 2.x support (it's been 4 years).
  - Add python3-setuptools BuildRequires which is needed for
    distutils.

++++ libsoup:

  - Update to version 3.6.1:
    + Fix `soup_uri_copy()` reading port as a long instead of an int
    + Fix possible NULL deref in `soup_uri_decode_data_uri()`
    + Fix possible overflow in `SoupContentSniffer`
    + Fix assertion in `soup_uri_decode_data_uri()` on URLs with a
    path starting with `//`
    + headers: Be more robust against invalid input when parsing
    params
    + websocket: Fix possibility of being stuck in a read loop
  - Drop patches fixed upstream:
    + 6adc0e3e.patch
    + 29b96fab.patch
    + a35222dd.patch
    + 4c9e75c6.patch

++++ libspelling:

  - Update to version 0.4.5:
    + Various robustness fixes for weak ref tracking
    + Various GObject Introspection fixes
    + A new build option to install a static library
    (libspelling-1.a)
    + Fix a minor leak of extra_word_chars for a language dictionary
    + Fix ICU success check
    + Updated translations.

++++ yaz:

  - Update to version 5.34.2:
    + Remove outdated distros: Debian Stretch and Ubuntu Trusty
    + LICENSE: Update to match Index Data's online Revised BSD license
    + Vscode XML editor settings
    + YAZ 5.34.1 breaks search with OCLC's "Sisis InfoGuide" origin
  - Add yaz-icu-76.patch: Fix build against ICU 76: most sources
    found in the wild wrongly define the need on icu-i18n, when most
    actually would need icu-uc.
  - Add libtool BuildRequires and call autoreconf in build section,
    as above patch touches the build system.

++++ matrix-synapse:

  - allow newer setuptools-rust

++++ melange:

  - Update to version 0.15.13:
    * Consider symlinks as potential provides for so:
    * drop ntia e2e test

++++ meson:

  - Add meson-testsuite-with-cmake-3.31.patch: Fix test suite run
    against CMake 3.31.

++++ mpd:

  - Added mpd-icu76.patch (fixed build with icu 76.1).

++++ nomino:

  - Update to version 1.3.6:
    * update dependencies

++++ orca:

  - Update to version 47.2:
    + Web:
  - Report "required" and "invalid" state on password input.
  - Present ARIA alerts as UI; not a text container.
  - Fix regression in presentation of table cell content during
    word nav.
    + LibreOffice: Ensure we announce Calc sheet changes.
    + General:
  - Multiple "chattiness" fixes.
  - Treat GTK4 groupings as panels.
  - Fix performance issue determining posinset and setsize in
    giant sets.
  - Try to filter out redundant description-change events.
    + Updated translations.

++++ php8-imagick:

  - Fix removed "php_strtolower" for PHP 8.4
    + imagick-php_strtolower-php84.patch

++++ python-rdflib-doc:

  - Add %{?sle15_python_module_pythons}

++++ python-azure-data-tables:

  - New upstream release
    + Version 12.6.0
    + For detailed information about changes see the
    CHANGELOG.md file provided with this package
  - Adjust upstream source name in spec file
  - Drop extra LICENSE.txt as upstream now ships its own

++++ python-biopython:

  - add py313-support.patch to fix build with python 3.13

++++ python-constantly:

  - update to 23.10.4:
    * switch to PEP517 build
    * Python 3.12 support

++++ python-dask:

  - reenable for python 313 as numba is now available

++++ python-dask-expr:

  - reenable python313, numba is available

++++ python-distributed:

  - reenable python313 (keep tests disabled for now)

++++ python-django-tastypie:

  - Update to 0.15.0:
    * Pin Sphinx to last known working version for now
    * Fix race condition between POST / PATCH resources by using update_fields
    * Use non-deprecated assertion methods
    * Django 5.1 support
  - Drop patch correct-assertion-methods.patch, included upstream.

++++ python-fastnumbers:

  - Add fix-compiler-errors.patch with upstream fixes for compiler
    errors.
  - Use %pytest_arch instead of home made calling of pytest.

++++ python-littleutils:

  - update to 0.2.4:
    * Fix invalid regex escape
    * CI improvements

++++ python-msal-extensions:

  - Add patch to relax python-portalocker version dependency in setup.py
    + me_relax-portalocker.patch
  - Relax python-portalocker version dependency in BuildRequires and Requires

++++ python-named:

  - Add no-coverage.patch eliminating coverage measurement.
  - Add %{?sle15_python_module_pythons}

++++ python-numba:

  - Add upstream py313.patch to support Python 3.13

++++ python-numpy:

  - Add update-meson-1_5_2.patch (gh#numpy/numpy#27531)
  - Skip failing test test_api_importable

++++ python-prompt_toolkit:

  - add compat provides on the safe name

++++ python-proto-plus:

  - Update to 1.25.0
    * Add support for Python 3.13
    * Construct messages with nested struct
    * Fix 'Couldn't build proto file' when using Python 3.13
    * Fix conda compatibility issue
    * Fix issue with equality comparison of repeated field with None
    * Remove check for Protobuf version
  - Drop merged pytest-staticmethod.patch

++++ python-pydicom-data:

  - add pytest8.patch

++++ python-rdflib:

  - Add %{?sle15_python_module_pythons}

++++ python-selenium:

  - Add %{?sle15_python_module_pythons}

++++ python-trio-websocket:

  - Add %{?sle15_python_module_pythons}

++++ python-zlib-ng:

  - update to 0.5.1:
    * Fix a bug where flushing in threaded mode did not write the
    data to the output file.
    * Threaded reading and writing do no longer block exiting
    when an exception occurs in the main thread.
  - update to 0.5.0:
    * Fix a bug where READ and WRITE in zlib_ng.gzip_ng were
    inconsistent with the values in gzip on Python 3.13
    * Small simplifications to the ``gzip_ng.compress`` and
    ``gzip_ng.decompress`` functions, which should lead to less
    overhead.
  - update to 0.4.3:
    * Fix a bug where files larger than 4GB could not be
    decompressed.
  - update to 0.4.2:
    * Fix a reference counting error that happened on module
    initialization and triggered an error in the CPython debug
    build.
    * Fix a setup.py error that was triggered on MacOS ARM64.

++++ rekor:

  - Update to version 1.3.7:
    * New Features
  - log request body on 500 error to aid debugging (#2283)
  - Add support for signing with Tink keyset (#2228)
  - Add public key hash check in Signed Note verification (#2214)
  - update Trillian TLS configuration (#2202)
  - Add TLS support for Trillian server (#2164)
  - Replace docker-compose with plugin if available (#2153)
  - Add flags to backfill script (#2146)
  - Unset DisableKeepalive for backfill HTTP client (#2137)
  - Add script to delete indexes from Redis (#2120)
  - Run CREATE statement in backfill script (#2109)
  - Add MySQL support to backfill script (#2081)
  - Run e2e tests on mysql and redis index backends (#2079)
    * Bug Fixes
  - remove unneeded value in log message (#2282)
  - Add error message when computing consistency proof (#2278)
  - fix validation error handling on API (#2217)
  - fix error in pretty-printed inclusion proof from verify
    subcommand (#2210)
  - Fix index scripts (#2203)
  - fix failing sharding test
  - Better error handling in backfill script (#2148)
  - Batch entries in cleanup script (#2158)
  - Add missing workflow for index cleanup test (#2121)
  - hashedrekord: fix schema $id (#2092)

++++ sane-airscan:

  - do not replace config (as configured scanners are saved to that file)

++++ shadowsocks-rust:

  - Update version to 1.21.2
    * supports generic I/O socket type
    * Support OpenBSD Packet-Filter (pf)
    * Fix bugs

++++ supergfxctl:

  - Added prime-run binary that just links process to the nvidia
    libraries

++++ tomcat:

  - Update to Tomcat 9.0.97
    * Fixed CVEs:
    + CVE-2024-52316: If the Jakarta Authentication fails with an exception,
    set a 500 status (bsc#1233434)
    * Catalina
    + Add: Add support for the new Servlet API method
    HttpServletResponse.sendEarlyHints(). (markt)
    + Add: 55470: Add debug logging that reports the class path when a
    ClassNotFoundException occurs in the digester or the web application
    class loader. Based on a patch by Ralf Hauser. (markt)
    + Update: 69374: Properly separate between table header and body in
    DefaultServlet's listing. (michaelo)
    + Update: 69373: Make DefaultServlet's HTML listing file last modified
    rendering better (flexible). (michaelo)
    + Update: Improve HTML output of DefaultServlet. (michaelo)
    + Code: Refactor RateLimitFilter to use FilterBase as the base class. The
    primary advantage for doing this is less code to process init-param
    values. (markt)
    + Update: 69370: DefaultServlet's HTML listing uses incorrect labels.
    (michaelo)
    + Fix: Avoid NPE in CrawlerSessionManagerValve for partially mapped
    requests. (remm)
    + Fix: Add missing WebDAV Lock-Token header in the response when locking
    a folder. (remm)
    + Fix: Invalid WebDAV lock requests should be rejected with 400. (remm)
    + Fix: Fix regression in WebDAV when attempting to unlock a collection.
    (remm)
    + Fix: Verify that destination is not locked for a WebDAV copy operation.
    (remm)
    + Fix: Send 415 response to WebDAV MKCOL operations that include a
    request body since this is optional and unsupported. (remm)
    + Fix: Enforce DAV: namespace on WebDAV XML elements. (remm)
    + Fix: Do not allow a new WebDAV lock on a child resource if a parent
    collection is locked (RFC 4918 section 6.1). (remm)
    + Fix: WebDAV Delete should remove any existing lock on successfully
    deleted resources. (remm)
    + Update: Remove WebDAV lock null support in accordance with RFC 4918
    section 7.3 and annex D. Instead, a lock on a non-existing resource
    will create an empty file locked with a regular lock. (remm)
    + Update: Rewrite implementation of WebDAV shared locks to comply with
    RFC 4918. (remm)
    + Update: Implement WebDAV If header using code from the Apache Jackrabbit
    project. (remm)
    + Add: Add PropertyStore interface in the WebDAV Servlet, to allow
    implementation of dead properties storage. The store used can be
    configured using the 'propertyStore' init parameter of the WebDAV
    servlet. A simple non-persistent implementation is used if no custom
    store is configured. (remm)
    + Update: Implement WebDAV PROPPATCH method using the newly added
    PropertyStore. (remm)
    + Fix: Cache not found results when searching for web application class
    loader resources. This addresses performance problems caused by
    components such as java.sql.DriverManager which, in some circumstances,
    will search for the same class repeatedly. In a large web application
    this can cause performance problems. The size of the cache can be
    controlled via the new notFoundClassResourceCacheSize on the
    StandardContext. (markt)
    + Fix: Stop after INITIALIZED state should be a noop since it is possible
    for subcomponents to be in FAILED after init. (remm)
    + Fix: Fix incorrect web resource cache size calculations when there are
    concurrent PUT and DELETE requests for the same resource. (markt)
    + Add: Add debug logging for the web resource cache so the current size
    can be tracked as resources are added and removed. (markt)
    + Update: Replace legacy WebDAV opaquelocktoken: scheme for lock tokens
    with urn:uuid: as recommended by RFC 4918, and remove secret init
    parameter. (remm)
    + Fix: Concurrent reads and writes (e.g. GET and PUT / DELETE) for the
    same path caused corruption of the FileResource where some of the
    fields were set as if the file exists and some as set as if it does
    not. This resulted in inconsistent metadata. (markt)
    + Fix: 69415: Ensure that the ExpiresFilter only sets cache headers on
    GET and HEAD requests. Also skip requests where the application has set
    Cache-Control: no-store. (markt)
    + Fix: 69419: Improve the performance of ServletRequest.getAttribute()
    when there are multiple levels of nested includes. Based on a patch
    provided by John Engebretson. (markt)
    + Add: All applications to send an early hints informational response by
    calling HttpServletResponse.sendError() with a status code of 103.
    (schultz)
    + Fix: Ensure that the Jakarta Authentication CallbackHandler only
    creates one GenericPrincipal in the Subject. (markt)
    + Fix: If the Jakarta Authentication process fails with an Exception,
    explicitly set the HTTP response status to 500 as the ServerAuthContext
    may not have set it. (markt)
    + Fix: When persisting the Jakarta Authentication provider configuration,
    create any necessary parent directories that don't already exist.
    (markt)
    + Fix: Correct the logic used to detect errors when deleting temporary
    files associated with persisting the Jakarta Authentication provider
    configuration. (markt)
    + Fix: When processing Jakarta Authentication callbacks, don't overwrite
    a Principal obtained from the PasswordValidationCallback with null if
    the CallerPrincipalCallback does not provide a Principal. (markt)
    + Fix: Avoid store config backup loss when storing one configuration more
    than once per second. (remm)
    + Fix: 69359: WebdavServlet duplicates getRelativePath() method from
    super class with incorrect Javadoc. (michaelo)
    + Fix: 69360: Inconsistent DELETE behavior between WebdavServlet and
    DefaultServlet. (michaelo)
    + Fix: Make WebdavServlet properly return the Allow header when deletion
    of a resource is not allowed. (michaelo)
    + Fix: Add log warning if non wildcard mappings are used with the
    WebdavServlet. (remm)
    + Fix: 69361: Ensure that the order of entries in a multi-status response
    to a WebDAV is consistent with the order in which resources were
    processed. (markt)
    + Fix: 69362: Provide a better multi-status response when deleting a
    collection via WebDAV fails. Empty directories that cannot be deleted
    will now be included in the response. (markt)
    + Fix: 69363: Use getPathPrefix() consistently in the WebDAV servlet to
    ensure that the correct path is used when the WebDAV servlet is mounted
    at a sub-path within the web application. (markt)
    + Fix: Improve performance of ApplicationHttpRequest.parseParameters().
    Based on sample code and test cases provided by John Engebretson.
    (markt)
    + Add: Add support for RFC 8297 (Early Hints). Applications can use
    this feature by casting the HttpServletResponse to
    org.apache.catalina.connector.Reponse and then calling the method
    void sendEarlyHints(). This method will be added to the Servlet API
    (removing the need for the cast) in Servlet 6.2 onwards. (markt)
    + Fix: 69214: Do not reject a CORS request that uses POST but does not
    include a content-type header. Tomcat now correctly processes this as
    a simple CORS request. Based on a patch suggested by thebluemountain.
    (markt)
    + Fix: Refactor SpnegoAuthenticator so it uses Subject.callAs() rather
    than Subject.doAs() when available. (markt)
    * Coyote
    + Fix: Return null SSL session id on zero length byte array returned from
    the SSL implementation. (remm)
    + Fix: Skip OpenSSLConf with BoringSSL since it is unsupported. (remm)
    + Fix: Create the HttpParser in Http11Processor if it is not present on
    the AbstractHttp11Protocol to provide better lifecycle robustness for
    regular HTTP/1.1. The new behavior was introduced on a previous
    refactoring to improve HTTP/2 performance. (remm)
    + Fix: OpenSSLContext will now throw a KeyManagementException if something
    is known to have gone wrong in the init method, which is the behavior
    documented by javax.net.ssl.SSLContext.init. This makes error handling
    more consistent. (remm)
    + Fix: 69316: Ensure that FastHttpDateFormat#getCurrentDate() (used to
    generate Date headers for HTTP responses) generates the correct string
    for the given input. Prior to this change, the output may have been
    wrong by one second in some cases. Pull request #751 provided by Chenjp.
    (markt)
    + Add: Add server and serverRemoveAppProvidedValues to the list of
    attributes the HTTP/2 protocol will inherit from the HTTP/1.1 connector
    it is nested within. (markt)
    + Fix: Avoid possible crashes when using Apache Tomcat Native, caused by
    destroying SSLContext objects through GC after APR has been terminated.
    (remm)
    + Fix: Improve HTTP/2 handling of trailer fields for requests. Trailer
    fields no longer need to be received before the headers of the
    subsequent stream nor are trailer fields for an in-progress stream
    swallowed if the Connector is paused before the trailer fields are
    received. (markt)
    + Fix: Ensure the request and response are not recycled too soon for an
    HTTP/2 stream when a stream level error is detected during the processing
    of incoming HTTP/2 frames. This could lead to incorrect processing times
    appearing in the access log. (markt)
    + Fix: Fix 69320, a regression in the fix for 69302 that meant the
    HTTP/2 processing was likely to be broken for all clients once any
    client sent an HTTP/2 reset frame. (markt)
    + Fix: Correct a regression in the fix for non-blocking reads of chunked
    request bodies that caused InputStream.available() to return a non-zero
    value when there was no data to read. In some circumstances this could
    cause a blocking read to block waiting for more data rather than return
    the data it had already received. (markt)
    + Add: Add a new attribute cookiesWithoutEquals to the Rfc6265CookieProcessor.
    The default behaviour is unchanged. (markt)
    + Fix: Ensure that Tomcat sends a TLS close_notify message after receiving
    one from the client when using the OpenSSLImplementation. (markt)
    + Fix: 69301: Fix trailer headers replacing non-trailer headers when writing
    response headers to the access log. Based on a patch and test case
    provided by hypnoce. (markt)
    + Fix: 69302: If an HTTP/2 client resets a stream before the request body is
    fully written, ensure that any ReadListener is notified via a call to
    ReadListener.onErrror(). (markt)
    + Fix: Correct regressions in the refactoring that added recycling of the
    coyote request and response to the HTTP/2 processing. (markt)
    + Add: Add OpenSSL integration using the FFM API rather than Tomcat Native.
    OpenSSL support may be enabled by adding the
    org.apache.catalina.core.OpenSSLLifecycleListener listener on the
    Server element when using Java 22 or later. (remm)
    + Fix: Ensure that HTTP/2 stream input buffers are only created when there
    is a request body to be read. (markt)
    + Code: Refactor creation of HttpParser instances from the Processor level
    to the Protocol level since the parser configuration depends on the
    protocol and the parser is, otherwise, stateless. (markt)
    + Add: Align HTTP/2 with HTTP/1.1 and recycle the container internal
    request and response processing objects by default. This behaviour can
    be controlled via the new discardRequestsAndResponses attribute on the
    HTTP/2 upgrade protocol. (markt)
    * Jasper
    + Fix: Add back tag release method as deprecated in the runtime for
    compatibility with old generated code. (remm)
    + Fix: 69399: Fix regression caused by the improvement 69333 which caused
    the tag release to be called when using tag pooling, and to be skipped
    when not using it. Patch submitted by Michal Sobkiewicz. (remm)
    + Fix: 69381: Improve method lookup performance in expression language.
    When the required method has no arguments there is no need to consider
    casting or coercion and the method lookup process can be simplified.
    Based on pull request #770 by John Engebretson.
    + Fix: 69382: Improve the performance of the JSP include action by
    re-using results of relatively expensive method calls in the generated
    code rather than repeating them. Patch provided by John Engebretson.
    (markt)
    + Fix: 69398: Avoid unnecessary object allocation in PageContextImpl.
    Based on a suggestion by John Engebretson. (markt)
    + Fix: 69406: When using StringInterpreterEnum, do not throw an
    IllegalArgumentException when an invalid Enum is encountered. Instead,
    resolve the value at runtime. Patch provided by John Engebretson.
    (markt)
    + Fix: 69429: Optimise EL evaluation of method parameters for methods
    that do not accept any parameters. Patch provided by John Engebretson.
    (markt)
    + Fix: 69333: Remove unnecessary code from generated JSPs. (markt)
    + Fix: 69338: Improve the performance of processing expressions that
    include AND or OR operations with more than two operands and expressions
    that use not empty. (markt)
    + Fix: 69348: Reduce memory consumption in ELContext by using lazy
    initialization for the data structure used to track lambda arguments.
    (markt)
    + Fix: Switch the TldScanner back to logging detailed scan results at debug
    level rather than trace level. (markt)
    * Web applications
    + Fix: The manager webapp will now be able to access certificates again
    when OpenSSL is used. (remm)
    + Fix: Documentation. Align the logging configuration documentation with
    the current defaults. (markt)
    * WebSocket
    + Fix: If a blocking message write exceeds the timeout, don't attempt the
    write again before throwing the exception. (markt)
    + Fix: An EncodeException being thrown during a message write should not
    automatically cause the connection to close. The application should
    handle the exception and make the decision whether or not to close the
    connection. (markt)
    * jdbc-pool
    + Fix: 69255: Correct a regression in the fix for 69206 that meant exceptions
    executing statements were wrapped in a java.lang.reflect.UndeclaredThrowableException
    rather than the application seeing the original SQLException. Fixed by
    pull request #744 provided by Michael Clarke. (markt)
    + Fix: 69279: Correct a regression in the fix for 69206 that meant that
    methods that previously returned a null ResultSet were returning a proxy
    with a null delegate. Fixed by pull request #745 provided by Huub de Beer.
    (markt)
    + Fix: 69206: Ensure statements returned from Statement methods
    executeQuery(), getResultSet() and getGeneratedKeys() are correctly
    wrapped before being returned to the caller. Based on pull request
    [#742] provided by Michael Clarke.
    * Other
    + Update: Switch from DigiCert ONE to ssl.com eSigner for code signing.
    (markt)
    + Update: Update Byte Buddy to 1.15.10. (markt)
    + Update: Update CheckStyle to 10.20.0. (markt)
    + Add: Improvements to German translations. (remm)
    + Add: Improvements to French translations. (remm)
    + Add: Improvements to Japanese translations by tak7iji. (markt)
    + Add: Improvements to Chinese translations by Ch_jp. (markt)
    + Add: Exclude the tomcat-coyote-ffm.jar from JAR scanning by default.
    (markt)
    + Fix: Change the default log handler level to ALL so log messages are
    not dropped by default if a logger is configured to use trace (FINEST)
    level logging. (markt)
    + Update: Update Hamcrest to 3.0. (markt)
    + Update: Update EasyMock to 5.4.0. (markt)
    + Update: Update Byte Buddy to 1.15.0. (markt)
    + Update: Update CheckStyle to 10.18.0. (markt)
    + Update: Update the internal fork of Apache Commons BCEL to 6.10.0.
    (markt)
    + Add: Improvements to Spanish translations by Fernando. (markt)
    + Add: Improvements to French translations. (remm)
    + Add: Improvements to Japanese translations by tak7iji. (markt)
    + Fix: Fix packaging regression with missing osgi information following
    addition of the test-only build target. (remm)
    + Update: Update Tomcat Native to 1.3.1. (markt)
    + Update: Update Byte Buddy to 1.14.18. (markt)
    + Add: Improvements to French translations. (remm)
    + Add: Improvements to Japanese translations by tak7iji. (markt)

------------------------------------------------------------------
------------------  2024-11-21  -  Nov 21 2024  -------------------
------------------------------------------------------------------

++++ Mesa:

  - Update to release 24.3.0~rc2
  - -> https://www.phoronix.com/news/Mesa-24.3-rc2
  - Update to release 24.3.0~rc1
  - -> https://www.phoronix.com/news/Mesa-24.3-rc1-Released
  - refreshed patches:
    * n_drirc-disable-rgb10-for-chromium-on-amd.patch
    * python36-buildfix1.patch
    * python36-buildfix2.patch
    * tlsdesc_test.patch
    * u_mesa-CVE-2023-45913.patch
    * u_mesa-CVE-2023-45919.patch
    * u_mesa-CVE-2023-45922.patch
    * u_dep_xcb.patch
  - drop no longer supported options:
    * -Ddri3=enabled
    * -Ddri-search-path=%{_libdir}/dri
  - new files added in this update currently packaged as part of
    Mesa-dri:
    * %{_libdir}/gbm/dri_gbm.so

++++ Mesa-drivers:

  - Update to release 24.3.0~rc2
  - -> https://www.phoronix.com/news/Mesa-24.3-rc2
  - Update to release 24.3.0~rc1
  - -> https://www.phoronix.com/news/Mesa-24.3-rc1-Released
  - refreshed patches:
    * n_drirc-disable-rgb10-for-chromium-on-amd.patch
    * python36-buildfix1.patch
    * python36-buildfix2.patch
    * tlsdesc_test.patch
    * u_mesa-CVE-2023-45913.patch
    * u_mesa-CVE-2023-45919.patch
    * u_mesa-CVE-2023-45922.patch
    * u_dep_xcb.patch
  - drop no longer supported options:
    * -Ddri3=enabled
    * -Ddri-search-path=%{_libdir}/dri
  - new files added in this update currently packaged as part of
    Mesa-dri:
    * %{_libdir}/gbm/dri_gbm.so

++++ ansible-core:

  - Added necessary test dependencies: pytest-xdist, pytest-mock,
    pytz, passlib, git-core, and openssh to ensure proper test
    execution.
  - Introduced the `ansible_python_version` variable and updated the
    test command.

++++ apache2-mod_php8:

  - version update to 8.3.14 [bsc#1233644] [bsc#1233651] [bsc#1233703] [bsc#1233702] [bsc#1233705]
    CLI:
    Fixed bug GH-16373 (Shebang is not skipped for router script in cli-server started through shebang).
    Fixed bug GHSA-4w77-75f9-2c8w (Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface).
    COM:
    Fixed out of bound writes to SafeArray data.
    Core:
    Fixed bug GH-16168 (php 8.1 and earlier crash immediately when compiled with Xcode 16 clang on macOS 15).
    Fixed bug GH-16371 (Assertion failure in Zend/zend_weakrefs.c:646).
    Fixed bug GH-16515 (Incorrect propagation of ZEND_ACC_RETURN_REFERENCE for call trampoline).
    Fixed bug GH-16509 (Incorrect line number in function redeclaration error).
    Fixed bug GH-16508 (Incorrect line number in inheritance errors of delayed early bound classes).
    Fixed bug GH-16648 (Use-after-free during array sorting).
    Curl:
    Fixed bug GH-16302 (CurlMultiHandle holds a reference to CurlHandle if curl_multi_add_handle fails).
    Date:
    Fixed bug GH-16454 (Unhandled INF in date_sunset() with tiny $utcOffset).
    Fixed bug GH-14732 (date_sun_info() fails for non-finite values).
    DBA:
    Fixed bug GH-16390 (dba_open() can segfault for "pathless" streams).
    DOM:
    Fixed bug GH-16316 (DOMXPath breaks when not initialized properly).
    Add missing hierarchy checks to replaceChild.
    Fixed bug GH-16336 (Attribute intern document mismanagement).
    Fixed bug GH-16338 (Null-dereference in ext/dom/node.c).
    Fixed bug GH-16473 (dom_import_simplexml stub is wrong).
    Fixed bug GH-16533 (Segfault when adding attribute to parent that is not an element).
    Fixed bug GH-16535 (UAF when using document as a child).
    Fixed bug GH-16593 (Assertion failure in DOM->replaceChild).
    Fixed bug GH-16595 (Another UAF in DOM -> cloneNode).
    EXIF:
    Fixed bug GH-16409 (Segfault in exif_thumbnail when not dealing with a real file).
    FFI:
    Fixed bug GH-16397 (Segmentation fault when comparing FFI object).
    Filter:
    Fixed bug GH-16523 (FILTER_FLAG_HOSTNAME accepts ending hyphen).
    FPM:
    Fixed bug GH-16628 (FPM logs are getting corrupted with this log statement).
    GD:
    Fixed bug GH-16334 (imageaffine overflow on matrix elements).
    Fixed bug GH-16427 (Unchecked libavif return values).
    Fixed bug GH-16559 (UBSan abort in ext/gd/libgd/gd_interpolation.c:1007).
    GMP:
    Fixed floating point exception bug with gmp_pow when using large exposant values. (David Carlier).
    Fixed bug GH-16411 (gmp_export() can cause overflow).
    Fixed bug GH-16501 (gmp_random_bits() can cause overflow).
    Fixed gmp_pow() overflow bug with large base/exponents.
    Fixed segfaults and other issues related to operator overloading with GMP objects.
    LDAP:
    Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape). (CVE-2024-8932)
    MBstring:
    Fixed bug GH-16361 (mb_substr overflow on start/length arguments).
    MySQLnd:
    Fixed bug GHSA-h35g-vwh6-m678 (Leak partial content of the heap through heap buffer over-read). (CVE-2024-8929)
    Opcache:
    Fixed bug GH-16408 (Array to string conversion warning emitted in optimizer).
    OpenSSL:
    Fixed bug GH-16357 (openssl may modify member types of certificate arrays).
    Fixed bug GH-16433 (Large values for openssl_csr_sign() $days overflow).
    Fix various memory leaks on error conditions in openssl_x509_parse().
    PDO DBLIB:
    Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the dblib quoter causing OOB writes). (CVE-2024-11236)
    PDO Firebird:
    Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the firebird quoter causing OOB writes). (CVE-2024-11236)
    PDO ODBC:
    Fixed bug GH-16450 (PDO_ODBC can inject garbage into field values).
    Phar:
    Fixed bug GH-16406 (Assertion failure in ext/phar/phar.c:2808).
    PHPDBG:
    Fixed bug GH-16174 (Empty string is an invalid expression for ev).
    Reflection:
    Fixed bug GH-16601 (Memory leak in Reflection constructors).
    Session:
    Fixed bug GH-16385 (Unexpected null returned by session_set_cookie_params).
    Fixed bug GH-16290 (overflow on cookie_lifetime ini value).
    SOAP:
    Fixed bug GH-16318 (Recursive array segfaults soap encoding).
    Fixed bug GH-16429 (Segmentation fault access null pointer in SoapClient).
    Sockets:
    Fixed bug with overflow socket_recvfrom $length argument.
    SPL:
    Fixed bug GH-16337 (Use-after-free in SplHeap).
    Fixed bug GH-16464 (Use-after-free in SplDoublyLinkedList::offsetSet()).
    Fixed bug GH-16479 (Use-after-free in SplObjectStorage::setInfo()).
    Fixed bug GH-16478 (Use-after-free in SplFixedArray::unset()).
    Fixed bug GH-16588 (UAF in Observer->serialize).
    Fix GH-16477 (Segmentation fault when calling __debugInfo() after failed SplFileObject::__constructor).
    Fixed bug GH-16589 (UAF in SplDoublyLinked->serialize()).
    Fixed bug GH-14687 (segfault on SplObjectIterator instance).
    Fixed bug GH-16604 (Memory leaks in SPL constructors).
    Fixed bug GH-16646 (UAF in ArrayObject::unset() and ArrayObject::exchangeArray()).
    Standard:
    Fixed bug GH-16293 (Failed assertion when throwing in assert() callback with bail enabled).
    Streams:
    Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream context might allow for CRLF injection in URIs). (CVE-2024-11234)
    Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with convert.quoted-printable-decode filter). (CVE-2024-11233)
    SysVMsg:
    Fixed bug GH-16592 (msg_send() crashes when a type does not properly serialized).
    SysVShm:
    Fixed bug GH-16591 (Assertion error in shm_put_var).
    XMLReader:
    Fixed bug GH-16292 (Segmentation fault in ext/xmlreader/php_xmlreader.c).
    Zlib:
    Fixed bug GH-16326 (Memory management is broken for bad dictionaries.) (cmb)

++++ apko:

  - Update to version 0.20.1:
    * fix: Allow accounts to belong to GID 0 (#1407)
    * build(deps): bump github/codeql-action from 3.27.4 to 3.27.5
    (#1410)
    * build(deps): bump google.golang.org/api from 0.206.0 to 0.207.0
    (#1409)
    * build(deps): bump step-security/harden-runner from 2.10.1 to
    2.10.2 (#1408)
    * build(deps): bump google.golang.org/api from 0.205.0 to 0.206.0
    (#1405)

++++ aws-c-cal:

  - Update to version 0.8.1
    * chore: Modified bug issue template to add checkbox to
    report potential regression. by @ashishdhingra in (#199)
    * RSA PKCS1.5 SHA1 signing by @DmitriyMusatkin in (#201)

++++ aws-checksums:

  - Update to version 0.2.2
    * Fix predefines for bswap for old compilers by @DmitriyMusatkin in (#99)
  - from version 0.2.1
    * chore: Modified bug issue template to add checkbox to
    report potential regression. by @ashishdhingra in (#95)
    * CRC big endian support by @DmitriyMusatkin in (#97)

++++ aws-crt-cpp:

  - Update to version 0.29.5
    * Update submodule by @xiazhvera in (#684)
  - from version 0.29.4
    * Request response workspace by @bretambrose in (#664)

++++ bitwarden:

  - New upstream release 2024.11.2
    * Revert the passphrase minimum back to 3 words

++++ clBLAS:

  - Fix build on aarch64 with upstream patch:
    * 362.patch

++++ dovecot23:

  - Add dovecot-link-icu76.patch: configure: Explicitly check for icu-uc
    Ensure we link against libicu-uc when it's split in v76
    (boo#1233582).
  - Call autoreconf in build section, as above patch touches the
    build system.

++++ emacs-auctex:

  - Use gzip -n for deterministic gzip headers

++++ falcoctl:

  - Update to version 0.10.1:
    * update(go): bumped driverkit dep to v0.20.4.
    * fix(pkg/oci): fix Tags pagination support.
    * chore(deps): Bump cloud.google.com/go/storage from 1.46.0 to
    1.47.0
    * chore(deps): Bump google.golang.org/api from 0.205.0 to 0.206.0
    * chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to
    4.5.1
    * chore(deps): Bump golang.org/x/oauth2 from 0.23.0 to 0.24.0
    * chore(deps): Bump github.com/distribution/distribution/v3
    * chore(deps): Bump golang.org/x/net from 0.30.0 to 0.31.0
    * chore(deps): Bump golang.org/x/term from 0.25.0 to 0.26.0
    * chore(deps): Bump google.golang.org/api from 0.204.0 to 0.205.0
    * chore(deps): Bump goreleaser/goreleaser-action in the actions
    group
    * chore(deps): Bump github.com/onsi/ginkgo/v2 from 2.20.2 to
    2.21.0
    * chore(deps): Bump google.golang.org/api from 0.200.0 to 0.204.0
    * chore(deps): Bump cloud.google.com/go/storage from 1.45.0 to
    1.46.0
    * chore(deps): Bump github.com/onsi/gomega from 1.34.2 to 1.35.1
    * chore(deps): Bump k8s.io/client-go from 0.30.2 to 0.31.2
    * chore(deps): Bump github.com/sigstore/cosign/v2 from 2.2.4 to
    2.4.1
    * chore(deps): Bump github.com/onsi/ginkgo/v2 from 2.19.0 to
    2.20.2
    * chore(deps): Bump github.com/docker/docker
    * chore(deps): Bump k8s.io/apimachinery from 0.30.2 to 0.31.2
    * chore(deps): Bump cloud.google.com/go/storage from 1.43.0 to
    1.45.0
    * chore(deps): Bump github.com/onsi/gomega from 1.33.1 to 1.34.2
    * chore(deps): Bump github.com/docker/cli
    * chore(deps): Bump the actions group with 2 updates
    * chore(deps): Bump github.com/cilium/ebpf from 0.15.0 to 0.16.0
    * chore(deps): Bump github.com/distribution/distribution/v3
    * chore(deps): align go.opentelemetry.io/otel/sdk/metric with
    otel/sdk v1.29.0
    * update go to 1.22.8
    * chore(deps): Bump the gomod group across 1 directory with 11
    updates
    * chore(deps): Bump the actions group with 2 updates
    * fix(cmd): relax file perms for Falco driver config override
    * chore(deps): Bump the actions group with 4 updates
    * chore(deps): Bump the actions group with 2 updates

++++ fontforge:

  - add use-sysconfig-not-distutils.patch: fix build with python 3.13

++++ forgejo-runner:

  - Update to version 5.0.2:
    * Fixes a regression that was introduced in version 5.0.0 by which
    skipped jobs were marked as failed instead

++++ gtk4:

  - Update to version 4.16.6:
    + To prevent issues when using GTK under kwin, this release makes
    Wayland color management opt-in. To experiment with it, set
    GDK_DEBUG=color-mgmt.
    + GtkText: Don't select inserted Emoji
    + GtkApplication: Set the default window icon from the app ID
    + GtkFontChooser: Make the dialog more shrinkable
    + Updated translations.

++++ git-lfs:

  - update to version 3.6.0:
    https://github.com/git-lfs/git-lfs/releases/tag/v3.6.0

++++ gnome-initial-setup:

  - Update to version 47.2:
    + Previously, the timezone page would list duplicate entries for
    some cities, and selecting the wrong one would crash Initial
    Setup. In this release these problematic entries are not shown.
    + Previous versions would crash on startup when run with GTK
    4.17, which has made it a fatal error to use certain functions
    before gtk_init() has been called. This crash is fixed in this
    release.
    + Updated translations.

++++ gnome-settings-daemon:

  - Update to version 47.2:
    + Power:
  - Fix possible invalid reads if backlight fails to initialize.
  - Handle broken upower more elegantly.
  - Test warning fixes.
    + Updated translations.

++++ govulncheck-vulndb:

  - Update to version 0.0.20241121T195252 2024-11-21T19:52:52Z.
    Refs jsc#PED-11136
    Go CVE Numbering Authority IDs added or updated with aliases:
    * GO-2024-3279 GHSA-7225-m954-23v7
    * GO-2024-3280 CVE-2024-52282 GHSA-9c5p-35gj-jqp4
    * GO-2024-3281 CVE-2024-52280 GHSA-j5hq-5jcr-xwx7
    * GO-2024-3282 GHSA-r4pg-vg54-wxx4
    * GO-2024-3283 CVE-2024-52309

++++ gp2c:

  - Update to release 0.14
    * By default, support PARI 2.17 now.
    * Support for ``_*`` (primorial) operator from pari 2.16.1
    * Support for ``#_~`` from 2.16.1

++++ gpu-screen-recorder:

  - Update to version 20241121:
    * Allow recording from both audio devices and application audio
    at the same time
    * Workaround amd driver bug that causes garbage output on some
    gpus in some amd driver versions
    * Improve window content sizing behavior (no more horizontal
    scroll)

++++ gpu-screen-recorder-gtk:

  - Update to version 20241121:
    * Merge audio devices and application audio into one list
    * Always show record buttons
    * Better scrolled window resizing

++++ gtksourceview5:

  - Update to version 5.14.2:
    + Ignore various libxml2 deprecations
    + Fix some incorrect GI annotations
    + Fix extraneous dismissal of hover providers in some cases
    + Add missing 5_14 version macros

++++ iptraf-ng:

  - Update to release 1.2.2
    * serv.c: validate loading/saving/entry of port ranges
    * limit interface name lengths to IFNAMSIZ [CVE-2024-52949]

++++ python-bqplot:

  - Also skip python313 gh#bqplot/bqplot#1639

++++ kopia:

  - Update to version 0.18.2:
    * feat(general): JSON marshaler helper for `time.Duration`
    (#4194)
    * feat(ui): upgraded htmlui to the latest version (#4268)
    * feat(snapshots): Fix for #2037 Add symlink support for
    .kopiaignore (#4190)
    * build(deps): bump github.com/hanwen/go-fuse/v2 from 2.6.3 to
    2.6.4 (#4265)
    * build(deps): bump github.com/mocktools/go-smtp-mock/v2 (#4264)
    * build(deps): bump the common-golang-dependencies group with 4
    updates (#4263)
    * fix(server): handle unset password hash version in user profile
    (#4259)
    * fix(notifications): fixed headers for email notifications
    (#4258)

++++ multipath-tools:

  - Update to version 0.11.0~1+118+suse.4a51b1a
    See NEWS.md for details about upstream changes in 0.11.0.
    * Pre-release of upstream 0.11.0
    * Rework of the path checking algorithm to reduce wait time and improve
    performance
    * Modified the systemd unit `multipathd.service` such that multipathd will now
    restart after a failure or crash (gh#opensvc/multipath-tools#100)
    * multipathd: move systemd watchdog handling into daemon (bsc#1232227)
    * libmultipath: dm_get_maps(): don't bail out for single-map failures
    (bsc#1233588, gh#opensvc/multipath-tools#102)
    * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
    * multipathd: fix deferred_failback_tick for reload removes

++++ mozilla-nss:

  - update to NSS 3.106
    * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
    * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
    * bmo#1899402 - Correctly destroy bulkkey in error scenario.
    * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
    * bmo#1923002 - Extract certificates with handshake collection script.
    * bmo#1923006 - Specify len_control for fuzz targets.
    * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
    * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
    * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
    * bmo#1921768 - allow null phKey in NSC_DeriveKey.
    * bmo#1921801 - Only create seed corpus zip from existing corpus.
    * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
    * bmo#1920138 - Increase optimization level for fuzz builds.
    * bmo#1920470 - Remove incorrect assert.
    * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
    * bmo#1920945 - Polish corpus collection for automation.
    * bmo#1917572 - Detect new and unfuzzed SSL options.
    * bmo#1804646 - PKCS12 fuzzing target.
  - requires NSPR 4.36

++++ mozjs78:

  - Fix build against icu 76.1: link the correct libraries (icu-uc
    instead of icu-i18n) (boo#1233576).

++++ pari:

  - Update to release 2.17
    * Fixed rare SEGV in sumnumrat function
    * Fixed `gp -p N` not checking for N < 2^32

++++ s2n:

  - Update to version 1.5.9
    * feat: Reworking cleanup behavior (#4871)
    * chore: broaden use of flaky mark (#4865)
    * chore: configure dependabot (#4861)
  - from version 1.5.8
    * fix: fix open AF_INET sockets in s2n_self_talk_ktls_test.c (#4852)
    * chore: update github PR template (#4885)
    * feat: add new security policy `20241106` (#4874)
    * chore: remove unused benchmarks (#4869)
    * ci: Clean dup source tree for CRT (#4882)
    * ci: remove www.mozilla.com from well-known to unblock CI (#4880)
    * fix: move prelude inclusion as PRIVATE (#4876)
    * build: add s2n_prelude.h to consolidate defines (#4465)
    * chore: bindings release 0.3.6 (#4867)
    * doc: fix incorrect README references (#4863)
    * fix: typo in comment of s2n_self_talk_tls13_test (#4864)

++++ spdlog:

  - Updated spdlog to 1.15.0
  - Release notes 1.15.0:
    * Update bundled fmt to 11.0.2 by @gabime in #3236
    * Add wide character formatting and output support to console in wincolor_sink. by @DominikGrabiec in #3092
    * Allow customization of syslog_sink by @Silex in #3124
    * make example compatible with fmt 11 by @ziyao233 in #3130
    * Fix building with FMT_ENFORCE_COMPILE_STRING by @AJIOB in #3137
    * fix: set /Zc:__cplusplus and /MP to MSVC only by @zjyhjqs in #3139
    * V1.x : fixed "suggest override" errors for gcc 8.5 and gcc 9.1 by @esmirno in #3158
    * Add info about max_files in the docstrings of hourly/daily file sinks by @themightyoarfish in #3170
    * use std::lock_guard instead of std::unique_lock by @wsehjk in #3179
    * fix/issue-3101: fix the issue where mdc ignores SPDLOG_NO_TLS by @Allen-20180115 in #3184
    * Update mdc.h error message by @gabime in #3185
    * [docs] Update conan install command in README by @uilianries in #3172
    * Update CMakeLists.txt, Fix spelling errors by @zgzhengSEU in #3193
    * Fix warning - extra ';' for -Wextra-semi by @hydai in #3198
    * Improve Cross-Platform Build Instructions in Documentation by @Mq-b in #3229
    * Exchange promise for condition_variable when flushing (fixes #3221) by @Oipo in #3228
    * Ensure flush callback gets called in move-assign operator by @Oipo in #3232
    * Make flush async again in async logger to prevent crashes and hangs by @gabime in #3235
    * Update README.md by @gabime in #3240
    * utf8_to_wstrbuf now handles invalid utf8 sequences by @captainurist in #3244 and #3245
    * Added tsan option to CMake and CI by @gabime in #3237 and #3247 /pull/3244

++++ tinysparql:

  - Update to version 3.8.1:
    + Fix leak iterating bus-based cursors
    + Fix allowed extension for Turtle files in ontology definitions
    + Test fixes
    + Updated translations.

++++ wireshark:

  - Wireshark 4.4.2
    * CVE-2024-11595: FiveCo RAP dissector infinite loop (boo#1233594).
    * CVE-2024-11596: ECMP dissector crash (boo#1233593).
  - Many more features, bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-4.4.2.html

++++ localsearch:

  - Update to version 3.8.1:
    + Fix multiple leaks in metadata extractors
    + Fix reporting of metadata extraction progress in "localsearch
    daemon -f" and "localsearch status"
    + Cache mounts for generating stable content identifiers
    + Added missing includes necessary for Musl libc
    + Updated translations.

++++ pantheon-stylesheet:

  - update to 8.2.0:
    * Improve support for LibAdwaita widgets

++++ php8:

  - version update to 8.3.14 [bsc#1233644] [bsc#1233651] [bsc#1233703] [bsc#1233702] [bsc#1233705]
    CLI:
    Fixed bug GH-16373 (Shebang is not skipped for router script in cli-server started through shebang).
    Fixed bug GHSA-4w77-75f9-2c8w (Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface).
    COM:
    Fixed out of bound writes to SafeArray data.
    Core:
    Fixed bug GH-16168 (php 8.1 and earlier crash immediately when compiled with Xcode 16 clang on macOS 15).
    Fixed bug GH-16371 (Assertion failure in Zend/zend_weakrefs.c:646).
    Fixed bug GH-16515 (Incorrect propagation of ZEND_ACC_RETURN_REFERENCE for call trampoline).
    Fixed bug GH-16509 (Incorrect line number in function redeclaration error).
    Fixed bug GH-16508 (Incorrect line number in inheritance errors of delayed early bound classes).
    Fixed bug GH-16648 (Use-after-free during array sorting).
    Curl:
    Fixed bug GH-16302 (CurlMultiHandle holds a reference to CurlHandle if curl_multi_add_handle fails).
    Date:
    Fixed bug GH-16454 (Unhandled INF in date_sunset() with tiny $utcOffset).
    Fixed bug GH-14732 (date_sun_info() fails for non-finite values).
    DBA:
    Fixed bug GH-16390 (dba_open() can segfault for "pathless" streams).
    DOM:
    Fixed bug GH-16316 (DOMXPath breaks when not initialized properly).
    Add missing hierarchy checks to replaceChild.
    Fixed bug GH-16336 (Attribute intern document mismanagement).
    Fixed bug GH-16338 (Null-dereference in ext/dom/node.c).
    Fixed bug GH-16473 (dom_import_simplexml stub is wrong).
    Fixed bug GH-16533 (Segfault when adding attribute to parent that is not an element).
    Fixed bug GH-16535 (UAF when using document as a child).
    Fixed bug GH-16593 (Assertion failure in DOM->replaceChild).
    Fixed bug GH-16595 (Another UAF in DOM -> cloneNode).
    EXIF:
    Fixed bug GH-16409 (Segfault in exif_thumbnail when not dealing with a real file).
    FFI:
    Fixed bug GH-16397 (Segmentation fault when comparing FFI object).
    Filter:
    Fixed bug GH-16523 (FILTER_FLAG_HOSTNAME accepts ending hyphen).
    FPM:
    Fixed bug GH-16628 (FPM logs are getting corrupted with this log statement).
    GD:
    Fixed bug GH-16334 (imageaffine overflow on matrix elements).
    Fixed bug GH-16427 (Unchecked libavif return values).
    Fixed bug GH-16559 (UBSan abort in ext/gd/libgd/gd_interpolation.c:1007).
    GMP:
    Fixed floating point exception bug with gmp_pow when using large exposant values. (David Carlier).
    Fixed bug GH-16411 (gmp_export() can cause overflow).
    Fixed bug GH-16501 (gmp_random_bits() can cause overflow).
    Fixed gmp_pow() overflow bug with large base/exponents.
    Fixed segfaults and other issues related to operator overloading with GMP objects.
    LDAP:
    Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape). (CVE-2024-8932)
    MBstring:
    Fixed bug GH-16361 (mb_substr overflow on start/length arguments).
    MySQLnd:
    Fixed bug GHSA-h35g-vwh6-m678 (Leak partial content of the heap through heap buffer over-read). (CVE-2024-8929)
    Opcache:
    Fixed bug GH-16408 (Array to string conversion warning emitted in optimizer).
    OpenSSL:
    Fixed bug GH-16357 (openssl may modify member types of certificate arrays).
    Fixed bug GH-16433 (Large values for openssl_csr_sign() $days overflow).
    Fix various memory leaks on error conditions in openssl_x509_parse().
    PDO DBLIB:
    Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the dblib quoter causing OOB writes). (CVE-2024-11236)
    PDO Firebird:
    Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the firebird quoter causing OOB writes). (CVE-2024-11236)
    PDO ODBC:
    Fixed bug GH-16450 (PDO_ODBC can inject garbage into field values).
    Phar:
    Fixed bug GH-16406 (Assertion failure in ext/phar/phar.c:2808).
    PHPDBG:
    Fixed bug GH-16174 (Empty string is an invalid expression for ev).
    Reflection:
    Fixed bug GH-16601 (Memory leak in Reflection constructors).
    Session:
    Fixed bug GH-16385 (Unexpected null returned by session_set_cookie_params).
    Fixed bug GH-16290 (overflow on cookie_lifetime ini value).
    SOAP:
    Fixed bug GH-16318 (Recursive array segfaults soap encoding).
    Fixed bug GH-16429 (Segmentation fault access null pointer in SoapClient).
    Sockets:
    Fixed bug with overflow socket_recvfrom $length argument.
    SPL:
    Fixed bug GH-16337 (Use-after-free in SplHeap).
    Fixed bug GH-16464 (Use-after-free in SplDoublyLinkedList::offsetSet()).
    Fixed bug GH-16479 (Use-after-free in SplObjectStorage::setInfo()).
    Fixed bug GH-16478 (Use-after-free in SplFixedArray::unset()).
    Fixed bug GH-16588 (UAF in Observer->serialize).
    Fix GH-16477 (Segmentation fault when calling __debugInfo() after failed SplFileObject::__constructor).
    Fixed bug GH-16589 (UAF in SplDoublyLinked->serialize()).
    Fixed bug GH-14687 (segfault on SplObjectIterator instance).
    Fixed bug GH-16604 (Memory leaks in SPL constructors).
    Fixed bug GH-16646 (UAF in ArrayObject::unset() and ArrayObject::exchangeArray()).
    Standard:
    Fixed bug GH-16293 (Failed assertion when throwing in assert() callback with bail enabled).
    Streams:
    Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream context might allow for CRLF injection in URIs). (CVE-2024-11234)
    Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with convert.quoted-printable-decode filter). (CVE-2024-11233)
    SysVMsg:
    Fixed bug GH-16592 (msg_send() crashes when a type does not properly serialized).
    SysVShm:
    Fixed bug GH-16591 (Assertion error in shm_put_var).
    XMLReader:
    Fixed bug GH-16292 (Segmentation fault in ext/xmlreader/php_xmlreader.c).
    Zlib:
    Fixed bug GH-16326 (Memory management is broken for bad dictionaries.) (cmb)

++++ php8-embed:

  - version update to 8.3.14 [bsc#1233644] [bsc#1233651] [bsc#1233703] [bsc#1233702] [bsc#1233705]
    CLI:
    Fixed bug GH-16373 (Shebang is not skipped for router script in cli-server started through shebang).
    Fixed bug GHSA-4w77-75f9-2c8w (Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface).
    COM:
    Fixed out of bound writes to SafeArray data.
    Core:
    Fixed bug GH-16168 (php 8.1 and earlier crash immediately when compiled with Xcode 16 clang on macOS 15).
    Fixed bug GH-16371 (Assertion failure in Zend/zend_weakrefs.c:646).
    Fixed bug GH-16515 (Incorrect propagation of ZEND_ACC_RETURN_REFERENCE for call trampoline).
    Fixed bug GH-16509 (Incorrect line number in function redeclaration error).
    Fixed bug GH-16508 (Incorrect line number in inheritance errors of delayed early bound classes).
    Fixed bug GH-16648 (Use-after-free during array sorting).
    Curl:
    Fixed bug GH-16302 (CurlMultiHandle holds a reference to CurlHandle if curl_multi_add_handle fails).
    Date:
    Fixed bug GH-16454 (Unhandled INF in date_sunset() with tiny $utcOffset).
    Fixed bug GH-14732 (date_sun_info() fails for non-finite values).
    DBA:
    Fixed bug GH-16390 (dba_open() can segfault for "pathless" streams).
    DOM:
    Fixed bug GH-16316 (DOMXPath breaks when not initialized properly).
    Add missing hierarchy checks to replaceChild.
    Fixed bug GH-16336 (Attribute intern document mismanagement).
    Fixed bug GH-16338 (Null-dereference in ext/dom/node.c).
    Fixed bug GH-16473 (dom_import_simplexml stub is wrong).
    Fixed bug GH-16533 (Segfault when adding attribute to parent that is not an element).
    Fixed bug GH-16535 (UAF when using document as a child).
    Fixed bug GH-16593 (Assertion failure in DOM->replaceChild).
    Fixed bug GH-16595 (Another UAF in DOM -> cloneNode).
    EXIF:
    Fixed bug GH-16409 (Segfault in exif_thumbnail when not dealing with a real file).
    FFI:
    Fixed bug GH-16397 (Segmentation fault when comparing FFI object).
    Filter:
    Fixed bug GH-16523 (FILTER_FLAG_HOSTNAME accepts ending hyphen).
    FPM:
    Fixed bug GH-16628 (FPM logs are getting corrupted with this log statement).
    GD:
    Fixed bug GH-16334 (imageaffine overflow on matrix elements).
    Fixed bug GH-16427 (Unchecked libavif return values).
    Fixed bug GH-16559 (UBSan abort in ext/gd/libgd/gd_interpolation.c:1007).
    GMP:
    Fixed floating point exception bug with gmp_pow when using large exposant values. (David Carlier).
    Fixed bug GH-16411 (gmp_export() can cause overflow).
    Fixed bug GH-16501 (gmp_random_bits() can cause overflow).
    Fixed gmp_pow() overflow bug with large base/exponents.
    Fixed segfaults and other issues related to operator overloading with GMP objects.
    LDAP:
    Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape). (CVE-2024-8932)
    MBstring:
    Fixed bug GH-16361 (mb_substr overflow on start/length arguments).
    MySQLnd:
    Fixed bug GHSA-h35g-vwh6-m678 (Leak partial content of the heap through heap buffer over-read). (CVE-2024-8929)
    Opcache:
    Fixed bug GH-16408 (Array to string conversion warning emitted in optimizer).
    OpenSSL:
    Fixed bug GH-16357 (openssl may modify member types of certificate arrays).
    Fixed bug GH-16433 (Large values for openssl_csr_sign() $days overflow).
    Fix various memory leaks on error conditions in openssl_x509_parse().
    PDO DBLIB:
    Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the dblib quoter causing OOB writes). (CVE-2024-11236)
    PDO Firebird:
    Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the firebird quoter causing OOB writes). (CVE-2024-11236)
    PDO ODBC:
    Fixed bug GH-16450 (PDO_ODBC can inject garbage into field values).
    Phar:
    Fixed bug GH-16406 (Assertion failure in ext/phar/phar.c:2808).
    PHPDBG:
    Fixed bug GH-16174 (Empty string is an invalid expression for ev).
    Reflection:
    Fixed bug GH-16601 (Memory leak in Reflection constructors).
    Session:
    Fixed bug GH-16385 (Unexpected null returned by session_set_cookie_params).
    Fixed bug GH-16290 (overflow on cookie_lifetime ini value).
    SOAP:
    Fixed bug GH-16318 (Recursive array segfaults soap encoding).
    Fixed bug GH-16429 (Segmentation fault access null pointer in SoapClient).
    Sockets:
    Fixed bug with overflow socket_recvfrom $length argument.
    SPL:
    Fixed bug GH-16337 (Use-after-free in SplHeap).
    Fixed bug GH-16464 (Use-after-free in SplDoublyLinkedList::offsetSet()).
    Fixed bug GH-16479 (Use-after-free in SplObjectStorage::setInfo()).
    Fixed bug GH-16478 (Use-after-free in SplFixedArray::unset()).
    Fixed bug GH-16588 (UAF in Observer->serialize).
    Fix GH-16477 (Segmentation fault when calling __debugInfo() after failed SplFileObject::__constructor).
    Fixed bug GH-16589 (UAF in SplDoublyLinked->serialize()).
    Fixed bug GH-14687 (segfault on SplObjectIterator instance).
    Fixed bug GH-16604 (Memory leaks in SPL constructors).
    Fixed bug GH-16646 (UAF in ArrayObject::unset() and ArrayObject::exchangeArray()).
    Standard:
    Fixed bug GH-16293 (Failed assertion when throwing in assert() callback with bail enabled).
    Streams:
    Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream context might allow for CRLF injection in URIs). (CVE-2024-11234)
    Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with convert.quoted-printable-decode filter). (CVE-2024-11233)
    SysVMsg:
    Fixed bug GH-16592 (msg_send() crashes when a type does not properly serialized).
    SysVShm:
    Fixed bug GH-16591 (Assertion error in shm_put_var).
    XMLReader:
    Fixed bug GH-16292 (Segmentation fault in ext/xmlreader/php_xmlreader.c).
    Zlib:
    Fixed bug GH-16326 (Memory management is broken for bad dictionaries.) (cmb)

++++ php8-fastcgi:

  - version update to 8.3.14 [bsc#1233644] [bsc#1233651] [bsc#1233703] [bsc#1233702] [bsc#1233705]
    CLI:
    Fixed bug GH-16373 (Shebang is not skipped for router script in cli-server started through shebang).
    Fixed bug GHSA-4w77-75f9-2c8w (Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface).
    COM:
    Fixed out of bound writes to SafeArray data.
    Core:
    Fixed bug GH-16168 (php 8.1 and earlier crash immediately when compiled with Xcode 16 clang on macOS 15).
    Fixed bug GH-16371 (Assertion failure in Zend/zend_weakrefs.c:646).
    Fixed bug GH-16515 (Incorrect propagation of ZEND_ACC_RETURN_REFERENCE for call trampoline).
    Fixed bug GH-16509 (Incorrect line number in function redeclaration error).
    Fixed bug GH-16508 (Incorrect line number in inheritance errors of delayed early bound classes).
    Fixed bug GH-16648 (Use-after-free during array sorting).
    Curl:
    Fixed bug GH-16302 (CurlMultiHandle holds a reference to CurlHandle if curl_multi_add_handle fails).
    Date:
    Fixed bug GH-16454 (Unhandled INF in date_sunset() with tiny $utcOffset).
    Fixed bug GH-14732 (date_sun_info() fails for non-finite values).
    DBA:
    Fixed bug GH-16390 (dba_open() can segfault for "pathless" streams).
    DOM:
    Fixed bug GH-16316 (DOMXPath breaks when not initialized properly).
    Add missing hierarchy checks to replaceChild.
    Fixed bug GH-16336 (Attribute intern document mismanagement).
    Fixed bug GH-16338 (Null-dereference in ext/dom/node.c).
    Fixed bug GH-16473 (dom_import_simplexml stub is wrong).
    Fixed bug GH-16533 (Segfault when adding attribute to parent that is not an element).
    Fixed bug GH-16535 (UAF when using document as a child).
    Fixed bug GH-16593 (Assertion failure in DOM->replaceChild).
    Fixed bug GH-16595 (Another UAF in DOM -> cloneNode).
    EXIF:
    Fixed bug GH-16409 (Segfault in exif_thumbnail when not dealing with a real file).
    FFI:
    Fixed bug GH-16397 (Segmentation fault when comparing FFI object).
    Filter:
    Fixed bug GH-16523 (FILTER_FLAG_HOSTNAME accepts ending hyphen).
    FPM:
    Fixed bug GH-16628 (FPM logs are getting corrupted with this log statement).
    GD:
    Fixed bug GH-16334 (imageaffine overflow on matrix elements).
    Fixed bug GH-16427 (Unchecked libavif return values).
    Fixed bug GH-16559 (UBSan abort in ext/gd/libgd/gd_interpolation.c:1007).
    GMP:
    Fixed floating point exception bug with gmp_pow when using large exposant values. (David Carlier).
    Fixed bug GH-16411 (gmp_export() can cause overflow).
    Fixed bug GH-16501 (gmp_random_bits() can cause overflow).
    Fixed gmp_pow() overflow bug with large base/exponents.
    Fixed segfaults and other issues related to operator overloading with GMP objects.
    LDAP:
    Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape). (CVE-2024-8932)
    MBstring:
    Fixed bug GH-16361 (mb_substr overflow on start/length arguments).
    MySQLnd:
    Fixed bug GHSA-h35g-vwh6-m678 (Leak partial content of the heap through heap buffer over-read). (CVE-2024-8929)
    Opcache:
    Fixed bug GH-16408 (Array to string conversion warning emitted in optimizer).
    OpenSSL:
    Fixed bug GH-16357 (openssl may modify member types of certificate arrays).
    Fixed bug GH-16433 (Large values for openssl_csr_sign() $days overflow).
    Fix various memory leaks on error conditions in openssl_x509_parse().
    PDO DBLIB:
    Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the dblib quoter causing OOB writes). (CVE-2024-11236)
    PDO Firebird:
    Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the firebird quoter causing OOB writes). (CVE-2024-11236)
    PDO ODBC:
    Fixed bug GH-16450 (PDO_ODBC can inject garbage into field values).
    Phar:
    Fixed bug GH-16406 (Assertion failure in ext/phar/phar.c:2808).
    PHPDBG:
    Fixed bug GH-16174 (Empty string is an invalid expression for ev).
    Reflection:
    Fixed bug GH-16601 (Memory leak in Reflection constructors).
    Session:
    Fixed bug GH-16385 (Unexpected null returned by session_set_cookie_params).
    Fixed bug GH-16290 (overflow on cookie_lifetime ini value).
    SOAP:
    Fixed bug GH-16318 (Recursive array segfaults soap encoding).
    Fixed bug GH-16429 (Segmentation fault access null pointer in SoapClient).
    Sockets:
    Fixed bug with overflow socket_recvfrom $length argument.
    SPL:
    Fixed bug GH-16337 (Use-after-free in SplHeap).
    Fixed bug GH-16464 (Use-after-free in SplDoublyLinkedList::offsetSet()).
    Fixed bug GH-16479 (Use-after-free in SplObjectStorage::setInfo()).
    Fixed bug GH-16478 (Use-after-free in SplFixedArray::unset()).
    Fixed bug GH-16588 (UAF in Observer->serialize).
    Fix GH-16477 (Segmentation fault when calling __debugInfo() after failed SplFileObject::__constructor).
    Fixed bug GH-16589 (UAF in SplDoublyLinked->serialize()).
    Fixed bug GH-14687 (segfault on SplObjectIterator instance).
    Fixed bug GH-16604 (Memory leaks in SPL constructors).
    Fixed bug GH-16646 (UAF in ArrayObject::unset() and ArrayObject::exchangeArray()).
    Standard:
    Fixed bug GH-16293 (Failed assertion when throwing in assert() callback with bail enabled).
    Streams:
    Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream context might allow for CRLF injection in URIs). (CVE-2024-11234)
    Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with convert.quoted-printable-decode filter). (CVE-2024-11233)
    SysVMsg:
    Fixed bug GH-16592 (msg_send() crashes when a type does not properly serialized).
    SysVShm:
    Fixed bug GH-16591 (Assertion error in shm_put_var).
    XMLReader:
    Fixed bug GH-16292 (Segmentation fault in ext/xmlreader/php_xmlreader.c).
    Zlib:
    Fixed bug GH-16326 (Memory management is broken for bad dictionaries.) (cmb)

++++ php8-fpm:

  - version update to 8.3.14 [bsc#1233644] [bsc#1233651] [bsc#1233703] [bsc#1233702] [bsc#1233705]
    CLI:
    Fixed bug GH-16373 (Shebang is not skipped for router script in cli-server started through shebang).
    Fixed bug GHSA-4w77-75f9-2c8w (Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface).
    COM:
    Fixed out of bound writes to SafeArray data.
    Core:
    Fixed bug GH-16168 (php 8.1 and earlier crash immediately when compiled with Xcode 16 clang on macOS 15).
    Fixed bug GH-16371 (Assertion failure in Zend/zend_weakrefs.c:646).
    Fixed bug GH-16515 (Incorrect propagation of ZEND_ACC_RETURN_REFERENCE for call trampoline).
    Fixed bug GH-16509 (Incorrect line number in function redeclaration error).
    Fixed bug GH-16508 (Incorrect line number in inheritance errors of delayed early bound classes).
    Fixed bug GH-16648 (Use-after-free during array sorting).
    Curl:
    Fixed bug GH-16302 (CurlMultiHandle holds a reference to CurlHandle if curl_multi_add_handle fails).
    Date:
    Fixed bug GH-16454 (Unhandled INF in date_sunset() with tiny $utcOffset).
    Fixed bug GH-14732 (date_sun_info() fails for non-finite values).
    DBA:
    Fixed bug GH-16390 (dba_open() can segfault for "pathless" streams).
    DOM:
    Fixed bug GH-16316 (DOMXPath breaks when not initialized properly).
    Add missing hierarchy checks to replaceChild.
    Fixed bug GH-16336 (Attribute intern document mismanagement).
    Fixed bug GH-16338 (Null-dereference in ext/dom/node.c).
    Fixed bug GH-16473 (dom_import_simplexml stub is wrong).
    Fixed bug GH-16533 (Segfault when adding attribute to parent that is not an element).
    Fixed bug GH-16535 (UAF when using document as a child).
    Fixed bug GH-16593 (Assertion failure in DOM->replaceChild).
    Fixed bug GH-16595 (Another UAF in DOM -> cloneNode).
    EXIF:
    Fixed bug GH-16409 (Segfault in exif_thumbnail when not dealing with a real file).
    FFI:
    Fixed bug GH-16397 (Segmentation fault when comparing FFI object).
    Filter:
    Fixed bug GH-16523 (FILTER_FLAG_HOSTNAME accepts ending hyphen).
    FPM:
    Fixed bug GH-16628 (FPM logs are getting corrupted with this log statement).
    GD:
    Fixed bug GH-16334 (imageaffine overflow on matrix elements).
    Fixed bug GH-16427 (Unchecked libavif return values).
    Fixed bug GH-16559 (UBSan abort in ext/gd/libgd/gd_interpolation.c:1007).
    GMP:
    Fixed floating point exception bug with gmp_pow when using large exposant values. (David Carlier).
    Fixed bug GH-16411 (gmp_export() can cause overflow).
    Fixed bug GH-16501 (gmp_random_bits() can cause overflow).
    Fixed gmp_pow() overflow bug with large base/exponents.
    Fixed segfaults and other issues related to operator overloading with GMP objects.
    LDAP:
    Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape). (CVE-2024-8932)
    MBstring:
    Fixed bug GH-16361 (mb_substr overflow on start/length arguments).
    MySQLnd:
    Fixed bug GHSA-h35g-vwh6-m678 (Leak partial content of the heap through heap buffer over-read). (CVE-2024-8929)
    Opcache:
    Fixed bug GH-16408 (Array to string conversion warning emitted in optimizer).
    OpenSSL:
    Fixed bug GH-16357 (openssl may modify member types of certificate arrays).
    Fixed bug GH-16433 (Large values for openssl_csr_sign() $days overflow).
    Fix various memory leaks on error conditions in openssl_x509_parse().
    PDO DBLIB:
    Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the dblib quoter causing OOB writes). (CVE-2024-11236)
    PDO Firebird:
    Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the firebird quoter causing OOB writes). (CVE-2024-11236)
    PDO ODBC:
    Fixed bug GH-16450 (PDO_ODBC can inject garbage into field values).
    Phar:
    Fixed bug GH-16406 (Assertion failure in ext/phar/phar.c:2808).
    PHPDBG:
    Fixed bug GH-16174 (Empty string is an invalid expression for ev).
    Reflection:
    Fixed bug GH-16601 (Memory leak in Reflection constructors).
    Session:
    Fixed bug GH-16385 (Unexpected null returned by session_set_cookie_params).
    Fixed bug GH-16290 (overflow on cookie_lifetime ini value).
    SOAP:
    Fixed bug GH-16318 (Recursive array segfaults soap encoding).
    Fixed bug GH-16429 (Segmentation fault access null pointer in SoapClient).
    Sockets:
    Fixed bug with overflow socket_recvfrom $length argument.
    SPL:
    Fixed bug GH-16337 (Use-after-free in SplHeap).
    Fixed bug GH-16464 (Use-after-free in SplDoublyLinkedList::offsetSet()).
    Fixed bug GH-16479 (Use-after-free in SplObjectStorage::setInfo()).
    Fixed bug GH-16478 (Use-after-free in SplFixedArray::unset()).
    Fixed bug GH-16588 (UAF in Observer->serialize).
    Fix GH-16477 (Segmentation fault when calling __debugInfo() after failed SplFileObject::__constructor).
    Fixed bug GH-16589 (UAF in SplDoublyLinked->serialize()).
    Fixed bug GH-14687 (segfault on SplObjectIterator instance).
    Fixed bug GH-16604 (Memory leaks in SPL constructors).
    Fixed bug GH-16646 (UAF in ArrayObject::unset() and ArrayObject::exchangeArray()).
    Standard:
    Fixed bug GH-16293 (Failed assertion when throwing in assert() callback with bail enabled).
    Streams:
    Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream context might allow for CRLF injection in URIs). (CVE-2024-11234)
    Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with convert.quoted-printable-decode filter). (CVE-2024-11233)
    SysVMsg:
    Fixed bug GH-16592 (msg_send() crashes when a type does not properly serialized).
    SysVShm:
    Fixed bug GH-16591 (Assertion error in shm_put_var).
    XMLReader:
    Fixed bug GH-16292 (Segmentation fault in ext/xmlreader/php_xmlreader.c).
    Zlib:
    Fixed bug GH-16326 (Memory management is broken for bad dictionaries.) (cmb)

++++ php8-test:

  - version update to 8.3.14 [bsc#1233644] [bsc#1233651] [bsc#1233703] [bsc#1233702] [bsc#1233705]
    CLI:
    Fixed bug GH-16373 (Shebang is not skipped for router script in cli-server started through shebang).
    Fixed bug GHSA-4w77-75f9-2c8w (Heap-Use-After-Free in sapi_read_post_data Processing in CLI SAPI Interface).
    COM:
    Fixed out of bound writes to SafeArray data.
    Core:
    Fixed bug GH-16168 (php 8.1 and earlier crash immediately when compiled with Xcode 16 clang on macOS 15).
    Fixed bug GH-16371 (Assertion failure in Zend/zend_weakrefs.c:646).
    Fixed bug GH-16515 (Incorrect propagation of ZEND_ACC_RETURN_REFERENCE for call trampoline).
    Fixed bug GH-16509 (Incorrect line number in function redeclaration error).
    Fixed bug GH-16508 (Incorrect line number in inheritance errors of delayed early bound classes).
    Fixed bug GH-16648 (Use-after-free during array sorting).
    Curl:
    Fixed bug GH-16302 (CurlMultiHandle holds a reference to CurlHandle if curl_multi_add_handle fails).
    Date:
    Fixed bug GH-16454 (Unhandled INF in date_sunset() with tiny $utcOffset).
    Fixed bug GH-14732 (date_sun_info() fails for non-finite values).
    DBA:
    Fixed bug GH-16390 (dba_open() can segfault for "pathless" streams).
    DOM:
    Fixed bug GH-16316 (DOMXPath breaks when not initialized properly).
    Add missing hierarchy checks to replaceChild.
    Fixed bug GH-16336 (Attribute intern document mismanagement).
    Fixed bug GH-16338 (Null-dereference in ext/dom/node.c).
    Fixed bug GH-16473 (dom_import_simplexml stub is wrong).
    Fixed bug GH-16533 (Segfault when adding attribute to parent that is not an element).
    Fixed bug GH-16535 (UAF when using document as a child).
    Fixed bug GH-16593 (Assertion failure in DOM->replaceChild).
    Fixed bug GH-16595 (Another UAF in DOM -> cloneNode).
    EXIF:
    Fixed bug GH-16409 (Segfault in exif_thumbnail when not dealing with a real file).
    FFI:
    Fixed bug GH-16397 (Segmentation fault when comparing FFI object).
    Filter:
    Fixed bug GH-16523 (FILTER_FLAG_HOSTNAME accepts ending hyphen).
    FPM:
    Fixed bug GH-16628 (FPM logs are getting corrupted with this log statement).
    GD:
    Fixed bug GH-16334 (imageaffine overflow on matrix elements).
    Fixed bug GH-16427 (Unchecked libavif return values).
    Fixed bug GH-16559 (UBSan abort in ext/gd/libgd/gd_interpolation.c:1007).
    GMP:
    Fixed floating point exception bug with gmp_pow when using large exposant values. (David Carlier).
    Fixed bug GH-16411 (gmp_export() can cause overflow).
    Fixed bug GH-16501 (gmp_random_bits() can cause overflow).
    Fixed gmp_pow() overflow bug with large base/exponents.
    Fixed segfaults and other issues related to operator overloading with GMP objects.
    LDAP:
    Fixed bug GHSA-g665-fm4p-vhff (OOB access in ldap_escape). (CVE-2024-8932)
    MBstring:
    Fixed bug GH-16361 (mb_substr overflow on start/length arguments).
    MySQLnd:
    Fixed bug GHSA-h35g-vwh6-m678 (Leak partial content of the heap through heap buffer over-read). (CVE-2024-8929)
    Opcache:
    Fixed bug GH-16408 (Array to string conversion warning emitted in optimizer).
    OpenSSL:
    Fixed bug GH-16357 (openssl may modify member types of certificate arrays).
    Fixed bug GH-16433 (Large values for openssl_csr_sign() $days overflow).
    Fix various memory leaks on error conditions in openssl_x509_parse().
    PDO DBLIB:
    Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the dblib quoter causing OOB writes). (CVE-2024-11236)
    PDO Firebird:
    Fixed bug GHSA-5hqh-c84r-qjcv (Integer overflow in the firebird quoter causing OOB writes). (CVE-2024-11236)
    PDO ODBC:
    Fixed bug GH-16450 (PDO_ODBC can inject garbage into field values).
    Phar:
    Fixed bug GH-16406 (Assertion failure in ext/phar/phar.c:2808).
    PHPDBG:
    Fixed bug GH-16174 (Empty string is an invalid expression for ev).
    Reflection:
    Fixed bug GH-16601 (Memory leak in Reflection constructors).
    Session:
    Fixed bug GH-16385 (Unexpected null returned by session_set_cookie_params).
    Fixed bug GH-16290 (overflow on cookie_lifetime ini value).
    SOAP:
    Fixed bug GH-16318 (Recursive array segfaults soap encoding).
    Fixed bug GH-16429 (Segmentation fault access null pointer in SoapClient).
    Sockets:
    Fixed bug with overflow socket_recvfrom $length argument.
    SPL:
    Fixed bug GH-16337 (Use-after-free in SplHeap).
    Fixed bug GH-16464 (Use-after-free in SplDoublyLinkedList::offsetSet()).
    Fixed bug GH-16479 (Use-after-free in SplObjectStorage::setInfo()).
    Fixed bug GH-16478 (Use-after-free in SplFixedArray::unset()).
    Fixed bug GH-16588 (UAF in Observer->serialize).
    Fix GH-16477 (Segmentation fault when calling __debugInfo() after failed SplFileObject::__constructor).
    Fixed bug GH-16589 (UAF in SplDoublyLinked->serialize()).
    Fixed bug GH-14687 (segfault on SplObjectIterator instance).
    Fixed bug GH-16604 (Memory leaks in SPL constructors).
    Fixed bug GH-16646 (UAF in ArrayObject::unset() and ArrayObject::exchangeArray()).
    Standard:
    Fixed bug GH-16293 (Failed assertion when throwing in assert() callback with bail enabled).
    Streams:
    Fixed bug GHSA-c5f2-jwm7-mmq2 (Configuring a proxy in a stream context might allow for CRLF injection in URIs). (CVE-2024-11234)
    Fixed bug GHSA-r977-prxv-hc43 (Single byte overread with convert.quoted-printable-decode filter). (CVE-2024-11233)
    SysVMsg:
    Fixed bug GH-16592 (msg_send() crashes when a type does not properly serialized).
    SysVShm:
    Fixed bug GH-16591 (Assertion error in shm_put_var).
    XMLReader:
    Fixed bug GH-16292 (Segmentation fault in ext/xmlreader/php_xmlreader.c).
    Zlib:
    Fixed bug GH-16326 (Memory management is broken for bad dictionaries.) (cmb)

++++ ptyxis:

  - Update to version 47.5:
    + Bump the FD soft limit to the max allowed, now that there are
    more FDs open for Vulkan shader caches.
    + Fix monitoring of podman for changes which fixes auto-discovery
    of quadlets in systemd --user services.
    + Fix disposal of tabs without a foreground process upon closing
    a Ptyxis window.
    + Robustness fixes in icon discover for tabs with containers
    + Robustness fixes in checking for active container
    + Fix scrolling within close-tabs dialog

++++ pyenv:

  - Update 2.4.19
    * Add CPython 3.14.0a2 by @nedbat in #3110
    * Add quick start section and gif demo to accompany it. by @madhu-GG in #3044
  - Update 2.4.18
    * Add miniforge3-24.9.2-0 by @goerz in #3106

++++ python-peppercorn:

  - require legacy-cgi for python 3.13 support

++++ python-Shapely:

  - avoid stale "requires:" requirement on shapely packages

++++ python-Telethon:

  - update to 1.38.0:
    * Formatting entities misbehaved with albums.
    * Sending a Message object with a file did not use the new file.
  - update to 1.37.0:
    * Support for CDN downloads should be back. Telethon still
    prefers no CDN by default.
    * FloodWaitPremium should now be handled like any other floodwaits.
    * Fixed edge-case when using get_messages(..., reverse=True).
    * ConnectionError when using proxies should be raised properly.
  - update to 1.36.0:
    * Certain updates, such as :tl:`UpdateBotStopped`, should now be
    processed reliably.
  - update to 1.35.0:
    * "Custom secret support" should work with TcpMTProxy.
    * Some type hints should now be more accurate.
    * Session path couldn't be a pathlib.Path or None.
    * Python versions older than 3.9 should now be supported again.
    * Readthedocs should hopefully build the v1 documentation again.
  - update to 1.34.0:
    * reply_to_chat and reply_to_sender are now in Message.
    * parse_mode with a custom instance containing both parse and
    unparse should now work.
    * Parsing and unparsing message entities should now behave better
    in certain corner-cases.
  - update to 1.33.0:
    * webbrowser is now imported conditionally, to support niche environments.
    Library should now retry on the suddenly-common TimedOutError.
  - update to 1.32.0:
    * new and changed raw API methods
  - update to 1.31.0:
    * dropped imghdr support to prepare for python 3.12

++++ python-astunparse:

  - skip for python 3.13

++++ python-azure-mgmt-devopsinfrastructure:

  - New upstream release
    + Version 1.0.0
    + For detailed information about changes see the
    CHANGELOG.md file provided with this package
  - Adjust upstream source name in spec file
  - Remove temporary version override
  - Update Requires from setup.py

++++ python-azure-mgmt-healthdataaiservices:

  - New upstream release
    + Version 1.0.0
    + For detailed information about changes see the
    CHANGELOG.md file provided with this package
  - Adjust upstream source name in spec file
  - Remove temporary version override

++++ python-decopatch:

  - new package python-decopatch, required for tests in
    python-click-extra

++++ python-distributed:

  - Skip python313 -- gh#dask/dask#11457

++++ python-fastapi:

  - update to 0.115.5:
    * Update internal checks to support Pydantic 2.10.
    * Fix error in `docs/en/docs/tutorial/middleware.md`.
  - update to 0.115.4:
    * Update logic to import and check `python-multipart` for
    compatibility with newer version.
  - update to 0.115.3:
    * Upgrade Starlette to `>=0.40.0,<0.42.0`.
    * Fix broken link in docs.
  - drop allow-new-starlette.patch (obsolete)

++++ python-hammett:

  - drop optional astunparse dependency for python 3.13

++++ python-ipdb:

  - Skip python313: not supported  gh#gotcha/ipdb#279

++++ python-jdatetime:

  - add py313-support.patch to fix tests with python 3.13

++++ python-lxml_html_clean:

  - Update to 0.4.1
    * Bugs fixed
  - Removed superfluous debug prints.
  - Changes from 0.4.0
    * Bugs fixed
  - The Cleaner() now scans for hidden JavaScript code embedded
    within CSS comments. In certain contexts, such as within
    <svg> or <math> tags, <style> tags may lose their intended
    function, allowing comments like /* foo */ to potentially be
    executed by the browser. If a suspicious content is detected,
    only the comment is removed.
  - Changes from 0.3.1
    * Features added
  - Do not parse URL addresses when it is not necessary.
  - Changes from 0.3.0
    * Features added
  - Parsing of URL addresses has been enhanced and Cleaner
    removes ambiguous URLs.
  - Changes from 0.2.2
    * Bugs fixed
  - sdist now includes all test files and changelog.
  - Changes from 0.2.1
    * Bugs fixed
  - Memory efficiency is now much better for HTML pages where
    cleaner removes a lot of elements. (#14)
  - Changes from 0.2.0
    * Features added
  - ASCII control characters (except HT, VT, CR and LF) are now
    removed from string inputs before they're parsed by lxml/libxml2.
  - Fix boo#1233541

++++ python-metakernel:

  - Skip two tests on python313: different output
    gh#Calysto/metakernel#279

++++ python-mutmut:

  - update to 3.2.2:
    * Fixed crash when running mutmut results
    * Read paths_to_mutate from config file
    * Mutate break to return to avoid timeouts
    * Added debug mode. Enable with debug=True in setup.cfg under
    [mutmut]
    * Fixed new test detection. The old code incorrectly detected
    new tests when there were none, creating a much slower
    interaction loop for fixing mutants.
    * And many more fixes
    * Timeouts for mutants implemented.
    * Browser: syntax highlighting for diff view
    * More fixes for generators.
    * Fix for src-style layout of projects.
    * Fixed bug where mutmut would recollect all tests on every
    run, slowing down startup.
    * Correctly handle mutation for generator functions (yield).
    * Fixed so that from __future__ lines are always first.
    * If no stats are collected exit directly, as that is a
    breaking error for mutation testing.
    * Changed name mangling to make mutants less likely to trigger
    name-based python magic, like in pytest where functions named
    test_* have special meaning.
    * Another attempt to get the pypi package to work
    * Another attempt to get the pypi package to work
    * Fixed missing requirement in install package
    * Fixed missing file from the install package
    * Fixed bad entrypoint definition
    * Ignore files that can't be parsed by parso
    * Missed a file in distribution, so browse command was broken.
    * Execution model switched to mutation schemata, which enabled
    parallell execution.
    * New terminal UI
    * Pytest only, which enabled better integration, cutting
    execution time significantly.
  - drop pr_134.patch (upstream)

++++ python-nbclient:

  - Remove color from logs.
  - Add nbclient-pr315-date-deprecation.patch
    * Avoids DeprecationWarning when importing
    * gh#jupyter/nbclient#315 gh#jupyter/nbclient#318
  - Add nbclient-pr317-py313tests.patch gh#jupyter/nbclient#317
    * make tests more lenient

++++ python-nbformat:

  - Remove color from logs.
  - Reenable python313: work around unraisable exception of unclosed
    sqlite db gh#jupyter/nbformat#405

++++ python-pikepdf:

  - update to 9.4.2:
    * Internal type assertion error messages from qpdf that previously
    triggered a RuntimeError will now raise a PdfError. Generally
    these errors only occur in corrupted files.
    * When we are updating XMP in the processing of saving, errors
    from updating XML are wrapped differently to clarify the
    context in which the error occurs.
    * Fixed a process abort in JBIG2 handling related to cleanup of
    Python objects owned by C++ code.
    * Fixed inconsistent behavior when setting metadata records to an
    empty value.  :issue:`622`
    * Added missing Python 3.13 wheels for a few platforms that were
    missing them, mainly ARM Linux, musllinux/Alpine, and Windows.
    * Since Homebrew has ended support for macOS 12, macOS 13 is now
    the minimum requirement for Intel macOS.
    * Suppressed some spurious warnings during build tests.
    * Integrated OSS Fuzz.
    * Prevented generation of PDF date strings with invalid trailing
    apostrophes, while still accepting them.
    * Improved error message on parsing invalid date strings.
    * Dropped support for Python 3.8 (end of life October 2024).
    * Fixed some inconsistencies with the pikepdf.Rectangle class.
    * Python 3.13 with free-threading added to test matrix.
    * Removed wheel package as build requirement since modern packing
    no longer needs it.
    * Updated C++/Python exception translation to new pybind11
    2.12.0+ protocol, fixing possible undefined behavior in
    multithreaded applications.
    * pybind11 2.12.0 is now required.
    * qpdf 11.9.1 is now used to build wheels.
    * Modernized copyright information to REUSE.toml specification.
    * Added a new test file for a rare case, CCITT with EndOfLine=True.
    * Fixed handling of CalRGB and CalGray images with palettes.
    * Fixed a test suite failure when numpy 2.1 is installed. :issue:`603`
    * Prevented use of setuptools 72+ since it seems to introduce build errors.
    * Added a missing #include header. :issue:`600`
    * Fixed an issue where small floating point values would be recorded in
    scientific notation, contrary to the PDF specification. :issue:`598`
    * Fixed some false positive warnings on Windows C++ compilers.
    * Improved support for Python 3.13 pre-release.
    * Fixed a potential resource leak if we opened a file to read it
    as a PDF but it was not a valid PDF.
    * When overwriting an existing PDF with ``Pdf.save()``, pikepdf
    now attempts to retain the original file permissions and
    ownership.
    * Fixed missing return type for PageList.Extend. :issue:`592`

++++ python-pyface:

  - buildignore also python313-Pillow

++++ python-setuptools:

  - Skip over the tests which require network.
  - Don't use pytest-xdist, it breaks test suite.
  - update to 75.6.0:
    * Preserve original PKG-INFO into METADATA when creating wheel
    (instead of calling wheel.metadata.pkginfo_to_metadata). This
    helps to be more compliant with the flow specified in PEP
    517.
    * Changed the WindowsSdkVersion, FrameworkVersion32 and
    FrameworkVersion64 properties of setuptools.msvc.PlatformInfo
    to return an empty tuple instead of None as a fallthrough
    case --  by :user:`Avasam`

++++ python-tableauserverclient:

  - update to 0.34:
    * Draft: Make urllib3 dependency more flexible
    * fix: queryset support for flowruns
    * docs: add docstrings to auth objects and endpoints
    * Set FILESIZE_LIMIT_MB via environment variables
    * added PulseMetricDefine cap
    * Adding project permissions handling for databases, tables and
    virtual connections
    * refactor request_options, add language param
    * ci: build on python 3.13
    * fix: handle 0 item response in querysets
  - update to 0.33:
    * Add support for all types of monthly repeating schedules
    * Add workbook and datasource name attributes to JobItem Model
    * feat: group bulk edit
    * feat: add support for groupsets
    * feat: custom views dl pub
    * docs: add docstrings detailing the filter options
    * feat: tag everything
    * feat: get page and chunk size from env vars
    * feat: linked tasks
    * fix: Pager typing
  - update to 0.32:
    * Bump urllib3 from 2.0.7 to 2.2.2 #1400
    * Allow setting page_size in .all and .filter #1417
    * Switch to absolute imports for favorites #1415
    * Switch to absolute imports for datasource #1416
    * Fix pop from empty list #1404
    * Ignore known internal warnings on tests #1407
    * Add support for changing project owner #1419
    * Add type hints to auth models #1403
    * Add typing to Pager #1390
    * Remove blocks of code and arguments that have been deprecated
    * Add usage to views.get_by_id #1383
    * Type hint QuerySet and QuerySetEndpoint #1399
    * No implicit reexport #1394
    * Allow combining PermissionRules #1381
    * Add size to datasource item #1397
    * Remove outdated dependencies #1398
    * Don't lowercase OData server addresses #1396
  - update to 0.31:
    * Remove deprecated cgi package and switch to
    `email.message.Message` #1346
    * Allow viz height and width parameters #1348
    * Add support for System schedule type #1350
    * Add support for daily (24 hour) intervals for tasks #1355
    * Update Actions to include Python 3.12 and reduce duplicate
    test runs #1356
    * Add Data Acceleration and Data Freshness Policy support #1343
    * Add create cloud flow task support #1371
    * Pass parameters in request options #1372
    * Improve robustness of Pager results #1370

++++ python-tiktoken:

  - Update to version 0.8.0:
    * Alas, emulation
    * Attempt to fix emulated builds
    * Partial sync of codebase
    * Add possessive quantifiers to avoid catastrophic backtracking (#258)
    * update README to mention gpt-4o
    * Sync codebase
    * Simplify byte_pair_merge (#255)
    * Inline custom mapping function in _byte_pair_merge
    * Avoid calling byte_pair_encode for existing tokens

++++ python-typer-slim:

  - update to 0.13.1:
    * Remove Rich tags when showing completion text.
    * Render Rich markup as HTML in Markdown docs.
    * Support cp850 encoding for auto-completion in PowerShell.
    * Allow gettext translation of help message.
    * Fix printing HTML from Rich output.
  - update to 0.13.0:
    * Handle `KeyboardInterrupt` separately from other
    exceptions.
    * Update `launch` to not print anything when opening urls.
    * Fix equality check for custom classes. PR #979 by @AryazE.
    * Allow colon in zsh autocomplete values and descriptions. PR
    * Deprecate support for `is_flag` and `flag_value`
    parameters.
    * Remove unused functionality from `_typing.py` file.
    * Fix typo in function name `_make_rich_text`.
    * Only run completion installation tests when the env var
    `_TYPER_RUN_INSTALL_COMPLETION_TESTS` is set.

++++ python-web.py:

  - add legacy-cgi for python 3.13 support

++++ rehex:

  - Drop conditional wxWidgets-3_0-devel BuildRequires, no longer
    needed.

++++ reproducible-faketools:

  - update to version 0.5.5
    * j1 now disables extra CPU cores

++++ strawberry:

  - Update to version 1.2.1
    + Bugfixes:
    + Fixed playback of CUE continuing to play from the same file after the song has finished playing (#1568).
    + Fixed updating collection song sort text when disc is changed.
    + Fixed current playing file left open when the next track errored (#1582).
    + Fixed filter search not finding song containing uppercase "A" (#1599).
    + Fixed crash when removing album from playlist when using shuffle albums (#1588).
    + Fixed IDv3 MBID's tags with multiple entries being ignored.
    + Fixed crash when enabling Tidal, Spotify, Qobuz or Subsonic services.
    + Fixed passing filenames to strawberry on command line not resolving to absolute paths.
    + Enhancements:
    + Resolve symbolic links when dragging files to the playlist to match collection song.
    + Replaced Spotify username/password with access token.
    + Require Qt 6.4 or higher and drop support for Qt 5.
    + Require TagLib 1.12 or higher.
    + Use Qt stringliterals.
    + Move gstfastspectrum to src.
    + Use standard user temp location for current album cover.
    + Removed old MacFSListener.
    + Removed external tagreader and protobuf dependency.
    + Removed VLC support.
    + Ported to Qt translation (.ts) files and removed gettext dependency.
    + Removed deprecated Gnome/Mate SettingsDaemon global shortcuts.

++++ syft:

  - Update to version 1.17.0:
    * chore(deps): update stereoscope to
    aa3a3ef4efe8d8759c9aa87261b405cc003bfc9a (#3472)
    * chore(deps): bump github.com/charmbracelet/bubbletea from 1.2.2
    to 1.2.3 (#3467)
    * fix: bump clio to pull in logging fix (#3466)
    * 3122 valid license url characters (#3449)
    * 3030 license declared spdx correction (#3461)
    * chore(deps): update tools to latest versions (#3463)
    * chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.1 to
    6.6.2 (#3465)
    * chore(deps): bump modernc.org/sqlite from 1.33.1 to 1.34.1
    (#3460)
    * chore(deps): update CPE dictionary index (#3453)
    * chore(deps): update tools to latest versions (#3454)
    * chore(deps): update tools to latest versions (#3448)
    * chore(deps): update tools to latest versions (#3444)
    * chore(deps): bump github/codeql-action from 3.27.3 to 3.27.4
    (#3446)
    * feat: emit dependency relationships found in Cargo.lock (#3443)
    * chore(deps): update stereoscope to
    aa3a3ef4efe8d8759c9aa87261b405cc003bfc9a (#3442)
    * chore(deps): bump github/codeql-action from 3.27.2 to 3.27.3
    (#3438)
    * chore(deps): bump github.com/charmbracelet/bubbletea from 1.2.1
    to 1.2.2 (#3439)
    * chore(deps): bump github.com/saferwall/pe from 1.5.4 to 1.5.5
    (#3440)
    * chore(deps): update tools to latest versions (#3413)
    * chore(deps): bump github/codeql-action from 3.27.1 to 3.27.2
    (#3436)
    * chore(deps): bump golang.org/x/mod from 0.21.0 to 0.22.0
    (#3426)
    * update node classifier (#3419)
    * chore(deps): update stereoscope to
    120d9ea511e2f7a9887b443c52e66cd19bb80b43 (#3424)
    * chore(deps): update CPE dictionary index (#3429)
    * chore(deps): bump github/codeql-action from 3.27.0 to 3.27.1
    (#3431)
    * chore(deps): bump golang.org/x/net from 0.30.0 to 0.31.0
    (#3432)
    * chore(deps): bump github.com/charmbracelet/bubbletea from 1.1.2
    to 1.2.1 (#3433)
    * restore log on ui teardown (#3427)
    * doc: Add official Syft logo license information (#3421)
    * chore(deps): bump anchore/sbom-action from 0.17.6 to 0.17.7
    (#3418)
    * chore: build release sbom from go.mod (#3417)

++++ traefik:

  - golang-jwt has been updated to version 4.5.1 to fix CVE-2024-51744 and boo#1232940
  - Version 3.2.1 changes
  - acme
    * Update go-acme/lego to v4.20.2 (gh#traefik/traefik#11263 by ldez)
  - logs
    * Change level of peeking first byte error log to DEBUG for Postgres
    (gh#traefik/traefik#11270 by rtribotte)
  - k8s/ingress,k8s
    * Fix HostRegexp config for rule syntax v2 (gh#traefik/traefik#11288 by kevinpollet)
  - logs Change level of peeking first byte error log to DEBUG for Postgres
    (gh#traefik/traefik#11270 by rtribotte, gh#traefik/traefik#11254 by rtribotte)
  - service
    * Fix internal handlers ServiceBuilder composition (gh#traefik/traefik#11281 by juliens)
  - service,fastproxy Fix case problem for websocket upgrade
    (gh#traefik/traefik#11246 by juliens)
  - server
    * Change level of peeking first byte error log to DEBUG (gh#traefik/traefik#11254 by rtribotte)
    * Apply keepalive config to h2c entrypoints (gh#traefik/traefik#11276 by davefu113)
  - middleware,server
    * Drop untrusted X-Forwarded-Prefix header (gh#traefik/traefik#11253 by rtribotte)

++++ traefik2:

  - golang-jwt has been updated to version 4.5.1 to fix CVE-2024-51744 and boo#1232940
  - Update to version 2.11.4
    * acme
  - Ensure defaultGeneratedCert.main as Subject's CN
  - Update go-acme/lego to v4.20.2
    * logs,server
  - Change level of peeking first byte error log to DEBUG
    * middleware,authentication
  - Clean connection headers for forward auth request only
    * middleware
  - Bump github.com/klauspost/compress to 8e14b1b5a913
  - Bump github.com/klauspost/compress to dbd6c381492a
    * middleware,server
  - Drop untrusted X-Forwarded-Prefix header
    * middleware,service
  - Panic on aborted requests to properly close the connection
    * server
  - Apply keepalive config to h2c entrypoints
  - Rework condition to not log on timeout
    * service
  - Fix internal handlers ServiceBuilder composition
    * webui
  - Adopt a layout for the large amount of entrypoint port numbers
  - Remove unused boot files from webui
  - Upgrade to node 22.9 and yarn lock to fix vulnerabilities

++++ wxmp3gain:

  - Replace wxWidgets-3_0-devel for wxWidgets-devel BuildRequires:
    Package builds just fine with the newer 3.2 version.

------------------------------------------------------------------
------------------  2024-11-20  -  Nov 20 2024  -------------------
------------------------------------------------------------------

++++ MozillaThunderbird:

  - Mozilla Thunderbird 128.4.4
    * QR codes were not scannable by Android app when using most
    high-contrast themes
    * Primary password prompt cancellation during mobile export was
    confusing
  - revert using xdg-desktop-portal as some desktops have limited
    support

++++ NetworkManager-applet:

  - Make pkgconfig(ayatana-appindicator3-0.1) BuildRequires
    conditional for ppc64le, as it is not available there.

++++ wpewebkit:

  - Add fix-icu-build.patch: Support ICU 76.1 build

++++ WindowMaker:

  - remove WindowMaker-rpmlintrc
  - fix build error with wallpaper-branding-openSUSE

++++ alsa-utils:

  - Yet another fix for alsactl for AMD acp dmic:
    0002-alsactl-90-alsa-restore.rules-fix-AMD-acp-pdm-mach-l.patch

++++ calligra-plan:

  - Stop using the %suse_update_desktop_file macro

++++ cobbler:

  - Update to 3.3.7
    * Security: Fix issue that allowed anyone to connect to the API
    as admin (CVE-2024-47533, bsc#1231332)
    * bind - Fix bug that prevents cname entries from being
    generated successfully
    * Fix build on RHEL9 based distributions (fence-agents-all split)
    * Fix for Windows systems
    * Docs: Add missing dependencies for source installation
    * Fix issue that prevented systems from being synced when the
    profile was edited

++++ nodejs22:

  - BuildRequire python311 for SLE15

++++ dcmtk:

  - Add patches:
    * 0001-Fixed-link-instructions-for-libtiff.patch
    * 0001-Fix-find_package-library-variables-for-libtiff.patch

++++ diskmonitor:

  - Stop using the %suse_update_desktop_file macro

++++ xdm:

  - tweak the login screen:
    * use sans serif font
    * use branding wallpaper and colors
    * do not require xli, recommend feh

++++ forgejo-runner:

  - Update to version 5.0.1:
    * the /opt/hostedtoolcache directory is now unique to each job instead of
    being shared to avoid a risk of corruption
  - move to golang(API) = 1.23

++++ gala:

  - move Leap16 to libmutter-15

++++ gammaray:

  - Stop using the %suse_update_desktop_file macro

++++ gammaray-qt6:

  - Stop using the %suse_update_desktop_file macro

++++ gap-example:

  - Update to release 4.4.0
    * Add `Extensions` field which was introduced in GAP 4.13.
    * Mark `Status`, `CommunicatedBy`, `AcceptDate` as obsolete
    starting with GAP 4.13.0.
    * Mark `AvailabilityTest` as optional since GAP 4.14.

++++ libheif:

  - update to 1.19.5:
    * fix heif_image_handle_is_premultiplied_alpha() #1394
  - update to 1.19.4:
    * fix crash when encoding tiled unci images
    * fix crash in heif_context_encode_grid()
    * fix querying the preferred colorspace for monochroma AVIF files
    * error when using a chroma format or bit depth that is not supported
    by the Kvazaar plugin
    * output proper error message when memory allocation failed and use
    adapted security limits
    * heif-dec: do not show progress with option --quiet it given

++++ govc:

  - Update to version 0.46.2:
    * chore: Update version.go for v0.46.2
    * fix: vcsim: output signed byte in ByteSlice.MarshalXML

++++ govulncheck-vulndb:

  - Update to version 0.0.20241120T172248 2024-11-20T17:22:48Z.
    Refs jsc#PED-11136
    Go CVE Numbering Authority IDs added or updated with aliases:
    * GO-2024-3140 CVE-2024-8986 GHSA-xxxw-3j6h-q7h6
    * GO-2024-3259 GHSA-p7mv-53f2-4cwj
    * GO-2024-3265 CVE-2024-52009 GHSA-gppm-hq3p-h4rp

++++ gpgme:

  - Move the gpg python bindings out of the egg directory.

++++ gpxsee:

  - Update to version 13.30
    * Improved Mapsforge map render theme.
    * Improved Mapsforge map render engine.

++++ gromox:

  - Update to release 2.37
    * exmdb: fix garbage being returned to clients when reading v1z
    files from cid/
    * exmdb: stop an SQL error from appearing when `gromox-mbop
    recalc-sizes` is used on an empty store
    * oxcical: evaluate all, instead of just two, STANDARD/DAYLIGHT
    tzprops for determining the relevant DST timezone
    * ews: fix time elements, e.g. in OOF settings, always having
    value 1970-01-01
    * email_lib: on vCard ingestion, treat ORG lines as the
    structured field that they are specified as, rather than as
    one text value
    * exmdb_local: autovivify new named properties on delivery,
    fixing log message ``D-1220`` when ingesting a vCard message
    into an empty store via SMTP/LMTP
    * dbop_sqlite: avoid use of the ``UNIXEPOCH`` function since it
    is not available in AlmaLinux 9
    * lib: add missing chown call on newly-created logfiles to
    account for subsequent privilege separation
    * dscli: evaluate not just one AutoDiscover URL but multiple as
    the specifation asks for
    * mbop: stop printing the help text multiple times when the
    "for-all-users" subcommand was used but options were rejected
    * gromox-mbsize: new debug utility for mailbox size analysis
    * gromox-tnef2mt: add support for importing standalone TNEF files

++++ heaptrack:

  - Stop using the %suse_update_desktop_file macro

++++ hyprland:

  - Update to version 0.45.2:
    + Another minor release with 2 patches backported on top of 0.45.1.
    + Fixes backported
  - internal: fix changeWindowZOrder reordering incorrectly (#8494)
  - xdg-shell: don't report invalid min/max sizes on unset

++++ just:

  - update to 1.37.0:
    * Add style() function
    * Terminal escape sequence constants
    * Add && and || operators
    * Make recipe doc attribute override comment
    * Don't export constants
    * Allow duplicate imports
    * Publish single SHA256SUM file with releases
    * Mark recipes with private attribute as private in JSON dump
    * Forbid invalid attributes on assignments
    * Add -g to rust-just install instructions
    * Change doc backtick color to cyan
    * Note that set shell is not used for [script] recipes
    * Replace derivative with derive-where
    * Highlight backticks in docs when listing recipes
    * Update setup-just version in README
    * Fix shell function example in readme
    * Update softprops/action-gh-release
    * Use justfile instead of mf on invalid examples in readme
    * Add advice on printing complex strings
    * Document using functions in variable assignments
    * Use prettier string comparison in tests
    * Note shell(…) as an alternative to backticks
    * Add Recipe::subsequents
    * Add subsequents to grammar
    * Document checking releases hashes
    * Show how to access positional arguments with powershell
    * Use -CommandWithArgs instead of -cwa
    * Document -cwa flag for PowerShell positional arguments
    * Use unwrap_or when creating relative path in loader

++++ k4dirstat:

  - Stop using the %suse_update_desktop_file macro

++++ kaffeine:

  - Stop using the %suse_update_desktop_file macro

++++ kaidan:

  - Stop using the %suse_update_desktop_file macro

++++ kdesvn:

  - Stop using the %suse_update_desktop_file macro
  - Spec cleanup

++++ kdiff3:

  - Stop using the %suse_update_desktop_file macro

++++ kdocker:

  - Update to 6.2. Too many changes since the last update. check
    https://github.com/user-none/KDocker/releases for the full list

++++ kernel-firmware:

  - Update to version 20241119 (git commit 60cdfe1831e8):
    * iwlwifi: add Bz-gf FW for core91-69 release
  - Update aliases from 6.12

++++ kexi:

  - Stop using the %suse_update_desktop_file macro
  - Spec cleanup

++++ krusader:

  - Stop using the %suse_update_desktop_file macro

++++ krename:

  - Stop using the %suse_update_desktop_file macro

++++ krita:

  - Stop using the %suse_update_desktop_file macro

++++ kst:

  - Stop using the %suse_update_desktop_file macro

++++ ktimetracker:

  - Stop using the %suse_update_desktop_file macro

++++ kubeshark-cli:

  - Update to version 52.3.90:
    * Bump the Helm chart version to 52.3.90
    * updated `pcapdump` command's help starting deprecated the
    `export` command
    * Brought back `.gitignore`` after having been deleted due to a
    bad commit.
    * removed two binary files uploaded due to a bad earlier commit.
    * Fixed a bug in the Makefile

++++ kubeswitch:

  - new package kubeswitch: kubeswitch (lazy: switch) is the single
    pane of glass for all of your kubeconfig files.

++++ okteta:

  - Stop using the %suse_update_desktop_file macro

++++ luajit:

  - Update to version 5.1.2.1.0+git.1731601260.fe71d0f:
    * Windows: Allow amalgamated static builds with msvcbuild.bat.
    * Always close profiler output file.
    * Fix override of INSTALL_LJLIBD in the presence of DESTDIR.
    * Fix bit op coercion for shifts in DUALNUM builds.

++++ mozjs115:

  - Fix build against icu 76.1: link the correct libraries (icu-uc
    instead of icu-i18n).

++++ libmtp:

  - updated to 1.1.21 release
  - bugfixes
  - lots of new ids

++++ gpgmeqt:

  - Move the gpg python bindings out of the egg directory.

++++ gpgmeqt6:

  - Move the gpg python bindings out of the egg directory.

++++ linkerd-cli-edge:

  - Update to version 24.11.4:
    no CLI-related changes in changelog

++++ luckybackup:

  - Stop using the %suse_update_desktop_file macro
  - Spec cleanup

++++ melange:

  - Update to version 0.15.12:
    * pipelines/cargo: ability to override output-dir
    * fix(pipeline): check also checksum length
    * fix(pipeline): do preliminary checks for checksum invalid chars
    * docs: re-add release documentation markdown file
    * hack: remove release.md
    * docs: update automatic release interval
    * add a dependency on texinfo or man-db as appropriate

++++ mercurial:

  - Mercurial 6.9
    + Backwards Compatibility Changes
    * This release drops support for Python 3.6 and 3.7.
    * Starting with this release and hopefully for the forseeable future,
    we are now building wheels for most architectures.
    /!\ Note that for Rust users installing via `pip` or `pipx`, you will
    need to specify `--no-binary` to continue using Rust since we do not yet
    package the Rust compilation in our wheels. We plan on fixing
    this for 7.0.
    * Python 3.13 changed how it handles docstrings (namely removing uniform
    leading whitespace for every line), which forced us to align the
    representation of our help text with this new behavior across
    all versions. Due to this and a lack of time and expertise from
    contributors, a lot of existing translations could be missing. The
    effort of i18n in general has died down many years ago, but if this
    matters to you, feel free to send your contributions.
    + New Features
    * exchange: improve computation of relevant markers for large repos
    * Add a Rust fast-path to speed up update (also for `clone`) from null
    (up to 4x faster)
    * Introduced a new rev-branch-cache version (v2) that is mmap-resistant
    * The branchmap's performance was improved
    * Improved the performance of the fix for issue6528
    * clonebundles: allow manifest to specify sha256 digest of bundles
    * merge: improve working-copy mtime race handling
    * profiling: add a py-spy profiling backend
    * revlog: use an explicit config option to enable mmap usage for index
    * revlog: use mmap by default is pre-population is available
    * mmap: populate the mapping by default
    * mmap: populate mapping in a background thread
    + Experimental features
    * merge: add a config to allow conflict-free merge of changes
    on adjacent lines
    + Bug Fixes
    * `config.server.validate` now also works on narrowed repositories
    * convert: fix various leaked file descriptors
    * stream: prefer keeping an open file handle to volatile file
    instead of copy
    * dummysmtpd: fix EOF handling on newer versions of OpenSSL
    * cext: correct the argument handling of `b85encode()`
    * branchmap-v3: make sure we write the cache after detecting pure-topo mode
    * rust: apply clippy lints
    * copies: make sure deleted copy info do not overwriting unrelated ones
    * rebase: don't call rewriteutil.precheck() with to-be-skipped commits
    * phabricator: correct the default value of `phabhunk.corpus`
    * linelog: correct the default value of `annotateresult.lines`
    * largefiles: avoid a potentially undefined variable in exception case
    * httppeer: move a variable to avoid a bad reference before
    assignment warning
    * httppeer: avoid another bad reference before assignment warning
    * tests: use packaging from setuptools instead of deprecated distutils
    * manifest: type and fix unhexlify
    * manifest: align some vfs option access on the fact we might
    not have options
    * scmutils: read the requires file before writing to avoid
    unnecessary rewrite
    * debugsparse: stop taking the store lock
    * sparse: reliably avoid writing to store without a lock
    * largefiles: sync up `largefilesdirstate` methods with `dirstate`
    base class
    * shelve: raise an error when loading a corrupt state file in
    an impossible case
    * monotone: replace %s interpolation with appropriate numeric specifiers
    * shelve: consistently convert exception to bytes
    via `stringutil.forcebytestr`
    * remotefilelog: honor the `--format` arg of the `debugindex` command
    * remotefilelog: adapt the `debugindex` command to past API changes
    * run-tests: add color to the progress output
    * archive: defer opening the output until a file is matched
    * help: add :config-doc:`section.key` shorthand to insert documentation
    * censor: document the censor.policy option (issue6909)
    * rust-revlog: don't try to open the data file if the index is empty
    * bundlerepo: fix mismatches with repository and revlog classes
    * revlog: make `clearcaches()` signature consistent with ManifestRevlog
    * unionrepo: fix mismatches with revlog classes
    * keepalive: fix a signature mismatch for
    a http.client.HTTPResponse subclass
    * lfs: fix various signature mismatches for vfs subclasses
    * store: fix a signature mismatch for a vfs subclass
    * util: avoid a leaked file descriptor in `util.makelock()`
    exceptional case
    * statichttprepo: fix `httprangereader.read()` for py3
    * util: make `mmapread()` work on Windows again
    * mdiff: tweak calls into `bdiff.fixws` to match its type hints
    * base85: avoid a spurious use-before-initialized warning in `pure` module
    * install: static data moved from setup.py to pyproject.toml
    * upgrade: disable using the parallel workers optimization on macOS
    * doc: generate separate commands/topics/extension pages
    * extdiff: don't run gui programs when in a cli-only environment
    * clonebundles: stop shell quoting `HGCB_BUNDLE_BASENAME`
    environment variable
    * streamclone: disable the volatile file open handle optimization
    on Windows
    * pytype: add relative timestamp to the output if `ts` is available
    * hgweb: skip logging ConnectionAbortedError
    + Internal API Changes
    * manifest: deprecated readdelta and readfast
    + Miscellaneous
    * http: reuse Python's implementation of read/readline/readinto
    * http: use urllib's cookie handler
    * rev-branch-cache: schedule a write of the "v2" format if we
    read from "v1"
    * rev-branch-cache: have debugupdatecache warm rbc too
    * rev-branch-cache: reenable memory mapping of the revision data
    * debugwireproto: redo logging to also work for https
    * rust: use `.cargo/config.toml` instead of `.cargo/config`
    * A whole bunch of typing improvements, which in turn found many bugs
    * Test suite improvements
    * Various packaging improvements

++++ mesheryctl:

  - update to 0.7.157:
    * Meshery CLI
  - [Chore} fix minor typo @Alero-Awani (#12692)
  - update mesheryctl registry generate multiwritier log
    @Jougan-0 (#12694)
  - update to 0.7.156:
    * Meshery CLI
  - Update generate.go @Jougan-0 (#12683)
  - fix empty commit w/signoff @Jougan-0 (#12681)

++++ ncdu:

  - Update to 1.21:
  - Perform tilde expansion on paths in the config file (from 2.7)
  - Fix JSON import of escaped UTF-16 surrogate pairs (from 2.7)
  - Fix displaying and exporting zero values when extended info is not available (from 2.6)
  - Fix JSON export and import of the “other filesystem” flag (from 2.5)

++++ onedrive:

  - Update to version 2.5.3:
    * Feature Requests | Enhancements
  - Enhancement: Ensure application notifies user of curl
    versions that contain HTTP/2 bugs that impact the operation
    of this client (#2913, #2922, #2926)
  - Enhancement: Update Dockerfile-debian to fix that libcurl4
    does not get applied despite being pulled in. Explicitly
    install it from Debian 12 Backports
  - Enhancement: Add passive database checkpoints (#2944)
  - Enhancement: Add OpenSSL version warning (#2961)
  - Update safeBackup to use a new filename format for easier
    identification:
    filename-hostname-safeBackup-number.file_extension (#2966)
    * Bug Fixes
  - Fix Bug: Fix application crash when session upload files
    contain zero data or are corrupt (#2893)
  - Fix Bug: Fix that when creating a new folder online the
    application generates an exception if it is in a Shared
    Online Folder (#2895)
  - Fix Bug: Fix that a 'sync_list' entry of '/' will cause a
    index [0] is out of bounds (#2897)
  - Fix Bug: Fix regression for Docker 'sync_dir' use (#2901)
  - Fix Bug: Fix that curl generates a SIGPIPE that causes
    application to exit due to upstream device killing idle TCP
    connection (#2906)
  - Fix Bug: Fix that skip_file in config does not override
    defaults (#2917)
  - Fix Bug: Fix that skip_dir is not flagging directories
    correctly causing deletion if parental path structure needs
    to be created for sync_list handling (#2918)
  - Fix Bug: Fix application crash caused by unable to drop table
    (#2919)
  - Fix Bug: Setup a specific SIGPIPE Signal handler for
    curl/openssl generated signals (#2929)
  - Fix Bug: Handle DB upgrades from v2.4.x without causing
    application crash (#2932)
  - Fix Bug: Fix a database statement execution error occurred:
    NOT NULL constraint failed: item.type due to Microsoft
    OneNote items (#2939)
  - Fix Bug: Allow no-sync operations to complete online account
    checks (#2943)
  - Fix Bug: Update Dockerfile-alpine - revert to Alpine 3.19 as
    application fails to run on Alpine 3.20 (#2956)
  - Fix Bug: Fix Operation not permitted FileException Error when
    attempting to use setTimes() function (#2958)
  - Fix Bug: Fix that files with no mime type cause sync to crash
    (#2963)
  - Fix Bug: Ensure bypass_data_preservation operates as intended
    (#2967)
    * Other Changes | Fixes
  - Implement Docker ENV variable for --cleanup-local-files
    (#2868)
  - Improve performance with reduced execution time and lower
    CPU/system resource usage (#2880)
  - Specifically use a 'mutex' to perform the lock on DB actions
    (#2882)
  - Add Ubuntu 24.10 OpenSuSE Build Service details (#2942)
  - Add Check Spelling GitHub Action (#2945)
  - Updated documentation

++++ pnpm:

  - update to version 9.14.2:
    pnpm publish --json should work #8788
  - includes 9.14.1:
    * Added support for pnpm pack --json to print packed tarball
    and contents in JSON format #8765
    * pnpm exec should print a meaningful error message when no
    command is provided #8752
    * pnpm setup should remove the CLI from the target location
    before moving the new binary #8173
    * Fix ERR_PNPM_TARBALL_EXTRACT error while installing a
    dependency from GitHub having a slash in branch name #7697
    * Don't crash if the use-node-version setting is used and the
    system has no Node.js installed #8769
    * Convert settings in local .npmrc files to their correct types.
    For instance, child-concurrency should be a number, not a string #5075
    * pnpm should fail if a project requires a different package
    manager even if manage-package-manager-versions is set to true
    * pnpm init should respect the --dir option #8768
  - includes 9.14.0:
    * chore: use verify-deps-before-run
    * fix(init): --dir option should be respected (#8768)
    * feat: support json format output in pnpm pack (#8765)
    * fix: pnpm exec should specify command (#8774)
    * fix: proper types of settings in local .npmrc files (#8775)
    * fix: ERR_PNPM_TARBALL_EXTRACT when the URL's hash contains a slash
    * fix: the CLI should fail if a different package manager is
    required by the project
    * fix: ETXTBSY error on running setup (#8780)
    * feat: add linux-riscv64 build (#8779)
    * fix: remove link to X from update notifier (#8773)
    * docs: update sponsors
    * fix: upgrade cross-sapwn (#8782)
    * fix: don't crash when use-node-version is set and there is no node.js
    * docs: update changesets

++++ python-paramiko:

  - reenable python 313 build
  - Update to 3.5.0:
    * [Feature] #982: (via #2444, which was a rebase of #2157)
    Add support for AES-GCM encryption ciphers (128 and 256 bit variants).
    Thanks to Alex Gaynor for the report (& for cryptography review),
    Shen Cheng for the original PR, and Chris Mason for the updated PR;
    plus as usual to everyone who tested the patches and reported their results!
    This functionality has been tested in client mode against OpenSSH 9.0, 9.2,
    and 9.6, as well as against a number of proprietary appliance SSH servers.

++++ python-rpm-macros:

  - Update to version 20241120.6ae645f:
    * Do sed in place

++++ python-Pint:

  - update to 0.24.4:
    * add error for prefixed non multi units (#1998)
    * build: typing_extensions version
    * build: switch from appdirs to platformdirs
    * fix GenericPlainRegistry getattr type (#2045)
    * Replace references to the deprecated
    `UnitRegistry.default_format` (#2058)
    * fix: upgrade to flexparser>=0.4, exceptions are no longer
    dataclasses.
  - drop support-python-313.patch (upstream)

++++ python-PyJWT:

  - Update to version 2.10.0
    * chore: use sequence for typing rather than list
    * Add support for Python 3.13
    * [pre-commit.ci] pre-commit autoupdate
    * Add an RTD config file to resolve RTD build failures
    * docs: Update iat exception docs
    * Remove algorithm requirement for JWT API
    * [pre-commit.ci] pre-commit autoupdate
    * Create SECURITY.md
    * docs fix: decode_complete scope and algorithms
    * fix doctest for docs/usage.rst
    * fix test_utils.py not to xfail
    * Correct jwt.decode audience param doc expression
    * Add PS256 encoding and decoding usage
    * Add API docs for PyJWK
    * Refactor project configuration files from setup.cfg to pyproject.toml PEP-518
    * Add JWK support to JWT encode
    * Update pre-commit hooks to lint pyproject.toml
    * Add EdDSA algorithm encoding/decoding usage
    * Ruff linter and formatter changes
    * Validate sub and jti claims for the token
    * Add ES256 usage
    * Encode EC keys with a fixed bit length
    * [pre-commit.ci] pre-commit autoupdate
    * Drop support for Python 3.8
    * Prepare 2.10.0 release
    * Bump codecov/codecov-action from 4 to 5
    * [pre-commit.ci] pre-commit autoupdate

++++ python-RTFDE:

  - shorten summary

++++ python-azure-eventgrid:

  - New upstream release
    + Version 4.21.0
    + For detailed information about changes see the
    CHANGELOG.md file provided with this package
  - Adjust upstream source name in spec file
  - Drop extra LICENSE.txt as upstream now ships its own
  - Rename LICENSE.txt to LICENSE in %files section

++++ python-dask-expr:

  - Disable python313: no numba, no dask

++++ python-fastjsonschema:

  - Update to 2.20.0:
  - Added validations at compile time:
  - `required` must have unique items
  - checking if schema is not allowing `required` items (item
    is required, but is not listed in properties)
  - Remove upstreamed patch:
  - support-pytest-8.patch

++++ python-hid-parser:

  - add pytest-catch-warnings.patch to fix build with newer
    pytest/python 3.13

++++ python-jsonpickle:

  - update to 4.0.0:
    * Breaking Change: Python 3.7 is no longer supported.
    * Breaking Change: Support for pre-0.7.0 repr-serialized
    objects is no longer enabled by default. The safe option to
    decode() was changed from False to True. Users can still pass
    safe=False to decode() in order to enable this feature for
    the purposes of loading older files, but beware that this
    feature relies on unsafe behavior through its use of eval().
    Users are encouraged to re-pickle old data in order to
    migrate away from the the unsafe loading feature. (+514)
    * The pickler no longer produces py/repr tags when pickling
    modules. py/mod is used instead, as it is clearer and uses
    one less byte. (+514)
    * The test suite no longer uses the deprecated
    datetime.datetime.utcnow() function. (+539)
    * The breaking changes from v4 were inadvertedly included in
    v3.4.1, which has been yanked. This release remedies this by
    reverting the v4 changes.
    * Support decoding pandas dataframes encoded with versions
    3.3.0 and older. (+536)
    * Officially support Python 3.12 in the GitHub Actions testing
    matrix, and update GHA package versions used. (+524)
    * Improve reproducibility of benchmarking commands on Linux by
    using taskset and adding a "HOWTO" run benchmarks section in
    benchmarking/README.md. (+526)
    * The setup.cfg packaging configuration has been replaced by
    pyproject.toml. (+527)
    * yaml is now supported as a jsonpickle backend. (+528)
    * OSSFuzz scripts are now available in the fuzzing/ directory.
    (+525)
    * Pure-python dtypes are now preserved across encode()/decode()
    roundtrips for the pandas extension.
    * Pandas dataframe columns with an object dtype that contain
    multiple different types within (e.g. a column of type
    list[Union[str, int]]) now preserve the types upon being
    roundtripped. (#457)
    * Fix warnings in the test suite regarding numpy.compat usage.
    * The unpickler was updated to avoid using eval, which helps
    improve its security. Users can still pass safe=False to
    decode to use the old behavior, though this is not
    recommended. (+513)
    * Objects can now exclude specific attributes from pickling by
    providing a _jsonpickle_exclude class or instance attribute.
    This attribute should contain the list of attribute names to
    exclude when pickling the object.

++++ python-kazoo:

  - Clean up the SPEC file.

++++ python-langfuse:

  - update to 2.54.1:
    * fix(media): allow setting IO media via decorator update
  - update to 2.54.0:
    * feat(core): add multimodal support
    * fix(openai): pass parsed_n only if greater 1
  - update to 2.53.9:
    * perf: move serialization to background threads
  - update to 2.53.8:
    * fix(datasets): encoding
  - update to 2.53.7:
    * fix(openai): revert default stream option setting
  - update to 2.53.6:
    * fix(serializer): reduce log level to debug on failed
    serialization
  - update to 2.53.5:
    * fix(serializer): pydantic compat v1 v2
  - update to 2.53.4:
    * feat(openai): parse usage if stream_options has include_usage
  - update to 2.53.3:
    * fix(datasets): url encode dataset name and run name
    * refactor(llama-index): send generation updates directly from
    event handler
  - update to 2.53.2:
    * fix(llama-index): CompletionResponse Serialization by
    @hassiebp
  - update to 2.53.1:
    * fix: 'NoneType' object has no attribute '__dict__'
  - update to 2.53.0:
    * feat(client): allow masking event input and output by
    @shawnzhu and @hassiebp in
    https://github.com/langfuse/langfuse-python/pull/977
    * fix(decorator): improve stack access safety
  - update to 2.52.2:
    * fix(openai): handle NoneType responses gracefully
    * docs(llama-index): deprecate CallbackHandler and promote
    Instrumentor
    * fix(langchain): DeepInfra model parsing
  - update to 2.52.1:
    * fix(decorators): stack trace on failed auth_check
    * fix(api): list models parsing errors
    * fix(langchain): parse tool calls in input
  - update to 2.52.0:
    * feat(llama-index): add LlamaIndexInstrumentor for use with
    instrumentation module instead of LlamaIndexSpanHandler
  - update to 2.51.5:
    * fix(openai): structured output parsing with openai >= 1.50
    * chore(deps): bump django from 5.0.8 to 5.0.9 in
    /examples/django_example
  - update to 2.51.4:
    * fix(serializer): Fix None serialization without langchain
    installed
    * fix(langchain): invalid user_id / session_id in TraceBody
    * chore(deps-dev): bump pytest from 8.2.0 to 8.3.3
    * chore: automerge dependabot patch PRs
    * chore(deps): bump pydantic from 2.7.4 to 2.9.2
    * chore: fix dependabot automerge
    * chore: fix auto merging
    * chore: fix auto merging
  - update to 2.51.3:
    * fix(langchain): time to first token
  - update to 2.51.2:
    * fix(prompts): remove traceback from fetch error logs
    * fix(langchain): parse model name for ChatOCIGenAIAgent
  - update to 2.51.0:
    * feat(langchain): time to first token on streamed generations
    * feat(langchain): allow passing trace attributes on chain
    invocation
    * fix(langchain): python langchain retriever - parent run not
    found
    * fix handle_span_events exception
  - update to 2.50.3:
    * fix(serializer): support numpy scalars
  - update to 2.50.2:
    * feat(prompts): allow passing kwargs to precompile langchain
    prompt
  - update to 2.50.1:
    * fix(langchain): link prompts to nested generations as well
  - update to 2.50.0:
    * feat(decorator): allow setting parent trace or observation id
  - update to 2.49.0:
    * feat(langchain): link langfuse prompts to langchain
    executions
  - update to 2.48.1:
    * fix(openai): multiple streamed tool calls
    * fix(openai): time to first token
  - update to 2.48.0:
    * feat(decorator): Enhance `observe` decorator to support usage
    without parentheses
    * fix(llama-index): initialize OpenAI model serializers
    * fix(langchain): ollama usage parsing
    * fix(langchain/AzureChatOpenai): unnecessary logs
    * fix(langchain): batch run to update trace outputs
  - update to 2.47.1:
    * feat: improve error messages
  - update to 2.47.0:
    * feat(prompts): optionally disable prompt caching when cache
    ttl is 0
    * Docs: https://langfuse.com/docs/prompts/get-started#disable-
    caching

++++ python-lmdb:

  - Modernize specfile

++++ python-logilab-common:

  - update to 2.0.0:
    * drop python 2.x support

++++ python-mediafile:

  - update to 0.13.0:
    * Add a mapping compatible with Plex and ffmpeg for the "original date"
    fields.
    * Remove an unnecessary dependency on `six`.
    * Replace `imghdr` with `filetype` to support Python 3.13.
  - drop python-mediafile-remove-six.patch (upstream)

++++ python-meson-python:

  - update to 0.17.1:
    * Update tests to work with newly released pyproject-metadata
    0.9.0.
    * Fix tests to work when not executed in a git work tree.
    * Refuse to build wheels targeting the limited API and free-
    threaded CPython: the free-threaded CPython build does not
    support the limited API yet.
    * Always use UTF-8 encoding for writing Meson native and cross
    files. Always use UTF-8 encoding for reading read Meson
    introspection data and pyproject.toml.
    * Do not include uncommitted changes when creating source
    distributions. Previously, uncommitted changes to files under
    version control were included, but not untracked files. There
    was no strong use case for this behavior and it was too
    surprising to keep it.
    * Make source distribution reproducible: use the modification
    time of pyproject.toml for the generated files in the source
    distribution archives.
    * Disable the abi3 wheel tag for PyPy when building wheels
    targeting the limited API: PyPy supports the limited API but
    not the stable ABI.
    * Raise ImportError when the package rebuild fails when
    importing an editable install.
    * Fix the wheel platform tag for GraalPy.
    * Add .gitignore and .hgignore files to build directory if it
    is empty.
    * Allow install_subdir() of missing directories.

++++ python-ml-dtypes:

  - Initial package (0.5.0)

++++ python-mysqlclient:

  - update to 2.2.6:
    * MariaDB Connector/C 3.4 and MairaDB 11.4 enabled SSL and CA
    verification by default.

++++ python-numcodecs:

  - Update to 0.14.0
    [#]# Enhancements
    * Add Crc32c checksum codec. By Norman Rzepka, #613.
    * Add codec wrappers for Zarr 3. By Norman Rzepka, #524
    * Added mypy type checking to continuous integration. By David
    Stansby, #460.
    [#] Fixes
    * Fix in-place mutation of input array in BitRound. By Sam
    Levang, #608
    * Fix an issue where importing numcodecs would lock the state of
    multiprocessing and prevent user code to call
    multiprocessing.set_start_method(“spawn”) subsequently. By
    Clément Robert #522
    [#]# Maintenance
    * The minimum supported Python version is now Python 3.11. By
    David Stansby, #622
    * The minimum supported numpy version is now 1.24. By David
    Stansby, #622
  - Release 0.13.1
    [#]# Breaking changes
    * Zstd.default_level, Zstd.min_level, and Zstd.max_level are now
    class methods instead of properties. This means they must now
    be called like Zstd.default_level() instead of
    Zstd.default_level. This breaking change has been made because
    Python 3.13 removes support for class properties. By David
    Stansby, #576.
    [#] Enhancements
    * Update bundled c-blosc to v1.26.1. This updates Zlib to v1.3.1
    and Zstd to v1.5.6. By David Stansby, #560.
    * Added support for Python 3.13 David Stansby, #576.
    * Cleaned up the table of contents in the documentation to list
    codecs by category David Stansby, #458.
    [#]# Maintenance
    * Change format() and old string formatting to f-strings. By
    Dimitri Papadopoulos Orfanos, #439.
    * Remove pin on Sphinx By Elliott Sales de Andrade, #552.
  - Refresh numcodecs-pr569-systemlibs.patch
  - Keep python310 working (will stop working with zarr 3)
  - Add numcodecs-revert-subtract-pr584.patch
    * reverts gh#zarr-developers/numcodecs#584
    * See gh#zarr-developers/numcodecs#653

++++ python-numpydoc:

  - update to 1.8.0:
    * Unify CLIs (#537).
    * Move "Attributes" and "Methods" below "Parameters" (#571).
    * FIX: coroutines can have a return statement (#542).
    * Unwrap decorated objects for YD01 validation check (#541).
    * Fix bug with validation encoding (#550).
    * Add note about TOML regex; fix typo (#552).
    * DOC: Clarify recommendations regarding use of backticks
    (#525).

++++ python-pbs-installer:

  - update to 2024.10.10:
    * **Full Changelog**: https://github.com/frostming/pbs-
    installer/compare/2024.08.14...2024.10.10

++++ python-platformdirs:

  - update to 4.3.6:
    * Fix readme download target
  - update to 4.3.5:
    * Split build and publish for release
  - update to 4.3.4:
    * Use upstream setup-uv with uv python
  - update to 4.3.3:
    * Update check.yml
    * don't include outdated changelog in docs
  - update to 4.3.2:
    * Use uv as installer
    * Fix multi-path returned from `_path` methods on MacOS
  - update to 4.3.0:
    * Speed up Hatch installation
    * Test with Python 3.13
    * Test with latest PyPy
    * Use `include-hidden-files: true` to upload coverage artifacts
    * Ensure PlatformDirs is valid superclass type for mypy AND not
    an abstract class for other checkers

++++ python-plette:

  - update to 2.1.0:
    * Fix incorrect validation for scripts with callable

++++ python-portalocker:

  - update to 3.0.0:
    * Completely modernized portalocker build system and added
    fully strict pyright and mypy compliance with ruff formatting
    and checking. Dropped support for deprecated Python versions,
    only 3.9 and up are supported now.

++++ python-precis-i18n:

  - update to 1.1.1:
    * Update internal tables for Unicode 16.0.
    * Remove `test_suite` from setup.py file. Contributed by
    `adrien-n` (PR #38).
    * Add Python 3.14-dev to CI build environment.
    * Update copyright year (2024).

++++ python-psutil:

  - update to 6.1.0:
    * 2366_, [Windows]: drastically speedup `process_iter()`_. We
    now determine process unique identity by using process "fast"
    create time method. This will considerably speedup those apps
    which use `process_iter()`_ only once, e.g. to look for a
    process with a certain name.
    * 2446_: use pytest instead of unittest.
    * 2448_: add make install-sysdeps target to install the
    necessary system dependencies (python-dev, gcc, etc.) on all
    supported UNIX flavors.
    * 2449_: add make install-pydeps-test and make install-pydeps-
    dev targets. They can be used to install dependencies meant
    for running tests and for local development. They can also be
    installed via pip install .[test] and pip install .[dev].
    * 2456_: allow to run tests via python3 -m psutil.tests even if
    pytest module is not installed. This is useful for production
    environments that don't have pytest installed, but still want
    to be able to test psutil installation.
    * 2427_: psutil (segfault) on import in the free-threaded (no
    GIL) version of Python 3.13.  (patch by Sam Gross)
    * 2455_, [Linux]: IndexError may occur when reading
    /proc/pid/stat and field 40 (blkio_ticks) is missing.
    * 2457_, [AIX]: significantly improve the speed of
    `Process.open_files()`_ for some edge cases.
    * 2460_, [OpenBSD]: `Process.num_fds()`_ and
    `Process.open_files()`_ may fail with `NoSuchProcess`_ for
    PID 0. Instead, we now return "null" values (0 and []
    respectively).
  - drop skip_failing_tests.patch: obsolete

++++ python-publicsuffixlist:

  - update to 1.0.2.20241120:
    * various toplevel domain updates

++++ python-pudb:

  - update to 2024.1.3:
    * Fix startup when no write permissions
    * Fix compatibility with Python 3.13

++++ python-pyaml:

  - update to 24.9.0:
    * vspacing.oneline_split: fix splitting list items starting with
    "-key

++++ python-redis:

  - update to 5.2.0:
    * Extend AggregateRequest with scorer argument

++++ python-reproject:

  - update to 0.14.1:
    * Enforce readonly mode for memmap when reading input array
    * Fix Continuous Integration folllowing changes in Sunpy 6.0.0
    and 6.0.1
    * MNT: Use hash for Action workflow versions and update if
    needed

++++ python-resolvelib:

  - update to 1.1.0:
    * Declare supported Python version support ">= 3.7" in dist
    meta  #129
    * Improve exception chaining when ResolutionImpossible raises
    during backjumping  #133
    * Switch from pyi files to modern annotations based type
    hinting  #135
    * In tests the commentjson test dependency with re.sub  #141
    * Deduplicate failure causes to save memory and reduce
    backtracking overhead  #143
    * New narrow_requirement_selection provider method giving
    option for providers to reduce the number of times sort key
    get_preference is called in long running backtrack  #145
    * Run tests against Python 3.12, 3.13, and use latest version
    of CI dependencies  #153
    * Update py2ndex script to use metadata files, skip 404, and
    support PEP 723  #156
    * Replace setuptools.cfg and mypy.ini with pyproject.toml  #157
    * Add tests type "unvisited" to functional Python tests to
    ensure backjumping is correctly skipping candidates  #158
    * Switch from flake8 to ruff for linting  #160
    * Enable automatic TYPE_CHECK guarding for imports only used
    for type hinting via ruff rules TCH and FA  #166
    * Fix example reporter_demo get_preference method which
    requires arg backtrack_causes #136
    * Clarify the docstrings for providers.py #138
    * Pin Black version for linting to prevent CI failures  #150
    * In unexpected situation where broken_state.mapping is empty,
    stop backtracking, and continue resolution (rather than
    throwing ResolutionImpossible)  #152
    * During backtracking check if the current broken state is an
    incompatible dependency, if not stop backtracking and
    continue resolution.  #155
    * Separate AbstractResolver and Resolver into different modules
    [#162]
    * Separate resolvers into different modules  #163
    * Export criterion in resolvers to keep compatibility  #164
    * Enable isorting via ruff  #165

++++ python-rich:

  - update to 13.9.4:
    * Optimizations to cell_len which may speed up Rich / Textual
    output https://github.com/Textualize/rich/pull/3546
  - update to 13.9.3:
    * Fix a broken regex that resulted in the slow path being
    chosen for some operations. This fix should result in notable
    speedups for some operations, such as wrapping text.
    * Fixed broken regex that may have resulted in poor
    performance. https://github.com/Textualize/rich/pull/3535
  - update to 13.9.2:
    * A hotfix for highlighting in the table, and a fix for
    `Segment.split_cells`
    * Fixed `Table` columns not highlighting when added by
    `add_row` https://github.com/Textualize/rich/issues/3517
    * Fixed an issue with Segment.split_cells reported in Textual
    https://github.com/Textualize/textual/issues/5090
  - update to 13.9.1:
    * Fixed typing_extensions dependency
  - update to 13.9.0:
    * Dropped support for Python3.7
    * Rich will display tracebacks with finely grained error
    locations on python 3.11+
    * Fixed issue with Segment._split_cells
    * Fix auto detection of terminal size on Windows
    * `Text.style` now respected in Panel title/subtitle
  - update to 13.8.1:
    * Added support for Python 3.13
    * Fixed infinite loop when appending Text to same instance
  - update to 13.8.0:
    * Fixed `Table` rendering of box elements so "footer" elements
    truly appear at bottom of table, "mid" elements in main table
    body.
    * Fixed styles in Panel when Text objects are used for title
    * Fix pretty repr for `collections.deque`
    * Thread used in progress.track will exit if an exception
    occurs in a generator
    * Progress track thread is now a daemon thread
    * Fixed cached hash preservation upon clearing meta and links
    * Fixed overriding the `background_color` of `Syntax` not
    including padding
    * Fixed pretty printing of dataclasses with a default repr in
    Python 3.13
    * Fixed selective enabling of highlighting when disabled in the
    `Console`
    * Fixed BrokenPipeError writing an error message
    * Fixed superfluous space above Markdown tables
    * Fixed issue with record and capture interaction
    * Fixed control codes breaking in `append_tokens`
    * Fixed exception pretty printing a dataclass with missing
    * `RichHandler` errors and warnings will now use different
    colors (red and yellow)
    * Removed the empty line printed in jupyter while using
    `Progress`
    * Running tests in environment with `FORCE_COLOR` or `NO_COLOR`
    environment variables
    * ansi decoder will now strip problematic private escape
    sequences
    * Tree's ASCII_GUIDES and TREE_GUIDES constants promoted to
    class attributes
    * Adds a `case_sensitive` parameter to `prompt.Prompt`. This
    determines if the response is treated as case-sensitive.
    * Added `Console.on_broken_pipe`

++++ python-setproctitle:

  - update to 1.3.4:
    * Add support for Python 3.13 (issue #139).
    * Drop support for Python 3.7.

++++ python-setuptools:

  - update to 75.5.0:
    * Removed support for
    SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION, as it is
    deemed prone to errors.
    * Added support for the environment variable
    SETUPTOOLS_DANGEROUSLY_SKIP_PYPROJECT_VALIDATION=true,
    allowing users to bypass the validation of pyproject.toml.
    This option should be used only as a last resort when
    resolving dependency issues, as it may lead to improper
    functioning. Users who enable this setting are responsible
    for ensuring that pyproject.toml complies with setuptools
    requirements. (#4611)  Attention! This environment variable
    was removed in a later version of setuptools.
    * Require Python 3.9 or later. (#4718)
    * Remove dependency on importlib_resources and the vendored
    copy of the library. Instead, setuptools consistently rely on
    stdlib's importlib.resources (available on Python 3.9+).
    (#4718)
    * Setuptools' bdist_wheel implementation no longer produces
    wheels with the m SOABI flag (pymalloc-related). This flag
    was removed on Python 3.8+ (see :obj:`sys.abiflags`). (#4718)
    * Updated vendored packaging version to 24.2. (#4740)
    * Merge with pypa/distutils@251797602, including fix for
    dirutil.mkpath handling in pypa/distutils#304.
    * Allowed using dict as an ordered type in
    setuptools.dist.check_requirements -- by :user:`Avasam`
    * Ensured methods in setuptools.modified preferably raise a
    consistent distutils.errors.DistutilsError type (except in
    the deprecated use case of SETUPTOOLS_USE_DISTUTILS=stdlib)
  - - by :user:`Avasam`
    * Fix the ABI tag when building a wheel using the debug build
    of Python 3.13 on Windows. Previously, the ABI tag was
    missing the "d" flag.
    * Fix clashes for optional-dependencies in pyproject.toml and
    extra_requires in setup.cfg/setup.py. As per PEP 621,
    optional-dependencies have to be honoured and dynamic
    behaviour is not allowed.
    * #4560
    * Made errors when parsing Distribution data more explicit
    about the expected type (tuple[str, ...] | list[str]) -- by
    :user:`Avasam`
    * Fix a TypeError when a Distribution's old included attribute
    was a tuple -- by :user:`Avasam`
    * Add workaround for bdist_wheel --dist-info-dir errors when
    customisation does not inherit from setuptools.
    * Re-use pre-existing .dist-info dir when creating wheels via
    the build backend APIs (PEP 517) and the metadata_directory
    argument is passed -- by :user:`pelson`.
    * Changed egg_info command to avoid adding an empty .egg-info
    directory while iterating over entry-points. This avoids
    triggering integration problems with
    importlib.metadata/importlib_metadata (reference:
    pypa/pyproject-hooks#206).
    * Deprecated bdist_wheel.universal configuration.
    * Removed reference to upload_docs module in entry points.
    * Declare also the dependencies used by distutils (adds
    jaraco.collections).
    * Removed upload_docs command.
    * Merge with pypa/distutils@7283751. Removed the register and
    upload commands and the config module that backs them
    (pypa/distutils#294). Removed the borland compiler. Replaced
    vendored dependencies with natural dependencies. Cygwin C
    compiler now gets compilers from sysconfig
    (pypa/distutils#296).
    * Fix cross-platform compilation using
    distutils._msvccompiler.MSVCCompiler -- by :user:`saschanaz`
    and :user:`Avasam`
    * Fixed TypeError in sdist filelist processing by adding
    support for pathlib Paths for the build_base.
    * Removed degraded and deprecated test_integration
    (easy_install) from the test suite.
    * Fixed TypeError in msvc.EnvironmentInfo.return_env when no
    runtime redistributables are installed.
    * Added support for defining ext-modules via pyproject.toml
    (EXPERIMENTAL, may change in future releases).
    * Merge with pypa/distutils@3dcdf8567, removing the duplicate
    vendored copy of packaging.
    * Restored setuptools.msvc.Environmentinfo as it is used
    externally.
    * Changed the type of error raised by
    setuptools.command.easy_install.CommandSpec.from_param on
    unsupported argument from AttributeError to TypeError -- by
    :user:`Avasam`
    * Added detection of ARM64 variant of MSVC -- by
    :user:`saschanaz`
    * Made setuptools.package_index.Credential a typing.NamedTuple
  - - by :user:`Avasam`
    * Reraise error from setuptools.command.easy_install.auto_chmod
    instead of nonsensical TypeError: 'Exception' object is not
    subscriptable -- by :user:`Avasam`
    * Fully typed all collection attributes in pkg_resources -- by
    :user:`Avasam`
    * Automatically exclude .tox|.nox|.venv directories from sdist.
    * Removed the monkeypatching of distutils._msvccompiler. Now
    all compiler logic is consolidated in distutils.
    * Synced with pypa/distutils@58fe058e4, including consolidating
    Visual Studio 2017 support (#4600, pypa/distutils#289),
    removal of deprecated legacy MSVC compiler modules
    (pypa/distutils#287), suppressing of errors when the home
    directory is missing (pypa/distutils#278), removal of wininst
    binaries (pypa/distutils#282).
    * #4592
    * Remove abc.ABCMeta metaclass from abstract classes.
    pypa/setuptools#4503 had an unintended consequence of causing
    potential TypeError: metaclass conflict: the metaclass of a
    derived class must be a (non-strict) subclass of the
    metaclasses of all its bases -- by :user:`Avasam`
    * Mark abstract base classes and methods with abc.ABC and
    abc.abstractmethod -- by :user:`Avasam`
    * Changed the order of type checks in
    setuptools.command.easy_install.CommandSpec.from_param to
    support any collections.abc.Iterable of str param -- by
    :user:`Avasam`
    * Prevent an error in bdist_wheel if compression is set to a
    str (even if valid) after finalizing options but before
    running the command. -- by :user:`Avasam`
    * Raises an exception when py_limited_api is used in a build
    with Py_GIL_DISABLED. This is currently not supported
    (python/cpython#111506).
    * Synced with pypa/distutils@30b7331 including fix for modified
    check on empty sources (pypa/distutils#284).
    * setuptools is replacing the usages of :pypi:`ordered_set`
    with simple instances of dict[Hashable, None]. This is done
    to remove the extra dependency and it is possible because
    since Python 3.7, dict maintain insertion order.
    * #4534, #4546, #4554, #4559, #4565
    * Merged with pypa/distutils@b7ee725f3 including: Support for
    Pathlike objects in data files and extensions
    (pypa/distutils#272, pypa/distutils#237), native support for
    C++ compilers (pypa/distuils#228) and removed unused
    get_msvcr() (pypa/distutils#274).

++++ python-setuptools-rust:

  - Update to version 1.10.2:
    * Fix deprecation warning from use of wheel.bdist_wheel.
    * Fix regression in 1.10.0 where editable builds would be built in release mode
    * Support Python 3.13
    * Add SETUPTOOLS_RUST_PEP517_USE_BASE_PYTHON environment variable to use
    the base interpreter path when running inside a virtual environment to
    avoid recompilation when switching between virtual environments.
    * Delay import of dependencies until use to avoid import errors during
    a partially complete install when multiple packages are installing at
    once.
    * Deprecate --build-temp argument to build_rust command (it does nothing).

++++ python-shippinglabel:

  - update to 2.1.0:
    * Regenerate reference files.

++++ python-social-auth-app-django:

  - update to 5.4.2:
    * Fixed `UserSocialAuth` creation by allowing `JSONField` to be
    blank
    * Fixed the assumption that UID can only be an integer

++++ python-sparse:

  - Skip python313: No numba 0.61 yet

++++ python-sphinx-autobuild:

  - update to 2024.10.13:
    * Improve error handling for failures in pre-build commands.
    * Show the changed paths that triggered the rebuild.

++++ python-sphinx-gallery:

  - update to 0.18.0:
    * Allow to disable writing computation times #1385
    * [ENH] Add option to render multiple images from same cell as
    single-img #1384
    * Fix indexst variable does not exist when own index gallery is
    first #1383

++++ python-starlette:

  - update to 0.41.3:
    * Exclude the query parameters from the `scope[raw_path]` on
    the `TestClient` #2716.
    * Replace `dict` by `Mapping` on `HTTPException.headers` #2749.
    * Correct middleware argument passing and improve factory
    pattern #2752.
  - update to 0.41.2:
    * Revert bump on `python-multipart`
  - update to 0.41.1:
    * Bump minimum `python-multipart` version to 0.0.13

++++ python-statsmodels:

  - update to 0.14.4:
    * The statsmodels developers are pleased to announce the
    release of 0.14.4. This release contains one feature and no
    fixes.

++++ python-stevedore:

  - update to 5.4.0:
    * Add note about requirements lower bounds
    * Remove Python 3.8 support
    * Run pyupgrade to clean up Python 2 syntaxes
    * Declare Python 3.12 support

++++ python-swapper:

  - update to 1.4.0:
    * Added support for Django 4.2 and 5.0.
    * Dropped support for Django Django 4.0a1.
    * Added support for Python 3.10 and 3.11.
    * Dropped support for Python 3.7.

++++ python-sympy:

  - update to 1.13.3:
    * Handle matrices of zero columns correctly in the Matrix
    constructor.
    * NumPy numbers can be used with clebsch_gordan
    * An inconsistency in Float/Rational comparisons was fixed.
    * Fixed a bug that caused LambertW to hang on specific inputs
    * A regression introduced in SymPy 1.13 in the heurisch
    integration routine was fixed
    * see also https://github.com/sympy/sympy/wiki/release-notes-for-1.13.0

++++ python-tempora:

  - add missing requires on dateutil

++++ python-term-background:

  - update to 1.0.2:
    * Split out Python code into git branches to support older
    Python.
    * Master now can use newer Python idioms like f-strings, and
    newer packaging uses `pyproject.toml`.

++++ python-tomli:

  - update to 2.1.0:
    * Instantiating `TOMLDecodeError` with free-form arguments.
    * `msg`, `doc` and `pos` arguments should be given.
    * Added `msg`, `doc`, `pos`, `lineno` and `colno` attributes to
    `TOMLDecodeError`

++++ python-translation-finder:

  - update to 2.19:
    * Fixed crasn on corrupt YAML files.

++++ python-typeguard:

  - update to 4.4.1:
    * Dropped Python 3.8 support
    * Changed the signature of typeguard_ignore() to be compatible
    with typing.no_type_check() (PR by @jolaf)
    * Avoid creating reference cycles when type checking uniontypes
    and classes
    * Fixed checking of variable assignments involving tuple
    unpacking
    * Fixed TypeError when checking a class against type[Self]
    * Fixed checking of protocols on the class level (against
    type[SomeProtocol])
    * Fixed Self checks in instance/class methods that have
    positional-only arguments
    * Fixed explicit checks of PEP 604 unions against
    types.UnionType
    * Fixed checks against annotations wrapped in NotRequired not
    being run unless the NotRequired is a forward reference
    * Fixed the pytest_ignore_collect hook in the pytest plugin
    blocking default pytest collection ignoring behavior by
    returning None instead of False (PR by @mgorny)

++++ python-typer:

  - update to 0.13.1:
    * Remove Rich tags when showing completion text.
    * Render Rich markup as HTML in Markdown docs.
    * Support cp850 encoding for auto-completion in PowerShell.
    * Allow gettext translation of help message.
    * Fix printing HTML from Rich output. PR #1055 by @tiangolo.
    * Update markdown includes to use the new simpler format. PR
  - update to 0.13.0:
    * Handle `KeyboardInterrupt` separately from other
    exceptions.
    * Update `launch` to not print anything when opening urls.
    * Show help items in order of definition.
    * Fix equality check for custom classes.
    * Allow colon in zsh autocomplete values and descriptions.
    * Deprecate support for `is_flag` and `flag_value`
    parameters.
    * Remove unused functionality from `_typing.py` file.
    * Fix typo in function name `_make_rich_text`.

++++ python-types-python-dateutil:

  - update to 2.9.0.20241003:
    * dateutil: Enable failing test
    * [python-dateutil] Add
    `dateutil.parser.UnknownTimezoneWarning`.
    * Fix types for python-dateutil's relativedelta

++++ python-types-requests:

  - update to 2.32.0.20241016:
    * remove unneeded Iterable base class from CookieJar

++++ python-ufoLib2:

  - update to 0.16.1:
    * Drop support Python 3.7
    * Update testing dependencies and cattrs minimum version

++++ python-ufonormalizer:

  - update to 0.6.2:
    * Fix conversion of floats
  - update to 0.42.0:
    * Update to HarfBuzz 10.1.0
    * Setup API reference generated by Sphinx

++++ python-usbsdmux:

  - update to 24.11.1:
    * Please note the breaking changes in 24.11.
  - update to 24.11:
    * With this release we fix an issue with the numbering of the
    open drain outputs of the USB-SD-Mux FAST (see #83).
    * With this release the numbering of the open drain output
    changes.
    * Testing: Allow running tests locally and make README-test
    more verbose
    * README: fixes, tweaks and re-organisation
    * CI: streamline and add build and codespell targets
    * QA: Use ruff instead of black + flake8 for formatting and
    linting
    * pyproject.toml: switch over from setup.py
    * CI: add automatic publication to pypi.org and test.pypi.org
    * usbsdmux: remove the deprecated service/client code paths
    * usbsdmux: add ruff "UP" rules to config and fix issues
    automatically
    * pyproject.toml: fix fallout from the migration
    * usb-sd-mux/FAST: Fix GPIO number-to-pin definition

++++ python-waitress:

  - update to 3.0.2:
    * When using Waitress to process trusted proxy headers,
    Waitress will now update the headers to drop any untrusted
    values, thereby making sure that WSGI apps only get trusted
    and validated values that Waitress itself used to update the
    environ.

++++ python-waitress-doc:

  - update to 3.0.2:
    * When using Waitress to process trusted proxy headers,
    Waitress will now update the headers to drop any untrusted
    values, thereby making sure that WSGI apps only get trusted
    and validated values that Waitress itself used to update the
    environ.

++++ python-watermark:

  - update to 2.5.0:
    * add manifest for conda-forge
    * Make py3nvml optional
    * fixed imports and docstring
    * Display module of functions/classes imported

++++ python-wcmatch:

  - update to 10.0:
    * NEW: Added GLOBSTARLONG which adds support for the Zsh style
    * ** which acts like ** with GLOBSTAR but but traverses
    symlinks.
    * NEW: pathlib.match will respect symlink rules (when the
    REALPATH flag is given). Hidden file rules will be respected at
    all times. Enable DOTALL to match hidden files.
    * NEW: Symlinks should not be traversed when GLOBSTAR is enabled
    unless FOLLOW is also enabled, but they should still be
    matched. Prior to this change, symlinks were not traversed and
    they were ignored from matching which contradicts how Bash
    works and could be confusing to users.
    * FIX: Fix some inconsistencies with globmatch and symlink
    handling when REALPATH is enabled.
  - update to 9.0:
    * NEW: Remove deprecated function glob.raw_escape.
    * NEW: Officially support Python 3.13.

++++ python-weblate-language-data:

  - update to 2024.14:
    * Translations update from Hosted Weblate

++++ python-whitenoise:

  - update to 6.8.2:
    * Fix compression speed gains for the thread pool when running
    Django’s collectstatic. The thread pool had no effect due to
    use of a generator for the results, a refactoring introduced
    when reviewing the initial PR. Thanks to Petr Přikryl for the
    investigation and fix in PR #616.

++++ python-wirerope:

  - update to 0.4.8:
    * Support for python 3.12+

++++ python-wtf-peewee:

  - update to 3.0.6:
    * Updates to support latest wtforms

++++ python-yapf:

  - update to 0.43.0:
    * New `DISABLE_SPLIT_LIST_WITH_COMMENT` flag.
    `DISABLE_SPLIT_LIST_WITH_COMMENT` is a new knob that changes the
    behavior of splitting a list when a comment is present inside
    the list.
    Note the behavioral change above; if you set
    `DISABLE_ENDING_COMMA_HEURISTIC=true` and want to keep the old
    behavior, you now also need to set
    `DISABLE_SPLIT_LIST_WITH_COMMENT=true`.
    * Remove dependency on importlib-metadata
    * Remove dependency on tomli when using >= py311
    * Format '.pyi' type sub files.
    * Fix SPLIT_ARGUMENTS_WHEN_COMMA_TERMINATED for one-item named
    argument lists by taking precedence over SPLIT_BEFORE_NAMED_ASSIGNS.
    * Fix SPLIT_ALL_COMMA_SEPARATED_VALUES and
    SPLIT_ALL_TOP_LEVEL_COMMA_SEPARATED_VALUES
    being too agressive for lambdas and unpacking.

++++ python-yappi:

  - update to 1.6.10:
    * Add support for python 3.13
    * fix: Silently ignore exceptions for `PyObject_GetAttrString`
    calls

++++ python-yattag:

  - update to 1.16.1:
    * Added AsIs for inserting un-escaped strings as attribute values.
    * Added format_attr_value() to format attribute values
    * improving typing annotations

++++ python-zc.buildout:

  - update to 3.3:
    * Allow the -I option in the Python interpreter wrapper
    installed by buildout when using the zc.recipe.egg recipe's
    interpreter = directive. This solves the issue when VSCode
    calls the designated Python interpreter for a workspace with
    this option to determine the Python version etc. (#627)
    * Allow the -I option in the Python interpreter wrapper
    installed by buildout when using the zc.recipe.egg recipe's
    interpreter = directive. This solves the issue when VSCode
    calls the designated Python interpreter for a workspace with
    this option to determine the Python version etc.
    * Add config option: optional-extends. This is the same as the
    extends option, but then for optional files. The names must
    be file paths, not URLs.  If the path does not exist,  it is
    silently ignored. This is useful for optionally loading a
    local.cfg or custom.cfg with options specific for the
    developer or the server. [maurits]
    * Fix: a variable defined with initial += was undefined and
    would lead to a corrupted .installed.cfg. Fixes issue 641.
    [distributist]
    * Fix: extends with increments could result in missing values.
    Buildout processes them in the correct order now and combines
    them correctly. Fixes issue 176 and issue 629. [distributist]
    * Fix: Multiple += or /-= in one file would lose assignment in
    a previous file. Fixes issue 656. [distributist]

++++ python-zhon:

  - update to 2.1.1:
    * Bump version in docs
    * Removes Python 3.8 support

++++ python-zict:

  - Remove lmdb test requirement: the tests have been disabled anyway

++++ python-zipp:

  - update to 3.21.0:
    * Improve performances of :meth:`zipfile.Path.open` for non-
    reading modes. (1a1928d)
    * Rely on cached_property to cache values on the instance.
    * Rely on save_method_args to save method args.
    * Make zipp.compat.overlay.zipfile hashable.
    * Replaced SanitizedNames with a more surgical fix for infinite
    loops, restoring support for names with special characters in
    the archive. (python/cpython#123270)
    * Made the zipfile compatibility overlay available as
    zipp.compat.overlay.
    * Also match directories in Path.glob.

++++ python-Quart:

  - update to 0.19.9:
    * Fix missing PROVIDE_AUTOMATIC_OPTIONS config for
    compatibility with Flask 3.1.

++++ rancher-cli:

  - Update to version 2.10.0:
    * [v2.10] Bump rancher to v2.10.0 and remove deprecated globaldns
    subcommand (#402)
    * Bump Go to 1.23.1 (#396)
    * revert error message (#390)
    * Ensure that localProvider is always the 0th provider listed in
    the provider selection prompt. (#389)
    * Update README.md for Linux binary build command (#385)
    * Fix panic on `context switch` (#386)

++++ rsibreak:

  - Stop using the %suse_update_desktop_file macro
  - Spec cleanup

++++ seadrive-gui:

  - Revert to 2.0.28
    * Fix boo#1232619
  - Remove fix-return.patch (not needed with this version)
  - Remove pr404.patch (not needed with this version)

++++ step-cli:

  - update to 0.28.2
    https://github.com/smallstep/cli/releases/tag/v0.28.2
  - use download_files service to download the tarball
  - update to 0.28.1
    https://github.com/smallstep/cli/releases/tag/v0.28.1

++++ symbols-only-nerd-fonts:

  - Update to 3.3.0
    * Devicons are updated so some old icons were dropped/replaced
    * Switch to devicons/devicon
    * Update Font Logos to 1.3.0
    * Add Chuck and Vitruvian Man
    * Add Progress Indicators a la Fira Code
    * FontAwesome: Scale glyphs a bit smaller
    * Improve Bazel icon
    * Improve Ruby and Firebase icons

++++ terragrunt:

  - Update to version 0.69.0:
    * chore: Pin tflint to `v0.50.3` (#3569)
  - Update to version 0.68.17:
    * feat: support discovery of symlinked modules (#3562)
    * feat: Improving the quick start experience (#3568)
    * fix: Adjusting docs for `feature` and `exclude` (#3581)
  - Update to version 0.68.16:
    * Add handling of empty feature blocks (#3580)
    * fix: Fix spelling of `RenderJSONithMetadata` as
    `RenderJSONWithMetadata` (#3579)
    * Exclude block (#3551)

++++ werf:

  - Update to version 2.13.1:
    * chore: release 2.13.1 (#6423)
    * fix(bundle): allow
    application/vnd.cncf.helm.chart.content.v1.tar+gzip media type
    (#6424)
    * chore(deps): update docs/Gemfile & docs/Gemfile.lock to reduce
    vulnerabilities (#6426)
    * fix(build, buildah): support custom docker config path (#6421)
    * refactor(test): use "Expect" instead of "Ω"
    * chore(site): change basic auth to dex (#6416)
    * chore(release): 1.2 alpha
    * docs(deploy): fix excess repo option in example
    * docs(build): note about build backends in overview
    * docs(build): fix example with multi-stage build
    * docs(kubectl): generate docs for log flags
    * refactor(ci): replace action converge with werf command
    * chore(release): 1.2 stable/rock-solid 2 all
    * fix(kubectl): add klog arbitrary flags

------------------------------------------------------------------
------------------  2024-11-19  -  Nov 19 2024  -------------------
------------------------------------------------------------------

++++ Mesa:

  - Update to release 24.2.7
  - -> https://docs.mesa3d.org/relnotes/24.2.7
  - supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch

++++ Mesa-drivers:

  - Update to release 24.2.7
  - -> https://docs.mesa3d.org/relnotes/24.2.7
  - supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch

++++ bat:

  - Update vendored dependencies to fix build failures on newer rust versions
  - Remove cargo_config since it is now included in vendor.tar.xz by the obs service

++++ rust1.79:

  - Backport fix for SP3 to select correct cmake version

++++ llvm19:

  - Update to version 19.1.4.
    * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
  - Rebase llvm-do-not-install-static-libraries.patch.

++++ clazy:

  - Update to version 1.13git.20241119T221149~560bdc1:
    * Make string-allocations logic for handling two different cases more clear and efficient
    * Fix string-allocations check looking not deep enough in hierarchy to find StringLiteral for fixit
    * Fix string-allocations test not recognizing operator macro magic of Qt 6.8
    * Add ifdefs for compatibility with LLVM 19
    * Adjust additional argument in InclusionDirective
    * Fix typo in todo
    * Revert overeager cleanups to usageg OptionalFileEntryRef, GET_LEXER
    * remove the llvm/clang version sepecific macros
    * Remove guards for no longer necessary CLAZY_DISABLE_AST_MATCHERS
    * Update LLVM/Clang support to 14.0+, add LLVM 19 handling
    * Fix note on which qstring-arg checks are run by default and which need to be enabled
    * Remove unneeded FWD
  - Harden runtime dependencies and tweak CLANGXX to point to the
    clang executable matching libraries used to build clazy.

++++ ddnet:

  - Update to version 18.7:
    * [Client] Apply exponential easing to smooth camera
    * [Client] Hook collisions preview
    * [Client] Nameplate preview
    * [Client] Improved skin downloading
    * [Client] Add clear_chat command
    * [Client] Improved ghost file validation
    * [Client] Arrow left/right keys in server browser
    * [Client] Disable Vulkan backend for buggy AMD drivers
    * [Client] Use correct audio channels for map sounds
    * [Client] Fix 0.7 server favorites and store them correctly
    * [Client] Add Antarctica flag, update existing flags
    * [Client] Fix chat command preview overlap
    * [Client] Fix vanilla demo tuning
    * [Client] Scroll to selected screen in settings
    * [Client] Fix toggle argument validation
    * [Client] Adjust console search behavior
    * [Client] Fix color validation in some commands
    * [Client] Ensure file rename succeded on Windows
    * [Editor] Fix switch overlay text order
    * [Editor] Show UI debug info
    * [Editor] Fix server settings command help text overwriting
    other tooltips
    * [Editor] Separate tele numbers
    * [Editor] Popup to select envelope curve type
    * [Server] Regional rankings for /top5team
    * [Server] Practrice: Add /invincible mode
    * [Server] Practice: Add /totele(cp), /(un)livefreeze,
    /(un)endless
    * [Server] Practice: Add /(un)infjump
    * [Server] Fix /help printing chat commands
    * [Server] Allow 2048 bans
    * [Server] No rescue delay in practice
    * [Server] Fix demos with maps in folders
    * [Server] Fix show_ips output
    * [Master] Add DDPer support

++++ element-web:

  - Version 1.11.86
    [#]# ✨ Features
    * Deduplicate icons using Compound Design Tokens (https://github.com/element-hq/element-web/pull/28419). Contributed by @t3chguy.
    * Let widget driver send error details (https://github.com/element-hq/element-web/pull/28357). Contributed by @AndrewFerr.
    * Deduplicate icons using Compound Design Tokens (https://github.com/element-hq/element-web/pull/28381). Contributed by @t3chguy.
    * Auto approvoce `io.element.call.reaction` capability for element call widgets (https://github.com/element-hq/element-web/pull/28401). Contributed by @toger5.
    * Show message type prefix in thread root \& reply previews (https://github.com/element-hq/element-web/pull/28361). Contributed by @t3chguy.
    * Support sending encrypted to device messages from widgets (https://github.com/element-hq/element-web/pull/28315). Contributed by @hughns.
    [#]# 🐛 Bug Fixes
    * Feed events to widgets as they are decrypted (even if out of order) (https://github.com/element-hq/element-web/pull/28376). Contributed by @robintown.
    * Handle authenticated media when downloading from ImageView (https://github.com/element-hq/element-web/pull/28379). Contributed by @t3chguy.
    * Ignore `m.3pid_changes` for Identity service 3PID changes (https://github.com/element-hq/element-web/pull/28375). Contributed by @t3chguy.
    * Fix markdown escaping wrongly passing html through (https://github.com/element-hq/element-web/pull/28363). Contributed by @t3chguy.
    * Remove "Upgrade your encryption" flow in `CreateSecretStorageDialog` (https://github.com/element-hq/element-web/pull/28290). Contributed by @florianduros.

++++ emacs-auctex:

  - Update to AUCTeX ELPA version 14.0.7 (2024-10-05)
    * * Added
  - Respect the value of ~TeX-output-dir~ when processing files with
    latexmk.  This means that the default value of ~TeX-command-list~ is
    changed.
  - Add new support files =style/authblk.el=, =style/langscibook.cls=,
    =style/lstautogobble.el=, =style/lstlinebgrd.el=,
    =style/ninecolors.el=, =style/supertabular.el=, =style/tabularray.el=
    and =style/xtab.el=.
    * * Fixed
  - Fold argument of verbatim macros more accurately.
    * * Removed
  - Remove the possibility to disable the side-wide installation with:
    [#]+begin_src emacs-lisp
    (unload-feature 'tex-site)
    [#]+end_src
    Using this form when installed from [[ELPA:auctex.html][ELPA]] will
    throw an error.

++++ fastfetch:

  - update to 2.30.1
    * A hotfix release that fixes a build failure when running cmake
    outside of build directory.
  - update to 2.30.0
    Changes:
    * Percent: bar type must be enabled in `percent.type` before
    using percent bar in custom format
    Features:
    * Port to MidnightBSD; add mport package manager support
    * Support bluetooth battery detection for macOS and Windows
    (Bluetooth, macOS / Windows)
    * Support M4 model detection (Host, macOS)
    * Support CPU temperature detection on OpenBSD (CPU, OpenBSD)
    * Display Android icon in Android devices (OS, Android)
    * Support qi package manager detection (Packages, Linux)
    * Detect WM / DE by enumerating running processes (WM / DE,
    NetBSD)
    * Generate manual pages from help.json (Doc)
    * Detect marketing name of vivo smartphone (Host, Android)
    * Add txDrops detection if supported (NetIO, *BSD)
    * Support tilix version detection (Terminal, Linux)
    * Support percent type config in module level.
    Bugfixes:
    * Don't display `()` in key if display name is not available
    (Display)
    * Fix & normalize bluetooth mac address detection (Bluetooth,
    macOS / Windows)
    * Don't print index in multi-battery devices (Battery)
    * Fix segfault in macOS (gh#fastfetch-cli/fastfetch#1388, macOS)
    * Fix `CFStringGetCString() failed` errors
    (gh#fastfetch-cli/fastfetch#1394, Media, macOS)
    * Fix CPU frequency detection on Apple M4
    (gh#fastfetch-cli/fastfetch#1394, CPU, macOS)
    * Fix exe path detection on macOS (Shell / Terminal, macOS)
    * Fix logo fails to load from symlinked files on macOS
    (gh#fastfetch-cli/fastfetch#1395, Logo, macOS)
    * Fix 32-bit truncation (NetIO, macOS)
    Logos:
    * Fix Lilidog
    * Add MidnightBSD
    * Add Unifi
    * Add Cosmic DE
    * Update openSUSE Tumbleweed

++++ fence-agents:

  - Update to version 4.15.0+git.1731052905.05fd299e:
    * fence_nutanix_ahv: Add fence agent support for Nutanix AHV Cluster (#600)
    * fencing: fix "?" typo in required field for the login parameter
    * fence_ibm_powervs: add private endpoint and token file support (#597)
    * fence_mpath: fix 0x-format patch causing unfencing issue, and use re.MULTILINE to avoid duplicating device dev/key lines in /run/cluster/mpath.devices
    * fence_bladecenter/fence_raritan_px3: use r"" on regex string to avoid SyntaxWarning
    * fence_scsi: preempt clears all devices on the mpath device, so only run it for the first device

++++ fvwm2:

  - build with gcc14
  - use existing openSUSE wallpaper image file
  - use FvwmBacker module for background instead of external program
  - do not depend on xli anymore
  - modified sources
    % system.fvwm2rc
  - added patches
    fix https://github.com/fvwmorg/fvwm/pull/100
    + fvwm2-gcc14.patch

++++ gap-io:

  - Update to release 4.9.1
    * Switch tests to use a different HTTP provider

++++ govulncheck-vulndb:

  - Update to version 0.0.20241119T173509 2024-11-19T17:35:09Z.
    Refs jsc#PED-11136
    Go CVE Numbering Authority IDs added or updated with aliases:
    * GO-2022-0646 CVE-2020-8911 CVE-2020-8912 GHSA-7f33-f4f5-xwgw GHSA-f5pg-7wfw-84q9
    * GO-2024-3267 CVE-2024-52010 GHSA-7hpf-g48v-hw3j
    * GO-2024-3269 CVE-2024-52308 GHSA-p2h2-3vg9-4p87
    * GO-2024-3271 CVE-2024-52522
    * GO-2024-3272 CVE-2024-24425
    * GO-2024-3273 CVE-2024-24426
    * GO-2024-3274 CVE-2023-0109 GHSA-5r2g-59px-3q9w
    * GO-2024-3275 CVE-2024-44625 GHSA-phm4-wf3h-pc3r
    * GO-2024-3277 CVE-2024-0793 GHSA-h7wq-jj8r-qm7p
    * GO-2024-3278 CVE-2024-9526

++++ hawk2:

  - Update to version 2.6.5+git.1731582159.c5ff4329:
    * Fix: prepend all executable with /usr/sbin (bsc#1232760)

++++ helmify:

  - Update to version 0.4.16:
    * fixed typo
    * added parser for loadBalancerSourceRanges field
  - Update to version 0.4.15:
    * Add an option for enable/disable webhook for a standard
    operator generated by kubebuilder. * Use regular expressions to
    match the containerPort of the webhook.
    * added unit test
    * changed variable name
    * updated chart example
    * added regex to replace specific quote char
    * fixup! fix wild tab in service
    * fix wild tab in service
    * ci: generated chart examples check

++++ kopia:

  - Update to version 0.18.1:
    * fix(cli): fixed v0.18.0 failures using v0.17.0-generated config
    (#4255)
  - Update to version 0.18.0:
    There are over 240 changes in this release.
    Full list of changes can be found in:
    https://github.com/kopia/kopia/compare/v0.17.0...v0.18.0
    * Notifications
    You can now define notification profiles to be notified
    whenever errors occur.
  - support for defining notification profiles and templates via
    CLI (#4034) by Jarek Kowalski
  - send error notifications and snapshot reports (#4233) by
    Jarek Kowalski
  - improved snapshot reports (#4244) by Jarek Kowalski
  - added API to manipulate notification profiles in the UI - not
    used yet (#4171) by Jarek Kowalski
    * Maintenance
    Maintenance and manifest management improvements should make
    working with larger repositories somewhat easier.
  - run epoch maintenance for quick maintenance (#4185) by Julio
    López
  - allow running quick maintenance with epoch manager (#4198) by
    Julio López
  - do not run auto-maintenance after a command fails (#4168) by
    Julio López
  - Reduce memory usage for epoch index compaction (#4139) by
    lyndon-li
  - Reduce memory allocations during manifest compaction (#4084)
    by ashmrtn
  - remove ability to enable compaction on index load (#3834) by
    Julio López
  - Allow extending blob retentions (#4151) by Mike McKay-Dirden
    * Snapshot/Restore
    Improvements for snapshot/restore progress reporting.
  - introduce adaptive estimation mechanism (#4218) by Eugene
    Sumin
  - Increase restore progress granularity (#3655) by Eugene Sumin
    * Policies
  - add policy import/export commands to im-/export policies
    from/to json ([#4020]) by blenderfreaky
  - added support for per-directory splitter overrides (#3887) by
    Jarek Kowalski
  - Metadata compression config support for directory and
    indirect content (#4080) by Prasad Ghangal
    * Server
  - BREAKING CHANGE remove support for HTTP-based repository API
    (#3745) by Jarek Kowalski
  - add server user set-password-hash command (#3974) by Julio
    López
  - user add set user-password-hashing-algorithm cli option
    (#3815) by Sirish Bathina
  - Fix client IPv6 URI generation for gRPC connections (#3830)
    by Nick
    * Providers
  - GCS immutability (#4134) by Mike McKay-Dirden
  - info about the B2 S3-compatible endpoint (#3860) by Wyatt
    Childers
  - upgraded rclone to 1.68.2, fixed Google Drive rclone
    compatibility (#4249) by Jarek Kowalski
    * Other Notable Changes
  - cache hard limits flags (#3846) by Wyatt Childers
  - avoid memory bloat in benchmark encryption command (#4213) by
    Julio López
  - include clock skew in error message (#4186) by Julio López
  - avoid using empty master keys (#3835) by Mark Severson
  - key derivation algorithm for cache encryption (#3799) by
    Sirish Bathina
  - allow setting key derivation algorithm for format blob
    (#3779) by Sirish Bathina
  - include parameters in pbkdf2 instantiation (#3811) by Julio
    López
  - change default number of iterations for PBKDF2 (#3810) by
    Julio López

++++ resource-agents:

  - Update to version 4.16.0+git2.20a433c3:
    * storage_mon: remove unused macro variables (#1994)
    * AWS agents: reuse IMDS token until it expires (issue #1990) (#1991)
    * build: update ChangeLog for 4.16.0
    * build: update ChangeLog for 4.16.0-rc1
    * spec: drop BuildReq python3-pyroute2 for RHEL/CentOS
    * Add azure aznfs filesystem support (bsc#1233083)
    * powervs-subnet: dont require api_type as it has a default value
    * IPaddr2: improve fail logic and check ip_status after adding IP
    * azure-events*: use node name from cluster instead of hostname to avoid failing if they're not the same
    * ocf-shellfuncs: systemd_drop_in only if needed
    * findif.sh: remove "local proto" to use global proto from the agents
    * nfsserver: also stop rpc-statd for nfsv4_only to avoid stop failing in some cases

++++ libXt:

  - update to 1.3.1
    * README.md: update & correct links to O'Reilly X Toolkit books
    * unifdef ultrix
    * unifdef sgi
    * unifdef hpux
    * unifdef __osf__
    * unifdef AIXV3
    * unifdef MOTOROLA
    * unifdef USG
    * unifdef VMS
    * unifdef __EMX__
    * unifdef AIXSHLIB & SUNSHLIB
    * Improve linking with widget libraries on macOS
    * issue #17: avoid _Static_assert from c++
    * issue #18: cross-build issue in util
    * issue #19: include <process.h> on Windows for getpid()
    * issue #20: c23 boolean conflict
    * remove substitution for EXEEXT_FOR_BUILD, not defined in automake
    * Add continue_to_dispatch parameter to _XtResourceConfigurationEH()
    * eliminate an unnecessary cast
    * quiet a couple of unused-parameter warnings

++++ postgresql17:

  - Upgrade to 17.2:
    * Repair ABI break for extensions that work with struct
    ResultRelInfo.
    * Restore functionality of ALTER {ROLE|DATABASE} SET role.
    * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
    * Avoid deleting still-needed WAL files during pg_rewind.
    * Fix race conditions associated with dropping shared statistics
    entries.
    * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
    * Fix crash when checking to see if an index's opclass options
    have changed.
    * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
    * https://www.postgresql.org/about/news/p-2965/
    * https://www.postgresql.org/docs/release/17.2/

++++ libinput-extra:

  - Update to release 1.27
    * New "sticky" mode for drag-locking
    * For tablet pads we now support tablet pad mode groups for
    devices without status LEDs as well
    * If a tablet is unknown to libwacom we now assume that it is a
    built-in tablet. (similar to libwacom 2.11)
    * The available area on external tablets can be reduced via the
    new tablet "area" configuration.

++++ libinput:

  - Update to release 1.27
    * New "sticky" mode for drag-locking
    * For tablet pads we now support tablet pad mode groups for
    devices without status LEDs as well
    * If a tablet is unknown to libwacom we now assume that it is a
    built-in tablet. (similar to libwacom 2.11)
    * The available area on external tablets can be reduced via the
    new tablet "area" configuration.

++++ melange:

  - Update to version 0.15.11:
    * build(deps): bump cloud.google.com/go/storage from 1.46.0 to
    1.47.0
  - Update to version 0.15.10:
    * release: check for both tag and release
  - Update to version 0.15.9:
    * change release frequency to weekly
    * review feedback
    * docs(release): update release.md based on new workflow design
    * fix(releases): more reliable releases
    * Bump apko to v0.20.0
    * Clean up workspace dir from inside runner to avoid permission
    errors. (#1648)

++++ mercurial:

  - fix runtime requires

++++ mesheryctl:

  - update to 0.7.155:
    * no CLI-related changes in this release
  - update to 0.7.154:
    * no CLI-related changes in this release
  - update to 0.7.153:
    * Meshery CLI
  - revert crd name and apiversion changes @aabidsofi19 (#12667)
    * Documentation
  - add catalog links @Alero-Awani (#12670)
  - revert crd name and apiversion changes @aabidsofi19 (#12667)
  - update to 0.7.152:
    * Meshery CLI
  - update the model name for relationships w/signoff @Jougan-0
    (#12661)

++++ minio-client:

  - Update to version 20241117T193525Z:
    * when --no-list is specified avoid every List() call (#5082)
    * heal: Simplify bucket healing status (#5079)
    * lint: Fix new detected lint complaints (#5080)

++++ oomstaller:

  - update to 0.2.0:
    * Add --uid option

++++ openbao:

  - Update to version 2.0.3:
    * This release does not ship with the UI enabled. The UI will be
    available in the future. #129
    * OpenBao does not provide support for Vault Enterprise features.
    If there is an enterprise feature you would like to see added
    to the project, please open a feature request.
    * OpenBao is fully API compatible with Vault 1.14.9, and seal
    compatible with the plugins the project supports. Plugin
    support for OpenBao can be found
    [here](https://github.com/orgs/openbao/discussions/64).
    * Add v2.0.3 to CHANGELOG.md (#728)
    * Bump golang.org/x/net (#692) (#726)
    * Bump github.com/go-jose/go-jose/v3 to v3.0.3 (#693) (#727)
    * Bump go version to 1.22.9 for v2.0.3 release (#725)
    * Fix goreleaser prerelease status (#713) (#721)
    * Replace github.com/mholt/archiver/v3 with stdlib (#611) (#714)
    * Update to UBI 9.5 (#701) (#719)
    * Fix root namespace permission elevation (#695) (#718)
    * Bump github.com/golang-jwt/jwt/v4 (#691) (#717)
    * Compute raft peer bootstrap challenge via HKDF (#690) (#716)
    * Exclude changelog directory from release archive (#641) (#715)
    * Update goreleaser config version to 2 (#709) (#720)

++++ pcmanfm:

  - Run tar/recompress services only during build, storing the
    .obscpio as source, allowing OBS to be more space efficient.
  - Use the configure macro: this work after running autogen.sh.

++++ postgresql12:

  - Upgrade to 12.22:
    * Restore functionality of ALTER {ROLE|DATABASE} SET role
    * https://www.postgresql.org/about/news/p-2965/
    * https://www.postgresql.org/docs/release/12.22/

++++ postgresql13:

  - Upgrade to 13.18:
    * Restore functionality of ALTER {ROLE|DATABASE} SET role.
    * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
    * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
    * Fix crash when checking to see if an index's opclass options
    have changed.
    * https://www.postgresql.org/about/news/p-2965/
    * https://www.postgresql.org/docs/release/13.18/

++++ postgresql14:

  - Upgrade to 14.15:
    * Repair ABI break for extensions that work with struct
    ResultRelInfo.
    * Restore functionality of ALTER {ROLE|DATABASE} SET role
    * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
    * Avoid deleting still-needed WAL files during pg_rewind.
    * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
    * Fix crash when checking to see if an index's opclass options
    have changed.
    * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
    * https://www.postgresql.org/about/news/p-2965/
    * https://www.postgresql.org/docs/release/14.15/

++++ postgresql15:

  - Upgrade to 15.10
    * Repair ABI break for extensions that work with struct
    ResultRelInfo.
    * Restore functionality of ALTER {ROLE|DATABASE} SET role.
    * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
    * Avoid deleting still-needed WAL files during pg_rewind.
    * Fix race conditions associated with dropping shared statistics
    entries.
    * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
    * Fix crash when checking to see if an index's opclass options
    have changed.
    * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
    * https://www.postgresql.org/about/news/p-2965/
    * https://www.postgresql.org/docs/release/15.10/

++++ postgresql16:

  - Upgrade to 16.6:
    * Repair ABI break for extensions that work with struct
    ResultRelInfo.
    * Restore functionality of ALTER {ROLE|DATABASE} SET role.
    * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
    * Avoid deleting still-needed WAL files during pg_rewind.
    * Fix race conditions associated with dropping shared statistics
    entries.
    * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
    * Fix crash when checking to see if an index's opclass options
    have changed.
    * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
    * https://www.postgresql.org/about/news/p-2965/
    * https://www.postgresql.org/docs/release/16.6/

++++ postgresql17-mini:

  - Upgrade to 17.2:
    * Repair ABI break for extensions that work with struct
    ResultRelInfo.
    * Restore functionality of ALTER {ROLE|DATABASE} SET role.
    * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
    * Avoid deleting still-needed WAL files during pg_rewind.
    * Fix race conditions associated with dropping shared statistics
    entries.
    * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
    * Fix crash when checking to see if an index's opclass options
    have changed.
    * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
    * https://www.postgresql.org/about/news/p-2965/
    * https://www.postgresql.org/docs/release/17.2/

++++ python-blinker:

  - update to 1.9.0:
    * Drop support for Python 3.8. :pr:`175`
    * Remove previously deprecated __version__, receiver_connected,
    Signal.temporarily_connected_to and WeakNamespace. :pr:`172`
    * Skip weakref signal cleanup if the interpreter is shutting
    down. :issue:`173`

++++ python-rpm-macros:

  - Update to version 20241119.7609911:
    * Do not fix shebang on links to non-writeable files

++++ python-Django4:

  - Add upstream py313.patch to fix tests on Python 3.13

++++ python-SQLAlchemy-Utils:

  - skip one more test for python 313
    (https://github.com/kvesteri/sqlalchemy-utils/issues/764)

++++ python-acefile:

  - update to 0.6.13:
    * Rephrase setup failure notices for clarity.
    * Improve seekable conformance of internal file-like
    wrappers.
    * Minor maintainability and test improvements.

++++ python-alembic:

  - update to el_1_14_0:
    * **[usecase] [runtime]** Added a new hook to the
    `DefaultImpl` `DefaultImpl.version_table_impl()`.  This allows
    third party dialects to define the exact structure of the
    alembic_version table, to include use cases where the table
    requires special directives and/or additional columns so that
    it may function correctly on a particular backend.

++++ python-amqp:

  - update to 5.3.1:
    * Fixed readthedocs (#443)
    * Prepare for release: 5.3.1 (#444)
    * Hard-code requests version because of the bug in docker-py
    (#432)
    * fix AbstractTransport repr socket error (#361) (#431)
    * blacksmith.sh: Migrate workflows to Blacksmith (#436)
    * Added Python 3.13 to CI (#440)
    * Prepare for release: 5.3.0 (#441)

++++ python-astropy:

  - update to 6.1.6:
    * Fixed instantiating Angle from a pandas Series object.
    * Fixed calling np.nanvar and np.nanstd with Quantity out
    argument.

++++ python-autopep8:

  - update to 2.3.1:
    * skip e501 fixed method for f-string line without aggressive
    option
    * Fix argument parser errors are printed without a trailing
    newline
  - update to 2.3.0:
    * add handling for E204 whitespace after decorator
    * require to pycodestyle v2.12.0+
  - update to 2.2.0:
    * experimental option is deprecated
    * fix specific case of e271 and w504
    * skip e501 fixed method for f-string line(s)
  - update to 2.1.2:
    * Fix e501 experimental fstring case in Python3.12+
  - update to 2.1.1:
    * force reload pycodestyle module
  - update to 2.1.0:
    * migrate to pyproject.toml
    * run with pypy3.10
    * ISSUE_TEMPLATE: use "console" instead of non-existing "shell"
    syntax
    * add 3.12, drop 3.7
    * tox: add python3.12 to test environments
    * async def function formatting
    * pyproject: support py3.12 via new version of pycodestyle
    * add: unit test for e501 with async def
    * Update python versions
  - drop python312-skip-tests.patch (upstream)

++++ python-autoray:

  - update to 0.7.0:
    * prefer using `tensorflow.experimental.numpy` api over custom
    translations
    * add many more unit tests
    * move to `pyproject.toml` file
    * move to uv for CI setup
    * set python min version to 3.9

++++ python-av:

  - Disable tests because most of them have to be skipped due to
    network access or are broken on crippled FFmpeg
  - Update to 13.1.0:
    Features:
    * Allow passing Python objects around using `Frame.opaque` and
    `Packet.opaque`
    * Allow extradata to be set by encoders
    * Add getting ffmpeg version info string
    Fixes:
    * Remove the `deprecation` module in anticipation of PEP 702.
    * Add type stubs to previously unannotated API sections.
    * Improve type stubs for both `mypy` and `mypy --strict`.
    * Permit only setting `time_base` with a Fraction, as mypy is
    unable to respect different types in getters vs setters.
    * Declare `write_packet` function as const
  - Changes in 13.0.0:
    Major:
    * Drop FFmpeg 5, Support FFmpeg 7.
    * Drop Python 3.8, Support Python 3.13.
    * Disallow initializing an AudioLayout object with an int.
    * Disallow accessing gop_size, timebase as a decoder
    (Raised deprecation warning before).
    * Remove `ticks_per_frame` property because it was deprecated
    in FFmpeg.
    Features:
    * Add AttachmentStream class.
    * Add `best()` method to StreamContainer.
    * Add `set_audio_frame_size()` method to Graph object.
    * Add `nb_channels` property to AudioLayout object.
    * Add `from_bytes()` method to VideoFrame object.
    Fixes:
    * Fix VideoCC's repl breaking when `self._format` is None.
    * Fix getting `pix_fmt` property when VideoCC's `self._format`
    is None.
  - Changes in 12.3.0:
    Features:
    * Support libav's `av_log_set_level`
    * Add Graph.link_nodes
    * Add default codec properties
    * Add supported_codecs property to OutputContainer
    * Add text and dialogue property to AssSubtitle,
    remove TextSubtitle
    Fixes:
    * Fix segfault when calling subtitle_stream.decode()
    * flushing subtitle decoder requires a new uninitialized packet
    * Set default color range for VideoReformatter.format()
    * Resampler: format, layout accepts `str` `int` too
  - Changes in 12.2.0:
    Features:
    * Add a `make_writable` method to `Frame` instances
    gh#PyAV-Org/PyAV#1414.
    * Use `av_guess_sample_aspect_ratio` to report sample and
    display aspect ratios.
    Fixes:
    * Fix a crash when assigning an `AudioLayout` to
    `AudioCodecContext.layout`
    gh#PyAV-Org/PyAV#1434.
    * Remove a circular reference which caused `AudioSampler` to
    occupy memory until garbage collected
    gh#PyAV-Org/PyAV#1429.
    * Fix more type stubs, remove incorrect `__init__.pyi`.
  - Changes in 12.1.0:
    Features:
    * Allow disabling logs, disable logs by default.
    * Add bitstream filters
    * Expose CodecContext flush_buffers
    Fixes:
    * Fix type stubs, add missing type stubs.
    * Add S12M_TIMECODE
    * Subtitle.text now returns bytes
    * Allow packet.duration to be writable
    * Remove deprecated `VideoStream.frame_rate`
  - Changes in 12.0.0:
    Major:
    * Add type hints.
    * Deprecate VideoCodecContext.gop_size for decoders
    * Deprecate frame.index
    Features:
    * Allow using pathlib.Path for av.open
    * Add `max_b_frames` property to CodecContext
    * Add `encode_lazy` method to CodecContext
    * Add `color_range` to CodecContext/Frame
    * Set `time_base` for AudioResampler
    * Add support for ffmpeg's AVCodecContext::delay
    * Add `color_primaries`, `color_trc`, `colorspace` to VideoStream
    * Add `bits_per_coded_sample` to VideoCodecContext
    * AssSubtitle.ass now returns as bytes
    * Expose DISPLAYMATRIX side data
    Fixes:
    * Convert deprecated Cython extension class properties to
    decorator syntax
    * Check None packet when setting time_base after decode
    * Remove deprecated `Buffer.to_bytes`
    * Remove deprecated `Packet.decode_one`

++++ python-azure-cosmos:

  - New upstream release
    + Version 4.9.0
    + For detailed information about changes see the
    CHANGELOG.md file provided with this package

++++ python-azure-mgmt-cosmosdb:

  - New upstream release
    + Version 9.7.0
    + For detailed information about changes see the
    CHANGELOG.md file provided with this package

++++ python-bleach:

  - update to 6.2.0:
    * Dropped support for Python 3.8. (#737)
    * Add support for Python 3.13. (#736)
    * Remove six depdenncy. (#618)
    * Update known-good versions for tinycss2. (#732)
    * Fix additional < followed by characters and EOF issues.

++++ python-boltons:

  - Update to 24.1.0
    * Added max_depth parameter to fileutils.iter_find_files
    * Added enter parameter to iterutils.research to support traversing
    custom data types
    * Add optional print tracing for iterutils.remap for easier debugging
    * Fixed typeutils.Sentinel copy behavior to return self
    * Tentative Python 3.13 support

++++ python-cdflib:

  - update to 1.3.2:
    * Adding anonymous s3 access to cdflib

++++ python-chroma-hnswlib:

  - spec file cleanup

++++ python-contourpy:

  - update to 1.3.1:
    * Drop support for Python 3.9
    * Update to bokeh 3.6.0
    * Update minimum pybind11 to 2.13.2
    * Read meson-python version in recommended way
    * Use itertools.pairwise instead of zip where possible
    * Typing changes from ruff UP035 and UP038
    * Tidy up python 3.13 CI
    * Build Python 3.13t wheels on Windows
    * multi_lines and multi_filled: ContourGenerator.multi_lines
    and multi_filled (:pr:`338`, :pr:`340`, :pr:`342`, :pr:`343`)
    Renderer.multi_lines and multi_filled (:pr:`341`)
    convert_multi_lines and convert_multi_filled (:pr:`348`)
    dechunk_multi_lines and dechunk_multi_filled (:pr:`345`)
    * ContourGenerator.multi_lines and multi_filled
    * Renderer.multi_lines and multi_filled
    * convert_multi_lines and convert_multi_filled
    * dechunk_multi_lines and dechunk_multi_filled
    * Prevent use of np.nan as lower or upper level in filled
    * Support CPython 3.13 including free-threaded
    * Support PyPy 3.10
    * Support improved typing in NumPy 2.1.0
    * Simpler sphinx cross-references
    * Add more doc cross-references to explain returned data
    formats
    * Remove download numbers for conda packages
    * Documentation for multi_lines and multi_filled
    * Document possibility of duplicate contour points
    * Add pytest option to log image differences to CSV file
    * Label flaky test
    * MSVC linking and std::mutex compiler flag
    * Add minimal test script
    * Bump minimum supported NumPy to 1.23
    * Build and publish nightly wheels
    * Bump default python version in CI to 3.12

++++ python-crispy-bootstrap4:

  - update to 2024.10:
    * Fixed ignoring of `css_class` attribute in `accordion.html`,
    `accordion-group.html` and `tab.html` templates.
    * Bumped the minimum supported version of django-crispy-forms
    to 2.3.
    * Confirmed support for Django 5.1.

++++ python-croniter:

  - update to 5.0.1:
    * Community wanted: Reintroduce 7 as DayOfWeek in deviation
    from standard cron (#90). [kiorky]
    * Remove DayOfWeek alias 7 to DayOfWeek 0 to stick to standard
    cron (#90). [kiorky]
    * Fix DOW ranges calculations when lastday is a Sunday.
    [kiorky]

++++ python-dask:

  - update to 2024.11.2:
    * fix critical performance regression in 2024.11.1
  - skip dask on 313 as numba is not yet ready for it

++++ python-dask-expr:

  - update to 1.1.19:
    * rebuild for dask 2024.11.2

++++ python-deepdiff:

  - Skip test failing on Python 3.13

++++ python-distributed:

  - update to 2024.11.2:
    * Remove alias resolving to fix queuing

++++ python-django-cors-headers:

  - update to 4.6.0:
    * Drop Django 3.2 to 4.1 support.

++++ python-django-perf-rec:

  - update to 4.27.0:
    * Drop Django 3.2 to 4.1 support.
    * Drop Python 3.8 support.
    * Support Python 3.13.
    * Allow comments in ROLLBACK TO SAVEPOINT statements. Thanks to
    Corentin Smith in PR #537.

++++ python-envier:

  - update to 0.6.1:
    * fix: regression in include with namespace no overwrite
  - update to 0.6.0:
    * feat: add support for Python 3.13
    * refactor!: expose HelpInfo as a namedtuple
    * feat: add items iterator

++++ python-imageio:

  - update to 2.36.0:
    * Use bytes instead of to_bytes in pyav metadata call
    * Remove support for Python 3.8

++++ python-immutabledict:

  - update to 4.2.1:
    * Published with attestation
    * Update classifiers, Github Actions... for Python 3.13 (no
    code changes)

++++ python-inflect:

  - Do not (ever) use %python_modules on runtime requires: it pulls
    in all python flavors. Change to Requires: python-typeguard which
    will be rewritten by the python singlespec machinery.

++++ python-itsdangerous:

  - update to 2.2.0:
    * Drop support for Python 3.7. :pr:`372`
    * Use modern packaging metadata with pyproject.toml instead of
    setup.cfg. :pr:`326`
    * Use flit_core instead of setuptools as build backend.
    * Deprecate the __version__ attribute. Use feature detection,
    or importlib.metadata.version("itsdangerous"), instead.
    :issue:`371`
    * Serializer and the return type of dumps is generic for type
    checking. By default it is Serializer[str] and dumps returns
    a str. If a different serializer argument is given, it will
    try to infer the return type of its dumps method.
    :issue:`347`
    * The default hashlib.sha1 may not be available in FIPS builds.
    Don't access it at import time so the developer has time to
    change the default. :issue:`375`

++++ python-jsonpointer:

  - update to 3.0.0:
    * Add support for python 3.12
    * drop python 2.7 support
    * CI fixes

++++ python-lmdb:

  - add py313-support.patch to fix build with py313

++++ python-partd:

  - update to 1.4.2:
    * Configure filterwarnings=error for pytest
    * Fix pandas internals changes
    * Run doctests again

++++ python-primp:

  - update to 0.7.0:
    * Using the `pythonize` crate to handle data and json
    parameters, and return the responce as json
    * Bump rquest to v0.27, cargo update
  - update to 0.6.5:
    * Bump rquest to v0.26
    * Readme: impersonate parameter - add "chrome_130"
  - update to 0.6.4:
    * ca_cert_file: updated the code to match the changes in the
    upstream package
    * Bump html2text to v0.13

++++ python-python-lsp-server:

  - add unpin-autopep8.patch

++++ python-scipy:

  - relax pythran requirement

++++ python-slimit:

  - add py313-makesuite.patch to fix unittest.makeSuite removal

++++ python-traits:

  - add py313-ctraits.patch to fix build with python 313

++++ yt-dlp:

  - Update to release 2024.11.18
    * cloudflarestream: Avoid extraction via videodelivery.net
    * youtube: remove broken OAuth support

++++ python-zlib-ng:

  - build against modern python on sle15

++++ qucs-s:

  - Update to 24.4.1:
    What's Changed
    + Update Russian translation by @antohami in #1038
    + Fix hardcoded version in Cauer LC filter by @ra3xdh in #1039
    + Improve graph rendering performance by @wawuwo in #1042
    + refactor: replace non-empty QString constructors with
    QStringLiteral() by @Integral-Tech in #1043
    + Update Qt to v6.8.0 LTS by @dsm in #1048
    + Add MetaInfo by @NN708 in #1056
    + Fix #1001 by @ivandi69 in #1057
    + Fix build for contrib directory by @NN708 in #1058
    + Fix pulsed current source issues by @ra3xdh in #1059
    + Update NEWS, VERSION, and MetaInfo by @ra3xdh in #1061

++++ rpmlint:

  - Update to version 2.6.1+git20241119.2e09c30:
    * dbus-services: whitelist supergfxctl (bsc#1232776)

++++ rpmlint-strict:

  - Update to version 2.6.1+git20241119.2e09c30:
    * dbus-services: whitelist supergfxctl (bsc#1232776)

++++ rpmlint-test:

  - Update to version 2.6.1+git20241119.2e09c30:
    * dbus-services: whitelist supergfxctl (bsc#1232776)

++++ sane-airscan:

  - update to 0.99.30:
    * WSD: sca:ScannerDescription requested in sca:GetScannerElementsRequest
    * WSD: Ricoh Aficio MP 201: fixed detection of "ADF empty" state
    * HTTP: logged "end of input" event
    * test-decode: more informative usage when invoked without args
    * test-devcaps: stub implementation
    * test-devcaps: works for WSD
    * WSD: fixed ADF duplex on Epson Workforce WF-3520
    * test-devcaps: works for eSCL too
    * Device model name propagated from zeroconf to proto handlers, for quirks
    * WSD: fix for ADF scan on RICOH Aficio MP 201
    * WSD: more information requested in sca:GetScannerElementsRequest
    * Some devices don't behave if sca:ImagesToTransfer isn't set as expected.
    * README: fixed OKI supported table entries
    * OKI-MB471/OKI-MC332dn/OKI-MC362dn marked as not supporting eSCL
    * Dell E514dw added to the list
    * Kyocera TASKalfa 3051ci added to the list
    * doc: add Epson ET-2650 series
    * Add EPSON WF-2760 Series
    * WSD: Add content type selection
    * eSCL: Add scan intent selection
    * Fixed logging of supported/chosen scan intent
    * eSCL: fixed parsing of the supported scan intents in the device capabilities
    * ID_SCANINTENT better documented
    * Tweaked a textual description of the scan-intent option
    * SANE name for ID_SCANINTENT_DOCUMENT now "Document" (was "Text")
    * Added ID_SCANINTENT_UNSET value for the 'sane-intent'
    * Setting "scan-intent" now requires a precise match.
    * eSCL: delay between subsequent loads made Brother-specific
    * WSD: cosmetic
    * WSD: workaround for ADF Duplex on Brother MFC-9370CDW
    * The "sane-intent" option cannot be SANE_CAP_INACTIVE
  - fix obsoleting itself

++++ terragrunt:

  - Update to version 0.68.15:
    * Custom Log Formatting (#3537)
    * build(deps): bump
    go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
    (#3576)
    * build(deps): bump github.com/hashicorp/terraform-svchost
    (#3577)
    * build(deps): bump github.com/hashicorp/hcl/v2 from 2.22.0 to
    2.23.0 (#3575)
    * build(deps): bump google.golang.org/grpc from 1.67.1 to 1.68.0
    (#3574)
    * build(deps): bump github.com/hashicorp/go-plugin from 1.6.1 to
    1.6.2 (#3573)
  - Update to version 0.68.14:
    * feat: Adding Terminology docs (#3559)
    * feat: Integrate includes into units reading (#3563)
    * chore: Cleaning up OIDC Work (#3554)

++++ xtables-addons:

  - Update to release 3.27
    * Support for Linux 6.12
    * xt_DNETMAP: cure crash on netns shutdown

------------------------------------------------------------------
------------------  2024-11-18  -  Nov 18 2024  -------------------
------------------------------------------------------------------

++++ Komikku:

  - update to 1.63.0:
    * [Preferences] Servers settings: Added language indicator
    * [Reader] Fixed keyboard navigation bugs after changing reading mode
    * [Reader] Webtoon pager: Extended scrollable zone to all viewport
    * [Reader] Fixed unwanted display/hiding of cursor during keyboard navigation
    * [Servers] MangaReader: Added ES/ES_LA/PT/pt_BR languages support
    * [Servers] MangaReader (multi): Improved search by finally taking into
    account language
    * [Servers] Read Comic Online (EN): Update
    * [L10n] Updated Croatian and German translations

++++ WindowMaker:

  - Update to 0.96.0 (August 5th 2023)
    * Screen corners can be assigned an external command to be executed
    when the mouse pointer is entering those areas. In WPrefs, “Hot
    Corner Shortcut Preferences” can be used for configuration or by
    manually adding a “HotCorners” key and value to “YES” in the
    ~/GNUstep/Defaults/WindowMaker file. Hot Corners feature is disabled
    by default. Actions are specified by the “HotCornerActions” and are
    defined as a four entries list (“top left action”, “top right action”,
    “bottom left action”, “bottom right action”). A screen corner area is
    a cube shape defined by the “HotCornerEdge” which is a number of
    pixels from 2 (by default) to 10. To lower the risk of triggering
    that feature accidentally a “HotCornerDelay” key can be used which
    is the time before the action is triggered while the pointer is in
    one of the screen corner. Default value is 250 ms.
    * In WPrefs “Keyboard Shortcut Preferences” tab, three new actions
    can be configured: “Capture a portion of the screen”, “Capture a
    window”, “Capture the entire screen”. The file is saved in
    ~/GNUstep/Library/WindowMaker/Screenshots directory under a filename
    format “screenshot_%Y-%m-%d_at_%H:%M:%S” followed by the extension.
    Which can be png or jpg based on WRaster dependencies.
    * libXRes is now an optional dependency. XRes the resource extension
    for the X protocol is used to find the underlying processes
    (and PIDs) responsible for displaying the windows.
    * Support for _NET_WM_FULLSCREEN_MONITORS hint. That hint allows
    applications that support it to be set as fullscreen on multiple
    heads. It depends on Xinerama extension support.
    * To keep the dock on the primary head in a multi-head setup, set the
    option “KeepDockOnPrimaryHead” in ~/GNUstep/Defaults/WindowMaker to
    “YES” or click “Keep dock on primary head” under the WPrefs “Expert
    User Preferences” tab.
  - rebase/rework patches
    * WindowMaker-config.patch
    * WindowMaker-menu.patch
    * fix_wmgenmenu_paths.patch
    * wm-giflib.patch

++++ appimaged:

  - Add gcc14,patch:Fix build using stricter gcc 14.

++++ buildah:

  - Update to version 1.38.0:
    * Bump to Buildah v1.38.0
    * Bump to c/common v0.61.0, c/image v5.33.0, c/storage v1.56.0
    * fix(deps): update module golang.org/x/crypto to v0.29.0
    * fix(deps): update module github.com/moby/buildkit to v0.17.1
    * fix(deps): update module github.com/containers/storage to v1.56.0
    * tests: skip two ulimit tests
    * CI VMs: bump f40 -> f41
    * tests/tools: rebuild tools when we change versions
    * tests/tools: update golangci-lint to v1.61.0
    * fix(deps): update module github.com/moby/buildkit to v0.17.0
    * Handle RUN --mount with relative targets and no configured workdir
    * tests: bud: make parallel-safe
    * fix(deps): update module github.com/opencontainers/runc to v1.2.1
    * fix(deps): update golang.org/x/exp digest to f66d83c
    * fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
    * tests: blobcache: use unique image name
    * tests: sbom: never write to cwd
    * tests: mkcw: bug fixes, refactor
    * deps: bump runc to v1.2.0
    * deps: switch to moby/sys/userns
    * tests/test_runner.sh: remove some redundancies
    * Integration tests: run git daemon on a random-but-bind()able port
    * fix(deps): update module github.com/opencontainers/selinux to v1.11.1
    * go.mod: remove unnecessary replace
    * Document more buildah build --secret options
    * Add support for COPY --exclude and ADD --exclude options
    * fix(deps): update github.com/containers/luksy digest to e2530d6
    * chore(deps): update dependency containers/automation_images to v20241010
    * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
    * Properly validate cache IDs and sources
    * [skip-ci] Packit: constrain koji job to fedora package to avoid dupes
    * Audit and tidy OWNERS
    * fix(deps): update module golang.org/x/crypto to v0.28.0
    * tests: add quotes to names
    * vendor: update c/common to latest
    * CVE-2024-9407: validate "bind-propagation" flag settings
    * vendor: switch to moby/sys/capability
    * Don't set ambient capabilities
    * Document that zstd:chunked is downgraded to zstd when encrypting
    * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
    * buildah-manifest-create.1: Fix manpage section
    * chore(deps): update dependency ubuntu to v24
    * Make `buildah manifest push --all` true by default
    * chroot: add newlines at the end of printed error messages
    * Do not error on trying to write IMA xattr as rootless
    * fix: remove duplicate conditions
    * fix(deps): update module github.com/moby/buildkit to v0.16.0
    * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
    * Document how entrypoint is configured in buildah config
    * In a container, try to register binfmt_misc
    * imagebuildah.StageExecutor: clean up volumes/volumeCache
    * build: fall back to parsing a TARGETPLATFORM build-arg
    * `manifest add --artifact`: handle multiple values
    * Packit: split out ELN jobs and reuse fedora downstream targets
    * Packit: Enable sidetags for bodhi updates
    * fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
    * tests/bud.bats: add git source
    * add: add support for git source
    * Add support for the new c/common pasta options
    * vendor latest c/common
    * fix(deps): update module golang.org/x/term to v0.24.0
    * fix(deps): update module github.com/fsouza/go-dockerclient to v1.12.0
    * packit: update fedora and epel targets
    * cirrus: disable f39 testing
    * cirrus: fix fedora names
    * update to go 1.22
    * Vendor c/common:9d025e4cb348
    * copier: handle globbing with "**" path components
    * fix(deps): update golang.org/x/exp digest to 9b4947d
    * fix(deps): update github.com/containers/luksy digest to 2e7307c
    * imagebuildah: make scratch config handling toggleable
    * fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
    * Add a validation script for Makefile $(SOURCES)
    * fix(deps): update module github.com/openshift/imagebuilder to v1.2.15
    * New VMs
    * Update some godocs, use 0o to prefix an octal in a comment
    * buildah-build.1.md: expand the --layer-label description
    * fix(deps): update module github.com/containers/common to v0.60.2
    * run: fix a nil pointer dereference on FreeBSD
    * CI: enable the whitespace linter
    * Fix some govet linter warnings
    * Commit(): retry committing to local storage on storage.LayerUnknown
    * CI: enable the gofumpt linter
    * conformance: move weirdly-named files out of the repository
    * fix(deps): update module github.com/docker/docker to v27.1.2+incompatible
    * fix(deps): update module github.com/containers/common to v0.60.1
    * *: use gofmt -s, add gofmt linter
    * *: fix build tags
    * fix(deps): update module github.com/containers/image/v5 to v5.32.1
    * Add(): re-escape any globbed items that included escapes
    * conformance tests: use mirror.gcr.io for most images
    * unit tests: use test-specific policy.json and registries.conf
    * fix(deps): update module golang.org/x/sys to v0.24.0
    * Update to spun-out "github.com/containerd/platforms"
    * Bump github.com/containerd/containerd
    * test/tools/Makefile: duplicate the vendor-in-container target
    * linters: unchecked error
    * linters: don't end loop iterations with "else" when "then" would
    * linters: unused arguments shouldn't have names
    * linters: rename checkIdsGreaterThan5() to checkIDsGreaterThan5()
    * linters: don't name variables "cap"
    * `make lint`: use --timeout instead of --deadline
    * Drop the e2e test suite
    * fix(deps): update module golang.org/x/crypto to v0.26.0
    * fix(deps): update module github.com/onsi/gomega to v1.34.1
    * `make vendor-in-container`: use the caller's Go cache if it exists
    * fix(deps): fix test/tools ginkgo typo
    * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
    * Update to keep up with API changes in storage
    * fix(deps): update github.com/containers/luksy digest to 1f482a9
    * install: On Debian/Ubuntu, add installation of libbtrfs-dev
    * fix(deps): update module golang.org/x/sys to v0.23.0
    * fix(deps): update golang.org/x/exp digest to 8a7402a
    * fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.2
    * Use Epoch: 2 and respect the epoch in dependencies.
    * Bump to Buildah v1.38.0-dev
    * AddAndCopyOptions: add CertPath, InsecureSkipTLSVerify, Retry fields
    * Add PrependedLinkedLayers/AppendedLinkedLayers to CommitOptions
    * integration tests: teach starthttpd() about TLS and pid files

++++ calc:

  - Workaorund %attr(644…) setting this attribute also on the doc
    directory if this is the first statement to copy docs over. The
    intention was clearly to set the files non-executable. Simply
    letting RPM copy the correct doc files first, using default
    attributes, results in the doc-dir having proper access modes.

++++ nodejs22:

  - Update to 22.11.0:
    * This release marks the transition of Node.js 22.x into
    Long Term Support (LTS) with the codename 'Jod'.
    Other than updating metadata, such as the process.release object,
    to reflect that the release is LTS, no further changes from
    Node.js 22.10.0 are included.
  - icu76.1.patch: fix linking to ICU 76.1 (bsc#1232061)

++++ corosync:

  - Update to version 3.1.9:
    * rust: Update to latest standards
    * totemsrp: Fix orf_token stats
    * totem: Use uint64_t type and QB_TIME_NS_IN_MSEC
    * totem: Use proper timestamp type for token warning
    * stats: Store token rx and tx timestamps as 64-bit
    * rust: fix clippy warning in rust 1.81
    * coroparse: Free kv_item key and value on failure
    * icmap: Free memory if qb_map_notify_add fails
    * cfg: Free new_config interfaces on failure
    * main: support lock pid file arg
    * man: fix a typo in cpg_model_initialize
    * man: Improve quorum provider formatting
    * rust: tests return errors and don't hang
    * rust: Improve Rust bindings
    * Move corosync-notifyd policy file into $(datadir)/dbus-1/system.d
    * man: corosync.conf: Multi improvements
    * totem: Fix reference links
    * Report crypto errors back to cfg reload
    * Fix up the library .versions files
    * configure: Fix building of rust for release
    * License: Fix year (mainly to fix rust building)

++++ linux-glibc-devel:

  - Update to kernel headers 6.12

++++ dictd:

  - Update to 1.13.3:
  - dictd: fix buffer overflow in first/last search strategies.
  - Remove upstreamed index-buf-ovrflw.patch.

++++ evolution-data-server:

  - Update to version 3.54.1+4:
    * libedataserverui: Avoid initializing the icon_theme when
    building introspection data
    * Updated translations.
  - Workaround build failure using ICU 76.1: fix up CMakeLists.txt to
    link icu-uc instead of icu-i18n
    (glgo#GNOME/evolution-data-server#574).

++++ exim:

  - Own /srv/www which is no longer owned by the filesystem package.

++++ gede:

  - New upstream release 2.20.1
    * Added support for entering gdb commands manually
  - Do not force a ctags vendor on users
  - Run the only unit test in %check

++++ googletest:

  - change logic from suse_version > 1500 to suse_version < 1600

++++ gpgme:

  - Fix file list on Leap 15

++++ gpxsee:

  - Update to version 13.29
    * Fixed broken Mapsforge theme in Qt5 builds.
  - Update to version 13.28
    * New Mapsforge (OpenAndroMaps) render theme.

++++ gtkam:

  - gtkam 1.1 release
    * various bugfixes, buildfixes with gcc14
    * translation updates: added hebrew and romanian, updated icelandic and spanish
  - gtkam-fix-build.patch: upstream

++++ hyprland:

  - Update to version 0.45.1:
    + A minor update with a few fixes backported from main.
    + Fixes:
  - defaultConfig: fixup smart gaps rules
  - hyprpm: fix format crash
  - workspace: fix missing name via focusworkspaceoncurrentmonitor
    (#8484)
  - constraints: don't warp pointer position on release (#8491)
  - core: guard pmonitor in focuswindow
  - protocols: mark primarySelection as not privileged
  - renderer: don't render unmapped popups
  - renderer: scaled surfaces could have zero area (#8423)
  - shell: don't use fgrep, prefer grep -F
  - windows/xdg: minor cleanup of min/max size calculations
  - workspacerules: Do not check 'on-created-empty' if using a
    workspace windowrule (#8486)
  - xcursors: store themes in a std:set to order it (#8474)

++++ icingaweb2:

  - Fix usage of %requires_eq: invalid syntax previosly resulted in
    ignored lines and now properly returns an error.

++++ jcache:

  - Generate OSGi manifest

++++ mozjs128:

  - Drop autoconf213 BuildRequires: the source embeds autoconf.sh
    directly.
  - Fix build against icu 76.1: link the correct libraries (icu-uc
    instead of icu-i18n).

++++ gpgmeqt:

  - Fix file list on Leap 15

++++ gpgmeqt6:

  - Fix file list on Leap 15

++++ librepo:

  - Update to 1.19.0:
    * Fix input termination for pgpParsePkts [#325]
    * Upper case xattr incompatible to Amazon S3 [#326, #327]
    * Introduce entropy for fastestmirror option [#324]

++++ lxsession:

  - Update to version 0.5.5+56:
    * Remove trailing whitespace in man pages
    * Fix spelling and update man page
    * Increase the required versions of GLib and GTK+
    * Update autogen.sh
    * Remove the obsolete debian directory
    * Remove the m4 directory
    * Remove the comment about the order of checked screen lockers
    * Fix description of the --enable-debug option
    * Reduce the vala compiler version check to major and minor version
    * Fix: support gcc14 -Werror=incompatible-pointer-types
  - Switch to gitcheckout via source service.
  - Pass NOCONFIGURE=1 ./autogen.sh, bootstrap build.

++++ mingw32-filesystem:

  - Update version to 20241118
  - Speed up the collection of source files for the creation of debug
    packages by using multiple concurrent processes (boo1202431)

++++ mingw64-filesystem:

  - Update version to 20241118
  - Speed up the collection of source files for the creation of debug
    packages by using multiple concurrent processes (boo1202431)

++++ oomstaller:

  - inital version

++++ patterns-media:

  - Add required packages for FDE+TPM

++++ plantuml:

  - Update to version 1.24.8
    * Allow MinimumWidth on all nested elements.
    * fix: improve edge cases for JSON diagram (manage null and
    empty Array/Object).
    * use latex to get string bounder.
    * tikz: make all fonts with the same baseline.
    * tikz: avoid latex manager crash for special characters.
    * tikz: use the same protectText when calc dimension and render.
    * tikz: optimize latex render.
    * optimize tikz render.
    * upd: uniformisation of dirpath.
    * feat: reintroduction of filedate and filenamenoextension
    builtin function.
    * feat: Allow Unicode ASCII Art for class, component.
    * fix: error in namespace management.
    * Style: Improve map and json style in order to manage header
    style.
    * Gantt with monthly scale doesn't show named regions.
    * fixing proprietary licenses in PlantUML software package of
    Replicant project.
    * Allow stereotype for arrow, on sequence diagram.
    * Allow LineStyle for arrow, on sequence diagram.
    * feat: Allow stereotype for Clock on Timing diagram.
    * Allow stereotype on Timing diagram.
    * Style: Allow stereotype on note for all diagram type.
    * State machine invalid generation for SVG.
    * Update C4-PlantUML to v2.11.0.
    * Style: Allow all style for Cardinality, Generic, Qualified
    associations on Class diagram.
    * nwdiag: Allow line border for group.
    * Style: Allow all style for regex diagram.
    * Style: Allow theme and style for files list diagram.
    * feat: allow all JSON Values on JSON.
    * Compact clocks in timing diagrams not rendered correctly.
  - Update to version 1.24.7
    * [Class][Deployment] Some issues about arrow between nested
    elements.
    * Crash happened on plantuml 1.2024.7beta5, related to "headless"
    * hide does not work inside package.
    * After v1.2023.10, Remove command does not remove nested shapes.
    * When adding specific note at specific position, activity
    diagram not work.
    * Custom Theme loading.
    * [Creole] Fix color.
    * repeat starting point is in wrong swimlane.
    * Generate a svg:title tag when generating Svg.
    * fix: make native release as snapshot release.
    * feat: add builtin function %boolval.
    * feat: add builtin function %mod (modulo operator).
    * Added background color to arrows and draw background for circles.
    * remove duplicate items in help message.
    * [Sprite][SVG] Manage more SVG functionalities for text.
    * pdf support broken with other gradle build file changes.
    * Allow style for backward element on repeat loop, on Activity
    diagram.
    * Allow >> and > on the same arrow.
    * Pause a task up to end of another task.
    * Rendering issue when nesting different elements.
    * Allow multiple style stereotypes for Mindmap, WBS.
    * Gantt: Weekscale with weeknumbers.
    * The utilization of resources does not color red correctly when
    week partly closed.
    * Remove and restore not working as expected.
  - Update to version 1.24.6
    * Improve Eclipse Layout Kernel support.
    * groups (e.g. alt) with else cannot be rendered in parallel.
    * alt/else block shown in parallel using teoz leads to wrong
    formatting.
    * Teoz: Shape of note changes only when "over" is used.
    * multiple activation of lifelines does not render properly in
    sequence diagrams.
    * 2024.5 breaks https includeurl.
    * Incorrect object reference in Gantt Chart.
    * Activity: Allow to style SDL on Repeat While loop.
    * inconsistent computation of group/alt/opt box size given left
    or right arrows.
    * !foreach $key from %get_json_keys() is not found by
    %json_key_exists(), but works for element access.
    * Allow scale max on JSON and YAML diagram.
    * [ELK][Smetana] Allow Fontcolor style on arrows.
    * [Style][WBS] Change (arrow) line color of a specific branch.
    * Elk: Allow full style on arrows (except fontcolor).
    * feat: math: add newline command for formatting.
    * feat: add support for [one-line] title to JSON diagram.
    * Performance issue with JRE21.
    * Fix parallel group active levels.
    * Extend @@@format to support more formats.
    * [teoz] [bug] [sequence] Group becomes too wide when containing
    activations.
    * [Theme] sunlust theme does not work for JSON or YAML
    diagram/data.
  - Update to version 1.24.5
    * BUG: Activation is offset (Sequence diagram, Teoz).
    * teoz: activation breaks parallell lines.
    * sequence lifeline height badly depends on message height.
    * Sequence diagram: Wrong start/end of activation boxes in
    activation boxes while using teoz.
    * The display of text, line, and arrow on the left side of the
    Lifeline is incorrect.
    * the location of the Comment is INCORRECT.
    * teoz arrow alignment.
    * activate/deactivate issues.
    * Inline multicast activate only activates the first target.
    * Activation is offset (Using Teoz).
    * Small rendering difference between default and Teoz.
    * Side effect of variable management when using %json_add.
    * timing diagram initial concise state.
    * Java OutOfMemoryError with some Sequence diagrams.
    * Smetana is not supporting colors in UML.
    * Timing: Set background color of concise.
    * (timing diagram) message labels ignore default style.
    * "off by one errors" in text output.
    * hyperlinkUnderline causes NumberFormatException.
    * Wrong component is highlighted on hover for
    svginteractive.
    * [Theme] sunlust theme does not work for JSON or YAML
    diagram/data.
    * Stereotype won't be hidden with "hide stereotype".
    * [Chen ERD] Allow horizontal layout or left to right direction.
    * add %splitstrregex builtin function.
    * ASCIIMathTeXImg.java with a lot of corrections/enhancements.
    * add new JSON builtin functions (%str2json, %json_add and
    %json_remove).
    * add new JSON builtin function (%json_set).
    * add new JSON builtin function (%json_merge).
    * Fix on osa2 and Classy.

++++ podman:

  - Update to version 5.3.0:
    * Bump to v5.3.0
    * Update release notes for v5.3.0
    * [v5.3] Bump to Buildah v1.38.0
    * [v5.3] Skip FIPS mode secrets run test
    * [v5.3] Buildah treadmill tweaks
    * test/buildah-bud: build new inet helper
    * test/system: add regression test for TZDIR local issue
    * vendor latest c/{buildah,common,image,storage}
    * Reapply "CI: test nftables driver on fedora"
    * Revert "cirrus: test only on f40/rawhide"
    * test f41 VMs
    * volume ls: fix race that caused it to fail
    * AdditionalSupport for SubPath volume mounts
    * Bump to v5.3.0-dev
    * Bump to v5.3.0-rc3
    * Update release notes for v5.3-rc3
    * podman: update roadmap
    * libpod: journald do not lock thread
    * Add key to control if a container can get started by its pod
    * Honor users requests in quadlet files
    * CI: systests: workaround for parallel podman-stop flake
    * Fix inconsistent line ending in win-installer project
    * fix(deps): update module github.com/opencontainers/runc to v1.2.1
    * Quadlet - support image file based mount in container file
    * API: container logs flush status code
    * rework event code to improve API errors
    * events: remove memory eventer
    * libpod: log file use Wait() over event API
    * Makefile: vendor target should always remove toolchain
    * cirrus: check consitent vendoring in test/tools
    * test/tools/go.mod: remove toolchain
    * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.10
    * fix(deps): update module github.com/onsi/gomega to v1.35.1
    * doc: explain --interactive in more detail
    * fix(deps): update golang.org/x/exp digest to f66d83c
    * fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
    * fix(deps): update github.com/linuxkit/virtsock digest to cb6a20c
    * Bump to v5.3.0-dev
    * Bump to v5.3.0-rc2
    * Update release notes for v5.3.0-rc2
    * add default polling interval to Container.Wait
    * Instrument cleanup tracer to log weird volume removal flake
    * make podman-clean-transient.service work as user
    * Add default remote socket path if empty
    * Use current user if no user specified
    * Add support for ssh_config for connection
    * libpod: use pasta Setup() over Setup2()
    * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.21.0
    * fix(deps): update module github.com/onsi/gomega to v1.35.0
    * logformatter: add cleanup tracer log link
    * docs: fix broken example
    * docs: add missing swagger links for the stable branches
    * readthedocs: build extra formats
    * pkg/machine/e2e: remove debug
    * fix(docs): Integrate pasta in rootless tutorial
    * chore(deps): update dependency setuptools to ~=75.3.0
    * libpod: report cgroups deleted during Stat() call
    * chore: fix some function names in comment
    * CI: parallelize 450-interactive system tests
    * CI: parallelize 520-checkpoint tests
    * CI: make 070-build.bats use safe image names
    * test/system: add podman network reload test to distro gating
    * System tests: clean up unit file leaks
    * healthcheck: do not leak service on failed stop
    * healthcheck: do not leak statup service
    * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.0
    * Add Startup HealthCheck configuration to the podman inspect
    * buildah version display: use progress()
    * new showrun() for displaying and running shell commands
    * Buildah treadmill: redo the .cirrus.yml tweaks
    * Buildah treadmill: more allow-empty options
    * Buildah treadmill: improve test-failure instructions
    * Buildah treadmill: improve wording in test-fail instructions
    * doc: Remove whitespace before comma
    * fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.3.0
    * ps: fix display of exposed ports
    * ps: do not loop over port protocol
    * readme: Add reference to pasta in the readme
    * test/system: Fix spurious "duplicate tests" failures in pasta tests
    * Improve "podman load - from URL"
    * Try to repair c/storage after removing an additional image store
    * Use the config digest to compare images loaded/pulled using different methods
    * Simplify the additional store test
    * Fix the store choice in "podman pull image with additional store"
    * Bump to v5.3.0-dev
    * Bump to v5.3.0-rc1
    * Set quota on volume root directory, not _data
    * fix(deps): update module github.com/opencontainers/runc to v1.2.0
    * test: set soft ulimit
    * Vagrantfile: Delete
    * Enable pod restore with crun
    * vendor: update c/{buildah,common,image,storage}
    * Fix 330-corrupt-images.bats in composefs test runs
    * quadlet: add default network dependencies to all units
    * quadlet: ensure user units wait for the network
    * add new podman-user-wait-network-online.service
    * contrib/systemd: switch user symlink for file symlinks
    * Makefile: remove some duplication from install.systemd
    * contrib/systemd: move podman-auto-update units
    * quadlet: do not reject RemapUsers=keep-id as root
    * test/e2e: test quadlet with and without --user
    * CI: e2e: fix checkpoint flake
    * APIv2 test fix: image history
    * pasta udp tests: new bytecheck helper
    * Document packaging process
    * [skip-ci] RPM: remove dup Provides
    * Update dependency setuptools to ~=75.2.0
    * System tests: safer pause-image creation
    * Update module github.com/opencontainers/selinux to v1.11.1
    * Added escaping to invoked powershell command for hyperv stubber.
    * use slices.Clone instead of assignment
    * libpod API: only return exit code without conditions
    * Housekeeping: remove duplicates from success_task
    * Thorough overhaul of CONTRIBUTING doc.
    * test/e2e: fix default signal exit code test
    * Test new VM build
    * CI: fix changing-rootFsSize flake
    * scp: add option types
    * Unlock mutex before returning from function
    * Note in the README that we are moving to timed releases
    * cirrus: let tar extract figure out the compression
    * Make error messages more descriptive
    * Mention containers.conf settings for podman machine commands
    * [skip-ci] Packit: re-enable CentOS Stream 10/Fedora ELN teasks"
    * cmd: use logrus to print error
    * podman: do not set rlimits to the default value
    * spec: always specify default rlimits
    * vendor: update containers/common
    * Note in the README that we are moving to timed releases
    * Revert "CI: test nftables driver on fedora"
    * cirrus: use zstd over bzip2 for repo archive
    * cirrus: use shared repo_prep/repo_artifacts scripts
    * cirrus: speed up postbuild
    * cirrus: change alt arch task to only compile binaries
    * cirrus: run make with parallel jobs where useful
    * Makefile: allow man-page-check to be run in parallel
    * cirrus: use fastvm for builds
    * test/e2e: skip some Containerized checkpoint tests
    * test: update timezone checks
    * cirrus: update CI images
    * test/e2e: try debug potential pasta issue
    * CI: quadlet system tests: use airgapped testimage
    * Allow removing implicit quadlet systemd dependencies
    * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
    * libpod API: make wait endpoint better against rm races
    * podman-remote run: improve how we get the exit code
    * [skip-ci] Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
    * 055-rm test: clean up a test, and document
    * CI: remove skips for libkrun
    * Bump bundled krunkit to 0.1.3
    * fix(deps): update module google.golang.org/protobuf to v1.35.0
    * fix(deps): update module golang.org/x/net to v0.30.0
    * server: fix url parsing in info
    * fix(deps): update module golang.org/x/tools to v0.26.0
    * Makefile: fix ginkgo FOCUS option
    * fix(deps): update module golang.org/x/crypto to v0.28.0
    * podman-systemd.unit.5: adjust example options
    * docs: prefer --network to --net
    * fix(deps): update module golang.org/x/term to v0.25.0
    * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.24
    * fix(deps): update module golang.org/x/sys to v0.26.0
    * OWNERS file audit and update
    * Exposed ports are only included when not --net=host
    * libpod: hasCurrentUserMapped checks for gid too
    * [CI:DOCS] Document TESTFLAGS in test README file
    * Validate the bind-propagation option to `--mount`
    * Fix typo in secret inspect examples
    * Mention `no_hosts` and `base_hosts_file` configs in CLI option docs
    * Fixes for vendoring Buildah
    * vendor: update buildah to latest
    * Makefile - silence skipped tests when focusing on a file
    * vendor: update to latest c/common
    * Quadlet - prefer "param val" over "param=val" to allow env expansion
    * System tests: sdnotify: wait for socket file creation
    * Switch to moby/sys/capability
    * platformInspectContainerHostConfig: rm dead code
    * CI: require and test CI_DESIRED_NETWORK on RHEL
    * Add ExposedPorts to Inspect's ContainerConfig
    * fix(deps): update golang.org/x/exp digest to 701f63a
    * quadlet: allow variables in PublishPort
    * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.9
    * fix(deps): update github.com/godbus/dbus/v5 digest to a817f3c
    * Document that zstd:chunked is downgraded to zstd when encrypting
    * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
    * chore(deps): update dependency ubuntu to v24
    * rpm: do not load iptables modules on f41+
    * adding docs for network-cmd-path
    * Include exposed ports in inspect output when net=host
    * feat(libpod): support kube play tar content-type (#24015)
    * podman mount: some better error wrapping
    * podman mount: ignore ErrLayerUnknown
    * Quadlet - make sure the order of the UnitsDir is deterministic
    * packit: disable Centos Stream/fedora ELN teasks
    * libpod: remove shutdown.Unregister()
    * libpod: rework shutdown handler flow
    * libpod: ensure we are not killed during netns creation
    * Update module github.com/moby/sys/capability to v0.3.0
    * Update documentation of `--no-hosts`, `--hostname`, and `--name` CLI options
    * Update documentation of `--add-host` CLI option
    * System tests: set a default XDG_RUNTIME_DIR
    * Modify machine "Remove machine" test
    * CORS system test: clean up
    * Add --health-max-log-count, --health-max-log-size, --health-log-destination flags
    * troubleshooting: adjust home path in tip 44
    * test/system: For pasta port forwarding tests don't bind socat server
    * Update connection on removal
    * Simplify `RemoveConnections`
    * Move `DefaultMachineName` to `pkg/machine/define`
    * vendor: update containers/image
    * vendor: update containers/storage
    * CI: skip the flaking quadlet test
    * CI: make systemd tests parallel-safe (*)
    * CI: run and collect cleanup tracer logs
    * add epbf program to trace podman cleanup errors
    * CI: parallelize logs test as much as possible
    * CI: format test: use local registry if available
    * CI: make 700-play parallel-safe
    * docs: Fix missing negation
    * bin/docker support warning message suppression from user config dir
    * Update module github.com/docker/docker to v27.3.1+incompatible
    * Quadlet - add full support for Symlinks
    * libpod: setupNetNS() correctly mount netns
    * vendor latest c/common
    * docs: remove usage of deprecated `--storage`
    * Update module github.com/docker/docker to v27.3.0+incompatible
    * CI: Quadlet rootfs test: use container image as rootfs
    * CI: system test registry: use --net=host
    * CI: rm system test: bump grace period
    * CI: system tests: minor documentation on parallel
    * fix typo in error message Fixes: containers/podman#24001
    * CI: system tests: always create pause image
    * CI: quadlet system test: be more forgiving
    * vendor latest c/common
    * CI: make 200-pod parallel-safe
    * allow exposed sctp ports
    * test/e2e: add netns leak check
    * test/system: netns leak check for rootless as well
    * test/system: Improve TODO comments on IPv6 pasta custom DNS forward test
    * test/system: Clarify "Local forwarder" pasta tests
    * test/system: Simplify testing for nameserver connectivity
    * test/system: Consolidate "External resolver" pasta tests
    * test/system: Move test for default forwarder into its own case
    * CI: make 090-events parallel-safe
    * Misc minor test fixes
    * Add network namespace leak check
    * Add workaround for buildah parallel bug
    * registry: lock start attempts
    * Update system test template and README
    * bats log: differentiate parallel tests from sequential
    * ci: bump system tests to fastvm
    * clean_setup: create pause image
    * CI: make 012-manifest parallel-safe
    * podman-manifest-remove: update docs and help output
    * test/system: remove wait workaround
    * wait: fix handling of multiple conditions with exited
    * Match output of Compat Top API to Docker
    * system test parallelization: enable two-pass approach
    * New VMs: test crun 1.17
    * libpod: hides env secrets from container inspect
    * CI: e2e: workaround for events out-of-sequence flake
    * update golangci-lint to 1.61.0
    * libpod: convert owner IDs only with :idmap
    * Podman CLI --add-host with multiple host for a single IP
    * Quadlet - Split getUnitDirs to small functions
    * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.5
    * chore(deps): update dependency setuptools to ~=75.1.0
    * Fxi typo in cache-ttl.md
    * Get WSL disk as an OCI artifact
    * CI: make 260-sdnotify parallel-safe
    * quadlet: do not log ENOENT errors
    * pkg/specgen: allow pasta when running inside userns
    * troubleshooting: add tip about the user containers
    * chore(deps): update dependency setuptools to v75
    * Convert windows paths in volume arg of the build command
    * Improve error when starting multiple machines
    * fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
    * Minor typo noticed when reading podman man page
    * Remove `RemoveFilesAndConnections`
    * Add `GetAllMachinesAndRootfulness`
    * rewrite typo osascript
    * typo
    * fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
    * Add radio buttons to select WSL or Hyper-V in windows setup.exe
    * [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
    * [skip-ci] Packit: Enable sidetags for bodhi updates
    * vendor: update c/common
    * CI: make 710-kube parallel-safe
    * CI: mark 320-system-df *NOT* parallel safe
    * Add kube play support for image volume source
    * refactor: add sshClient function
    * fix(deps): update module golang.org/x/tools to v0.25.0
    * CI: make 505-pasta parallel safe
    * CI: make 020-tag parallel-safe
    * CI: make 410-selinux parallel-safe
    * Bump VMs. ShellCheck is now built-in
    * troubleshooting: add tip about auto, keep-id, nomap
    * libpod: make use of new pasta option from c/common
    * vendor latest c/common
    * podman images: sort repository with tags
    * Remove containers/common/pkg/config from pkg/util
    * fix(deps): update module golang.org/x/net to v0.29.0
    * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.23
    * fix(deps): update module golang.org/x/crypto to v0.27.0
    * Fix CI
    * Detect and fix typos using codespell
    * Fix typo: replace buildin with built-in
    * Add codespell config, pre-commit definition, and move options from Makefile
    * prune: support clearing build cache using CleanCacheMount
    * test/e2e: fix network prune flake
    * Add support for Job to kube generate & play
    * Add podman-rootless.7 man page
    * Add DNS, DNSOption and DNSSearch to quadlet pod
    * podman.1.md: improve policy.json section
    * e2e: flake fix: SIGPIPE in hook test
    * libpod: fix rootless cgroup path with --cgroup-parent
    * vendor: update c/storage
    * CI: make 055-rm parallel-safe
    * CI: make 130-kill parallel-safe
    * CI: make 125-import parallel-safe
    * CI: make 110-history parallel-safe
    * CI: system tests: parallelize low-hanging fruit
    * Add disclaimer to `podman machine info` manpage.
    * man pages: refactor two more options
    * update github.com/opencontainers/runc to v1.2.0-rc.3
    * update go.etcd.io/bbolt to v1.3.11
    * update github.com/onsi/{ginkgo,gomega}
    * Update module github.com/shirou/gopsutil to v4
    * packit: update fedora and epel targets
    * bump go to 1.22
    * cirrus: test only on f40/rawhide
    * cirrus: remove CI_DESIRED_NETWORK reference
    * cirrus: prebuild use f40 for extra tests
    * chore(deps): update dependency setuptools to ~=74.1.0
    * libpod: fix HostConfig.Devices output from 'podman inspect' on FreeBSD
    * fix(deps): update golang.org/x/exp digest to 9b4947d
    * Implement publishing API UNIX socket on Windows platforms
    * Vendor c/common:8483ef6022b4
    * quadlet: support container network reusing
    * docs: update read the docs changes
    * CI: parallel-safe network system test
    * Quadlet - Support multiple image tags in .build files
    * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.3
    * cirrus: remove _bail_if_test_can_be_skipped
    * cirrus: move renovate check into validate
    * cirrus: remove 3rd party connectivity check
    * cirrus: remove cross jobs for aarch64 and x86_64
    * cirrus: do not upload alt arch cross artifacts
    * cirrus: remove ginkgo-e2e.json artifact
    * cirrus: fix default timeouts
    * github: remove fcos-podman-next-build-prepush
    * Clarify podman machine volume mounting behavior under WSL
    * machine: Add -all-providers flag to machine list
    * Create a podman-troubleshooting man page
    * chore(deps): update dependency setuptools to v74
    * fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
    * Fix an improperly ignored error in SQLite
    * CI: flake workaround: ignore socat waitpid warnings
    * fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.1
    * Stop skipping machine volume test on Hyper-V
    * cleanup: add new --stopped-only option
    * fix races in the HTTP attach API
    * cirrus: skip windows/macos machine task on RHEL branches
    * Update module github.com/containers/gvisor-tap-vsock to v0.7.5
    * run: fix detach passthrough and --rmi
    * podman run: ignore image rm error
    * Add support for AddHost in quadlet .pod and .container
    * [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3
    * update github.com/vishvananda/netlink to v1.3.0
    * build: Update gvisor-tap-vsock to 0.7.5
    * Quote systemd DefaultEnvironment Proxy values, as documented in systemd.conf man page:
    * fix typo in podman-network-create.1.md
    * Use HTTP path prefix of TCP connections to match Docker context behavior
    * Makefile: remotesystem: use real podman server, no --url
    * Update module github.com/openshift/imagebuilder to v1.2.15
    * CI: parallel-safe userns test
    * Update module github.com/onsi/ginkgo/v2 to v2.20.1
    * Add support for IP in quadlet .pod files
    * Specify format to use for referencing fixed bugs.
    * CI: parallel-safe run system test
    * Revert "test/e2e: work around for pasta issue"
    * CI: On vX.Y-rhel branches, ensure that some downstream Jira issue is linked
    * quadlet: support user mapping in pod unit
    * Update Release Process
    * Test new VM build
    * command is not optional to podman exec
    * CI: parallel-safe namespaces system test
    * [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2
    * quadlet: add key CgroupsMode
    * Fix `podman stop` and `podman run --rmi`
    * quadlet: set infra name to %s-infra
    * chore(deps): update dependency setuptools to v73
    * [skip-ci] Packit: update targets for propose-downstream
    * Do not segfault on hard stop
    * Fix description of :Z to talk about pods
    * CI: disable ginkgo flake retries
    * vendor: update go-criu to latest
    * golangci-lint: make darwin linting happy
    * golangci-lint: make windows linting happy
    * test/e2e: remove kernel version check
    * golangci-lint: remove most skip dirs
    * set !remote build tags where needed
    * update golangci-lint to 1.60.1
    * test/e2e: rm systemd start test
    * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.1
    * podman wait: allow waiting for removal of containers
    * libpod: remove UpdateContainerStatus()
    * podman mount: fix storage/libpod ctr race
    * CI: quadlet tests: make parallel-safe
    * CI: system tests: make random_free_port() parallel-safe
    * remove trailing comma in example
    * CI: format test: make parallel-safe
    * Fix podman-docker.sh under -eu shells (fixes #23628)
    * docs: update podman-wait man page
    * libpod: remove duplicated HasVolume() check
    * podman volume rm --force: fix ABBA deadlock
    * test/system: fix network cleanup restart test
    * libpod: do not stop pod on init ctr exit
    * libpod: simplify WaitForExit()
    * CI: remove build-time quay check
    * Fix known_hosts file clogging and remote host id
    * Update docker.io/library/golang Docker tag to v1.23
    * Update dependency setuptools to ~=72.2.0
    * Update module github.com/docker/docker to v27.1.2+incompatible
    * healthcheck system check: reduce raciness
    * CI: healthcheck system test: make parallel-safe
    * Validate renovate config in every PR
    * pkg/machine: Read stderr from ssh-keygen correctly
    * Fix renovate config syntax error
    * CI: 080-pause.bats: make parallel-safe
    * CI: 050-stop.bats: make parallel-safe
    * Additional potential race condition on os.Readdir
    * pkg/bindings/containers: handle ignore for stop
    * remote: fix invalid --cidfile + --ignore
    * Update/simplify renovate config header comment
    * Migrate renovate config to latest schema
    * Fix race condition when listing /dev
    * docs/podman-systemd: Try to clarify `Exec=` more
    * libpod: reset state error on init
    * test/system: pasta_test_do add explicit port check
    * test/e2e: work around new push warning
    * vendor: update c/common to latest
    * stopIfOnlyInfraRemains: log all errors
    * libpod: do not save expected stop errors in ctr state
    * libpod: fix broken saveContainerError()
    * Quadlet: fix filters failure when the search paths are symlinks
    * readme: replace GPG with PGP
    * Drop APIv2 CNI configuration
    * De-duplicate docker-py testing
    * chore(podmansnoop): explain why crun comm is 3
    * libpod: cleanupNetwork() return error
    * fix(deps): update module golang.org/x/sys to v0.24.0
    * Reduce python APIv2 test net dependency
    * Fix not testing registry.conf updates
    * test/e2e: improve command timeout handling
    * Update module github.com/onsi/ginkgo/v2 to v2.20.0
    * Update module github.com/moby/sys/user to v0.3.0
    * Add passwd validate and generate steps
    * podman container cleanup: ignore common errors
    * Quadlet - Allow the user to override the default service name
    * CI: e2e: serialize root containerPort tests
    * Should not force conversion of manifest type to DockerV2ListMediaType
    * fix(deps): update module golang.org/x/tools to v0.24.0
    * fix(deps): update github.com/containers/common digest to 05b2e1f
    * CI: mount system test: parallelize
    * Update module golang.org/x/net to v0.28.0
    * Ignore ERROR_SHARING_VIOLATION error on windows
    * CI: manifest system tests: make parallel-safe
    * Create volume path before state initialization
    * vendor: update c/storage
    * CI: fix broken libkrun test
    * test/e2e: work around for pasta issue
    * test/e2e: fix missing exit code checks
    * Test new CI images
    * Remove another race condition when mounting containers or images
    * fix(deps): update github.com/containers/common digest to c0cc6b7
    * Change Windows installer MajorUpgrade Schedule
    * Ignore missing containers when calling GetExternalContainerLists
    * Remove runc edit to lock to specific version
    * fix(deps): update module golang.org/x/sys to v0.23.0
    * CI: podman-machine: do not use cache registry
    * CI: completion system test: use safename
    * Temporarly disable failing Windows Installer CI test
    * libpod: fix volume copyup with idmap
    * libpod: avoid hang on errors
    * Temp. disable PM basic Volume ops test
    * Add libkrun Mac task
    * Never skip checkout step in release workflow
    * System tests: leak_test: readable output
    * fix(deps): update github.com/docker/go-plugins-helpers digest to 45e2431
    * vendor: bump c/common
    * Version: bump to v5.3.0-dev
    * libpod: inhibit SIGTERM during cleanup()
    * Tweak versions in register_images.go
    * fix network cleanup flake in play kube
    * WIP: Fixes for vendoring Buildah
    * Add --compat-volumes option to build and farm build
    * Bump to Buildah v1.37.0
    * Quadlet test - Split between success, warning and error cases
    * libpod: bind ports before network setup
    * Disable compose-warning-logs if PODMAN_COMPOSE_WARNING_LOGS=false
    * Use new syntax for selinux options in quadlet
    * fix(deps): update module github.com/onsi/gomega to v1.34.1
    * CI: kube test: fix broken external-storage test
    * Update dependency setuptools to v72
    * Convert additional build context paths on Windows
    * pkg/api: do not leak config pointers into specgen
    * Quadlet - Allow the user to set the service name for .pod files
    * Quadlet tests - allow overriding the expected service name
    * fix(deps): update module github.com/moby/sys/user to v0.2.0
    * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.5
    * CI: enable root user namespaces
    * libpod: force rootfs for OCI path with idmap
    * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
    * Add test steps for automount with multi images
    * CI: cp tests: use safename
    * [skip-ci] RPM: podman-iptables.conf only on Fedora
    * CI: 700-play: fix a leaked non-safename
    * test: check that kube generate/play restores the userns
    * test: disable artifacts cache with composefs
    * test: fix podman pull tests
    * vendor: bump c/storage
    * Update module github.com/cyphar/filepath-securejoin to v0.3.1
    * Add /run/containers/systemd, ${XDG_RUNTIME_DIR}/containers/systemd quadlet dirs
    * build: Update gvisor-tap-vsock to 0.7.4
    * test/system: fix borken pasta interface name checks
    * test/system: fix bridge host.containers.internal test
    * api: honor the userns for the infra container
    * play: handle 'private' as 'auto'
    * kube: record infra user namespace
    * infra: user ns annotation higher precedence
    * specgenutil: record the pod userns in the annotations
    * kube: invert branches
    * CI: system log test: use safe names
    * Update encryption tests to avoid a warning if zstd:chunked is the default
    * Fix "podman pull and decrypt"/"from local registry"
    * Use unique image names for the encrypted test images
    * CI: system tests: instrument to allow failure analysis
    * Fix outdated comment for the build step win-gvproxy
    * Add utility to convert VMFile to URL for UNIX sockets
    * Run codespell on source
    * fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
    * chore(deps): update dependency setuptools to ~=71.1.0
    * logformatter: tweaks to pass html tidy
    * More information for podman --remote build and running out of space.
    * Fix windows installer deleting machine provider config file
    * Use uploaded .zip for Windows action
    * pr-should-include-tests: no more CI:DOCS override

++++ python-postorius:

  - %defattr is evil! Rather have a long (and readable) list of
    %attr in front of every line
  - one consequence of using %defattr is that we were changing
    ownership of /srv/www, which any individual web server has no
    business to do.

++++ pybind11_protobuf:

  - Update git snapshot to 0~git20241101.90b1a5b
  - Drop upstream patches:
    * 0001-Make-protobuf-python_api-fully-optional.patch
    * 0002-Add-ENABLE_PYPROTO_API-option-to-CMake-build-clean-u.patch
    * 0003-Make-the-pybind11_-_proto_caster-libraries-STATIC.patch
    * 0004-Fix-handling-of-external-dependencies-allow-forcing-.patch
    * 0005-Build-and-run-the-test-cases.patch
  - Fix build with protobuf major 5.26.x (v26.x) and later

++++ python-GitPython:

  - drop of CVE-2023-41040.patch because it included in upstream version
  - drop of test-skips.patch
  - drop of test_blocking_lock_file-extra-time.patch
  - Update to version 3.1.43:
    * Issue and test deprecation warnings by @EliahKagan in #1886
    * Fix version_info cache invalidation, typing, parsing, and serialization by @EliahKagan in #1838
    * Document manual refresh path treatment by @EliahKagan in #1839
    * Improve static typing and docstrings related to git object types by @EliahKagan in #1859
    * Fix release link in changelog by @PeterJCLaw in #1795
    * Remove test dependency on sumtypes library by @EliahKagan in #1798
    * Pin Sphinx plugins to compatible versions by @EliahKagan in #1803
    * fix: treeNotSorted issue by @et-repositories in #1799
    * Remove git.util.NullHandler by @EliahKagan in #1807
    * Clarify why GIT_PYTHON_GIT_EXECUTABLE may be set on failure by @EliahKagan in #1810
    * Report actual attempted Git command when Git.refresh fails by @EliahKagan in #1812
    * Don't suppress messages when logging is not configured by @EliahKagan in #1813
    * Pin Python 3.9.16 on Cygwin CI by @EliahKagan in #1814
    * Have initial refresh use a logger to warn by @EliahKagan in #1815
    * Omit warning prefix in "Bad git executable" message by @EliahKagan in #1816
    * Test with M1 macOS CI runner by @EliahKagan in #1817
    * Bump pre-commit/action from 3.0.0 to 3.0.1 by @dependabot in #1818
    * Bump Vampire/setup-wsl from 2.0.2 to 3.0.0 by @dependabot in #1819
    * Remove deprecated section in README.md by @marcm-ml in #1823
    * Keep temp files out of project dir and improve cleanup by @EliahKagan in #1825
    * Add __all__ in git.exc by @EliahKagan in #1719
    * Set submodule update cadence to weekly by @EliahKagan in #1721
    * Never modify sys.path by @EliahKagan in #1720
    * Bump git/ext/gitdb from 8ec2390 to ec58b7e by @dependabot in #1722
    * Revise comments, docstrings, some messages, and a bit of code by @EliahKagan in #1725
    * Use zero-argument super() by @EliahKagan in #1726
    * Remove obsolete note in _iter_packed_refs by @EliahKagan in #1727
    * Reorganize test_util and make xfail marks precise by @EliahKagan in #1729
    * Clarify license and make module top comments more consistent by @EliahKagan in #1730
    * Deprecate compat.is_, rewriting all uses by @EliahKagan in #1732
    * Revise and restore some module docstrings by @EliahKagan in #1735
    * Make the rmtree callback Windows-only by @EliahKagan in #1739
    * List all non-passing tests in test summaries by @EliahKagan in #1740
    * Document some minor subtleties in test_util.py by @EliahKagan in #1749
    * Always read metadata files as UTF-8 in setup.py by @EliahKagan in #1748
    * Test native Windows on CI by @EliahKagan in #1745
    * Test macOS on CI by @EliahKagan in #1752
    * Let close_fds be True on all platforms by @EliahKagan in #1753
    * Fix IndexFile.from_tree on Windows by @EliahKagan in #1751
    * Remove unused TASKKILL fallback in AutoInterrupt by @EliahKagan in #1754
    * Don't return with operand when conceptually void by @EliahKagan in #1755
    * Group .gitignore entries by purpose by @EliahKagan in #1758
    * Adding dubious ownership handling by @marioaag in #1746
    * Avoid brittle assumptions about preexisting temporary files in tests by @EliahKagan in #1759
    * Overhaul noqa directives by @EliahKagan in #1760
    * Clarify some Git.execute kill_after_timeout limitations by @EliahKagan in #1761
    * Bump actions/setup-python from 4 to 5 by @dependabot in #1763
    * Don't install black on Cygwin by @EliahKagan in #1766
    * Extract all "import gc" to module level by @EliahKagan in #1765
    * Extract remaining local "import gc" to module level by @EliahKagan in #1768
    * Replace xfail with gc.collect in TestSubmodule.test_rename by @EliahKagan in #1767
    * Enable CodeQL by @EliahKagan in #1769
    * Replace some uses of the deprecated mktemp function by @EliahKagan in #1770
    * Bump github/codeql-action from 2 to 3 by @dependabot in #1773
    * Run some Windows environment variable tests only on Windows by @EliahKagan in #1774
    * Fix TemporaryFileSwap regression where file_path could not be Path by @EliahKagan in #1776
    * Improve hooks tests by @EliahKagan in #1777
    * Fix if items of Index is of type PathLike by @stegm in #1778
    * Better document IterableObj.iter_items and improve some subclasses by @EliahKagan in #1780
    * Revert "Don't install black on Cygwin" by @EliahKagan in #1783
    * Add missing pip in $PATH on Cygwin CI by @EliahKagan in #1784
    * Shorten Iterable docstrings and put IterableObj first by @EliahKagan in #1785
    * Fix incompletely revised Iterable/IterableObj docstrings by @EliahKagan in #1786
    * Pre-deprecate setting Git.USE_SHELL by @EliahKagan in #1782
    * Deprecate Git.USE_SHELL by @EliahKagan in #1787
    * In handle_process_output don't forward finalizer result by @EliahKagan in #1788
    * Fix mypy warning "Missing return statement" by @EliahKagan in #1789
    * Fix two remaining Windows untrusted search path cases by @EliahKagan in #1792
    * Add missing assert keywords by @EliahKagan in #1678
    * Make clear every test's status in every CI run by @EliahKagan in #1679
    * Fix new link to license in readme by @EliahKagan in #1680
    * Drop unneeded flake8 suppressions by @EliahKagan in #1681
    * Update instructions and test helpers for git-daemon by @EliahKagan in #1684
    * Fix Git.execute shell use and reporting bugs by @EliahKagan in #1687
    * No longer allow CI to select a prerelease for 3.12 by @EliahKagan in #1689
    * Clarify Git.execute and Popen arguments by @EliahKagan in #1688
    * Ask git where its daemon is and use that by @EliahKagan in #1697
    * Fix bugs affecting exception wrapping in rmtree callback by @EliahKagan in #1700
    * Fix dynamically-set all variable by @DeflateAwning in #1659
    * Fix small #1662 regression due to #1659 by @EliahKagan in #1701
    * Drop obsolete info on yanking from security policy by @EliahKagan in #1703
    * Have Dependabot offer submodule updates by @EliahKagan in #1702
    * Bump git/ext/gitdb from 49c3178 to 8ec2390 by @dependabot in #1704
    * Bump git/ext/gitdb from 8ec2390 to 6a22706 by @dependabot in #1705
    * Update readme for milestone-less releasing by @EliahKagan in #1707
    * Run Cygwin CI workflow commands in login shells by @EliahKagan in #1709
    * Improve Python version and OS compatibility, fixing deprecations by @EliahKagan in #1654
    * Better document env_case test/fixture and cwd by @EliahKagan in #1657
    * Remove spurious executable permissions by @EliahKagan in #1658
    * Fix up checks in Makefile and make them portable by @EliahKagan in #1661
    * Fix URLs that were redirecting to another license by @EliahKagan in #1662
    * Assorted small fixes/improvements to root dir docs by @EliahKagan in #1663
    * Use venv instead of virtualenv in test_installation by @EliahKagan in #1664
    * Omit py_modules in setup by @EliahKagan in #1665
    * Don't track code coverage temporary files by @EliahKagan in #1666
    * Configure tox by @EliahKagan in #1667
    * Format tests with black and auto-exclude untracked paths by @EliahKagan in #1668
    * Upgrade and broaden flake8, fixing style problems and bugs by @EliahKagan in #1673
    * Fix rollback bug in SymbolicReference.set_reference by @EliahKagan in #1675
    * Remove @NoEffect annotations by @EliahKagan in #1677
    * Add more checks for the validity of refnames by @facutuesca in #1672
    * Bump actions/checkout from 3 to 4 by @dependabot in #1643
    * Fix 'Tree' object has no attribute '_name' when submodule path is normal path by @CosmosAtlas in #1645
    * Fix CVE-2023-41040 by @facutuesca in #1644
    * Only make config more permissive in tests that need it by @EliahKagan in #1648
    * Added test for PR #1645 submodule path by @CosmosAtlas in #1647
    * Fix Windows environment variable upcasing bug by @EliahKagan in #1650

++++ python-azure-mgmt-mysqlflexibleservers:

  - New upstream release
    + Version 1.0.0b3
    + For detailed information about changes see the
    CHANGELOG.md file provided with this package

++++ python-dunamai:

  - update to 1.23.0:
    * Add major/minor/patch format placeholders
    * Clean up some formatting

++++ python-google-cloud-run:

  - Update to 0.10.12
    * Allow users to explicitly configure universe domain
    * Add google-auth as a direct dependency
    * Require google-api-core>=1.34.1
    * Support mounting NFS and GCS volumes in Cloud Run Jobs and Services
    * add Job ExecutionReference.completion_status to show status of the
    most recent execution
    * add Builds API
    * Add support for Python 3.13
    * support advanced configurations options for cloud storage volumes
    by setting mount_options in the GCSVolumeSource configuration
    * add EncryptionKeyRevocationAction and shutdown duration
    configuration to Services

++++ python-google-cloud-spanner:

  - Update to 3.50.1
    * Add BatchWrite API
    * spanner: Add autoscaling config to the instance proto
    * spanner: Add directed_read_option in spanner.proto
    * Add max_commit_delay API
    * Exposing Spanner client in dbapi connection
    * Add support of float32 type
    * Add support for PG.OID in parameterized queries
    * spanner: Adding EXPECTED_FULFILLMENT_PERIOD to the indicate instance creation times
    * Add support for Cloud Spanner Scheduled Backups
    * spanner: Add support for Cloud Spanner Default Backup Schedules
    * many more changes, see upstream CHANGELOG.md

++++ python-grpc-interceptor:

  - Initial packaging (v0.15.4), needed by python-google-cloud-spanner

++++ python-numpy:

  - Revert the switch to openblas, should skip test instead
    * see discussion at gh#scipy/scipy#21475

++++ python-pythran:

  - Update to 0.17.0
    * Support parsing annotated statement
    * Document and test Meson integration
    * Update / improve Blas detection, including scipy-openblas
    * Fix usage of Blas library
    * Improve error reporting
    * Support array module
    * Reduce dependency on setuptools
    * Faster forward substitution
    * Enforce default optimization level to `-O2`
  - Drop upstreamed numpy-2.1-interval.patch
  - Drop upstreamed numpy-2.1-support.patch
  - Drop upstreamed support-gast-0.6.patch

++++ python-weasyprint:

  - Fix runtime requirements (bsc#1233406)

++++ qbittorrent:

  - Update to version 5.0.2
    Bug fixes:
    * Remove trackers from previous category when moved to new one
    * Fix `.torrent` file could not be deleted when torrent is
    canceled
    * Reset tracker entries when pausing the session
    * Check real palette darkness to detect "dark theme"
    * Correctly handle "torrent finished" events
    * Preserve initial torrent progress while checking resume data
    * Avoid reapplying Mark-of-the-Web when it already exists
    * Don't apply Mark-of-the-Web on existing files
    Web UI:
    * Add color scheme switcher
    Search:
    * Correctly delete the moved search tab

++++ qemu:

  - Build and bug fixes:
    * edk2: update submodule to edk2-stable202408.01
    * Revert "hw/audio/hda: fix memory leak on audio setup" (bsc#1232728)

++++ qemu-linux-user:

  - Build and bug fixes:
    * edk2: update submodule to edk2-stable202408.01
    * Revert "hw/audio/hda: fix memory leak on audio setup" (bsc#1232728)

++++ rzip:

  - Add libtool BuildRequire and Re-bootstrap the really old tarball:
    the configure script was originally created with autoconf 2.13,
    which produced chechs that fail with recent compilers.

++++ strace:

  - Update to strace 6.12
    * Implemented decoding of EPIOCGPARAMS and EPIOCSPARAMS ioctl commands.
    * Implemented decoding of NS_GET_MNTNS_ID, NS_GET_PID_FROM_PIDNS,
    NS_GET_TGID_FROM_PIDNS, NS_GET_PID_IN_PIDNS, NS_GET_TGID_IN_PIDNS,
    NS_MNT_GET_INFO, NS_MNT_GET_NEXT, and NS_MNT_GET_PREV ioctl commands.
    * Implemented decoding of FRA_DSCP netlink attribute.
    * Implemented decoding of IORING_REGISTER_CLOCK and
    IORING_REGISTER_CLONE_BUFFERS opcodes of io_uring_register syscall.
    * Updated decoding of struct landlock_ruleset_attr.
    * Updated lists of AUDIT_*, ETHTOOL_*, F_*, IORING_*, LSM_*, MAP_*, MSG_*,
    NT_*, SCHED_*, SCM_*, SO_*, and V4L2_* constants.
    * Updated lists of ioctl commands from Linux 6.12.
    * Fix the syscall name printed by strace when PTRACE_GET_SYSCALL_INFO
    is in use and a syscall is restarted by a just attached tracee using
    restart_syscall mechanism.

++++ supergfxctl:

  - Added upstream GPU detection patch
  - Added patch for user groups
  - Removed `users`, `sudo`, `adm` and `wheel` groups
  - Added `video` group and separated `supergfxctl`

++++ switchboard-plug-sound:

  - update to 8.0.1:
    * Fix crash when connecting bluetooth audio players
    * Update translations
  - fix CFLAGS

++++ vale:

  - Update to version 3.9.1:
    * fix: support overriding `MinAlertLevel`
    * feat: add command for mocking the config pipeline
    * test: more `repetition` cases
    * fix: improve `Vale.Repetition`
    * fix: check if we need to load a rule before trying

++++ yast2-trans:

  - Update to version 84.87.20241115.093806fbe6:
    * New POT for text domain 'iscsi-client'.
    * Translated using Weblate (Portuguese (Brazil))
    * Translated using Weblate (Portuguese (Brazil))
    * Translated using Weblate (Portuguese (Brazil))
    * Translated using Weblate (Dutch)
    * Translated using Weblate (Portuguese (Brazil))
    * Translated using Weblate (Japanese)
    * Translated using Weblate (Slovak)
    * Translated using Weblate (Catalan)
    * New POT for text domain 'iscsi-client'.

------------------------------------------------------------------
------------------  2024-11-17  -  Nov 17 2024  -------------------
------------------------------------------------------------------

++++ ImageMagick:

  - version update to 7.1.1.41
    * Fix compiler identification with Clang on Darwin in #7773
    * revert map changes breaking ABI in #7768

++++ bubblewrap:

  - fix shebang in demos/flatpak-run.sh

++++ forgejo-runner:

  - Update to version 5.0.0:
    * fix: Update forgejo/forgejo-build-publish action to v5
    * fix: make container.docker_host default to - (part two)
    * Update golang packages to v1.23
    * tests: it make take time for Forgejo to come up
    * Update code.forgejo.org/oci/alpine Docker tag to v3.20
    * ci: use `go-version-file`
    * Update actions/setup-go action to v5
    * ci: don't run on renovate branches
    * ci: Include version number in windows runner build
    * fix: dockerfile casing typo
    * Update module golang.org/x/time to v0.8.0
    * Update module golang.org/x/term to v0.26.0
    * Add support for windows build on GitHub (#312)
    * Update dependency go to v1.23.3
    * Version bump and add release notes
    * Cherry-pick gitea act_runner #543
    * Add simple test
    * Add configurable logging level for jobs

++++ gstreamer-docs:

  - Update to version 1.24.9:
    + No changes, stable version bump only.

++++ python-gst:

  - Update to version 1.24.9:
    + No changes, stable version bump only.

++++ gstreamer-plugins-ugly:

  - Update to version 1.24.9:
    + No changes, stable version bump only.

++++ gstreamer-plugins-vaapi:

  - Update to version 1.24.9:
    + No changes, stable version bump only.

++++ inkscape:

  - Drop obsolete and unused pkgconfig(gdl-3.0) BuildRequires.
  - Add explicit pkgconfig(glibmm-2.4), pkgconfig(gdkmm-3.0),
    pkgconfig(gtk+-3.0) and pkgconfig(gdk-3.0) BuildRequires: Align
    with what cmake checks for.

++++ iosevka-fonts:

  - Update to v32.1.0
    * Changes of version 32.1.0
    = Make dense letters less outstanding (#2581).
    = Optimize glyphs for Armenian Capital Ini (U+053B), Ken
    (U+053F), and Vew (U+054E).
    = Remove bottom-right serif from Armenian Capital Now (U+0546).
    = Remove top-right serif from Armenian Lower Ben (U+0562).
    = Make serif of Armenian Lower Yi (U+0575) consistent with
    Armenian Lower Liwn (U+056C).
    = Make hook of Armenian Lower Co (U+0581) consistent with
    Armenian Lower Yi (U+0575).

++++ python-jupyterlab:

  - Downgrade to 4.2.6
    * Maintain autosave timers while disconnected #16903 (@holzman)
    * Use class instead of id in the log console test #16723
    (@krassowski)
  - Downgrade reason: Notebook is not ready for jupyterlab 4.3 yet

++++ kernel-source-longterm:

  - Linux 6.6.62 (bsc#1218260).
  - 9p: fix slab cache name creation for real (bsc#1218260).
  - mm/thp: fix deferred split unqueue naming and locking
    (bsc#1218260).
  - mm: refactor folio_undo_large_rmappable() (bsc#1218260).
  - mm: always initialise folio->_deferred_list (bsc#1218260).
  - mm: support order-1 folios in the page cache (bsc#1218260).
  - mm/readahead: do not allow order-1 folio (bsc#1218260).
  - mm: add page_rmappable_folio() wrapper (bsc#1218260).
  - mm: krealloc: Fix MTE false alarm in __do_krealloc
    (bsc#1218260).
  - io_uring: fix possible deadlock in
    io_register_iowq_max_workers() (bsc#1218260).
  - bpf: Check validity of link->type in bpf_link_show_fdinfo()
    (bsc#1218260).
  - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
    (bsc#1218260).
  - ASoC: fsl_micfil: Add sample rate constraint (bsc#1218260).
  - LoongArch: Use "Exception return address" to comment ERA
    (bsc#1218260).
  - ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop
    issue (bsc#1218260).
  - RISCV: KVM: use raw_spinlock for critical section in imsic
    (bsc#1218260).
  - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard
    (bsc#1218260).
  - HID: multitouch: Add quirk for Logitech Bolt receiver w/
    Casa touchpad (bsc#1218260).
  - fs: Fix uninitialized value issue in from_kuid and from_kgid
    (bsc#1218260).
  - ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA
    (bsc#1218260).
  - ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA
    (bsc#1218260).
  - bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6
    (bsc#1218260).
  - bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx
    (bsc#1218260).
  - vDPA/ifcvf: Fix pci_read_config_byte() return code handling
    (bsc#1218260).
  - nvme/host: Fix RCU list traversal to use SRCU primitive
    (bsc#1218260).
  - smb: client: Fix use-after-free of network namespace
    (bsc#1218260).
  - nvme: make keep-alive synchronous operation (bsc#1218260).
  - nvme-loop: flush off pending I/O while shutting down loop
    controller (bsc#1218260).
  - net: phy: mdio-bcm-unimac: Add BCM6846 support (bsc#1218260).
  - powerpc/powernv: Free name on error in opal_event_init()
    (bsc#1218260).
  - drm/amdkfd: Accounting pdd vram_usage for svm (bsc#1218260).
  - nvme-multipath: defer partition scanning (bsc#1218260).
  - RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
    (bsc#1218260).
  - drm/vmwgfx: Limit display layout ioctl array size to
    VMWGFX_NUM_DISPLAY_UNITS (bsc#1218260).
  - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
    (bsc#1218260).
  - crypto: marvell/cesa - Disable hash algorithms (bsc#1218260).
  - crypto: api - Fix liveliness check in crypto_alg_tested
    (bsc#1218260).
  - bpf: use kvzmalloc to allocate BPF verifier environment
    (bsc#1218260).
  - nvme: disable CC.CRIME (NVME_CC_CRIME) (bsc#1218260).
  - iommu/arm-smmu: Clarify MMU-500 CPRE workaround (bsc#1218260).
  - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
    (bsc#1218260).
  - HID: multitouch: Add support for B2402FVA track point
    (bsc#1218260).
  - block: Fix elevator_get_default() checking for NULL q->tag_set
    (bsc#1218260).
  - nvme: tcp: avoid race between queue_lock lock and destroy
    (bsc#1218260).
  - irqchip/ocelot: Fix trigger register address (bsc#1218260).
  - selftests/bpf: Verify that sync_linked_regs preserves subreg_def
    (bsc#1218260).
  - 9p: Avoid creating multiple slab caches with the same name
    (bsc#1218260).
  - 9p: v9fs_fid_find: also lookup by inode if not found dentry
    (bsc#1218260).
  - commit 040e170

++++ lal:

  - Fix building without octave. The requires_eq macro must expand
    correctly, even when its result is discarded.
  - Add compatibility with SWIG 4.3.0, add
    * lalsuite_fix_swig_4_3_0_compat.patch
    * lalsuite_fix_swig_4_3_0_compat_2.patch

++++ util-linux-systemd:

  - Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).
  - agetty: Prevent login cursor escape (bsc#1194818,
    util-linux-agetty-prevent-cursor-escape.patch).
  - Document unexpected side effects of lazy destruction
    (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).

++++ libArcus:

  - Add support for protobuf v3.26.x/v26.x, add
    0001-Fix-compatibility-for-protobuf-v26.x-and-later.patch

++++ libqxmpp-qt5:

  - Update to 1.9.0
    * Implement XEP-0461: Message Replies parsing
    * Prevent unencrypted fallback markers are applied to
    encrypted body
    * Implement XEP-0283: Moved
    * AccountMigration: Implement restoring of joined MIX channels

++++ libqxmpp-qt6:

  - Update to 1.9.0
    * Implement XEP-0461: Message Replies parsing
    * Prevent unencrypted fallback markers are applied to
    encrypted body
    * Implement XEP-0283: Moved
    * AccountMigration: Implement restoring of joined MIX channels

++++ util-linux:

  - Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).
  - agetty: Prevent login cursor escape (bsc#1194818,
    util-linux-agetty-prevent-cursor-escape.patch).
  - Document unexpected side effects of lazy destruction
    (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).

++++ nlopt-main:

  - Fix %requires_eq usage for "pkgconfig(octave)".

++++ primesieve:

  - Update to primesieve-12.6
  - Add AVX512 and ARM SVE pre-sieving

++++ nodejs-electron:

  - New upstream release 31.7.5
    * Fixed an issue where WebContentsViews were being improperly removed.
    * Fixed an issue where the windows control overlay was unexpectedly visible in fullscreen.
    * Fix use after free in Serial (CVE-2024-10827 bsc#1232843)

++++ obs-service-cargo:

  - Update to version 4.3.3:
    * fix: let cargo just put where the vendor directory is by default which is the curdir
  - Update to version 4.3.2:
    * fix: updating specific crates was not properly implemented. now resolved.
  - Update to version 4.3.1:
    * fix: correctly use setup_workdir and custom_root
    * fix: resolve location for the vendor directory
    * remove: it's not our bug. using `--target` for multiple triples now removed
    * fix: do not canonicalize in first_manifest
    * fix: remove the wrongly used else-clause
    * improvements: ensure that the additional manifest paths ends with `Cargo.toml`
    * docs: update docs to include the new feature with feature additions
    * improvements: parent path of Cargo.toml files are now set as current directory when invoking commands

++++ nlopt:

  - Fix %requires_eq usage for "pkgconfig(octave)".

++++ pcmanfm:

  - Switching over to sources from github.com/lxde/pcmanfm
  - Removing the update-desktop-files related items
  - Changing from gtk2 -> gtk3
  - '%configure' doesn't work anymore, switched to './autogen.sh' followed by
    './configure' with specific options
  - Update to version 1.3.2+git20241103.1312f60:
    * Update German translation
    * Update language files
    * Update POT file
    * Add a date format option
    * Specify the minimum GTK+ version required
    * Fix build with gcc14 -Werror=incompatible-pointer-types
    * Support silent building
    * Compile the --with-gtk=3 option with -Wno-deprecated-declarations
    * Amend the name of the application in the desktop file
    * Update German translation

++++ python-ipython:

  - Update to 8.29
    * Misc Python 3.13 compatibility #14536, #14559
    * Add a uv line magic #14537
    * Add support for WEBP to IPython.display.Image. #14526
    * And many more bugfixes and quality of life improvements.
  - IPython 8.28
    * #14480 AssertionError: assert _xterm_term_title_saved in WSL
    It is unclear why the terminal title is not saved in WSL, if
    you've WSL experience we'd love your feedback and help to not
    just ignore an error
    * #14510 Fix use of pyside6 >= 6.7.0
    * #14518 Make values public (_tb_highlight & _tb_highlight_style)
    * #14515 Use environment variable to identify conda / mamba
  - Remove deprecated %suse_update_desktop_file
    * https://en.opensuse.org/openSUSE:Update-desktop-files_deprecation
    * nothing relevant to upstream

++++ python-libmount:

  - Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).
  - agetty: Prevent login cursor escape (bsc#1194818,
    util-linux-agetty-prevent-cursor-escape.patch).
  - Document unexpected side effects of lazy destruction
    (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).

++++ python-qtconsole:

  - Update to 5.6.1
    * Handle ANSI escape sequences that move the cursor.
  - Remove deprecated %suse_update_desktop_file
    * https://en.opensuse.org/openSUSE:Update-desktop-files_deprecation
    * nothing relevant to upstream

++++ python-ruff:

  - update to 0.7.4
    * Preview features
    * [flake8-datetimez] Detect usages of datetime.max/datetime.min (DTZ901)
    * [flake8-logging] Implement root-logger-calls (LOG015)
    * [flake8-no-pep420] Detect empty implicit namespace packages (INP001)
    * [flake8-pyi] Add "replace with Self" fix (PYI019)
    * [perflint] Implement quick-fix for manual-list-comprehension (PERF401)
    * [pylint] Implement shallow-copy-environ (W1507)
    * [ruff] Implement none-not-at-end-of-union (RUF036)
    * [ruff] Implementation unsafe-markup-call from flake8-markupsafe plugin (RUF035)
    * [ruff] Report problems for attrs dataclasses (RUF008, RUF009)
    * Rule changes
    * [flake8-boolean-trap] Exclude dunder methods that define operators (FBT001)
    * [flake8-pyi] Add "replace with Self" fix (PYI034)
    * [flake8-pyi] Always autofix duplicate-union-members (PYI016)
    * [flake8-pyi] Improve autofix for nested and mixed type unions for unnecessary-type-union (PYI055)
    * [flake8-pyi] Mark fix as unsafe when type annotation contains comments for duplicate-literal-member (PYI062)
    * Server
    * Use the current working directory to resolve settings from ruff.configuration
    * Bug fixes
    * Avoid conflicts between PLC014 (useless-import-alias) and I002 (missing-required-import) by considering lint.isort.required-imports for PLC014
    * [flake8-type-checking] Skip quoting annotation if it becomes invalid syntax (TCH001)
    * [flake8-pyi] Avoid using typing.Self in stub files pre-Python 3.11 (PYI034)
    * [flake8-pytest-style] Flag pytest.raises call with keyword argument expected_exception (PT011)
    * [flake8-simplify] Infer "unknown" truthiness for literal iterables whose items are all unpacks (SIM222)
    * [flake8-type-checking] Fix false positives for typing.Annotated (TCH001)
    * [pylint] Allow await at the top-level scope of a notebook (PLE1142)
    * [pylint] Fix miscellaneous issues in await-outside-async detection (PLE1142)
    * [pyupgrade Avoid applying PEP 646 rewrites in invalid contexts ()UP044)
    * [pyupgrade] Detect permutations in redundant open modes (UP015)
    * [refurb] Avoid triggering hardcoded-string-charset for reordered sets (FURB156)
    * [refurb] Further special cases added to verbose-decimal-constructor (FURB157)
    * [refurb] Use UserString instead of non-existent UserStr (FURB189)
    * [ruff] Avoid treating lowercase letters as # noqa codes (RUF100)
    * [ruff] Do not report when Optional has no type arguments (RUF013)
    * Documentation
    * Add "Notebook behavior" section for F704, PLE1142
    * Document comment policy around fix safety

++++ python-spyder-kernels:

  - Update to 3.0.1
    * PR 517: Manually register the Matplotlib inline backend in case
    it hasn't, by @ccordoba12
    * PR 514: Fix development version for the stable branch, by
    @ccordoba12
    * PR 510: Replace Quansight logo by CZI one in Readme, by
    @ccordoba12
    * PR 508: Update workflows to run in the 3.x branch (CI), by
    @ccordoba12
    * PR 506: Make glob and loc kwargs of debug_exec, by @impact27
    * PR 504: Update workflow actions (CI), by @mrclary
    * PR 503: Update load_dicom to accommodate Pydicom 3.0, by
    @mrclary

++++ python310-wxPython:

  - Disable python3 (=3.6) flavor for 15.X
    * Upstream only supports Python 3.7+
    * Requires sip 6.8 which only supports Python 3.8+

++++ python311-wxPython:

  - Disable python3 (=3.6) flavor for 15.X
    * Upstream only supports Python 3.7+
    * Requires sip 6.8 which only supports Python 3.8+

++++ python312-wxPython:

  - Disable python3 (=3.6) flavor for 15.X
    * Upstream only supports Python 3.7+
    * Requires sip 6.8 which only supports Python 3.8+

++++ python313-wxPython:

  - Disable python3 (=3.6) flavor for 15.X
    * Upstream only supports Python 3.7+
    * Requires sip 6.8 which only supports Python 3.8+

++++ qpwgraph:

  - Update to version 0.8.0:
    * A new Patchbay/Manage… feature dialogue is introduced,
    targeting the currently loaded patchbay, allowing the removal
    and cleanup of connection rules that are no longer used,
    obsolete or simply not applicable anymore.
    * Force an actual complete graph refresh on main View/Refresh…
    * Introducing the new Graph/Options… dialogue, to where the most
    general option settings have been (re)moved from the main Help
    menu.
    * Introducing Graph/Options…/Filter to hide nodes by node name
    pattern (blacklist).
    * Fix default PipeWire node nickname if given empty.

++++ rqlite:

  - initiial version

++++ spyder:

  - Update to 6.0.2
    [#]# Important fixes
    * Fix plots not being generated with the Matplotlib inline
    backend.
    * Restore missing debugger buttons to the main toolbar.
    * Several fixes and improvements to the update detection
    mechanism.
    * Fix SSH tunneling info handling for remote kernels connection
    and add remote client tests.
    * Handle kernel fault file not being available.
    * Update QtConsole constraint to 5.6.1 to support ANSI codes that
    move the cursor.
    [#]# API changes
    * The sig_is_rendered signal was added to SpyderToolbar.
    * The add_toolbar kwarg of the create_run_button and
    create_run_in_executor_button methods of the Run plugin can now
    accept a dictionary.
    [#]# Issues Closed
    * Issue 22732 - return in finally swallows exceptions (PR 22745
    by @ccordoba12)
    * Issue 22685 - Check update process for 6.0.2 with a rc
    (6.0.2rc1)
    * Issue 22593 - Banner not shown when there are many files open
    in the Editor at startup (PR 22594 by @ccordoba12)
    * Issue 22584 - RuntimeError when setting a layout and the
    IPython console is undocked (PR 22595 by @ccordoba12)
    * Issue 22574 - SpyderCodeRunner._debugger_exec error when
    starting the debugger from Spyder 6.0.1 (PR 22633 by
    @ccordoba12)
    * Issue 22572 - Spyder encounters an internal problem after
    declining update to 6.0.1 (PR 22598 by @mrclary)
    * Issue 22566 - Standalone installer shows 404 error on
    spyder-conda-lock.zip (PR 22598 by @mrclary)
    * Issue 22555 - Remote spyder kernel not connecting (PR 22691 by
    @hlouzada)
    * Issue 22551 - Error message "the system cannot find the path
    specified" upon trying to start the kernel (PR 22575 by
    @ccordoba12)
    * Issue 22546 - UnicodeDecodeError when changing files with an
    open project (PR 22656 by @ccordoba12)
    * Issue 22448 - TypeError on connecting to spyder-notebook kernel
    (PR 22628 by @dalthviz)
    * Issue 22434 - Spyder 6: Debugging buttons missing from the main
    toolbar (PR 22702 by @ccordoba12)
    * Issue 22420 - Plots not showing in Spyder 6 using external
    Python interpreter (PR 22664 by @ccordoba12)
    * Issue 22407 - Update mechanism not working for Spyder 6.0
    installed from Fedora distro package (PR 22631 by @mrclary)
    * Issue 6172 - TQDM progress bar is not displayed correctly in
    the console (PR 22718 by @dalthviz)
    [#]# Pull Requests Merged
    * PR 22785: Improve version update instructions on RELEASE.md, by
    @dalthviz
    * PR 22771: Update dev version from alpha to rc, by @dalthviz
    * PR 22760: Update core dependencies for 6.0.2, by @dalthviz
    * PR 22759: Update spyder-kernels to 3.0.1, by @dalthviz
    * PR 22757: Mention that we need to publish release candidates
    for bugfix versions in release instructions, by @ccordoba12
    * PR 22753: Update translations from Crowdin, by @spyder-bot
    * PR 22752: Update translations for 6.0.2, by @dalthviz
    * PR 22745: Remove unnecessary return in a try/finally statement
    (Files), by @ccordoba12 (22732)
    * PR 22718: Update QtConsole subrepo to take into account changes
    to support cursor move actions, by @dalthviz (6172)
    * PR 22709: Update installing developer repos to accommodate
    dist-info, by @mrclary
    * PR 22702: Restore buttons that control the debugger to the main
    toolbar, by @ccordoba12 (22434)
    * PR 22699: Add Help Spyder entry to the Help menu (Application),
    by @ccordoba12
    * PR 22692: Configure spyder-remote-services as an external
    dependency for the remote client tests, by @hlouzada
    * PR 22691: Provide username, host and port from hostname info in
    ssh tunnels, by @hlouzada (22555)
    * PR 22668: Don't use hard-coded path to Python in script shebang
    used to launch Spyder, by @Flamefire
    * PR 22664: Manually register the Matplotlib inline backend in
    case it hasn't, by @ccordoba12 (22420)
    * PR 22656: Always use utf-8 when handling QByteArray data in
    ProcessWorker (Utils), by @ccordoba12 (22546)
    * PR 22654: Some small fixes to the Maintenance instructions, by
    @ccordoba12
    * PR 22636: Simplify min/max required versions of spyder-kernels
    in the stable branch (IPython console), by @ccordoba12
    * PR 22633: Fix debug file and cell buttons in Debugger toolbar,
    by @ccordoba12 (22574)
    * PR 22631: Do not check for updates if Spyder is in a system or
    managed environment, by @mrclary (22407)
    * PR 22628: Handle case when kernel fault file doesn't exist and
    show error with info explaining that no connection was possible
    (IPython Console), by @dalthviz (22448)
    * PR 22621: Fix setting of working directory in Profiler plugin,
    by @rear1019
    * PR 22618: Fix test_copy_paste_autoindent forcing text over the
    clipboard to work (Editor), by @dalthviz
    * PR 22598: Check for asset availability when checking for
    updates, by @mrclary (22572, 22566)
    * PR 22597: Minor updates to the installer, by @mrclary
    * PR 22595: Dock all undocked plugins before applying a layout,
    by @ccordoba12 (22584)
    * PR 22594: Set shell banner attribute to be the one computed by
    us (IPython console), by @ccordoba12 (22593)
    * PR 22577: Pin micromamba to the last version before 2.0 to
    prevent hangs (CI), by @ccordoba12
    * PR 22575: Add harmless OpenCL warning to bening errors (IPython
    console), by @ccordoba12 (22551)
    * PR 22527: Add initial tests for the Remote client plugin, by
    @hlouzada

++++ ugrep:

  - Update to version 7.0.4:
    * TUI fixes for other platforms
  - remove Windows binaries from src rpm; switch to source service

++++ widelands:

  - Update to 1.2.1:
    * This point release fixes several bugs and crashes found in
    Widelands 1.2, and offers full compatibility between these
    two releases for multiplayer games and replays.
    * Skip invalid map files in editor Load/Save map window
    * Fix memory leaks in main menu Watch Last Replay
    * Game setup: Unselect incompatible starting conditions when
    changing win condition
    * Add thread identifier to crash reports
    * Check for invalid combination before calling
    'DefaultAI::expedition_management()'
    * Territorial Lua error fix
    * Remove AV1 decoder dependency in mingw-64
    * Patches to support netbsd-pkgsrc
    * Keep vcpkg_ref in a repository variable instead of a file
    * Fix RelWithDebInfo build type
    * Fix out-of-bounds memory access when using '--editor'
    without filename
    * macos and other CI improvements
    * Re-add gettext ubuntu package
    * Update translations for v1.2.1
    * Replace MD5 checksumming code with 'libmd'
    * Fix LaunchMPG map seafaring check for naval warfare
    * Fix anchored ship trying to swim towards buffer-underflow
    * Fix desync in Discovery/New World starting conditions
  - Drop BuildRequires: boost, curl, libtiff, lua, SDL2_gfx,
    because they are no longer needed.
  - Use more pkgconfig based BuildRequires

++++ yast2-ycp-ui-bindings:

  - Fixed package / pattern examples (bsc#1233415)
  - 5.0.1

------------------------------------------------------------------
------------------  2024-11-16  -  Nov 16 2024  -------------------
------------------------------------------------------------------

++++ AdwSteamGtk:

  - update to 0.7.1:
    * Fix Color Theme Selection
    * Remove auto from win_controls options
    * update portuguese translation

++++ ccx:

  - update to 2.22:
    Too many changes to list, a full list of changes is available in
    the included LOGFILE.

++++ llvm19:

  - Apply clang-shlib-symbol-versioning.patch to add symbol versions
    to libclang-cpp.so similar to libLLVM.so. This is required when
    multiple versions of the library are loaded into the same
    process. (boo#1219405, boo#1221183, boo#1233220)

++++ llvm13:

  - Apply clang-shlib-symbol-versioning.patch to add symbol versions
    to libclang-cpp.so similar to libLLVM.so. This is required when
    multiple versions of the library are loaded into the same
    process. (boo#1219405, boo#1221183, boo#1233220)

++++ llvm14:

  - Apply clang-shlib-symbol-versioning.patch to add symbol versions
    to libclang-cpp.so similar to libLLVM.so. This is required when
    multiple versions of the library are loaded into the same
    process. (boo#1219405, boo#1221183, boo#1233220)

++++ llvm15:

  - Apply clang-shlib-symbol-versioning.patch to add symbol versions
    to libclang-cpp.so similar to libLLVM.so. This is required when
    multiple versions of the library are loaded into the same
    process. (boo#1219405, boo#1221183, boo#1233220)

++++ llvm16:

  - Apply clang-shlib-symbol-versioning.patch to add symbol versions
    to libclang-cpp.so similar to libLLVM.so. This is required when
    multiple versions of the library are loaded into the same
    process. (boo#1219405, boo#1221183, boo#1233220)

++++ llvm17:

  - Apply clang-shlib-symbol-versioning.patch to add symbol versions
    to libclang-cpp.so similar to libLLVM.so. This is required when
    multiple versions of the library are loaded into the same
    process. (boo#1219405, boo#1221183, boo#1233220)

++++ llvm18:

  - Apply clang-shlib-symbol-versioning.patch to add symbol versions
    to libclang-cpp.so similar to libLLVM.so. This is required when
    multiple versions of the library are loaded into the same
    process. (boo#1219405, boo#1221183, boo#1233220)

++++ cppreference-doc:

  - Update to version 20241110
    * Update content from the website.
    * Various build improvements.

++++ feedbackd:

  - Update to version 0.5.0
    + Detect haptic on Google Sargo and Oneplus Enchilada/Fachita
    + Handle "alert slider" on Oneplus Enchilada/Fachita

++++ forgejo:

  - update to 9.0.2:
    * it was possible to use a token sent via email for secondary email validation
    to reset the password instead. In other words, a token sent for a given
    action (registration, password reset or secondary email validation) could
    be used to perform a different action.
    * a fork of a public repository would show in the list of forks, even if its
    owner was not a public user or organization.
    * the members of an organization team with read access to a repository (e.g.
    to read issues) but no read access to the code could read the RSS or atom
    feeds which include the commit activity. Reading the RSS or atom feeds is
    now denied unless the team has read permissions on the code.
    * the tokens used when replying by email to issues or pull requests were
    weaker than the rfc2104 recommendations.
    * a registered user could modify the update frequency of any push mirror.
    * it was possible to use basic authorization (i.e. user:password) for requests
    to the API even when security keys were enrolled for a user.
    * some markup sanitation rules were not as strong as they could be.
    * when Forgejo is configured to enable instance wide search (e.g. with bleve),
    results found in the repositories of private or limited users were displayed
    to anonymous visitors.
    * fix: handle renamed dependency for cargo registry.
    * support www.github.com for migrations.
    * move forgot_password-link to fix login tab order.
    * code owners will not be mentioned when a pull request comes from a forked
    repository.
    * labels are missing in the pull request payload removing a label.
    * in a Forgejo Actions workflow, the unlabeled event type for pull requests
    was incorrectly mapped to the labeled event type.
    * when a Forgejo Actions issue or pull request workflow is triggered by an
    labeled or unlabeled event type, it misses information about the label added
    or removed. It is now available in the label data member of the event payload.
    * pull request workflow must always update the head SHA commit status.
    * fix git-grep for code search when git version is below 2.38.

++++ glassfish-transaction-api:

  - Add compatibility alias to javax.transaction:transaction-api

++++ gpu-screen-recorder:

  - Update to version 20241116:
    * Add support application audio recording

++++ gpu-screen-recorder-gtk:

  - Update to version 20241116:
    * Add support application audio recording

++++ hugin:

  - Remove hugin-deprecated-copy_option.patch -- Fixed upstream
  - Update to version 2024.0.0:
    * Added browser for project files to Hugin. It can show
    thumbnails or project details of all project files in a
    directory.
    * Create GPano tags also for cylindrical output projection.

++++ hyprlang:

  - Update to version 0.5.3:
    * new deps: hyprutils
    * core: properly handle unscoped keywords
    * core: don't populate linesContainingVar on dynamic requests
    * core: Move to hyprutils for util functions
    * core: handle scoped keywords if flags are not allowed
    * config.cpp: fix parsing invalid hex
    * Return an error on invalid hex values.
    * CMake: Use library aliases instead of library names

++++ hyprpaper:

  - Update to version 0.7.1:
    * New build dep: hyprwayland-scanner
    * hyprutils: required >=0.2.0
    * ipc: use XDG_RUNTIME_DIR if available
    * fractional: reload monitor on new fs scale notifs
    * core: migrate to hyprwayland-scanner
    * Fixed getconf command in build instructions
    * Add handler "reload" to do a change of wallpaper
    * Bitmap image support
    * config: produce error instead fs::exists exceptions
    * Config: use hyprutils helper
    * Fix desc: wallpaper priority

++++ kjs:

  - Replace %requires_eq usage with 'Requires'

++++ kpipewire:

  - Fix %requires_eq usage

++++ libqt5-qtdatavis3d:

  - Update libqt5-qtdatavis3d-imports requirements

++++ scamper:

  - update to version 20241112:
    * scamper:
    * check bound source address when attempting to reuse open sockets.
    * bind to the specified source address with for all udp6 sockets used
    with udp-sport ping method.
    * finalize task signatures for ping, trace, udpprobe, and dealias
    immediately before tasks begin probing to provide more ability for
    parallel measurements to the same destinations.
    * python module:
    * correct bugs in documentation
    * add to_json() to all measurement types where there's a scamper json
    rendering
    * libscamperfile:
    * fix memory leaks on malformed warts input
    * add scamper_*_tojson functions for dealias, host, ping, tbit, trace,
    tracelb, and udpprobe
    * move Makefile rules for libscamperfile from scamper/Makefile.am into
    lib/libscamperfile/Makefile.am
    * sc_speedtrap:
    * add -R /path/to/socket to enable speedtrap to use a remote scamper
    instance
    * add -v to emit version of scamper release the utility came from
    * update man page with documentation
    * configure:
    * add --disable-utils and --disable-libs options to configure, to control
    how much of the scamper package is actually built.
    * update to serial 37 of ax_python_devel.m4 and serial 8 of
    ax_gcc_builtin.m4

++++ memtest86+:

  - Update to 7.20
  - Add support for Loongson LA64 arch
  - Add support for latest Intel CPUs (ARL/MTL)
  - Add support for latest AMD CPUs (Zen5)
  - Preliminary support for NUMA
  - Bug fixes & optimizations

++++ mpv-mpris:

  - Fix package build failure due to mpv scripts directory not being
    owned by a package

++++ numbat:

  - Fix tests in specfile
  - Update vendored dependencies

++++ obs-service-cargo:

  - Update to version 4.2.2:
    * fix: add more info
    * fix: add warning
    * fix: ignore error when crate dependency does not exist for manifest path
    * update description
    * feat: update can now specify recursive or precise
    * fix: can now determine a member that uses a glob pattern
    * feat: add all target triples as no opt for cargo-fetch
    * docs(fix): if set to true
    * fix: correct error message for lockfiles
    * docs: replace underscore with dash

++++ pnpm:

  - update to version 9.13.2:
    * Detection of circular peer dependencies should not crash with
    aliased dependencies #8759. Fixes a regression introduced in
    the previous version.
    * Fix race condition of symlink creations caused by multiple
    parallel dlx processes.

++++ python-hypothesis:

  - Update to 6.119.1
  - This patch migrates some more internals (around generating
    novel inputs) to the IR layer (issue #3921).
  - Update to 6.119.0
  - This release improves Hypothesis’ handling of ExceptionGroup
  - it’s now able to detect marker detections if they’re inside
    a group and attempts to resolve them. Note that this handling
    is still a work in progress and might not handle edge cases
    optimally. Please open issues if you encounter any problems
    or unexpected behavior with it.
  - Update to 6.118.9
  - Internal refactorings in preparation for upcoming changes.
  - Update to 6.118.8
  - Internal renamings.
  - Update to 6.118.7
  - This patch removes some # type: ignore comments following a
    mypy update.
  - Update to 6.118.6
  - When Hypothesis replays examples from its test database that
    it knows were previously fully shrunk it will no longer try
    to shrink them again.
  - This should significantly speed up development workflows for
    slow tests, as the shrinking could contribute a significant
    delay when rerunning the tests.
  - In some rare cases this may cause minor reductions in example
    quality. This was considered an acceptable tradeoff for the
    improved test runtime.
  - Update to 6.118.5
  - This patch avoids computing some string representations we
    won’t need, giving a small speedup (part of issue #4139).
  - Update to 6.118.4
  - This patch migrates the optimisation algorithm for
    targeted property-based testing to our IR layer (issue
    [#3921]). This should result in moderately different (and
    hopefully improved) exploration behavior in tests which use
    hypothesis.target().
  - Update to 6.118.3
  - This patch adds more type hints to internal Hypothesis code.
  - Update to 6.118.2
  - This patch migrates the explain phase to our IR layer (issue
    [#3921]). This should improve both its speed and precision.
  - Update to 6.118.1
  - This patch updates some internals around how we determine an
    input is too large to finish generating.
  - Update to 6.118.0
  - The urls() strategy no longer generates URLs where the port
    number is 0.
  - This change is motivated by the idea that the generated URLs
    should, at least in theory, be possible to fetch. The port
    number 0 is special; if a server binds to port 0, the kernel
    will allocate an unused, and non-zero, port instead. That
    means that it’s not possible for a server to actually be
    listening on port 0. This motivation is briefly described in
    the documentation for urls().
  - Fixes issue #4157.
  - Thanks to @gmacon for this contribution!
  - Update to 6.117.0
  - This changes the behaviour of settings profiles so that
    if you reregister the currently loaded profile it will
    automatically reload it. Previously you would have had to
    load it again.
  - In particular this means that if you register a “ci” profile,
    it will automatically be used when Hypothesis detects you are
    running on CI.
  - Update to 6.116.0
  - Hypothesis now detects if it is running on a CI server and
    provides better default settings for running on CI in this
    case.
  - Update to 6.115.6
  - This patch changes the priority order of pretty printing
    logic so that a user provided pretty printing method will
    always be used in preference to e.g. printing it like a
    dataclass.
  - Update to 6.115.5
  - This patch restores diversity to the outputs of
    from_type(type) (issue #4144).
  - Update to 6.115.4
  - This release improves pretty printing of nested classes to
    include the outer class name in their printed representation.
  - Update to 6.115.3
  - This patch fixes a regression from version 6.115.2 where
    generating values from integers() with certain values for
    min_value and max_value would error.
  - Require numpy >= 2.

++++ runc:

  - Update to runc v1.2.2. Upstream changelog is available from
    <https://github.com/opencontainers/runc/releases/tag/v1.2.2>.

++++ upplay:

  - Update to 1.7.8:
    * Fix sticky playlist append mode (could not switch back to not append)
    * Other small fixes in playlist insertions
  - Update to 1.7.7:
    * Add options to save the playlist as Json or CSV
    * Other small fixes.
  - Update to 1.7.6:
    * Browser: add an album entry at the top when browsing an album or playlist
    container. Suppress the repeated listing of the album title for each track
    in this case
    * Browser: span cells to the right when no data follows
    * Browser: add "show metadata" popup entry
    * Browser: fix issues with middle-click with recent qwebenginepage versions
    * Browser: big improvement for loading big lists (multi-thousand) with webengine

------------------------------------------------------------------
------------------  2024-11-15  -  Nov 15 2024  -------------------
------------------------------------------------------------------

++++ MozillaFirefox:

  - Mozilla Firefox 132.0.2
    * Fixed possible errors when playing encrypted media content
    through some streaming providers. (bmo#1929491)
    * Added a mitigation to help reduce the frequency of duplicated
    push notifications reported by some users. (bmo#1928868)
    * Fixed hangs when printing from some sites when using the system
    print dialog. (bmo#1898184)
    * Fixed a crash which could occur when using Microsoft SSO on macOS
    (bmo#1929622)
    * Fixed a crash in the Network Monitor developer tool which could
    occur in some circumstances. (bmo#1924882)

++++ NetworkManager-vpnc:

  - Update to version 1.4.0:
    + Added support for configuring MTU.
    + Added support for more secure DH groups.
    + Added options to relax security for old insecure gateways.
    + Added support for Fortigate vendor-specific compatibility
    quirks.
    + Removed obsolete libm-glib support.
    + Updated translations.
  - Drop nm-vpnc-editor-interface-name.patch: Fixed upstream.

++++ agama-web-ui:

  - Stick product selection form actions to bottom
    (gh#agama-project/agama#1769).

++++ alsa:

  - Fix incorrect versioned symbol for snd_seq_has_queue_tempo_base:
    0001-src-Versions.in.in-Update-_tempo_base-name.patch

++++ apko:

  - Update to version 0.20.0:
    * Pass errors up the stack in CalculateWorld and InstallPackages
    (#1404)
    * build(deps): bump github/codeql-action from 3.27.2 to 3.27.4
    (#1403)
    * build(deps): bump go.step.sm/crypto from 0.54.0 to 0.54.2
    (#1402)
    * build(deps): bump golang.org/x/time from 0.7.0 to 0.8.0 (#1389)
    * build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0
    (#1390)
    * build(deps): bump github/codeql-action from 3.27.1 to 3.27.2
    (#1400)
    * build(deps): bump github/codeql-action from 3.27.0 to 3.27.1
    (#1395)
    * build(deps): bump go.opentelemetry.io/otel from 1.31.0 to
    1.32.0 (#1396)
    * build(deps): bump google.golang.org/api from 0.204.0 to 0.205.0
    (#1388)
    * build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0 (#1391)
    * Add support for extras in `build-cpio` (#1394)
    * build(deps): bump goreleaser/goreleaser-action from 6.0.0 to
    6.1.0 (#1392)
    * Record the `apko.json` file used to produce this image. (#1353)
    * docs(apk): document apkindex methods (#1393)

++++ bitwarden:

  - New upstream release 2024.11.0
    * Security update for generating passphrases
    * Enable email verification for account creation

++++ caffeine:

  - Initial packaging with version 2.9.3
    * last version of the 2.x series that are compatible with
    Java 8

++++ ccls:

  - Update to version 0.20241108.
    * Sort index requests. When you open A/B/foo.cc, files under
    "A/B/" and "A/" will be prioritized during the initial indexing
    process, leading to a quicker response time.
    * Support for LLVM versions <= 9 has been dropped.
    * LSP semantic tokens are now supported. See usage guide
    https://maskray.me/blog/2024-10-20-ccls-and-lsp-semantic-tokens
    usage (including rainbow semantic highlighting).
    * LSP extension textDocument/switchSourceHeader is now supported.
  - Drop unnecessary runtime dependency to llvm/clang metapackages.

++++ coredns:

  - Update to version 1.11.4:
    * forward plugin: new option next, to try alternate upstreams when receiving
    specified response codes upstreams on (functions like the external plugin
    alternate)
    * dnssec plugin: new option to load keys from AWS Secrets Manager
    * rewrite plugin: new option to revert EDNS0 option rewrites in responses

++++ dictd:

  - Update to 1.13.2:
  - Remove config.{sub,guess}
  - Update version to 1.13.2
  - Rename configure.in to configure.ac
  - dictP.h: remove #include <sys/time.h>
  - configure.in: fix obsolete code
  - Fix compilation issues with gcc-14
  - Update configure script and the like (autoconf-2.72)
  - Remove upstreamed patches:
  - gcc-14.patch
  - Add index-buf-ovrflw.patch to fix a buffer overflow in index.c
    (courtesy of the upstream author).

++++ fzf:

  - Update to 0.56.3:
    Fixes
    * fix(zsh): handle backtick trigger edge case
    * revert(zsh): remove 'fc -RI' call in the history widget

++++ libheif:

  - Fix build for Tumbleweed

++++ gh:

  - Update to version 2.62.0
    * CVE-2024-52308: remote code execution (RCE) when users connect
    to a malicious Codespace SSH server and use the gh codespace
    ssh or gh codespace logs commands
    (boo#1233387, GHSA-p2h2-3vg9-4p87)
    * Check extension for latest version when executed
    * Shorten extension release checking from 3s to 1s
  - includes changes from 2.61.0:
    * Enhance gh repo edit command to inform users about
    consequences of changing visibility and ensure users are
    intentional before making irreversible changes

++++ ghex:

  - Update to version 46.1:
    + main: fix GdkDisplay access before init.
    + Updated translations.

++++ glab:

  - Update to version 1.49.0:
    * chore: Restore markdownlint testing, disable rule MD029 for
    ol-prefix
    * fix(stacked-diffs): remove merged or closed MRs in sync
    * feat(test): Integration test for create issue with recover
    option
    * docs: Spacing, capitalization, and punctuation
    * fix(commands/cluster/agent/get_token): agentID is always 64 bit
    * feat(release): "release create --tag-message" flag
    * refactor: Remove package-level vars
    * fix(diff): return most recent diff version only
    * chore(deps): update module golang.org/x/oauth2 to v0.24.0
    * chore(deps): update module golang.org/x/crypto to v0.29.0
    * feat: list personal, project or group access tokens
    * chore(deps): update module github.com/xanzy/go-gitlab to
    v0.113.0
    * test: Adding checking of post body to http mocks
    * chore(license): Update LICENSE
    * docs: add flux bootstrap path note to agent bootstrap cmd
    * docs: ignore generated documentation when running
    markdownlint-cli2
    * fix: add more info to gitlab agent reconcile error
    * chore(deps): update module github.com/zalando/go-keyring to
    v0.2.6
    * chore(deps): update module k8s.io/client-go to v0.31.2
    * chore(deps): update module k8s.io/apimachinery to v0.31.2
    * feat: add environment format for variable export
    * feat(auth login): allow more non-interactive login options
    * feat(issues): add filter by iteration option to issue list
    * feat: rotate personal, project or group access tokens
    * fix: utilize api_host in config to avoid git subdomain issues
    * chore(deps): update module go.uber.org/mock to v0.5.0
    * feat(agent bootstrap): support specifying Agent Helm Chart
    values

++++ gnu-recutils:

  - Fix Factory build

++++ govc:

  - Update to version 0.46.1:
    * chore: Update version.go for v0.46.1
    * fix: vcsim: avoid possible panic when applying PropertyFilter
    * cns: Support encryption/re-encryption of volumes

++++ iperf:

  - Build with OpenSSL for key based authentication support

++++ jcache:

  - Upgrade to 1.1.1
    * Support for Java versions up to 11

++++ kernel-source-longterm:

  - Linux 6.6.61 (bsc#1218260).
  - vsock/virtio: Initialization of the dangling pointer occurring
    in vsk->trans (bsc#1218260).
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling
    pointer (bsc#1218260).
  - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
    (bsc#1218260).
  - ucounts: fix counter leak in inc_rlimit_get_ucounts()
    (bsc#1218260).
  - ocfs2: remove entry once instead of null-ptr-dereference in
    ocfs2_xa_remove() (bsc#1218260).
  - irqchip/gic-v3: Force propagation of the active state with a
    read-back (bsc#1218260).
  - USB: serial: option: add Quectel RG650V (bsc#1218260).
  - USB: serial: option: add Fibocom FG132 0x0112 composition
    (bsc#1218260).
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx
    (bsc#1218260).
  - USB: serial: io_edgeport: fix use after free in debug printk
    (bsc#1218260).
  - usb: typec: fix potential out of bounds in
    ucsi_ccg_update_set_new_cam_cmd() (bsc#1218260).
  - usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
    (bsc#1218260).
  - usb: dwc3: fix fault at system suspend if device was already
    runtime suspended (bsc#1218260).
  - usb: musb: sunxi: Fix accessing an released usb phy
    (bsc#1218260).
  - signal: restore the override_rlimit logic (bsc#1218260).
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
    (bsc#1218260).
  - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE
    is not set (bsc#1218260).
  - filemap: Fix bounds checking in filemap_read() (bsc#1218260).
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED
    in uvc_parse_format (bsc#1218260).
  - Revert "selftests/bpf: Implement get_hw_ring_size function to
    retrieve current and max interface size" (bsc#1218260).
  - Revert "wifi: mac80211: fix RCU list iterations" (bsc#1218260).
  - riscv/purgatory: align riscv_kernel_entry (bsc#1218260).
  - btrfs: reinitialize delayed ref list after deleting it from
    the list (bsc#1218260).
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard
    hint (bsc#1218260).
  - arm64: Kconfig: Make SME depend on BROKEN for now (bsc#1218260).
  - arm64/sve: Discard stale CPU state when handling SVE traps
    (bsc#1218260).
  - mptcp: use sock_kfree_s instead of kfree (bsc#1218260).
  - net: vertexcom: mse102x: Fix possible double free of TX skb
    (bsc#1218260).
  - net: wwan: t7xx: Fix off-by-one error in
    t7xx_dpmaif_rx_buf_alloc() (bsc#1218260).
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (bsc#1218260).
  - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
    (bsc#1218260).
  - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (bsc#1218260).
  - dm-unstriped: cast an operand to sector_t to prevent potential
    uint32_t overflow (bsc#1218260).
  - dm cache: fix potential out-of-bounds access on the first resume
    (bsc#1218260).
  - dm cache: optimize dirty bit checking with find_next_bit when
    resizing (bsc#1218260).
  - dm cache: fix out-of-bounds access to the dirty bitset when
    resizing (bsc#1218260).
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr
    error (bsc#1218260).
  - dm cache: correct the number of origin blocks to match the
    target length (bsc#1218260).
  - thermal/drivers/qcom/lmh: Remove false lockdep backtrace
    (bsc#1218260).
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not
    supported (bsc#1218260).
  - drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (bsc#1218260).
  - drm/amdgpu: Adjust debugfs register access permissions
    (bsc#1218260).
  - drm/amdgpu: add missing size check in
    amdgpu_debugfs_gprwave_read() (bsc#1218260).
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions
    (bsc#1218260).
  - rpmsg: glink: Handle rejected intent request better
    (bsc#1218260).
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode
    (bsc#1218260).
  - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
    (bsc#1218260).
  - ksmbd: Fix the missing xa_store error check (bsc#1218260).
  - ksmbd: check outstanding simultaneous SMB operations
    (bsc#1218260).
  - ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
    (bsc#1218260).
  - can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing
    configuration when switching CAN modes (bsc#1218260).
  - can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
    (bsc#1218260).
  - can: m_can: m_can_close(): don't call free_irq() for IRQ-less
    devices (bsc#1218260).
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
    (bsc#1218260).
  - media: v4l2-tpg: prevent the risk of a division by zero
    (bsc#1218260).
  - media: pulse8-cec: fix data timestamp at pulse8_setup()
    (bsc#1218260).
  - media: cx24116: prevent overflows on SNR calculus (bsc#1218260).
  - media: s5p-jpeg: prevent buffer overflows (bsc#1218260).
  - media: ar0521: don't overflow when checking PLL values
    (bsc#1218260).
  - ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
    (bsc#1218260).
  - ASoC: stm32: spdifrx: fix dma channel release in
    stm32_spdifrx_remove (bsc#1218260).
  - thermal/of: support thermal zones w/o trips subnode
    (bsc#1218260).
  - tools/lib/thermal: Fix sampling handler context ptr
    (bsc#1218260).
  - ALSA: firewire-lib: fix return value on fail in
    amdtp_tscm_init() (bsc#1218260).
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
    (bsc#1218260).
  - media: adv7604: prevent underflow condition when reporting
    colorspace (bsc#1218260).
  - media: dvb_frontend: don't play tricks with underflow values
    (bsc#1218260).
  - media: dvbdev: prevent the risk of out of memory access
    (bsc#1218260).
  - media: stb0899_algo: initialize cfr before using it
    (bsc#1218260).
  - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
    (bsc#1218260).
  - drivers: net: ionic: add missed debugfs cleanup to ionic_probe()
    error path (bsc#1218260).
  - rxrpc: Fix missing locking causing hanging calls (bsc#1218260).
  - net: arc: rockchip: fix emac mdio node support (bsc#1218260).
  - net: arc: fix the device for dma_map_single/dma_unmap_single
    (bsc#1218260).
  - virtio_net: Add hash_key_length check (bsc#1218260).
  - netfilter: nf_tables: wait for rcu grace period on net_device
    removal (bsc#1218260).
  - netfilter: nf_tables: pass nft_chain to destroy function,
    not nft_ctx (bsc#1218260).
  - netfilter: nf_tables: cleanup documentation (bsc#1218260).
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single
    irq case (bsc#1218260).
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (bsc#1218260).
  - net: hns3: fix kernel crash when uninstalling driver
    (bsc#1218260).
  - e1000e: Remove Meteor Lake SMBUS workarounds (bsc#1218260).
  - i40e: fix race condition by adding filter's intermediate sync
    state (bsc#1218260).
  - ice: change q_index variable type to s16 to store -1 value
    (bsc#1218260).
  - can: c_can: fix {rx,tx}_errors statistics (bsc#1218260).
  - net: enetc: allocate vf_state during PF probes (bsc#1218260).
  - sctp: properly validate chunk size in sctp_sf_ootb()
    (bsc#1218260).
  - dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property
    value (bsc#1218260).
  - net: enetc: set MAC address to the VF net_device (bsc#1218260).
  - regulator: rtq2208: Fix uninitialized use of regulator_config
    (bsc#1218260).
  - security/keys: fix slab-out-of-bounds in key_task_permission
    (bsc#1218260).
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping
    (bsc#1218260).
  - NFSv3: only use NFS timeout for MOUNT when protocols are
    compatible (bsc#1218260).
  - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (bsc#1218260).
  - platform/x86/amd/pmc: Detect when STB is not available
    (bsc#1218260).
  - HID: core: zero-initialize the report buffer (bsc#1218260).
  - arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
    (bsc#1218260).
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
    (bsc#1218260).
  - ARM: dts: rockchip: Fix the spi controller on rk3036
    (bsc#1218260).
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi
    (bsc#1218260).
  - ARM: dts: rockchip: fix rk3036 acodec node (bsc#1218260).
  - arm64: dts: rockchip: remove orphaned pinctrl-names from
    pinephone pro (bsc#1218260).
  - firmware: arm_scmi: Fix slab-use-after-free in
    scmi_bus_notifier() (bsc#1218260).
  - arm64: dts: imx8mp: correct sdhc ipg clk (bsc#1218260).
  - arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs (bsc#1218260).
  - arm64: dts: imx8qxp: Add VPU subsystem file (bsc#1218260).
  - arm64: dts: rockchip: remove num-slots property from
    rk3328-nanopi-r2s-plus (bsc#1218260).
  - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
    (bsc#1218260).
  - arm64: dts: rockchip: Remove #cooling-cells from fan on
    Theobroma lion (bsc#1218260).
  - arm64: dts: rockchip: Remove undocumented supports-emmc property
    (bsc#1218260).
  - arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
    (bsc#1218260).
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
    (bsc#1218260).
  - arm64: dts: rockchip: Fix bluetooth properties on rk3566 box
    demo (bsc#1218260).
  - arm64: dts: rockchip: fix i2c2 pinctrl-names property on
    anbernic-rg353p/v (bsc#1218260).
  - arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
    (bsc#1218260).
  - arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
    (bsc#1218260).
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
    (bsc#1218260).
  - arm64: dts: rockchip: Fix rt5651 compatible value on
    rk3399-sapphire-excavator (bsc#1218260).
  - arm64: dts: rockchip: Fix rt5651 compatible value on
    rk3399-eaidk-610 (bsc#1218260).
  - commit c617dad

++++ lasso:

  - Fix build issues
    * lasso-automake-1.17-support.patch
    * lasso-fix-implicit-declarations.patch
    * lasso-libxml2-2.12-support.patch

++++ pappl:

  - Update to release 1.4.8
    * Security fix: The web interface password didn't work properly
    * Now use the ``listen-hostname`` hostname as system hostname if
    a name is specified

++++ python313-core:

  - Allow building with default LLVM version 19: just replace the
    hard-coded LLVM_version in the scripts.

++++ python313-nogil-nogil-core:

  - Allow building with default LLVM version 19: just replace the
    hard-coded LLVM_version in the scripts.

++++ net-snmp:

  - logrotate should use reload instead of restart (bsc#1232030)

++++ libzypp:

  - The 20MB download limit must not apply to non-metadata files like
    package URLs provided via the CLI (bsc#1233393).
  - version 17.35.14 (35)

++++ linkerd-cli-edge:

  - Update to version 24.11.3:
    no CLI-related changes in changelog

++++ mcds:

  - Update to version 1.9
    * Fixing netrc usage.

++++ melange:

  - Update to version 0.15.8:
    * Create sub-package directories in WorkDir before building
    subpackage

++++ mesheryctl:

  - update to 0.7.151:
    * Meshery CLI
  - Generate cmd @Jougan-0 (#12146)
    * Documentation
  - Generate cmd @Jougan-0 (#12146)
  - fix formatting on meshery models contributing guide @Touriist
    (#12660)

++++ mrouted:

  - Update to version 4.5
    Fixes
    * Issue #56: ensure group timers are stopped when stopping
    interfaces
    * Issue #56: replace homegrown timer and socket handling with
    pev v2.0.
    * The existing timer implementation was too imprecise and
    jittered several seconds between query intervals.
    * Issue #64: fix compiler warnings when building with 64-bit
    `time_t` targeting 32-bit platforms (only affects logging and
    status output).
    * Fix `mroutectl show routes`, locally connected routes never
    expire.
    * Skip timeout of subordinates at startup.
    Changes
    * Check interface status and update internal state on more
    error codes instead of logging `sendto()` or `sendmsg()`
    failure.
    * Revert change in `TIMER_INTERVAL` from v4.0, update interval
    is now 5 seconds instead of 2.
    * Removed internal log rate limiter, demystifies behavior and
    greatly simplifies the code.
    * Log interface names with their assigned VIF number to ease
    debugging.
    * Speed up peering by sending route reports as soon as one-way
    peering has been established.
    * Updates to logging, clarifying source 0.0.0.0 of routes as
    "us", and add logging when adding and discarding groups to/from
    interfaces.
    * Use (S, G) format for all logging.
    * Silence bogus `Failed MRT_DEL_MFC` warnings for routes never
    added to the MRIB due to missing reverse path.

++++ msmtp:

  - stop requiring vim at runtime just for the syntax file

++++ neomutt:

  - Update to version 20241114:
  - Security
    * Fixed: CVE-2024-49393
    * Fixed: CVE-2024-49394
    * Read the protected Message-ID
  - Features
    * Allow toggling numeric configs, e.g. :toggle pager_index_lines
    * alias: tag/untag pattern
    * query: tag with <space>
  - Contrib
    * mutt_oauth2.py: Fix reference to client_secret
  - Bug Fixes
    * fix duplicate save-hook
    * expando: fix escaping
    * browser: fix enter-quit-enter
    * pager: fix repaint
    * config: warn about deprecated variables
    * Refresh alias/query dialog on alias/query format change
    * compose: fix redraw on attachment
    * compose: fix search with arrow_cursor
    * autocrypt: fix copy_normalize_addr()
    * alias: fix cli crash
    * expando: fix relative dates
    * expando: padding default to space
  - Translations
    * 100% German
    * 100% Turkish
    * 99% Czech
    * 99% Slovak
    * 82% French
  - Docs
    * drop refs to always-enabled features
    * fix typo in unmacro
    * fix broken link
    * ncrypt: fix typo in config.c
  - Code
    * Create memory alloc wrappers
    * Don't return the result of realpath() on failure
    * Fix memory leak in hcache
    * Lots of expando refactoring
    * fix type of PatternFlags.tag
    * tidy: smime_get_key_by_str()
  - Update to version 20241002:
  - Security
    * security: kill unnecessary blank lines
    * more security improvements
    * improve NeoMutt bailout handling
  - Features
    * remove mixmaster
    * honour umask in attach save
  - Bug Fixes
    * do not force username in addition to client certificate
    * Fix '%z' and '%Z in '%{...}' expando
    * Allow longer maildir filename suffixes
    * Don't force mbox stats calculations on startup
    * Fix sorting INBOX and its subfolders
    * Let ~Y match each tag individually
    * ignore macro events during autocrypt initialization
    * Generate the Message-ID earlier
    * compose: fix $compose_confirm_detach_first
  - Changed Config
    * set crypt_encryption_info = yes
    * Add an informative block with details about the encryption
    * set crypt_protected_headers_weed = no
    * Controls wether NeoMutt will weed protected header fields
    * set devel_security = no
    * Devel feature: Security
    * $mixmaster is deprecated
    * $mix_entry_format is deprecated
  - Translations
    * 100% German
    * 100% Lithuanian
    * 100% Serbian
    * 100% Spanish
    * 81% French
  - Docs
    * Fix configure script name in INSTALL.md
    * fix para ordering
  - Build
    * Update autosetup
    * Update acutest to the latest upstream commit
    * don't treat stddef.h specially
    * Add -std to CFLAGS too
    * require C11
    * Support BerkeleyDB 18.1
    * Assume 'struct timespec' exists
    * fix idn2 typo
  - Code
    * Close the hcache handle on failure to open the store
    * upgrade assert()
    * mutt/list.c: Use STAILQ_FOREACH_SAFE() in stailq deallocators
    * Use wmem*() functions with wide-character strings
    * ncrypt/crypt.c: Fix allocation size calculation
    * remove mutt_expand_path()
    * fix -Wdouble-promotion warnings
    * scanf: initialise out-vars
    * Allow opening the header cache in non-O_CREAT mode
    * Fix function pointer types
    * Check mutt_date_parse_date()s return value
    * Fix up slashes in imap_fix_path()
    * Fix padding with an empty string
    * tidy expando library
  - Remove --mixmaster configure flag, dropped by upstream

++++ octave-forge-financial:

  - Add financial-elem-by-elem-arithmetic.patch -- Arithmetic
    operations like `+` and `-` are now elem-by-elem by default and
    the corresponding `.+` and `.-` ops no longer exist.
  - Add fits-wrong-const.patch -- Object calling `fortran_vec()`
    must not be a const; fixes builds.
  - fuzzy-logic-toolkit-elem-by-elem-arithmetic.patch -- Element by
    element `+` and `-` operations no longer use `.` operations.

++++ picom:

  - Update to version 12.5:
    * Bug fixes
  - Fix assertion failure when running with some window managers (e.g. qtile) and no window is focused (#1384)
  - Update to version 12.4:
    * Improvements
  - Better workaround for a NVIDIA quirk, fix high CPU usage when
    screen is off (#1265)
  - Avoid using xrender convolution in all cases, should improve
    shadow performance for most users (#1349)
    * Bug fixes
  - Fix leak of saved window images
    * Build fixes
  - Fix build on arm32 (#1355)

++++ ppsspp:

  - ppsspp 1.18.1:
    * IR Interpreter: work on correctness and optimizations
    * Interpreted Vertex Decoder optimizations
    * SDL fixes
    * Improve performance of CHD loading
    * Many crash, hang and performance fixes around the UI
    New post proc filter "Sharp bilinear"
    * 3 new themes
    * Install save games from ZIP file
    * More input-mappable actions like Reset, allow mapping Alt key
    * Fix regression of the AxisSwap feature
    * Many emulation fixes
    * Multiple rendering fixes
    * VR: New immersive mode

++++ prelude-lml:

  - Remove BuildRequires on gamin, it's being removed.

++++ pyenv:

  - Update 2.4.17
    * Add miniconda3-24.9.2-0 by @binbjz in #3096
    * Add Anaconda3-2024.10-1 by @binbjz in #3097
  - Update 2.4.16
    * Add GraalPy 24.1.1 by @msimacek in #3092
    * Add CPython 3.14.0a1 by @edgarrmondragon in #3093
  - Update 2.4.15
    * CI: replace set-output with GITHUB_OUTPUT by @tuzi3040 in #3079
    * Make uninstall yes/no prompt consistent with others by @dpoznik in #3080
    * Add CPython 3.13.0 by @edgarrmondragon in #3081
    * Avoid shadowing of virtualenvs with the name starting with "python-" by @aarbouin in #3086
    * Support free-threaded CPython flavor in prefix resolution by @native-api in #3090

++++ python-pymisp:

  - update to version 2.5.1:
  - New
  - Onion-address type. [Raphaël Vinot]
  - Changes
  - Bump changelog. [Raphaël Vinot]
  - Bump objects. [Raphaël Vinot]
  - Bump version. [Raphaël Vinot]
  - Bump deps. [Raphaël Vinot]
  - Fix
  - Skip trying to install doc in python 3.9. [Raphaël Vinot]
  - update to version 2.5.0:
  - Changes
  - Bump changelog. [Raphaël Vinot]
  - Bump deps. [Raphaël Vinot]
  - Bump deps. [Raphaël Vinot]
  - [tests] misp_instance_version_master now uses the 2.5 branch.
    [iglocska]
  - Fix
  - Make mypy happy. [Raphaël Vinot]
  - update to version 2.4.198:
  - Changes
  - Re-Bump changelog. [Raphaël Vinot]
  - Bump changelog. [Raphaël Vinot]
  - Bump deps, version. [Raphaël Vinot]
  - Bump deps. [Raphaël Vinot]
  - Only include the changelog in the sdist package. [Raphaël Vinot]
    Related #1295
  - [data] describeTypes.json updated. [Alexandre Dulaunoy]
  - Other
  - Openioc.py is not a script, but had exec bit. [Sebastian Wagner]
    the file openioc can only be used as module and as part of a package,
    has no instructions for direct execution and is therefor not a script
    for direct execution
    this removes the executable bit from the file

++++ python-Flask-SQLAlchemy:

  - temporarily disable tests that are broken with SLQAlchemy 2.0.36
    * https://github.com/pallets-eco/flask-sqlalchemy/issues/1378

++++ python-h5py:

  - Update to 3.12.1
    [#]# Breaking changes
    * Support for Python 3.8 was dropped (PR 2471). Python 3.9 or
    newer is required to build or install h5py 3.12.
    * The minimum supported version of HDF5 was increased to 1.10.6
    (PR 2486). If you need h5py on HDF5 1.10.4 or .5, please use
    h5py 3.11.
    * The fill time for chunked storage was previously set to
    h5d.FILL_TIME_ALLOC. Now this the default comes from HDF5,
    which uses h5d.FILL_TIME_IFSET (equivalent to
    fill_time='ifset') (PR 2463). Please use fill_time='alloc' if
    the change is a problem for you.
    [#]# Exposing HDF5 functions
    * Expose fill time option in dataset creation property list via
    the fill_time parameter in create_dataset() (PR 2463).
    [#]# Bug fixes
    * Fix an error where native float16 support is not available (PR
    2422).
    * Fixed values of H5F_close_degree_t enum (PR 2433).
    * External links are now accessed with libhdf5’s default access
    properties (PR 2433).
    * Fix the iteration order for the root group in a file with
    creation order tracked (PR 2410).
    * Fixed some deprecation warnings from NumPy (PR 2416).
    [#]# Building h5py
    * Require a newer version of mpi4py for Python 3.12 (PR 2418).
    * The test suite is now configured to fail on unexpected warnings
    (PR 2428).
    * The generated Cython wrapper code (defs.* & _hdf5.pxd) is now
    specific to the version of HDF5 it’s building for. If the
    version of HDF5 has changed, api_gen.py should be run
    automatically to recreate this (PR 2479, PR 2480).
    * Various PRs modernising & cleaning up old Cython code, see the
    3.12 milestone on Github for details.
  - Don't %requires_eq libhdf5{%?my_suffix}: not a package but a
    capability of e.g. libhdf5-200 -- boo#1196682

++++ python-h5py-openmpi4:

  - Update to 3.12.1
    [#]# Breaking changes
    * Support for Python 3.8 was dropped (PR 2471). Python 3.9 or
    newer is required to build or install h5py 3.12.
    * The minimum supported version of HDF5 was increased to 1.10.6
    (PR 2486). If you need h5py on HDF5 1.10.4 or .5, please use
    h5py 3.11.
    * The fill time for chunked storage was previously set to
    h5d.FILL_TIME_ALLOC. Now this the default comes from HDF5,
    which uses h5d.FILL_TIME_IFSET (equivalent to
    fill_time='ifset') (PR 2463). Please use fill_time='alloc' if
    the change is a problem for you.
    [#]# Exposing HDF5 functions
    * Expose fill time option in dataset creation property list via
    the fill_time parameter in create_dataset() (PR 2463).
    [#]# Bug fixes
    * Fix an error where native float16 support is not available (PR
    2422).
    * Fixed values of H5F_close_degree_t enum (PR 2433).
    * External links are now accessed with libhdf5’s default access
    properties (PR 2433).
    * Fix the iteration order for the root group in a file with
    creation order tracked (PR 2410).
    * Fixed some deprecation warnings from NumPy (PR 2416).
    [#]# Building h5py
    * Require a newer version of mpi4py for Python 3.12 (PR 2418).
    * The test suite is now configured to fail on unexpected warnings
    (PR 2428).
    * The generated Cython wrapper code (defs.* & _hdf5.pxd) is now
    specific to the version of HDF5 it’s building for. If the
    version of HDF5 has changed, api_gen.py should be run
    automatically to recreate this (PR 2479, PR 2480).
    * Various PRs modernising & cleaning up old Cython code, see the
    3.12 milestone on Github for details.
  - Don't %requires_eq libhdf5{%?my_suffix}: not a package but a
    capability of e.g. libhdf5-200 -- boo#1196682

++++ python-multipart:

  - Initial release of 1.1.0.

++++ python-ndindex:

  - Update to 1.9.2
    * Fixes an issue with pickle and deepcopy serialization introduced
    in ndindex 1.9.
  - Update to 1.9.1
    * This version is identical to 1.9, but includes some fixes to the
    release scripts to ensure that wheels are properly uploaded to PyPI.
  - Update to 1.9.0
    * ndindex now uses a C extension (using Cython). Currently the
    constructors for {class}~.Slice and {class}~.Tuple have been Cythonized,
    meaning constructing and using those classes is now much faster. In the
    future, additional parts of ndindex will be Cythonized as performance
    needs dictate. This does not have any user-facing changes to
    functionality.
    * Python 3.8 is no longer supported.
    * The documentation now includes a documentation guide for all NumPy
    index types, extending the previous guide for slices. The slices
    guide has also been improved and now has diagrams built using
    HTML/CSS instead of MathJAX.
    * Some fixes to incorrect usage of __slots__.
    * Raise an exception earlier for invalid index in
    {any}ChunkSize.num_subchunks().
    * The CYTHONIZE_NDINDEX environment variable for building has been
    removed, as Cython support is now required.
    * Fix a compatibility issue with NumPy 2.0.
    * {func}~.normalize_skip_axes will now raise AxisError before
    ValueError for non-unique axes.
    * Keep track of when a Slice has been reduced (with no shape) to
    avoid recomputing it.
    * Various improvements in the tests.

++++ python-phonenumbers:

  - Update to 8.13.49
    * Merge upstream 8.13.49 phonenumber updates

++++ python-pkginfo:

  - Update to 1.11.2
    * Swap order of zip/tarball checks to work around archives which fool
    'zipfile.is_zipfile'.  LP #2084140.

++++ python-pre-commit:

  - spec file changes:
    * Specify a Group tag for recent Leap and SUSE Linux Enterprise
    * Disable Perl install test as that requires network for
    CPAN initialisation also on SUSE Linux Enterprise 15 SP7

++++ python-proton-vpn-killswitch-network-manager:

  - python-proton-vpn-logger is included in python-proton-vpn-api-core

++++ python-pyemd:

  - Pin numpy < 2.1: Produces wrong results -- gh#wmayner/pyemd#68
  - Excludes sources befor build: Make dist-info consistent

++++ python-pynetbox:

  - Update to 7.4.1
    * Updated requests and urllib3 python libraries due to
    security vulnerabilities

++++ python-pyquery:

  - Update to 2.0.1
    * Breaking change: its seems no longer possible to use the
    html parser with a xml file so its no longer tested
    * Drop support for python 3.7
  - Refresh make_webtest_optional.patch

++++ python-python-json-logger:

  - Add patch support-python313.patch:
    * Support time.time_ns changes in Python 3.13+.

++++ python-pywbemtools:

  - Update to 1.3.0
    [#]# Incompatible changes:
    * Dropped support for Python 3.5 (issue #1308)
    * Installation of this package using “setup.py” is no longer supported. Use “pip” instead.
    * Update to pywbemtools version 1.3.0 requires pywbem version >=
    1.7.2 which allows urllib3 version >= 2.0. This may result in
    issues with SSL because urllib3 may require support of TLS
    protocol version >= 1.2 possibly resulting in exceptions such
    as the following:
    SSLError(1, ‘[SSL: UNSUPPORTED_PROTOCOL] unsupported protocol …) or
    NotOpenSSLWarning: urllib3 v2.0 only supports OpenSSL 1.1.1+
    * See pywbem troubleshooting documentation. for help resolving such issues.
    [#]# Bug fixes:
    * Increased pywbem to 1.7.2 to pick up fixes. (issue #1304)
    * Addressed safety issues up to 2024-03-25.
    * Fixed coveralls issues with KeyError and HTTP 422 Unprocessable
    Entity.
    * Disallow the use of the click_repl version 3.0 because it
    cannot process general options and causes a significant number
    of CLI tests to fail. (issue #1312)
    * Circumvented the removal of Python 2.7 from the Github Actions
    plugin setup-python, by using the Docker container
    python:2.7.18-buster instead.
    * Fixed issue with PyYAML 5.4 installation on Python>=3.10 that
    fails since the recent release of Cython 3.
    * Correct issue in tab completion for –name argument and option
    where nvalid co:nnection file could cause exception. Changes
    messages issued for error to warning. This eliminates most
    tests of pywbemlistener but only with Python 2.7 and that
    version of Python is deprecated (see issue #1316)
    * Test: Circumvented a pip-check-reqs issue by excluding its
    version 2.5.0.
    * Test: cicumvented a test failure with pywbmlistener and python
    2.7 by disabling a significant number of pywbemlistener tests
    for python 2.7 and modifying the packages to use subprocess32
    in place of subprocess with python 2.7 in case any tests fail.
    (see issue #1327)
    * Development: Fixed dependency issue with safety 3.0.0 by
    pinning it.
    * Test: Upgraded GitHub Actions plugins to use node.js 20.
    * Test: Fixed issues resulting from removal of support for
    pytest.warns(None) in pytest version 8.
    * Test: Fixed invocation of pipdeptree in test workflow to use
    python -m.
    * Fixed pywbemtools install tests to perform the import test in a
    directory where it does not import from the repo main
    directory. Removed the temporary disablement of the install
    tests that was put in place during development of pywbem 1.2.0.
    [#]# Enhancements:
    * Added support for Python 3.12.
    * Extend tab completion to include connection show, connection
    delete, connection save. (see issue # 1315)
    * Changed version of OpenPegasus-wbemserver container for end2end
    tests from version 0.1.2 to 0.1.3. This version corrects
    OpenPegasus issues in requesting test indications from the wbem
    server and uses OpenPegasus 2.14.4 or greater. This change will
    allow end2end indication testing.
    * Fix issue where localhost was always assigned as the
    pywbemlistener bind address. This limited the listener to only
    receiving indications from the same system as the listener
    itself and only on the local network interface. This change was
    part of extending the options to allow the user to define the
    bind address as part of the start and run commands. (see issue
    [#1296])
    * Add pywbemlistener run/start command option –bind-addr to allow
    the user to define a bind address to a listener. This replaces
    the use of the ixed bind-address of localhost. This also
    changes the default bind address to allow receiving indications
    on any local system network interrface and not testing for the
    indication destination IP address. (see issue #1296)
    * Add an option to pywbemlistener to allow testing with a
    listener on a different address/system than the system where
    pywbemlistener test is being executed. This will allow testing
    across multiple systems.
    * Split safety run out of “check” make target ino a separate
    “safety” make target and moved its run to the end of the test
    workflow.
    * Split safety runs into an ‘install’ and an ‘all’ run. The
    install run uses a new minimum-constraints-install.txt file
    that contains just the direct and indirect install dependencies
    and must suceed. The ‘all’ run uses the minimum-constraints.txt
    file which includes the minimum-constraints-install.txt file
    and that run may fail. This reduces the burden of fixing safety
    issues that affect only development packages.
    * Dev: Improved release procedure by generalizing the stable
    branch name in the test workflow which allowed removing the
    step to update it.
    * Added support for running ‘ruff’, a new lint tool.
    * Indroduces a troubleshooting section to the pywbemtools
    documentation.
    * Dev: Pinned coverage to <7.0 to speed up installation of
    development environment. coveralls 3.3 also pins coverage to
    <7.0, so that is not a unique restriction of pywbem.
    [#]# Cleanup:
    * Change to used safety-policy-file .safety-policy-yml to keep
    the safety issue ignore list in place of the list in the
    Makefile.
    * Add several new safety ignore entries into .safety-policy.yml
    from the new issues that were added to list May 2023.
    * Clean up several documentation syntax issues in the pywbemcli
    documentation.
    * New safety issue(GitPython) Sept 2023, check-reqs issue
    ruamel-yaml.
    * Changed the format of the README and README_PYPI files from RST
    to Markdown, to address formatting issues with badges on the
    Github site (issue #1376).
  - Redo requirements

++++ python-redfish:

  - Update to version 3.2.6
    * Added workaround for services incorrectly responding with 401
    when accessing the service root.

++++ python-requests-cache:

  - Add missing runtime dependency

++++ python-rq-scheduler:

  - Update to 1.14
    * Support for RQ 2.0. Thanks @selwin!
  - Drop rq-compat-removal.patch (rq-compat not in upstream anymore)

++++ python-scikit-image:

  - Fix tests
    * Avoid random test collection order for np types
    gh#pytest-dev/pytest-xdist#432
    * Disable dask test gh#scikit-image/scikit-image#7491

++++ python-unyt:

  - Add unyt-pr512-np2.1.patch for compatibility with numpy 2.1
    gh#yt-project/unyt#512

++++ python-wadllib:

  - Update to 2.0.0:
    * Drop support for Python < 3.8.
    * legacy-cgi is only a test dependency. Make it an optional dependency.
    * Add support for Python 3.11-3.13.
    * Add support for Python 3.9 and 3.10.
  - Switch to pyproject macros.
  - No more greedy globs in %files.

++++ python-wheel:

  - Update to 0.45.0
    * Refactored the ``convert`` command to not need setuptools to be installed
    * Don't configure setuptools logging unless running ``bdist_wheel``
    * Added a redirection from ``wheel.bdist_wheel.bdist_wheel`` to
    ``setuptools.command.bdist_wheel.bdist_wheel`` to improve compatibility with
    ``setuptools``' latest fixes.

++++ python-xmlschema:

  - Update to 3.4.3
    * Fix incorrect validation error for substitution group with
    abstract head (issue #417)
    * Refactor XSD identities processing using also typed XPath
    2.0+ for getting values (issue #418)
    * Clean tag retrieval during encode for some converter types
    (Abdera, BadgerFish and GData)

++++ python-ytmusicapi:

  - Update to 1.8.2
    * fix(playlists): handle missing regex group in trackCount
    * create_playlist: raise error when invalid characters are pa…
    * upload_song: add error when file exceeds limit of 300MB
    * refactor: use pathlib
    * search: fix missing artists when filtering songs/videos
    * search: fix missing playlistId for album results while authenticated
    * attempt to find runs in subtitle if not in title

++++ python-zope.exceptions:

  - Update to 5.2
    * Drop support for Python 3.7.
    * Add support for Python 3.13.

++++ python313:

  - Allow building with default LLVM version 19: just replace the
    hard-coded LLVM_version in the scripts.

++++ python313-documentation:

  - Allow building with default LLVM version 19: just replace the
    hard-coded LLVM_version in the scripts.

++++ python313-nogil:

  - Allow building with default LLVM version 19: just replace the
    hard-coded LLVM_version in the scripts.

++++ rclone:

  - Update to version 1.68.2:
    * Version v1.68.2
    * s3: fix multitenant multipart uploads with CEPH
    * local: fix permission and ownership on symlinks with --links and --metadata
    CVE-2024-52522 boo#1233422
    * bisync: fix output capture restoring the wrong output for logrus
    * build: fix comments after golangci-lint upgrade
    * build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1
    * pikpak: fix fatal crash on startup with token that can't be refreshed
    * serve s3: fix excess locking which was making serve s3 single threaded
    * onedrive: fix Retry-After handling to look at 503 errors also
    * s3: Storj provider: fix server-side copy of files bigger than 5GB
    * docs: mention that inline comments are not supported in a filter-file
    * docs: fix forward refs in step 9 of using your own client id
    * docs: fix Scaleway Glacier website URL
    * dlna: fix loggingResponseWriter disregarding log level
    * s3: fix crash when using --s3-download-url after migration to SDKv2
    * docs: update overview to show pcloud can set modtime
    * Add RcloneView as a sponsor
    * accounting: fix wrong message on SIGUSR2 to enable/disable bwlimit
    * pikpak: fix cid/gcid calculations for fs.OverrideRemote
    * local: fix --copy-links on macOS when cloning
    * Start v1.68.2-DEV development
  - drop CVE-2024-51744.patch

++++ rpmlint:

  - Update to version 2.6.1+git20241115.da2ed92:
    * polkit-rules-whitelist: adjust package name for sssd (bsc#1230051)
    * SpecCheck: Update suse-update-desktop-file-deprecated message
    * FilesCheck: Do not error about non-readable %ghost
    * test: Mocking TagsCheck binaries
    * CI: exclude test/files from pyupgrade
    * test: exclude test files from ruff check
    * test: Fix flake8 issues
    * flake8: Skip test files from flake8
    * test: Move doc pacakges to mock
    * test: Normalize mock_zypp_syntax
    * test: Normalize mock_xinetd
    * test: Normalize mock_tmp_files
    * test: Normalize mock_sysvinitonsystemd
    * test: Normalize mock_shlib_policy
    * test: Normalize mock_pkgconfig
    * test: Normalize mock_pam_modules
    * test: Normalize mock_mixed_ownership
    * test: Normalize mock_menuxdg
    * test: Normalize mock_LSB
    * test: Remove not needed mock_lib_dependency.py
    * test: Normalize mock_icon_sizes
    * test: Normalize mock_i18n
    * test: Normalize mock_files
    * test: Normalize mock_FHS
    * test: Normalize mock_erlang.py
    * test: Normalize mock_dbus_policy.py
    * test: Replace logrotate rpm with mock
    * test: Normalize mock_config_files
    * test: Normalize mock_build_root
    * test: Normalize mock_build_date
    * test: Normalize mock_bashisms
    * test: Normalize mock_appdata
    * test: Use skipif instead of early return in test_extract_fail
    * Remove fPing binary not needed anymore

++++ rpmlint-strict:

  - Update to version 2.6.1+git20241115.da2ed92:
    * polkit-rules-whitelist: adjust package name for sssd (bsc#1230051)
    * SpecCheck: Update suse-update-desktop-file-deprecated message
    * FilesCheck: Do not error about non-readable %ghost
    * test: Mocking TagsCheck binaries
    * CI: exclude test/files from pyupgrade
    * test: exclude test files from ruff check
    * test: Fix flake8 issues
    * flake8: Skip test files from flake8
    * test: Move doc pacakges to mock
    * test: Normalize mock_zypp_syntax
    * test: Normalize mock_xinetd
    * test: Normalize mock_tmp_files
    * test: Normalize mock_sysvinitonsystemd
    * test: Normalize mock_shlib_policy
    * test: Normalize mock_pkgconfig
    * test: Normalize mock_pam_modules
    * test: Normalize mock_mixed_ownership
    * test: Normalize mock_menuxdg
    * test: Normalize mock_LSB
    * test: Remove not needed mock_lib_dependency.py
    * test: Normalize mock_icon_sizes
    * test: Normalize mock_i18n
    * test: Normalize mock_files
    * test: Normalize mock_FHS
    * test: Normalize mock_erlang.py
    * test: Normalize mock_dbus_policy.py
    * test: Replace logrotate rpm with mock
    * test: Normalize mock_config_files
    * test: Normalize mock_build_root
    * test: Normalize mock_build_date
    * test: Normalize mock_bashisms
    * test: Normalize mock_appdata
    * test: Use skipif instead of early return in test_extract_fail
    * Remove fPing binary not needed anymore

++++ rpmlint-test:

  - Update to version 2.6.1+git20241115.da2ed92:
    * polkit-rules-whitelist: adjust package name for sssd (bsc#1230051)
    * SpecCheck: Update suse-update-desktop-file-deprecated message
    * FilesCheck: Do not error about non-readable %ghost
    * test: Mocking TagsCheck binaries
    * CI: exclude test/files from pyupgrade
    * test: exclude test files from ruff check
    * test: Fix flake8 issues
    * flake8: Skip test files from flake8
    * test: Move doc pacakges to mock
    * test: Normalize mock_zypp_syntax
    * test: Normalize mock_xinetd
    * test: Normalize mock_tmp_files
    * test: Normalize mock_sysvinitonsystemd
    * test: Normalize mock_shlib_policy
    * test: Normalize mock_pkgconfig
    * test: Normalize mock_pam_modules
    * test: Normalize mock_mixed_ownership
    * test: Normalize mock_menuxdg
    * test: Normalize mock_LSB
    * test: Remove not needed mock_lib_dependency.py
    * test: Normalize mock_icon_sizes
    * test: Normalize mock_i18n
    * test: Normalize mock_files
    * test: Normalize mock_FHS
    * test: Normalize mock_erlang.py
    * test: Normalize mock_dbus_policy.py
    * test: Replace logrotate rpm with mock
    * test: Normalize mock_config_files
    * test: Normalize mock_build_root
    * test: Normalize mock_build_date
    * test: Normalize mock_bashisms
    * test: Normalize mock_appdata
    * test: Use skipif instead of early return in test_extract_fail
    * Remove fPing binary not needed anymore

++++ rubygem-rackup:

  - First package version 2.2.1

++++ scrub:

  - scrub-fix-build.patch: fix build with gcc14.

++++ talhelper:

  - Update to version 3.0.10:
    * chore(schema): update talconfig.yaml JSON schema (#709)
    * chore(container): update goreleaser/goreleaser docker tag to
    v2.4.5
    * feat(genconfig): support templating node labels and annotations
    * docs: update CLI reference documentation (#706)
    * chore(deps): update dependency siderolabs/talos to v1.8.3
    * chore(container): update ghcr.io/siderolabs/talosctl docker tag
    to v1.8.3
    * chore(schema): update talos-extensions.yaml JSON schema (#705)
    * fix(deps): update module github.com/budimanjojo/talhelper/v3 to
    v3.0.9
    * chore(schema): update talos-extensions.yaml JSON schema (#702)
    * chore(container): update alpine:3.20.3 docker digest to 1e42bbe
    * feat: update Scoop for talhelper version v3.0.9
    * feat: update flake

++++ xf86-video-amdgpu:

  - U_Fix-segfault-on-dock-suspend-unplug-resume.patch,
    U_Free-output_ids.patch
    * Fix random segfaults when for example suspending.
    glfo#xorg/driver/xf86-video-amdgpu#70 glfo#drm/amd#2375

------------------------------------------------------------------
------------------  2024-11-14  -  Nov 14 2024  -------------------
------------------------------------------------------------------

++++ webkit2gtk3-soup2:

  - Add 63f7badbada070ebaadd318b2801818ecf7e7ea0.patch: Fix build
    using ICU 76.1.

++++ webkit2gtk3:

  - Add 63f7badbada070ebaadd318b2801818ecf7e7ea0.patch: Fix build
    using ICU 76.1.

++++ webkit2gtk4:

  - Add 63f7badbada070ebaadd318b2801818ecf7e7ea0.patch: Fix build
    using ICU 76.1.

++++ agama:

  - Get some wireless settings as optional in order to not break the
    connections reader (gh#agama-project/agama#1753).

++++ agama-web-ui:

  - Fix wireless authentication initialization and
    invalidate the cached query in case of connected
    (gh#agama-project/agama#1753).

++++ agama-yast:

  - Storage: fixed bug when existing partitions were searched at the
    config but not deleted or resized (gh#agama-project/agama#1767).
  - Storage: honor the candidate devices from DiskAnalyzer when
    matching drives (gh#agama-project/agama#1765).

++++ alsa-utils:

  - Fix alsactl restore error (bsc#1233353):
    0001-alsactl-90-alsa-restore.rules-fix-alsa_restore_go-st.patch

++++ ansible:

  - update to 10.6.0:
    Ansible 10.6.0 includes ansible-core 2.17.6 as well as a curated
    set of Ansible collections that provide a vast number of modules
    and plugins.
    Collections which have opted-in to being a part of the Ansible 10
    unified changelog will have an entry on this page:
    https://github.com/ansible-community/ansible-build-data/blob/main/10/CHANGELOG-v10.rst

++++ ansible-9:

  - update to 9.12.0:
    Ansible 9.12.0 includes ansible-core 2.16.13 as well as a curated
    set of Ansible collections that provide a vast number of modules
    and plugins.
    Collections which have opted-in to being a part of the Ansible 9
    unified changelog will have an entry on this page:
    https://github.com/ansible-community/ansible-build-data/blob/main/9/CHANGELOG-v9.rst

++++ ansible-core-2.16:

  - update to 2.16.13:
    https://github.com/ansible/ansible/blob/v2.16.13/changelogs/CHANGELOG-v2.16.rst
    * Minor Changes
  - ansible-test - Improve container runtime probe error
    handling. When unexpected probe output is encountered, an
    error with more useful debugging information is provided.
    * Security Fixes
  - include_vars action - Ensure that result masking is correctly
    requested when vault-encrypted files are read.
    (CVE-2024-8775)
  - task result processing - Ensure that action-sourced result
    masking (_ansible_no_log=True) is preserved. (CVE-2024-8775)
  - user action won't allow ssh-keygen, chown and chmod to run on
    existing ssh public key file, avoiding traversal on existing
    symlinks (CVE-2024-9902).
    * Bugfixes
  - Improve performance on large inventories by reducing the
    number of implicit meta tasks.
  - ansible-test - Enable the sys.unraisablehook work-around for
    the pylint sanity test on Python 3.11. Previously the
    work-around was only enabled for Python 3.12 and later.
    However, the same issue has been discovered on Python 3.11.

++++ ansible-core:

  - update to 2.17.6:
    https://github.com/ansible/ansible/blob/v2.17.6/changelogs/CHANGELOG-v2.17.rst
    * Minor Changes
  - ansible-test - Improve container runtime probe error
    handling. When unexpected probe output is encountered, an
    error with more useful debugging information is provided.
    * Security Fixes
  - include_vars action - Ensure that result masking is correctly
    requested when vault-encrypted files are read.
    (CVE-2024-8775)
  - task result processing - Ensure that action-sourced result
    masking (_ansible_no_log=True) is preserved. (CVE-2024-8775)
  - user action won't allow ssh-keygen, chown and chmod to run on
    existing ssh public key file, avoiding traversal on existing
    symlinks (CVE-2024-9902).
    * Bugfixes
  - Fix disabling SSL verification when installing collections
    and roles from git repositories. If --ignore-certs isn't
    provided, the value for the GALAXY_IGNORE_CERTS configuration
    option will be used (#83326).
  - Improve performance on large inventories by reducing the
    number of implicit meta tasks.
  - Use the requested error message in the
    ansible.module_utils.facts.timeout timeout function instead
    of hardcoding one.
  - ansible-test - Enable the sys.unraisablehook work-around for
    the pylint sanity test on Python 3.11. Previously the
    work-around was only enabled for Python 3.12 and later.
    However, the same issue has been discovered on Python 3.11.
  - debconf - set empty password values (#83214).
  - facts - skip if distribution file path is directory, instead
    of raising error (#84006).
  - user action will now require O(force) to overwrite the public
    part of an ssh key when generating ssh keys, as was already
    the case for the private part.
  - user module now avoids changing ownership of files symlinked
    in provided home dir skeleton

++++ ansible-documentation:

  - Update to version 2.17.6:
    * Update module default groups documentation (#1893) (#2073)
    * fix: correct typos (#2062) (#2070)
    * nox pip-compile: temporarily pin pip version (#2085) (#2087)
    * Add details of interactions between notifications and loops
    (#597) (#2066)
    * Remove ansible-test sanity from local module development
    (#2034) (#2060)
    * add example of extending ansible_facts (#2040) (#2054)
    * Add rules on moving content to collections outside of Ansible
    (#1971) (#2051)
    * make survey more prominent (#2037) (#2045)
    * Bump wntrblm/nox from 2024.04.15 to 2024.10.09 (#2006) (#2042)
    * fix network_best_practices_2.5.rst (#2036) (#2038)
    * docs typo, missing a space (#2004) (#2030)
    * use standard indentation (#2005) (#2027)
    * Tagging nuance (#1900) (#2020)
    * keep lockfiles in sync for stable-2.17 (#2023)
    * Update docs build to support the new antsibull-docs 2.15.0
    features (#2001) (#2017)
    * Add ecosystem_project_resources.rst document (#2007) (#2010)
    * [stable-2.17] support pip-compile check mode and remove
    pip-compile workflows from stable branch (#1947)
    * Upgrade antsibull-docs to 2.15.0 and antsibull-core to 3.3.0.
    (#1994) (#2002)
    * [PR #1996/d6984678 backport][stable-2.17] update docs team info
    page (#1998)
    * Add porting guide for Ansible 10.5.0. (#1987) (#1991)
    * Add porting guide for Ansible 9.11.0. (#1988) (#1990)
    * Update playbooks_error_handling.rst (#1982) (#1985)

++++ aws-c-common:

  - Update to version 0.10.3
    * Switch c compiler check to different cmake variable
    by @DmitriyMusatkin in (#1169)
  - from version 0.10.2
    * Disable visibility hidden on old gcc by @DmitriyMusatkin in (#1167)
  - from version 0.10.1
    * chore: Modified bug issue template to add checkbox to report
    potential regression. by @ashishdhingra in (#1151)
    * Check if numa available or not before loading numa functions
    by @TingDaoK in (#1163)
    * Unlink shutdown callback from ref count by @bretambrose in (#1166)
    * Fix empty xml node handling by @DmitriyMusatkin in (#1168)

++++ aws-c-http:

  - Update to version 0.9.2
    * Update for event loop API changes by @bretambrose in (#491)

++++ aws-c-io:

  - Update to version 0.15.3
    * Event loop public api by @bretambrose in (#691)
    * Add ML-KEM Support by @alexw91 in (#693)
    * Update checksum based on previous PR changes by @bretambrose in (#695)
    * Add an option to disable retries by @waahm7 in (#694)

++++ aws-c-s3:

  - Update to version 0.7.1
    * chore: Modified bug issue template to add checkbox to report
    potential regression. by @ashishdhingra in (#452)
    * Use proper public event loop group API by @bretambrose in (#460)
  - from version 0.7.0
    * Support header checksum by @TingDaoK in (#454)
    * Update CMake to 3.9 by @waahm7 in (#458)
  - from version 0.6.9
    * Retry RequestTimeout error by S3. by @waahm7 in (#457)
  - from version 0.6.8
    * Validate Invalid Network Interface Names at Client Initialization
    by @waahm7 in (#456)
  - from version 0.6.7
    * Supports copy object for same directory bucket by @TingDaoK in (#455)

++++ aws-cli:

  - Update to 1.36.1
    * api-change:``accessanalyzer``: This release adds support for policy validation and external
    access findings for resource control policies (RCP). IAM Access Analyzer helps you author
    functional and secure RCPs and awareness that a RCP may restrict external access. Updated service
    API, documentation, and paginators.
    * api-change:``application-signals``: Amazon CloudWatch Application Signals now supports creating
    Service Level Objectives with burn rates. Users can now create or update SLOs with burn rate
    configurations to meet their specific business requirements.
    * api-change:``b2bi``: This release adds a GenerateMapping API to allow generation of JSONata or
    XSLT transformer code based on input and output samples.
    * api-change:``billing``: Today, AWS announces the general availability of ListBillingViews API in
    the AWS SDKs, to enable AWS Billing Conductor (ABC) users to create proforma Cost and Usage Reports
    (CUR) programmatically.
    * api-change:``cloudtrail``: This release adds a new API GenerateQuery that generates a query from
    a natural language prompt about the event data in your event data store. This operation uses
    generative artificial intelligence (generative AI) to produce a ready-to-use SQL query from the
    prompt.
    * api-change:``dynamodb``: This release includes supports the new WarmThroughput feature for
    DynamoDB. You can now provide an optional WarmThroughput attribute for CreateTable or UpdateTable
    APIs to pre-warm your table or global secondary index. You can also use DescribeTable to see the
    latest WarmThroughput value.
    * api-change:``ec2``: This release adds the source AMI details in DescribeImages API
    * api-change:``internetmonitor``: Add new query type Routing_Suggestions regarding querying
    interface
    * api-change:``mediaconvert``: This release adds support for ARN inputs in the Kantar credentials
    secrets name field and the MSPR field to the manifests for PlayReady DRM protected outputs.
    * api-change:``organizations``: Add support for policy operations on the Resource Control Polices.
  - from version 1.36.0
    * api-change:``codebuild``: AWS CodeBuild now supports non-containerized Linux and Windows builds
    on Reserved Capacity.
    * api-change:``controltower``: Added ResetEnabledControl API.
    * api-change:``fis``: This release adds support for generating experiment reports with the
    experiment report configuration
    * api-change:``gamelift``: Amazon GameLift releases container fleets support for general
    availability. Deploy Linux-based containerized game server software for hosting on Amazon GameLift.
    * api-change:``payment-cryptography``: Updated ListAliases API with KeyArn filter.
    * api-change:``rds``: Updates Amazon RDS documentation for Amazon RDS Extended Support for Amazon
    Aurora MySQL.
    * feature:shorthand: Adds support to shorthand syntax for loading parameters from files via the
    ``@=`` assignment operator.
  - from version 1.35.24
    * api-change:``cloudfront``: No API changes from previous release. This release migrated the model
    to Smithy keeping all features unchanged.
    * api-change:``inspector2``: Adds support for filePath filter.
    * api-change:``lambda``: Add Python 3.13 (python3.13) support to AWS Lambda
    * api-change:``opensearch``: Adds Support for new AssociatePackages and DissociatePackages API in
    Amazon OpenSearch Service that allows association and dissociation operations to be carried out on
    multiple packages at the same time.
    * api-change:``outposts``: This release updates StartCapacityTask to allow an active Outpost to be
    modified. It also adds a new API to list all running EC2 instances on the Outpost.
  - from version 1.35.23
    * api-change:``batch``: This feature allows override LaunchTemplates to be specified in an AWS
    Batch Compute Environment.
    * api-change:``bedrock-agent-runtime``: This release adds trace functionality to Bedrock Prompt
    Flows
    * api-change:``chime-sdk-media-pipelines``: Added support for Media Capture Pipeline and Media
    Concatenation Pipeline for customer managed server side encryption. Now Media Capture Pipeline can
    use IAM sink role to get access to KMS key and encrypt/decrypt recorded artifacts. KMS key ID can
    also be supplied with encryption context.
    * api-change:``controlcatalog``: AWS Control Catalog GetControl public API returns additional data
    in output, including Implementation and Parameters
    * api-change:``eks``: Adds new error code `Ec2InstanceTypeDoesNotExist` for Amazon EKS managed node
    groups
    * api-change:``firehose``: Amazon Data Firehose / Features : Adds support for a new
    DeliveryStreamType, DatabaseAsSource. DatabaseAsSource hoses allow customers to stream CDC events
    from their RDS and Amazon EC2 hosted databases, running MySQL and PostgreSQL database engines, to
    Iceberg Table destinations.
    * api-change:``lambda``: This release adds support for using AWS KMS customer managed keys to
    encrypt AWS Lambda .zip deployment packages.
    * api-change:``pinpoint-sms-voice-v2``: Added the RequiresAuthenticationTimestamp field to the
    RegistrationVersionStatusHistory data type.
    * api-change:``qbusiness``: Adds S3 path option to pass group member list for PutGroup API.
  - from version 1.35.22
    * api-change:``autoscaling``: Auto Scaling groups now support the ability to strictly balance
    instances across Availability Zones by configuring the AvailabilityZoneDistribution parameter. If
    balanced-only is configured for a group, launches will always be attempted in the under scaled
    Availability Zone even if it is unhealthy.
    * api-change:``bedrock-agent``: Add prompt support for chat template configuration and agent
    generative AI resource. Add support for configuring an optional guardrail in Prompt and Knowledge
    Base nodes in Prompt Flows. Add API to validate flow definition
    * api-change:``bedrock-runtime``: Add Prompt management support to Bedrock runtime APIs: Converse,
    ConverseStream, InvokeModel, InvokeModelWithStreamingResponse
    * api-change:``cleanrooms``: This release introduces support for Custom Models in AWS Clean Rooms
    ML.
    * api-change:``cleanroomsml``: This release introduces support for Custom Models in AWS Clean Rooms
    ML.
    * api-change:``quicksight``: Add Client Credentials based OAuth support for Snowflake and Starburst
    * api-change:``resource-explorer-2``: Add GetManagedView, ListManagedViews APIs.
    * api-change:``synthetics``: Add support to toggle if a canary will automatically delete
    provisioned canary resources such as Lambda functions and layers when a canary is deleted.  This
    behavior can be controlled via the new ProvisionedResourceCleanup property exposed in the
    CreateCanary and UpdateCanary APIs.
  - from version 1.35.21
    * api-change:``codebuild``: AWS CodeBuild now adds additional compute types for reserved capacity
    fleet.
    * api-change:``guardduty``: GuardDuty RDS Protection expands support for Amazon Aurora PostgreSQL
    Limitless Databases.
    * api-change:``lakeformation``: API changes for new named tag expressions feature.
    * api-change:``qapps``: Introduces category apis in AmazonQApps. Web experience users use
    Categories to tag and filter library items.
    * api-change:``s3control``: Fix ListStorageLensConfigurations and ListStorageLensGroups
    deserialization for Smithy SDKs.
    * api-change:``verifiedpermissions``: Adding BatchGetPolicy API which supports the retrieval of
    multiple policies across multiple policy stores within a single request.
  - from version 1.35.20
    * api-change:``bedrock-agent``: Amazon Bedrock Knowledge Bases now supports using application
    inference profiles to increase throughput and improve resilience.
    * api-change:``docdb-elastic``: Amazon DocumentDB Elastic Clusters adds support for pending
    maintenance actions feature with APIs GetPendingMaintenanceAction, ListPendingMaintenanceActions
    and ApplyPendingMaintenanceAction
    * api-change:``logs``: This release introduces an improvement in PutLogEvents
    * api-change:``taxsettings``: Add support for supplemental tax registrations via these new APIs:
    PutSupplementalTaxRegistration, ListSupplementalTaxRegistrations, and
    DeleteSupplementalTaxRegistration.
  - from version 1.35.19
    * api-change:``amp``: Added support for UpdateScraper API, to enable updating collector
    configuration in-place
    * api-change:``autoscaling``: Adds bake time for Auto Scaling group Instance Refresh
    * api-change:``batch``: Add `podNamespace` to `EksAttemptDetail` and `containerID` to
    `EksAttemptContainerDetail`.
    * api-change:``elbv2``: Add UDP support for AWS PrivateLink and dual-stack Network Load Balancers
    * api-change:``glue``: Add schedule support for AWS Glue column statistics
    * api-change:``sagemaker``: SageMaker HyperPod adds scale-down at instance level via
    BatchDeleteClusterNodes API and group level via UpdateCluster API. SageMaker Training exposes
    secondary job status in TrainingJobSummary from ListTrainingJobs API. SageMaker now supports G6,
    G6e, P5e instances for HyperPod and Training.
    * api-change:``sesv2``: This release enables customers to provide the email template content in the
    SESv2 SendEmail and SendBulkEmail APIs instead of the name or the ARN of a stored email template.
  - from version 1.35.18
    * api-change:``appsync``: This release adds support for AppSync Event APIs.
    * api-change:``connect``: Updated the public documentation for the UserIdentityInfo object to
    accurately reflect the character limits for the FirstName and LastName fields, which were
    previously listed as 1-100 characters.
    * api-change:``datasync``: AWS DataSync now supports Enhanced mode tasks. This task mode supports
    transfer of virtually unlimited numbers of objects with enhanced metrics, more detailed logs, and
    higher performance than Basic mode. This mode currently supports transfers between Amazon S3
    locations.
    * api-change:``ec2``: This release adds two new capabilities to VPC Security Groups: Security Group
    VPC Associations and Shared Security Groups.
    * api-change:``ecs``: This release supports service deployments and service revisions which provide
    a comprehensive view of your Amazon ECS service history.
    * api-change:``geo-maps``: Release of Amazon Location Maps API. Maps enables you to build digital
    maps that showcase your locations, visualize your data, and unlock insights to drive your business
    * api-change:``geo-places``: Release of Amazon Location Places API. Places enables you to quickly
    search, display, and filter places, businesses, and locations based on proximity, category, and name
    * api-change:``geo-routes``: Release of Amazon Location Routes API. Routes enables you to plan
    efficient routes and streamline deliveries by leveraging real-time traffic, vehicle restrictions,
    and turn-by-turn directions.
    * api-change:``keyspaces``: Adds support for interacting with user-defined types (UDTs) through the
    following new operations: Create-Type, Delete-Type, List-Types, Get-Type.
    * api-change:``network-firewall``: AWS Network Firewall now supports configuring TCP idle timeout
    * api-change:``opensearch``: This release introduces the new OpenSearch user interface
    (Dashboards), a new web-based application that can be associated with multiple data sources across
    OpenSearch managed clusters, serverless collections, and Amazon S3, so that users can gain a
    comprehensive insights in an unified interface.
    * api-change:``opensearchserverless``: Neo Integration via IAM Identity Center (IdC)
    * api-change:``redshift``: This release launches S3 event integrations to create and manage
    integrations from an Amazon S3 source into an Amazon Redshift database.
    * api-change:``redshift-serverless``: Adds and updates API members for the Redshift Serverless
    AI-driven scaling and optimization feature using the price-performance target setting.
    * api-change:``route53``: This release adds support for TLSA, SSHFP, SVCB, and HTTPS record types.
    * api-change:``sagemaker``: Added support for Model Registry Staging construct. Users can define
    series of stages that models can progress through for model workflows and lifecycle. This
    simplifies tracking and managing models as they transition through development, testing, and
    production stages.
    * api-change:``workmail``: This release adds support for Multi-Factor Authentication (MFA) and
    Personal Access Tokens through integration with AWS IAM Identity Center.
  - from version 1.35.17
    * api-change:``bedrock``: Update Application Inference Profile
    * api-change:``bedrock-runtime``: Update Application Inference Profile
    * api-change:``cleanrooms``: This release adds the option for customers to configure analytics
    engine when creating a collaboration, and introduces the new SPARK analytics engine type in
    addition to maintaining the legacy CLEAN_ROOMS_SQL engine type.
    * api-change:``iotfleetwise``: Updated BatchCreateVehicle and BatchUpdateVehicle APIs:
    LimitExceededException has been added and the maximum number of vehicles in a batch has been set to
    10 explicitly
    * api-change:``logs``: Added support for new optional baseline parameter in the UpdateAnomaly API.
    For UpdateAnomaly requests with baseline set to True, The anomaly behavior is then treated as
    baseline behavior. However, more severe occurrences of this behavior will still be reported as
    anomalies.
    * api-change:``redshift-data``: Adding a new API GetStatementResultV2 that supports CSV formatted
    results from ExecuteStatement and BatchExecuteStatement calls.
    * api-change:``sagemaker``: Adding `notebook-al2-v3` as allowed value to SageMaker NotebookInstance
    PlatformIdentifier attribute
  - from version 1.35.16
    * api-change:``mediapackagev2``: MediaPackage V2 Live to VOD Harvester is a MediaPackage V2
    feature, which is used to export content from an origin endpoint to a S3 bucket.
    * api-change:``opensearch``: Adds support for provisioning dedicated coordinator nodes. Coordinator
    nodes can be specified using the new NodeOptions parameter in ClusterConfig.
    * api-change:``rds``: This release adds support for Enhanced Monitoring and Performance Insights
    when restoring Aurora Limitless Database DB clusters. It also adds support for the os-upgrade
    pending maintenance action.
    * api-change:``storagegateway``: Documentation update: Amazon FSx File Gateway will no longer be
    available to new customers.
  - from version 1.35.15
    * api-change:``bedrock-agent``: Add support of new model types for Bedrock Agents, Adding inference
    profile support for Flows and Prompt Management, Adding new field to configure additional inference
    configurations for Flows and Prompt Management
    * api-change:``codebuild``: AWS CodeBuild now supports automatically retrying failed builds
    * api-change:``lambda``: Add TagsError field in Lambda GetFunctionResponse. The TagsError field
    contains details related to errors retrieving tags.
    * api-change:``logs``: Adding inferred token name for dynamic tokens in Anomalies.
    * api-change:``supplychain``: API doc updates, and also support showing error message on a failed
    instance
  - from version 1.35.14
    * api-change:``appconfig``: This release improves deployment safety by granting customers the
    ability to REVERT completed deployments, to the last known good state.In the StopDeployment API
    revert case the status of a COMPLETE deployment will be REVERTED. AppConfig only allows a revert
    within 72 hours of deployment completion.
    * api-change:``ec2``: This release includes a new API to describe some details of the Amazon
    Machine Images (AMIs) that were used to launch EC2 instances, even if those AMIs are no longer
    available for use.
    * api-change:``ecs``: This release adds support for EBS volumes attached to Amazon ECS Windows
    tasks running on EC2 instances.
    * api-change:``pcs``: Documentation update: added the default value of the Slurm configuration
    parameter scaleDownIdleTimeInSeconds to its description.
    * api-change:``qbusiness``: Add a new field in chat response. This field can be used to support
    nested schemas in array fields
    * bugfix:shorthand: Improve performance when parsing invalid shorthand syntax.
  - Refresh patches for new version
    * ac_update-docutils.patch
  - Relax upper version dependency for python-docutils in Requires
  - Update Requires from setup.py

++++ build:

  - container related:
    * Implement support for the new <containers> element in kiwi recipes
    * Fixes for SBOM and dependencies of multi stage container builds
    * obs-docker-support: enable dnf and yum substitutions
  - Arch Linux:
    * fix file path for Arch repo
    * exclude unsupported arch
    * Use root as download user
  - build-vm-qemu: force sv48 satp mode on riscv64
  - mkosi:
    * Create .sha256 files after mkosi builds
    * Always pass --image-version to mkosi
  - General improvements and bugfixes (mkosi, pbuild, appimage/livebuild,
    obs work detection, documention, SBOM)
  - Support slsa v1 in unpack_slsa_provenance
  - generate_sbom: do not clobber spdx supplier
  - Harden export_debian_orig_from_git (boo#1230469)

++++ clazy:

  - Update runtime requirements
  - Keep using LLVM 18 on Tumbleweed until upstream fixes
    compatibility with LLVM 19

++++ erofs-utils:

  - Update to release 1.8.2
    * mkfs: Correctly skip unidentified xattrs
    * fsck: Support exporting xattrs optionally
    * mkfs: Correctly sort shared xattrs
    * mkfs: Allow pax headers with empty names
    * mkfs: Add `--sort=none` option for tarball

++++ fzf:

  - Update to 0.56.2:
    Fixes
    * Fixed abnormal scrolling behavior when --wrap is set
    * [zsh] Fixed warning message when ksh_arrays is set

++++ libheif:

  - cleanup

++++ golang-github-prometheus-prometheus:

  - update to 2.55.1:
    * [BUGFIX] round() function did not remove __name__ label. #15250

++++ html2ps:

  - Add patch html2ps-1.0b7-tmpname.patch
    * Close the race between tmpnam() and sysopen

++++ include-what-you-use:

  - Update to version 0.23, update LLVM/Clang to version 19.
    * Treat types from overridden method signatures as provided by
    base.
    * Analyze associated headers more closely with their source file.
    * Many improvements for template analysis.
    * Accept -xc++-header.
    * Improve reporting of binary operators in macros.
    * Improve heuristics for reporting overloaded functions.
    * Consider variable definitions uses of extern declarations.
    * Update public standard library header list for C++23.
    * Improve mappings for standard C library.
    * Add new 'clang-warning' formatter.
    * Default to system core count if -j is omitted.
  - Rebase iwyu_include_picker.patch and update to GCC 14.

++++ kernel-debug:

  - Linux 6.11.8 (bsc#1012628).
  - vsock/virtio: Initialization of the dangling pointer occurring
    in vsk->trans (bsc#1012628).
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling
    pointer (bsc#1012628).
  - xtensa: Emulate one-byte cmpxchg (bsc#1012628).
  - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
    (bsc#1012628).
  - drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
    (bsc#1012628).
  - drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
    (bsc#1012628).
  - drm/xe: Move LNL scheduling WA to xe_device.h (bsc#1012628).
  - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
    (bsc#1012628).
  - block: fix queue limits checks in blk_rq_map_user_bvec for real
    (bsc#1012628).
  - blacklist.conf: drop it
  - block: rework bio splitting (bsc#1012628).
  - firmware: qcom: scm: suppress download mode error (bsc#1012628).
  - firmware: qcom: scm: Refactor code to support multiple dload
    mode (bsc#1012628).
  - Update config files.
  - selftests: hugetlb_dio: check for initial conditions to skip
    in the start (bsc#1012628).
  - ucounts: fix counter leak in inc_rlimit_get_ucounts()
    (bsc#1012628).
  - ocfs2: remove entry once instead of null-ptr-dereference in
    ocfs2_xa_remove() (bsc#1012628).
  - irqchip/gic-v3: Force propagation of the active state with a
    read-back (bsc#1012628).
  - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state
    allocation (bsc#1012628).
  - staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation
    (bsc#1012628).
  - thunderbolt: Fix connection issue with Pluggable UD-4VPD dock
    (bsc#1012628).
  - clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
    (bsc#1012628).
  - clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
    (bsc#1012628).
  - USB: serial: option: add Quectel RG650V (bsc#1012628).
  - USB: serial: option: add Fibocom FG132 0x0112 composition
    (bsc#1012628).
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx
    (bsc#1012628).
  - USB: serial: io_edgeport: fix use after free in debug printk
    (bsc#1012628).
  - usb: typec: fix potential out of bounds in
    ucsi_ccg_update_set_new_cam_cmd() (bsc#1012628).
  - usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
    (bsc#1012628).
  - usb: dwc3: fix fault at system suspend if device was already
    runtime suspended (bsc#1012628).
  - usb: musb: sunxi: Fix accessing an released usb phy
    (bsc#1012628).
  - thunderbolt: Add only on-board retimers when
    !CONFIG_USB4_DEBUGFS_MARGINING (bsc#1012628).
  - mm/thp: fix deferred split unqueue naming and locking
    (bsc#1012628).
  - mm/mlock: set the correct prev on failure (bsc#1012628).
  - mm/damon/core: handle zero schemes apply interval (bsc#1012628).
  - mm/damon/core: handle zero {aggregation,ops_update} intervals
    (bsc#1012628).
  - mm/damon/core: avoid overflow in damon_feed_loop_next_input()
    (bsc#1012628).
  - signal: restore the override_rlimit logic (bsc#1012628).
  - objpool: fix to make percpu slot allocation more robust
    (bsc#1012628).
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
    (bsc#1012628).
  - clk: qcom: clk-alpha-pll: Fix pll post div mask when width is
    not set (bsc#1012628).
  - clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
    (bsc#1012628).
  - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE
    is not set (bsc#1012628).
  - filemap: Fix bounds checking in filemap_read() (bsc#1012628).
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED
    in uvc_parse_format (bsc#1012628).
  - platform/x86/amd/pmf: Add SMU metrics table support for 1Ah
    family 60h model (bsc#1012628).
  - platform/x86/amd/pmf: Update SMU metrics table for 1AH family
    series (bsc#1012628).
  - platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header
    (bsc#1012628).
  - btrfs: reinitialize delayed ref list after deleting it from
    the list (bsc#1012628).
  - btrfs: fix per-subvolume RO/RW flags with new mount API
    (bsc#1012628).
  - btrfs: fix the length of reserved qgroup to free (bsc#1012628).
  - idpf: fix idpf_vc_core_init error path (bsc#1012628).
  - idpf: avoid vport access in idpf_get_link_ksettings
    (bsc#1012628).
  - KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before
    running it to avoid spurious interrupts (bsc#1012628).
  - mm/slab: fix warning caused by duplicate kmem_cache creation
    in kmem_buckets_create (bsc#1012628).
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard
    hint (bsc#1012628).
  - arm64: Kconfig: Make SME depend on BROKEN for now (bsc#1012628).
  - Update config files.
  - arm64/sve: Discard stale CPU state when handling SVE traps
    (bsc#1012628).
  - mptcp: use sock_kfree_s instead of kfree (bsc#1012628).
  - net: vertexcom: mse102x: Fix possible double free of TX skb
    (bsc#1012628).
  - net: wwan: t7xx: Fix off-by-one error in
    t7xx_dpmaif_rx_buf_alloc() (bsc#1012628).
  - tracing: Fix tracefs mount options (bsc#1012628).
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (bsc#1012628).
  - scsi: ufs: core: Start the RTC update work later (bsc#1012628).
  - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (bsc#1012628).
  - mptcp: no admin perm to list endpoints (bsc#1012628).
  - dm: fix a crash if blk_alloc_disk fails (bsc#1012628).
  - dm-unstriped: cast an operand to sector_t to prevent potential
    uint32_t overflow (bsc#1012628).
  - dm cache: fix potential out-of-bounds access on the first resume
    (bsc#1012628).
  - dm cache: optimize dirty bit checking with find_next_bit when
    resizing (bsc#1012628).
  - dm cache: fix out-of-bounds access to the dirty bitset when
    resizing (bsc#1012628).
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr
    error (bsc#1012628).
  - dm cache: correct the number of origin blocks to match the
    target length (bsc#1012628).
  - KEYS: trusted: dcp: fix NULL dereference in AEAD crypto
    operation (bsc#1012628).
  - thermal/drivers/qcom/lmh: Remove false lockdep backtrace
    (bsc#1012628).
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not
    supported (bsc#1012628).
  - drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (bsc#1012628).
  - drm/amdgpu: Adjust debugfs register access permissions
    (bsc#1012628).
  - drm/amdgpu: add missing size check in
    amdgpu_debugfs_gprwave_read() (bsc#1012628).
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions
    (bsc#1012628).
  - drm/panthor: Be stricter about IO mapping flags (bsc#1012628).
  - drm/panthor: Lock XArray when getting entries for the VM
    (bsc#1012628).
  - drm/amd/display: parse umc_info or vram_info based on ASIC
    (bsc#1012628).
  - drm/amd/pm: correct the workload setting (bsc#1012628).
  - drm/imagination: Break an object reference loop (bsc#1012628).
  - drm/imagination: Add a per-file PVR context list (bsc#1012628).
  - drm/amd/display: Fix brightness level not retained over reboot
    (bsc#1012628).
  - drm/amd/pm: always pick the pptable from IFWI (bsc#1012628).
  - rpmsg: glink: Handle rejected intent request better
    (bsc#1012628).
  - tpm: Lock TPM chip in tpm_pm_suspend() first (bsc#1012628).
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode
    (bsc#1012628).
  - drm/xe: Set mask bits for CCS_MODE register (bsc#1012628).
  - drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure
    in exec IOCTL (bsc#1012628).
  - drm/xe: Fix possible exec queue leak in exec IOCTL
    (bsc#1012628).
  - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
    (bsc#1012628).
  - ksmbd: Fix the missing xa_store error check (bsc#1012628).
  - ksmbd: check outstanding simultaneous SMB operations
    (bsc#1012628).
  - ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
    (bsc#1012628).
  - can: {cc770,sja1000}_isa: allow building on x86_64
    (bsc#1012628).
  - Update config files. (say =N)
  - can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing
    configuration when switching CAN modes (bsc#1012628).
  - can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
    (bsc#1012628).
  - can: m_can: m_can_close(): don't call free_irq() for IRQ-less
    devices (bsc#1012628).
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
    (bsc#1012628).
  - media: v4l2-tpg: prevent the risk of a division by zero
    (bsc#1012628).
  - media: vivid: fix buffer overwrite when using > 32 buffers
    (bsc#1012628).
  - media: pulse8-cec: fix data timestamp at pulse8_setup()
    (bsc#1012628).
  - media: av7110: fix a spectre vulnerability (bsc#1012628).
  - media: cx24116: prevent overflows on SNR calculus (bsc#1012628).
  - media: s5p-jpeg: prevent buffer overflows (bsc#1012628).
  - media: ar0521: don't overflow when checking PLL values
    (bsc#1012628).
  - media: mgb4: protect driver against spectre (bsc#1012628).
  - media: dvb-core: add missing buffer index check (bsc#1012628).
  - ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
    (bsc#1012628).
  - ASoC: stm32: spdifrx: fix dma channel release in
    stm32_spdifrx_remove (bsc#1012628).
  - thermal/of: support thermal zones w/o trips subnode
    (bsc#1012628).
  - tools/lib/thermal: Fix sampling handler context ptr
    (bsc#1012628).
  - ALSA: firewire-lib: fix return value on fail in
    amdtp_tscm_init() (bsc#1012628).
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
    (bsc#1012628).
  - media: adv7604: prevent underflow condition when reporting
    colorspace (bsc#1012628).
  - media: dvb_frontend: don't play tricks with underflow values
    (bsc#1012628).
  - media: dvbdev: prevent the risk of out of memory access
    (bsc#1012628).
  - media: stb0899_algo: initialize cfr before using it
    (bsc#1012628).
  - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
    (bsc#1012628).
  - drivers: net: ionic: add missed debugfs cleanup to ionic_probe()
    error path (bsc#1012628).
  - net/smc: do not leave a dangling sk pointer in __smc_create()
    (bsc#1012628).
  - rxrpc: Fix missing locking causing hanging calls (bsc#1012628).
  - net: arc: rockchip: fix emac mdio node support (bsc#1012628).
  - net: arc: fix the device for dma_map_single/dma_unmap_single
    (bsc#1012628).
  - virtio_net: Update rss when set queue (bsc#1012628).
  - virtio_net: Sync rss config to device when virtnet_probe
    (bsc#1012628).
  - virtio_net: Add hash_key_length check (bsc#1012628).
  - virtio_net: Support dynamic rss indirection table size
    (bsc#1012628).
  - netfilter: nf_tables: wait for rcu grace period on net_device
    removal (bsc#1012628).
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single
    irq case (bsc#1012628).
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (bsc#1012628).
  - net: hns3: fix kernel crash when uninstalling driver
    (bsc#1012628).
  - e1000e: Remove Meteor Lake SMBUS workarounds (bsc#1012628).
  - i40e: fix race condition by adding filter's intermediate sync
    state (bsc#1012628).
  - ice: change q_index variable type to s16 to store -1 value
    (bsc#1012628).
  - can: c_can: fix {rx,tx}_errors statistics (bsc#1012628).
  - net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine
    starts (bsc#1012628).
  - net: enetc: allocate vf_state during PF probes (bsc#1012628).
  - sctp: properly validate chunk size in sctp_sf_ootb()
    (bsc#1012628).
  - dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property
    value (bsc#1012628).
  - net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd
    tracepoint (bsc#1012628).
  - net: enetc: set MAC address to the VF net_device (bsc#1012628).
  - regulator: rtq2208: Fix uninitialized use of regulator_config
    (bsc#1012628).
  - security/keys: fix slab-out-of-bounds in key_task_permission
    (bsc#1012628).
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping
    (bsc#1012628).
  - NFS: Further fixes to attribute delegation a/mtime changes
    (bsc#1012628).
  - NFS: Fix attribute delegation behaviour on exclusive create
    (bsc#1012628).
  - NFSv3: only use NFS timeout for MOUNT when protocols are
    compatible (bsc#1012628).
  - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (bsc#1012628).
  - platform/x86/amd/pmc: Detect when STB is not available
    (bsc#1012628).
  - HID: core: zero-initialize the report buffer (bsc#1012628).
  - arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
    (bsc#1012628).
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
    (bsc#1012628).
  - ARM: dts: rockchip: Fix the spi controller on rk3036
    (bsc#1012628).
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi
    (bsc#1012628).
  - ARM: dts: rockchip: fix rk3036 acodec node (bsc#1012628).
  - arm64: dts: rockchip: remove orphaned pinctrl-names from
    pinephone pro (bsc#1012628).
  - firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM
    bridge enabling (bsc#1012628).
  - firmware: arm_scmi: Fix slab-use-after-free in
    scmi_bus_notifier() (bsc#1012628).
  - arm64: dts: imx8mp-phyboard-pollux: Set Video PLL1 frequency
    to 506.8 MHz (bsc#1012628).
  - arm64: dts: imx8mp: correct sdhc ipg clk (bsc#1012628).
  - arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs (bsc#1012628).
  - arm64: dts: qcom: sm8450 fix PIPE clock specification for pcie1
    (bsc#1012628).
  - arm64: dts: rockchip: remove num-slots property from
    rk3328-nanopi-r2s-plus (bsc#1012628).
  - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
    (bsc#1012628).
  - arm64: dts: rockchip: Remove #cooling-cells from fan on
    Theobroma lion (bsc#1012628).
  - arm64: dts: rockchip: Remove undocumented supports-emmc property
    (bsc#1012628).
  - arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
    (bsc#1012628).
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
    (bsc#1012628).
  - arm64: dts: rockchip: Fix bluetooth properties on rk3566 box
    demo (bsc#1012628).
  - arm64: dts: rockchip: Drop regulator-init-microvolt from two
    boards (bsc#1012628).
  - arm64: dts: rockchip: fix i2c2 pinctrl-names property on
    anbernic-rg353p/v (bsc#1012628).
  - arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
    (bsc#1012628).
  - arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
    (bsc#1012628).
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
    (bsc#1012628).
  - EDAC/qcom: Make irq configuration optional (bsc#1012628).
  - firmware: qcom: scm: fix a NULL-pointer dereference
    (bsc#1012628).
  - arm64: dts: rockchip: Designate Turing RK1's system power
    controller (bsc#1012628).
  - arm64: dts: rockchip: Start cooling maps numbering from zero
    on ROCK 5B (bsc#1012628).
  - arm64: dts: rockchip: Move L3 cache outside CPUs in RK3588(S)
    SoC dtsi (bsc#1012628).
  - arm64: dts: rockchip: Fix rt5651 compatible value on
    rk3399-sapphire-excavator (bsc#1012628).
  - arm64: dts: rockchip: Fix rt5651 compatible value on
    rk3399-eaidk-610 (bsc#1012628).
  - commit 099023b
  - Mass CVE update.
  - Update
    patches.kernel.org/6.11.1-008-Bluetooth-btintel_pcie-Allocate-memory-for-dri.patch
    (bsc#1012628 CVE-2024-46869 bsc#1231173).
  - Update
    patches.kernel.org/6.11.1-012-USB-usbtmc-prevent-kernel-usb-infoleak.patch
    (bsc#1012628 CVE-2024-47671 bsc#1231541).
  - Update
    patches.kernel.org/6.11.2-001-wifi-ath11k-use-work-queue-to-process-beacon-t.patch
    (bsc#1012628 CVE-2024-47724 bsc#1232073).
  - Update
    patches.kernel.org/6.11.2-003-wifi-rtw88-always-wait-for-both-firmware-loadi.patch
    (bsc#1012628 CVE-2024-47718 bsc#1232015).
  - Update
    patches.kernel.org/6.11.2-008-crypto-iaa-Fix-potential-use-after-free-bug.patch
    (bsc#1012628 CVE-2024-47732 bsc#1232109).
  - Update
    patches.kernel.org/6.11.2-024-wifi-rtw89-remove-unused-C2H-event-ID-RTW89_MA.patch
    (bsc#1012628 CVE-2024-47721 bsc#1232052).
  - Update
    patches.kernel.org/6.11.2-027-RISC-V-KVM-Don-t-zero-out-PMU-snapshot-area-be.patch
    (bsc#1012628 CVE-2024-47717 bsc#1232041).
  - Update
    patches.kernel.org/6.11.2-033-ARM-9410-1-vfp-Use-asm-volatile-in-fmrx-fmxr-m.patch
    (bsc#1012628 CVE-2024-47716 bsc#1232053).
  - Update
    patches.kernel.org/6.11.2-034-powercap-intel_rapl-Fix-off-by-one-in-get_rpi.patch
    (bsc#1012628 CVE-2024-49862 bsc#1231871).
  - Update
    patches.kernel.org/6.11.2-040-drivers-perf-Fix-ali_drw_pmu-driver-interrupt-.patch
    (bsc#1012628 CVE-2024-47731 bsc#1232117).
  - Update
    patches.kernel.org/6.11.2-046-wifi-mac80211-don-t-use-rate-mask-for-offchann.patch
    (bsc#1012628 CVE-2024-47738 bsc#1232114).
  - Update
    patches.kernel.org/6.11.2-048-wifi-iwlwifi-mvm-set-the-cipher-for-secured-ND.patch
    (bsc#1012628 CVE-2024-49857 bsc#1232203).
  - Update
    patches.kernel.org/6.11.2-073-wifi-mt76-mt7915-fix-oops-on-non-dbdc-mt7986.patch
    (bsc#1012628 CVE-2024-47715 bsc#1231860).
  - Update
    patches.kernel.org/6.11.2-075-wifi-mt76-mt7996-use-hweight16-to-get-correct-.patch
    (bsc#1012628 CVE-2024-47714 bsc#1232018).
  - Update
    patches.kernel.org/6.11.2-080-x86-sgx-Fix-deadlock-in-SGX-NUMA-node-search.patch
    (bsc#1012628 CVE-2024-49856 bsc#1232202).
  - Update
    patches.kernel.org/6.11.2-085-crypto-hisilicon-qm-inject-error-before-stoppi.patch
    (bsc#1012628 CVE-2024-47730 bsc#1232075).
  - Update
    patches.kernel.org/6.11.2-093-wifi-mac80211-use-two-phase-skb-reclamation-in.patch
    (bsc#1012628 CVE-2024-47713 bsc#1232016).
  - Update
    patches.kernel.org/6.11.2-094-wifi-wilc1000-fix-potential-RCU-dereference-is.patch
    (bsc#1012628 CVE-2024-47712 bsc#1232017).
  - Update
    patches.kernel.org/6.11.2-099-af_unix-Don-t-return-OOB-skb-in-manage_oob.patch
    (bsc#1012628 CVE-2024-47711 bsc#1232054).
  - Update
    patches.kernel.org/6.11.2-102-sock_map-Add-a-cond_resched-in-sock_hash_free.patch
    (bsc#1012628 CVE-2024-47710 bsc#1232049).
  - Update
    patches.kernel.org/6.11.2-103-can-bcm-Clear-bo-bcm_proc_read-after-remove_pr.patch
    (bsc#1012628 CVE-2024-47709 bsc#1232048).
  - Update
    patches.kernel.org/6.11.2-112-netkit-Assign-missing-bpf_net_context.patch
    (bsc#1012628 CVE-2024-47708 bsc#1231933).
  - Update
    patches.kernel.org/6.11.2-117-ipv6-avoid-possible-NULL-deref-in-rt6_uncached.patch
    (bsc#1012628 CVE-2024-47707 bsc#1231935).
  - Update
    patches.kernel.org/6.11.2-119-nbd-fix-race-between-timeout-and-normal-comple.patch
    (bsc#1012628 CVE-2024-49855 bsc#1232195).
  - Update
    patches.kernel.org/6.11.2-120-block-bfq-fix-possible-UAF-for-bfqq-bic-with-m.patch
    (bsc#1012628 CVE-2024-47706 bsc#1231942).
  - Update
    patches.kernel.org/6.11.2-127-erofs-handle-overlapped-pclusters-out-of-craft.patch
    (bsc#1012628 CVE-2024-47736 bsc#1232112).
  - Update
    patches.kernel.org/6.11.2-128-block-bfq-fix-uaf-for-accessing-waker_bfqq-aft.patch
    (bsc#1012628 CVE-2024-49854 bsc#1232193).
  - Update
    patches.kernel.org/6.11.2-132-block-fix-potential-invalid-pointer-dereferenc.patch
    (bsc#1012628 CVE-2024-47705 bsc#1231872).
  - Update
    patches.kernel.org/6.11.2-136-firmware-arm_scmi-Fix-double-free-in-OPTEE-tra.patch
    (bsc#1012628 CVE-2024-49853 bsc#1232192).
  - Update
    patches.kernel.org/6.11.2-201-drm-amd-display-Check-link_res-hpo_dp_link_enc.patch
    (bsc#1012628 CVE-2024-47704 bsc#1231944).
  - Update
    patches.kernel.org/6.11.2-202-drm-amd-display-Add-null-check-for-set_output_.patch
    (bsc#1012628 CVE-2024-47720 bsc#1232043).
  - Update
    patches.kernel.org/6.11.2-216-drm-xe-Use-reserved-copy-engine-for-user-binds.patch
    (bsc#1012628 CVE-2024-47729 bsc#1232077).
  - Update
    patches.kernel.org/6.11.2-219-scsi-elx-libefc-Fix-potential-use-after-free-i.patch
    (bsc#1012628 CVE-2024-49852 bsc#1232819).
  - Update
    patches.kernel.org/6.11.2-220-jfs-fix-out-of-bounds-in-dbNextAG-and-diAlloc.patch
    (bsc#1012628 CVE-2024-47723 bsc#1232050).
  - Update
    patches.kernel.org/6.11.2-253-tpm-Clean-up-TPM-space-after-command-failure.patch
    (bsc#1012628 CVE-2024-49851 bsc#1232134).
  - Update
    patches.kernel.org/6.11.2-257-bpf-lsm-Add-check-for-BPF-LSM-return-value.patch
    (bsc#1012628 CVE-2024-47703 bsc#1231946).
  - Update
    patches.kernel.org/6.11.2-263-bpf-Fail-verification-for-sign-extension-of-pa.patch
    (bsc#1012628 CVE-2024-47702 bsc#1231924).
  - Update
    patches.kernel.org/6.11.2-297-bpf-correctly-handle-malformed-BPF_CORE_TYPE_I.patch
    (bsc#1012628 CVE-2024-49850 bsc#1232189).
  - Update
    patches.kernel.org/6.11.2-312-ext4-avoid-OOB-when-system.data-xattr-changes-.patch
    (bsc#1012628 CVE-2024-47701 bsc#1231920).
  - Update
    patches.kernel.org/6.11.2-313-ext4-check-stripe-size-compatibility-on-remoun.patch
    (bsc#1012628 CVE-2024-47700 bsc#1231919).
  - Update
    patches.kernel.org/6.11.2-315-nilfs2-fix-potential-null-ptr-deref-in-nilfs_b.patch
    (bsc#1012628 CVE-2024-47699 bsc#1231916).
  - Update
    patches.kernel.org/6.11.2-317-nilfs2-fix-potential-oob-read-in-nilfs_btree_c.patch
    (bsc#1012628 CVE-2024-47757 bsc#1232187).
  - Update
    patches.kernel.org/6.11.2-320-bpf-Fix-helper-writes-to-read-only-maps.patch
    (bsc#1012628 CVE-2024-49861 bsc#1232254).
  - Update
    patches.kernel.org/6.11.2-322-bpf-Zero-former-ARG_PTR_TO_-LONG-INT-args-in-c.patch
    (bsc#1012628 CVE-2024-47728 bsc#1232076).
  - Update
    patches.kernel.org/6.11.2-364-drivers-media-dvb-frontends-rtl2832-fix-an-out.patch
    (bsc#1012628 CVE-2024-47698 bsc#1231859).
  - Update
    patches.kernel.org/6.11.2-365-drivers-media-dvb-frontends-rtl2830-fix-an-out.patch
    (bsc#1012628 CVE-2024-47697 bsc#1231858).
  - Update
    patches.kernel.org/6.11.2-369-PCI-keystone-Fix-if-statement-expression-in-ks.patch
    (bsc#1012628 CVE-2024-47756 bsc#1232185).
  - Update
    patches.kernel.org/6.11.2-381-RDMA-iwcm-Fix-WARNING-at_kernel-workqueue.c-ch.patch
    (bsc#1012628 CVE-2024-47696 bsc#1231864).
  - Update
    patches.kernel.org/6.11.2-386-media-mediatek-vcodec-Fix-H264-multi-stateless.patch
    (bsc#1012628 CVE-2024-47754 bsc#1232131).
  - Update
    patches.kernel.org/6.11.2-387-media-mediatek-vcodec-Fix-VP8-stateless-decode.patch
    (bsc#1012628 CVE-2024-47753 bsc#1231868).
  - Update
    patches.kernel.org/6.11.2-388-media-mediatek-vcodec-Fix-H264-stateless-decod.patch
    (bsc#1012628 CVE-2024-47752 bsc#1232130).
  - Update
    patches.kernel.org/6.11.2-391-RDMA-rtrs-clt-Reset-cid-to-con_num-1-to-stay-i.patch
    (bsc#1012628 CVE-2024-47695 bsc#1231931).
  - Update
    patches.kernel.org/6.11.2-398-IB-mlx5-Fix-UMR-pd-cleanup-on-error-flow-of-dr.patch
    (bsc#1012628 CVE-2024-47694 bsc#1232014).
  - Update
    patches.kernel.org/6.11.2-399-IB-core-Fix-ib_cache_setup_one-error-flow-clea.patch
    (bsc#1012628 CVE-2024-47693 bsc#1232013).
  - Update
    patches.kernel.org/6.11.2-402-PCI-kirin-Fix-buffer-overflow-in-kirin_pcie_pa.patch
    (bsc#1012628 CVE-2024-47751 bsc#1232127).
  - Update
    patches.kernel.org/6.11.2-410-RDMA-hns-Fix-Use-After-Free-of-rsv_qp-on-HIP08.patch
    (bsc#1012628 CVE-2024-47750 bsc#1232182).
  - Update
    patches.kernel.org/6.11.2-412-RDMA-hns-Fix-spin_unlock_irqrestore-called-wit.patch
    (bsc#1012628 CVE-2024-47735 bsc#1232111).
  - Update
    patches.kernel.org/6.11.2-422-RDMA-cxgb4-Added-NULL-check-for-lookup_atid.patch
    (bsc#1012628 CVE-2024-47749 bsc#1232180).
  - Update
    patches.kernel.org/6.11.2-424-ntb-intel-Fix-the-NULL-vs-IS_ERR-bug-for-debug.patch
    (bsc#1012628 CVE-2023-52917 bsc#1231849).
  - Update
    patches.kernel.org/6.11.2-427-nfsd-call-cache_put-if-xdr_reserve_space-retur.patch
    (bsc#1012628 CVE-2024-47737 bsc#1232056).
  - Update
    patches.kernel.org/6.11.2-428-nfsd-return-EINVAL-when-namelen-is-0.patch
    (bsc#1012628 CVE-2024-47692 bsc#1231857).
  - Update
    patches.kernel.org/6.11.2-439-f2fs-fix-to-avoid-use-after-free-in-f2fs_stop_.patch
    (bsc#1012628 CVE-2024-47691 bsc#1232012).
  - Update
    patches.kernel.org/6.11.2-442-f2fs-get-rid-of-online-repaire-on-corrupted-di.patch
    (bsc#1012628 CVE-2024-47690 bsc#1232011).
  - Update
    patches.kernel.org/6.11.2-443-f2fs-fix-to-don-t-set-SB_RDONLY-in-f2fs_handle.patch
    (bsc#1012628 CVE-2024-47689 bsc#1232010).
  - Update
    patches.kernel.org/6.11.2-460-driver-core-Fix-a-potential-null-ptr-deref-in-.patch
    (bsc#1012628 CVE-2024-47688 bsc#1232009).
  - Update
    patches.kernel.org/6.11.2-469-vdpa-mlx5-Fix-invalid-mr-resource-destroy.patch
    (bsc#1012628 CVE-2024-47687 bsc#1232003).
  - Update
    patches.kernel.org/6.11.2-470-vhost_vdpa-assign-irq-bypass-producer-token-co.patch
    (bsc#1012628 CVE-2024-47748 bsc#1232174).
  - Update
    patches.kernel.org/6.11.2-471-ep93xx-clock-Fix-off-by-one-in-ep93xx_div_reca.patch
    (bsc#1012628 CVE-2024-47686 bsc#1232000).
  - Update
    patches.kernel.org/6.11.2-477-netfilter-nf_reject_ipv6-fix-nf_reject_ip6_tcp.patch
    (bsc#1012628 CVE-2024-47685 bsc#1231998).
  - Update
    patches.kernel.org/6.11.2-478-net-seeq-Fix-use-after-free-vulnerability-in-e.patch
    (bsc#1012628 CVE-2024-47747 bsc#1232145).
  - Update
    patches.kernel.org/6.11.2-480-tcp-check-skb-is-non-NULL-in-tcp_rto_delta_us.patch
    (bsc#1012628 CVE-2024-47684 bsc#1231987).
  - Update
    patches.kernel.org/6.11.2-486-bonding-Fix-unnecessary-warnings-and-logs-from.patch
    (bsc#1012628 CVE-2024-47734 bsc#1232055).
  - Update
    patches.kernel.org/6.11.2-497-fuse-use-exclusive-lock-when-FUSE_I_CACHE_IO_M.patch
    (bsc#1012628 CVE-2024-47746 bsc#1232137).
  - Update
    patches.kernel.org/6.11.2-499-mm-call-the-security_mmap_file-LSM-hook-in-rem.patch
    (bsc#1012628 CVE-2024-47745 bsc#1232135).
  - Update
    patches.kernel.org/6.11.2-528-iommufd-Protect-against-overflow-of-ALIGN-duri.patch
    (bsc#1012628 CVE-2024-47719 bsc#1231865).
  - Update
    patches.kernel.org/6.11.2-537-KVM-Use-dedicated-mutex-to-protect-kvm_usage_c.patch
    (bsc#1012628 CVE-2024-47744 bsc#1232132).
  - Update
    patches.kernel.org/6.11.2-538-drm-amd-display-Skip-Recompute-DSC-Params-if-n.patch
    (bsc#1012628 CVE-2024-47683 bsc#1231975).
  - Update
    patches.kernel.org/6.11.2-562-x86-tdx-Fix-in-kernel-MMIO-check.patch
    (bsc#1012628 CVE-2024-47727 bsc#1232116).
  - Update
    patches.kernel.org/6.11.2-563-KEYS-prevent-NULL-pointer-dereference-in-find_.patch
    (bsc#1012628 CVE-2024-47743 bsc#1232129).
  - Update
    patches.kernel.org/6.11.2-569-scsi-sd-Fix-off-by-one-error-in-sd_read_block_.patch
    (bsc#1012628 CVE-2024-47682 bsc#1231856).
  - Update
    patches.kernel.org/6.11.2-592-firmware_loader-Block-path-traversal.patch
    (bsc#1012628 CVE-2024-47742 bsc#1232126).
  - Update
    patches.kernel.org/6.11.2-603-ACPI-sysfs-validate-return-type-of-_STR-method.patch
    (bsc#1012628 CVE-2024-49860 bsc#1231861).
  - Update
    patches.kernel.org/6.11.2-606-efistub-tpm-Use-ACPI-reclaim-memory-for-event-.patch
    (bsc#1012628 CVE-2024-49858 bsc#1232251).
  - Update
    patches.kernel.org/6.11.2-615-wifi-mt76-mt7996-fix-NULL-pointer-dereference-.patch
    (bsc#1012628 CVE-2024-47681 bsc#1231855).
  - Update
    patches.kernel.org/6.11.2-625-btrfs-fix-race-setting-file-private-on-concurr.patch
    (bsc#1012628 CVE-2024-47741 bsc#1231869).
  - Update
    patches.kernel.org/6.11.2-628-f2fs-fix-to-wait-dio-completion.patch
    (bsc#1012628 CVE-2024-47726 bsc#1232113).
  - Update
    patches.kernel.org/6.11.2-632-f2fs-Require-FMODE_WRITE-for-atomic-write-ioct.patch
    (bsc#1012628 CVE-2024-47740 bsc#1231867).
  - Update
    patches.kernel.org/6.11.2-633-f2fs-check-discard-support-for-conventional-zo.patch
    (bsc#1012628 CVE-2024-47680 bsc#1231970).
  - Update
    patches.kernel.org/6.11.2-634-f2fs-fix-to-check-atomic_file-in-f2fs-ioctl-in.patch
    (bsc#1012628 CVE-2024-49859 bsc#1232252).
  - Update
    patches.kernel.org/6.11.2-644-vfs-fix-race-between-evice_inodes-and-find_ino.patch
    (bsc#1012628 CVE-2024-47679 bsc#1231930).
  - Update
    patches.kernel.org/6.11.2-645-netfs-Delete-subtree-of-fs-netfs-when-netfs-mo.patch
    (bsc#1012628 CVE-2024-47733 bsc#1232110).
  - Update
    patches.kernel.org/6.11.2-649-icmp-change-the-order-of-rate-limits.patch
    (bsc#1012628 CVE-2024-47678 bsc#1231854).
  - Update
    patches.kernel.org/6.11.2-653-padata-use-integer-wrap-around-to-prevent-dead.patch
    (bsc#1012628 CVE-2024-47739 bsc#1232124).
  - Update
    patches.kernel.org/6.11.2-677-exfat-resolve-memory-leak-from-exfat_create_up.patch
    (bsc#1012628 CVE-2024-47677 bsc#1231853).
  - Update
    patches.kernel.org/6.11.2-686-mm-hugetlb.c-fix-UAF-of-vma-in-hugetlb-fault-p.patch
    (bsc#1012628 CVE-2024-47676 bsc#1231927).
  - Update
    patches.kernel.org/6.11.2-694-bpf-Fix-use-after-free-in-bpf_uprobe_multi_lin.patch
    (bsc#1012628 CVE-2024-47675 bsc#1231926).
  - Update
    patches.kernel.org/6.11.3-001-static_call-Handle-module-init-failure-correct.patch
    (bsc#1012628 CVE-2024-50002 bsc#1232083).
  - Update
    patches.kernel.org/6.11.3-002-static_call-Replace-pointless-WARN_ON-in-stati.patch
    (bsc#1012628 CVE-2024-49954 bsc#1232155).
  - Update
    patches.kernel.org/6.11.3-014-mailbox-bcm2835-Fix-timeout-during-suspend-mod.patch
    (bsc#1012628 CVE-2024-49963 bsc#1232147).
  - Update
    patches.kernel.org/6.11.3-016-ceph-remove-the-incorrect-Fw-reference-check-w.patch
    (bsc#1012628 CVE-2024-50179 bsc#1233123).
  - Update
    patches.kernel.org/6.11.3-020-net-mlx5-Fix-error-path-in-multi-packet-WQE-tr.patch
    (bsc#1012628 CVE-2024-50001 bsc#1232084).
  - Update
    patches.kernel.org/6.11.3-022-net-mlx5e-Fix-NULL-deref-in-mlx5e_tir_builder_.patch
    (bsc#1012628 CVE-2024-50000 bsc#1232085).
  - Update
    patches.kernel.org/6.11.3-024-net-mlx5e-Fix-crash-caused-by-calling-__xfrm_s.patch
    (bsc#1012628 CVE-2024-49953 bsc#1232156).
  - Update
    patches.kernel.org/6.11.3-029-netfilter-nf_tables-prevent-nf_skb_duplicated-.patch
    (bsc#1012628 CVE-2024-49952 bsc#1232157).
  - Update
    patches.kernel.org/6.11.3-031-Bluetooth-MGMT-Fix-possible-crash-on-mgmt_inde.patch
    (bsc#1012628 CVE-2024-49951 bsc#1232158).
  - Update
    patches.kernel.org/6.11.3-032-Bluetooth-L2CAP-Fix-uaf-in-l2cap_connect.patch
    (bsc#1012628 CVE-2024-49950 bsc#1232159).
  - Update
    patches.kernel.org/6.11.3-035-afs-Fix-the-setting-of-the-server-responding-f.patch
    (bsc#1012628 CVE-2024-49999 bsc#1232086).
  - Update
    patches.kernel.org/6.11.3-036-net-dsa-improve-shutdown-sequence.patch
    (bsc#1012628 CVE-2024-49998 bsc#1232087).
  - Update
    patches.kernel.org/6.11.3-039-net-ethernet-lantiq_etop-fix-memory-disclosure.patch
    (bsc#1012628 CVE-2024-49997 bsc#1232088).
  - Update
    patches.kernel.org/6.11.3-042-net-avoid-potential-underflow-in-qdisc_pkt_len.patch
    (bsc#1012628 CVE-2024-49949 bsc#1232160).
  - Update
    patches.kernel.org/6.11.3-043-net-add-more-sanity-checks-to-qdisc_pkt_len_in.patch
    (bsc#1012628 CVE-2024-49948 bsc#1232161).
  - Update
    patches.kernel.org/6.11.3-047-net-test-for-not-too-small-csum_start-in-virti.patch
    (bsc#1012628 CVE-2024-49947 bsc#1232162).
  - Update
    patches.kernel.org/6.11.3-048-ppp-do-not-assume-bh-is-held-in-ppp_channel_br.patch
    (bsc#1012628 CVE-2024-49946 bsc#1232164).
  - Update
    patches.kernel.org/6.11.3-051-net-ncsi-Disable-the-ncsi-work-before-freeing-.patch
    (bsc#1012628 CVE-2024-49945 bsc#1232165).
  - Update
    patches.kernel.org/6.11.3-054-sctp-set-sk_state-back-to-CLOSED-if-autobind-f.patch
    (bsc#1012628 CVE-2024-49944 bsc#1232166).
  - Update
    patches.kernel.org/6.11.3-056-drm-panthor-Fix-race-when-converting-group-han.patch
    (bsc#1012628 CVE-2024-50174 bsc#1233093).
  - Update
    patches.kernel.org/6.11.3-066-ASoC-Intel-soc-acpi-intel-rpl-match-add-missin.patch
    (bsc#1012628 CVE-2024-50011 bsc#1232081).
  - Update
    patches.kernel.org/6.11.3-071-drm-xe-guc_submit-add-missing-locking-in-wedge.patch
    (bsc#1012628 CVE-2024-49943 bsc#1232167).
  - Update
    patches.kernel.org/6.11.3-073-drm-xe-Prevent-null-pointer-access-in-xe_migra.patch
    (bsc#1012628 CVE-2024-49942 bsc#1232168).
  - Update
    patches.kernel.org/6.11.3-074-cifs-Fix-buffer-overflow-when-parsing-NFS-repa.patch
    (bsc#1012628 CVE-2024-49996 bsc#1232089).
  - Update
    patches.kernel.org/6.11.3-076-gpiolib-Fix-potential-NULL-pointer-dereference.patch
    (bsc#1012628 CVE-2024-49941 bsc#1232169).
  - Update
    patches.kernel.org/6.11.3-084-l2tp-prevent-possible-tunnel-refcount-underflo.patch
    (bsc#1012628 CVE-2024-49940 bsc#1232812).
  - Update
    patches.kernel.org/6.11.3-086-wifi-rtw89-avoid-to-add-interface-to-list-twic.patch
    (bsc#1012628 CVE-2024-49939 bsc#1232381).
  - Update
    patches.kernel.org/6.11.3-087-wifi-ath9k_htc-Use-__skb_set_length-for-resett.patch
    (bsc#1012628 CVE-2024-49938 bsc#1232552).
  - Update
    patches.kernel.org/6.11.3-095-wifi-cfg80211-Set-correct-chandef-when-startin.patch
    (bsc#1012628 CVE-2024-49937 bsc#1232427).
  - Update
    patches.kernel.org/6.11.3-096-net-xen-netback-prevent-UAF-in-xenvif_flush_ha.patch
    (bsc#1012628 CVE-2024-49936 bsc#1232424).
  - Update
    patches.kernel.org/6.11.3-100-ACPI-PAD-fix-crash-in-exit_round_robin.patch
    (bsc#1012628 CVE-2024-49935 bsc#1232370).
  - Update
    patches.kernel.org/6.11.3-103-exec-don-t-WARN-for-racy-path_noexec-check.patch
    (bsc#1012628 CVE-2024-50010 bsc#1232388).
  - Update
    patches.kernel.org/6.11.3-104-fs-inode-Prevent-dump_mapping-accessing-invali.patch
    (bsc#1012628 CVE-2024-49934 bsc#1232387).
  - Update
    patches.kernel.org/6.11.3-112-blk_iocost-fix-more-out-of-bound-shifts.patch
    (bsc#1012628 CVE-2024-49933 bsc#1232368).
  - Update
    patches.kernel.org/6.11.3-113-btrfs-don-t-readahead-the-relocation-inode-on-.patch
    (bsc#1012628 CVE-2024-49932 bsc#1232376).
  - Update
    patches.kernel.org/6.11.3-114-wifi-ath12k-fix-array-out-of-bound-access-in-S.patch
    (bsc#1012628 CVE-2024-49931 bsc#1232275).
  - Update
    patches.kernel.org/6.11.3-115-wifi-ath11k-fix-array-out-of-bound-access-in-S.patch
    (bsc#1012628 CVE-2024-49930 bsc#1232260).
  - Update
    patches.kernel.org/6.11.3-121-ACPICA-check-null-return-of-ACPI_ALLOCATE_ZERO.patch
    (bsc#1012628 CVE-2024-49962 bsc#1232314).
  - Update
    patches.kernel.org/6.11.3-122-tipc-guard-against-string-buffer-overrun.patch
    (bsc#1012628 CVE-2024-49995 bsc#1232432).
  - Update
    patches.kernel.org/6.11.3-139-wifi-iwlwifi-mvm-avoid-NULL-pointer-dereferenc.patch
    (bsc#1012628 CVE-2024-49929 bsc#1232253).
  - Update
    patches.kernel.org/6.11.3-150-block-fix-integer-overflow-in-BLKSECDISCARD.patch
    (bsc#1012628 CVE-2024-49994 bsc#1225770).
  - Update
    patches.kernel.org/6.11.3-151-cpufreq-amd-pstate-add-check-for-cpufreq_cpu_g.patch
    (bsc#1012628 CVE-2024-50009 bsc#1232318).
  - Update
    patches.kernel.org/6.11.3-152-cpufreq-loongson3-Use-raw_smp_processor_id-in-.patch
    (bsc#1012628 CVE-2024-50178 bsc#1233121).
  - Update
    patches.kernel.org/6.11.3-155-wifi-rtw89-avoid-reading-out-of-bounds-when-lo.patch
    (bsc#1012628 CVE-2024-49928 bsc#1232250).
  - Update
    patches.kernel.org/6.11.3-158-net-napi-Prevent-overflow-of-napi_defer_hard_i.patch
    (bsc#1012628 CVE-2024-50018 bsc#1232419).
  - Update
    patches.kernel.org/6.11.3-162-wifi-mwifiex-Fix-memcpy-field-spanning-write-w.patch
    (bsc#1012628 CVE-2024-50008 bsc#1232317).
  - Update
    patches.kernel.org/6.11.3-166-x86-ioapic-Handle-allocation-failures-graceful.patch
    (bsc#1012628 CVE-2024-49927 bsc#1232249).
  - Update
    patches.kernel.org/6.11.3-180-x86-mm-ident_map-Use-gbpages-only-where-full-G.patch
    (bsc#1012628 CVE-2024-50017 bsc#1232312).
  - Update
    patches.kernel.org/6.11.3-181-ALSA-asihpi-Fix-potential-OOB-array-access.patch
    (bsc#1012628 CVE-2024-50007 bsc#1232394).
  - Update
    patches.kernel.org/6.11.3-187-rcu-tasks-Fix-access-non-existent-percpu-rtpcp.patch
    (bsc#1012628 CVE-2024-49926 bsc#1232247).
  - Update
    patches.kernel.org/6.11.3-189-fbdev-efifb-Register-sysfs-groups-through-driv.patch
    (bsc#1012628 CVE-2024-49925 bsc#1232224).
  - Update
    patches.kernel.org/6.11.3-190-fbdev-pxafb-Fix-possible-use-after-free-in-pxa.patch
    (bsc#1012628 CVE-2024-49924 bsc#1232364).
  - Update
    patches.kernel.org/6.11.3-200-drm-stm-Avoid-use-after-free-issues-with-crtc-.patch
    (bsc#1012628 CVE-2024-49992 bsc#1232430).
  - Update
    patches.kernel.org/6.11.3-201-drm-amd-display-Pass-non-null-to-dcn20_validat.patch
    (bsc#1012628 CVE-2024-49923 bsc#1232361).
  - Update
    patches.kernel.org/6.11.3-202-drm-amd-display-Check-null-pointers-before-usi.patch
    (bsc#1012628 CVE-2024-49922 bsc#1232374).
  - Update
    patches.kernel.org/6.11.3-203-drm-amd-display-Check-null-pointers-before-use.patch
    (bsc#1012628 CVE-2024-49921 bsc#1232371).
  - Update
    patches.kernel.org/6.11.3-204-drm-amd-display-Check-null-pointers-before-mul.patch
    (bsc#1012628 CVE-2024-49920 bsc#1232313).
  - Update
    patches.kernel.org/6.11.3-206-drm-amdkfd-amdkfd_free_gtt_mem-clear-the-corre.patch
    (bsc#1012628 CVE-2024-49991 bsc#1232282).
  - Update
    patches.kernel.org/6.11.3-207-drm-amd-display-Add-null-check-for-head_pipe-i.patch
    (bsc#1012628 CVE-2024-49919 bsc#1231968).
  - Update
    patches.kernel.org/6.11.3-208-drm-amd-display-Add-null-check-for-head_pipe-i.patch
    (bsc#1012628 CVE-2024-49918 bsc#1231967).
  - Update
    patches.kernel.org/6.11.3-209-drm-amd-display-Add-NULL-check-for-clk_mgr-and.patch
    (bsc#1012628 CVE-2024-49917 bsc#1231965).
  - Update
    patches.kernel.org/6.11.3-210-drm-amd-display-Add-NULL-check-for-clk_mgr-and.patch
    (bsc#1012628 CVE-2024-49916 bsc#1231964).
  - Update
    patches.kernel.org/6.11.3-211-drm-amd-display-Add-NULL-check-for-clk_mgr-in-.patch
    (bsc#1012628 CVE-2024-49915 bsc#1231963).
  - Update
    patches.kernel.org/6.11.3-212-drm-xe-hdcp-Check-GSC-structure-validity.patch
    (bsc#1012628 CVE-2024-49990 bsc#1232484).
  - Update
    patches.kernel.org/6.11.3-213-drm-amd-display-Add-null-check-for-pipe_ctx-pl.patch
    (bsc#1012628 CVE-2024-49914 bsc#1232369).
  - Update
    patches.kernel.org/6.11.3-214-drm-amd-display-Add-null-check-for-top_pipe_to.patch
    (bsc#1012628 CVE-2024-49913 bsc#1232307).
  - Update
    patches.kernel.org/6.11.3-222-drm-amd-display-Handle-null-stream_status-in-p.patch
    (bsc#1012628 CVE-2024-49912 bsc#1232367).
  - Update
    patches.kernel.org/6.11.3-223-drm-amd-display-Add-NULL-check-for-function-po.patch
    (bsc#1012628 CVE-2024-49911 bsc#1232366).
  - Update
    patches.kernel.org/6.11.3-224-drm-amd-display-Add-NULL-check-for-function-po.patch
    (bsc#1012628 CVE-2024-49910 bsc#1232365).
  - Update
    patches.kernel.org/6.11.3-225-drm-amd-display-Add-NULL-check-for-function-po.patch
    (bsc#1012628 CVE-2024-49909 bsc#1232337).
  - Update
    patches.kernel.org/6.11.3-226-drm-amd-display-fix-a-UBSAN-warning-in-DML2.1.patch
    (bsc#1012628 CVE-2024-50177 bsc#1233115).
  - Update
    patches.kernel.org/6.11.3-227-drm-amd-display-Add-null-check-for-afb-in-amdg.patch
    (bsc#1012628 CVE-2024-49908 bsc#1232335).
  - Update
    patches.kernel.org/6.11.3-228-drm-amd-display-Check-null-pointers-before-usi.patch
    (bsc#1012628 CVE-2024-49907 bsc#1232334).
  - Update
    patches.kernel.org/6.11.3-229-drm-amd-display-Check-null-pointer-before-try-.patch
    (bsc#1012628 CVE-2024-49906 bsc#1232332).
  - Update
    patches.kernel.org/6.11.3-230-drm-amd-display-Add-null-check-for-afb-in-amdg.patch
    (bsc#1012628 CVE-2024-49905 bsc#1232357).
  - Update
    patches.kernel.org/6.11.3-232-drm-amd-display-fix-double-free-issue-during-a.patch
    (bsc#1012628 CVE-2024-49989 bsc#1232483).
  - Update
    patches.kernel.org/6.11.3-233-drm-amdgpu-add-list-empty-check-to-avoid-null-.patch
    (bsc#1012628 CVE-2024-49904 bsc#1232356).
  - Update
    patches.kernel.org/6.11.3-235-jfs-Fix-uaf-in-dbFreeBits.patch
    (bsc#1012628 CVE-2024-49903 bsc#1232362).
  - Update
    patches.kernel.org/6.11.3-236-jfs-check-if-leafidx-greater-than-num-leaves-p.patch
    (bsc#1012628 CVE-2024-49902 bsc#1232378).
  - Update
    patches.kernel.org/6.11.3-239-drm-msm-adreno-Assign-msm_gpu-pdev-earlier-to-.patch
    (bsc#1012628 CVE-2024-49901 bsc#1232305).
  - Update
    patches.kernel.org/6.11.3-240-jfs-Fix-uninit-value-access-of-new_ea-in-ea_bu.patch
    (bsc#1012628 CVE-2024-49900 bsc#1232359).
  - Update
    patches.kernel.org/6.11.3-250-drm-amd-display-Initialize-denominators-defaul.patch
    (bsc#1012628 CVE-2024-49899 bsc#1232358).
  - Update
    patches.kernel.org/6.11.3-251-drm-amd-display-Check-null-initialized-variabl.patch
    (bsc#1012628 CVE-2024-49898 bsc#1232222).
  - Update
    patches.kernel.org/6.11.3-252-drm-amd-display-Check-phantom_stream-before-it.patch
    (bsc#1012628 CVE-2024-49897 bsc#1232355).
  - Update
    patches.kernel.org/6.11.3-253-drm-amd-display-Check-stream-before-comparing-.patch
    (bsc#1012628 CVE-2024-49896 bsc#1232221).
  - Update
    patches.kernel.org/6.11.3-254-drm-amd-display-Deallocate-DML-memory-if-alloc.patch
    (bsc#1012628 CVE-2024-49972 bsc#1232315).
  - Update
    patches.kernel.org/6.11.3-255-drm-amd-display-Increase-array-size-of-dummy_b.patch
    (bsc#1012628 CVE-2024-49971 bsc#1232473).
  - Update
    patches.kernel.org/6.11.3-256-drm-amd-display-Fix-index-out-of-bounds-in-DCN.patch
    (bsc#1012628 CVE-2024-49895 bsc#1232352).
  - Update
    patches.kernel.org/6.11.3-257-drm-amd-display-Fix-index-out-of-bounds-in-deg.patch
    (bsc#1012628 CVE-2024-49894 bsc#1232354).
  - Update
    patches.kernel.org/6.11.3-258-drm-amd-display-Implement-bounds-check-for-str.patch
    (bsc#1012628 CVE-2024-49970 bsc#1232516).
  - Update
    patches.kernel.org/6.11.3-259-drm-amd-display-Fix-index-out-of-bounds-in-DCN.patch
    (bsc#1012628 CVE-2024-49969 bsc#1232519).
  - Update
    patches.kernel.org/6.11.3-263-drm-amd-display-Check-stream_status-before-it-.patch
    (bsc#1012628 CVE-2024-49893 bsc#1232350).
  - Update
    patches.kernel.org/6.11.3-264-drm-amd-display-Avoid-overflow-assignment-in-l.patch
    (bsc#1012628 CVE-2024-50016 bsc#1232420).
  - Update
    patches.kernel.org/6.11.3-265-drm-amd-display-Initialize-get_bytes_per_eleme.patch
    (bsc#1012628 CVE-2024-49892 bsc#1232220).
  - Update
    patches.kernel.org/6.11.3-269-scsi-lpfc-Validate-hdwq-pointers-before-derefe.patch
    (bsc#1012628 CVE-2024-49891 bsc#1232218).
  - Update
    patches.kernel.org/6.11.3-286-drm-amd-pm-ensure-the-fw_info-is-not-null-befo.patch
    (bsc#1012628 CVE-2024-49890 bsc#1232217).
  - Update
    patches.kernel.org/6.11.3-299-ksmbd-add-refcnt-to-ksmbd_conn-struct.patch
    (bsc#1012628 CVE-2024-49988 bsc#1232482).
  - Update
    patches.kernel.org/6.11.3-302-ext4-filesystems-without-casefold-feature-cann.patch
    (bsc#1012628 CVE-2024-49968 bsc#1232264).
  - Update
    patches.kernel.org/6.11.3-305-ext4-avoid-use-after-free-in-ext4_ext_show_lea.patch
    (bsc#1012628 CVE-2024-49889 bsc#1232215).
  - Update
    patches.kernel.org/6.11.3-306-ext4-fix-i_data_sem-unlock-order-in-ext4_ind_m.patch
    (bsc#1012628 CVE-2024-50006 bsc#1232442).
  - Update
    patches.kernel.org/6.11.3-309-bpftool-Fix-undefined-behavior-in-qsort-NULL-0.patch
    (bsc#1012628 CVE-2024-49987 bsc#1232258).
  - Update
    patches.kernel.org/6.11.3-310-bpf-Fix-a-sdiv-overflow-issue.patch
    (bsc#1012628 CVE-2024-49888 bsc#1232208).
  - Update
    patches.kernel.org/6.11.3-333-f2fs-fix-to-don-t-panic-system-for-no-free-seg.patch
    (bsc#1012628 CVE-2024-49887 bsc#1232206).
  - Update
    patches.kernel.org/6.11.3-343-platform-x86-x86-android-tablets-Fix-use-after.patch
    (bsc#1012628 CVE-2024-49986 bsc#1232093).
  - Update
    patches.kernel.org/6.11.3-344-platform-x86-ISST-Fix-the-KASAN-report-slab-ou.patch
    (bsc#1012628 CVE-2024-49886 bsc#1232196).
  - Update
    patches.kernel.org/6.11.3-346-i2c-stm32f7-Do-not-prepare-unprepare-clock-dur.patch
    (bsc#1012628 CVE-2024-49985 bsc#1232094).
  - Update
    patches.kernel.org/6.11.3-349-media-i2c-ar0521-Use-cansleep-version-of-gpiod.patch
    (bsc#1012628 CVE-2024-49961 bsc#1232148).
  - Update
    patches.kernel.org/6.11.3-362-mm-slub-avoid-zeroing-kmalloc-redzone.patch
    (bsc#1012628 CVE-2024-49885 bsc#1232197).
  - Update
    patches.kernel.org/6.11.3-365-drm-v3d-Prevent-out-of-bounds-access-in-perfor.patch
    (bsc#1012628 CVE-2024-49984 bsc#1232095).
  - Update
    patches.kernel.org/6.11.3-377-ext4-no-need-to-continue-when-the-number-of-en.patch
    (bsc#1012628 CVE-2024-49967 bsc#1232140).
  - Update
    patches.kernel.org/6.11.3-379-ext4-fix-slab-use-after-free-in-ext4_split_ext.patch
    (bsc#1012628 CVE-2024-49884 bsc#1232198).
  - Update
    patches.kernel.org/6.11.3-382-ext4-dax-fix-overflowing-extents-beyond-inode-.patch
    (bsc#1012628 CVE-2024-50015 bsc#1232079).
  - Update
    patches.kernel.org/6.11.3-384-ext4-drop-ppath-from-ext4_ext_replay_update_ex.patch
    (bsc#1012628 CVE-2024-49983 bsc#1232096).
  - Update
    patches.kernel.org/6.11.3-385-ext4-aovid-use-after-free-in-ext4_ext_insert_e.patch
    (bsc#1012628 CVE-2024-49883 bsc#1232199).
  - Update
    patches.kernel.org/6.11.3-386-ext4-fix-double-brelse-the-buffer-of-the-exten.patch
    (bsc#1012628 CVE-2024-49882 bsc#1232200).
  - Update
    patches.kernel.org/6.11.3-387-ext4-fix-timer-use-after-free-on-failed-mount.patch
    (bsc#1012628 CVE-2024-49960 bsc#1232395).
  - Update
    patches.kernel.org/6.11.3-388-ext4-fix-access-to-uninitialised-lock-in-fc-re.patch
    (bsc#1012628 CVE-2024-50014 bsc#1232446).
  - Update
    patches.kernel.org/6.11.3-389-ext4-update-orig_path-in-ext4_find_extent.patch
    (bsc#1012628 CVE-2024-49881 bsc#1232201).
  - Update
    patches.kernel.org/6.11.3-395-ext4-fix-off-by-one-issue-in-alloc_flex_gd.patch
    (bsc#1012628 CVE-2024-49880 bsc#1232205).
  - Update
    patches.kernel.org/6.11.3-403-drm-omapdrm-Add-missing-check-for-alloc_ordere.patch
    (bsc#1012628 CVE-2024-49879 bsc#1232349).
  - Update
    patches.kernel.org/6.11.3-404-resource-fix-region_intersects-vs-add_memory_d.patch
    (bsc#1012628 CVE-2024-49878 bsc#1232340).
  - Update
    patches.kernel.org/6.11.3-406-jbd2-stop-waiting-for-space-when-jbd2_cleanup_.patch
    (bsc#1012628 CVE-2024-49959 bsc#1232149).
  - Update
    patches.kernel.org/6.11.3-411-ocfs2-reserve-space-for-inline-xattr-before-at.patch
    (bsc#1012628 CVE-2024-49958 bsc#1232151).
  - Update
    patches.kernel.org/6.11.3-412-ocfs2-cancel-dqi_sync_work-before-freeing-oinf.patch
    (bsc#1012628 CVE-2024-49966 bsc#1232141).
  - Update
    patches.kernel.org/6.11.3-413-ocfs2-remove-unreasonable-unlock-in-ocfs2_read.patch
    (bsc#1012628 CVE-2024-49965 bsc#1232142).
  - Update
    patches.kernel.org/6.11.3-414-ocfs2-fix-null-ptr-deref-when-journal-load-fai.patch
    (bsc#1012628 CVE-2024-49957 bsc#1232152).
  - Update
    patches.kernel.org/6.11.3-415-ocfs2-fix-possible-null-ptr-deref-in-ocfs2_set.patch
    (bsc#1012628 CVE-2024-49877 bsc#1232339).
  - Update
    patches.kernel.org/6.11.3-421-drm-xe-fix-UAF-around-queue-destruction.patch
    (bsc#1012628 CVE-2024-49876 bsc#1232336).
  - Update
    patches.kernel.org/6.11.3-428-exfat-fix-memory-leak-in-exfat_load_bitmap.patch
    (bsc#1012628 CVE-2024-50013 bsc#1232080).
  - Update
    patches.kernel.org/6.11.3-432-nfsd-map-the-EBADMSG-to-nfserr_io-to-avoid-war.patch
    (bsc#1012628 CVE-2024-49875 bsc#1232333).
  - Update
    patches.kernel.org/6.11.3-434-i3c-master-svc-Fix-use-after-free-vulnerabilit.patch
    (bsc#1012628 CVE-2024-49874 bsc#1232295).
  - Update
    patches.kernel.org/6.11.3-440-aoe-fix-the-potential-use-after-free-problem-i.patch
    (bsc#1012628 CVE-2024-49982 bsc#1232097).
  - Update
    patches.kernel.org/6.11.3-445-remoteproc-k3-r5-Fix-error-handling-when-power.patch
    (bsc#1012628 CVE-2024-50176 bsc#1233091).
  - Update
    patches.kernel.org/6.11.3-446-gfs2-fix-double-destroy_workqueue-error.patch
    (bsc#1012628 CVE-2024-49956 bsc#1232153).
  - Update
    patches.kernel.org/6.11.3-457-media-venus-fix-use-after-free-bug-in-venus_re.patch
    (bsc#1012628 CVE-2024-49981 bsc#1232098).
  - Update
    patches.kernel.org/6.11.3-459-media-qcom-camss-Remove-use_count-guard-in-sto.patch
    (bsc#1012628 CVE-2024-50175 bsc#1233092).
  - Update
    patches.kernel.org/6.11.3-470-vrf-revert-vrf-Remove-unnecessary-RCU-bh-criti.patch
    (bsc#1012628 CVE-2024-49980 bsc#1232099).
  - Update
    patches.kernel.org/6.11.3-471-net-gso-fix-tcp-fraglist-segmentation-after-pu.patch
    (bsc#1012628 CVE-2024-49979 bsc#1232100).
  - Update
    patches.kernel.org/6.11.3-472-gso-fix-udp-gso-fraglist-segmentation-after-pu.patch
    (bsc#1012628 CVE-2024-49978 bsc#1232101).
  - Update
    patches.kernel.org/6.11.3-475-net-stmmac-Fix-zero-division-error-when-disabl.patch
    (bsc#1012628 CVE-2024-49977 bsc#1232102).
  - Update
    patches.kernel.org/6.11.3-477-mm-filemap-fix-filemap_get_folios_contig-THP-p.patch
    (bsc#1012628 CVE-2024-49873 bsc#1232291).
  - Update
    patches.kernel.org/6.11.3-478-mm-hugetlb-fix-memfd_pin_folios-free_huge_page.patch
    (bsc#1012628 CVE-2024-49964 bsc#1232144).
  - Update
    patches.kernel.org/6.11.3-481-mm-gup-fix-memfd_pin_folios-alloc-race-panic.patch
    (bsc#1012628 CVE-2024-49872 bsc#1232288).
  - Update
    patches.kernel.org/6.11.3-483-Input-adp5589-keys-fix-NULL-pointer-dereferenc.patch
    (bsc#1012628 CVE-2024-49871 bsc#1232287).
  - Update
    patches.kernel.org/6.11.3-486-cachefiles-fix-dentry-leak-in-cachefiles_open_.patch
    (bsc#1012628 CVE-2024-49870 bsc#1232279).
  - Update
    patches.kernel.org/6.11.3-493-btrfs-send-fix-buffer-overflow-detection-when-.patch
    (bsc#1012628 CVE-2024-49869 bsc#1232278).
  - Update
    patches.kernel.org/6.11.3-494-btrfs-fix-a-NULL-pointer-dereference-when-fail.patch
    (bsc#1012628 CVE-2024-49868 bsc#1232272).
  - Update
    patches.kernel.org/6.11.3-497-btrfs-wait-for-fixup-workers-before-stopping-c.patch
    (bsc#1012628 CVE-2024-49867 bsc#1232262).
  - Update
    patches.kernel.org/6.11.3-498-cpufreq-Avoid-a-bad-reference-count-on-CPU-nod.patch
    (bsc#1012628 CVE-2024-50012 bsc#1232386).
  - Update
    patches.kernel.org/6.11.3-503-mac802154-Fix-potential-RCU-dereference-issue-.patch
    (bsc#1012628 CVE-2024-50005 bsc#1232082).
  - Update
    patches.kernel.org/6.11.3-507-tracing-timerlat-Drop-interface_lock-in-stop_k.patch
    (bsc#1012628 CVE-2024-49976 bsc#1232103).
  - Update
    patches.kernel.org/6.11.3-508-tracing-timerlat-Fix-a-race-during-cpuhp-proce.patch
    (bsc#1012628 CVE-2024-49866 bsc#1232259).
  - Update
    patches.kernel.org/6.11.3-515-drm-panthor-Fix-access-to-uninitialized-variab.patch
    (bsc#1012628 CVE-2024-50173 bsc#1233094).
  - Update
    patches.kernel.org/6.11.3-524-drm-amd-display-update-DML2-policy-EnhancedPre.patch
    (bsc#1012628 CVE-2024-50004 bsc#1232396).
  - Update
    patches.kernel.org/6.11.3-525-drm-amd-display-Fix-system-hang-while-resume-w.patch
    (bsc#1012628 CVE-2024-50003 bsc#1232385).
  - Update
    patches.kernel.org/6.11.3-531-uprobes-fix-kernel-info-leak-via-uprobes-vma.patch
    (bsc#1012628 CVE-2024-49975 bsc#1232104).
  - Update
    patches.kernel.org/6.11.3-536-NFSD-Limit-the-number-of-concurrent-async-COPY.patch
    (bsc#1012628 CVE-2024-49974 bsc#1232383).
  - Update
    patches.kernel.org/6.11.3-540-r8169-add-tally-counter-fields-added-with-RTL8.patch
    (bsc#1012628 CVE-2024-49973 bsc#1232105).
  - Update
    patches.kernel.org/6.11.3-542-ACPI-battery-Fix-possible-crash-when-unregiste.patch
    (bsc#1012628 CVE-2024-49955 bsc#1232154).
  - Update
    patches.kernel.org/6.11.3-544-drm-xe-vm-move-xa_alloc-to-prevent-UAF.patch
    (bsc#1012628 CVE-2024-49865 bsc#1232257).
  - Update
    patches.kernel.org/6.11.3-549-rxrpc-Fix-a-race-between-socket-set-up-and-I-O.patch
    (bsc#1012628 CVE-2024-49864 bsc#1232256).
  - Update
    patches.kernel.org/6.11.3-550-vhost-scsi-null-ptr-dereference-in-vhost_scsi_.patch
    (bsc#1012628 CVE-2024-49863 bsc#1232255).
  - Update
    patches.kernel.org/6.11.4-001-unicode-Don-t-special-case-ignorable-code-poin.patch
    (bsc#1012628 CVE-2024-50089 bsc#1232860).
  - Update
    patches.kernel.org/6.11.4-002-net-fec-don-t-save-PTP-state-if-PTP-is-unsuppo.patch
    (bsc#1012628 CVE-2024-50097 bsc#1232871).
  - Update
    patches.kernel.org/6.11.4-011-ntfs3-Change-to-non-blocking-allocation-in-ntf.patch
    (bsc#1012628 CVE-2024-50065 bsc#1231899).
  - Update
    patches.kernel.org/6.11.4-014-zram-free-secondary-algorithms-names.patch
    (bsc#1012628 CVE-2024-50064 bsc#1231901).
  - Update
    patches.kernel.org/6.11.4-022-ext4-don-t-set-SB_RDONLY-after-filesystem-erro.patch
    (bsc#1012628 CVE-2024-50191 bsc#1233101).
  - Update
    patches.kernel.org/6.11.4-026-bpf-Prevent-tail-call-between-progs-attached-t.patch
    (bsc#1012628 CVE-2024-50063 bsc#1232435).
  - Update
    patches.kernel.org/6.11.4-028-RDMA-mad-Improve-handling-of-timed-out-WRs-of-.patch
    (bsc#1012628 CVE-2024-50095 bsc#1232873).
  - Update
    patches.kernel.org/6.11.4-031-RDMA-rtrs-srv-Avoid-null-pointer-deref-during-.patch
    (bsc#1012628 CVE-2024-50062 bsc#1232232).
  - Update
    patches.kernel.org/6.11.4-036-i3c-master-cdns-Fix-use-after-free-vulnerabili.patch
    (bsc#1012628 CVE-2024-50061 bsc#1232263).
  - Update
    patches.kernel.org/6.11.4-038-io_uring-check-if-we-need-to-reschedule-during.patch
    (bsc#1012628 CVE-2024-50060 bsc#1232417).
  - Update
    patches.kernel.org/6.11.4-039-ntb-ntb_hw_switchtec-Fix-use-after-free-vulner.patch
    (bsc#1012628 CVE-2024-50059 bsc#1232345).
  - Update
    patches.kernel.org/6.11.4-052-clk-imx-Remove-CLK_SET_PARENT_GATE-for-DRAM-mu.patch
    (bsc#1012628 CVE-2024-50181 bsc#1233127).
  - Update
    patches.kernel.org/6.11.4-053-serial-protect-uart_port_dtr_rts-in-uart_shutd.patch
    (bsc#1012628 CVE-2024-50058 bsc#1232285).
  - Update
    patches.kernel.org/6.11.4-054-usb-typec-tipd-Free-IRQ-only-if-it-was-request.patch
    (bsc#1012628 CVE-2024-50057 bsc#1232393).
  - Update
    patches.kernel.org/6.11.4-063-virtio_pmem-Check-device-status-before-request.patch
    (bsc#1012628 CVE-2024-50184 bsc#1233135).
  - Update
    patches.kernel.org/6.11.4-066-usb-gadget-uvc-Fix-ERR_PTR-dereference-in-uvc_.patch
    (bsc#1012628 CVE-2024-50056 bsc#1232389).
  - Update
    patches.kernel.org/6.11.4-067-dm-vdo-don-t-refer-to-dedupe_context-after-rel.patch
    (bsc#1012628 CVE-2024-50091 bsc#1232872).
  - Update
    patches.kernel.org/6.11.4-068-driver-core-bus-Fix-double-free-in-driver-API-.patch
    (bsc#1012628 CVE-2024-50055 bsc#1232329).
  - Update
    patches.kernel.org/6.11.4-071-scsi-lpfc-Ensure-DA_ID-handling-completion-bef.patch
    (bsc#1012628 CVE-2024-50183 bsc#1233130).
  - Update
    patches.kernel.org/6.11.4-073-drm-xe-oa-Fix-overflow-in-oa-batch-buffer.patch
    (bsc#1012628 CVE-2024-50090 bsc#1232862).
  - Update
    patches.kernel.org/6.11.4-074-drm-amd-display-Check-null-pointer-before-dere.patch
    (bsc#1012628 CVE-2024-50049 bsc#1232309).
  - Update
    patches.kernel.org/6.11.4-075-fbcon-Fix-a-NULL-pointer-dereference-issue-in-.patch
    (bsc#1012628 CVE-2024-50048 bsc#1232310).
  - Update
    patches.kernel.org/6.11.4-076-smb-client-fix-UAF-in-async-decryption.patch
    (bsc#1012628 CVE-2024-50047 bsc#1232418).
  - Update
    patches.kernel.org/6.11.4-077-fbdev-sisfb-Fix-strbuf-array-overflow.patch
    (bsc#1012628 CVE-2024-50180 bsc#1233125).
  - Update
    patches.kernel.org/6.11.4-082-ice-fix-memleak-in-ice_init_tx_topology.patch
    (bsc#1012628 CVE-2024-50190 bsc#1233090).
  - Update
    patches.kernel.org/6.11.4-086-NFSv4-Prevent-NULL-pointer-dereference-in-nfs4.patch
    (bsc#1012628 CVE-2024-50046 bsc#1231902).
  - Update
    patches.kernel.org/6.11.4-087-net-phy-dp83869-fix-memory-corruption-when-ena.patch
    (bsc#1012628 CVE-2024-50188 bsc#1233107).
  - Update
    patches.kernel.org/6.11.4-088-sfc-Don-t-invoke-xdp_do_flush-from-netpoll.patch
    (bsc#1012628 CVE-2024-50094 bsc#1232875).
  - Update
    patches.kernel.org/6.11.4-096-netfilter-br_netfilter-fix-panic-with-metadata.patch
    (bsc#1012628 CVE-2024-50045 bsc#1231903).
  - Update
    patches.kernel.org/6.11.4-099-Bluetooth-RFCOMM-FIX-possible-deadlock-in-rfco.patch
    (bsc#1012628 CVE-2024-50044 bsc#1231904).
  - Update
    patches.kernel.org/6.11.4-102-nfsd-fix-possible-badness-in-FREE_STATEID.patch
    (bsc#1012628 CVE-2024-50043 bsc#1231905).
  - Update
    patches.kernel.org/6.11.4-103-thermal-intel-int340x-processor-Fix-warning-du.patch
    (bsc#1012628 CVE-2024-50093 bsc#1232877).
  - Update
    patches.kernel.org/6.11.4-120-ice-Fix-increasing-MSI-X-on-VF.patch
    (bsc#1012628 CVE-2024-50042 bsc#1231906).
  - Update
    patches.kernel.org/6.11.4-121-i40e-Fix-macvlan-leak-by-synchronizing-access-.patch
    (bsc#1012628 CVE-2024-50041 bsc#1231907).
  - Update
    patches.kernel.org/6.11.4-122-igb-Do-not-bring-the-device-up-after-non-fatal.patch
    (bsc#1012628 CVE-2024-50040 bsc#1231908).
  - Update
    patches.kernel.org/6.11.4-124-net-sched-accept-TCA_STAB-only-for-root-qdisc.patch
    (bsc#1012628 CVE-2024-50039 bsc#1231909).
  - Update
    patches.kernel.org/6.11.4-131-netfilter-xtables-avoid-NFPROTO_UNSPEC-where-n.patch
    (bsc#1012628 CVE-2024-50038 bsc#1231910).
  - Update
    patches.kernel.org/6.11.4-135-net-netconsole-fix-wrong-warning.patch
    (bsc#1012628 CVE-2024-50092 bsc#1232874).
  - Update
    patches.kernel.org/6.11.4-136-drm-fbdev-dma-Only-cleanup-deferred-I-O-if-nec.patch
    (bsc#1012628 CVE-2024-50037 bsc#1231911).
  - Update
    patches.kernel.org/6.11.4-137-net-do-not-delay-dst_entries_add-in-dst_releas.patch
    (bsc#1012628 CVE-2024-50036 bsc#1231912).
  - Update
    patches.kernel.org/6.11.4-144-ppp-fix-ppp_async_encode-illegal-access.patch
    (bsc#1012628 CVE-2024-50035 bsc#1232392).
  - Update
    patches.kernel.org/6.11.4-145-net-smc-fix-lacks-of-icsk_syn_mss-with-IPPROTO.patch
    (bsc#1012628 CVE-2024-50034 bsc#1231913).
  - Update
    patches.kernel.org/6.11.4-146-slip-make-slhc_remember-more-robust-against-ma.patch
    (bsc#1012628 CVE-2024-50033 bsc#1231914).
  - Update
    patches.kernel.org/6.11.4-147-rcu-nocb-Fix-rcuog-wake-up-from-offline-softir.patch
    (bsc#1012628 CVE-2024-50032 bsc#1231915).
  - Update
    patches.kernel.org/6.11.4-156-HID-amd_sfh-Switch-to-device-managed-dmam_allo.patch
    (bsc#1012628 CVE-2024-50189 bsc#1233105).
  - Update
    patches.kernel.org/6.11.4-170-drm-v3d-Stop-the-active-perfmon-before-being-d.patch
    (bsc#1012628 CVE-2024-50031 bsc#1231947).
  - Update
    patches.kernel.org/6.11.4-171-drm-vc4-Stop-the-active-perfmon-before-being-d.patch
    (bsc#1012628 CVE-2024-50187 bsc#1233108).
  - Update
    patches.kernel.org/6.11.4-176-drm-xe-ct-prevent-UAF-in-send_recv.patch
    (bsc#1012628 CVE-2024-50030 bsc#1231948).
  - Update
    patches.kernel.org/6.11.4-178-Bluetooth-hci_conn-Fix-UAF-in-hci_enhanced_set.patch
    (bsc#1012628 CVE-2024-50029 bsc#1231949).
  - Update
    patches.kernel.org/6.11.4-179-thermal-core-Reference-count-the-zone-in-therm.patch
    (bsc#1012628 CVE-2024-50028 bsc#1231950).
  - Update
    patches.kernel.org/6.11.4-180-thermal-core-Free-tzp-copy-along-with-the-ther.patch
    (bsc#1012628 CVE-2024-50027 bsc#1231951).
  - Update
    patches.kernel.org/6.11.4-181-scsi-wd33c93-Don-t-use-stale-scsi_pointer-valu.patch
    (bsc#1012628 CVE-2024-50026 bsc#1231952).
  - Update
    patches.kernel.org/6.11.4-182-scsi-fnic-Move-flush_work-initialization-out-o.patch
    (bsc#1012628 CVE-2024-50025 bsc#1231953).
  - Update
    patches.kernel.org/6.11.4-189-net-explicitly-clear-the-sk-pointer-when-pf-cr.patch
    (bsc#1012628 CVE-2024-50186 bsc#1233110).
  - Update
    patches.kernel.org/6.11.4-190-net-Fix-an-unsafe-loop-on-the-list.patch
    (bsc#1012628 CVE-2024-50024 bsc#1231954).
  - Update
    patches.kernel.org/6.11.4-192-net-phy-Remove-LED-entry-from-LEDs-list-on-unr.patch
    (bsc#1012628 CVE-2024-50023 bsc#1231955).
  - Update
    patches.kernel.org/6.11.4-194-mptcp-handle-consistently-DSS-corruption.patch
    (bsc#1012628 CVE-2024-50185 bsc#1233109).
  - Update
    patches.kernel.org/6.11.4-196-device-dax-correct-pgoff-align-in-dax_set_mapp.patch
    (bsc#1012628 CVE-2024-50022 bsc#1231956).
  - Update
    patches.kernel.org/6.11.4-197-ice-Fix-improper-handling-of-refcount-in-ice_d.patch
    (bsc#1012628 CVE-2024-50021 bsc#1231957).
  - Update
    patches.kernel.org/6.11.4-198-ice-Fix-improper-handling-of-refcount-in-ice_s.patch
    (bsc#1012628 CVE-2024-50020 bsc#1231989).
  - Update
    patches.kernel.org/6.11.4-199-nouveau-dmem-Fix-vulnerability-in-migrate_to_r.patch
    (bsc#1012628 CVE-2024-50096 bsc#1232870).
  - Update
    patches.kernel.org/6.11.4-207-kthread-unpark-only-parked-kthread.patch
    (bsc#1012628 CVE-2024-50019 bsc#1231990).
  - Update
    patches.kernel.org/6.11.4-209-secretmem-disable-memfd_secret-if-arch-cannot-.patch
    (bsc#1012628 CVE-2024-50182 bsc#1233129).
  - Update
    patches.kernel.org/6.11.5-001-btrfs-fix-uninitialized-pointer-free-in-add_in.patch
    (bsc#1012628 CVE-2024-50088 bsc#1232498).
  - Update
    patches.kernel.org/6.11.5-002-btrfs-fix-uninitialized-pointer-free-on-read_a.patch
    (bsc#1012628 CVE-2024-50087 bsc#1232499).
  - Update
    patches.kernel.org/6.11.5-003-ksmbd-fix-user-after-free-from-session-log-off.patch
    (bsc#1012628 CVE-2024-50086 bsc#1232521).
  - Update
    patches.kernel.org/6.11.5-006-mptcp-pm-fix-UaF-read-in-mptcp_pm_nl_rm_addr_o.patch
    (bsc#1012628 CVE-2024-50085 bsc#1232508).
  - Update
    patches.kernel.org/6.11.5-012-posix-clock-Fix-missing-timespec64-check-in-pc.patch
    (bsc#1012628 CVE-2024-50195 bsc#1233103).
  - Update
    patches.kernel.org/6.11.5-015-arm64-probes-Remove-broken-LDR-literal-uprobe-.patch
    (bsc#1012628 CVE-2024-50099 bsc#1232887).
  - Update
    patches.kernel.org/6.11.5-017-arm64-probes-Fix-uprobes-for-big-endian-kernel.patch
    (bsc#1012628 CVE-2024-50194 bsc#1233111).
  - Update
    patches.kernel.org/6.11.5-019-net-microchip-vcap-api-Fix-memory-leaks-in-vca.patch
    (bsc#1012628 CVE-2024-50084 bsc#1232494).
  - Update
    patches.kernel.org/6.11.5-021-maple_tree-correct-tree-corruption-on-spanning.patch
    (bsc#1012628 CVE-2024-50200 bsc#1233088).
  - Update
    patches.kernel.org/6.11.5-026-mm-mremap-fix-move_normal_pmd-retract_page_tab.patch
    (bsc#1012628 CVE-2024-50066 bsc#1232078).
  - Update
    patches.kernel.org/6.11.5-029-mm-swapfile-skip-HugeTLB-pages-for-unuse_vma.patch
    (bsc#1012628 CVE-2024-50199 bsc#1233112).
  - Update
    patches.kernel.org/6.11.5-030-mm-damon-tests-sysfs-kunit.h-fix-memory-leak-i.patch
    (bsc#1012628 CVE-2024-50068 bsc#1232512).
  - Update
    patches.kernel.org/6.11.5-031-tcp-fix-mptcp-DSS-corruption-due-to-large-pmtu.patch
    (bsc#1012628 CVE-2024-50083 bsc#1232493).
  - Update
    patches.kernel.org/6.11.5-035-iommu-vt-d-Fix-incorrect-pci_for_each_dma_alia.patch
    (bsc#1012628 CVE-2024-50101 bsc#1232869).
  - Update
    patches.kernel.org/6.11.5-047-blk-rq-qos-fix-crash-on-rq_qos_wait-vs.-rq_qos.patch
    (bsc#1012628 CVE-2024-50082 bsc#1232500).
  - Update
    patches.kernel.org/6.11.5-049-blk-mq-setup-queue-tag_set-before-initializing.patch
    (bsc#1012628 CVE-2024-50081 bsc#1232501).
  - Update
    patches.kernel.org/6.11.5-050-ublk-don-t-allow-user-copy-for-unprivileged-de.patch
    (bsc#1012628 CVE-2024-50080 bsc#1232502).
  - Update
    patches.kernel.org/6.11.5-051-io_uring-sqpoll-ensure-task-state-is-TASK_RUNN.patch
    (bsc#1012628 CVE-2024-50079 bsc#1232495).
  - Update
    patches.kernel.org/6.11.5-055-scsi-ufs-core-Set-SDEV_OFFLINE-when-UFS-is-shu.patch
    (bsc#1012628 CVE-2024-50098 bsc#1232881).
  - Update
    patches.kernel.org/6.11.5-058-drm-radeon-Fix-encoder-possible_clones.patch
    (bsc#1012628 CVE-2024-50201 bsc#1233104).
  - Update
    patches.kernel.org/6.11.5-075-iio-light-veml6030-fix-IIO-device-retrieval-fr.patch
    (bsc#1012628 CVE-2024-50198 bsc#1233100).
  - Update
    patches.kernel.org/6.11.5-093-Bluetooth-Call-iso_exit-on-module-unload.patch
    (bsc#1012628 CVE-2024-50078 bsc#1232503).
  - Update
    patches.kernel.org/6.11.5-095-Bluetooth-ISO-Fix-multiple-init-when-debugfs-i.patch
    (bsc#1012628 CVE-2024-50077 bsc#1232504).
  - Update
    patches.kernel.org/6.11.5-098-vt-prevent-kernel-infoleak-in-con_font_get.patch
    (bsc#1012628 CVE-2024-50076 bsc#1232505).
  - Update
    patches.kernel.org/6.11.5-099-xhci-tegra-fix-checked-USB2-port-number.patch
    (bsc#1012628 CVE-2024-50075 bsc#1232506).
  - Update
    patches.kernel.org/6.11.5-105-USB-gadget-dummy-hcd-Fix-task-hung-problem.patch
    (bsc#1012628 CVE-2024-50100 bsc#1232876).
  - Update
    patches.kernel.org/6.11.5-112-parport-Proper-fix-for-array-out-of-bounds-acc.patch
    (bsc#1012628 CVE-2024-50074 bsc#1232507).
  - Update
    patches.kernel.org/6.11.5-117-x86-entry_32-Clear-CPU-buffers-after-register-.patch
    (bsc#1012628 CVE-2024-50193 bsc#1233102).
  - Update
    patches.kernel.org/6.11.5-118-tty-n_gsm-Fix-use-after-free-in-gsm_cleanup_mu.patch
    (bsc#1012628 CVE-2024-50073 bsc#1232520).
  - Update
    patches.kernel.org/6.11.5-119-x86-bugs-Use-code-segment-selector-for-VERW-op.patch
    (bsc#1012628 CVE-2024-50072 bsc#1232513).
  - Update
    patches.kernel.org/6.11.5-120-pinctrl-nuvoton-fix-a-double-free-in-ma35_pinc.patch
    (bsc#1012628 CVE-2024-50071 bsc#1232509).
  - Update
    patches.kernel.org/6.11.5-121-pinctrl-intel-platform-fix-error-path-in-devic.patch
    (bsc#1012628 CVE-2024-50197 bsc#1233089).
  - Update
    patches.kernel.org/6.11.5-122-pinctrl-ocelot-fix-system-hang-on-level-based-.patch
    (bsc#1012628 CVE-2024-50196 bsc#1233113).
  - Update
    patches.kernel.org/6.11.5-123-pinctrl-stm32-check-devm_kasprintf-returned-va.patch
    (bsc#1012628 CVE-2024-50070 bsc#1232510).
  - Update
    patches.kernel.org/6.11.5-124-pinctrl-apple-check-devm_kasprintf-returned-va.patch
    (bsc#1012628 CVE-2024-50069 bsc#1232511).
  - Update
    patches.kernel.org/6.11.5-125-irqchip-gic-v4-Don-t-allow-a-VMOVP-on-a-dying-.patch
    (bsc#1012628 CVE-2024-50192 bsc#1233106).
  - Update
    patches.kernel.org/6.11.6-001-bpf-Use-raw_spinlock_t-in-ringbuf.patch
    (bsc#1012628 CVE-2024-50138 bsc#1232935).
  - Update
    patches.kernel.org/6.11.6-003-reset-starfive-jh71x0-Fix-accessing-the-empty-.patch
    (bsc#1012628 CVE-2024-50137 bsc#1232932).
  - Update
    patches.kernel.org/6.11.6-005-bpf-Make-sure-internal-and-UAPI-bpf_redirect-f.patch
    (bsc#1012628 CVE-2024-50163 bsc#1233098).
  - Update
    patches.kernel.org/6.11.6-007-bpf-devmap-provide-rxq-after-redirect.patch
    (bsc#1012628 CVE-2024-50162 bsc#1233075).
  - Update
    patches.kernel.org/6.11.6-011-RDMA-bnxt_re-Fix-a-possible-memory-leak.patch
    (bsc#1012628 CVE-2024-50172 bsc#1233029).
  - Update
    patches.kernel.org/6.11.6-013-RDMA-bnxt_re-Add-a-check-for-memory-allocation.patch
    (bsc#1012628 CVE-2024-50209 bsc#1233114).
  - Update
    patches.kernel.org/6.11.6-018-bpf-Check-the-remaining-info_cnt-before-repeat.patch
    (bsc#1012628 CVE-2024-50161 bsc#1233037).
  - Update
    patches.kernel.org/6.11.6-029-sched-core-Disable-page-allocation-in-task_tic.patch
    (bsc#1012628 CVE-2024-50140 bsc#1233060).
  - Update
    patches.kernel.org/6.11.6-030-ALSA-hda-cs8409-Fix-possible-NULL-dereference.patch
    (bsc#1012628 CVE-2024-50160 bsc#1233074).
  - Update
    patches.kernel.org/6.11.6-031-firmware-arm_scmi-Fix-the-double-free-in-scmi_.patch
    (bsc#1012628 CVE-2024-50159 bsc#1233041).
  - Update
    patches.kernel.org/6.11.6-040-RDMA-bnxt_re-Fix-out-of-bound-check.patch
    (bsc#1012628 CVE-2024-50158 bsc#1233036).
  - Update
    patches.kernel.org/6.11.6-043-RDMA-bnxt_re-Avoid-CPU-lockups-due-fifo-occupa.patch
    (bsc#1012628 CVE-2024-50157 bsc#1233032).
  - Update
    patches.kernel.org/6.11.6-046-RDMA-bnxt_re-Fix-a-bug-while-setting-up-Level-.patch
    (bsc#1012628 CVE-2024-50208 bsc#1233117).
  - Update
    patches.kernel.org/6.11.6-055-drm-msm-Avoid-NULL-dereference-in-msm_disp_sta.patch
    (bsc#1012628 CVE-2024-50156 bsc#1233073).
  - Update
    patches.kernel.org/6.11.6-063-ring-buffer-Fix-reader-locking-when-changing-t.patch
    (bsc#1012628 CVE-2024-50207 bsc#1233122).
  - Update
    patches.kernel.org/6.11.6-066-netdevsim-use-cond_resched-in-nsim_dev_trap_re.patch
    (bsc#1012628 CVE-2024-50155 bsc#1233035).
  - Update
    patches.kernel.org/6.11.6-072-net-systemport-fix-potential-memory-leak-in-bc.patch
    (bsc#1012628 CVE-2024-50171 bsc#1233057).
  - Update
    patches.kernel.org/6.11.6-076-net-bcmasp-fix-potential-memory-leak-in-bcmasp.patch
    (bsc#1012628 CVE-2024-50170 bsc#1233030).
  - Update
    patches.kernel.org/6.11.6-078-tcp-dccp-Don-t-use-timer_pending-in-reqsk_queu.patch
    (bsc#1012628 CVE-2024-50154 bsc#1233072).
  - Update
    patches.kernel.org/6.11.6-084-scsi-target-core-Fix-null-ptr-deref-in-target_.patch
    (bsc#1012628 CVE-2024-50153 bsc#1233061).
  - Update
    patches.kernel.org/6.11.6-085-smb-client-fix-possible-double-free-in-smb2_se.patch
    (bsc#1012628 CVE-2024-50152 bsc#1233033).
  - Update
    patches.kernel.org/6.11.6-086-smb-client-fix-OOBs-when-building-SMB2_IOCTL-r.patch
    (bsc#1012628 CVE-2024-50151 bsc#1233055).
  - Update
    patches.kernel.org/6.11.6-087-usb-typec-altmode-should-keep-reference-to-par.patch
    (bsc#1012628 CVE-2024-50150 bsc#1233051).
  - Update
    patches.kernel.org/6.11.6-089-drm-xe-fix-unbalanced-rpm-put-with-fence_fini.patch
    (bsc#1012628 CVE-2024-50144 bsc#1233040).
  - Update
    patches.kernel.org/6.11.6-092-drm-xe-Don-t-free-job-in-TDR.patch
    (bsc#1012628 CVE-2024-50149 bsc#1233034).
  - Update
    patches.kernel.org/6.11.6-095-Bluetooth-bnep-fix-wild-memory-access-in-proto.patch
    (bsc#1012628 CVE-2024-50148 bsc#1233063).
  - Update
    patches.kernel.org/6.11.6-097-net-ethernet-mtk_eth_soc-fix-memory-corruption.patch
    (bsc#1012628 CVE-2024-50206 bsc#1233288).
  - Update
    patches.kernel.org/6.11.6-099-net-mlx5-Fix-command-bitmask-initialization.patch
    (bsc#1012628 CVE-2024-50147 bsc#1233067).
  - Update
    patches.kernel.org/6.11.6-100-net-mlx5-Unregister-notifier-on-eswitch-init-f.patch
    (bsc#1012628 CVE-2024-50136 bsc#1232914).
  - Update
    patches.kernel.org/6.11.6-101-net-mlx5e-Don-t-call-cleanup-on-profile-rollba.patch
    (bsc#1012628 CVE-2024-50146 bsc#1233056).
  - Update
    patches.kernel.org/6.11.6-107-nvme-pci-fix-race-condition-between-reset-and-.patch
    (bsc#1012628 CVE-2024-50135 bsc#1232888).
  - Update
    patches.kernel.org/6.11.6-121-uprobe-avoid-out-of-bounds-memory-access-of-fe.patch
    (bsc#1012628 CVE-2024-50067 bsc#1232416).
  - Update
    patches.kernel.org/6.11.6-122-drm-vboxvideo-Replace-fake-VLA-at-end-of-vbva_.patch
    (bsc#1012628 CVE-2024-50134 bsc#1232890).
  - Update
    patches.kernel.org/6.11.6-129-udf-refactor-inode_bmap-to-handle-error.patch
    (bsc#1012628 CVE-2024-50211 bsc#1233096).
  - Update
    patches.kernel.org/6.11.6-130-udf-fix-uninit-value-use-in-udf_get_fileshorta.patch
    (bsc#1012628 CVE-2024-50143 bsc#1233038).
  - Update
    patches.kernel.org/6.11.6-136-LoongArch-Don-t-crash-in-stack_top-for-tasks-w.patch
    (bsc#1012628 CVE-2024-50133 bsc#1232854).
  - Update
    patches.kernel.org/6.11.6-139-tracing-probes-Fix-MAX_TRACE_ARGS-limit-handli.patch
    (bsc#1012628 CVE-2024-50132 bsc#1232861).
  - Update
    patches.kernel.org/6.11.6-140-tracing-Consider-the-NULL-character-when-valid.patch
    (bsc#1012628 CVE-2024-50131 bsc#1232896).
  - Update
    patches.kernel.org/6.11.6-143-xfrm-validate-new-SA-s-prefixlen-using-SA-fami.patch
    (bsc#1012628 CVE-2024-50142 bsc#1233028).
  - Update
    patches.kernel.org/6.11.6-144-netfilter-bpf-must-hold-reference-on-net-names.patch
    (bsc#1012628 CVE-2024-50130 bsc#1232894).
  - Update
    patches.kernel.org/6.11.6-145-net-pse-pd-Fix-out-of-bound-for-loop.patch
    (bsc#1012628 CVE-2024-50129 bsc#1232856).
  - Update
    patches.kernel.org/6.11.6-146-net-sun3_82586-fix-potential-memory-leak-in-su.patch
    (bsc#1012628 CVE-2024-50168 bsc#1233059).
  - Update
    patches.kernel.org/6.11.6-147-be2net-fix-potential-memory-leak-in-be_xmit.patch
    (bsc#1012628 CVE-2024-50167 bsc#1233049).
  - Update
    patches.kernel.org/6.11.6-151-octeon_ep-Add-SKB-allocation-failures-handling.patch
    (bsc#1012628 CVE-2024-50145 bsc#1233044).
  - Update
    patches.kernel.org/6.11.6-155-fsl-fman-Fix-refcount-handling-of-fman-related.patch
    (bsc#1012628 CVE-2024-50166 bsc#1233050).
  - Update
    patches.kernel.org/6.11.6-157-net-wwan-fix-global-oob-in-wwan_rtnl_policy.patch
    (bsc#1012628 CVE-2024-50128 bsc#1232905).
  - Update
    patches.kernel.org/6.11.6-162-bpf-Preserve-param-string-when-parsing-mount-o.patch
    (bsc#1012628 CVE-2024-50165 bsc#1233031).
  - Update
    patches.kernel.org/6.11.6-164-bpf-Fix-overloading-of-MEM_UNINIT-s-meaning.patch
    (bsc#1012628 CVE-2024-50164 bsc#1233099).
  - Update
    patches.kernel.org/6.11.6-167-net-sched-fix-use-after-free-in-taprio_change.patch
    (bsc#1012628 CVE-2024-50127 bsc#1232907).
  - Update
    patches.kernel.org/6.11.6-168-net-sched-use-RCU-read-side-critical-section-i.patch
    (bsc#1012628 CVE-2024-50126 bsc#1232895).
  - Update
    patches.kernel.org/6.11.6-170-posix-clock-posix-clock-Fix-unbalanced-locking.patch
    (bsc#1012628 CVE-2024-50210 bsc#1233097).
  - Update
    patches.kernel.org/6.11.6-172-Bluetooth-SCO-Fix-UAF-on-sco_sock_timeout.patch
    (bsc#1012628 CVE-2024-50125 bsc#1232928).
  - Update
    patches.kernel.org/6.11.6-173-Bluetooth-ISO-Fix-UAF-on-iso_sock_timeout.patch
    (bsc#1012628 CVE-2024-50124 bsc#1232926).
  - Update
    patches.kernel.org/6.11.6-180-bpf-Add-the-missing-BPF_LINK_TYPE-invocation-f.patch
    (bsc#1012628 CVE-2024-50123 bsc#1232857).
  - Update
    patches.kernel.org/6.11.6-187-PCI-Hold-rescan-lock-while-adding-devices-duri.patch
    (bsc#1012628 CVE-2024-50122 bsc#1232930).
  - Update
    patches.kernel.org/6.11.6-191-ALSA-firewire-lib-Avoid-division-by-zero-in-ap.patch
    (bsc#1012628 CVE-2024-50205 bsc#1233293).
  - Update
    patches.kernel.org/6.11.6-194-nfsd-cancel-nfsd_shrinker_work-using-sync-mode.patch
    (bsc#1012628 CVE-2024-50121 bsc#1232925).
  - Update
    patches.kernel.org/6.11.6-196-smb-client-Handle-kstrdup-failures-for-passwor.patch
    (bsc#1012628 CVE-2024-50120 bsc#1232924).
  - Update
    patches.kernel.org/6.11.6-197-cifs-fix-warning-when-destroy-cifs_io_request_.patch
    (bsc#1012628 CVE-2024-50119 bsc#1232858).
  - Update
    patches.kernel.org/6.11.6-207-btrfs-reject-ro-rw-reconfiguration-if-there-ar.patch
    (bsc#1012628 CVE-2024-50118 bsc#1232859).
  - Update
    patches.kernel.org/6.11.6-210-drm-amd-Guard-against-bad-data-for-ATIF-ACPI-m.patch
    (bsc#1012628 CVE-2024-50117 bsc#1232897).
  - Update
    patches.kernel.org/6.11.6-212-ACPI-PRM-Find-EFI_MEMORY_RUNTIME-block-for-PRM.patch
    (bsc#1012628 CVE-2024-50141 bsc#1233065).
  - Update
    patches.kernel.org/6.11.6-214-nilfs2-fix-kernel-bug-due-to-missing-clearing-.patch
    (bsc#1012628 CVE-2024-50116 bsc#1232892).
  - Update
    patches.kernel.org/6.11.6-218-KVM-nSVM-Ignore-nCR3-4-0-when-loading-PDPTEs-f.patch
    (bsc#1012628 CVE-2024-50115 bsc#1232919).
  - Update
    patches.kernel.org/6.11.6-219-KVM-arm64-Unregister-redistributor-for-failed-.patch
    (bsc#1012628 CVE-2024-50114 bsc#1232912).
  - Update
    patches.kernel.org/6.11.6-220-KVM-arm64-Fix-shift-out-of-bounds-bug.patch
    (bsc#1012628 CVE-2024-50139 bsc#1233062).
  - Update
    patches.kernel.org/6.11.6-222-firewire-core-fix-invalid-port-index-for-paren.patch
    (bsc#1012628 CVE-2024-50113 bsc#1232891).
  - Update
    patches.kernel.org/6.11.6-223-x86-lam-Disable-ADDRESS_MASKING-in-most-cases.patch
    (bsc#1012628 CVE-2024-50112 bsc#1232867).
  - Update
    patches.kernel.org/6.11.6-228-LoongArch-Enable-IRQ-if-do_ale-triggered-in-ir.patch
    (bsc#1012628 CVE-2024-50111 bsc#1232866).
  - Update
    patches.kernel.org/6.11.6-230-xfrm-fix-one-more-kernel-infoleak-in-algo-dump.patch
    (bsc#1012628 CVE-2024-50110 bsc#1232885).
  - Update
    patches.kernel.org/6.11.6-232-md-raid10-fix-null-ptr-dereference-in-raid10_s.patch
    (bsc#1012628 CVE-2024-50109 bsc#1232886).
  - Update
    patches.kernel.org/6.11.6-234-drm-amd-display-Disable-PSR-SU-on-Parade-08-01.patch
    (bsc#1012628 CVE-2024-50108 bsc#1232884).
  - Update
    patches.kernel.org/6.11.6-235-platform-x86-intel-pmc-Fix-pmc_core_iounmap-to.patch
    (bsc#1012628 CVE-2024-50107 bsc#1232883).
  - Update
    patches.kernel.org/6.11.6-239-nfsd-fix-race-between-laundromat-and-free_stat.patch
    (bsc#1012628 CVE-2024-50106 bsc#1232882).
  - Update
    patches.kernel.org/6.11.6-247-ASoC-qcom-sc7280-Fix-missing-Soundwire-runtime.patch
    (bsc#1012628 CVE-2024-50105 bsc#1232879).
  - Update
    patches.kernel.org/6.11.6-248-ASoC-qcom-sdm845-add-missing-soundwire-runtime.patch
    (bsc#1012628 CVE-2024-50104 bsc#1232868).
  - Update
    patches.kernel.org/6.11.6-249-ASoC-qcom-Fix-NULL-Dereference-in-asoc_qcom_lp.patch
    (bsc#1012628 CVE-2024-50103 bsc#1232878).
  - Update
    patches.kernel.org/6.11.6-257-x86-fix-user-address-masking-non-canonical-spe.patch
    (bsc#1012628 CVE-2024-50102 bsc#1232880).
  - Update
    patches.kernel.org/6.11.7-024-macsec-Fix-use-after-free-while-sending-the-of.patch
    (bsc#1012628 CVE-2024-50261 bsc#1233253).
  - Update
    patches.kernel.org/6.11.7-026-sock_map-fix-a-NULL-pointer-dereference-in-soc.patch
    (bsc#1012628 CVE-2024-50260 bsc#1233178).
  - Update
    patches.kernel.org/6.11.7-037-netdevsim-Add-trailing-zero-to-terminate-the-s.patch
    (bsc#1012628 CVE-2024-50259 bsc#1233214).
  - Update
    patches.kernel.org/6.11.7-039-bpf-Fix-out-of-bounds-write-in-trie_get_next_k.patch
    (bsc#1012628 CVE-2024-50262 bsc#1233239).
  - Update
    patches.kernel.org/6.11.7-040-net-fix-crash-when-config-small-gso_max_size-g.patch
    (bsc#1012628 CVE-2024-50258 bsc#1233221).
  - Update
    patches.kernel.org/6.11.7-041-netfilter-Fix-use-after-free-in-get_info.patch
    (bsc#1012628 CVE-2024-50257 bsc#1233244).
  - Update
    patches.kernel.org/6.11.7-042-netfilter-nf_reject_ipv6-fix-potential-crash-i.patch
    (bsc#1012628 CVE-2024-50256 bsc#1233200).
  - Update
    patches.kernel.org/6.11.7-043-Bluetooth-hci-fix-null-ptr-deref-in-hci_read_s.patch
    (bsc#1012628 CVE-2024-50255 bsc#1233238).
  - Update
    patches.kernel.org/6.11.7-044-bpf-Free-dynamically-allocated-bits-in-bpf_ite.patch
    (bsc#1012628 CVE-2024-50254 bsc#1233183).
  - Update
    patches.kernel.org/6.11.7-046-bpf-Check-the-validity-of-nr_words-in-bpf_iter.patch
    (bsc#1012628 CVE-2024-50253 bsc#1233186).
  - Update
    patches.kernel.org/6.11.7-051-mlxsw-spectrum_ipip-Fix-memory-leak-when-chang.patch
    (bsc#1012628 CVE-2024-50252 bsc#1233201).
  - Update
    patches.kernel.org/6.11.7-053-netfilter-nft_payload-sanitize-offset-and-leng.patch
    (bsc#1012628 CVE-2024-50251 bsc#1233248).
  - Update
    patches.kernel.org/6.11.7-059-fsdax-dax_unshare_iter-needs-to-copy-entire-bl.patch
    (bsc#1012628 CVE-2024-50250 bsc#1233226).
  - Update
    patches.kernel.org/6.11.7-064-ACPI-CPPC-Make-rmw_lock-a-raw_spin_lock.patch
    (bsc#1012628 CVE-2024-50249 bsc#1233197).
  - Update
    patches.kernel.org/6.11.7-080-ntfs3-Add-bounds-checking-to-mi_enum_attr.patch
    (bsc#1012628 CVE-2024-50248 bsc#1233219).
  - Update
    patches.kernel.org/6.11.7-081-fs-ntfs3-Check-if-more-than-chunk-size-bytes-a.patch
    (bsc#1012628 CVE-2024-50247 bsc#1233271).
  - Update
    patches.kernel.org/6.11.7-084-fs-ntfs3-Add-rough-attr-alloc_size-check.patch
    (bsc#1012628 CVE-2024-50246 bsc#1233207).
  - Update
    patches.kernel.org/6.11.7-085-fs-ntfs3-Fix-possible-deadlock-in-mi_read.patch
    (bsc#1012628 CVE-2024-50245 bsc#1233203).
  - Update
    patches.kernel.org/6.11.7-086-fs-ntfs3-Additional-check-in-ni_clear.patch
    (bsc#1012628 CVE-2024-50244 bsc#1233270).
  - Update
    patches.kernel.org/6.11.7-087-fs-ntfs3-Fix-general-protection-fault-in-run_i.patch
    (bsc#1012628 CVE-2024-50243 bsc#1233269).
  - Update
    patches.kernel.org/6.11.7-088-fs-ntfs3-Additional-check-in-ntfs_file_release.patch
    (bsc#1012628 CVE-2024-50242 bsc#1233268).
  - Update
    patches.kernel.org/6.11.7-100-NFSD-Initialize-struct-nfsd4_copy-earlier.patch
    (bsc#1012628 CVE-2024-50241 bsc#1233187).
  - Update
    patches.kernel.org/6.11.7-111-phy-qcom-qmp-usb-fix-NULL-deref-on-runtime-sus.patch
    (bsc#1012628 CVE-2024-50240 bsc#1233217).
  - Update
    patches.kernel.org/6.11.7-112-phy-qcom-qmp-usb-legacy-fix-NULL-deref-on-runt.patch
    (bsc#1012628 CVE-2024-50239 bsc#1233180).
  - Update
    patches.kernel.org/6.11.7-113-phy-qcom-qmp-usbc-fix-NULL-deref-on-runtime-su.patch
    (bsc#1012628 CVE-2024-50238 bsc#1233182).
  - Update
    patches.kernel.org/6.11.7-120-wifi-mac80211-do-not-pass-a-stopped-vif-to-the.patch
    (bsc#1012628 CVE-2024-50237 bsc#1233216).
  - Update
    patches.kernel.org/6.11.7-121-wifi-ath10k-Fix-memory-leak-in-management-tx.patch
    (bsc#1012628 CVE-2024-50236 bsc#1233212).
  - Update
    patches.kernel.org/6.11.7-122-wifi-cfg80211-clear-wdev-cqm_config-pointer-on.patch
    (bsc#1012628 CVE-2024-50235 bsc#1233176).
  - Update
    patches.kernel.org/6.11.7-123-wifi-iwlegacy-Clear-stale-interrupts-before-re.patch
    (bsc#1012628 CVE-2024-50234 bsc#1233211).
  - Update
    patches.kernel.org/6.11.7-125-staging-iio-frequency-ad9832-fix-division-by-z.patch
    (bsc#1012628 CVE-2024-50233 bsc#1233210).
  - Update
    patches.kernel.org/6.11.7-127-iio-adc-ad7124-fix-division-by-zero-in-ad7124_.patch
    (bsc#1012628 CVE-2024-50232 bsc#1233209).
  - Update
    patches.kernel.org/6.11.7-129-iio-gts-helper-Fix-memory-leaks-in-iio_gts_bui.patch
    (bsc#1012628 CVE-2024-50231 bsc#1233208).
  - Update
    patches.kernel.org/6.11.7-131-nilfs2-fix-kernel-bug-due-to-missing-clearing-.patch
    (bsc#1012628 CVE-2024-50230 bsc#1233206).
  - Update
    patches.kernel.org/6.11.7-132-nilfs2-fix-potential-deadlock-with-newly-creat.patch
    (bsc#1012628 CVE-2024-50229 bsc#1233205).
  - Update
    patches.kernel.org/6.11.7-134-mm-shmem-fix-data-race-in-shmem_getattr.patch
    (bsc#1012628 CVE-2024-50228 bsc#1233204).
  - Update
    patches.kernel.org/6.11.7-138-thunderbolt-Fix-KASAN-reported-stack-out-of-bo.patch
    (bsc#1012628 CVE-2024-50227 bsc#1233181).
  - Update
    patches.kernel.org/6.11.7-141-cxl-port-Fix-use-after-free-permit-out-of-orde.patch
    (bsc#1012628 CVE-2024-50226 bsc#1233195).
  - Update
    patches.kernel.org/6.11.7-149-btrfs-fix-error-propagation-of-split-bios.patch
    (bsc#1012628 CVE-2024-50225 bsc#1233193).
  - Update
    patches.kernel.org/6.11.7-150-spi-spi-fsl-dspi-Fix-crash-when-not-using-GPIO.patch
    (bsc#1012628 CVE-2024-50224 bsc#1233188).
  - Update
    patches.kernel.org/6.11.7-162-sched-numa-Fix-the-potential-null-pointer-dere.patch
    (bsc#1012628 CVE-2024-50223 bsc#1233192).
  - Update
    patches.kernel.org/6.11.7-164-iov_iter-fix-copy_page_from_iter_atomic-if-KMA.patch
    (bsc#1012628 CVE-2024-50222 bsc#1233184).
  - Update
    patches.kernel.org/6.11.7-167-drm-amd-pm-Vangogh-Fix-kernel-memory-out-of-bo.patch
    (bsc#1012628 CVE-2024-50221 bsc#1233185).
  - Update
    patches.kernel.org/6.11.7-172-fork-do-not-invoke-uffd-on-fork-if-error-occur.patch
    (bsc#1012628 CVE-2024-50220 bsc#1233175).
  - Update
    patches.kernel.org/6.11.7-173-fork-only-invoke-khugepaged-ksm-hooks-if-no-er.patch
    (bsc#1012628 CVE-2024-50263 bsc#1233254).
  - Update
    patches.kernel.org/6.11.7-177-ocfs2-pass-u64-to-ocfs2_truncate_inline-maybe-.patch
    (bsc#1012628 CVE-2024-50218 bsc#1233191).
  - Update
    patches.kernel.org/6.11.7-180-btrfs-fix-use-after-free-of-block-device-file-.patch
    (bsc#1012628 CVE-2024-50217 bsc#1233194).
  - Update
    patches.kernel.org/6.11.7-182-xfs-fix-finding-a-last-resort-AG-in-xfs_filest.patch
    (bsc#1012628 CVE-2024-50216 bsc#1233179).
  - Update
    patches.kernel.org/6.11.7-185-nvmet-auth-assign-dh_key-to-NULL-after-kfree_s.patch
    (bsc#1012628 CVE-2024-50215 bsc#1233189).
  - Update
    patches.kernel.org/6.11.7-189-drm-connector-hdmi-Fix-memory-leak-in-drm_disp.patch
    (bsc#1012628 CVE-2024-50214 bsc#1233177).
  - Update
    patches.kernel.org/6.11.7-190-drm-tests-hdmi-Fix-memory-leaks-in-drm_display.patch
    (bsc#1012628 CVE-2024-50213 bsc#1233174).
  - Update
    patches.kernel.org/6.11.7-247-lib-alloc_tag_module_unload-must-wait-for-pend.patch
    (bsc#1012628 CVE-2024-50212 bsc#1233173).
  - commit e3c376e

++++ kernel-default:

  - Linux 6.11.8 (bsc#1012628).
  - vsock/virtio: Initialization of the dangling pointer occurring
    in vsk->trans (bsc#1012628).
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling
    pointer (bsc#1012628).
  - xtensa: Emulate one-byte cmpxchg (bsc#1012628).
  - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
    (bsc#1012628).
  - drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
    (bsc#1012628).
  - drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
    (bsc#1012628).
  - drm/xe: Move LNL scheduling WA to xe_device.h (bsc#1012628).
  - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
    (bsc#1012628).
  - block: fix queue limits checks in blk_rq_map_user_bvec for real
    (bsc#1012628).
  - blacklist.conf: drop it
  - block: rework bio splitting (bsc#1012628).
  - firmware: qcom: scm: suppress download mode error (bsc#1012628).
  - firmware: qcom: scm: Refactor code to support multiple dload
    mode (bsc#1012628).
  - Update config files.
  - selftests: hugetlb_dio: check for initial conditions to skip
    in the start (bsc#1012628).
  - ucounts: fix counter leak in inc_rlimit_get_ucounts()
    (bsc#1012628).
  - ocfs2: remove entry once instead of null-ptr-dereference in
    ocfs2_xa_remove() (bsc#1012628).
  - irqchip/gic-v3: Force propagation of the active state with a
    read-back (bsc#1012628).
  - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state
    allocation (bsc#1012628).
  - staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation
    (bsc#1012628).
  - thunderbolt: Fix connection issue with Pluggable UD-4VPD dock
    (bsc#1012628).
  - clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
    (bsc#1012628).
  - clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
    (bsc#1012628).
  - USB: serial: option: add Quectel RG650V (bsc#1012628).
  - USB: serial: option: add Fibocom FG132 0x0112 composition
    (bsc#1012628).
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx
    (bsc#1012628).
  - USB: serial: io_edgeport: fix use after free in debug printk
    (bsc#1012628).
  - usb: typec: fix potential out of bounds in
    ucsi_ccg_update_set_new_cam_cmd() (bsc#1012628).
  - usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
    (bsc#1012628).
  - usb: dwc3: fix fault at system suspend if device was already
    runtime suspended (bsc#1012628).
  - usb: musb: sunxi: Fix accessing an released usb phy
    (bsc#1012628).
  - thunderbolt: Add only on-board retimers when
    !CONFIG_USB4_DEBUGFS_MARGINING (bsc#1012628).
  - mm/thp: fix deferred split unqueue naming and locking
    (bsc#1012628).
  - mm/mlock: set the correct prev on failure (bsc#1012628).
  - mm/damon/core: handle zero schemes apply interval (bsc#1012628).
  - mm/damon/core: handle zero {aggregation,ops_update} intervals
    (bsc#1012628).
  - mm/damon/core: avoid overflow in damon_feed_loop_next_input()
    (bsc#1012628).
  - signal: restore the override_rlimit logic (bsc#1012628).
  - objpool: fix to make percpu slot allocation more robust
    (bsc#1012628).
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
    (bsc#1012628).
  - clk: qcom: clk-alpha-pll: Fix pll post div mask when width is
    not set (bsc#1012628).
  - clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
    (bsc#1012628).
  - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE
    is not set (bsc#1012628).
  - filemap: Fix bounds checking in filemap_read() (bsc#1012628).
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED
    in uvc_parse_format (bsc#1012628).
  - platform/x86/amd/pmf: Add SMU metrics table support for 1Ah
    family 60h model (bsc#1012628).
  - platform/x86/amd/pmf: Update SMU metrics table for 1AH family
    series (bsc#1012628).
  - platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header
    (bsc#1012628).
  - btrfs: reinitialize delayed ref list after deleting it from
    the list (bsc#1012628).
  - btrfs: fix per-subvolume RO/RW flags with new mount API
    (bsc#1012628).
  - btrfs: fix the length of reserved qgroup to free (bsc#1012628).
  - idpf: fix idpf_vc_core_init error path (bsc#1012628).
  - idpf: avoid vport access in idpf_get_link_ksettings
    (bsc#1012628).
  - KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before
    running it to avoid spurious interrupts (bsc#1012628).
  - mm/slab: fix warning caused by duplicate kmem_cache creation
    in kmem_buckets_create (bsc#1012628).
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard
    hint (bsc#1012628).
  - arm64: Kconfig: Make SME depend on BROKEN for now (bsc#1012628).
  - Update config files.
  - arm64/sve: Discard stale CPU state when handling SVE traps
    (bsc#1012628).
  - mptcp: use sock_kfree_s instead of kfree (bsc#1012628).
  - net: vertexcom: mse102x: Fix possible double free of TX skb
    (bsc#1012628).
  - net: wwan: t7xx: Fix off-by-one error in
    t7xx_dpmaif_rx_buf_alloc() (bsc#1012628).
  - tracing: Fix tracefs mount options (bsc#1012628).
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (bsc#1012628).
  - scsi: ufs: core: Start the RTC update work later (bsc#1012628).
  - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (bsc#1012628).
  - mptcp: no admin perm to list endpoints (bsc#1012628).
  - dm: fix a crash if blk_alloc_disk fails (bsc#1012628).
  - dm-unstriped: cast an operand to sector_t to prevent potential
    uint32_t overflow (bsc#1012628).
  - dm cache: fix potential out-of-bounds access on the first resume
    (bsc#1012628).
  - dm cache: optimize dirty bit checking with find_next_bit when
    resizing (bsc#1012628).
  - dm cache: fix out-of-bounds access to the dirty bitset when
    resizing (bsc#1012628).
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr
    error (bsc#1012628).
  - dm cache: correct the number of origin blocks to match the
    target length (bsc#1012628).
  - KEYS: trusted: dcp: fix NULL dereference in AEAD crypto
    operation (bsc#1012628).
  - thermal/drivers/qcom/lmh: Remove false lockdep backtrace
    (bsc#1012628).
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not
    supported (bsc#1012628).
  - drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (bsc#1012628).
  - drm/amdgpu: Adjust debugfs register access permissions
    (bsc#1012628).
  - drm/amdgpu: add missing size check in
    amdgpu_debugfs_gprwave_read() (bsc#1012628).
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions
    (bsc#1012628).
  - drm/panthor: Be stricter about IO mapping flags (bsc#1012628).
  - drm/panthor: Lock XArray when getting entries for the VM
    (bsc#1012628).
  - drm/amd/display: parse umc_info or vram_info based on ASIC
    (bsc#1012628).
  - drm/amd/pm: correct the workload setting (bsc#1012628).
  - drm/imagination: Break an object reference loop (bsc#1012628).
  - drm/imagination: Add a per-file PVR context list (bsc#1012628).
  - drm/amd/display: Fix brightness level not retained over reboot
    (bsc#1012628).
  - drm/amd/pm: always pick the pptable from IFWI (bsc#1012628).
  - rpmsg: glink: Handle rejected intent request better
    (bsc#1012628).
  - tpm: Lock TPM chip in tpm_pm_suspend() first (bsc#1012628).
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode
    (bsc#1012628).
  - drm/xe: Set mask bits for CCS_MODE register (bsc#1012628).
  - drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure
    in exec IOCTL (bsc#1012628).
  - drm/xe: Fix possible exec queue leak in exec IOCTL
    (bsc#1012628).
  - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
    (bsc#1012628).
  - ksmbd: Fix the missing xa_store error check (bsc#1012628).
  - ksmbd: check outstanding simultaneous SMB operations
    (bsc#1012628).
  - ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
    (bsc#1012628).
  - can: {cc770,sja1000}_isa: allow building on x86_64
    (bsc#1012628).
  - Update config files. (say =N)
  - can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing
    configuration when switching CAN modes (bsc#1012628).
  - can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
    (bsc#1012628).
  - can: m_can: m_can_close(): don't call free_irq() for IRQ-less
    devices (bsc#1012628).
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
    (bsc#1012628).
  - media: v4l2-tpg: prevent the risk of a division by zero
    (bsc#1012628).
  - media: vivid: fix buffer overwrite when using > 32 buffers
    (bsc#1012628).
  - media: pulse8-cec: fix data timestamp at pulse8_setup()
    (bsc#1012628).
  - media: av7110: fix a spectre vulnerability (bsc#1012628).
  - media: cx24116: prevent overflows on SNR calculus (bsc#1012628).
  - media: s5p-jpeg: prevent buffer overflows (bsc#1012628).
  - media: ar0521: don't overflow when checking PLL values
    (bsc#1012628).
  - media: mgb4: protect driver against spectre (bsc#1012628).
  - media: dvb-core: add missing buffer index check (bsc#1012628).
  - ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
    (bsc#1012628).
  - ASoC: stm32: spdifrx: fix dma channel release in
    stm32_spdifrx_remove (bsc#1012628).
  - thermal/of: support thermal zones w/o trips subnode
    (bsc#1012628).
  - tools/lib/thermal: Fix sampling handler context ptr
    (bsc#1012628).
  - ALSA: firewire-lib: fix return value on fail in
    amdtp_tscm_init() (bsc#1012628).
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
    (bsc#1012628).
  - media: adv7604: prevent underflow condition when reporting
    colorspace (bsc#1012628).
  - media: dvb_frontend: don't play tricks with underflow values
    (bsc#1012628).
  - media: dvbdev: prevent the risk of out of memory access
    (bsc#1012628).
  - media: stb0899_algo: initialize cfr before using it
    (bsc#1012628).
  - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
    (bsc#1012628).
  - drivers: net: ionic: add missed debugfs cleanup to ionic_probe()
    error path (bsc#1012628).
  - net/smc: do not leave a dangling sk pointer in __smc_create()
    (bsc#1012628).
  - rxrpc: Fix missing locking causing hanging calls (bsc#1012628).
  - net: arc: rockchip: fix emac mdio node support (bsc#1012628).
  - net: arc: fix the device for dma_map_single/dma_unmap_single
    (bsc#1012628).
  - virtio_net: Update rss when set queue (bsc#1012628).
  - virtio_net: Sync rss config to device when virtnet_probe
    (bsc#1012628).
  - virtio_net: Add hash_key_length check (bsc#1012628).
  - virtio_net: Support dynamic rss indirection table size
    (bsc#1012628).
  - netfilter: nf_tables: wait for rcu grace period on net_device
    removal (bsc#1012628).
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single
    irq case (bsc#1012628).
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (bsc#1012628).
  - net: hns3: fix kernel crash when uninstalling driver
    (bsc#1012628).
  - e1000e: Remove Meteor Lake SMBUS workarounds (bsc#1012628).
  - i40e: fix race condition by adding filter's intermediate sync
    state (bsc#1012628).
  - ice: change q_index variable type to s16 to store -1 value
    (bsc#1012628).
  - can: c_can: fix {rx,tx}_errors statistics (bsc#1012628).
  - net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine
    starts (bsc#1012628).
  - net: enetc: allocate vf_state during PF probes (bsc#1012628).
  - sctp: properly validate chunk size in sctp_sf_ootb()
    (bsc#1012628).
  - dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property
    value (bsc#1012628).
  - net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd
    tracepoint (bsc#1012628).
  - net: enetc: set MAC address to the VF net_device (bsc#1012628).
  - regulator: rtq2208: Fix uninitialized use of regulator_config
    (bsc#1012628).
  - security/keys: fix slab-out-of-bounds in key_task_permission
    (bsc#1012628).
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping
    (bsc#1012628).
  - NFS: Further fixes to attribute delegation a/mtime changes
    (bsc#1012628).
  - NFS: Fix attribute delegation behaviour on exclusive create
    (bsc#1012628).
  - NFSv3: only use NFS timeout for MOUNT when protocols are
    compatible (bsc#1012628).
  - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (bsc#1012628).
  - platform/x86/amd/pmc: Detect when STB is not available
    (bsc#1012628).
  - HID: core: zero-initialize the report buffer (bsc#1012628).
  - arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
    (bsc#1012628).
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
    (bsc#1012628).
  - ARM: dts: rockchip: Fix the spi controller on rk3036
    (bsc#1012628).
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi
    (bsc#1012628).
  - ARM: dts: rockchip: fix rk3036 acodec node (bsc#1012628).
  - arm64: dts: rockchip: remove orphaned pinctrl-names from
    pinephone pro (bsc#1012628).
  - firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM
    bridge enabling (bsc#1012628).
  - firmware: arm_scmi: Fix slab-use-after-free in
    scmi_bus_notifier() (bsc#1012628).
  - arm64: dts: imx8mp-phyboard-pollux: Set Video PLL1 frequency
    to 506.8 MHz (bsc#1012628).
  - arm64: dts: imx8mp: correct sdhc ipg clk (bsc#1012628).
  - arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs (bsc#1012628).
  - arm64: dts: qcom: sm8450 fix PIPE clock specification for pcie1
    (bsc#1012628).
  - arm64: dts: rockchip: remove num-slots property from
    rk3328-nanopi-r2s-plus (bsc#1012628).
  - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
    (bsc#1012628).
  - arm64: dts: rockchip: Remove #cooling-cells from fan on
    Theobroma lion (bsc#1012628).
  - arm64: dts: rockchip: Remove undocumented supports-emmc property
    (bsc#1012628).
  - arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
    (bsc#1012628).
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
    (bsc#1012628).
  - arm64: dts: rockchip: Fix bluetooth properties on rk3566 box
    demo (bsc#1012628).
  - arm64: dts: rockchip: Drop regulator-init-microvolt from two
    boards (bsc#1012628).
  - arm64: dts: rockchip: fix i2c2 pinctrl-names property on
    anbernic-rg353p/v (bsc#1012628).
  - arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
    (bsc#1012628).
  - arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
    (bsc#1012628).
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
    (bsc#1012628).
  - EDAC/qcom: Make irq configuration optional (bsc#1012628).
  - firmware: qcom: scm: fix a NULL-pointer dereference
    (bsc#1012628).
  - arm64: dts: rockchip: Designate Turing RK1's system power
    controller (bsc#1012628).
  - arm64: dts: rockchip: Start cooling maps numbering from zero
    on ROCK 5B (bsc#1012628).
  - arm64: dts: rockchip: Move L3 cache outside CPUs in RK3588(S)
    SoC dtsi (bsc#1012628).
  - arm64: dts: rockchip: Fix rt5651 compatible value on
    rk3399-sapphire-excavator (bsc#1012628).
  - arm64: dts: rockchip: Fix rt5651 compatible value on
    rk3399-eaidk-610 (bsc#1012628).
  - commit 099023b
  - Mass CVE update.
  - Update
    patches.kernel.org/6.11.1-008-Bluetooth-btintel_pcie-Allocate-memory-for-dri.patch
    (bsc#1012628 CVE-2024-46869 bsc#1231173).
  - Update
    patches.kernel.org/6.11.1-012-USB-usbtmc-prevent-kernel-usb-infoleak.patch
    (bsc#1012628 CVE-2024-47671 bsc#1231541).
  - Update
    patches.kernel.org/6.11.2-001-wifi-ath11k-use-work-queue-to-process-beacon-t.patch
    (bsc#1012628 CVE-2024-47724 bsc#1232073).
  - Update
    patches.kernel.org/6.11.2-003-wifi-rtw88-always-wait-for-both-firmware-loadi.patch
    (bsc#1012628 CVE-2024-47718 bsc#1232015).
  - Update
    patches.kernel.org/6.11.2-008-crypto-iaa-Fix-potential-use-after-free-bug.patch
    (bsc#1012628 CVE-2024-47732 bsc#1232109).
  - Update
    patches.kernel.org/6.11.2-024-wifi-rtw89-remove-unused-C2H-event-ID-RTW89_MA.patch
    (bsc#1012628 CVE-2024-47721 bsc#1232052).
  - Update
    patches.kernel.org/6.11.2-027-RISC-V-KVM-Don-t-zero-out-PMU-snapshot-area-be.patch
    (bsc#1012628 CVE-2024-47717 bsc#1232041).
  - Update
    patches.kernel.org/6.11.2-033-ARM-9410-1-vfp-Use-asm-volatile-in-fmrx-fmxr-m.patch
    (bsc#1012628 CVE-2024-47716 bsc#1232053).
  - Update
    patches.kernel.org/6.11.2-034-powercap-intel_rapl-Fix-off-by-one-in-get_rpi.patch
    (bsc#1012628 CVE-2024-49862 bsc#1231871).
  - Update
    patches.kernel.org/6.11.2-040-drivers-perf-Fix-ali_drw_pmu-driver-interrupt-.patch
    (bsc#1012628 CVE-2024-47731 bsc#1232117).
  - Update
    patches.kernel.org/6.11.2-046-wifi-mac80211-don-t-use-rate-mask-for-offchann.patch
    (bsc#1012628 CVE-2024-47738 bsc#1232114).
  - Update
    patches.kernel.org/6.11.2-048-wifi-iwlwifi-mvm-set-the-cipher-for-secured-ND.patch
    (bsc#1012628 CVE-2024-49857 bsc#1232203).
  - Update
    patches.kernel.org/6.11.2-073-wifi-mt76-mt7915-fix-oops-on-non-dbdc-mt7986.patch
    (bsc#1012628 CVE-2024-47715 bsc#1231860).
  - Update
    patches.kernel.org/6.11.2-075-wifi-mt76-mt7996-use-hweight16-to-get-correct-.patch
    (bsc#1012628 CVE-2024-47714 bsc#1232018).
  - Update
    patches.kernel.org/6.11.2-080-x86-sgx-Fix-deadlock-in-SGX-NUMA-node-search.patch
    (bsc#1012628 CVE-2024-49856 bsc#1232202).
  - Update
    patches.kernel.org/6.11.2-085-crypto-hisilicon-qm-inject-error-before-stoppi.patch
    (bsc#1012628 CVE-2024-47730 bsc#1232075).
  - Update
    patches.kernel.org/6.11.2-093-wifi-mac80211-use-two-phase-skb-reclamation-in.patch
    (bsc#1012628 CVE-2024-47713 bsc#1232016).
  - Update
    patches.kernel.org/6.11.2-094-wifi-wilc1000-fix-potential-RCU-dereference-is.patch
    (bsc#1012628 CVE-2024-47712 bsc#1232017).
  - Update
    patches.kernel.org/6.11.2-099-af_unix-Don-t-return-OOB-skb-in-manage_oob.patch
    (bsc#1012628 CVE-2024-47711 bsc#1232054).
  - Update
    patches.kernel.org/6.11.2-102-sock_map-Add-a-cond_resched-in-sock_hash_free.patch
    (bsc#1012628 CVE-2024-47710 bsc#1232049).
  - Update
    patches.kernel.org/6.11.2-103-can-bcm-Clear-bo-bcm_proc_read-after-remove_pr.patch
    (bsc#1012628 CVE-2024-47709 bsc#1232048).
  - Update
    patches.kernel.org/6.11.2-112-netkit-Assign-missing-bpf_net_context.patch
    (bsc#1012628 CVE-2024-47708 bsc#1231933).
  - Update
    patches.kernel.org/6.11.2-117-ipv6-avoid-possible-NULL-deref-in-rt6_uncached.patch
    (bsc#1012628 CVE-2024-47707 bsc#1231935).
  - Update
    patches.kernel.org/6.11.2-119-nbd-fix-race-between-timeout-and-normal-comple.patch
    (bsc#1012628 CVE-2024-49855 bsc#1232195).
  - Update
    patches.kernel.org/6.11.2-120-block-bfq-fix-possible-UAF-for-bfqq-bic-with-m.patch
    (bsc#1012628 CVE-2024-47706 bsc#1231942).
  - Update
    patches.kernel.org/6.11.2-127-erofs-handle-overlapped-pclusters-out-of-craft.patch
    (bsc#1012628 CVE-2024-47736 bsc#1232112).
  - Update
    patches.kernel.org/6.11.2-128-block-bfq-fix-uaf-for-accessing-waker_bfqq-aft.patch
    (bsc#1012628 CVE-2024-49854 bsc#1232193).
  - Update
    patches.kernel.org/6.11.2-132-block-fix-potential-invalid-pointer-dereferenc.patch
    (bsc#1012628 CVE-2024-47705 bsc#1231872).
  - Update
    patches.kernel.org/6.11.2-136-firmware-arm_scmi-Fix-double-free-in-OPTEE-tra.patch
    (bsc#1012628 CVE-2024-49853 bsc#1232192).
  - Update
    patches.kernel.org/6.11.2-201-drm-amd-display-Check-link_res-hpo_dp_link_enc.patch
    (bsc#1012628 CVE-2024-47704 bsc#1231944).
  - Update
    patches.kernel.org/6.11.2-202-drm-amd-display-Add-null-check-for-set_output_.patch
    (bsc#1012628 CVE-2024-47720 bsc#1232043).
  - Update
    patches.kernel.org/6.11.2-216-drm-xe-Use-reserved-copy-engine-for-user-binds.patch
    (bsc#1012628 CVE-2024-47729 bsc#1232077).
  - Update
    patches.kernel.org/6.11.2-219-scsi-elx-libefc-Fix-potential-use-after-free-i.patch
    (bsc#1012628 CVE-2024-49852 bsc#1232819).
  - Update
    patches.kernel.org/6.11.2-220-jfs-fix-out-of-bounds-in-dbNextAG-and-diAlloc.patch
    (bsc#1012628 CVE-2024-47723 bsc#1232050).
  - Update
    patches.kernel.org/6.11.2-253-tpm-Clean-up-TPM-space-after-command-failure.patch
    (bsc#1012628 CVE-2024-49851 bsc#1232134).
  - Update
    patches.kernel.org/6.11.2-257-bpf-lsm-Add-check-for-BPF-LSM-return-value.patch
    (bsc#1012628 CVE-2024-47703 bsc#1231946).
  - Update
    patches.kernel.org/6.11.2-263-bpf-Fail-verification-for-sign-extension-of-pa.patch
    (bsc#1012628 CVE-2024-47702 bsc#1231924).
  - Update
    patches.kernel.org/6.11.2-297-bpf-correctly-handle-malformed-BPF_CORE_TYPE_I.patch
    (bsc#1012628 CVE-2024-49850 bsc#1232189).
  - Update
    patches.kernel.org/6.11.2-312-ext4-avoid-OOB-when-system.data-xattr-changes-.patch
    (bsc#1012628 CVE-2024-47701 bsc#1231920).
  - Update
    patches.kernel.org/6.11.2-313-ext4-check-stripe-size-compatibility-on-remoun.patch
    (bsc#1012628 CVE-2024-47700 bsc#1231919).
  - Update
    patches.kernel.org/6.11.2-315-nilfs2-fix-potential-null-ptr-deref-in-nilfs_b.patch
    (bsc#1012628 CVE-2024-47699 bsc#1231916).
  - Update
    patches.kernel.org/6.11.2-317-nilfs2-fix-potential-oob-read-in-nilfs_btree_c.patch
    (bsc#1012628 CVE-2024-47757 bsc#1232187).
  - Update
    patches.kernel.org/6.11.2-320-bpf-Fix-helper-writes-to-read-only-maps.patch
    (bsc#1012628 CVE-2024-49861 bsc#1232254).
  - Update
    patches.kernel.org/6.11.2-322-bpf-Zero-former-ARG_PTR_TO_-LONG-INT-args-in-c.patch
    (bsc#1012628 CVE-2024-47728 bsc#1232076).
  - Update
    patches.kernel.org/6.11.2-364-drivers-media-dvb-frontends-rtl2832-fix-an-out.patch
    (bsc#1012628 CVE-2024-47698 bsc#1231859).
  - Update
    patches.kernel.org/6.11.2-365-drivers-media-dvb-frontends-rtl2830-fix-an-out.patch
    (bsc#1012628 CVE-2024-47697 bsc#1231858).
  - Update
    patches.kernel.org/6.11.2-369-PCI-keystone-Fix-if-statement-expression-in-ks.patch
    (bsc#1012628 CVE-2024-47756 bsc#1232185).
  - Update
    patches.kernel.org/6.11.2-381-RDMA-iwcm-Fix-WARNING-at_kernel-workqueue.c-ch.patch
    (bsc#1012628 CVE-2024-47696 bsc#1231864).
  - Update
    patches.kernel.org/6.11.2-386-media-mediatek-vcodec-Fix-H264-multi-stateless.patch
    (bsc#1012628 CVE-2024-47754 bsc#1232131).
  - Update
    patches.kernel.org/6.11.2-387-media-mediatek-vcodec-Fix-VP8-stateless-decode.patch
    (bsc#1012628 CVE-2024-47753 bsc#1231868).
  - Update
    patches.kernel.org/6.11.2-388-media-mediatek-vcodec-Fix-H264-stateless-decod.patch
    (bsc#1012628 CVE-2024-47752 bsc#1232130).
  - Update
    patches.kernel.org/6.11.2-391-RDMA-rtrs-clt-Reset-cid-to-con_num-1-to-stay-i.patch
    (bsc#1012628 CVE-2024-47695 bsc#1231931).
  - Update
    patches.kernel.org/6.11.2-398-IB-mlx5-Fix-UMR-pd-cleanup-on-error-flow-of-dr.patch
    (bsc#1012628 CVE-2024-47694 bsc#1232014).
  - Update
    patches.kernel.org/6.11.2-399-IB-core-Fix-ib_cache_setup_one-error-flow-clea.patch
    (bsc#1012628 CVE-2024-47693 bsc#1232013).
  - Update
    patches.kernel.org/6.11.2-402-PCI-kirin-Fix-buffer-overflow-in-kirin_pcie_pa.patch
    (bsc#1012628 CVE-2024-47751 bsc#1232127).
  - Update
    patches.kernel.org/6.11.2-410-RDMA-hns-Fix-Use-After-Free-of-rsv_qp-on-HIP08.patch
    (bsc#1012628 CVE-2024-47750 bsc#1232182).
  - Update
    patches.kernel.org/6.11.2-412-RDMA-hns-Fix-spin_unlock_irqrestore-called-wit.patch
    (bsc#1012628 CVE-2024-47735 bsc#1232111).
  - Update
    patches.kernel.org/6.11.2-422-RDMA-cxgb4-Added-NULL-check-for-lookup_atid.patch
    (bsc#1012628 CVE-2024-47749 bsc#1232180).
  - Update
    patches.kernel.org/6.11.2-424-ntb-intel-Fix-the-NULL-vs-IS_ERR-bug-for-debug.patch
    (bsc#1012628 CVE-2023-52917 bsc#1231849).
  - Update
    patches.kernel.org/6.11.2-427-nfsd-call-cache_put-if-xdr_reserve_space-retur.patch
    (bsc#1012628 CVE-2024-47737 bsc#1232056).
  - Update
    patches.kernel.org/6.11.2-428-nfsd-return-EINVAL-when-namelen-is-0.patch
    (bsc#1012628 CVE-2024-47692 bsc#1231857).
  - Update
    patches.kernel.org/6.11.2-439-f2fs-fix-to-avoid-use-after-free-in-f2fs_stop_.patch
    (bsc#1012628 CVE-2024-47691 bsc#1232012).
  - Update
    patches.kernel.org/6.11.2-442-f2fs-get-rid-of-online-repaire-on-corrupted-di.patch
    (bsc#1012628 CVE-2024-47690 bsc#1232011).
  - Update
    patches.kernel.org/6.11.2-443-f2fs-fix-to-don-t-set-SB_RDONLY-in-f2fs_handle.patch
    (bsc#1012628 CVE-2024-47689 bsc#1232010).
  - Update
    patches.kernel.org/6.11.2-460-driver-core-Fix-a-potential-null-ptr-deref-in-.patch
    (bsc#1012628 CVE-2024-47688 bsc#1232009).
  - Update
    patches.kernel.org/6.11.2-469-vdpa-mlx5-Fix-invalid-mr-resource-destroy.patch
    (bsc#1012628 CVE-2024-47687 bsc#1232003).
  - Update
    patches.kernel.org/6.11.2-470-vhost_vdpa-assign-irq-bypass-producer-token-co.patch
    (bsc#1012628 CVE-2024-47748 bsc#1232174).
  - Update
    patches.kernel.org/6.11.2-471-ep93xx-clock-Fix-off-by-one-in-ep93xx_div_reca.patch
    (bsc#1012628 CVE-2024-47686 bsc#1232000).
  - Update
    patches.kernel.org/6.11.2-477-netfilter-nf_reject_ipv6-fix-nf_reject_ip6_tcp.patch
    (bsc#1012628 CVE-2024-47685 bsc#1231998).
  - Update
    patches.kernel.org/6.11.2-478-net-seeq-Fix-use-after-free-vulnerability-in-e.patch
    (bsc#1012628 CVE-2024-47747 bsc#1232145).
  - Update
    patches.kernel.org/6.11.2-480-tcp-check-skb-is-non-NULL-in-tcp_rto_delta_us.patch
    (bsc#1012628 CVE-2024-47684 bsc#1231987).
  - Update
    patches.kernel.org/6.11.2-486-bonding-Fix-unnecessary-warnings-and-logs-from.patch
    (bsc#1012628 CVE-2024-47734 bsc#1232055).
  - Update
    patches.kernel.org/6.11.2-497-fuse-use-exclusive-lock-when-FUSE_I_CACHE_IO_M.patch
    (bsc#1012628 CVE-2024-47746 bsc#1232137).
  - Update
    patches.kernel.org/6.11.2-499-mm-call-the-security_mmap_file-LSM-hook-in-rem.patch
    (bsc#1012628 CVE-2024-47745 bsc#1232135).
  - Update
    patches.kernel.org/6.11.2-528-iommufd-Protect-against-overflow-of-ALIGN-duri.patch
    (bsc#1012628 CVE-2024-47719 bsc#1231865).
  - Update
    patches.kernel.org/6.11.2-537-KVM-Use-dedicated-mutex-to-protect-kvm_usage_c.patch
    (bsc#1012628 CVE-2024-47744 bsc#1232132).
  - Update
    patches.kernel.org/6.11.2-538-drm-amd-display-Skip-Recompute-DSC-Params-if-n.patch
    (bsc#1012628 CVE-2024-47683 bsc#1231975).
  - Update
    patches.kernel.org/6.11.2-562-x86-tdx-Fix-in-kernel-MMIO-check.patch
    (bsc#1012628 CVE-2024-47727 bsc#1232116).
  - Update
    patches.kernel.org/6.11.2-563-KEYS-prevent-NULL-pointer-dereference-in-find_.patch
    (bsc#1012628 CVE-2024-47743 bsc#1232129).
  - Update
    patches.kernel.org/6.11.2-569-scsi-sd-Fix-off-by-one-error-in-sd_read_block_.patch
    (bsc#1012628 CVE-2024-47682 bsc#1231856).
  - Update
    patches.kernel.org/6.11.2-592-firmware_loader-Block-path-traversal.patch
    (bsc#1012628 CVE-2024-47742 bsc#1232126).
  - Update
    patches.kernel.org/6.11.2-603-ACPI-sysfs-validate-return-type-of-_STR-method.patch
    (bsc#1012628 CVE-2024-49860 bsc#1231861).
  - Update
    patches.kernel.org/6.11.2-606-efistub-tpm-Use-ACPI-reclaim-memory-for-event-.patch
    (bsc#1012628 CVE-2024-49858 bsc#1232251).
  - Update
    patches.kernel.org/6.11.2-615-wifi-mt76-mt7996-fix-NULL-pointer-dereference-.patch
    (bsc#1012628 CVE-2024-47681 bsc#1231855).
  - Update
    patches.kernel.org/6.11.2-625-btrfs-fix-race-setting-file-private-on-concurr.patch
    (bsc#1012628 CVE-2024-47741 bsc#1231869).
  - Update
    patches.kernel.org/6.11.2-628-f2fs-fix-to-wait-dio-completion.patch
    (bsc#1012628 CVE-2024-47726 bsc#1232113).
  - Update
    patches.kernel.org/6.11.2-632-f2fs-Require-FMODE_WRITE-for-atomic-write-ioct.patch
    (bsc#1012628 CVE-2024-47740 bsc#1231867).
  - Update
    patches.kernel.org/6.11.2-633-f2fs-check-discard-support-for-conventional-zo.patch
    (bsc#1012628 CVE-2024-47680 bsc#1231970).
  - Update
    patches.kernel.org/6.11.2-634-f2fs-fix-to-check-atomic_file-in-f2fs-ioctl-in.patch
    (bsc#1012628 CVE-2024-49859 bsc#1232252).
  - Update
    patches.kernel.org/6.11.2-644-vfs-fix-race-between-evice_inodes-and-find_ino.patch
    (bsc#1012628 CVE-2024-47679 bsc#1231930).
  - Update
    patches.kernel.org/6.11.2-645-netfs-Delete-subtree-of-fs-netfs-when-netfs-mo.patch
    (bsc#1012628 CVE-2024-47733 bsc#1232110).
  - Update
    patches.kernel.org/6.11.2-649-icmp-change-the-order-of-rate-limits.patch
    (bsc#1012628 CVE-2024-47678 bsc#1231854).
  - Update
    patches.kernel.org/6.11.2-653-padata-use-integer-wrap-around-to-prevent-dead.patch
    (bsc#1012628 CVE-2024-47739 bsc#1232124).
  - Update
    patches.kernel.org/6.11.2-677-exfat-resolve-memory-leak-from-exfat_create_up.patch
    (bsc#1012628 CVE-2024-47677 bsc#1231853).
  - Update
    patches.kernel.org/6.11.2-686-mm-hugetlb.c-fix-UAF-of-vma-in-hugetlb-fault-p.patch
    (bsc#1012628 CVE-2024-47676 bsc#1231927).
  - Update
    patches.kernel.org/6.11.2-694-bpf-Fix-use-after-free-in-bpf_uprobe_multi_lin.patch
    (bsc#1012628 CVE-2024-47675 bsc#1231926).
  - Update
    patches.kernel.org/6.11.3-001-static_call-Handle-module-init-failure-correct.patch
    (bsc#1012628 CVE-2024-50002 bsc#1232083).
  - Update
    patches.kernel.org/6.11.3-002-static_call-Replace-pointless-WARN_ON-in-stati.patch
    (bsc#1012628 CVE-2024-49954 bsc#1232155).
  - Update
    patches.kernel.org/6.11.3-014-mailbox-bcm2835-Fix-timeout-during-suspend-mod.patch
    (bsc#1012628 CVE-2024-49963 bsc#1232147).
  - Update
    patches.kernel.org/6.11.3-016-ceph-remove-the-incorrect-Fw-reference-check-w.patch
    (bsc#1012628 CVE-2024-50179 bsc#1233123).
  - Update
    patches.kernel.org/6.11.3-020-net-mlx5-Fix-error-path-in-multi-packet-WQE-tr.patch
    (bsc#1012628 CVE-2024-50001 bsc#1232084).
  - Update
    patches.kernel.org/6.11.3-022-net-mlx5e-Fix-NULL-deref-in-mlx5e_tir_builder_.patch
    (bsc#1012628 CVE-2024-50000 bsc#1232085).
  - Update
    patches.kernel.org/6.11.3-024-net-mlx5e-Fix-crash-caused-by-calling-__xfrm_s.patch
    (bsc#1012628 CVE-2024-49953 bsc#1232156).
  - Update
    patches.kernel.org/6.11.3-029-netfilter-nf_tables-prevent-nf_skb_duplicated-.patch
    (bsc#1012628 CVE-2024-49952 bsc#1232157).
  - Update
    patches.kernel.org/6.11.3-031-Bluetooth-MGMT-Fix-possible-crash-on-mgmt_inde.patch
    (bsc#1012628 CVE-2024-49951 bsc#1232158).
  - Update
    patches.kernel.org/6.11.3-032-Bluetooth-L2CAP-Fix-uaf-in-l2cap_connect.patch
    (bsc#1012628 CVE-2024-49950 bsc#1232159).
  - Update
    patches.kernel.org/6.11.3-035-afs-Fix-the-setting-of-the-server-responding-f.patch
    (bsc#1012628 CVE-2024-49999 bsc#1232086).
  - Update
    patches.kernel.org/6.11.3-036-net-dsa-improve-shutdown-sequence.patch
    (bsc#1012628 CVE-2024-49998 bsc#1232087).
  - Update
    patches.kernel.org/6.11.3-039-net-ethernet-lantiq_etop-fix-memory-disclosure.patch
    (bsc#1012628 CVE-2024-49997 bsc#1232088).
  - Update
    patches.kernel.org/6.11.3-042-net-avoid-potential-underflow-in-qdisc_pkt_len.patch
    (bsc#1012628 CVE-2024-49949 bsc#1232160).
  - Update
    patches.kernel.org/6.11.3-043-net-add-more-sanity-checks-to-qdisc_pkt_len_in.patch
    (bsc#1012628 CVE-2024-49948 bsc#1232161).
  - Update
    patches.kernel.org/6.11.3-047-net-test-for-not-too-small-csum_start-in-virti.patch
    (bsc#1012628 CVE-2024-49947 bsc#1232162).
  - Update
    patches.kernel.org/6.11.3-048-ppp-do-not-assume-bh-is-held-in-ppp_channel_br.patch
    (bsc#1012628 CVE-2024-49946 bsc#1232164).
  - Update
    patches.kernel.org/6.11.3-051-net-ncsi-Disable-the-ncsi-work-before-freeing-.patch
    (bsc#1012628 CVE-2024-49945 bsc#1232165).
  - Update
    patches.kernel.org/6.11.3-054-sctp-set-sk_state-back-to-CLOSED-if-autobind-f.patch
    (bsc#1012628 CVE-2024-49944 bsc#1232166).
  - Update
    patches.kernel.org/6.11.3-056-drm-panthor-Fix-race-when-converting-group-han.patch
    (bsc#1012628 CVE-2024-50174 bsc#1233093).
  - Update
    patches.kernel.org/6.11.3-066-ASoC-Intel-soc-acpi-intel-rpl-match-add-missin.patch
    (bsc#1012628 CVE-2024-50011 bsc#1232081).
  - Update
    patches.kernel.org/6.11.3-071-drm-xe-guc_submit-add-missing-locking-in-wedge.patch
    (bsc#1012628 CVE-2024-49943 bsc#1232167).
  - Update
    patches.kernel.org/6.11.3-073-drm-xe-Prevent-null-pointer-access-in-xe_migra.patch
    (bsc#1012628 CVE-2024-49942 bsc#1232168).
  - Update
    patches.kernel.org/6.11.3-074-cifs-Fix-buffer-overflow-when-parsing-NFS-repa.patch
    (bsc#1012628 CVE-2024-49996 bsc#1232089).
  - Update
    patches.kernel.org/6.11.3-076-gpiolib-Fix-potential-NULL-pointer-dereference.patch
    (bsc#1012628 CVE-2024-49941 bsc#1232169).
  - Update
    patches.kernel.org/6.11.3-084-l2tp-prevent-possible-tunnel-refcount-underflo.patch
    (bsc#1012628 CVE-2024-49940 bsc#1232812).
  - Update
    patches.kernel.org/6.11.3-086-wifi-rtw89-avoid-to-add-interface-to-list-twic.patch
    (bsc#1012628 CVE-2024-49939 bsc#1232381).
  - Update
    patches.kernel.org/6.11.3-087-wifi-ath9k_htc-Use-__skb_set_length-for-resett.patch
    (bsc#1012628 CVE-2024-49938 bsc#1232552).
  - Update
    patches.kernel.org/6.11.3-095-wifi-cfg80211-Set-correct-chandef-when-startin.patch
    (bsc#1012628 CVE-2024-49937 bsc#1232427).
  - Update
    patches.kernel.org/6.11.3-096-net-xen-netback-prevent-UAF-in-xenvif_flush_ha.patch
    (bsc#1012628 CVE-2024-49936 bsc#1232424).
  - Update
    patches.kernel.org/6.11.3-100-ACPI-PAD-fix-crash-in-exit_round_robin.patch
    (bsc#1012628 CVE-2024-49935 bsc#1232370).
  - Update
    patches.kernel.org/6.11.3-103-exec-don-t-WARN-for-racy-path_noexec-check.patch
    (bsc#1012628 CVE-2024-50010 bsc#1232388).
  - Update
    patches.kernel.org/6.11.3-104-fs-inode-Prevent-dump_mapping-accessing-invali.patch
    (bsc#1012628 CVE-2024-49934 bsc#1232387).
  - Update
    patches.kernel.org/6.11.3-112-blk_iocost-fix-more-out-of-bound-shifts.patch
    (bsc#1012628 CVE-2024-49933 bsc#1232368).
  - Update
    patches.kernel.org/6.11.3-113-btrfs-don-t-readahead-the-relocation-inode-on-.patch
    (bsc#1012628 CVE-2024-49932 bsc#1232376).
  - Update
    patches.kernel.org/6.11.3-114-wifi-ath12k-fix-array-out-of-bound-access-in-S.patch
    (bsc#1012628 CVE-2024-49931 bsc#1232275).
  - Update
    patches.kernel.org/6.11.3-115-wifi-ath11k-fix-array-out-of-bound-access-in-S.patch
    (bsc#1012628 CVE-2024-49930 bsc#1232260).
  - Update
    patches.kernel.org/6.11.3-121-ACPICA-check-null-return-of-ACPI_ALLOCATE_ZERO.patch
    (bsc#1012628 CVE-2024-49962 bsc#1232314).
  - Update
    patches.kernel.org/6.11.3-122-tipc-guard-against-string-buffer-overrun.patch
    (bsc#1012628 CVE-2024-49995 bsc#1232432).
  - Update
    patches.kernel.org/6.11.3-139-wifi-iwlwifi-mvm-avoid-NULL-pointer-dereferenc.patch
    (bsc#1012628 CVE-2024-49929 bsc#1232253).
  - Update
    patches.kernel.org/6.11.3-150-block-fix-integer-overflow-in-BLKSECDISCARD.patch
    (bsc#1012628 CVE-2024-49994 bsc#1225770).
  - Update
    patches.kernel.org/6.11.3-151-cpufreq-amd-pstate-add-check-for-cpufreq_cpu_g.patch
    (bsc#1012628 CVE-2024-50009 bsc#1232318).
  - Update
    patches.kernel.org/6.11.3-152-cpufreq-loongson3-Use-raw_smp_processor_id-in-.patch
    (bsc#1012628 CVE-2024-50178 bsc#1233121).
  - Update
    patches.kernel.org/6.11.3-155-wifi-rtw89-avoid-reading-out-of-bounds-when-lo.patch
    (bsc#1012628 CVE-2024-49928 bsc#1232250).
  - Update
    patches.kernel.org/6.11.3-158-net-napi-Prevent-overflow-of-napi_defer_hard_i.patch
    (bsc#1012628 CVE-2024-50018 bsc#1232419).
  - Update
    patches.kernel.org/6.11.3-162-wifi-mwifiex-Fix-memcpy-field-spanning-write-w.patch
    (bsc#1012628 CVE-2024-50008 bsc#1232317).
  - Update
    patches.kernel.org/6.11.3-166-x86-ioapic-Handle-allocation-failures-graceful.patch
    (bsc#1012628 CVE-2024-49927 bsc#1232249).
  - Update
    patches.kernel.org/6.11.3-180-x86-mm-ident_map-Use-gbpages-only-where-full-G.patch
    (bsc#1012628 CVE-2024-50017 bsc#1232312).
  - Update
    patches.kernel.org/6.11.3-181-ALSA-asihpi-Fix-potential-OOB-array-access.patch
    (bsc#1012628 CVE-2024-50007 bsc#1232394).
  - Update
    patches.kernel.org/6.11.3-187-rcu-tasks-Fix-access-non-existent-percpu-rtpcp.patch
    (bsc#1012628 CVE-2024-49926 bsc#1232247).
  - Update
    patches.kernel.org/6.11.3-189-fbdev-efifb-Register-sysfs-groups-through-driv.patch
    (bsc#1012628 CVE-2024-49925 bsc#1232224).
  - Update
    patches.kernel.org/6.11.3-190-fbdev-pxafb-Fix-possible-use-after-free-in-pxa.patch
    (bsc#1012628 CVE-2024-49924 bsc#1232364).
  - Update
    patches.kernel.org/6.11.3-200-drm-stm-Avoid-use-after-free-issues-with-crtc-.patch
    (bsc#1012628 CVE-2024-49992 bsc#1232430).
  - Update
    patches.kernel.org/6.11.3-201-drm-amd-display-Pass-non-null-to-dcn20_validat.patch
    (bsc#1012628 CVE-2024-49923 bsc#1232361).
  - Update
    patches.kernel.org/6.11.3-202-drm-amd-display-Check-null-pointers-before-usi.patch
    (bsc#1012628 CVE-2024-49922 bsc#1232374).
  - Update
    patches.kernel.org/6.11.3-203-drm-amd-display-Check-null-pointers-before-use.patch
    (bsc#1012628 CVE-2024-49921 bsc#1232371).
  - Update
    patches.kernel.org/6.11.3-204-drm-amd-display-Check-null-pointers-before-mul.patch
    (bsc#1012628 CVE-2024-49920 bsc#1232313).
  - Update
    patches.kernel.org/6.11.3-206-drm-amdkfd-amdkfd_free_gtt_mem-clear-the-corre.patch
    (bsc#1012628 CVE-2024-49991 bsc#1232282).
  - Update
    patches.kernel.org/6.11.3-207-drm-amd-display-Add-null-check-for-head_pipe-i.patch
    (bsc#1012628 CVE-2024-49919 bsc#1231968).
  - Update
    patches.kernel.org/6.11.3-208-drm-amd-display-Add-null-check-for-head_pipe-i.patch
    (bsc#1012628 CVE-2024-49918 bsc#1231967).
  - Update
    patches.kernel.org/6.11.3-209-drm-amd-display-Add-NULL-check-for-clk_mgr-and.patch
    (bsc#1012628 CVE-2024-49917 bsc#1231965).
  - Update
    patches.kernel.org/6.11.3-210-drm-amd-display-Add-NULL-check-for-clk_mgr-and.patch
    (bsc#1012628 CVE-2024-49916 bsc#1231964).
  - Update
    patches.kernel.org/6.11.3-211-drm-amd-display-Add-NULL-check-for-clk_mgr-in-.patch
    (bsc#1012628 CVE-2024-49915 bsc#1231963).
  - Update
    patches.kernel.org/6.11.3-212-drm-xe-hdcp-Check-GSC-structure-validity.patch
    (bsc#1012628 CVE-2024-49990 bsc#1232484).
  - Update
    patches.kernel.org/6.11.3-213-drm-amd-display-Add-null-check-for-pipe_ctx-pl.patch
    (bsc#1012628 CVE-2024-49914 bsc#1232369).
  - Update
    patches.kernel.org/6.11.3-214-drm-amd-display-Add-null-check-for-top_pipe_to.patch
    (bsc#1012628 CVE-2024-49913 bsc#1232307).
  - Update
    patches.kernel.org/6.11.3-222-drm-amd-display-Handle-null-stream_status-in-p.patch
    (bsc#1012628 CVE-2024-49912 bsc#1232367).
  - Update
    patches.kernel.org/6.11.3-223-drm-amd-display-Add-NULL-check-for-function-po.patch
    (bsc#1012628 CVE-2024-49911 bsc#1232366).
  - Update
    patches.kernel.org/6.11.3-224-drm-amd-display-Add-NULL-check-for-function-po.patch
    (bsc#1012628 CVE-2024-49910 bsc#1232365).
  - Update
    patches.kernel.org/6.11.3-225-drm-amd-display-Add-NULL-check-for-function-po.patch
    (bsc#1012628 CVE-2024-49909 bsc#1232337).
  - Update
    patches.kernel.org/6.11.3-226-drm-amd-display-fix-a-UBSAN-warning-in-DML2.1.patch
    (bsc#1012628 CVE-2024-50177 bsc#1233115).
  - Update
    patches.kernel.org/6.11.3-227-drm-amd-display-Add-null-check-for-afb-in-amdg.patch
    (bsc#1012628 CVE-2024-49908 bsc#1232335).
  - Update
    patches.kernel.org/6.11.3-228-drm-amd-display-Check-null-pointers-before-usi.patch
    (bsc#1012628 CVE-2024-49907 bsc#1232334).
  - Update
    patches.kernel.org/6.11.3-229-drm-amd-display-Check-null-pointer-before-try-.patch
    (bsc#1012628 CVE-2024-49906 bsc#1232332).
  - Update
    patches.kernel.org/6.11.3-230-drm-amd-display-Add-null-check-for-afb-in-amdg.patch
    (bsc#1012628 CVE-2024-49905 bsc#1232357).
  - Update
    patches.kernel.org/6.11.3-232-drm-amd-display-fix-double-free-issue-during-a.patch
    (bsc#1012628 CVE-2024-49989 bsc#1232483).
  - Update
    patches.kernel.org/6.11.3-233-drm-amdgpu-add-list-empty-check-to-avoid-null-.patch
    (bsc#1012628 CVE-2024-49904 bsc#1232356).
  - Update
    patches.kernel.org/6.11.3-235-jfs-Fix-uaf-in-dbFreeBits.patch
    (bsc#1012628 CVE-2024-49903 bsc#1232362).
  - Update
    patches.kernel.org/6.11.3-236-jfs-check-if-leafidx-greater-than-num-leaves-p.patch
    (bsc#1012628 CVE-2024-49902 bsc#1232378).
  - Update
    patches.kernel.org/6.11.3-239-drm-msm-adreno-Assign-msm_gpu-pdev-earlier-to-.patch
    (bsc#1012628 CVE-2024-49901 bsc#1232305).
  - Update
    patches.kernel.org/6.11.3-240-jfs-Fix-uninit-value-access-of-new_ea-in-ea_bu.patch
    (bsc#1012628 CVE-2024-49900 bsc#1232359).
  - Update
    patches.kernel.org/6.11.3-250-drm-amd-display-Initialize-denominators-defaul.patch
    (bsc#1012628 CVE-2024-49899 bsc#1232358).
  - Update
    patches.kernel.org/6.11.3-251-drm-amd-display-Check-null-initialized-variabl.patch
    (bsc#1012628 CVE-2024-49898 bsc#1232222).
  - Update
    patches.kernel.org/6.11.3-252-drm-amd-display-Check-phantom_stream-before-it.patch
    (bsc#1012628 CVE-2024-49897 bsc#1232355).
  - Update
    patches.kernel.org/6.11.3-253-drm-amd-display-Check-stream-before-comparing-.patch
    (bsc#1012628 CVE-2024-49896 bsc#1232221).
  - Update
    patches.kernel.org/6.11.3-254-drm-amd-display-Deallocate-DML-memory-if-alloc.patch
    (bsc#1012628 CVE-2024-49972 bsc#1232315).
  - Update
    patches.kernel.org/6.11.3-255-drm-amd-display-Increase-array-size-of-dummy_b.patch
    (bsc#1012628 CVE-2024-49971 bsc#1232473).
  - Update
    patches.kernel.org/6.11.3-256-drm-amd-display-Fix-index-out-of-bounds-in-DCN.patch
    (bsc#1012628 CVE-2024-49895 bsc#1232352).
  - Update
    patches.kernel.org/6.11.3-257-drm-amd-display-Fix-index-out-of-bounds-in-deg.patch
    (bsc#1012628 CVE-2024-49894 bsc#1232354).
  - Update
    patches.kernel.org/6.11.3-258-drm-amd-display-Implement-bounds-check-for-str.patch
    (bsc#1012628 CVE-2024-49970 bsc#1232516).
  - Update
    patches.kernel.org/6.11.3-259-drm-amd-display-Fix-index-out-of-bounds-in-DCN.patch
    (bsc#1012628 CVE-2024-49969 bsc#1232519).
  - Update
    patches.kernel.org/6.11.3-263-drm-amd-display-Check-stream_status-before-it-.patch
    (bsc#1012628 CVE-2024-49893 bsc#1232350).
  - Update
    patches.kernel.org/6.11.3-264-drm-amd-display-Avoid-overflow-assignment-in-l.patch
    (bsc#1012628 CVE-2024-50016 bsc#1232420).
  - Update
    patches.kernel.org/6.11.3-265-drm-amd-display-Initialize-get_bytes_per_eleme.patch
    (bsc#1012628 CVE-2024-49892 bsc#1232220).
  - Update
    patches.kernel.org/6.11.3-269-scsi-lpfc-Validate-hdwq-pointers-before-derefe.patch
    (bsc#1012628 CVE-2024-49891 bsc#1232218).
  - Update
    patches.kernel.org/6.11.3-286-drm-amd-pm-ensure-the-fw_info-is-not-null-befo.patch
    (bsc#1012628 CVE-2024-49890 bsc#1232217).
  - Update
    patches.kernel.org/6.11.3-299-ksmbd-add-refcnt-to-ksmbd_conn-struct.patch
    (bsc#1012628 CVE-2024-49988 bsc#1232482).
  - Update
    patches.kernel.org/6.11.3-302-ext4-filesystems-without-casefold-feature-cann.patch
    (bsc#1012628 CVE-2024-49968 bsc#1232264).
  - Update
    patches.kernel.org/6.11.3-305-ext4-avoid-use-after-free-in-ext4_ext_show_lea.patch
    (bsc#1012628 CVE-2024-49889 bsc#1232215).
  - Update
    patches.kernel.org/6.11.3-306-ext4-fix-i_data_sem-unlock-order-in-ext4_ind_m.patch
    (bsc#1012628 CVE-2024-50006 bsc#1232442).
  - Update
    patches.kernel.org/6.11.3-309-bpftool-Fix-undefined-behavior-in-qsort-NULL-0.patch
    (bsc#1012628 CVE-2024-49987 bsc#1232258).
  - Update
    patches.kernel.org/6.11.3-310-bpf-Fix-a-sdiv-overflow-issue.patch
    (bsc#1012628 CVE-2024-49888 bsc#1232208).
  - Update
    patches.kernel.org/6.11.3-333-f2fs-fix-to-don-t-panic-system-for-no-free-seg.patch
    (bsc#1012628 CVE-2024-49887 bsc#1232206).
  - Update
    patches.kernel.org/6.11.3-343-platform-x86-x86-android-tablets-Fix-use-after.patch
    (bsc#1012628 CVE-2024-49986 bsc#1232093).
  - Update
    patches.kernel.org/6.11.3-344-platform-x86-ISST-Fix-the-KASAN-report-slab-ou.patch
    (bsc#1012628 CVE-2024-49886 bsc#1232196).
  - Update
    patches.kernel.org/6.11.3-346-i2c-stm32f7-Do-not-prepare-unprepare-clock-dur.patch
    (bsc#1012628 CVE-2024-49985 bsc#1232094).
  - Update
    patches.kernel.org/6.11.3-349-media-i2c-ar0521-Use-cansleep-version-of-gpiod.patch
    (bsc#1012628 CVE-2024-49961 bsc#1232148).
  - Update
    patches.kernel.org/6.11.3-362-mm-slub-avoid-zeroing-kmalloc-redzone.patch
    (bsc#1012628 CVE-2024-49885 bsc#1232197).
  - Update
    patches.kernel.org/6.11.3-365-drm-v3d-Prevent-out-of-bounds-access-in-perfor.patch
    (bsc#1012628 CVE-2024-49984 bsc#1232095).
  - Update
    patches.kernel.org/6.11.3-377-ext4-no-need-to-continue-when-the-number-of-en.patch
    (bsc#1012628 CVE-2024-49967 bsc#1232140).
  - Update
    patches.kernel.org/6.11.3-379-ext4-fix-slab-use-after-free-in-ext4_split_ext.patch
    (bsc#1012628 CVE-2024-49884 bsc#1232198).
  - Update
    patches.kernel.org/6.11.3-382-ext4-dax-fix-overflowing-extents-beyond-inode-.patch
    (bsc#1012628 CVE-2024-50015 bsc#1232079).
  - Update
    patches.kernel.org/6.11.3-384-ext4-drop-ppath-from-ext4_ext_replay_update_ex.patch
    (bsc#1012628 CVE-2024-49983 bsc#1232096).
  - Update
    patches.kernel.org/6.11.3-385-ext4-aovid-use-after-free-in-ext4_ext_insert_e.patch
    (bsc#1012628 CVE-2024-49883 bsc#1232199).
  - Update
    patches.kernel.org/6.11.3-386-ext4-fix-double-brelse-the-buffer-of-the-exten.patch
    (bsc#1012628 CVE-2024-49882 bsc#1232200).
  - Update
    patches.kernel.org/6.11.3-387-ext4-fix-timer-use-after-free-on-failed-mount.patch
    (bsc#1012628 CVE-2024-49960 bsc#1232395).
  - Update
    patches.kernel.org/6.11.3-388-ext4-fix-access-to-uninitialised-lock-in-fc-re.patch
    (bsc#1012628 CVE-2024-50014 bsc#1232446).
  - Update
    patches.kernel.org/6.11.3-389-ext4-update-orig_path-in-ext4_find_extent.patch
    (bsc#1012628 CVE-2024-49881 bsc#1232201).
  - Update
    patches.kernel.org/6.11.3-395-ext4-fix-off-by-one-issue-in-alloc_flex_gd.patch
    (bsc#1012628 CVE-2024-49880 bsc#1232205).
  - Update
    patches.kernel.org/6.11.3-403-drm-omapdrm-Add-missing-check-for-alloc_ordere.patch
    (bsc#1012628 CVE-2024-49879 bsc#1232349).
  - Update
    patches.kernel.org/6.11.3-404-resource-fix-region_intersects-vs-add_memory_d.patch
    (bsc#1012628 CVE-2024-49878 bsc#1232340).
  - Update
    patches.kernel.org/6.11.3-406-jbd2-stop-waiting-for-space-when-jbd2_cleanup_.patch
    (bsc#1012628 CVE-2024-49959 bsc#1232149).
  - Update
    patches.kernel.org/6.11.3-411-ocfs2-reserve-space-for-inline-xattr-before-at.patch
    (bsc#1012628 CVE-2024-49958 bsc#1232151).
  - Update
    patches.kernel.org/6.11.3-412-ocfs2-cancel-dqi_sync_work-before-freeing-oinf.patch
    (bsc#1012628 CVE-2024-49966 bsc#1232141).
  - Update
    patches.kernel.org/6.11.3-413-ocfs2-remove-unreasonable-unlock-in-ocfs2_read.patch
    (bsc#1012628 CVE-2024-49965 bsc#1232142).
  - Update
    patches.kernel.org/6.11.3-414-ocfs2-fix-null-ptr-deref-when-journal-load-fai.patch
    (bsc#1012628 CVE-2024-49957 bsc#1232152).
  - Update
    patches.kernel.org/6.11.3-415-ocfs2-fix-possible-null-ptr-deref-in-ocfs2_set.patch
    (bsc#1012628 CVE-2024-49877 bsc#1232339).
  - Update
    patches.kernel.org/6.11.3-421-drm-xe-fix-UAF-around-queue-destruction.patch
    (bsc#1012628 CVE-2024-49876 bsc#1232336).
  - Update
    patches.kernel.org/6.11.3-428-exfat-fix-memory-leak-in-exfat_load_bitmap.patch
    (bsc#1012628 CVE-2024-50013 bsc#1232080).
  - Update
    patches.kernel.org/6.11.3-432-nfsd-map-the-EBADMSG-to-nfserr_io-to-avoid-war.patch
    (bsc#1012628 CVE-2024-49875 bsc#1232333).
  - Update
    patches.kernel.org/6.11.3-434-i3c-master-svc-Fix-use-after-free-vulnerabilit.patch
    (bsc#1012628 CVE-2024-49874 bsc#1232295).
  - Update
    patches.kernel.org/6.11.3-440-aoe-fix-the-potential-use-after-free-problem-i.patch
    (bsc#1012628 CVE-2024-49982 bsc#1232097).
  - Update
    patches.kernel.org/6.11.3-445-remoteproc-k3-r5-Fix-error-handling-when-power.patch
    (bsc#1012628 CVE-2024-50176 bsc#1233091).
  - Update
    patches.kernel.org/6.11.3-446-gfs2-fix-double-destroy_workqueue-error.patch
    (bsc#1012628 CVE-2024-49956 bsc#1232153).
  - Update
    patches.kernel.org/6.11.3-457-media-venus-fix-use-after-free-bug-in-venus_re.patch
    (bsc#1012628 CVE-2024-49981 bsc#1232098).
  - Update
    patches.kernel.org/6.11.3-459-media-qcom-camss-Remove-use_count-guard-in-sto.patch
    (bsc#1012628 CVE-2024-50175 bsc#1233092).
  - Update
    patches.kernel.org/6.11.3-470-vrf-revert-vrf-Remove-unnecessary-RCU-bh-criti.patch
    (bsc#1012628 CVE-2024-49980 bsc#1232099).
  - Update
    patches.kernel.org/6.11.3-471-net-gso-fix-tcp-fraglist-segmentation-after-pu.patch
    (bsc#1012628 CVE-2024-49979 bsc#1232100).
  - Update
    patches.kernel.org/6.11.3-472-gso-fix-udp-gso-fraglist-segmentation-after-pu.patch
    (bsc#1012628 CVE-2024-49978 bsc#1232101).
  - Update
    patches.kernel.org/6.11.3-475-net-stmmac-Fix-zero-division-error-when-disabl.patch
    (bsc#1012628 CVE-2024-49977 bsc#1232102).
  - Update
    patches.kernel.org/6.11.3-477-mm-filemap-fix-filemap_get_folios_contig-THP-p.patch
    (bsc#1012628 CVE-2024-49873 bsc#1232291).
  - Update
    patches.kernel.org/6.11.3-478-mm-hugetlb-fix-memfd_pin_folios-free_huge_page.patch
    (bsc#1012628 CVE-2024-49964 bsc#1232144).
  - Update
    patches.kernel.org/6.11.3-481-mm-gup-fix-memfd_pin_folios-alloc-race-panic.patch
    (bsc#1012628 CVE-2024-49872 bsc#1232288).
  - Update
    patches.kernel.org/6.11.3-483-Input-adp5589-keys-fix-NULL-pointer-dereferenc.patch
    (bsc#1012628 CVE-2024-49871 bsc#1232287).
  - Update
    patches.kernel.org/6.11.3-486-cachefiles-fix-dentry-leak-in-cachefiles_open_.patch
    (bsc#1012628 CVE-2024-49870 bsc#1232279).
  - Update
    patches.kernel.org/6.11.3-493-btrfs-send-fix-buffer-overflow-detection-when-.patch
    (bsc#1012628 CVE-2024-49869 bsc#1232278).
  - Update
    patches.kernel.org/6.11.3-494-btrfs-fix-a-NULL-pointer-dereference-when-fail.patch
    (bsc#1012628 CVE-2024-49868 bsc#1232272).
  - Update
    patches.kernel.org/6.11.3-497-btrfs-wait-for-fixup-workers-before-stopping-c.patch
    (bsc#1012628 CVE-2024-49867 bsc#1232262).
  - Update
    patches.kernel.org/6.11.3-498-cpufreq-Avoid-a-bad-reference-count-on-CPU-nod.patch
    (bsc#1012628 CVE-2024-50012 bsc#1232386).
  - Update
    patches.kernel.org/6.11.3-503-mac802154-Fix-potential-RCU-dereference-issue-.patch
    (bsc#1012628 CVE-2024-50005 bsc#1232082).
  - Update
    patches.kernel.org/6.11.3-507-tracing-timerlat-Drop-interface_lock-in-stop_k.patch
    (bsc#1012628 CVE-2024-49976 bsc#1232103).
  - Update
    patches.kernel.org/6.11.3-508-tracing-timerlat-Fix-a-race-during-cpuhp-proce.patch
    (bsc#1012628 CVE-2024-49866 bsc#1232259).
  - Update
    patches.kernel.org/6.11.3-515-drm-panthor-Fix-access-to-uninitialized-variab.patch
    (bsc#1012628 CVE-2024-50173 bsc#1233094).
  - Update
    patches.kernel.org/6.11.3-524-drm-amd-display-update-DML2-policy-EnhancedPre.patch
    (bsc#1012628 CVE-2024-50004 bsc#1232396).
  - Update
    patches.kernel.org/6.11.3-525-drm-amd-display-Fix-system-hang-while-resume-w.patch
    (bsc#1012628 CVE-2024-50003 bsc#1232385).
  - Update
    patches.kernel.org/6.11.3-531-uprobes-fix-kernel-info-leak-via-uprobes-vma.patch
    (bsc#1012628 CVE-2024-49975 bsc#1232104).
  - Update
    patches.kernel.org/6.11.3-536-NFSD-Limit-the-number-of-concurrent-async-COPY.patch
    (bsc#1012628 CVE-2024-49974 bsc#1232383).
  - Update
    patches.kernel.org/6.11.3-540-r8169-add-tally-counter-fields-added-with-RTL8.patch
    (bsc#1012628 CVE-2024-49973 bsc#1232105).
  - Update
    patches.kernel.org/6.11.3-542-ACPI-battery-Fix-possible-crash-when-unregiste.patch
    (bsc#1012628 CVE-2024-49955 bsc#1232154).
  - Update
    patches.kernel.org/6.11.3-544-drm-xe-vm-move-xa_alloc-to-prevent-UAF.patch
    (bsc#1012628 CVE-2024-49865 bsc#1232257).
  - Update
    patches.kernel.org/6.11.3-549-rxrpc-Fix-a-race-between-socket-set-up-and-I-O.patch
    (bsc#1012628 CVE-2024-49864 bsc#1232256).
  - Update
    patches.kernel.org/6.11.3-550-vhost-scsi-null-ptr-dereference-in-vhost_scsi_.patch
    (bsc#1012628 CVE-2024-49863 bsc#1232255).
  - Update
    patches.kernel.org/6.11.4-001-unicode-Don-t-special-case-ignorable-code-poin.patch
    (bsc#1012628 CVE-2024-50089 bsc#1232860).
  - Update
    patches.kernel.org/6.11.4-002-net-fec-don-t-save-PTP-state-if-PTP-is-unsuppo.patch
    (bsc#1012628 CVE-2024-50097 bsc#1232871).
  - Update
    patches.kernel.org/6.11.4-011-ntfs3-Change-to-non-blocking-allocation-in-ntf.patch
    (bsc#1012628 CVE-2024-50065 bsc#1231899).
  - Update
    patches.kernel.org/6.11.4-014-zram-free-secondary-algorithms-names.patch
    (bsc#1012628 CVE-2024-50064 bsc#1231901).
  - Update
    patches.kernel.org/6.11.4-022-ext4-don-t-set-SB_RDONLY-after-filesystem-erro.patch
    (bsc#1012628 CVE-2024-50191 bsc#1233101).
  - Update
    patches.kernel.org/6.11.4-026-bpf-Prevent-tail-call-between-progs-attached-t.patch
    (bsc#1012628 CVE-2024-50063 bsc#1232435).
  - Update
    patches.kernel.org/6.11.4-028-RDMA-mad-Improve-handling-of-timed-out-WRs-of-.patch
    (bsc#1012628 CVE-2024-50095 bsc#1232873).
  - Update
    patches.kernel.org/6.11.4-031-RDMA-rtrs-srv-Avoid-null-pointer-deref-during-.patch
    (bsc#1012628 CVE-2024-50062 bsc#1232232).
  - Update
    patches.kernel.org/6.11.4-036-i3c-master-cdns-Fix-use-after-free-vulnerabili.patch
    (bsc#1012628 CVE-2024-50061 bsc#1232263).
  - Update
    patches.kernel.org/6.11.4-038-io_uring-check-if-we-need-to-reschedule-during.patch
    (bsc#1012628 CVE-2024-50060 bsc#1232417).
  - Update
    patches.kernel.org/6.11.4-039-ntb-ntb_hw_switchtec-Fix-use-after-free-vulner.patch
    (bsc#1012628 CVE-2024-50059 bsc#1232345).
  - Update
    patches.kernel.org/6.11.4-052-clk-imx-Remove-CLK_SET_PARENT_GATE-for-DRAM-mu.patch
    (bsc#1012628 CVE-2024-50181 bsc#1233127).
  - Update
    patches.kernel.org/6.11.4-053-serial-protect-uart_port_dtr_rts-in-uart_shutd.patch
    (bsc#1012628 CVE-2024-50058 bsc#1232285).
  - Update
    patches.kernel.org/6.11.4-054-usb-typec-tipd-Free-IRQ-only-if-it-was-request.patch
    (bsc#1012628 CVE-2024-50057 bsc#1232393).
  - Update
    patches.kernel.org/6.11.4-063-virtio_pmem-Check-device-status-before-request.patch
    (bsc#1012628 CVE-2024-50184 bsc#1233135).
  - Update
    patches.kernel.org/6.11.4-066-usb-gadget-uvc-Fix-ERR_PTR-dereference-in-uvc_.patch
    (bsc#1012628 CVE-2024-50056 bsc#1232389).
  - Update
    patches.kernel.org/6.11.4-067-dm-vdo-don-t-refer-to-dedupe_context-after-rel.patch
    (bsc#1012628 CVE-2024-50091 bsc#1232872).
  - Update
    patches.kernel.org/6.11.4-068-driver-core-bus-Fix-double-free-in-driver-API-.patch
    (bsc#1012628 CVE-2024-50055 bsc#1232329).
  - Update
    patches.kernel.org/6.11.4-071-scsi-lpfc-Ensure-DA_ID-handling-completion-bef.patch
    (bsc#1012628 CVE-2024-50183 bsc#1233130).
  - Update
    patches.kernel.org/6.11.4-073-drm-xe-oa-Fix-overflow-in-oa-batch-buffer.patch
    (bsc#1012628 CVE-2024-50090 bsc#1232862).
  - Update
    patches.kernel.org/6.11.4-074-drm-amd-display-Check-null-pointer-before-dere.patch
    (bsc#1012628 CVE-2024-50049 bsc#1232309).
  - Update
    patches.kernel.org/6.11.4-075-fbcon-Fix-a-NULL-pointer-dereference-issue-in-.patch
    (bsc#1012628 CVE-2024-50048 bsc#1232310).
  - Update
    patches.kernel.org/6.11.4-076-smb-client-fix-UAF-in-async-decryption.patch
    (bsc#1012628 CVE-2024-50047 bsc#1232418).
  - Update
    patches.kernel.org/6.11.4-077-fbdev-sisfb-Fix-strbuf-array-overflow.patch
    (bsc#1012628 CVE-2024-50180 bsc#1233125).
  - Update
    patches.kernel.org/6.11.4-082-ice-fix-memleak-in-ice_init_tx_topology.patch
    (bsc#1012628 CVE-2024-50190 bsc#1233090).
  - Update
    patches.kernel.org/6.11.4-086-NFSv4-Prevent-NULL-pointer-dereference-in-nfs4.patch
    (bsc#1012628 CVE-2024-50046 bsc#1231902).
  - Update
    patches.kernel.org/6.11.4-087-net-phy-dp83869-fix-memory-corruption-when-ena.patch
    (bsc#1012628 CVE-2024-50188 bsc#1233107).
  - Update
    patches.kernel.org/6.11.4-088-sfc-Don-t-invoke-xdp_do_flush-from-netpoll.patch
    (bsc#1012628 CVE-2024-50094 bsc#1232875).
  - Update
    patches.kernel.org/6.11.4-096-netfilter-br_netfilter-fix-panic-with-metadata.patch
    (bsc#1012628 CVE-2024-50045 bsc#1231903).
  - Update
    patches.kernel.org/6.11.4-099-Bluetooth-RFCOMM-FIX-possible-deadlock-in-rfco.patch
    (bsc#1012628 CVE-2024-50044 bsc#1231904).
  - Update
    patches.kernel.org/6.11.4-102-nfsd-fix-possible-badness-in-FREE_STATEID.patch
    (bsc#1012628 CVE-2024-50043 bsc#1231905).
  - Update
    patches.kernel.org/6.11.4-103-thermal-intel-int340x-processor-Fix-warning-du.patch
    (bsc#1012628 CVE-2024-50093 bsc#1232877).
  - Update
    patches.kernel.org/6.11.4-120-ice-Fix-increasing-MSI-X-on-VF.patch
    (bsc#1012628 CVE-2024-50042 bsc#1231906).
  - Update
    patches.kernel.org/6.11.4-121-i40e-Fix-macvlan-leak-by-synchronizing-access-.patch
    (bsc#1012628 CVE-2024-50041 bsc#1231907).
  - Update
    patches.kernel.org/6.11.4-122-igb-Do-not-bring-the-device-up-after-non-fatal.patch
    (bsc#1012628 CVE-2024-50040 bsc#1231908).
  - Update
    patches.kernel.org/6.11.4-124-net-sched-accept-TCA_STAB-only-for-root-qdisc.patch
    (bsc#1012628 CVE-2024-50039 bsc#1231909).
  - Update
    patches.kernel.org/6.11.4-131-netfilter-xtables-avoid-NFPROTO_UNSPEC-where-n.patch
    (bsc#1012628 CVE-2024-50038 bsc#1231910).
  - Update
    patches.kernel.org/6.11.4-135-net-netconsole-fix-wrong-warning.patch
    (bsc#1012628 CVE-2024-50092 bsc#1232874).
  - Update
    patches.kernel.org/6.11.4-136-drm-fbdev-dma-Only-cleanup-deferred-I-O-if-nec.patch
    (bsc#1012628 CVE-2024-50037 bsc#1231911).
  - Update
    patches.kernel.org/6.11.4-137-net-do-not-delay-dst_entries_add-in-dst_releas.patch
    (bsc#1012628 CVE-2024-50036 bsc#1231912).
  - Update
    patches.kernel.org/6.11.4-144-ppp-fix-ppp_async_encode-illegal-access.patch
    (bsc#1012628 CVE-2024-50035 bsc#1232392).
  - Update
    patches.kernel.org/6.11.4-145-net-smc-fix-lacks-of-icsk_syn_mss-with-IPPROTO.patch
    (bsc#1012628 CVE-2024-50034 bsc#1231913).
  - Update
    patches.kernel.org/6.11.4-146-slip-make-slhc_remember-more-robust-against-ma.patch
    (bsc#1012628 CVE-2024-50033 bsc#1231914).
  - Update
    patches.kernel.org/6.11.4-147-rcu-nocb-Fix-rcuog-wake-up-from-offline-softir.patch
    (bsc#1012628 CVE-2024-50032 bsc#1231915).
  - Update
    patches.kernel.org/6.11.4-156-HID-amd_sfh-Switch-to-device-managed-dmam_allo.patch
    (bsc#1012628 CVE-2024-50189 bsc#1233105).
  - Update
    patches.kernel.org/6.11.4-170-drm-v3d-Stop-the-active-perfmon-before-being-d.patch
    (bsc#1012628 CVE-2024-50031 bsc#1231947).
  - Update
    patches.kernel.org/6.11.4-171-drm-vc4-Stop-the-active-perfmon-before-being-d.patch
    (bsc#1012628 CVE-2024-50187 bsc#1233108).
  - Update
    patches.kernel.org/6.11.4-176-drm-xe-ct-prevent-UAF-in-send_recv.patch
    (bsc#1012628 CVE-2024-50030 bsc#1231948).
  - Update
    patches.kernel.org/6.11.4-178-Bluetooth-hci_conn-Fix-UAF-in-hci_enhanced_set.patch
    (bsc#1012628 CVE-2024-50029 bsc#1231949).
  - Update
    patches.kernel.org/6.11.4-179-thermal-core-Reference-count-the-zone-in-therm.patch
    (bsc#1012628 CVE-2024-50028 bsc#1231950).
  - Update
    patches.kernel.org/6.11.4-180-thermal-core-Free-tzp-copy-along-with-the-ther.patch
    (bsc#1012628 CVE-2024-50027 bsc#1231951).
  - Update
    patches.kernel.org/6.11.4-181-scsi-wd33c93-Don-t-use-stale-scsi_pointer-valu.patch
    (bsc#1012628 CVE-2024-50026 bsc#1231952).
  - Update
    patches.kernel.org/6.11.4-182-scsi-fnic-Move-flush_work-initialization-out-o.patch
    (bsc#1012628 CVE-2024-50025 bsc#1231953).
  - Update
    patches.kernel.org/6.11.4-189-net-explicitly-clear-the-sk-pointer-when-pf-cr.patch
    (bsc#1012628 CVE-2024-50186 bsc#1233110).
  - Update
    patches.kernel.org/6.11.4-190-net-Fix-an-unsafe-loop-on-the-list.patch
    (bsc#1012628 CVE-2024-50024 bsc#1231954).
  - Update
    patches.kernel.org/6.11.4-192-net-phy-Remove-LED-entry-from-LEDs-list-on-unr.patch
    (bsc#1012628 CVE-2024-50023 bsc#1231955).
  - Update
    patches.kernel.org/6.11.4-194-mptcp-handle-consistently-DSS-corruption.patch
    (bsc#1012628 CVE-2024-50185 bsc#1233109).
  - Update
    patches.kernel.org/6.11.4-196-device-dax-correct-pgoff-align-in-dax_set_mapp.patch
    (bsc#1012628 CVE-2024-50022 bsc#1231956).
  - Update
    patches.kernel.org/6.11.4-197-ice-Fix-improper-handling-of-refcount-in-ice_d.patch
    (bsc#1012628 CVE-2024-50021 bsc#1231957).
  - Update
    patches.kernel.org/6.11.4-198-ice-Fix-improper-handling-of-refcount-in-ice_s.patch
    (bsc#1012628 CVE-2024-50020 bsc#1231989).
  - Update
    patches.kernel.org/6.11.4-199-nouveau-dmem-Fix-vulnerability-in-migrate_to_r.patch
    (bsc#1012628 CVE-2024-50096 bsc#1232870).
  - Update
    patches.kernel.org/6.11.4-207-kthread-unpark-only-parked-kthread.patch
    (bsc#1012628 CVE-2024-50019 bsc#1231990).
  - Update
    patches.kernel.org/6.11.4-209-secretmem-disable-memfd_secret-if-arch-cannot-.patch
    (bsc#1012628 CVE-2024-50182 bsc#1233129).
  - Update
    patches.kernel.org/6.11.5-001-btrfs-fix-uninitialized-pointer-free-in-add_in.patch
    (bsc#1012628 CVE-2024-50088 bsc#1232498).
  - Update
    patches.kernel.org/6.11.5-002-btrfs-fix-uninitialized-pointer-free-on-read_a.patch
    (bsc#1012628 CVE-2024-50087 bsc#1232499).
  - Update
    patches.kernel.org/6.11.5-003-ksmbd-fix-user-after-free-from-session-log-off.patch
    (bsc#1012628 CVE-2024-50086 bsc#1232521).
  - Update
    patches.kernel.org/6.11.5-006-mptcp-pm-fix-UaF-read-in-mptcp_pm_nl_rm_addr_o.patch
    (bsc#1012628 CVE-2024-50085 bsc#1232508).
  - Update
    patches.kernel.org/6.11.5-012-posix-clock-Fix-missing-timespec64-check-in-pc.patch
    (bsc#1012628 CVE-2024-50195 bsc#1233103).
  - Update
    patches.kernel.org/6.11.5-015-arm64-probes-Remove-broken-LDR-literal-uprobe-.patch
    (bsc#1012628 CVE-2024-50099 bsc#1232887).
  - Update
    patches.kernel.org/6.11.5-017-arm64-probes-Fix-uprobes-for-big-endian-kernel.patch
    (bsc#1012628 CVE-2024-50194 bsc#1233111).
  - Update
    patches.kernel.org/6.11.5-019-net-microchip-vcap-api-Fix-memory-leaks-in-vca.patch
    (bsc#1012628 CVE-2024-50084 bsc#1232494).
  - Update
    patches.kernel.org/6.11.5-021-maple_tree-correct-tree-corruption-on-spanning.patch
    (bsc#1012628 CVE-2024-50200 bsc#1233088).
  - Update
    patches.kernel.org/6.11.5-026-mm-mremap-fix-move_normal_pmd-retract_page_tab.patch
    (bsc#1012628 CVE-2024-50066 bsc#1232078).
  - Update
    patches.kernel.org/6.11.5-029-mm-swapfile-skip-HugeTLB-pages-for-unuse_vma.patch
    (bsc#1012628 CVE-2024-50199 bsc#1233112).
  - Update
    patches.kernel.org/6.11.5-030-mm-damon-tests-sysfs-kunit.h-fix-memory-leak-i.patch
    (bsc#1012628 CVE-2024-50068 bsc#1232512).
  - Update
    patches.kernel.org/6.11.5-031-tcp-fix-mptcp-DSS-corruption-due-to-large-pmtu.patch
    (bsc#1012628 CVE-2024-50083 bsc#1232493).
  - Update
    patches.kernel.org/6.11.5-035-iommu-vt-d-Fix-incorrect-pci_for_each_dma_alia.patch
    (bsc#1012628 CVE-2024-50101 bsc#1232869).
  - Update
    patches.kernel.org/6.11.5-047-blk-rq-qos-fix-crash-on-rq_qos_wait-vs.-rq_qos.patch
    (bsc#1012628 CVE-2024-50082 bsc#1232500).
  - Update
    patches.kernel.org/6.11.5-049-blk-mq-setup-queue-tag_set-before-initializing.patch
    (bsc#1012628 CVE-2024-50081 bsc#1232501).
  - Update
    patches.kernel.org/6.11.5-050-ublk-don-t-allow-user-copy-for-unprivileged-de.patch
    (bsc#1012628 CVE-2024-50080 bsc#1232502).
  - Update
    patches.kernel.org/6.11.5-051-io_uring-sqpoll-ensure-task-state-is-TASK_RUNN.patch
    (bsc#1012628 CVE-2024-50079 bsc#1232495).
  - Update
    patches.kernel.org/6.11.5-055-scsi-ufs-core-Set-SDEV_OFFLINE-when-UFS-is-shu.patch
    (bsc#1012628 CVE-2024-50098 bsc#1232881).
  - Update
    patches.kernel.org/6.11.5-058-drm-radeon-Fix-encoder-possible_clones.patch
    (bsc#1012628 CVE-2024-50201 bsc#1233104).
  - Update
    patches.kernel.org/6.11.5-075-iio-light-veml6030-fix-IIO-device-retrieval-fr.patch
    (bsc#1012628 CVE-2024-50198 bsc#1233100).
  - Update
    patches.kernel.org/6.11.5-093-Bluetooth-Call-iso_exit-on-module-unload.patch
    (bsc#1012628 CVE-2024-50078 bsc#1232503).
  - Update
    patches.kernel.org/6.11.5-095-Bluetooth-ISO-Fix-multiple-init-when-debugfs-i.patch
    (bsc#1012628 CVE-2024-50077 bsc#1232504).
  - Update
    patches.kernel.org/6.11.5-098-vt-prevent-kernel-infoleak-in-con_font_get.patch
    (bsc#1012628 CVE-2024-50076 bsc#1232505).
  - Update
    patches.kernel.org/6.11.5-099-xhci-tegra-fix-checked-USB2-port-number.patch
    (bsc#1012628 CVE-2024-50075 bsc#1232506).
  - Update
    patches.kernel.org/6.11.5-105-USB-gadget-dummy-hcd-Fix-task-hung-problem.patch
    (bsc#1012628 CVE-2024-50100 bsc#1232876).
  - Update
    patches.kernel.org/6.11.5-112-parport-Proper-fix-for-array-out-of-bounds-acc.patch
    (bsc#1012628 CVE-2024-50074 bsc#1232507).
  - Update
    patches.kernel.org/6.11.5-117-x86-entry_32-Clear-CPU-buffers-after-register-.patch
    (bsc#1012628 CVE-2024-50193 bsc#1233102).
  - Update
    patches.kernel.org/6.11.5-118-tty-n_gsm-Fix-use-after-free-in-gsm_cleanup_mu.patch
    (bsc#1012628 CVE-2024-50073 bsc#1232520).
  - Update
    patches.kernel.org/6.11.5-119-x86-bugs-Use-code-segment-selector-for-VERW-op.patch
    (bsc#1012628 CVE-2024-50072 bsc#1232513).
  - Update
    patches.kernel.org/6.11.5-120-pinctrl-nuvoton-fix-a-double-free-in-ma35_pinc.patch
    (bsc#1012628 CVE-2024-50071 bsc#1232509).
  - Update
    patches.kernel.org/6.11.5-121-pinctrl-intel-platform-fix-error-path-in-devic.patch
    (bsc#1012628 CVE-2024-50197 bsc#1233089).
  - Update
    patches.kernel.org/6.11.5-122-pinctrl-ocelot-fix-system-hang-on-level-based-.patch
    (bsc#1012628 CVE-2024-50196 bsc#1233113).
  - Update
    patches.kernel.org/6.11.5-123-pinctrl-stm32-check-devm_kasprintf-returned-va.patch
    (bsc#1012628 CVE-2024-50070 bsc#1232510).
  - Update
    patches.kernel.org/6.11.5-124-pinctrl-apple-check-devm_kasprintf-returned-va.patch
    (bsc#1012628 CVE-2024-50069 bsc#1232511).
  - Update
    patches.kernel.org/6.11.5-125-irqchip-gic-v4-Don-t-allow-a-VMOVP-on-a-dying-.patch
    (bsc#1012628 CVE-2024-50192 bsc#1233106).
  - Update
    patches.kernel.org/6.11.6-001-bpf-Use-raw_spinlock_t-in-ringbuf.patch
    (bsc#1012628 CVE-2024-50138 bsc#1232935).
  - Update
    patches.kernel.org/6.11.6-003-reset-starfive-jh71x0-Fix-accessing-the-empty-.patch
    (bsc#1012628 CVE-2024-50137 bsc#1232932).
  - Update
    patches.kernel.org/6.11.6-005-bpf-Make-sure-internal-and-UAPI-bpf_redirect-f.patch
    (bsc#1012628 CVE-2024-50163 bsc#1233098).
  - Update
    patches.kernel.org/6.11.6-007-bpf-devmap-provide-rxq-after-redirect.patch
    (bsc#1012628 CVE-2024-50162 bsc#1233075).
  - Update
    patches.kernel.org/6.11.6-011-RDMA-bnxt_re-Fix-a-possible-memory-leak.patch
    (bsc#1012628 CVE-2024-50172 bsc#1233029).
  - Update
    patches.kernel.org/6.11.6-013-RDMA-bnxt_re-Add-a-check-for-memory-allocation.patch
    (bsc#1012628 CVE-2024-50209 bsc#1233114).
  - Update
    patches.kernel.org/6.11.6-018-bpf-Check-the-remaining-info_cnt-before-repeat.patch
    (bsc#1012628 CVE-2024-50161 bsc#1233037).
  - Update
    patches.kernel.org/6.11.6-029-sched-core-Disable-page-allocation-in-task_tic.patch
    (bsc#1012628 CVE-2024-50140 bsc#1233060).
  - Update
    patches.kernel.org/6.11.6-030-ALSA-hda-cs8409-Fix-possible-NULL-dereference.patch
    (bsc#1012628 CVE-2024-50160 bsc#1233074).
  - Update
    patches.kernel.org/6.11.6-031-firmware-arm_scmi-Fix-the-double-free-in-scmi_.patch
    (bsc#1012628 CVE-2024-50159 bsc#1233041).
  - Update
    patches.kernel.org/6.11.6-040-RDMA-bnxt_re-Fix-out-of-bound-check.patch
    (bsc#1012628 CVE-2024-50158 bsc#1233036).
  - Update
    patches.kernel.org/6.11.6-043-RDMA-bnxt_re-Avoid-CPU-lockups-due-fifo-occupa.patch
    (bsc#1012628 CVE-2024-50157 bsc#1233032).
  - Update
    patches.kernel.org/6.11.6-046-RDMA-bnxt_re-Fix-a-bug-while-setting-up-Level-.patch
    (bsc#1012628 CVE-2024-50208 bsc#1233117).
  - Update
    patches.kernel.org/6.11.6-055-drm-msm-Avoid-NULL-dereference-in-msm_disp_sta.patch
    (bsc#1012628 CVE-2024-50156 bsc#1233073).
  - Update
    patches.kernel.org/6.11.6-063-ring-buffer-Fix-reader-locking-when-changing-t.patch
    (bsc#1012628 CVE-2024-50207 bsc#1233122).
  - Update
    patches.kernel.org/6.11.6-066-netdevsim-use-cond_resched-in-nsim_dev_trap_re.patch
    (bsc#1012628 CVE-2024-50155 bsc#1233035).
  - Update
    patches.kernel.org/6.11.6-072-net-systemport-fix-potential-memory-leak-in-bc.patch
    (bsc#1012628 CVE-2024-50171 bsc#1233057).
  - Update
    patches.kernel.org/6.11.6-076-net-bcmasp-fix-potential-memory-leak-in-bcmasp.patch
    (bsc#1012628 CVE-2024-50170 bsc#1233030).
  - Update
    patches.kernel.org/6.11.6-078-tcp-dccp-Don-t-use-timer_pending-in-reqsk_queu.patch
    (bsc#1012628 CVE-2024-50154 bsc#1233072).
  - Update
    patches.kernel.org/6.11.6-084-scsi-target-core-Fix-null-ptr-deref-in-target_.patch
    (bsc#1012628 CVE-2024-50153 bsc#1233061).
  - Update
    patches.kernel.org/6.11.6-085-smb-client-fix-possible-double-free-in-smb2_se.patch
    (bsc#1012628 CVE-2024-50152 bsc#1233033).
  - Update
    patches.kernel.org/6.11.6-086-smb-client-fix-OOBs-when-building-SMB2_IOCTL-r.patch
    (bsc#1012628 CVE-2024-50151 bsc#1233055).
  - Update
    patches.kernel.org/6.11.6-087-usb-typec-altmode-should-keep-reference-to-par.patch
    (bsc#1012628 CVE-2024-50150 bsc#1233051).
  - Update
    patches.kernel.org/6.11.6-089-drm-xe-fix-unbalanced-rpm-put-with-fence_fini.patch
    (bsc#1012628 CVE-2024-50144 bsc#1233040).
  - Update
    patches.kernel.org/6.11.6-092-drm-xe-Don-t-free-job-in-TDR.patch
    (bsc#1012628 CVE-2024-50149 bsc#1233034).
  - Update
    patches.kernel.org/6.11.6-095-Bluetooth-bnep-fix-wild-memory-access-in-proto.patch
    (bsc#1012628 CVE-2024-50148 bsc#1233063).
  - Update
    patches.kernel.org/6.11.6-097-net-ethernet-mtk_eth_soc-fix-memory-corruption.patch
    (bsc#1012628 CVE-2024-50206 bsc#1233288).
  - Update
    patches.kernel.org/6.11.6-099-net-mlx5-Fix-command-bitmask-initialization.patch
    (bsc#1012628 CVE-2024-50147 bsc#1233067).
  - Update
    patches.kernel.org/6.11.6-100-net-mlx5-Unregister-notifier-on-eswitch-init-f.patch
    (bsc#1012628 CVE-2024-50136 bsc#1232914).
  - Update
    patches.kernel.org/6.11.6-101-net-mlx5e-Don-t-call-cleanup-on-profile-rollba.patch
    (bsc#1012628 CVE-2024-50146 bsc#1233056).
  - Update
    patches.kernel.org/6.11.6-107-nvme-pci-fix-race-condition-between-reset-and-.patch
    (bsc#1012628 CVE-2024-50135 bsc#1232888).
  - Update
    patches.kernel.org/6.11.6-121-uprobe-avoid-out-of-bounds-memory-access-of-fe.patch
    (bsc#1012628 CVE-2024-50067 bsc#1232416).
  - Update
    patches.kernel.org/6.11.6-122-drm-vboxvideo-Replace-fake-VLA-at-end-of-vbva_.patch
    (bsc#1012628 CVE-2024-50134 bsc#1232890).
  - Update
    patches.kernel.org/6.11.6-129-udf-refactor-inode_bmap-to-handle-error.patch
    (bsc#1012628 CVE-2024-50211 bsc#1233096).
  - Update
    patches.kernel.org/6.11.6-130-udf-fix-uninit-value-use-in-udf_get_fileshorta.patch
    (bsc#1012628 CVE-2024-50143 bsc#1233038).
  - Update
    patches.kernel.org/6.11.6-136-LoongArch-Don-t-crash-in-stack_top-for-tasks-w.patch
    (bsc#1012628 CVE-2024-50133 bsc#1232854).
  - Update
    patches.kernel.org/6.11.6-139-tracing-probes-Fix-MAX_TRACE_ARGS-limit-handli.patch
    (bsc#1012628 CVE-2024-50132 bsc#1232861).
  - Update
    patches.kernel.org/6.11.6-140-tracing-Consider-the-NULL-character-when-valid.patch
    (bsc#1012628 CVE-2024-50131 bsc#1232896).
  - Update
    patches.kernel.org/6.11.6-143-xfrm-validate-new-SA-s-prefixlen-using-SA-fami.patch
    (bsc#1012628 CVE-2024-50142 bsc#1233028).
  - Update
    patches.kernel.org/6.11.6-144-netfilter-bpf-must-hold-reference-on-net-names.patch
    (bsc#1012628 CVE-2024-50130 bsc#1232894).
  - Update
    patches.kernel.org/6.11.6-145-net-pse-pd-Fix-out-of-bound-for-loop.patch
    (bsc#1012628 CVE-2024-50129 bsc#1232856).
  - Update
    patches.kernel.org/6.11.6-146-net-sun3_82586-fix-potential-memory-leak-in-su.patch
    (bsc#1012628 CVE-2024-50168 bsc#1233059).
  - Update
    patches.kernel.org/6.11.6-147-be2net-fix-potential-memory-leak-in-be_xmit.patch
    (bsc#1012628 CVE-2024-50167 bsc#1233049).
  - Update
    patches.kernel.org/6.11.6-151-octeon_ep-Add-SKB-allocation-failures-handling.patch
    (bsc#1012628 CVE-2024-50145 bsc#1233044).
  - Update
    patches.kernel.org/6.11.6-155-fsl-fman-Fix-refcount-handling-of-fman-related.patch
    (bsc#1012628 CVE-2024-50166 bsc#1233050).
  - Update
    patches.kernel.org/6.11.6-157-net-wwan-fix-global-oob-in-wwan_rtnl_policy.patch
    (bsc#1012628 CVE-2024-50128 bsc#1232905).
  - Update
    patches.kernel.org/6.11.6-162-bpf-Preserve-param-string-when-parsing-mount-o.patch
    (bsc#1012628 CVE-2024-50165 bsc#1233031).
  - Update
    patches.kernel.org/6.11.6-164-bpf-Fix-overloading-of-MEM_UNINIT-s-meaning.patch
    (bsc#1012628 CVE-2024-50164 bsc#1233099).
  - Update
    patches.kernel.org/6.11.6-167-net-sched-fix-use-after-free-in-taprio_change.patch
    (bsc#1012628 CVE-2024-50127 bsc#1232907).
  - Update
    patches.kernel.org/6.11.6-168-net-sched-use-RCU-read-side-critical-section-i.patch
    (bsc#1012628 CVE-2024-50126 bsc#1232895).
  - Update
    patches.kernel.org/6.11.6-170-posix-clock-posix-clock-Fix-unbalanced-locking.patch
    (bsc#1012628 CVE-2024-50210 bsc#1233097).
  - Update
    patches.kernel.org/6.11.6-172-Bluetooth-SCO-Fix-UAF-on-sco_sock_timeout.patch
    (bsc#1012628 CVE-2024-50125 bsc#1232928).
  - Update
    patches.kernel.org/6.11.6-173-Bluetooth-ISO-Fix-UAF-on-iso_sock_timeout.patch
    (bsc#1012628 CVE-2024-50124 bsc#1232926).
  - Update
    patches.kernel.org/6.11.6-180-bpf-Add-the-missing-BPF_LINK_TYPE-invocation-f.patch
    (bsc#1012628 CVE-2024-50123 bsc#1232857).
  - Update
    patches.kernel.org/6.11.6-187-PCI-Hold-rescan-lock-while-adding-devices-duri.patch
    (bsc#1012628 CVE-2024-50122 bsc#1232930).
  - Update
    patches.kernel.org/6.11.6-191-ALSA-firewire-lib-Avoid-division-by-zero-in-ap.patch
    (bsc#1012628 CVE-2024-50205 bsc#1233293).
  - Update
    patches.kernel.org/6.11.6-194-nfsd-cancel-nfsd_shrinker_work-using-sync-mode.patch
    (bsc#1012628 CVE-2024-50121 bsc#1232925).
  - Update
    patches.kernel.org/6.11.6-196-smb-client-Handle-kstrdup-failures-for-passwor.patch
    (bsc#1012628 CVE-2024-50120 bsc#1232924).
  - Update
    patches.kernel.org/6.11.6-197-cifs-fix-warning-when-destroy-cifs_io_request_.patch
    (bsc#1012628 CVE-2024-50119 bsc#1232858).
  - Update
    patches.kernel.org/6.11.6-207-btrfs-reject-ro-rw-reconfiguration-if-there-ar.patch
    (bsc#1012628 CVE-2024-50118 bsc#1232859).
  - Update
    patches.kernel.org/6.11.6-210-drm-amd-Guard-against-bad-data-for-ATIF-ACPI-m.patch
    (bsc#1012628 CVE-2024-50117 bsc#1232897).
  - Update
    patches.kernel.org/6.11.6-212-ACPI-PRM-Find-EFI_MEMORY_RUNTIME-block-for-PRM.patch
    (bsc#1012628 CVE-2024-50141 bsc#1233065).
  - Update
    patches.kernel.org/6.11.6-214-nilfs2-fix-kernel-bug-due-to-missing-clearing-.patch
    (bsc#1012628 CVE-2024-50116 bsc#1232892).
  - Update
    patches.kernel.org/6.11.6-218-KVM-nSVM-Ignore-nCR3-4-0-when-loading-PDPTEs-f.patch
    (bsc#1012628 CVE-2024-50115 bsc#1232919).
  - Update
    patches.kernel.org/6.11.6-219-KVM-arm64-Unregister-redistributor-for-failed-.patch
    (bsc#1012628 CVE-2024-50114 bsc#1232912).
  - Update
    patches.kernel.org/6.11.6-220-KVM-arm64-Fix-shift-out-of-bounds-bug.patch
    (bsc#1012628 CVE-2024-50139 bsc#1233062).
  - Update
    patches.kernel.org/6.11.6-222-firewire-core-fix-invalid-port-index-for-paren.patch
    (bsc#1012628 CVE-2024-50113 bsc#1232891).
  - Update
    patches.kernel.org/6.11.6-223-x86-lam-Disable-ADDRESS_MASKING-in-most-cases.patch
    (bsc#1012628 CVE-2024-50112 bsc#1232867).
  - Update
    patches.kernel.org/6.11.6-228-LoongArch-Enable-IRQ-if-do_ale-triggered-in-ir.patch
    (bsc#1012628 CVE-2024-50111 bsc#1232866).
  - Update
    patches.kernel.org/6.11.6-230-xfrm-fix-one-more-kernel-infoleak-in-algo-dump.patch
    (bsc#1012628 CVE-2024-50110 bsc#1232885).
  - Update
    patches.kernel.org/6.11.6-232-md-raid10-fix-null-ptr-dereference-in-raid10_s.patch
    (bsc#1012628 CVE-2024-50109 bsc#1232886).
  - Update
    patches.kernel.org/6.11.6-234-drm-amd-display-Disable-PSR-SU-on-Parade-08-01.patch
    (bsc#1012628 CVE-2024-50108 bsc#1232884).
  - Update
    patches.kernel.org/6.11.6-235-platform-x86-intel-pmc-Fix-pmc_core_iounmap-to.patch
    (bsc#1012628 CVE-2024-50107 bsc#1232883).
  - Update
    patches.kernel.org/6.11.6-239-nfsd-fix-race-between-laundromat-and-free_stat.patch
    (bsc#1012628 CVE-2024-50106 bsc#1232882).
  - Update
    patches.kernel.org/6.11.6-247-ASoC-qcom-sc7280-Fix-missing-Soundwire-runtime.patch
    (bsc#1012628 CVE-2024-50105 bsc#1232879).
  - Update
    patches.kernel.org/6.11.6-248-ASoC-qcom-sdm845-add-missing-soundwire-runtime.patch
    (bsc#1012628 CVE-2024-50104 bsc#1232868).
  - Update
    patches.kernel.org/6.11.6-249-ASoC-qcom-Fix-NULL-Dereference-in-asoc_qcom_lp.patch
    (bsc#1012628 CVE-2024-50103 bsc#1232878).
  - Update
    patches.kernel.org/6.11.6-257-x86-fix-user-address-masking-non-canonical-spe.patch
    (bsc#1012628 CVE-2024-50102 bsc#1232880).
  - Update
    patches.kernel.org/6.11.7-024-macsec-Fix-use-after-free-while-sending-the-of.patch
    (bsc#1012628 CVE-2024-50261 bsc#1233253).
  - Update
    patches.kernel.org/6.11.7-026-sock_map-fix-a-NULL-pointer-dereference-in-soc.patch
    (bsc#1012628 CVE-2024-50260 bsc#1233178).
  - Update
    patches.kernel.org/6.11.7-037-netdevsim-Add-trailing-zero-to-terminate-the-s.patch
    (bsc#1012628 CVE-2024-50259 bsc#1233214).
  - Update
    patches.kernel.org/6.11.7-039-bpf-Fix-out-of-bounds-write-in-trie_get_next_k.patch
    (bsc#1012628 CVE-2024-50262 bsc#1233239).
  - Update
    patches.kernel.org/6.11.7-040-net-fix-crash-when-config-small-gso_max_size-g.patch
    (bsc#1012628 CVE-2024-50258 bsc#1233221).
  - Update
    patches.kernel.org/6.11.7-041-netfilter-Fix-use-after-free-in-get_info.patch
    (bsc#1012628 CVE-2024-50257 bsc#1233244).
  - Update
    patches.kernel.org/6.11.7-042-netfilter-nf_reject_ipv6-fix-potential-crash-i.patch
    (bsc#1012628 CVE-2024-50256 bsc#1233200).
  - Update
    patches.kernel.org/6.11.7-043-Bluetooth-hci-fix-null-ptr-deref-in-hci_read_s.patch
    (bsc#1012628 CVE-2024-50255 bsc#1233238).
  - Update
    patches.kernel.org/6.11.7-044-bpf-Free-dynamically-allocated-bits-in-bpf_ite.patch
    (bsc#1012628 CVE-2024-50254 bsc#1233183).
  - Update
    patches.kernel.org/6.11.7-046-bpf-Check-the-validity-of-nr_words-in-bpf_iter.patch
    (bsc#1012628 CVE-2024-50253 bsc#1233186).
  - Update
    patches.kernel.org/6.11.7-051-mlxsw-spectrum_ipip-Fix-memory-leak-when-chang.patch
    (bsc#1012628 CVE-2024-50252 bsc#1233201).
  - Update
    patches.kernel.org/6.11.7-053-netfilter-nft_payload-sanitize-offset-and-leng.patch
    (bsc#1012628 CVE-2024-50251 bsc#1233248).
  - Update
    patches.kernel.org/6.11.7-059-fsdax-dax_unshare_iter-needs-to-copy-entire-bl.patch
    (bsc#1012628 CVE-2024-50250 bsc#1233226).
  - Update
    patches.kernel.org/6.11.7-064-ACPI-CPPC-Make-rmw_lock-a-raw_spin_lock.patch
    (bsc#1012628 CVE-2024-50249 bsc#1233197).
  - Update
    patches.kernel.org/6.11.7-080-ntfs3-Add-bounds-checking-to-mi_enum_attr.patch
    (bsc#1012628 CVE-2024-50248 bsc#1233219).
  - Update
    patches.kernel.org/6.11.7-081-fs-ntfs3-Check-if-more-than-chunk-size-bytes-a.patch
    (bsc#1012628 CVE-2024-50247 bsc#1233271).
  - Update
    patches.kernel.org/6.11.7-084-fs-ntfs3-Add-rough-attr-alloc_size-check.patch
    (bsc#1012628 CVE-2024-50246 bsc#1233207).
  - Update
    patches.kernel.org/6.11.7-085-fs-ntfs3-Fix-possible-deadlock-in-mi_read.patch
    (bsc#1012628 CVE-2024-50245 bsc#1233203).
  - Update
    patches.kernel.org/6.11.7-086-fs-ntfs3-Additional-check-in-ni_clear.patch
    (bsc#1012628 CVE-2024-50244 bsc#1233270).
  - Update
    patches.kernel.org/6.11.7-087-fs-ntfs3-Fix-general-protection-fault-in-run_i.patch
    (bsc#1012628 CVE-2024-50243 bsc#1233269).
  - Update
    patches.kernel.org/6.11.7-088-fs-ntfs3-Additional-check-in-ntfs_file_release.patch
    (bsc#1012628 CVE-2024-50242 bsc#1233268).
  - Update
    patches.kernel.org/6.11.7-100-NFSD-Initialize-struct-nfsd4_copy-earlier.patch
    (bsc#1012628 CVE-2024-50241 bsc#1233187).
  - Update
    patches.kernel.org/6.11.7-111-phy-qcom-qmp-usb-fix-NULL-deref-on-runtime-sus.patch
    (bsc#1012628 CVE-2024-50240 bsc#1233217).
  - Update
    patches.kernel.org/6.11.7-112-phy-qcom-qmp-usb-legacy-fix-NULL-deref-on-runt.patch
    (bsc#1012628 CVE-2024-50239 bsc#1233180).
  - Update
    patches.kernel.org/6.11.7-113-phy-qcom-qmp-usbc-fix-NULL-deref-on-runtime-su.patch
    (bsc#1012628 CVE-2024-50238 bsc#1233182).
  - Update
    patches.kernel.org/6.11.7-120-wifi-mac80211-do-not-pass-a-stopped-vif-to-the.patch
    (bsc#1012628 CVE-2024-50237 bsc#1233216).
  - Update
    patches.kernel.org/6.11.7-121-wifi-ath10k-Fix-memory-leak-in-management-tx.patch
    (bsc#1012628 CVE-2024-50236 bsc#1233212).
  - Update
    patches.kernel.org/6.11.7-122-wifi-cfg80211-clear-wdev-cqm_config-pointer-on.patch
    (bsc#1012628 CVE-2024-50235 bsc#1233176).
  - Update
    patches.kernel.org/6.11.7-123-wifi-iwlegacy-Clear-stale-interrupts-before-re.patch
    (bsc#1012628 CVE-2024-50234 bsc#1233211).
  - Update
    patches.kernel.org/6.11.7-125-staging-iio-frequency-ad9832-fix-division-by-z.patch
    (bsc#1012628 CVE-2024-50233 bsc#1233210).
  - Update
    patches.kernel.org/6.11.7-127-iio-adc-ad7124-fix-division-by-zero-in-ad7124_.patch
    (bsc#1012628 CVE-2024-50232 bsc#1233209).
  - Update
    patches.kernel.org/6.11.7-129-iio-gts-helper-Fix-memory-leaks-in-iio_gts_bui.patch
    (bsc#1012628 CVE-2024-50231 bsc#1233208).
  - Update
    patches.kernel.org/6.11.7-131-nilfs2-fix-kernel-bug-due-to-missing-clearing-.patch
    (bsc#1012628 CVE-2024-50230 bsc#1233206).
  - Update
    patches.kernel.org/6.11.7-132-nilfs2-fix-potential-deadlock-with-newly-creat.patch
    (bsc#1012628 CVE-2024-50229 bsc#1233205).
  - Update
    patches.kernel.org/6.11.7-134-mm-shmem-fix-data-race-in-shmem_getattr.patch
    (bsc#1012628 CVE-2024-50228 bsc#1233204).
  - Update
    patches.kernel.org/6.11.7-138-thunderbolt-Fix-KASAN-reported-stack-out-of-bo.patch
    (bsc#1012628 CVE-2024-50227 bsc#1233181).
  - Update
    patches.kernel.org/6.11.7-141-cxl-port-Fix-use-after-free-permit-out-of-orde.patch
    (bsc#1012628 CVE-2024-50226 bsc#1233195).
  - Update
    patches.kernel.org/6.11.7-149-btrfs-fix-error-propagation-of-split-bios.patch
    (bsc#1012628 CVE-2024-50225 bsc#1233193).
  - Update
    patches.kernel.org/6.11.7-150-spi-spi-fsl-dspi-Fix-crash-when-not-using-GPIO.patch
    (bsc#1012628 CVE-2024-50224 bsc#1233188).
  - Update
    patches.kernel.org/6.11.7-162-sched-numa-Fix-the-potential-null-pointer-dere.patch
    (bsc#1012628 CVE-2024-50223 bsc#1233192).
  - Update
    patches.kernel.org/6.11.7-164-iov_iter-fix-copy_page_from_iter_atomic-if-KMA.patch
    (bsc#1012628 CVE-2024-50222 bsc#1233184).
  - Update
    patches.kernel.org/6.11.7-167-drm-amd-pm-Vangogh-Fix-kernel-memory-out-of-bo.patch
    (bsc#1012628 CVE-2024-50221 bsc#1233185).
  - Update
    patches.kernel.org/6.11.7-172-fork-do-not-invoke-uffd-on-fork-if-error-occur.patch
    (bsc#1012628 CVE-2024-50220 bsc#1233175).
  - Update
    patches.kernel.org/6.11.7-173-fork-only-invoke-khugepaged-ksm-hooks-if-no-er.patch
    (bsc#1012628 CVE-2024-50263 bsc#1233254).
  - Update
    patches.kernel.org/6.11.7-177-ocfs2-pass-u64-to-ocfs2_truncate_inline-maybe-.patch
    (bsc#1012628 CVE-2024-50218 bsc#1233191).
  - Update
    patches.kernel.org/6.11.7-180-btrfs-fix-use-after-free-of-block-device-file-.patch
    (bsc#1012628 CVE-2024-50217 bsc#1233194).
  - Update
    patches.kernel.org/6.11.7-182-xfs-fix-finding-a-last-resort-AG-in-xfs_filest.patch
    (bsc#1012628 CVE-2024-50216 bsc#1233179).
  - Update
    patches.kernel.org/6.11.7-185-nvmet-auth-assign-dh_key-to-NULL-after-kfree_s.patch
    (bsc#1012628 CVE-2024-50215 bsc#1233189).
  - Update
    patches.kernel.org/6.11.7-189-drm-connector-hdmi-Fix-memory-leak-in-drm_disp.patch
    (bsc#1012628 CVE-2024-50214 bsc#1233177).
  - Update
    patches.kernel.org/6.11.7-190-drm-tests-hdmi-Fix-memory-leaks-in-drm_display.patch
    (bsc#1012628 CVE-2024-50213 bsc#1233174).
  - Update
    patches.kernel.org/6.11.7-247-lib-alloc_tag_module_unload-must-wait-for-pend.patch
    (bsc#1012628 CVE-2024-50212 bsc#1233173).
  - commit e3c376e

++++ kernel-source:

  - Linux 6.11.8 (bsc#1012628).
  - vsock/virtio: Initialization of the dangling pointer occurring
    in vsk->trans (bsc#1012628).
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling
    pointer (bsc#1012628).
  - xtensa: Emulate one-byte cmpxchg (bsc#1012628).
  - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
    (bsc#1012628).
  - drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
    (bsc#1012628).
  - drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
    (bsc#1012628).
  - drm/xe: Move LNL scheduling WA to xe_device.h (bsc#1012628).
  - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
    (bsc#1012628).
  - block: fix queue limits checks in blk_rq_map_user_bvec for real
    (bsc#1012628).
  - blacklist.conf: drop it
  - block: rework bio splitting (bsc#1012628).
  - firmware: qcom: scm: suppress download mode error (bsc#1012628).
  - firmware: qcom: scm: Refactor code to support multiple dload
    mode (bsc#1012628).
  - Update config files.
  - selftests: hugetlb_dio: check for initial conditions to skip
    in the start (bsc#1012628).
  - ucounts: fix counter leak in inc_rlimit_get_ucounts()
    (bsc#1012628).
  - ocfs2: remove entry once instead of null-ptr-dereference in
    ocfs2_xa_remove() (bsc#1012628).
  - irqchip/gic-v3: Force propagation of the active state with a
    read-back (bsc#1012628).
  - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state
    allocation (bsc#1012628).
  - staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation
    (bsc#1012628).
  - thunderbolt: Fix connection issue with Pluggable UD-4VPD dock
    (bsc#1012628).
  - clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
    (bsc#1012628).
  - clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
    (bsc#1012628).
  - USB: serial: option: add Quectel RG650V (bsc#1012628).
  - USB: serial: option: add Fibocom FG132 0x0112 composition
    (bsc#1012628).
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx
    (bsc#1012628).
  - USB: serial: io_edgeport: fix use after free in debug printk
    (bsc#1012628).
  - usb: typec: fix potential out of bounds in
    ucsi_ccg_update_set_new_cam_cmd() (bsc#1012628).
  - usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
    (bsc#1012628).
  - usb: dwc3: fix fault at system suspend if device was already
    runtime suspended (bsc#1012628).
  - usb: musb: sunxi: Fix accessing an released usb phy
    (bsc#1012628).
  - thunderbolt: Add only on-board retimers when
    !CONFIG_USB4_DEBUGFS_MARGINING (bsc#1012628).
  - mm/thp: fix deferred split unqueue naming and locking
    (bsc#1012628).
  - mm/mlock: set the correct prev on failure (bsc#1012628).
  - mm/damon/core: handle zero schemes apply interval (bsc#1012628).
  - mm/damon/core: handle zero {aggregation,ops_update} intervals
    (bsc#1012628).
  - mm/damon/core: avoid overflow in damon_feed_loop_next_input()
    (bsc#1012628).
  - signal: restore the override_rlimit logic (bsc#1012628).
  - objpool: fix to make percpu slot allocation more robust
    (bsc#1012628).
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
    (bsc#1012628).
  - clk: qcom: clk-alpha-pll: Fix pll post div mask when width is
    not set (bsc#1012628).
  - clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
    (bsc#1012628).
  - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE
    is not set (bsc#1012628).
  - filemap: Fix bounds checking in filemap_read() (bsc#1012628).
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED
    in uvc_parse_format (bsc#1012628).
  - platform/x86/amd/pmf: Add SMU metrics table support for 1Ah
    family 60h model (bsc#1012628).
  - platform/x86/amd/pmf: Update SMU metrics table for 1AH family
    series (bsc#1012628).
  - platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header
    (bsc#1012628).
  - btrfs: reinitialize delayed ref list after deleting it from
    the list (bsc#1012628).
  - btrfs: fix per-subvolume RO/RW flags with new mount API
    (bsc#1012628).
  - btrfs: fix the length of reserved qgroup to free (bsc#1012628).
  - idpf: fix idpf_vc_core_init error path (bsc#1012628).
  - idpf: avoid vport access in idpf_get_link_ksettings
    (bsc#1012628).
  - KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before
    running it to avoid spurious interrupts (bsc#1012628).
  - mm/slab: fix warning caused by duplicate kmem_cache creation
    in kmem_buckets_create (bsc#1012628).
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard
    hint (bsc#1012628).
  - arm64: Kconfig: Make SME depend on BROKEN for now (bsc#1012628).
  - Update config files.
  - arm64/sve: Discard stale CPU state when handling SVE traps
    (bsc#1012628).
  - mptcp: use sock_kfree_s instead of kfree (bsc#1012628).
  - net: vertexcom: mse102x: Fix possible double free of TX skb
    (bsc#1012628).
  - net: wwan: t7xx: Fix off-by-one error in
    t7xx_dpmaif_rx_buf_alloc() (bsc#1012628).
  - tracing: Fix tracefs mount options (bsc#1012628).
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (bsc#1012628).
  - scsi: ufs: core: Start the RTC update work later (bsc#1012628).
  - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (bsc#1012628).
  - mptcp: no admin perm to list endpoints (bsc#1012628).
  - dm: fix a crash if blk_alloc_disk fails (bsc#1012628).
  - dm-unstriped: cast an operand to sector_t to prevent potential
    uint32_t overflow (bsc#1012628).
  - dm cache: fix potential out-of-bounds access on the first resume
    (bsc#1012628).
  - dm cache: optimize dirty bit checking with find_next_bit when
    resizing (bsc#1012628).
  - dm cache: fix out-of-bounds access to the dirty bitset when
    resizing (bsc#1012628).
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr
    error (bsc#1012628).
  - dm cache: correct the number of origin blocks to match the
    target length (bsc#1012628).
  - KEYS: trusted: dcp: fix NULL dereference in AEAD crypto
    operation (bsc#1012628).
  - thermal/drivers/qcom/lmh: Remove false lockdep backtrace
    (bsc#1012628).
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not
    supported (bsc#1012628).
  - drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (bsc#1012628).
  - drm/amdgpu: Adjust debugfs register access permissions
    (bsc#1012628).
  - drm/amdgpu: add missing size check in
    amdgpu_debugfs_gprwave_read() (bsc#1012628).
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions
    (bsc#1012628).
  - drm/panthor: Be stricter about IO mapping flags (bsc#1012628).
  - drm/panthor: Lock XArray when getting entries for the VM
    (bsc#1012628).
  - drm/amd/display: parse umc_info or vram_info based on ASIC
    (bsc#1012628).
  - drm/amd/pm: correct the workload setting (bsc#1012628).
  - drm/imagination: Break an object reference loop (bsc#1012628).
  - drm/imagination: Add a per-file PVR context list (bsc#1012628).
  - drm/amd/display: Fix brightness level not retained over reboot
    (bsc#1012628).
  - drm/amd/pm: always pick the pptable from IFWI (bsc#1012628).
  - rpmsg: glink: Handle rejected intent request better
    (bsc#1012628).
  - tpm: Lock TPM chip in tpm_pm_suspend() first (bsc#1012628).
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode
    (bsc#1012628).
  - drm/xe: Set mask bits for CCS_MODE register (bsc#1012628).
  - drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure
    in exec IOCTL (bsc#1012628).
  - drm/xe: Fix possible exec queue leak in exec IOCTL
    (bsc#1012628).
  - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
    (bsc#1012628).
  - ksmbd: Fix the missing xa_store error check (bsc#1012628).
  - ksmbd: check outstanding simultaneous SMB operations
    (bsc#1012628).
  - ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
    (bsc#1012628).
  - can: {cc770,sja1000}_isa: allow building on x86_64
    (bsc#1012628).
  - Update config files. (say =N)
  - can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing
    configuration when switching CAN modes (bsc#1012628).
  - can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
    (bsc#1012628).
  - can: m_can: m_can_close(): don't call free_irq() for IRQ-less
    devices (bsc#1012628).
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
    (bsc#1012628).
  - media: v4l2-tpg: prevent the risk of a division by zero
    (bsc#1012628).
  - media: vivid: fix buffer overwrite when using > 32 buffers
    (bsc#1012628).
  - media: pulse8-cec: fix data timestamp at pulse8_setup()
    (bsc#1012628).
  - media: av7110: fix a spectre vulnerability (bsc#1012628).
  - media: cx24116: prevent overflows on SNR calculus (bsc#1012628).
  - media: s5p-jpeg: prevent buffer overflows (bsc#1012628).
  - media: ar0521: don't overflow when checking PLL values
    (bsc#1012628).
  - media: mgb4: protect driver against spectre (bsc#1012628).
  - media: dvb-core: add missing buffer index check (bsc#1012628).
  - ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
    (bsc#1012628).
  - ASoC: stm32: spdifrx: fix dma channel release in
    stm32_spdifrx_remove (bsc#1012628).
  - thermal/of: support thermal zones w/o trips subnode
    (bsc#1012628).
  - tools/lib/thermal: Fix sampling handler context ptr
    (bsc#1012628).
  - ALSA: firewire-lib: fix return value on fail in
    amdtp_tscm_init() (bsc#1012628).
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
    (bsc#1012628).
  - media: adv7604: prevent underflow condition when reporting
    colorspace (bsc#1012628).
  - media: dvb_frontend: don't play tricks with underflow values
    (bsc#1012628).
  - media: dvbdev: prevent the risk of out of memory access
    (bsc#1012628).
  - media: stb0899_algo: initialize cfr before using it
    (bsc#1012628).
  - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
    (bsc#1012628).
  - drivers: net: ionic: add missed debugfs cleanup to ionic_probe()
    error path (bsc#1012628).
  - net/smc: do not leave a dangling sk pointer in __smc_create()
    (bsc#1012628).
  - rxrpc: Fix missing locking causing hanging calls (bsc#1012628).
  - net: arc: rockchip: fix emac mdio node support (bsc#1012628).
  - net: arc: fix the device for dma_map_single/dma_unmap_single
    (bsc#1012628).
  - virtio_net: Update rss when set queue (bsc#1012628).
  - virtio_net: Sync rss config to device when virtnet_probe
    (bsc#1012628).
  - virtio_net: Add hash_key_length check (bsc#1012628).
  - virtio_net: Support dynamic rss indirection table size
    (bsc#1012628).
  - netfilter: nf_tables: wait for rcu grace period on net_device
    removal (bsc#1012628).
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single
    irq case (bsc#1012628).
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (bsc#1012628).
  - net: hns3: fix kernel crash when uninstalling driver
    (bsc#1012628).
  - e1000e: Remove Meteor Lake SMBUS workarounds (bsc#1012628).
  - i40e: fix race condition by adding filter's intermediate sync
    state (bsc#1012628).
  - ice: change q_index variable type to s16 to store -1 value
    (bsc#1012628).
  - can: c_can: fix {rx,tx}_errors statistics (bsc#1012628).
  - net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine
    starts (bsc#1012628).
  - net: enetc: allocate vf_state during PF probes (bsc#1012628).
  - sctp: properly validate chunk size in sctp_sf_ootb()
    (bsc#1012628).
  - dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property
    value (bsc#1012628).
  - net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd
    tracepoint (bsc#1012628).
  - net: enetc: set MAC address to the VF net_device (bsc#1012628).
  - regulator: rtq2208: Fix uninitialized use of regulator_config
    (bsc#1012628).
  - security/keys: fix slab-out-of-bounds in key_task_permission
    (bsc#1012628).
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping
    (bsc#1012628).
  - NFS: Further fixes to attribute delegation a/mtime changes
    (bsc#1012628).
  - NFS: Fix attribute delegation behaviour on exclusive create
    (bsc#1012628).
  - NFSv3: only use NFS timeout for MOUNT when protocols are
    compatible (bsc#1012628).
  - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (bsc#1012628).
  - platform/x86/amd/pmc: Detect when STB is not available
    (bsc#1012628).
  - HID: core: zero-initialize the report buffer (bsc#1012628).
  - arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
    (bsc#1012628).
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
    (bsc#1012628).
  - ARM: dts: rockchip: Fix the spi controller on rk3036
    (bsc#1012628).
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi
    (bsc#1012628).
  - ARM: dts: rockchip: fix rk3036 acodec node (bsc#1012628).
  - arm64: dts: rockchip: remove orphaned pinctrl-names from
    pinephone pro (bsc#1012628).
  - firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM
    bridge enabling (bsc#1012628).
  - firmware: arm_scmi: Fix slab-use-after-free in
    scmi_bus_notifier() (bsc#1012628).
  - arm64: dts: imx8mp-phyboard-pollux: Set Video PLL1 frequency
    to 506.8 MHz (bsc#1012628).
  - arm64: dts: imx8mp: correct sdhc ipg clk (bsc#1012628).
  - arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs (bsc#1012628).
  - arm64: dts: qcom: sm8450 fix PIPE clock specification for pcie1
    (bsc#1012628).
  - arm64: dts: rockchip: remove num-slots property from
    rk3328-nanopi-r2s-plus (bsc#1012628).
  - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
    (bsc#1012628).
  - arm64: dts: rockchip: Remove #cooling-cells from fan on
    Theobroma lion (bsc#1012628).
  - arm64: dts: rockchip: Remove undocumented supports-emmc property
    (bsc#1012628).
  - arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
    (bsc#1012628).
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
    (bsc#1012628).
  - arm64: dts: rockchip: Fix bluetooth properties on rk3566 box
    demo (bsc#1012628).
  - arm64: dts: rockchip: Drop regulator-init-microvolt from two
    boards (bsc#1012628).
  - arm64: dts: rockchip: fix i2c2 pinctrl-names property on
    anbernic-rg353p/v (bsc#1012628).
  - arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
    (bsc#1012628).
  - arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
    (bsc#1012628).
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
    (bsc#1012628).
  - EDAC/qcom: Make irq configuration optional (bsc#1012628).
  - firmware: qcom: scm: fix a NULL-pointer dereference
    (bsc#1012628).
  - arm64: dts: rockchip: Designate Turing RK1's system power
    controller (bsc#1012628).
  - arm64: dts: rockchip: Start cooling maps numbering from zero
    on ROCK 5B (bsc#1012628).
  - arm64: dts: rockchip: Move L3 cache outside CPUs in RK3588(S)
    SoC dtsi (bsc#1012628).
  - arm64: dts: rockchip: Fix rt5651 compatible value on
    rk3399-sapphire-excavator (bsc#1012628).
  - arm64: dts: rockchip: Fix rt5651 compatible value on
    rk3399-eaidk-610 (bsc#1012628).
  - commit 099023b
  - Mass CVE update.
  - Update
    patches.kernel.org/6.11.1-008-Bluetooth-btintel_pcie-Allocate-memory-for-dri.patch
    (bsc#1012628 CVE-2024-46869 bsc#1231173).
  - Update
    patches.kernel.org/6.11.1-012-USB-usbtmc-prevent-kernel-usb-infoleak.patch
    (bsc#1012628 CVE-2024-47671 bsc#1231541).
  - Update
    patches.kernel.org/6.11.2-001-wifi-ath11k-use-work-queue-to-process-beacon-t.patch
    (bsc#1012628 CVE-2024-47724 bsc#1232073).
  - Update
    patches.kernel.org/6.11.2-003-wifi-rtw88-always-wait-for-both-firmware-loadi.patch
    (bsc#1012628 CVE-2024-47718 bsc#1232015).
  - Update
    patches.kernel.org/6.11.2-008-crypto-iaa-Fix-potential-use-after-free-bug.patch
    (bsc#1012628 CVE-2024-47732 bsc#1232109).
  - Update
    patches.kernel.org/6.11.2-024-wifi-rtw89-remove-unused-C2H-event-ID-RTW89_MA.patch
    (bsc#1012628 CVE-2024-47721 bsc#1232052).
  - Update
    patches.kernel.org/6.11.2-027-RISC-V-KVM-Don-t-zero-out-PMU-snapshot-area-be.patch
    (bsc#1012628 CVE-2024-47717 bsc#1232041).
  - Update
    patches.kernel.org/6.11.2-033-ARM-9410-1-vfp-Use-asm-volatile-in-fmrx-fmxr-m.patch
    (bsc#1012628 CVE-2024-47716 bsc#1232053).
  - Update
    patches.kernel.org/6.11.2-034-powercap-intel_rapl-Fix-off-by-one-in-get_rpi.patch
    (bsc#1012628 CVE-2024-49862 bsc#1231871).
  - Update
    patches.kernel.org/6.11.2-040-drivers-perf-Fix-ali_drw_pmu-driver-interrupt-.patch
    (bsc#1012628 CVE-2024-47731 bsc#1232117).
  - Update
    patches.kernel.org/6.11.2-046-wifi-mac80211-don-t-use-rate-mask-for-offchann.patch
    (bsc#1012628 CVE-2024-47738 bsc#1232114).
  - Update
    patches.kernel.org/6.11.2-048-wifi-iwlwifi-mvm-set-the-cipher-for-secured-ND.patch
    (bsc#1012628 CVE-2024-49857 bsc#1232203).
  - Update
    patches.kernel.org/6.11.2-073-wifi-mt76-mt7915-fix-oops-on-non-dbdc-mt7986.patch
    (bsc#1012628 CVE-2024-47715 bsc#1231860).
  - Update
    patches.kernel.org/6.11.2-075-wifi-mt76-mt7996-use-hweight16-to-get-correct-.patch
    (bsc#1012628 CVE-2024-47714 bsc#1232018).
  - Update
    patches.kernel.org/6.11.2-080-x86-sgx-Fix-deadlock-in-SGX-NUMA-node-search.patch
    (bsc#1012628 CVE-2024-49856 bsc#1232202).
  - Update
    patches.kernel.org/6.11.2-085-crypto-hisilicon-qm-inject-error-before-stoppi.patch
    (bsc#1012628 CVE-2024-47730 bsc#1232075).
  - Update
    patches.kernel.org/6.11.2-093-wifi-mac80211-use-two-phase-skb-reclamation-in.patch
    (bsc#1012628 CVE-2024-47713 bsc#1232016).
  - Update
    patches.kernel.org/6.11.2-094-wifi-wilc1000-fix-potential-RCU-dereference-is.patch
    (bsc#1012628 CVE-2024-47712 bsc#1232017).
  - Update
    patches.kernel.org/6.11.2-099-af_unix-Don-t-return-OOB-skb-in-manage_oob.patch
    (bsc#1012628 CVE-2024-47711 bsc#1232054).
  - Update
    patches.kernel.org/6.11.2-102-sock_map-Add-a-cond_resched-in-sock_hash_free.patch
    (bsc#1012628 CVE-2024-47710 bsc#1232049).
  - Update
    patches.kernel.org/6.11.2-103-can-bcm-Clear-bo-bcm_proc_read-after-remove_pr.patch
    (bsc#1012628 CVE-2024-47709 bsc#1232048).
  - Update
    patches.kernel.org/6.11.2-112-netkit-Assign-missing-bpf_net_context.patch
    (bsc#1012628 CVE-2024-47708 bsc#1231933).
  - Update
    patches.kernel.org/6.11.2-117-ipv6-avoid-possible-NULL-deref-in-rt6_uncached.patch
    (bsc#1012628 CVE-2024-47707 bsc#1231935).
  - Update
    patches.kernel.org/6.11.2-119-nbd-fix-race-between-timeout-and-normal-comple.patch
    (bsc#1012628 CVE-2024-49855 bsc#1232195).
  - Update
    patches.kernel.org/6.11.2-120-block-bfq-fix-possible-UAF-for-bfqq-bic-with-m.patch
    (bsc#1012628 CVE-2024-47706 bsc#1231942).
  - Update
    patches.kernel.org/6.11.2-127-erofs-handle-overlapped-pclusters-out-of-craft.patch
    (bsc#1012628 CVE-2024-47736 bsc#1232112).
  - Update
    patches.kernel.org/6.11.2-128-block-bfq-fix-uaf-for-accessing-waker_bfqq-aft.patch
    (bsc#1012628 CVE-2024-49854 bsc#1232193).
  - Update
    patches.kernel.org/6.11.2-132-block-fix-potential-invalid-pointer-dereferenc.patch
    (bsc#1012628 CVE-2024-47705 bsc#1231872).
  - Update
    patches.kernel.org/6.11.2-136-firmware-arm_scmi-Fix-double-free-in-OPTEE-tra.patch
    (bsc#1012628 CVE-2024-49853 bsc#1232192).
  - Update
    patches.kernel.org/6.11.2-201-drm-amd-display-Check-link_res-hpo_dp_link_enc.patch
    (bsc#1012628 CVE-2024-47704 bsc#1231944).
  - Update
    patches.kernel.org/6.11.2-202-drm-amd-display-Add-null-check-for-set_output_.patch
    (bsc#1012628 CVE-2024-47720 bsc#1232043).
  - Update
    patches.kernel.org/6.11.2-216-drm-xe-Use-reserved-copy-engine-for-user-binds.patch
    (bsc#1012628 CVE-2024-47729 bsc#1232077).
  - Update
    patches.kernel.org/6.11.2-219-scsi-elx-libefc-Fix-potential-use-after-free-i.patch
    (bsc#1012628 CVE-2024-49852 bsc#1232819).
  - Update
    patches.kernel.org/6.11.2-220-jfs-fix-out-of-bounds-in-dbNextAG-and-diAlloc.patch
    (bsc#1012628 CVE-2024-47723 bsc#1232050).
  - Update
    patches.kernel.org/6.11.2-253-tpm-Clean-up-TPM-space-after-command-failure.patch
    (bsc#1012628 CVE-2024-49851 bsc#1232134).
  - Update
    patches.kernel.org/6.11.2-257-bpf-lsm-Add-check-for-BPF-LSM-return-value.patch
    (bsc#1012628 CVE-2024-47703 bsc#1231946).
  - Update
    patches.kernel.org/6.11.2-263-bpf-Fail-verification-for-sign-extension-of-pa.patch
    (bsc#1012628 CVE-2024-47702 bsc#1231924).
  - Update
    patches.kernel.org/6.11.2-297-bpf-correctly-handle-malformed-BPF_CORE_TYPE_I.patch
    (bsc#1012628 CVE-2024-49850 bsc#1232189).
  - Update
    patches.kernel.org/6.11.2-312-ext4-avoid-OOB-when-system.data-xattr-changes-.patch
    (bsc#1012628 CVE-2024-47701 bsc#1231920).
  - Update
    patches.kernel.org/6.11.2-313-ext4-check-stripe-size-compatibility-on-remoun.patch
    (bsc#1012628 CVE-2024-47700 bsc#1231919).
  - Update
    patches.kernel.org/6.11.2-315-nilfs2-fix-potential-null-ptr-deref-in-nilfs_b.patch
    (bsc#1012628 CVE-2024-47699 bsc#1231916).
  - Update
    patches.kernel.org/6.11.2-317-nilfs2-fix-potential-oob-read-in-nilfs_btree_c.patch
    (bsc#1012628 CVE-2024-47757 bsc#1232187).
  - Update
    patches.kernel.org/6.11.2-320-bpf-Fix-helper-writes-to-read-only-maps.patch
    (bsc#1012628 CVE-2024-49861 bsc#1232254).
  - Update
    patches.kernel.org/6.11.2-322-bpf-Zero-former-ARG_PTR_TO_-LONG-INT-args-in-c.patch
    (bsc#1012628 CVE-2024-47728 bsc#1232076).
  - Update
    patches.kernel.org/6.11.2-364-drivers-media-dvb-frontends-rtl2832-fix-an-out.patch
    (bsc#1012628 CVE-2024-47698 bsc#1231859).
  - Update
    patches.kernel.org/6.11.2-365-drivers-media-dvb-frontends-rtl2830-fix-an-out.patch
    (bsc#1012628 CVE-2024-47697 bsc#1231858).
  - Update
    patches.kernel.org/6.11.2-369-PCI-keystone-Fix-if-statement-expression-in-ks.patch
    (bsc#1012628 CVE-2024-47756 bsc#1232185).
  - Update
    patches.kernel.org/6.11.2-381-RDMA-iwcm-Fix-WARNING-at_kernel-workqueue.c-ch.patch
    (bsc#1012628 CVE-2024-47696 bsc#1231864).
  - Update
    patches.kernel.org/6.11.2-386-media-mediatek-vcodec-Fix-H264-multi-stateless.patch
    (bsc#1012628 CVE-2024-47754 bsc#1232131).
  - Update
    patches.kernel.org/6.11.2-387-media-mediatek-vcodec-Fix-VP8-stateless-decode.patch
    (bsc#1012628 CVE-2024-47753 bsc#1231868).
  - Update
    patches.kernel.org/6.11.2-388-media-mediatek-vcodec-Fix-H264-stateless-decod.patch
    (bsc#1012628 CVE-2024-47752 bsc#1232130).
  - Update
    patches.kernel.org/6.11.2-391-RDMA-rtrs-clt-Reset-cid-to-con_num-1-to-stay-i.patch
    (bsc#1012628 CVE-2024-47695 bsc#1231931).
  - Update
    patches.kernel.org/6.11.2-398-IB-mlx5-Fix-UMR-pd-cleanup-on-error-flow-of-dr.patch
    (bsc#1012628 CVE-2024-47694 bsc#1232014).
  - Update
    patches.kernel.org/6.11.2-399-IB-core-Fix-ib_cache_setup_one-error-flow-clea.patch
    (bsc#1012628 CVE-2024-47693 bsc#1232013).
  - Update
    patches.kernel.org/6.11.2-402-PCI-kirin-Fix-buffer-overflow-in-kirin_pcie_pa.patch
    (bsc#1012628 CVE-2024-47751 bsc#1232127).
  - Update
    patches.kernel.org/6.11.2-410-RDMA-hns-Fix-Use-After-Free-of-rsv_qp-on-HIP08.patch
    (bsc#1012628 CVE-2024-47750 bsc#1232182).
  - Update
    patches.kernel.org/6.11.2-412-RDMA-hns-Fix-spin_unlock_irqrestore-called-wit.patch
    (bsc#1012628 CVE-2024-47735 bsc#1232111).
  - Update
    patches.kernel.org/6.11.2-422-RDMA-cxgb4-Added-NULL-check-for-lookup_atid.patch
    (bsc#1012628 CVE-2024-47749 bsc#1232180).
  - Update
    patches.kernel.org/6.11.2-424-ntb-intel-Fix-the-NULL-vs-IS_ERR-bug-for-debug.patch
    (bsc#1012628 CVE-2023-52917 bsc#1231849).
  - Update
    patches.kernel.org/6.11.2-427-nfsd-call-cache_put-if-xdr_reserve_space-retur.patch
    (bsc#1012628 CVE-2024-47737 bsc#1232056).
  - Update
    patches.kernel.org/6.11.2-428-nfsd-return-EINVAL-when-namelen-is-0.patch
    (bsc#1012628 CVE-2024-47692 bsc#1231857).
  - Update
    patches.kernel.org/6.11.2-439-f2fs-fix-to-avoid-use-after-free-in-f2fs_stop_.patch
    (bsc#1012628 CVE-2024-47691 bsc#1232012).
  - Update
    patches.kernel.org/6.11.2-442-f2fs-get-rid-of-online-repaire-on-corrupted-di.patch
    (bsc#1012628 CVE-2024-47690 bsc#1232011).
  - Update
    patches.kernel.org/6.11.2-443-f2fs-fix-to-don-t-set-SB_RDONLY-in-f2fs_handle.patch
    (bsc#1012628 CVE-2024-47689 bsc#1232010).
  - Update
    patches.kernel.org/6.11.2-460-driver-core-Fix-a-potential-null-ptr-deref-in-.patch
    (bsc#1012628 CVE-2024-47688 bsc#1232009).
  - Update
    patches.kernel.org/6.11.2-469-vdpa-mlx5-Fix-invalid-mr-resource-destroy.patch
    (bsc#1012628 CVE-2024-47687 bsc#1232003).
  - Update
    patches.kernel.org/6.11.2-470-vhost_vdpa-assign-irq-bypass-producer-token-co.patch
    (bsc#1012628 CVE-2024-47748 bsc#1232174).
  - Update
    patches.kernel.org/6.11.2-471-ep93xx-clock-Fix-off-by-one-in-ep93xx_div_reca.patch
    (bsc#1012628 CVE-2024-47686 bsc#1232000).
  - Update
    patches.kernel.org/6.11.2-477-netfilter-nf_reject_ipv6-fix-nf_reject_ip6_tcp.patch
    (bsc#1012628 CVE-2024-47685 bsc#1231998).
  - Update
    patches.kernel.org/6.11.2-478-net-seeq-Fix-use-after-free-vulnerability-in-e.patch
    (bsc#1012628 CVE-2024-47747 bsc#1232145).
  - Update
    patches.kernel.org/6.11.2-480-tcp-check-skb-is-non-NULL-in-tcp_rto_delta_us.patch
    (bsc#1012628 CVE-2024-47684 bsc#1231987).
  - Update
    patches.kernel.org/6.11.2-486-bonding-Fix-unnecessary-warnings-and-logs-from.patch
    (bsc#1012628 CVE-2024-47734 bsc#1232055).
  - Update
    patches.kernel.org/6.11.2-497-fuse-use-exclusive-lock-when-FUSE_I_CACHE_IO_M.patch
    (bsc#1012628 CVE-2024-47746 bsc#1232137).
  - Update
    patches.kernel.org/6.11.2-499-mm-call-the-security_mmap_file-LSM-hook-in-rem.patch
    (bsc#1012628 CVE-2024-47745 bsc#1232135).
  - Update
    patches.kernel.org/6.11.2-528-iommufd-Protect-against-overflow-of-ALIGN-duri.patch
    (bsc#1012628 CVE-2024-47719 bsc#1231865).
  - Update
    patches.kernel.org/6.11.2-537-KVM-Use-dedicated-mutex-to-protect-kvm_usage_c.patch
    (bsc#1012628 CVE-2024-47744 bsc#1232132).
  - Update
    patches.kernel.org/6.11.2-538-drm-amd-display-Skip-Recompute-DSC-Params-if-n.patch
    (bsc#1012628 CVE-2024-47683 bsc#1231975).
  - Update
    patches.kernel.org/6.11.2-562-x86-tdx-Fix-in-kernel-MMIO-check.patch
    (bsc#1012628 CVE-2024-47727 bsc#1232116).
  - Update
    patches.kernel.org/6.11.2-563-KEYS-prevent-NULL-pointer-dereference-in-find_.patch
    (bsc#1012628 CVE-2024-47743 bsc#1232129).
  - Update
    patches.kernel.org/6.11.2-569-scsi-sd-Fix-off-by-one-error-in-sd_read_block_.patch
    (bsc#1012628 CVE-2024-47682 bsc#1231856).
  - Update
    patches.kernel.org/6.11.2-592-firmware_loader-Block-path-traversal.patch
    (bsc#1012628 CVE-2024-47742 bsc#1232126).
  - Update
    patches.kernel.org/6.11.2-603-ACPI-sysfs-validate-return-type-of-_STR-method.patch
    (bsc#1012628 CVE-2024-49860 bsc#1231861).
  - Update
    patches.kernel.org/6.11.2-606-efistub-tpm-Use-ACPI-reclaim-memory-for-event-.patch
    (bsc#1012628 CVE-2024-49858 bsc#1232251).
  - Update
    patches.kernel.org/6.11.2-615-wifi-mt76-mt7996-fix-NULL-pointer-dereference-.patch
    (bsc#1012628 CVE-2024-47681 bsc#1231855).
  - Update
    patches.kernel.org/6.11.2-625-btrfs-fix-race-setting-file-private-on-concurr.patch
    (bsc#1012628 CVE-2024-47741 bsc#1231869).
  - Update
    patches.kernel.org/6.11.2-628-f2fs-fix-to-wait-dio-completion.patch
    (bsc#1012628 CVE-2024-47726 bsc#1232113).
  - Update
    patches.kernel.org/6.11.2-632-f2fs-Require-FMODE_WRITE-for-atomic-write-ioct.patch
    (bsc#1012628 CVE-2024-47740 bsc#1231867).
  - Update
    patches.kernel.org/6.11.2-633-f2fs-check-discard-support-for-conventional-zo.patch
    (bsc#1012628 CVE-2024-47680 bsc#1231970).
  - Update
    patches.kernel.org/6.11.2-634-f2fs-fix-to-check-atomic_file-in-f2fs-ioctl-in.patch
    (bsc#1012628 CVE-2024-49859 bsc#1232252).
  - Update
    patches.kernel.org/6.11.2-644-vfs-fix-race-between-evice_inodes-and-find_ino.patch
    (bsc#1012628 CVE-2024-47679 bsc#1231930).
  - Update
    patches.kernel.org/6.11.2-645-netfs-Delete-subtree-of-fs-netfs-when-netfs-mo.patch
    (bsc#1012628 CVE-2024-47733 bsc#1232110).
  - Update
    patches.kernel.org/6.11.2-649-icmp-change-the-order-of-rate-limits.patch
    (bsc#1012628 CVE-2024-47678 bsc#1231854).
  - Update
    patches.kernel.org/6.11.2-653-padata-use-integer-wrap-around-to-prevent-dead.patch
    (bsc#1012628 CVE-2024-47739 bsc#1232124).
  - Update
    patches.kernel.org/6.11.2-677-exfat-resolve-memory-leak-from-exfat_create_up.patch
    (bsc#1012628 CVE-2024-47677 bsc#1231853).
  - Update
    patches.kernel.org/6.11.2-686-mm-hugetlb.c-fix-UAF-of-vma-in-hugetlb-fault-p.patch
    (bsc#1012628 CVE-2024-47676 bsc#1231927).
  - Update
    patches.kernel.org/6.11.2-694-bpf-Fix-use-after-free-in-bpf_uprobe_multi_lin.patch
    (bsc#1012628 CVE-2024-47675 bsc#1231926).
  - Update
    patches.kernel.org/6.11.3-001-static_call-Handle-module-init-failure-correct.patch
    (bsc#1012628 CVE-2024-50002 bsc#1232083).
  - Update
    patches.kernel.org/6.11.3-002-static_call-Replace-pointless-WARN_ON-in-stati.patch
    (bsc#1012628 CVE-2024-49954 bsc#1232155).
  - Update
    patches.kernel.org/6.11.3-014-mailbox-bcm2835-Fix-timeout-during-suspend-mod.patch
    (bsc#1012628 CVE-2024-49963 bsc#1232147).
  - Update
    patches.kernel.org/6.11.3-016-ceph-remove-the-incorrect-Fw-reference-check-w.patch
    (bsc#1012628 CVE-2024-50179 bsc#1233123).
  - Update
    patches.kernel.org/6.11.3-020-net-mlx5-Fix-error-path-in-multi-packet-WQE-tr.patch
    (bsc#1012628 CVE-2024-50001 bsc#1232084).
  - Update
    patches.kernel.org/6.11.3-022-net-mlx5e-Fix-NULL-deref-in-mlx5e_tir_builder_.patch
    (bsc#1012628 CVE-2024-50000 bsc#1232085).
  - Update
    patches.kernel.org/6.11.3-024-net-mlx5e-Fix-crash-caused-by-calling-__xfrm_s.patch
    (bsc#1012628 CVE-2024-49953 bsc#1232156).
  - Update
    patches.kernel.org/6.11.3-029-netfilter-nf_tables-prevent-nf_skb_duplicated-.patch
    (bsc#1012628 CVE-2024-49952 bsc#1232157).
  - Update
    patches.kernel.org/6.11.3-031-Bluetooth-MGMT-Fix-possible-crash-on-mgmt_inde.patch
    (bsc#1012628 CVE-2024-49951 bsc#1232158).
  - Update
    patches.kernel.org/6.11.3-032-Bluetooth-L2CAP-Fix-uaf-in-l2cap_connect.patch
    (bsc#1012628 CVE-2024-49950 bsc#1232159).
  - Update
    patches.kernel.org/6.11.3-035-afs-Fix-the-setting-of-the-server-responding-f.patch
    (bsc#1012628 CVE-2024-49999 bsc#1232086).
  - Update
    patches.kernel.org/6.11.3-036-net-dsa-improve-shutdown-sequence.patch
    (bsc#1012628 CVE-2024-49998 bsc#1232087).
  - Update
    patches.kernel.org/6.11.3-039-net-ethernet-lantiq_etop-fix-memory-disclosure.patch
    (bsc#1012628 CVE-2024-49997 bsc#1232088).
  - Update
    patches.kernel.org/6.11.3-042-net-avoid-potential-underflow-in-qdisc_pkt_len.patch
    (bsc#1012628 CVE-2024-49949 bsc#1232160).
  - Update
    patches.kernel.org/6.11.3-043-net-add-more-sanity-checks-to-qdisc_pkt_len_in.patch
    (bsc#1012628 CVE-2024-49948 bsc#1232161).
  - Update
    patches.kernel.org/6.11.3-047-net-test-for-not-too-small-csum_start-in-virti.patch
    (bsc#1012628 CVE-2024-49947 bsc#1232162).
  - Update
    patches.kernel.org/6.11.3-048-ppp-do-not-assume-bh-is-held-in-ppp_channel_br.patch
    (bsc#1012628 CVE-2024-49946 bsc#1232164).
  - Update
    patches.kernel.org/6.11.3-051-net-ncsi-Disable-the-ncsi-work-before-freeing-.patch
    (bsc#1012628 CVE-2024-49945 bsc#1232165).
  - Update
    patches.kernel.org/6.11.3-054-sctp-set-sk_state-back-to-CLOSED-if-autobind-f.patch
    (bsc#1012628 CVE-2024-49944 bsc#1232166).
  - Update
    patches.kernel.org/6.11.3-056-drm-panthor-Fix-race-when-converting-group-han.patch
    (bsc#1012628 CVE-2024-50174 bsc#1233093).
  - Update
    patches.kernel.org/6.11.3-066-ASoC-Intel-soc-acpi-intel-rpl-match-add-missin.patch
    (bsc#1012628 CVE-2024-50011 bsc#1232081).
  - Update
    patches.kernel.org/6.11.3-071-drm-xe-guc_submit-add-missing-locking-in-wedge.patch
    (bsc#1012628 CVE-2024-49943 bsc#1232167).
  - Update
    patches.kernel.org/6.11.3-073-drm-xe-Prevent-null-pointer-access-in-xe_migra.patch
    (bsc#1012628 CVE-2024-49942 bsc#1232168).
  - Update
    patches.kernel.org/6.11.3-074-cifs-Fix-buffer-overflow-when-parsing-NFS-repa.patch
    (bsc#1012628 CVE-2024-49996 bsc#1232089).
  - Update
    patches.kernel.org/6.11.3-076-gpiolib-Fix-potential-NULL-pointer-dereference.patch
    (bsc#1012628 CVE-2024-49941 bsc#1232169).
  - Update
    patches.kernel.org/6.11.3-084-l2tp-prevent-possible-tunnel-refcount-underflo.patch
    (bsc#1012628 CVE-2024-49940 bsc#1232812).
  - Update
    patches.kernel.org/6.11.3-086-wifi-rtw89-avoid-to-add-interface-to-list-twic.patch
    (bsc#1012628 CVE-2024-49939 bsc#1232381).
  - Update
    patches.kernel.org/6.11.3-087-wifi-ath9k_htc-Use-__skb_set_length-for-resett.patch
    (bsc#1012628 CVE-2024-49938 bsc#1232552).
  - Update
    patches.kernel.org/6.11.3-095-wifi-cfg80211-Set-correct-chandef-when-startin.patch
    (bsc#1012628 CVE-2024-49937 bsc#1232427).
  - Update
    patches.kernel.org/6.11.3-096-net-xen-netback-prevent-UAF-in-xenvif_flush_ha.patch
    (bsc#1012628 CVE-2024-49936 bsc#1232424).
  - Update
    patches.kernel.org/6.11.3-100-ACPI-PAD-fix-crash-in-exit_round_robin.patch
    (bsc#1012628 CVE-2024-49935 bsc#1232370).
  - Update
    patches.kernel.org/6.11.3-103-exec-don-t-WARN-for-racy-path_noexec-check.patch
    (bsc#1012628 CVE-2024-50010 bsc#1232388).
  - Update
    patches.kernel.org/6.11.3-104-fs-inode-Prevent-dump_mapping-accessing-invali.patch
    (bsc#1012628 CVE-2024-49934 bsc#1232387).
  - Update
    patches.kernel.org/6.11.3-112-blk_iocost-fix-more-out-of-bound-shifts.patch
    (bsc#1012628 CVE-2024-49933 bsc#1232368).
  - Update
    patches.kernel.org/6.11.3-113-btrfs-don-t-readahead-the-relocation-inode-on-.patch
    (bsc#1012628 CVE-2024-49932 bsc#1232376).
  - Update
    patches.kernel.org/6.11.3-114-wifi-ath12k-fix-array-out-of-bound-access-in-S.patch
    (bsc#1012628 CVE-2024-49931 bsc#1232275).
  - Update
    patches.kernel.org/6.11.3-115-wifi-ath11k-fix-array-out-of-bound-access-in-S.patch
    (bsc#1012628 CVE-2024-49930 bsc#1232260).
  - Update
    patches.kernel.org/6.11.3-121-ACPICA-check-null-return-of-ACPI_ALLOCATE_ZERO.patch
    (bsc#1012628 CVE-2024-49962 bsc#1232314).
  - Update
    patches.kernel.org/6.11.3-122-tipc-guard-against-string-buffer-overrun.patch
    (bsc#1012628 CVE-2024-49995 bsc#1232432).
  - Update
    patches.kernel.org/6.11.3-139-wifi-iwlwifi-mvm-avoid-NULL-pointer-dereferenc.patch
    (bsc#1012628 CVE-2024-49929 bsc#1232253).
  - Update
    patches.kernel.org/6.11.3-150-block-fix-integer-overflow-in-BLKSECDISCARD.patch
    (bsc#1012628 CVE-2024-49994 bsc#1225770).
  - Update
    patches.kernel.org/6.11.3-151-cpufreq-amd-pstate-add-check-for-cpufreq_cpu_g.patch
    (bsc#1012628 CVE-2024-50009 bsc#1232318).
  - Update
    patches.kernel.org/6.11.3-152-cpufreq-loongson3-Use-raw_smp_processor_id-in-.patch
    (bsc#1012628 CVE-2024-50178 bsc#1233121).
  - Update
    patches.kernel.org/6.11.3-155-wifi-rtw89-avoid-reading-out-of-bounds-when-lo.patch
    (bsc#1012628 CVE-2024-49928 bsc#1232250).
  - Update
    patches.kernel.org/6.11.3-158-net-napi-Prevent-overflow-of-napi_defer_hard_i.patch
    (bsc#1012628 CVE-2024-50018 bsc#1232419).
  - Update
    patches.kernel.org/6.11.3-162-wifi-mwifiex-Fix-memcpy-field-spanning-write-w.patch
    (bsc#1012628 CVE-2024-50008 bsc#1232317).
  - Update
    patches.kernel.org/6.11.3-166-x86-ioapic-Handle-allocation-failures-graceful.patch
    (bsc#1012628 CVE-2024-49927 bsc#1232249).
  - Update
    patches.kernel.org/6.11.3-180-x86-mm-ident_map-Use-gbpages-only-where-full-G.patch
    (bsc#1012628 CVE-2024-50017 bsc#1232312).
  - Update
    patches.kernel.org/6.11.3-181-ALSA-asihpi-Fix-potential-OOB-array-access.patch
    (bsc#1012628 CVE-2024-50007 bsc#1232394).
  - Update
    patches.kernel.org/6.11.3-187-rcu-tasks-Fix-access-non-existent-percpu-rtpcp.patch
    (bsc#1012628 CVE-2024-49926 bsc#1232247).
  - Update
    patches.kernel.org/6.11.3-189-fbdev-efifb-Register-sysfs-groups-through-driv.patch
    (bsc#1012628 CVE-2024-49925 bsc#1232224).
  - Update
    patches.kernel.org/6.11.3-190-fbdev-pxafb-Fix-possible-use-after-free-in-pxa.patch
    (bsc#1012628 CVE-2024-49924 bsc#1232364).
  - Update
    patches.kernel.org/6.11.3-200-drm-stm-Avoid-use-after-free-issues-with-crtc-.patch
    (bsc#1012628 CVE-2024-49992 bsc#1232430).
  - Update
    patches.kernel.org/6.11.3-201-drm-amd-display-Pass-non-null-to-dcn20_validat.patch
    (bsc#1012628 CVE-2024-49923 bsc#1232361).
  - Update
    patches.kernel.org/6.11.3-202-drm-amd-display-Check-null-pointers-before-usi.patch
    (bsc#1012628 CVE-2024-49922 bsc#1232374).
  - Update
    patches.kernel.org/6.11.3-203-drm-amd-display-Check-null-pointers-before-use.patch
    (bsc#1012628 CVE-2024-49921 bsc#1232371).
  - Update
    patches.kernel.org/6.11.3-204-drm-amd-display-Check-null-pointers-before-mul.patch
    (bsc#1012628 CVE-2024-49920 bsc#1232313).
  - Update
    patches.kernel.org/6.11.3-206-drm-amdkfd-amdkfd_free_gtt_mem-clear-the-corre.patch
    (bsc#1012628 CVE-2024-49991 bsc#1232282).
  - Update
    patches.kernel.org/6.11.3-207-drm-amd-display-Add-null-check-for-head_pipe-i.patch
    (bsc#1012628 CVE-2024-49919 bsc#1231968).
  - Update
    patches.kernel.org/6.11.3-208-drm-amd-display-Add-null-check-for-head_pipe-i.patch
    (bsc#1012628 CVE-2024-49918 bsc#1231967).
  - Update
    patches.kernel.org/6.11.3-209-drm-amd-display-Add-NULL-check-for-clk_mgr-and.patch
    (bsc#1012628 CVE-2024-49917 bsc#1231965).
  - Update
    patches.kernel.org/6.11.3-210-drm-amd-display-Add-NULL-check-for-clk_mgr-and.patch
    (bsc#1012628 CVE-2024-49916 bsc#1231964).
  - Update
    patches.kernel.org/6.11.3-211-drm-amd-display-Add-NULL-check-for-clk_mgr-in-.patch
    (bsc#1012628 CVE-2024-49915 bsc#1231963).
  - Update
    patches.kernel.org/6.11.3-212-drm-xe-hdcp-Check-GSC-structure-validity.patch
    (bsc#1012628 CVE-2024-49990 bsc#1232484).
  - Update
    patches.kernel.org/6.11.3-213-drm-amd-display-Add-null-check-for-pipe_ctx-pl.patch
    (bsc#1012628 CVE-2024-49914 bsc#1232369).
  - Update
    patches.kernel.org/6.11.3-214-drm-amd-display-Add-null-check-for-top_pipe_to.patch
    (bsc#1012628 CVE-2024-49913 bsc#1232307).
  - Update
    patches.kernel.org/6.11.3-222-drm-amd-display-Handle-null-stream_status-in-p.patch
    (bsc#1012628 CVE-2024-49912 bsc#1232367).
  - Update
    patches.kernel.org/6.11.3-223-drm-amd-display-Add-NULL-check-for-function-po.patch
    (bsc#1012628 CVE-2024-49911 bsc#1232366).
  - Update
    patches.kernel.org/6.11.3-224-drm-amd-display-Add-NULL-check-for-function-po.patch
    (bsc#1012628 CVE-2024-49910 bsc#1232365).
  - Update
    patches.kernel.org/6.11.3-225-drm-amd-display-Add-NULL-check-for-function-po.patch
    (bsc#1012628 CVE-2024-49909 bsc#1232337).
  - Update
    patches.kernel.org/6.11.3-226-drm-amd-display-fix-a-UBSAN-warning-in-DML2.1.patch
    (bsc#1012628 CVE-2024-50177 bsc#1233115).
  - Update
    patches.kernel.org/6.11.3-227-drm-amd-display-Add-null-check-for-afb-in-amdg.patch
    (bsc#1012628 CVE-2024-49908 bsc#1232335).
  - Update
    patches.kernel.org/6.11.3-228-drm-amd-display-Check-null-pointers-before-usi.patch
    (bsc#1012628 CVE-2024-49907 bsc#1232334).
  - Update
    patches.kernel.org/6.11.3-229-drm-amd-display-Check-null-pointer-before-try-.patch
    (bsc#1012628 CVE-2024-49906 bsc#1232332).
  - Update
    patches.kernel.org/6.11.3-230-drm-amd-display-Add-null-check-for-afb-in-amdg.patch
    (bsc#1012628 CVE-2024-49905 bsc#1232357).
  - Update
    patches.kernel.org/6.11.3-232-drm-amd-display-fix-double-free-issue-during-a.patch
    (bsc#1012628 CVE-2024-49989 bsc#1232483).
  - Update
    patches.kernel.org/6.11.3-233-drm-amdgpu-add-list-empty-check-to-avoid-null-.patch
    (bsc#1012628 CVE-2024-49904 bsc#1232356).
  - Update
    patches.kernel.org/6.11.3-235-jfs-Fix-uaf-in-dbFreeBits.patch
    (bsc#1012628 CVE-2024-49903 bsc#1232362).
  - Update
    patches.kernel.org/6.11.3-236-jfs-check-if-leafidx-greater-than-num-leaves-p.patch
    (bsc#1012628 CVE-2024-49902 bsc#1232378).
  - Update
    patches.kernel.org/6.11.3-239-drm-msm-adreno-Assign-msm_gpu-pdev-earlier-to-.patch
    (bsc#1012628 CVE-2024-49901 bsc#1232305).
  - Update
    patches.kernel.org/6.11.3-240-jfs-Fix-uninit-value-access-of-new_ea-in-ea_bu.patch
    (bsc#1012628 CVE-2024-49900 bsc#1232359).
  - Update
    patches.kernel.org/6.11.3-250-drm-amd-display-Initialize-denominators-defaul.patch
    (bsc#1012628 CVE-2024-49899 bsc#1232358).
  - Update
    patches.kernel.org/6.11.3-251-drm-amd-display-Check-null-initialized-variabl.patch
    (bsc#1012628 CVE-2024-49898 bsc#1232222).
  - Update
    patches.kernel.org/6.11.3-252-drm-amd-display-Check-phantom_stream-before-it.patch
    (bsc#1012628 CVE-2024-49897 bsc#1232355).
  - Update
    patches.kernel.org/6.11.3-253-drm-amd-display-Check-stream-before-comparing-.patch
    (bsc#1012628 CVE-2024-49896 bsc#1232221).
  - Update
    patches.kernel.org/6.11.3-254-drm-amd-display-Deallocate-DML-memory-if-alloc.patch
    (bsc#1012628 CVE-2024-49972 bsc#1232315).
  - Update
    patches.kernel.org/6.11.3-255-drm-amd-display-Increase-array-size-of-dummy_b.patch
    (bsc#1012628 CVE-2024-49971 bsc#1232473).
  - Update
    patches.kernel.org/6.11.3-256-drm-amd-display-Fix-index-out-of-bounds-in-DCN.patch
    (bsc#1012628 CVE-2024-49895 bsc#1232352).
  - Update
    patches.kernel.org/6.11.3-257-drm-amd-display-Fix-index-out-of-bounds-in-deg.patch
    (bsc#1012628 CVE-2024-49894 bsc#1232354).
  - Update
    patches.kernel.org/6.11.3-258-drm-amd-display-Implement-bounds-check-for-str.patch
    (bsc#1012628 CVE-2024-49970 bsc#1232516).
  - Update
    patches.kernel.org/6.11.3-259-drm-amd-display-Fix-index-out-of-bounds-in-DCN.patch
    (bsc#1012628 CVE-2024-49969 bsc#1232519).
  - Update
    patches.kernel.org/6.11.3-263-drm-amd-display-Check-stream_status-before-it-.patch
    (bsc#1012628 CVE-2024-49893 bsc#1232350).
  - Update
    patches.kernel.org/6.11.3-264-drm-amd-display-Avoid-overflow-assignment-in-l.patch
    (bsc#1012628 CVE-2024-50016 bsc#1232420).
  - Update
    patches.kernel.org/6.11.3-265-drm-amd-display-Initialize-get_bytes_per_eleme.patch
    (bsc#1012628 CVE-2024-49892 bsc#1232220).
  - Update
    patches.kernel.org/6.11.3-269-scsi-lpfc-Validate-hdwq-pointers-before-derefe.patch
    (bsc#1012628 CVE-2024-49891 bsc#1232218).
  - Update
    patches.kernel.org/6.11.3-286-drm-amd-pm-ensure-the-fw_info-is-not-null-befo.patch
    (bsc#1012628 CVE-2024-49890 bsc#1232217).
  - Update
    patches.kernel.org/6.11.3-299-ksmbd-add-refcnt-to-ksmbd_conn-struct.patch
    (bsc#1012628 CVE-2024-49988 bsc#1232482).
  - Update
    patches.kernel.org/6.11.3-302-ext4-filesystems-without-casefold-feature-cann.patch
    (bsc#1012628 CVE-2024-49968 bsc#1232264).
  - Update
    patches.kernel.org/6.11.3-305-ext4-avoid-use-after-free-in-ext4_ext_show_lea.patch
    (bsc#1012628 CVE-2024-49889 bsc#1232215).
  - Update
    patches.kernel.org/6.11.3-306-ext4-fix-i_data_sem-unlock-order-in-ext4_ind_m.patch
    (bsc#1012628 CVE-2024-50006 bsc#1232442).
  - Update
    patches.kernel.org/6.11.3-309-bpftool-Fix-undefined-behavior-in-qsort-NULL-0.patch
    (bsc#1012628 CVE-2024-49987 bsc#1232258).
  - Update
    patches.kernel.org/6.11.3-310-bpf-Fix-a-sdiv-overflow-issue.patch
    (bsc#1012628 CVE-2024-49888 bsc#1232208).
  - Update
    patches.kernel.org/6.11.3-333-f2fs-fix-to-don-t-panic-system-for-no-free-seg.patch
    (bsc#1012628 CVE-2024-49887 bsc#1232206).
  - Update
    patches.kernel.org/6.11.3-343-platform-x86-x86-android-tablets-Fix-use-after.patch
    (bsc#1012628 CVE-2024-49986 bsc#1232093).
  - Update
    patches.kernel.org/6.11.3-344-platform-x86-ISST-Fix-the-KASAN-report-slab-ou.patch
    (bsc#1012628 CVE-2024-49886 bsc#1232196).
  - Update
    patches.kernel.org/6.11.3-346-i2c-stm32f7-Do-not-prepare-unprepare-clock-dur.patch
    (bsc#1012628 CVE-2024-49985 bsc#1232094).
  - Update
    patches.kernel.org/6.11.3-349-media-i2c-ar0521-Use-cansleep-version-of-gpiod.patch
    (bsc#1012628 CVE-2024-49961 bsc#1232148).
  - Update
    patches.kernel.org/6.11.3-362-mm-slub-avoid-zeroing-kmalloc-redzone.patch
    (bsc#1012628 CVE-2024-49885 bsc#1232197).
  - Update
    patches.kernel.org/6.11.3-365-drm-v3d-Prevent-out-of-bounds-access-in-perfor.patch
    (bsc#1012628 CVE-2024-49984 bsc#1232095).
  - Update
    patches.kernel.org/6.11.3-377-ext4-no-need-to-continue-when-the-number-of-en.patch
    (bsc#1012628 CVE-2024-49967 bsc#1232140).
  - Update
    patches.kernel.org/6.11.3-379-ext4-fix-slab-use-after-free-in-ext4_split_ext.patch
    (bsc#1012628 CVE-2024-49884 bsc#1232198).
  - Update
    patches.kernel.org/6.11.3-382-ext4-dax-fix-overflowing-extents-beyond-inode-.patch
    (bsc#1012628 CVE-2024-50015 bsc#1232079).
  - Update
    patches.kernel.org/6.11.3-384-ext4-drop-ppath-from-ext4_ext_replay_update_ex.patch
    (bsc#1012628 CVE-2024-49983 bsc#1232096).
  - Update
    patches.kernel.org/6.11.3-385-ext4-aovid-use-after-free-in-ext4_ext_insert_e.patch
    (bsc#1012628 CVE-2024-49883 bsc#1232199).
  - Update
    patches.kernel.org/6.11.3-386-ext4-fix-double-brelse-the-buffer-of-the-exten.patch
    (bsc#1012628 CVE-2024-49882 bsc#1232200).
  - Update
    patches.kernel.org/6.11.3-387-ext4-fix-timer-use-after-free-on-failed-mount.patch
    (bsc#1012628 CVE-2024-49960 bsc#1232395).
  - Update
    patches.kernel.org/6.11.3-388-ext4-fix-access-to-uninitialised-lock-in-fc-re.patch
    (bsc#1012628 CVE-2024-50014 bsc#1232446).
  - Update
    patches.kernel.org/6.11.3-389-ext4-update-orig_path-in-ext4_find_extent.patch
    (bsc#1012628 CVE-2024-49881 bsc#1232201).
  - Update
    patches.kernel.org/6.11.3-395-ext4-fix-off-by-one-issue-in-alloc_flex_gd.patch
    (bsc#1012628 CVE-2024-49880 bsc#1232205).
  - Update
    patches.kernel.org/6.11.3-403-drm-omapdrm-Add-missing-check-for-alloc_ordere.patch
    (bsc#1012628 CVE-2024-49879 bsc#1232349).
  - Update
    patches.kernel.org/6.11.3-404-resource-fix-region_intersects-vs-add_memory_d.patch
    (bsc#1012628 CVE-2024-49878 bsc#1232340).
  - Update
    patches.kernel.org/6.11.3-406-jbd2-stop-waiting-for-space-when-jbd2_cleanup_.patch
    (bsc#1012628 CVE-2024-49959 bsc#1232149).
  - Update
    patches.kernel.org/6.11.3-411-ocfs2-reserve-space-for-inline-xattr-before-at.patch
    (bsc#1012628 CVE-2024-49958 bsc#1232151).
  - Update
    patches.kernel.org/6.11.3-412-ocfs2-cancel-dqi_sync_work-before-freeing-oinf.patch
    (bsc#1012628 CVE-2024-49966 bsc#1232141).
  - Update
    patches.kernel.org/6.11.3-413-ocfs2-remove-unreasonable-unlock-in-ocfs2_read.patch
    (bsc#1012628 CVE-2024-49965 bsc#1232142).
  - Update
    patches.kernel.org/6.11.3-414-ocfs2-fix-null-ptr-deref-when-journal-load-fai.patch
    (bsc#1012628 CVE-2024-49957 bsc#1232152).
  - Update
    patches.kernel.org/6.11.3-415-ocfs2-fix-possible-null-ptr-deref-in-ocfs2_set.patch
    (bsc#1012628 CVE-2024-49877 bsc#1232339).
  - Update
    patches.kernel.org/6.11.3-421-drm-xe-fix-UAF-around-queue-destruction.patch
    (bsc#1012628 CVE-2024-49876 bsc#1232336).
  - Update
    patches.kernel.org/6.11.3-428-exfat-fix-memory-leak-in-exfat_load_bitmap.patch
    (bsc#1012628 CVE-2024-50013 bsc#1232080).
  - Update
    patches.kernel.org/6.11.3-432-nfsd-map-the-EBADMSG-to-nfserr_io-to-avoid-war.patch
    (bsc#1012628 CVE-2024-49875 bsc#1232333).
  - Update
    patches.kernel.org/6.11.3-434-i3c-master-svc-Fix-use-after-free-vulnerabilit.patch
    (bsc#1012628 CVE-2024-49874 bsc#1232295).
  - Update
    patches.kernel.org/6.11.3-440-aoe-fix-the-potential-use-after-free-problem-i.patch
    (bsc#1012628 CVE-2024-49982 bsc#1232097).
  - Update
    patches.kernel.org/6.11.3-445-remoteproc-k3-r5-Fix-error-handling-when-power.patch
    (bsc#1012628 CVE-2024-50176 bsc#1233091).
  - Update
    patches.kernel.org/6.11.3-446-gfs2-fix-double-destroy_workqueue-error.patch
    (bsc#1012628 CVE-2024-49956 bsc#1232153).
  - Update
    patches.kernel.org/6.11.3-457-media-venus-fix-use-after-free-bug-in-venus_re.patch
    (bsc#1012628 CVE-2024-49981 bsc#1232098).
  - Update
    patches.kernel.org/6.11.3-459-media-qcom-camss-Remove-use_count-guard-in-sto.patch
    (bsc#1012628 CVE-2024-50175 bsc#1233092).
  - Update
    patches.kernel.org/6.11.3-470-vrf-revert-vrf-Remove-unnecessary-RCU-bh-criti.patch
    (bsc#1012628 CVE-2024-49980 bsc#1232099).
  - Update
    patches.kernel.org/6.11.3-471-net-gso-fix-tcp-fraglist-segmentation-after-pu.patch
    (bsc#1012628 CVE-2024-49979 bsc#1232100).
  - Update
    patches.kernel.org/6.11.3-472-gso-fix-udp-gso-fraglist-segmentation-after-pu.patch
    (bsc#1012628 CVE-2024-49978 bsc#1232101).
  - Update
    patches.kernel.org/6.11.3-475-net-stmmac-Fix-zero-division-error-when-disabl.patch
    (bsc#1012628 CVE-2024-49977 bsc#1232102).
  - Update
    patches.kernel.org/6.11.3-477-mm-filemap-fix-filemap_get_folios_contig-THP-p.patch
    (bsc#1012628 CVE-2024-49873 bsc#1232291).
  - Update
    patches.kernel.org/6.11.3-478-mm-hugetlb-fix-memfd_pin_folios-free_huge_page.patch
    (bsc#1012628 CVE-2024-49964 bsc#1232144).
  - Update
    patches.kernel.org/6.11.3-481-mm-gup-fix-memfd_pin_folios-alloc-race-panic.patch
    (bsc#1012628 CVE-2024-49872 bsc#1232288).
  - Update
    patches.kernel.org/6.11.3-483-Input-adp5589-keys-fix-NULL-pointer-dereferenc.patch
    (bsc#1012628 CVE-2024-49871 bsc#1232287).
  - Update
    patches.kernel.org/6.11.3-486-cachefiles-fix-dentry-leak-in-cachefiles_open_.patch
    (bsc#1012628 CVE-2024-49870 bsc#1232279).
  - Update
    patches.kernel.org/6.11.3-493-btrfs-send-fix-buffer-overflow-detection-when-.patch
    (bsc#1012628 CVE-2024-49869 bsc#1232278).
  - Update
    patches.kernel.org/6.11.3-494-btrfs-fix-a-NULL-pointer-dereference-when-fail.patch
    (bsc#1012628 CVE-2024-49868 bsc#1232272).
  - Update
    patches.kernel.org/6.11.3-497-btrfs-wait-for-fixup-workers-before-stopping-c.patch
    (bsc#1012628 CVE-2024-49867 bsc#1232262).
  - Update
    patches.kernel.org/6.11.3-498-cpufreq-Avoid-a-bad-reference-count-on-CPU-nod.patch
    (bsc#1012628 CVE-2024-50012 bsc#1232386).
  - Update
    patches.kernel.org/6.11.3-503-mac802154-Fix-potential-RCU-dereference-issue-.patch
    (bsc#1012628 CVE-2024-50005 bsc#1232082).
  - Update
    patches.kernel.org/6.11.3-507-tracing-timerlat-Drop-interface_lock-in-stop_k.patch
    (bsc#1012628 CVE-2024-49976 bsc#1232103).
  - Update
    patches.kernel.org/6.11.3-508-tracing-timerlat-Fix-a-race-during-cpuhp-proce.patch
    (bsc#1012628 CVE-2024-49866 bsc#1232259).
  - Update
    patches.kernel.org/6.11.3-515-drm-panthor-Fix-access-to-uninitialized-variab.patch
    (bsc#1012628 CVE-2024-50173 bsc#1233094).
  - Update
    patches.kernel.org/6.11.3-524-drm-amd-display-update-DML2-policy-EnhancedPre.patch
    (bsc#1012628 CVE-2024-50004 bsc#1232396).
  - Update
    patches.kernel.org/6.11.3-525-drm-amd-display-Fix-system-hang-while-resume-w.patch
    (bsc#1012628 CVE-2024-50003 bsc#1232385).
  - Update
    patches.kernel.org/6.11.3-531-uprobes-fix-kernel-info-leak-via-uprobes-vma.patch
    (bsc#1012628 CVE-2024-49975 bsc#1232104).
  - Update
    patches.kernel.org/6.11.3-536-NFSD-Limit-the-number-of-concurrent-async-COPY.patch
    (bsc#1012628 CVE-2024-49974 bsc#1232383).
  - Update
    patches.kernel.org/6.11.3-540-r8169-add-tally-counter-fields-added-with-RTL8.patch
    (bsc#1012628 CVE-2024-49973 bsc#1232105).
  - Update
    patches.kernel.org/6.11.3-542-ACPI-battery-Fix-possible-crash-when-unregiste.patch
    (bsc#1012628 CVE-2024-49955 bsc#1232154).
  - Update
    patches.kernel.org/6.11.3-544-drm-xe-vm-move-xa_alloc-to-prevent-UAF.patch
    (bsc#1012628 CVE-2024-49865 bsc#1232257).
  - Update
    patches.kernel.org/6.11.3-549-rxrpc-Fix-a-race-between-socket-set-up-and-I-O.patch
    (bsc#1012628 CVE-2024-49864 bsc#1232256).
  - Update
    patches.kernel.org/6.11.3-550-vhost-scsi-null-ptr-dereference-in-vhost_scsi_.patch
    (bsc#1012628 CVE-2024-49863 bsc#1232255).
  - Update
    patches.kernel.org/6.11.4-001-unicode-Don-t-special-case-ignorable-code-poin.patch
    (bsc#1012628 CVE-2024-50089 bsc#1232860).
  - Update
    patches.kernel.org/6.11.4-002-net-fec-don-t-save-PTP-state-if-PTP-is-unsuppo.patch
    (bsc#1012628 CVE-2024-50097 bsc#1232871).
  - Update
    patches.kernel.org/6.11.4-011-ntfs3-Change-to-non-blocking-allocation-in-ntf.patch
    (bsc#1012628 CVE-2024-50065 bsc#1231899).
  - Update
    patches.kernel.org/6.11.4-014-zram-free-secondary-algorithms-names.patch
    (bsc#1012628 CVE-2024-50064 bsc#1231901).
  - Update
    patches.kernel.org/6.11.4-022-ext4-don-t-set-SB_RDONLY-after-filesystem-erro.patch
    (bsc#1012628 CVE-2024-50191 bsc#1233101).
  - Update
    patches.kernel.org/6.11.4-026-bpf-Prevent-tail-call-between-progs-attached-t.patch
    (bsc#1012628 CVE-2024-50063 bsc#1232435).
  - Update
    patches.kernel.org/6.11.4-028-RDMA-mad-Improve-handling-of-timed-out-WRs-of-.patch
    (bsc#1012628 CVE-2024-50095 bsc#1232873).
  - Update
    patches.kernel.org/6.11.4-031-RDMA-rtrs-srv-Avoid-null-pointer-deref-during-.patch
    (bsc#1012628 CVE-2024-50062 bsc#1232232).
  - Update
    patches.kernel.org/6.11.4-036-i3c-master-cdns-Fix-use-after-free-vulnerabili.patch
    (bsc#1012628 CVE-2024-50061 bsc#1232263).
  - Update
    patches.kernel.org/6.11.4-038-io_uring-check-if-we-need-to-reschedule-during.patch
    (bsc#1012628 CVE-2024-50060 bsc#1232417).
  - Update
    patches.kernel.org/6.11.4-039-ntb-ntb_hw_switchtec-Fix-use-after-free-vulner.patch
    (bsc#1012628 CVE-2024-50059 bsc#1232345).
  - Update
    patches.kernel.org/6.11.4-052-clk-imx-Remove-CLK_SET_PARENT_GATE-for-DRAM-mu.patch
    (bsc#1012628 CVE-2024-50181 bsc#1233127).
  - Update
    patches.kernel.org/6.11.4-053-serial-protect-uart_port_dtr_rts-in-uart_shutd.patch
    (bsc#1012628 CVE-2024-50058 bsc#1232285).
  - Update
    patches.kernel.org/6.11.4-054-usb-typec-tipd-Free-IRQ-only-if-it-was-request.patch
    (bsc#1012628 CVE-2024-50057 bsc#1232393).
  - Update
    patches.kernel.org/6.11.4-063-virtio_pmem-Check-device-status-before-request.patch
    (bsc#1012628 CVE-2024-50184 bsc#1233135).
  - Update
    patches.kernel.org/6.11.4-066-usb-gadget-uvc-Fix-ERR_PTR-dereference-in-uvc_.patch
    (bsc#1012628 CVE-2024-50056 bsc#1232389).
  - Update
    patches.kernel.org/6.11.4-067-dm-vdo-don-t-refer-to-dedupe_context-after-rel.patch
    (bsc#1012628 CVE-2024-50091 bsc#1232872).
  - Update
    patches.kernel.org/6.11.4-068-driver-core-bus-Fix-double-free-in-driver-API-.patch
    (bsc#1012628 CVE-2024-50055 bsc#1232329).
  - Update
    patches.kernel.org/6.11.4-071-scsi-lpfc-Ensure-DA_ID-handling-completion-bef.patch
    (bsc#1012628 CVE-2024-50183 bsc#1233130).
  - Update
    patches.kernel.org/6.11.4-073-drm-xe-oa-Fix-overflow-in-oa-batch-buffer.patch
    (bsc#1012628 CVE-2024-50090 bsc#1232862).
  - Update
    patches.kernel.org/6.11.4-074-drm-amd-display-Check-null-pointer-before-dere.patch
    (bsc#1012628 CVE-2024-50049 bsc#1232309).
  - Update
    patches.kernel.org/6.11.4-075-fbcon-Fix-a-NULL-pointer-dereference-issue-in-.patch
    (bsc#1012628 CVE-2024-50048 bsc#1232310).
  - Update
    patches.kernel.org/6.11.4-076-smb-client-fix-UAF-in-async-decryption.patch
    (bsc#1012628 CVE-2024-50047 bsc#1232418).
  - Update
    patches.kernel.org/6.11.4-077-fbdev-sisfb-Fix-strbuf-array-overflow.patch
    (bsc#1012628 CVE-2024-50180 bsc#1233125).
  - Update
    patches.kernel.org/6.11.4-082-ice-fix-memleak-in-ice_init_tx_topology.patch
    (bsc#1012628 CVE-2024-50190 bsc#1233090).
  - Update
    patches.kernel.org/6.11.4-086-NFSv4-Prevent-NULL-pointer-dereference-in-nfs4.patch
    (bsc#1012628 CVE-2024-50046 bsc#1231902).
  - Update
    patches.kernel.org/6.11.4-087-net-phy-dp83869-fix-memory-corruption-when-ena.patch
    (bsc#1012628 CVE-2024-50188 bsc#1233107).
  - Update
    patches.kernel.org/6.11.4-088-sfc-Don-t-invoke-xdp_do_flush-from-netpoll.patch
    (bsc#1012628 CVE-2024-50094 bsc#1232875).
  - Update
    patches.kernel.org/6.11.4-096-netfilter-br_netfilter-fix-panic-with-metadata.patch
    (bsc#1012628 CVE-2024-50045 bsc#1231903).
  - Update
    patches.kernel.org/6.11.4-099-Bluetooth-RFCOMM-FIX-possible-deadlock-in-rfco.patch
    (bsc#1012628 CVE-2024-50044 bsc#1231904).
  - Update
    patches.kernel.org/6.11.4-102-nfsd-fix-possible-badness-in-FREE_STATEID.patch
    (bsc#1012628 CVE-2024-50043 bsc#1231905).
  - Update
    patches.kernel.org/6.11.4-103-thermal-intel-int340x-processor-Fix-warning-du.patch
    (bsc#1012628 CVE-2024-50093 bsc#1232877).
  - Update
    patches.kernel.org/6.11.4-120-ice-Fix-increasing-MSI-X-on-VF.patch
    (bsc#1012628 CVE-2024-50042 bsc#1231906).
  - Update
    patches.kernel.org/6.11.4-121-i40e-Fix-macvlan-leak-by-synchronizing-access-.patch
    (bsc#1012628 CVE-2024-50041 bsc#1231907).
  - Update
    patches.kernel.org/6.11.4-122-igb-Do-not-bring-the-device-up-after-non-fatal.patch
    (bsc#1012628 CVE-2024-50040 bsc#1231908).
  - Update
    patches.kernel.org/6.11.4-124-net-sched-accept-TCA_STAB-only-for-root-qdisc.patch
    (bsc#1012628 CVE-2024-50039 bsc#1231909).
  - Update
    patches.kernel.org/6.11.4-131-netfilter-xtables-avoid-NFPROTO_UNSPEC-where-n.patch
    (bsc#1012628 CVE-2024-50038 bsc#1231910).
  - Update
    patches.kernel.org/6.11.4-135-net-netconsole-fix-wrong-warning.patch
    (bsc#1012628 CVE-2024-50092 bsc#1232874).
  - Update
    patches.kernel.org/6.11.4-136-drm-fbdev-dma-Only-cleanup-deferred-I-O-if-nec.patch
    (bsc#1012628 CVE-2024-50037 bsc#1231911).
  - Update
    patches.kernel.org/6.11.4-137-net-do-not-delay-dst_entries_add-in-dst_releas.patch
    (bsc#1012628 CVE-2024-50036 bsc#1231912).
  - Update
    patches.kernel.org/6.11.4-144-ppp-fix-ppp_async_encode-illegal-access.patch
    (bsc#1012628 CVE-2024-50035 bsc#1232392).
  - Update
    patches.kernel.org/6.11.4-145-net-smc-fix-lacks-of-icsk_syn_mss-with-IPPROTO.patch
    (bsc#1012628 CVE-2024-50034 bsc#1231913).
  - Update
    patches.kernel.org/6.11.4-146-slip-make-slhc_remember-more-robust-against-ma.patch
    (bsc#1012628 CVE-2024-50033 bsc#1231914).
  - Update
    patches.kernel.org/6.11.4-147-rcu-nocb-Fix-rcuog-wake-up-from-offline-softir.patch
    (bsc#1012628 CVE-2024-50032 bsc#1231915).
  - Update
    patches.kernel.org/6.11.4-156-HID-amd_sfh-Switch-to-device-managed-dmam_allo.patch
    (bsc#1012628 CVE-2024-50189 bsc#1233105).
  - Update
    patches.kernel.org/6.11.4-170-drm-v3d-Stop-the-active-perfmon-before-being-d.patch
    (bsc#1012628 CVE-2024-50031 bsc#1231947).
  - Update
    patches.kernel.org/6.11.4-171-drm-vc4-Stop-the-active-perfmon-before-being-d.patch
    (bsc#1012628 CVE-2024-50187 bsc#1233108).
  - Update
    patches.kernel.org/6.11.4-176-drm-xe-ct-prevent-UAF-in-send_recv.patch
    (bsc#1012628 CVE-2024-50030 bsc#1231948).
  - Update
    patches.kernel.org/6.11.4-178-Bluetooth-hci_conn-Fix-UAF-in-hci_enhanced_set.patch
    (bsc#1012628 CVE-2024-50029 bsc#1231949).
  - Update
    patches.kernel.org/6.11.4-179-thermal-core-Reference-count-the-zone-in-therm.patch
    (bsc#1012628 CVE-2024-50028 bsc#1231950).
  - Update
    patches.kernel.org/6.11.4-180-thermal-core-Free-tzp-copy-along-with-the-ther.patch
    (bsc#1012628 CVE-2024-50027 bsc#1231951).
  - Update
    patches.kernel.org/6.11.4-181-scsi-wd33c93-Don-t-use-stale-scsi_pointer-valu.patch
    (bsc#1012628 CVE-2024-50026 bsc#1231952).
  - Update
    patches.kernel.org/6.11.4-182-scsi-fnic-Move-flush_work-initialization-out-o.patch
    (bsc#1012628 CVE-2024-50025 bsc#1231953).
  - Update
    patches.kernel.org/6.11.4-189-net-explicitly-clear-the-sk-pointer-when-pf-cr.patch
    (bsc#1012628 CVE-2024-50186 bsc#1233110).
  - Update
    patches.kernel.org/6.11.4-190-net-Fix-an-unsafe-loop-on-the-list.patch
    (bsc#1012628 CVE-2024-50024 bsc#1231954).
  - Update
    patches.kernel.org/6.11.4-192-net-phy-Remove-LED-entry-from-LEDs-list-on-unr.patch
    (bsc#1012628 CVE-2024-50023 bsc#1231955).
  - Update
    patches.kernel.org/6.11.4-194-mptcp-handle-consistently-DSS-corruption.patch
    (bsc#1012628 CVE-2024-50185 bsc#1233109).
  - Update
    patches.kernel.org/6.11.4-196-device-dax-correct-pgoff-align-in-dax_set_mapp.patch
    (bsc#1012628 CVE-2024-50022 bsc#1231956).
  - Update
    patches.kernel.org/6.11.4-197-ice-Fix-improper-handling-of-refcount-in-ice_d.patch
    (bsc#1012628 CVE-2024-50021 bsc#1231957).
  - Update
    patches.kernel.org/6.11.4-198-ice-Fix-improper-handling-of-refcount-in-ice_s.patch
    (bsc#1012628 CVE-2024-50020 bsc#1231989).
  - Update
    patches.kernel.org/6.11.4-199-nouveau-dmem-Fix-vulnerability-in-migrate_to_r.patch
    (bsc#1012628 CVE-2024-50096 bsc#1232870).
  - Update
    patches.kernel.org/6.11.4-207-kthread-unpark-only-parked-kthread.patch
    (bsc#1012628 CVE-2024-50019 bsc#1231990).
  - Update
    patches.kernel.org/6.11.4-209-secretmem-disable-memfd_secret-if-arch-cannot-.patch
    (bsc#1012628 CVE-2024-50182 bsc#1233129).
  - Update
    patches.kernel.org/6.11.5-001-btrfs-fix-uninitialized-pointer-free-in-add_in.patch
    (bsc#1012628 CVE-2024-50088 bsc#1232498).
  - Update
    patches.kernel.org/6.11.5-002-btrfs-fix-uninitialized-pointer-free-on-read_a.patch
    (bsc#1012628 CVE-2024-50087 bsc#1232499).
  - Update
    patches.kernel.org/6.11.5-003-ksmbd-fix-user-after-free-from-session-log-off.patch
    (bsc#1012628 CVE-2024-50086 bsc#1232521).
  - Update
    patches.kernel.org/6.11.5-006-mptcp-pm-fix-UaF-read-in-mptcp_pm_nl_rm_addr_o.patch
    (bsc#1012628 CVE-2024-50085 bsc#1232508).
  - Update
    patches.kernel.org/6.11.5-012-posix-clock-Fix-missing-timespec64-check-in-pc.patch
    (bsc#1012628 CVE-2024-50195 bsc#1233103).
  - Update
    patches.kernel.org/6.11.5-015-arm64-probes-Remove-broken-LDR-literal-uprobe-.patch
    (bsc#1012628 CVE-2024-50099 bsc#1232887).
  - Update
    patches.kernel.org/6.11.5-017-arm64-probes-Fix-uprobes-for-big-endian-kernel.patch
    (bsc#1012628 CVE-2024-50194 bsc#1233111).
  - Update
    patches.kernel.org/6.11.5-019-net-microchip-vcap-api-Fix-memory-leaks-in-vca.patch
    (bsc#1012628 CVE-2024-50084 bsc#1232494).
  - Update
    patches.kernel.org/6.11.5-021-maple_tree-correct-tree-corruption-on-spanning.patch
    (bsc#1012628 CVE-2024-50200 bsc#1233088).
  - Update
    patches.kernel.org/6.11.5-026-mm-mremap-fix-move_normal_pmd-retract_page_tab.patch
    (bsc#1012628 CVE-2024-50066 bsc#1232078).
  - Update
    patches.kernel.org/6.11.5-029-mm-swapfile-skip-HugeTLB-pages-for-unuse_vma.patch
    (bsc#1012628 CVE-2024-50199 bsc#1233112).
  - Update
    patches.kernel.org/6.11.5-030-mm-damon-tests-sysfs-kunit.h-fix-memory-leak-i.patch
    (bsc#1012628 CVE-2024-50068 bsc#1232512).
  - Update
    patches.kernel.org/6.11.5-031-tcp-fix-mptcp-DSS-corruption-due-to-large-pmtu.patch
    (bsc#1012628 CVE-2024-50083 bsc#1232493).
  - Update
    patches.kernel.org/6.11.5-035-iommu-vt-d-Fix-incorrect-pci_for_each_dma_alia.patch
    (bsc#1012628 CVE-2024-50101 bsc#1232869).
  - Update
    patches.kernel.org/6.11.5-047-blk-rq-qos-fix-crash-on-rq_qos_wait-vs.-rq_qos.patch
    (bsc#1012628 CVE-2024-50082 bsc#1232500).
  - Update
    patches.kernel.org/6.11.5-049-blk-mq-setup-queue-tag_set-before-initializing.patch
    (bsc#1012628 CVE-2024-50081 bsc#1232501).
  - Update
    patches.kernel.org/6.11.5-050-ublk-don-t-allow-user-copy-for-unprivileged-de.patch
    (bsc#1012628 CVE-2024-50080 bsc#1232502).
  - Update
    patches.kernel.org/6.11.5-051-io_uring-sqpoll-ensure-task-state-is-TASK_RUNN.patch
    (bsc#1012628 CVE-2024-50079 bsc#1232495).
  - Update
    patches.kernel.org/6.11.5-055-scsi-ufs-core-Set-SDEV_OFFLINE-when-UFS-is-shu.patch
    (bsc#1012628 CVE-2024-50098 bsc#1232881).
  - Update
    patches.kernel.org/6.11.5-058-drm-radeon-Fix-encoder-possible_clones.patch
    (bsc#1012628 CVE-2024-50201 bsc#1233104).
  - Update
    patches.kernel.org/6.11.5-075-iio-light-veml6030-fix-IIO-device-retrieval-fr.patch
    (bsc#1012628 CVE-2024-50198 bsc#1233100).
  - Update
    patches.kernel.org/6.11.5-093-Bluetooth-Call-iso_exit-on-module-unload.patch
    (bsc#1012628 CVE-2024-50078 bsc#1232503).
  - Update
    patches.kernel.org/6.11.5-095-Bluetooth-ISO-Fix-multiple-init-when-debugfs-i.patch
    (bsc#1012628 CVE-2024-50077 bsc#1232504).
  - Update
    patches.kernel.org/6.11.5-098-vt-prevent-kernel-infoleak-in-con_font_get.patch
    (bsc#1012628 CVE-2024-50076 bsc#1232505).
  - Update
    patches.kernel.org/6.11.5-099-xhci-tegra-fix-checked-USB2-port-number.patch
    (bsc#1012628 CVE-2024-50075 bsc#1232506).
  - Update
    patches.kernel.org/6.11.5-105-USB-gadget-dummy-hcd-Fix-task-hung-problem.patch
    (bsc#1012628 CVE-2024-50100 bsc#1232876).
  - Update
    patches.kernel.org/6.11.5-112-parport-Proper-fix-for-array-out-of-bounds-acc.patch
    (bsc#1012628 CVE-2024-50074 bsc#1232507).
  - Update
    patches.kernel.org/6.11.5-117-x86-entry_32-Clear-CPU-buffers-after-register-.patch
    (bsc#1012628 CVE-2024-50193 bsc#1233102).
  - Update
    patches.kernel.org/6.11.5-118-tty-n_gsm-Fix-use-after-free-in-gsm_cleanup_mu.patch
    (bsc#1012628 CVE-2024-50073 bsc#1232520).
  - Update
    patches.kernel.org/6.11.5-119-x86-bugs-Use-code-segment-selector-for-VERW-op.patch
    (bsc#1012628 CVE-2024-50072 bsc#1232513).
  - Update
    patches.kernel.org/6.11.5-120-pinctrl-nuvoton-fix-a-double-free-in-ma35_pinc.patch
    (bsc#1012628 CVE-2024-50071 bsc#1232509).
  - Update
    patches.kernel.org/6.11.5-121-pinctrl-intel-platform-fix-error-path-in-devic.patch
    (bsc#1012628 CVE-2024-50197 bsc#1233089).
  - Update
    patches.kernel.org/6.11.5-122-pinctrl-ocelot-fix-system-hang-on-level-based-.patch
    (bsc#1012628 CVE-2024-50196 bsc#1233113).
  - Update
    patches.kernel.org/6.11.5-123-pinctrl-stm32-check-devm_kasprintf-returned-va.patch
    (bsc#1012628 CVE-2024-50070 bsc#1232510).
  - Update
    patches.kernel.org/6.11.5-124-pinctrl-apple-check-devm_kasprintf-returned-va.patch
    (bsc#1012628 CVE-2024-50069 bsc#1232511).
  - Update
    patches.kernel.org/6.11.5-125-irqchip-gic-v4-Don-t-allow-a-VMOVP-on-a-dying-.patch
    (bsc#1012628 CVE-2024-50192 bsc#1233106).
  - Update
    patches.kernel.org/6.11.6-001-bpf-Use-raw_spinlock_t-in-ringbuf.patch
    (bsc#1012628 CVE-2024-50138 bsc#1232935).
  - Update
    patches.kernel.org/6.11.6-003-reset-starfive-jh71x0-Fix-accessing-the-empty-.patch
    (bsc#1012628 CVE-2024-50137 bsc#1232932).
  - Update
    patches.kernel.org/6.11.6-005-bpf-Make-sure-internal-and-UAPI-bpf_redirect-f.patch
    (bsc#1012628 CVE-2024-50163 bsc#1233098).
  - Update
    patches.kernel.org/6.11.6-007-bpf-devmap-provide-rxq-after-redirect.patch
    (bsc#1012628 CVE-2024-50162 bsc#1233075).
  - Update
    patches.kernel.org/6.11.6-011-RDMA-bnxt_re-Fix-a-possible-memory-leak.patch
    (bsc#1012628 CVE-2024-50172 bsc#1233029).
  - Update
    patches.kernel.org/6.11.6-013-RDMA-bnxt_re-Add-a-check-for-memory-allocation.patch
    (bsc#1012628 CVE-2024-50209 bsc#1233114).
  - Update
    patches.kernel.org/6.11.6-018-bpf-Check-the-remaining-info_cnt-before-repeat.patch
    (bsc#1012628 CVE-2024-50161 bsc#1233037).
  - Update
    patches.kernel.org/6.11.6-029-sched-core-Disable-page-allocation-in-task_tic.patch
    (bsc#1012628 CVE-2024-50140 bsc#1233060).
  - Update
    patches.kernel.org/6.11.6-030-ALSA-hda-cs8409-Fix-possible-NULL-dereference.patch
    (bsc#1012628 CVE-2024-50160 bsc#1233074).
  - Update
    patches.kernel.org/6.11.6-031-firmware-arm_scmi-Fix-the-double-free-in-scmi_.patch
    (bsc#1012628 CVE-2024-50159 bsc#1233041).
  - Update
    patches.kernel.org/6.11.6-040-RDMA-bnxt_re-Fix-out-of-bound-check.patch
    (bsc#1012628 CVE-2024-50158 bsc#1233036).
  - Update
    patches.kernel.org/6.11.6-043-RDMA-bnxt_re-Avoid-CPU-lockups-due-fifo-occupa.patch
    (bsc#1012628 CVE-2024-50157 bsc#1233032).
  - Update
    patches.kernel.org/6.11.6-046-RDMA-bnxt_re-Fix-a-bug-while-setting-up-Level-.patch
    (bsc#1012628 CVE-2024-50208 bsc#1233117).
  - Update
    patches.kernel.org/6.11.6-055-drm-msm-Avoid-NULL-dereference-in-msm_disp_sta.patch
    (bsc#1012628 CVE-2024-50156 bsc#1233073).
  - Update
    patches.kernel.org/6.11.6-063-ring-buffer-Fix-reader-locking-when-changing-t.patch
    (bsc#1012628 CVE-2024-50207 bsc#1233122).
  - Update
    patches.kernel.org/6.11.6-066-netdevsim-use-cond_resched-in-nsim_dev_trap_re.patch
    (bsc#1012628 CVE-2024-50155 bsc#1233035).
  - Update
    patches.kernel.org/6.11.6-072-net-systemport-fix-potential-memory-leak-in-bc.patch
    (bsc#1012628 CVE-2024-50171 bsc#1233057).
  - Update
    patches.kernel.org/6.11.6-076-net-bcmasp-fix-potential-memory-leak-in-bcmasp.patch
    (bsc#1012628 CVE-2024-50170 bsc#1233030).
  - Update
    patches.kernel.org/6.11.6-078-tcp-dccp-Don-t-use-timer_pending-in-reqsk_queu.patch
    (bsc#1012628 CVE-2024-50154 bsc#1233072).
  - Update
    patches.kernel.org/6.11.6-084-scsi-target-core-Fix-null-ptr-deref-in-target_.patch
    (bsc#1012628 CVE-2024-50153 bsc#1233061).
  - Update
    patches.kernel.org/6.11.6-085-smb-client-fix-possible-double-free-in-smb2_se.patch
    (bsc#1012628 CVE-2024-50152 bsc#1233033).
  - Update
    patches.kernel.org/6.11.6-086-smb-client-fix-OOBs-when-building-SMB2_IOCTL-r.patch
    (bsc#1012628 CVE-2024-50151 bsc#1233055).
  - Update
    patches.kernel.org/6.11.6-087-usb-typec-altmode-should-keep-reference-to-par.patch
    (bsc#1012628 CVE-2024-50150 bsc#1233051).
  - Update
    patches.kernel.org/6.11.6-089-drm-xe-fix-unbalanced-rpm-put-with-fence_fini.patch
    (bsc#1012628 CVE-2024-50144 bsc#1233040).
  - Update
    patches.kernel.org/6.11.6-092-drm-xe-Don-t-free-job-in-TDR.patch
    (bsc#1012628 CVE-2024-50149 bsc#1233034).
  - Update
    patches.kernel.org/6.11.6-095-Bluetooth-bnep-fix-wild-memory-access-in-proto.patch
    (bsc#1012628 CVE-2024-50148 bsc#1233063).
  - Update
    patches.kernel.org/6.11.6-097-net-ethernet-mtk_eth_soc-fix-memory-corruption.patch
    (bsc#1012628 CVE-2024-50206 bsc#1233288).
  - Update
    patches.kernel.org/6.11.6-099-net-mlx5-Fix-command-bitmask-initialization.patch
    (bsc#1012628 CVE-2024-50147 bsc#1233067).
  - Update
    patches.kernel.org/6.11.6-100-net-mlx5-Unregister-notifier-on-eswitch-init-f.patch
    (bsc#1012628 CVE-2024-50136 bsc#1232914).
  - Update
    patches.kernel.org/6.11.6-101-net-mlx5e-Don-t-call-cleanup-on-profile-rollba.patch
    (bsc#1012628 CVE-2024-50146 bsc#1233056).
  - Update
    patches.kernel.org/6.11.6-107-nvme-pci-fix-race-condition-between-reset-and-.patch
    (bsc#1012628 CVE-2024-50135 bsc#1232888).
  - Update
    patches.kernel.org/6.11.6-121-uprobe-avoid-out-of-bounds-memory-access-of-fe.patch
    (bsc#1012628 CVE-2024-50067 bsc#1232416).
  - Update
    patches.kernel.org/6.11.6-122-drm-vboxvideo-Replace-fake-VLA-at-end-of-vbva_.patch
    (bsc#1012628 CVE-2024-50134 bsc#1232890).
  - Update
    patches.kernel.org/6.11.6-129-udf-refactor-inode_bmap-to-handle-error.patch
    (bsc#1012628 CVE-2024-50211 bsc#1233096).
  - Update
    patches.kernel.org/6.11.6-130-udf-fix-uninit-value-use-in-udf_get_fileshorta.patch
    (bsc#1012628 CVE-2024-50143 bsc#1233038).
  - Update
    patches.kernel.org/6.11.6-136-LoongArch-Don-t-crash-in-stack_top-for-tasks-w.patch
    (bsc#1012628 CVE-2024-50133 bsc#1232854).
  - Update
    patches.kernel.org/6.11.6-139-tracing-probes-Fix-MAX_TRACE_ARGS-limit-handli.patch
    (bsc#1012628 CVE-2024-50132 bsc#1232861).
  - Update
    patches.kernel.org/6.11.6-140-tracing-Consider-the-NULL-character-when-valid.patch
    (bsc#1012628 CVE-2024-50131 bsc#1232896).
  - Update
    patches.kernel.org/6.11.6-143-xfrm-validate-new-SA-s-prefixlen-using-SA-fami.patch
    (bsc#1012628 CVE-2024-50142 bsc#1233028).
  - Update
    patches.kernel.org/6.11.6-144-netfilter-bpf-must-hold-reference-on-net-names.patch
    (bsc#1012628 CVE-2024-50130 bsc#1232894).
  - Update
    patches.kernel.org/6.11.6-145-net-pse-pd-Fix-out-of-bound-for-loop.patch
    (bsc#1012628 CVE-2024-50129 bsc#1232856).
  - Update
    patches.kernel.org/6.11.6-146-net-sun3_82586-fix-potential-memory-leak-in-su.patch
    (bsc#1012628 CVE-2024-50168 bsc#1233059).
  - Update
    patches.kernel.org/6.11.6-147-be2net-fix-potential-memory-leak-in-be_xmit.patch
    (bsc#1012628 CVE-2024-50167 bsc#1233049).
  - Update
    patches.kernel.org/6.11.6-151-octeon_ep-Add-SKB-allocation-failures-handling.patch
    (bsc#1012628 CVE-2024-50145 bsc#1233044).
  - Update
    patches.kernel.org/6.11.6-155-fsl-fman-Fix-refcount-handling-of-fman-related.patch
    (bsc#1012628 CVE-2024-50166 bsc#1233050).
  - Update
    patches.kernel.org/6.11.6-157-net-wwan-fix-global-oob-in-wwan_rtnl_policy.patch
    (bsc#1012628 CVE-2024-50128 bsc#1232905).
  - Update
    patches.kernel.org/6.11.6-162-bpf-Preserve-param-string-when-parsing-mount-o.patch
    (bsc#1012628 CVE-2024-50165 bsc#1233031).
  - Update
    patches.kernel.org/6.11.6-164-bpf-Fix-overloading-of-MEM_UNINIT-s-meaning.patch
    (bsc#1012628 CVE-2024-50164 bsc#1233099).
  - Update
    patches.kernel.org/6.11.6-167-net-sched-fix-use-after-free-in-taprio_change.patch
    (bsc#1012628 CVE-2024-50127 bsc#1232907).
  - Update
    patches.kernel.org/6.11.6-168-net-sched-use-RCU-read-side-critical-section-i.patch
    (bsc#1012628 CVE-2024-50126 bsc#1232895).
  - Update
    patches.kernel.org/6.11.6-170-posix-clock-posix-clock-Fix-unbalanced-locking.patch
    (bsc#1012628 CVE-2024-50210 bsc#1233097).
  - Update
    patches.kernel.org/6.11.6-172-Bluetooth-SCO-Fix-UAF-on-sco_sock_timeout.patch
    (bsc#1012628 CVE-2024-50125 bsc#1232928).
  - Update
    patches.kernel.org/6.11.6-173-Bluetooth-ISO-Fix-UAF-on-iso_sock_timeout.patch
    (bsc#1012628 CVE-2024-50124 bsc#1232926).
  - Update
    patches.kernel.org/6.11.6-180-bpf-Add-the-missing-BPF_LINK_TYPE-invocation-f.patch
    (bsc#1012628 CVE-2024-50123 bsc#1232857).
  - Update
    patches.kernel.org/6.11.6-187-PCI-Hold-rescan-lock-while-adding-devices-duri.patch
    (bsc#1012628 CVE-2024-50122 bsc#1232930).
  - Update
    patches.kernel.org/6.11.6-191-ALSA-firewire-lib-Avoid-division-by-zero-in-ap.patch
    (bsc#1012628 CVE-2024-50205 bsc#1233293).
  - Update
    patches.kernel.org/6.11.6-194-nfsd-cancel-nfsd_shrinker_work-using-sync-mode.patch
    (bsc#1012628 CVE-2024-50121 bsc#1232925).
  - Update
    patches.kernel.org/6.11.6-196-smb-client-Handle-kstrdup-failures-for-passwor.patch
    (bsc#1012628 CVE-2024-50120 bsc#1232924).
  - Update
    patches.kernel.org/6.11.6-197-cifs-fix-warning-when-destroy-cifs_io_request_.patch
    (bsc#1012628 CVE-2024-50119 bsc#1232858).
  - Update
    patches.kernel.org/6.11.6-207-btrfs-reject-ro-rw-reconfiguration-if-there-ar.patch
    (bsc#1012628 CVE-2024-50118 bsc#1232859).
  - Update
    patches.kernel.org/6.11.6-210-drm-amd-Guard-against-bad-data-for-ATIF-ACPI-m.patch
    (bsc#1012628 CVE-2024-50117 bsc#1232897).
  - Update
    patches.kernel.org/6.11.6-212-ACPI-PRM-Find-EFI_MEMORY_RUNTIME-block-for-PRM.patch
    (bsc#1012628 CVE-2024-50141 bsc#1233065).
  - Update
    patches.kernel.org/6.11.6-214-nilfs2-fix-kernel-bug-due-to-missing-clearing-.patch
    (bsc#1012628 CVE-2024-50116 bsc#1232892).
  - Update
    patches.kernel.org/6.11.6-218-KVM-nSVM-Ignore-nCR3-4-0-when-loading-PDPTEs-f.patch
    (bsc#1012628 CVE-2024-50115 bsc#1232919).
  - Update
    patches.kernel.org/6.11.6-219-KVM-arm64-Unregister-redistributor-for-failed-.patch
    (bsc#1012628 CVE-2024-50114 bsc#1232912).
  - Update
    patches.kernel.org/6.11.6-220-KVM-arm64-Fix-shift-out-of-bounds-bug.patch
    (bsc#1012628 CVE-2024-50139 bsc#1233062).
  - Update
    patches.kernel.org/6.11.6-222-firewire-core-fix-invalid-port-index-for-paren.patch
    (bsc#1012628 CVE-2024-50113 bsc#1232891).
  - Update
    patches.kernel.org/6.11.6-223-x86-lam-Disable-ADDRESS_MASKING-in-most-cases.patch
    (bsc#1012628 CVE-2024-50112 bsc#1232867).
  - Update
    patches.kernel.org/6.11.6-228-LoongArch-Enable-IRQ-if-do_ale-triggered-in-ir.patch
    (bsc#1012628 CVE-2024-50111 bsc#1232866).
  - Update
    patches.kernel.org/6.11.6-230-xfrm-fix-one-more-kernel-infoleak-in-algo-dump.patch
    (bsc#1012628 CVE-2024-50110 bsc#1232885).
  - Update
    patches.kernel.org/6.11.6-232-md-raid10-fix-null-ptr-dereference-in-raid10_s.patch
    (bsc#1012628 CVE-2024-50109 bsc#1232886).
  - Update
    patches.kernel.org/6.11.6-234-drm-amd-display-Disable-PSR-SU-on-Parade-08-01.patch
    (bsc#1012628 CVE-2024-50108 bsc#1232884).
  - Update
    patches.kernel.org/6.11.6-235-platform-x86-intel-pmc-Fix-pmc_core_iounmap-to.patch
    (bsc#1012628 CVE-2024-50107 bsc#1232883).
  - Update
    patches.kernel.org/6.11.6-239-nfsd-fix-race-between-laundromat-and-free_stat.patch
    (bsc#1012628 CVE-2024-50106 bsc#1232882).
  - Update
    patches.kernel.org/6.11.6-247-ASoC-qcom-sc7280-Fix-missing-Soundwire-runtime.patch
    (bsc#1012628 CVE-2024-50105 bsc#1232879).
  - Update
    patches.kernel.org/6.11.6-248-ASoC-qcom-sdm845-add-missing-soundwire-runtime.patch
    (bsc#1012628 CVE-2024-50104 bsc#1232868).
  - Update
    patches.kernel.org/6.11.6-249-ASoC-qcom-Fix-NULL-Dereference-in-asoc_qcom_lp.patch
    (bsc#1012628 CVE-2024-50103 bsc#1232878).
  - Update
    patches.kernel.org/6.11.6-257-x86-fix-user-address-masking-non-canonical-spe.patch
    (bsc#1012628 CVE-2024-50102 bsc#1232880).
  - Update
    patches.kernel.org/6.11.7-024-macsec-Fix-use-after-free-while-sending-the-of.patch
    (bsc#1012628 CVE-2024-50261 bsc#1233253).
  - Update
    patches.kernel.org/6.11.7-026-sock_map-fix-a-NULL-pointer-dereference-in-soc.patch
    (bsc#1012628 CVE-2024-50260 bsc#1233178).
  - Update
    patches.kernel.org/6.11.7-037-netdevsim-Add-trailing-zero-to-terminate-the-s.patch
    (bsc#1012628 CVE-2024-50259 bsc#1233214).
  - Update
    patches.kernel.org/6.11.7-039-bpf-Fix-out-of-bounds-write-in-trie_get_next_k.patch
    (bsc#1012628 CVE-2024-50262 bsc#1233239).
  - Update
    patches.kernel.org/6.11.7-040-net-fix-crash-when-config-small-gso_max_size-g.patch
    (bsc#1012628 CVE-2024-50258 bsc#1233221).
  - Update
    patches.kernel.org/6.11.7-041-netfilter-Fix-use-after-free-in-get_info.patch
    (bsc#1012628 CVE-2024-50257 bsc#1233244).
  - Update
    patches.kernel.org/6.11.7-042-netfilter-nf_reject_ipv6-fix-potential-crash-i.patch
    (bsc#1012628 CVE-2024-50256 bsc#1233200).
  - Update
    patches.kernel.org/6.11.7-043-Bluetooth-hci-fix-null-ptr-deref-in-hci_read_s.patch
    (bsc#1012628 CVE-2024-50255 bsc#1233238).
  - Update
    patches.kernel.org/6.11.7-044-bpf-Free-dynamically-allocated-bits-in-bpf_ite.patch
    (bsc#1012628 CVE-2024-50254 bsc#1233183).
  - Update
    patches.kernel.org/6.11.7-046-bpf-Check-the-validity-of-nr_words-in-bpf_iter.patch
    (bsc#1012628 CVE-2024-50253 bsc#1233186).
  - Update
    patches.kernel.org/6.11.7-051-mlxsw-spectrum_ipip-Fix-memory-leak-when-chang.patch
    (bsc#1012628 CVE-2024-50252 bsc#1233201).
  - Update
    patches.kernel.org/6.11.7-053-netfilter-nft_payload-sanitize-offset-and-leng.patch
    (bsc#1012628 CVE-2024-50251 bsc#1233248).
  - Update
    patches.kernel.org/6.11.7-059-fsdax-dax_unshare_iter-needs-to-copy-entire-bl.patch
    (bsc#1012628 CVE-2024-50250 bsc#1233226).
  - Update
    patches.kernel.org/6.11.7-064-ACPI-CPPC-Make-rmw_lock-a-raw_spin_lock.patch
    (bsc#1012628 CVE-2024-50249 bsc#1233197).
  - Update
    patches.kernel.org/6.11.7-080-ntfs3-Add-bounds-checking-to-mi_enum_attr.patch
    (bsc#1012628 CVE-2024-50248 bsc#1233219).
  - Update
    patches.kernel.org/6.11.7-081-fs-ntfs3-Check-if-more-than-chunk-size-bytes-a.patch
    (bsc#1012628 CVE-2024-50247 bsc#1233271).
  - Update
    patches.kernel.org/6.11.7-084-fs-ntfs3-Add-rough-attr-alloc_size-check.patch
    (bsc#1012628 CVE-2024-50246 bsc#1233207).
  - Update
    patches.kernel.org/6.11.7-085-fs-ntfs3-Fix-possible-deadlock-in-mi_read.patch
    (bsc#1012628 CVE-2024-50245 bsc#1233203).
  - Update
    patches.kernel.org/6.11.7-086-fs-ntfs3-Additional-check-in-ni_clear.patch
    (bsc#1012628 CVE-2024-50244 bsc#1233270).
  - Update
    patches.kernel.org/6.11.7-087-fs-ntfs3-Fix-general-protection-fault-in-run_i.patch
    (bsc#1012628 CVE-2024-50243 bsc#1233269).
  - Update
    patches.kernel.org/6.11.7-088-fs-ntfs3-Additional-check-in-ntfs_file_release.patch
    (bsc#1012628 CVE-2024-50242 bsc#1233268).
  - Update
    patches.kernel.org/6.11.7-100-NFSD-Initialize-struct-nfsd4_copy-earlier.patch
    (bsc#1012628 CVE-2024-50241 bsc#1233187).
  - Update
    patches.kernel.org/6.11.7-111-phy-qcom-qmp-usb-fix-NULL-deref-on-runtime-sus.patch
    (bsc#1012628 CVE-2024-50240 bsc#1233217).
  - Update
    patches.kernel.org/6.11.7-112-phy-qcom-qmp-usb-legacy-fix-NULL-deref-on-runt.patch
    (bsc#1012628 CVE-2024-50239 bsc#1233180).
  - Update
    patches.kernel.org/6.11.7-113-phy-qcom-qmp-usbc-fix-NULL-deref-on-runtime-su.patch
    (bsc#1012628 CVE-2024-50238 bsc#1233182).
  - Update
    patches.kernel.org/6.11.7-120-wifi-mac80211-do-not-pass-a-stopped-vif-to-the.patch
    (bsc#1012628 CVE-2024-50237 bsc#1233216).
  - Update
    patches.kernel.org/6.11.7-121-wifi-ath10k-Fix-memory-leak-in-management-tx.patch
    (bsc#1012628 CVE-2024-50236 bsc#1233212).
  - Update
    patches.kernel.org/6.11.7-122-wifi-cfg80211-clear-wdev-cqm_config-pointer-on.patch
    (bsc#1012628 CVE-2024-50235 bsc#1233176).
  - Update
    patches.kernel.org/6.11.7-123-wifi-iwlegacy-Clear-stale-interrupts-before-re.patch
    (bsc#1012628 CVE-2024-50234 bsc#1233211).
  - Update
    patches.kernel.org/6.11.7-125-staging-iio-frequency-ad9832-fix-division-by-z.patch
    (bsc#1012628 CVE-2024-50233 bsc#1233210).
  - Update
    patches.kernel.org/6.11.7-127-iio-adc-ad7124-fix-division-by-zero-in-ad7124_.patch
    (bsc#1012628 CVE-2024-50232 bsc#1233209).
  - Update
    patches.kernel.org/6.11.7-129-iio-gts-helper-Fix-memory-leaks-in-iio_gts_bui.patch
    (bsc#1012628 CVE-2024-50231 bsc#1233208).
  - Update
    patches.kernel.org/6.11.7-131-nilfs2-fix-kernel-bug-due-to-missing-clearing-.patch
    (bsc#1012628 CVE-2024-50230 bsc#1233206).
  - Update
    patches.kernel.org/6.11.7-132-nilfs2-fix-potential-deadlock-with-newly-creat.patch
    (bsc#1012628 CVE-2024-50229 bsc#1233205).
  - Update
    patches.kernel.org/6.11.7-134-mm-shmem-fix-data-race-in-shmem_getattr.patch
    (bsc#1012628 CVE-2024-50228 bsc#1233204).
  - Update
    patches.kernel.org/6.11.7-138-thunderbolt-Fix-KASAN-reported-stack-out-of-bo.patch
    (bsc#1012628 CVE-2024-50227 bsc#1233181).
  - Update
    patches.kernel.org/6.11.7-141-cxl-port-Fix-use-after-free-permit-out-of-orde.patch
    (bsc#1012628 CVE-2024-50226 bsc#1233195).
  - Update
    patches.kernel.org/6.11.7-149-btrfs-fix-error-propagation-of-split-bios.patch
    (bsc#1012628 CVE-2024-50225 bsc#1233193).
  - Update
    patches.kernel.org/6.11.7-150-spi-spi-fsl-dspi-Fix-crash-when-not-using-GPIO.patch
    (bsc#1012628 CVE-2024-50224 bsc#1233188).
  - Update
    patches.kernel.org/6.11.7-162-sched-numa-Fix-the-potential-null-pointer-dere.patch
    (bsc#1012628 CVE-2024-50223 bsc#1233192).
  - Update
    patches.kernel.org/6.11.7-164-iov_iter-fix-copy_page_from_iter_atomic-if-KMA.patch
    (bsc#1012628 CVE-2024-50222 bsc#1233184).
  - Update
    patches.kernel.org/6.11.7-167-drm-amd-pm-Vangogh-Fix-kernel-memory-out-of-bo.patch
    (bsc#1012628 CVE-2024-50221 bsc#1233185).
  - Update
    patches.kernel.org/6.11.7-172-fork-do-not-invoke-uffd-on-fork-if-error-occur.patch
    (bsc#1012628 CVE-2024-50220 bsc#1233175).
  - Update
    patches.kernel.org/6.11.7-173-fork-only-invoke-khugepaged-ksm-hooks-if-no-er.patch
    (bsc#1012628 CVE-2024-50263 bsc#1233254).
  - Update
    patches.kernel.org/6.11.7-177-ocfs2-pass-u64-to-ocfs2_truncate_inline-maybe-.patch
    (bsc#1012628 CVE-2024-50218 bsc#1233191).
  - Update
    patches.kernel.org/6.11.7-180-btrfs-fix-use-after-free-of-block-device-file-.patch
    (bsc#1012628 CVE-2024-50217 bsc#1233194).
  - Update
    patches.kernel.org/6.11.7-182-xfs-fix-finding-a-last-resort-AG-in-xfs_filest.patch
    (bsc#1012628 CVE-2024-50216 bsc#1233179).
  - Update
    patches.kernel.org/6.11.7-185-nvmet-auth-assign-dh_key-to-NULL-after-kfree_s.patch
    (bsc#1012628 CVE-2024-50215 bsc#1233189).
  - Update
    patches.kernel.org/6.11.7-189-drm-connector-hdmi-Fix-memory-leak-in-drm_disp.patch
    (bsc#1012628 CVE-2024-50214 bsc#1233177).
  - Update
    patches.kernel.org/6.11.7-190-drm-tests-hdmi-Fix-memory-leaks-in-drm_display.patch
    (bsc#1012628 CVE-2024-50213 bsc#1233174).
  - Update
    patches.kernel.org/6.11.7-247-lib-alloc_tag_module_unload-must-wait-for-pend.patch
    (bsc#1012628 CVE-2024-50212 bsc#1233173).
  - commit e3c376e

++++ kernel-docs:

  - Linux 6.11.8 (bsc#1012628).
  - vsock/virtio: Initialization of the dangling pointer occurring
    in vsk->trans (bsc#1012628).
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling
    pointer (bsc#1012628).
  - xtensa: Emulate one-byte cmpxchg (bsc#1012628).
  - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
    (bsc#1012628).
  - drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
    (bsc#1012628).
  - drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
    (bsc#1012628).
  - drm/xe: Move LNL scheduling WA to xe_device.h (bsc#1012628).
  - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
    (bsc#1012628).
  - block: fix queue limits checks in blk_rq_map_user_bvec for real
    (bsc#1012628).
  - blacklist.conf: drop it
  - block: rework bio splitting (bsc#1012628).
  - firmware: qcom: scm: suppress download mode error (bsc#1012628).
  - firmware: qcom: scm: Refactor code to support multiple dload
    mode (bsc#1012628).
  - Update config files.
  - selftests: hugetlb_dio: check for initial conditions to skip
    in the start (bsc#1012628).
  - ucounts: fix counter leak in inc_rlimit_get_ucounts()
    (bsc#1012628).
  - ocfs2: remove entry once instead of null-ptr-dereference in
    ocfs2_xa_remove() (bsc#1012628).
  - irqchip/gic-v3: Force propagation of the active state with a
    read-back (bsc#1012628).
  - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state
    allocation (bsc#1012628).
  - staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation
    (bsc#1012628).
  - thunderbolt: Fix connection issue with Pluggable UD-4VPD dock
    (bsc#1012628).
  - clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
    (bsc#1012628).
  - clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
    (bsc#1012628).
  - USB: serial: option: add Quectel RG650V (bsc#1012628).
  - USB: serial: option: add Fibocom FG132 0x0112 composition
    (bsc#1012628).
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx
    (bsc#1012628).
  - USB: serial: io_edgeport: fix use after free in debug printk
    (bsc#1012628).
  - usb: typec: fix potential out of bounds in
    ucsi_ccg_update_set_new_cam_cmd() (bsc#1012628).
  - usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
    (bsc#1012628).
  - usb: dwc3: fix fault at system suspend if device was already
    runtime suspended (bsc#1012628).
  - usb: musb: sunxi: Fix accessing an released usb phy
    (bsc#1012628).
  - thunderbolt: Add only on-board retimers when
    !CONFIG_USB4_DEBUGFS_MARGINING (bsc#1012628).
  - mm/thp: fix deferred split unqueue naming and locking
    (bsc#1012628).
  - mm/mlock: set the correct prev on failure (bsc#1012628).
  - mm/damon/core: handle zero schemes apply interval (bsc#1012628).
  - mm/damon/core: handle zero {aggregation,ops_update} intervals
    (bsc#1012628).
  - mm/damon/core: avoid overflow in damon_feed_loop_next_input()
    (bsc#1012628).
  - signal: restore the override_rlimit logic (bsc#1012628).
  - objpool: fix to make percpu slot allocation more robust
    (bsc#1012628).
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
    (bsc#1012628).
  - clk: qcom: clk-alpha-pll: Fix pll post div mask when width is
    not set (bsc#1012628).
  - clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
    (bsc#1012628).
  - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE
    is not set (bsc#1012628).
  - filemap: Fix bounds checking in filemap_read() (bsc#1012628).
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED
    in uvc_parse_format (bsc#1012628).
  - platform/x86/amd/pmf: Add SMU metrics table support for 1Ah
    family 60h model (bsc#1012628).
  - platform/x86/amd/pmf: Update SMU metrics table for 1AH family
    series (bsc#1012628).
  - platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header
    (bsc#1012628).
  - btrfs: reinitialize delayed ref list after deleting it from
    the list (bsc#1012628).
  - btrfs: fix per-subvolume RO/RW flags with new mount API
    (bsc#1012628).
  - btrfs: fix the length of reserved qgroup to free (bsc#1012628).
  - idpf: fix idpf_vc_core_init error path (bsc#1012628).
  - idpf: avoid vport access in idpf_get_link_ksettings
    (bsc#1012628).
  - KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before
    running it to avoid spurious interrupts (bsc#1012628).
  - mm/slab: fix warning caused by duplicate kmem_cache creation
    in kmem_buckets_create (bsc#1012628).
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard
    hint (bsc#1012628).
  - arm64: Kconfig: Make SME depend on BROKEN for now (bsc#1012628).
  - Update config files.
  - arm64/sve: Discard stale CPU state when handling SVE traps
    (bsc#1012628).
  - mptcp: use sock_kfree_s instead of kfree (bsc#1012628).
  - net: vertexcom: mse102x: Fix possible double free of TX skb
    (bsc#1012628).
  - net: wwan: t7xx: Fix off-by-one error in
    t7xx_dpmaif_rx_buf_alloc() (bsc#1012628).
  - tracing: Fix tracefs mount options (bsc#1012628).
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (bsc#1012628).
  - scsi: ufs: core: Start the RTC update work later (bsc#1012628).
  - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (bsc#1012628).
  - mptcp: no admin perm to list endpoints (bsc#1012628).
  - dm: fix a crash if blk_alloc_disk fails (bsc#1012628).
  - dm-unstriped: cast an operand to sector_t to prevent potential
    uint32_t overflow (bsc#1012628).
  - dm cache: fix potential out-of-bounds access on the first resume
    (bsc#1012628).
  - dm cache: optimize dirty bit checking with find_next_bit when
    resizing (bsc#1012628).
  - dm cache: fix out-of-bounds access to the dirty bitset when
    resizing (bsc#1012628).
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr
    error (bsc#1012628).
  - dm cache: correct the number of origin blocks to match the
    target length (bsc#1012628).
  - KEYS: trusted: dcp: fix NULL dereference in AEAD crypto
    operation (bsc#1012628).
  - thermal/drivers/qcom/lmh: Remove false lockdep backtrace
    (bsc#1012628).
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not
    supported (bsc#1012628).
  - drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (bsc#1012628).
  - drm/amdgpu: Adjust debugfs register access permissions
    (bsc#1012628).
  - drm/amdgpu: add missing size check in
    amdgpu_debugfs_gprwave_read() (bsc#1012628).
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions
    (bsc#1012628).
  - drm/panthor: Be stricter about IO mapping flags (bsc#1012628).
  - drm/panthor: Lock XArray when getting entries for the VM
    (bsc#1012628).
  - drm/amd/display: parse umc_info or vram_info based on ASIC
    (bsc#1012628).
  - drm/amd/pm: correct the workload setting (bsc#1012628).
  - drm/imagination: Break an object reference loop (bsc#1012628).
  - drm/imagination: Add a per-file PVR context list (bsc#1012628).
  - drm/amd/display: Fix brightness level not retained over reboot
    (bsc#1012628).
  - drm/amd/pm: always pick the pptable from IFWI (bsc#1012628).
  - rpmsg: glink: Handle rejected intent request better
    (bsc#1012628).
  - tpm: Lock TPM chip in tpm_pm_suspend() first (bsc#1012628).
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode
    (bsc#1012628).
  - drm/xe: Set mask bits for CCS_MODE register (bsc#1012628).
  - drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure
    in exec IOCTL (bsc#1012628).
  - drm/xe: Fix possible exec queue leak in exec IOCTL
    (bsc#1012628).
  - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
    (bsc#1012628).
  - ksmbd: Fix the missing xa_store error check (bsc#1012628).
  - ksmbd: check outstanding simultaneous SMB operations
    (bsc#1012628).
  - ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
    (bsc#1012628).
  - can: {cc770,sja1000}_isa: allow building on x86_64
    (bsc#1012628).
  - Update config files. (say =N)
  - can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing
    configuration when switching CAN modes (bsc#1012628).
  - can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
    (bsc#1012628).
  - can: m_can: m_can_close(): don't call free_irq() for IRQ-less
    devices (bsc#1012628).
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
    (bsc#1012628).
  - media: v4l2-tpg: prevent the risk of a division by zero
    (bsc#1012628).
  - media: vivid: fix buffer overwrite when using > 32 buffers
    (bsc#1012628).
  - media: pulse8-cec: fix data timestamp at pulse8_setup()
    (bsc#1012628).
  - media: av7110: fix a spectre vulnerability (bsc#1012628).
  - media: cx24116: prevent overflows on SNR calculus (bsc#1012628).
  - media: s5p-jpeg: prevent buffer overflows (bsc#1012628).
  - media: ar0521: don't overflow when checking PLL values
    (bsc#1012628).
  - media: mgb4: protect driver against spectre (bsc#1012628).
  - media: dvb-core: add missing buffer index check (bsc#1012628).
  - ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
    (bsc#1012628).
  - ASoC: stm32: spdifrx: fix dma channel release in
    stm32_spdifrx_remove (bsc#1012628).
  - thermal/of: support thermal zones w/o trips subnode
    (bsc#1012628).
  - tools/lib/thermal: Fix sampling handler context ptr
    (bsc#1012628).
  - ALSA: firewire-lib: fix return value on fail in
    amdtp_tscm_init() (bsc#1012628).
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
    (bsc#1012628).
  - media: adv7604: prevent underflow condition when reporting
    colorspace (bsc#1012628).
  - media: dvb_frontend: don't play tricks with underflow values
    (bsc#1012628).
  - media: dvbdev: prevent the risk of out of memory access
    (bsc#1012628).
  - media: stb0899_algo: initialize cfr before using it
    (bsc#1012628).
  - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
    (bsc#1012628).
  - drivers: net: ionic: add missed debugfs cleanup to ionic_probe()
    error path (bsc#1012628).
  - net/smc: do not leave a dangling sk pointer in __smc_create()
    (bsc#1012628).
  - rxrpc: Fix missing locking causing hanging calls (bsc#1012628).
  - net: arc: rockchip: fix emac mdio node support (bsc#1012628).
  - net: arc: fix the device for dma_map_single/dma_unmap_single
    (bsc#1012628).
  - virtio_net: Update rss when set queue (bsc#1012628).
  - virtio_net: Sync rss config to device when virtnet_probe
    (bsc#1012628).
  - virtio_net: Add hash_key_length check (bsc#1012628).
  - virtio_net: Support dynamic rss indirection table size
    (bsc#1012628).
  - netfilter: nf_tables: wait for rcu grace period on net_device
    removal (bsc#1012628).
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single
    irq case (bsc#1012628).
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (bsc#1012628).
  - net: hns3: fix kernel crash when uninstalling driver
    (bsc#1012628).
  - e1000e: Remove Meteor Lake SMBUS workarounds (bsc#1012628).
  - i40e: fix race condition by adding filter's intermediate sync
    state (bsc#1012628).
  - ice: change q_index variable type to s16 to store -1 value
    (bsc#1012628).
  - can: c_can: fix {rx,tx}_errors statistics (bsc#1012628).
  - net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine
    starts (bsc#1012628).
  - net: enetc: allocate vf_state during PF probes (bsc#1012628).
  - sctp: properly validate chunk size in sctp_sf_ootb()
    (bsc#1012628).
  - dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property
    value (bsc#1012628).
  - net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd
    tracepoint (bsc#1012628).
  - net: enetc: set MAC address to the VF net_device (bsc#1012628).
  - regulator: rtq2208: Fix uninitialized use of regulator_config
    (bsc#1012628).
  - security/keys: fix slab-out-of-bounds in key_task_permission
    (bsc#1012628).
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping
    (bsc#1012628).
  - NFS: Further fixes to attribute delegation a/mtime changes
    (bsc#1012628).
  - NFS: Fix attribute delegation behaviour on exclusive create
    (bsc#1012628).
  - NFSv3: only use NFS timeout for MOUNT when protocols are
    compatible (bsc#1012628).
  - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (bsc#1012628).
  - platform/x86/amd/pmc: Detect when STB is not available
    (bsc#1012628).
  - HID: core: zero-initialize the report buffer (bsc#1012628).
  - arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
    (bsc#1012628).
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
    (bsc#1012628).
  - ARM: dts: rockchip: Fix the spi controller on rk3036
    (bsc#1012628).
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi
    (bsc#1012628).
  - ARM: dts: rockchip: fix rk3036 acodec node (bsc#1012628).
  - arm64: dts: rockchip: remove orphaned pinctrl-names from
    pinephone pro (bsc#1012628).
  - firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM
    bridge enabling (bsc#1012628).
  - firmware: arm_scmi: Fix slab-use-after-free in
    scmi_bus_notifier() (bsc#1012628).
  - arm64: dts: imx8mp-phyboard-pollux: Set Video PLL1 frequency
    to 506.8 MHz (bsc#1012628).
  - arm64: dts: imx8mp: correct sdhc ipg clk (bsc#1012628).
  - arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs (bsc#1012628).
  - arm64: dts: qcom: sm8450 fix PIPE clock specification for pcie1
    (bsc#1012628).
  - arm64: dts: rockchip: remove num-slots property from
    rk3328-nanopi-r2s-plus (bsc#1012628).
  - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
    (bsc#1012628).
  - arm64: dts: rockchip: Remove #cooling-cells from fan on
    Theobroma lion (bsc#1012628).
  - arm64: dts: rockchip: Remove undocumented supports-emmc property
    (bsc#1012628).
  - arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
    (bsc#1012628).
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
    (bsc#1012628).
  - arm64: dts: rockchip: Fix bluetooth properties on rk3566 box
    demo (bsc#1012628).
  - arm64: dts: rockchip: Drop regulator-init-microvolt from two
    boards (bsc#1012628).
  - arm64: dts: rockchip: fix i2c2 pinctrl-names property on
    anbernic-rg353p/v (bsc#1012628).
  - arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
    (bsc#1012628).
  - arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
    (bsc#1012628).
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
    (bsc#1012628).
  - EDAC/qcom: Make irq configuration optional (bsc#1012628).
  - firmware: qcom: scm: fix a NULL-pointer dereference
    (bsc#1012628).
  - arm64: dts: rockchip: Designate Turing RK1's system power
    controller (bsc#1012628).
  - arm64: dts: rockchip: Start cooling maps numbering from zero
    on ROCK 5B (bsc#1012628).
  - arm64: dts: rockchip: Move L3 cache outside CPUs in RK3588(S)
    SoC dtsi (bsc#1012628).
  - arm64: dts: rockchip: Fix rt5651 compatible value on
    rk3399-sapphire-excavator (bsc#1012628).
  - arm64: dts: rockchip: Fix rt5651 compatible value on
    rk3399-eaidk-610 (bsc#1012628).
  - commit 099023b
  - Mass CVE update.
  - Update
    patches.kernel.org/6.11.1-008-Bluetooth-btintel_pcie-Allocate-memory-for-dri.patch
    (bsc#1012628 CVE-2024-46869 bsc#1231173).
  - Update
    patches.kernel.org/6.11.1-012-USB-usbtmc-prevent-kernel-usb-infoleak.patch
    (bsc#1012628 CVE-2024-47671 bsc#1231541).
  - Update
    patches.kernel.org/6.11.2-001-wifi-ath11k-use-work-queue-to-process-beacon-t.patch
    (bsc#1012628 CVE-2024-47724 bsc#1232073).
  - Update
    patches.kernel.org/6.11.2-003-wifi-rtw88-always-wait-for-both-firmware-loadi.patch
    (bsc#1012628 CVE-2024-47718 bsc#1232015).
  - Update
    patches.kernel.org/6.11.2-008-crypto-iaa-Fix-potential-use-after-free-bug.patch
    (bsc#1012628 CVE-2024-47732 bsc#1232109).
  - Update
    patches.kernel.org/6.11.2-024-wifi-rtw89-remove-unused-C2H-event-ID-RTW89_MA.patch
    (bsc#1012628 CVE-2024-47721 bsc#1232052).
  - Update
    patches.kernel.org/6.11.2-027-RISC-V-KVM-Don-t-zero-out-PMU-snapshot-area-be.patch
    (bsc#1012628 CVE-2024-47717 bsc#1232041).
  - Update
    patches.kernel.org/6.11.2-033-ARM-9410-1-vfp-Use-asm-volatile-in-fmrx-fmxr-m.patch
    (bsc#1012628 CVE-2024-47716 bsc#1232053).
  - Update
    patches.kernel.org/6.11.2-034-powercap-intel_rapl-Fix-off-by-one-in-get_rpi.patch
    (bsc#1012628 CVE-2024-49862 bsc#1231871).
  - Update
    patches.kernel.org/6.11.2-040-drivers-perf-Fix-ali_drw_pmu-driver-interrupt-.patch
    (bsc#1012628 CVE-2024-47731 bsc#1232117).
  - Update
    patches.kernel.org/6.11.2-046-wifi-mac80211-don-t-use-rate-mask-for-offchann.patch
    (bsc#1012628 CVE-2024-47738 bsc#1232114).
  - Update
    patches.kernel.org/6.11.2-048-wifi-iwlwifi-mvm-set-the-cipher-for-secured-ND.patch
    (bsc#1012628 CVE-2024-49857 bsc#1232203).
  - Update
    patches.kernel.org/6.11.2-073-wifi-mt76-mt7915-fix-oops-on-non-dbdc-mt7986.patch
    (bsc#1012628 CVE-2024-47715 bsc#1231860).
  - Update
    patches.kernel.org/6.11.2-075-wifi-mt76-mt7996-use-hweight16-to-get-correct-.patch
    (bsc#1012628 CVE-2024-47714 bsc#1232018).
  - Update
    patches.kernel.org/6.11.2-080-x86-sgx-Fix-deadlock-in-SGX-NUMA-node-search.patch
    (bsc#1012628 CVE-2024-49856 bsc#1232202).
  - Update
    patches.kernel.org/6.11.2-085-crypto-hisilicon-qm-inject-error-before-stoppi.patch
    (bsc#1012628 CVE-2024-47730 bsc#1232075).
  - Update
    patches.kernel.org/6.11.2-093-wifi-mac80211-use-two-phase-skb-reclamation-in.patch
    (bsc#1012628 CVE-2024-47713 bsc#1232016).
  - Update
    patches.kernel.org/6.11.2-094-wifi-wilc1000-fix-potential-RCU-dereference-is.patch
    (bsc#1012628 CVE-2024-47712 bsc#1232017).
  - Update
    patches.kernel.org/6.11.2-099-af_unix-Don-t-return-OOB-skb-in-manage_oob.patch
    (bsc#1012628 CVE-2024-47711 bsc#1232054).
  - Update
    patches.kernel.org/6.11.2-102-sock_map-Add-a-cond_resched-in-sock_hash_free.patch
    (bsc#1012628 CVE-2024-47710 bsc#1232049).
  - Update
    patches.kernel.org/6.11.2-103-can-bcm-Clear-bo-bcm_proc_read-after-remove_pr.patch
    (bsc#1012628 CVE-2024-47709 bsc#1232048).
  - Update
    patches.kernel.org/6.11.2-112-netkit-Assign-missing-bpf_net_context.patch
    (bsc#1012628 CVE-2024-47708 bsc#1231933).
  - Update
    patches.kernel.org/6.11.2-117-ipv6-avoid-possible-NULL-deref-in-rt6_uncached.patch
    (bsc#1012628 CVE-2024-47707 bsc#1231935).
  - Update
    patches.kernel.org/6.11.2-119-nbd-fix-race-between-timeout-and-normal-comple.patch
    (bsc#1012628 CVE-2024-49855 bsc#1232195).
  - Update
    patches.kernel.org/6.11.2-120-block-bfq-fix-possible-UAF-for-bfqq-bic-with-m.patch
    (bsc#1012628 CVE-2024-47706 bsc#1231942).
  - Update
    patches.kernel.org/6.11.2-127-erofs-handle-overlapped-pclusters-out-of-craft.patch
    (bsc#1012628 CVE-2024-47736 bsc#1232112).
  - Update
    patches.kernel.org/6.11.2-128-block-bfq-fix-uaf-for-accessing-waker_bfqq-aft.patch
    (bsc#1012628 CVE-2024-49854 bsc#1232193).
  - Update
    patches.kernel.org/6.11.2-132-block-fix-potential-invalid-pointer-dereferenc.patch
    (bsc#1012628 CVE-2024-47705 bsc#1231872).
  - Update
    patches.kernel.org/6.11.2-136-firmware-arm_scmi-Fix-double-free-in-OPTEE-tra.patch
    (bsc#1012628 CVE-2024-49853 bsc#1232192).
  - Update
    patches.kernel.org/6.11.2-201-drm-amd-display-Check-link_res-hpo_dp_link_enc.patch
    (bsc#1012628 CVE-2024-47704 bsc#1231944).
  - Update
    patches.kernel.org/6.11.2-202-drm-amd-display-Add-null-check-for-set_output_.patch
    (bsc#1012628 CVE-2024-47720 bsc#1232043).
  - Update
    patches.kernel.org/6.11.2-216-drm-xe-Use-reserved-copy-engine-for-user-binds.patch
    (bsc#1012628 CVE-2024-47729 bsc#1232077).
  - Update
    patches.kernel.org/6.11.2-219-scsi-elx-libefc-Fix-potential-use-after-free-i.patch
    (bsc#1012628 CVE-2024-49852 bsc#1232819).
  - Update
    patches.kernel.org/6.11.2-220-jfs-fix-out-of-bounds-in-dbNextAG-and-diAlloc.patch
    (bsc#1012628 CVE-2024-47723 bsc#1232050).
  - Update
    patches.kernel.org/6.11.2-253-tpm-Clean-up-TPM-space-after-command-failure.patch
    (bsc#1012628 CVE-2024-49851 bsc#1232134).
  - Update
    patches.kernel.org/6.11.2-257-bpf-lsm-Add-check-for-BPF-LSM-return-value.patch
    (bsc#1012628 CVE-2024-47703 bsc#1231946).
  - Update
    patches.kernel.org/6.11.2-263-bpf-Fail-verification-for-sign-extension-of-pa.patch
    (bsc#1012628 CVE-2024-47702 bsc#1231924).
  - Update
    patches.kernel.org/6.11.2-297-bpf-correctly-handle-malformed-BPF_CORE_TYPE_I.patch
    (bsc#1012628 CVE-2024-49850 bsc#1232189).
  - Update
    patches.kernel.org/6.11.2-312-ext4-avoid-OOB-when-system.data-xattr-changes-.patch
    (bsc#1012628 CVE-2024-47701 bsc#1231920).
  - Update
    patches.kernel.org/6.11.2-313-ext4-check-stripe-size-compatibility-on-remoun.patch
    (bsc#1012628 CVE-2024-47700 bsc#1231919).
  - Update
    patches.kernel.org/6.11.2-315-nilfs2-fix-potential-null-ptr-deref-in-nilfs_b.patch
    (bsc#1012628 CVE-2024-47699 bsc#1231916).
  - Update
    patches.kernel.org/6.11.2-317-nilfs2-fix-potential-oob-read-in-nilfs_btree_c.patch
    (bsc#1012628 CVE-2024-47757 bsc#1232187).
  - Update
    patches.kernel.org/6.11.2-320-bpf-Fix-helper-writes-to-read-only-maps.patch
    (bsc#1012628 CVE-2024-49861 bsc#1232254).
  - Update
    patches.kernel.org/6.11.2-322-bpf-Zero-former-ARG_PTR_TO_-LONG-INT-args-in-c.patch
    (bsc#1012628 CVE-2024-47728 bsc#1232076).
  - Update
    patches.kernel.org/6.11.2-364-drivers-media-dvb-frontends-rtl2832-fix-an-out.patch
    (bsc#1012628 CVE-2024-47698 bsc#1231859).
  - Update
    patches.kernel.org/6.11.2-365-drivers-media-dvb-frontends-rtl2830-fix-an-out.patch
    (bsc#1012628 CVE-2024-47697 bsc#1231858).
  - Update
    patches.kernel.org/6.11.2-369-PCI-keystone-Fix-if-statement-expression-in-ks.patch
    (bsc#1012628 CVE-2024-47756 bsc#1232185).
  - Update
    patches.kernel.org/6.11.2-381-RDMA-iwcm-Fix-WARNING-at_kernel-workqueue.c-ch.patch
    (bsc#1012628 CVE-2024-47696 bsc#1231864).
  - Update
    patches.kernel.org/6.11.2-386-media-mediatek-vcodec-Fix-H264-multi-stateless.patch
    (bsc#1012628 CVE-2024-47754 bsc#1232131).
  - Update
    patches.kernel.org/6.11.2-387-media-mediatek-vcodec-Fix-VP8-stateless-decode.patch
    (bsc#1012628 CVE-2024-47753 bsc#1231868).
  - Update
    patches.kernel.org/6.11.2-388-media-mediatek-vcodec-Fix-H264-stateless-decod.patch
    (bsc#1012628 CVE-2024-47752 bsc#1232130).
  - Update
    patches.kernel.org/6.11.2-391-RDMA-rtrs-clt-Reset-cid-to-con_num-1-to-stay-i.patch
    (bsc#1012628 CVE-2024-47695 bsc#1231931).
  - Update
    patches.kernel.org/6.11.2-398-IB-mlx5-Fix-UMR-pd-cleanup-on-error-flow-of-dr.patch
    (bsc#1012628 CVE-2024-47694 bsc#1232014).
  - Update
    patches.kernel.org/6.11.2-399-IB-core-Fix-ib_cache_setup_one-error-flow-clea.patch
    (bsc#1012628 CVE-2024-47693 bsc#1232013).
  - Update
    patches.kernel.org/6.11.2-402-PCI-kirin-Fix-buffer-overflow-in-kirin_pcie_pa.patch
    (bsc#1012628 CVE-2024-47751 bsc#1232127).
  - Update
    patches.kernel.org/6.11.2-410-RDMA-hns-Fix-Use-After-Free-of-rsv_qp-on-HIP08.patch
    (bsc#1012628 CVE-2024-47750 bsc#1232182).
  - Update
    patches.kernel.org/6.11.2-412-RDMA-hns-Fix-spin_unlock_irqrestore-called-wit.patch
    (bsc#1012628 CVE-2024-47735 bsc#1232111).
  - Update
    patches.kernel.org/6.11.2-422-RDMA-cxgb4-Added-NULL-check-for-lookup_atid.patch
    (bsc#1012628 CVE-2024-47749 bsc#1232180).
  - Update
    patches.kernel.org/6.11.2-424-ntb-intel-Fix-the-NULL-vs-IS_ERR-bug-for-debug.patch
    (bsc#1012628 CVE-2023-52917 bsc#1231849).
  - Update
    patches.kernel.org/6.11.2-427-nfsd-call-cache_put-if-xdr_reserve_space-retur.patch
    (bsc#1012628 CVE-2024-47737 bsc#1232056).
  - Update
    patches.kernel.org/6.11.2-428-nfsd-return-EINVAL-when-namelen-is-0.patch
    (bsc#1012628 CVE-2024-47692 bsc#1231857).
  - Update
    patches.kernel.org/6.11.2-439-f2fs-fix-to-avoid-use-after-free-in-f2fs_stop_.patch
    (bsc#1012628 CVE-2024-47691 bsc#1232012).
  - Update
    patches.kernel.org/6.11.2-442-f2fs-get-rid-of-online-repaire-on-corrupted-di.patch
    (bsc#1012628 CVE-2024-47690 bsc#1232011).
  - Update
    patches.kernel.org/6.11.2-443-f2fs-fix-to-don-t-set-SB_RDONLY-in-f2fs_handle.patch
    (bsc#1012628 CVE-2024-47689 bsc#1232010).
  - Update
    patches.kernel.org/6.11.2-460-driver-core-Fix-a-potential-null-ptr-deref-in-.patch
    (bsc#1012628 CVE-2024-47688 bsc#1232009).
  - Update
    patches.kernel.org/6.11.2-469-vdpa-mlx5-Fix-invalid-mr-resource-destroy.patch
    (bsc#1012628 CVE-2024-47687 bsc#1232003).
  - Update
    patches.kernel.org/6.11.2-470-vhost_vdpa-assign-irq-bypass-producer-token-co.patch
    (bsc#1012628 CVE-2024-47748 bsc#1232174).
  - Update
    patches.kernel.org/6.11.2-471-ep93xx-clock-Fix-off-by-one-in-ep93xx_div_reca.patch
    (bsc#1012628 CVE-2024-47686 bsc#1232000).
  - Update
    patches.kernel.org/6.11.2-477-netfilter-nf_reject_ipv6-fix-nf_reject_ip6_tcp.patch
    (bsc#1012628 CVE-2024-47685 bsc#1231998).
  - Update
    patches.kernel.org/6.11.2-478-net-seeq-Fix-use-after-free-vulnerability-in-e.patch
    (bsc#1012628 CVE-2024-47747 bsc#1232145).
  - Update
    patches.kernel.org/6.11.2-480-tcp-check-skb-is-non-NULL-in-tcp_rto_delta_us.patch
    (bsc#1012628 CVE-2024-47684 bsc#1231987).
  - Update
    patches.kernel.org/6.11.2-486-bonding-Fix-unnecessary-warnings-and-logs-from.patch
    (bsc#1012628 CVE-2024-47734 bsc#1232055).
  - Update
    patches.kernel.org/6.11.2-497-fuse-use-exclusive-lock-when-FUSE_I_CACHE_IO_M.patch
    (bsc#1012628 CVE-2024-47746 bsc#1232137).
  - Update
    patches.kernel.org/6.11.2-499-mm-call-the-security_mmap_file-LSM-hook-in-rem.patch
    (bsc#1012628 CVE-2024-47745 bsc#1232135).
  - Update
    patches.kernel.org/6.11.2-528-iommufd-Protect-against-overflow-of-ALIGN-duri.patch
    (bsc#1012628 CVE-2024-47719 bsc#1231865).
  - Update
    patches.kernel.org/6.11.2-537-KVM-Use-dedicated-mutex-to-protect-kvm_usage_c.patch
    (bsc#1012628 CVE-2024-47744 bsc#1232132).
  - Update
    patches.kernel.org/6.11.2-538-drm-amd-display-Skip-Recompute-DSC-Params-if-n.patch
    (bsc#1012628 CVE-2024-47683 bsc#1231975).
  - Update
    patches.kernel.org/6.11.2-562-x86-tdx-Fix-in-kernel-MMIO-check.patch
    (bsc#1012628 CVE-2024-47727 bsc#1232116).
  - Update
    patches.kernel.org/6.11.2-563-KEYS-prevent-NULL-pointer-dereference-in-find_.patch
    (bsc#1012628 CVE-2024-47743 bsc#1232129).
  - Update
    patches.kernel.org/6.11.2-569-scsi-sd-Fix-off-by-one-error-in-sd_read_block_.patch
    (bsc#1012628 CVE-2024-47682 bsc#1231856).
  - Update
    patches.kernel.org/6.11.2-592-firmware_loader-Block-path-traversal.patch
    (bsc#1012628 CVE-2024-47742 bsc#1232126).
  - Update
    patches.kernel.org/6.11.2-603-ACPI-sysfs-validate-return-type-of-_STR-method.patch
    (bsc#1012628 CVE-2024-49860 bsc#1231861).
  - Update
    patches.kernel.org/6.11.2-606-efistub-tpm-Use-ACPI-reclaim-memory-for-event-.patch
    (bsc#1012628 CVE-2024-49858 bsc#1232251).
  - Update
    patches.kernel.org/6.11.2-615-wifi-mt76-mt7996-fix-NULL-pointer-dereference-.patch
    (bsc#1012628 CVE-2024-47681 bsc#1231855).
  - Update
    patches.kernel.org/6.11.2-625-btrfs-fix-race-setting-file-private-on-concurr.patch
    (bsc#1012628 CVE-2024-47741 bsc#1231869).
  - Update
    patches.kernel.org/6.11.2-628-f2fs-fix-to-wait-dio-completion.patch
    (bsc#1012628 CVE-2024-47726 bsc#1232113).
  - Update
    patches.kernel.org/6.11.2-632-f2fs-Require-FMODE_WRITE-for-atomic-write-ioct.patch
    (bsc#1012628 CVE-2024-47740 bsc#1231867).
  - Update
    patches.kernel.org/6.11.2-633-f2fs-check-discard-support-for-conventional-zo.patch
    (bsc#1012628 CVE-2024-47680 bsc#1231970).
  - Update
    patches.kernel.org/6.11.2-634-f2fs-fix-to-check-atomic_file-in-f2fs-ioctl-in.patch
    (bsc#1012628 CVE-2024-49859 bsc#1232252).
  - Update
    patches.kernel.org/6.11.2-644-vfs-fix-race-between-evice_inodes-and-find_ino.patch
    (bsc#1012628 CVE-2024-47679 bsc#1231930).
  - Update
    patches.kernel.org/6.11.2-645-netfs-Delete-subtree-of-fs-netfs-when-netfs-mo.patch
    (bsc#1012628 CVE-2024-47733 bsc#1232110).
  - Update
    patches.kernel.org/6.11.2-649-icmp-change-the-order-of-rate-limits.patch
    (bsc#1012628 CVE-2024-47678 bsc#1231854).
  - Update
    patches.kernel.org/6.11.2-653-padata-use-integer-wrap-around-to-prevent-dead.patch
    (bsc#1012628 CVE-2024-47739 bsc#1232124).
  - Update
    patches.kernel.org/6.11.2-677-exfat-resolve-memory-leak-from-exfat_create_up.patch
    (bsc#1012628 CVE-2024-47677 bsc#1231853).
  - Update
    patches.kernel.org/6.11.2-686-mm-hugetlb.c-fix-UAF-of-vma-in-hugetlb-fault-p.patch
    (bsc#1012628 CVE-2024-47676 bsc#1231927).
  - Update
    patches.kernel.org/6.11.2-694-bpf-Fix-use-after-free-in-bpf_uprobe_multi_lin.patch
    (bsc#1012628 CVE-2024-47675 bsc#1231926).
  - Update
    patches.kernel.org/6.11.3-001-static_call-Handle-module-init-failure-correct.patch
    (bsc#1012628 CVE-2024-50002 bsc#1232083).
  - Update
    patches.kernel.org/6.11.3-002-static_call-Replace-pointless-WARN_ON-in-stati.patch
    (bsc#1012628 CVE-2024-49954 bsc#1232155).
  - Update
    patches.kernel.org/6.11.3-014-mailbox-bcm2835-Fix-timeout-during-suspend-mod.patch
    (bsc#1012628 CVE-2024-49963 bsc#1232147).
  - Update
    patches.kernel.org/6.11.3-016-ceph-remove-the-incorrect-Fw-reference-check-w.patch
    (bsc#1012628 CVE-2024-50179 bsc#1233123).
  - Update
    patches.kernel.org/6.11.3-020-net-mlx5-Fix-error-path-in-multi-packet-WQE-tr.patch
    (bsc#1012628 CVE-2024-50001 bsc#1232084).
  - Update
    patches.kernel.org/6.11.3-022-net-mlx5e-Fix-NULL-deref-in-mlx5e_tir_builder_.patch
    (bsc#1012628 CVE-2024-50000 bsc#1232085).
  - Update
    patches.kernel.org/6.11.3-024-net-mlx5e-Fix-crash-caused-by-calling-__xfrm_s.patch
    (bsc#1012628 CVE-2024-49953 bsc#1232156).
  - Update
    patches.kernel.org/6.11.3-029-netfilter-nf_tables-prevent-nf_skb_duplicated-.patch
    (bsc#1012628 CVE-2024-49952 bsc#1232157).
  - Update
    patches.kernel.org/6.11.3-031-Bluetooth-MGMT-Fix-possible-crash-on-mgmt_inde.patch
    (bsc#1012628 CVE-2024-49951 bsc#1232158).
  - Update
    patches.kernel.org/6.11.3-032-Bluetooth-L2CAP-Fix-uaf-in-l2cap_connect.patch
    (bsc#1012628 CVE-2024-49950 bsc#1232159).
  - Update
    patches.kernel.org/6.11.3-035-afs-Fix-the-setting-of-the-server-responding-f.patch
    (bsc#1012628 CVE-2024-49999 bsc#1232086).
  - Update
    patches.kernel.org/6.11.3-036-net-dsa-improve-shutdown-sequence.patch
    (bsc#1012628 CVE-2024-49998 bsc#1232087).
  - Update
    patches.kernel.org/6.11.3-039-net-ethernet-lantiq_etop-fix-memory-disclosure.patch
    (bsc#1012628 CVE-2024-49997 bsc#1232088).
  - Update
    patches.kernel.org/6.11.3-042-net-avoid-potential-underflow-in-qdisc_pkt_len.patch
    (bsc#1012628 CVE-2024-49949 bsc#1232160).
  - Update
    patches.kernel.org/6.11.3-043-net-add-more-sanity-checks-to-qdisc_pkt_len_in.patch
    (bsc#1012628 CVE-2024-49948 bsc#1232161).
  - Update
    patches.kernel.org/6.11.3-047-net-test-for-not-too-small-csum_start-in-virti.patch
    (bsc#1012628 CVE-2024-49947 bsc#1232162).
  - Update
    patches.kernel.org/6.11.3-048-ppp-do-not-assume-bh-is-held-in-ppp_channel_br.patch
    (bsc#1012628 CVE-2024-49946 bsc#1232164).
  - Update
    patches.kernel.org/6.11.3-051-net-ncsi-Disable-the-ncsi-work-before-freeing-.patch
    (bsc#1012628 CVE-2024-49945 bsc#1232165).
  - Update
    patches.kernel.org/6.11.3-054-sctp-set-sk_state-back-to-CLOSED-if-autobind-f.patch
    (bsc#1012628 CVE-2024-49944 bsc#1232166).
  - Update
    patches.kernel.org/6.11.3-056-drm-panthor-Fix-race-when-converting-group-han.patch
    (bsc#1012628 CVE-2024-50174 bsc#1233093).
  - Update
    patches.kernel.org/6.11.3-066-ASoC-Intel-soc-acpi-intel-rpl-match-add-missin.patch
    (bsc#1012628 CVE-2024-50011 bsc#1232081).
  - Update
    patches.kernel.org/6.11.3-071-drm-xe-guc_submit-add-missing-locking-in-wedge.patch
    (bsc#1012628 CVE-2024-49943 bsc#1232167).
  - Update
    patches.kernel.org/6.11.3-073-drm-xe-Prevent-null-pointer-access-in-xe_migra.patch
    (bsc#1012628 CVE-2024-49942 bsc#1232168).
  - Update
    patches.kernel.org/6.11.3-074-cifs-Fix-buffer-overflow-when-parsing-NFS-repa.patch
    (bsc#1012628 CVE-2024-49996 bsc#1232089).
  - Update
    patches.kernel.org/6.11.3-076-gpiolib-Fix-potential-NULL-pointer-dereference.patch
    (bsc#1012628 CVE-2024-49941 bsc#1232169).
  - Update
    patches.kernel.org/6.11.3-084-l2tp-prevent-possible-tunnel-refcount-underflo.patch
    (bsc#1012628 CVE-2024-49940 bsc#1232812).
  - Update
    patches.kernel.org/6.11.3-086-wifi-rtw89-avoid-to-add-interface-to-list-twic.patch
    (bsc#1012628 CVE-2024-49939 bsc#1232381).
  - Update
    patches.kernel.org/6.11.3-087-wifi-ath9k_htc-Use-__skb_set_length-for-resett.patch
    (bsc#1012628 CVE-2024-49938 bsc#1232552).
  - Update
    patches.kernel.org/6.11.3-095-wifi-cfg80211-Set-correct-chandef-when-startin.patch
    (bsc#1012628 CVE-2024-49937 bsc#1232427).
  - Update
    patches.kernel.org/6.11.3-096-net-xen-netback-prevent-UAF-in-xenvif_flush_ha.patch
    (bsc#1012628 CVE-2024-49936 bsc#1232424).
  - Update
    patches.kernel.org/6.11.3-100-ACPI-PAD-fix-crash-in-exit_round_robin.patch
    (bsc#1012628 CVE-2024-49935 bsc#1232370).
  - Update
    patches.kernel.org/6.11.3-103-exec-don-t-WARN-for-racy-path_noexec-check.patch
    (bsc#1012628 CVE-2024-50010 bsc#1232388).
  - Update
    patches.kernel.org/6.11.3-104-fs-inode-Prevent-dump_mapping-accessing-invali.patch
    (bsc#1012628 CVE-2024-49934 bsc#1232387).
  - Update
    patches.kernel.org/6.11.3-112-blk_iocost-fix-more-out-of-bound-shifts.patch
    (bsc#1012628 CVE-2024-49933 bsc#1232368).
  - Update
    patches.kernel.org/6.11.3-113-btrfs-don-t-readahead-the-relocation-inode-on-.patch
    (bsc#1012628 CVE-2024-49932 bsc#1232376).
  - Update
    patches.kernel.org/6.11.3-114-wifi-ath12k-fix-array-out-of-bound-access-in-S.patch
    (bsc#1012628 CVE-2024-49931 bsc#1232275).
  - Update
    patches.kernel.org/6.11.3-115-wifi-ath11k-fix-array-out-of-bound-access-in-S.patch
    (bsc#1012628 CVE-2024-49930 bsc#1232260).
  - Update
    patches.kernel.org/6.11.3-121-ACPICA-check-null-return-of-ACPI_ALLOCATE_ZERO.patch
    (bsc#1012628 CVE-2024-49962 bsc#1232314).
  - Update
    patches.kernel.org/6.11.3-122-tipc-guard-against-string-buffer-overrun.patch
    (bsc#1012628 CVE-2024-49995 bsc#1232432).
  - Update
    patches.kernel.org/6.11.3-139-wifi-iwlwifi-mvm-avoid-NULL-pointer-dereferenc.patch
    (bsc#1012628 CVE-2024-49929 bsc#1232253).
  - Update
    patches.kernel.org/6.11.3-150-block-fix-integer-overflow-in-BLKSECDISCARD.patch
    (bsc#1012628 CVE-2024-49994 bsc#1225770).
  - Update
    patches.kernel.org/6.11.3-151-cpufreq-amd-pstate-add-check-for-cpufreq_cpu_g.patch
    (bsc#1012628 CVE-2024-50009 bsc#1232318).
  - Update
    patches.kernel.org/6.11.3-152-cpufreq-loongson3-Use-raw_smp_processor_id-in-.patch
    (bsc#1012628 CVE-2024-50178 bsc#1233121).
  - Update
    patches.kernel.org/6.11.3-155-wifi-rtw89-avoid-reading-out-of-bounds-when-lo.patch
    (bsc#1012628 CVE-2024-49928 bsc#1232250).
  - Update
    patches.kernel.org/6.11.3-158-net-napi-Prevent-overflow-of-napi_defer_hard_i.patch
    (bsc#1012628 CVE-2024-50018 bsc#1232419).
  - Update
    patches.kernel.org/6.11.3-162-wifi-mwifiex-Fix-memcpy-field-spanning-write-w.patch
    (bsc#1012628 CVE-2024-50008 bsc#1232317).
  - Update
    patches.kernel.org/6.11.3-166-x86-ioapic-Handle-allocation-failures-graceful.patch
    (bsc#1012628 CVE-2024-49927 bsc#1232249).
  - Update
    patches.kernel.org/6.11.3-180-x86-mm-ident_map-Use-gbpages-only-where-full-G.patch
    (bsc#1012628 CVE-2024-50017 bsc#1232312).
  - Update
    patches.kernel.org/6.11.3-181-ALSA-asihpi-Fix-potential-OOB-array-access.patch
    (bsc#1012628 CVE-2024-50007 bsc#1232394).
  - Update
    patches.kernel.org/6.11.3-187-rcu-tasks-Fix-access-non-existent-percpu-rtpcp.patch
    (bsc#1012628 CVE-2024-49926 bsc#1232247).
  - Update
    patches.kernel.org/6.11.3-189-fbdev-efifb-Register-sysfs-groups-through-driv.patch
    (bsc#1012628 CVE-2024-49925 bsc#1232224).
  - Update
    patches.kernel.org/6.11.3-190-fbdev-pxafb-Fix-possible-use-after-free-in-pxa.patch
    (bsc#1012628 CVE-2024-49924 bsc#1232364).
  - Update
    patches.kernel.org/6.11.3-200-drm-stm-Avoid-use-after-free-issues-with-crtc-.patch
    (bsc#1012628 CVE-2024-49992 bsc#1232430).
  - Update
    patches.kernel.org/6.11.3-201-drm-amd-display-Pass-non-null-to-dcn20_validat.patch
    (bsc#1012628 CVE-2024-49923 bsc#1232361).
  - Update
    patches.kernel.org/6.11.3-202-drm-amd-display-Check-null-pointers-before-usi.patch
    (bsc#1012628 CVE-2024-49922 bsc#1232374).
  - Update
    patches.kernel.org/6.11.3-203-drm-amd-display-Check-null-pointers-before-use.patch
    (bsc#1012628 CVE-2024-49921 bsc#1232371).
  - Update
    patches.kernel.org/6.11.3-204-drm-amd-display-Check-null-pointers-before-mul.patch
    (bsc#1012628 CVE-2024-49920 bsc#1232313).
  - Update
    patches.kernel.org/6.11.3-206-drm-amdkfd-amdkfd_free_gtt_mem-clear-the-corre.patch
    (bsc#1012628 CVE-2024-49991 bsc#1232282).
  - Update
    patches.kernel.org/6.11.3-207-drm-amd-display-Add-null-check-for-head_pipe-i.patch
    (bsc#1012628 CVE-2024-49919 bsc#1231968).
  - Update
    patches.kernel.org/6.11.3-208-drm-amd-display-Add-null-check-for-head_pipe-i.patch
    (bsc#1012628 CVE-2024-49918 bsc#1231967).
  - Update
    patches.kernel.org/6.11.3-209-drm-amd-display-Add-NULL-check-for-clk_mgr-and.patch
    (bsc#1012628 CVE-2024-49917 bsc#1231965).
  - Update
    patches.kernel.org/6.11.3-210-drm-amd-display-Add-NULL-check-for-clk_mgr-and.patch
    (bsc#1012628 CVE-2024-49916 bsc#1231964).
  - Update
    patches.kernel.org/6.11.3-211-drm-amd-display-Add-NULL-check-for-clk_mgr-in-.patch
    (bsc#1012628 CVE-2024-49915 bsc#1231963).
  - Update
    patches.kernel.org/6.11.3-212-drm-xe-hdcp-Check-GSC-structure-validity.patch
    (bsc#1012628 CVE-2024-49990 bsc#1232484).
  - Update
    patches.kernel.org/6.11.3-213-drm-amd-display-Add-null-check-for-pipe_ctx-pl.patch
    (bsc#1012628 CVE-2024-49914 bsc#1232369).
  - Update
    patches.kernel.org/6.11.3-214-drm-amd-display-Add-null-check-for-top_pipe_to.patch
    (bsc#1012628 CVE-2024-49913 bsc#1232307).
  - Update
    patches.kernel.org/6.11.3-222-drm-amd-display-Handle-null-stream_status-in-p.patch
    (bsc#1012628 CVE-2024-49912 bsc#1232367).
  - Update
    patches.kernel.org/6.11.3-223-drm-amd-display-Add-NULL-check-for-function-po.patch
    (bsc#1012628 CVE-2024-49911 bsc#1232366).
  - Update
    patches.kernel.org/6.11.3-224-drm-amd-display-Add-NULL-check-for-function-po.patch
    (bsc#1012628 CVE-2024-49910 bsc#1232365).
  - Update
    patches.kernel.org/6.11.3-225-drm-amd-display-Add-NULL-check-for-function-po.patch
    (bsc#1012628 CVE-2024-49909 bsc#1232337).
  - Update
    patches.kernel.org/6.11.3-226-drm-amd-display-fix-a-UBSAN-warning-in-DML2.1.patch
    (bsc#1012628 CVE-2024-50177 bsc#1233115).
  - Update
    patches.kernel.org/6.11.3-227-drm-amd-display-Add-null-check-for-afb-in-amdg.patch
    (bsc#1012628 CVE-2024-49908 bsc#1232335).
  - Update
    patches.kernel.org/6.11.3-228-drm-amd-display-Check-null-pointers-before-usi.patch
    (bsc#1012628 CVE-2024-49907 bsc#1232334).
  - Update
    patches.kernel.org/6.11.3-229-drm-amd-display-Check-null-pointer-before-try-.patch
    (bsc#1012628 CVE-2024-49906 bsc#1232332).
  - Update
    patches.kernel.org/6.11.3-230-drm-amd-display-Add-null-check-for-afb-in-amdg.patch
    (bsc#1012628 CVE-2024-49905 bsc#1232357).
  - Update
    patches.kernel.org/6.11.3-232-drm-amd-display-fix-double-free-issue-during-a.patch
    (bsc#1012628 CVE-2024-49989 bsc#1232483).
  - Update
    patches.kernel.org/6.11.3-233-drm-amdgpu-add-list-empty-check-to-avoid-null-.patch
    (bsc#1012628 CVE-2024-49904 bsc#1232356).
  - Update
    patches.kernel.org/6.11.3-235-jfs-Fix-uaf-in-dbFreeBits.patch
    (bsc#1012628 CVE-2024-49903 bsc#1232362).
  - Update
    patches.kernel.org/6.11.3-236-jfs-check-if-leafidx-greater-than-num-leaves-p.patch
    (bsc#1012628 CVE-2024-49902 bsc#1232378).
  - Update
    patches.kernel.org/6.11.3-239-drm-msm-adreno-Assign-msm_gpu-pdev-earlier-to-.patch
    (bsc#1012628 CVE-2024-49901 bsc#1232305).
  - Update
    patches.kernel.org/6.11.3-240-jfs-Fix-uninit-value-access-of-new_ea-in-ea_bu.patch
    (bsc#1012628 CVE-2024-49900 bsc#1232359).
  - Update
    patches.kernel.org/6.11.3-250-drm-amd-display-Initialize-denominators-defaul.patch
    (bsc#1012628 CVE-2024-49899 bsc#1232358).
  - Update
    patches.kernel.org/6.11.3-251-drm-amd-display-Check-null-initialized-variabl.patch
    (bsc#1012628 CVE-2024-49898 bsc#1232222).
  - Update
    patches.kernel.org/6.11.3-252-drm-amd-display-Check-phantom_stream-before-it.patch
    (bsc#1012628 CVE-2024-49897 bsc#1232355).
  - Update
    patches.kernel.org/6.11.3-253-drm-amd-display-Check-stream-before-comparing-.patch
    (bsc#1012628 CVE-2024-49896 bsc#1232221).
  - Update
    patches.kernel.org/6.11.3-254-drm-amd-display-Deallocate-DML-memory-if-alloc.patch
    (bsc#1012628 CVE-2024-49972 bsc#1232315).
  - Update
    patches.kernel.org/6.11.3-255-drm-amd-display-Increase-array-size-of-dummy_b.patch
    (bsc#1012628 CVE-2024-49971 bsc#1232473).
  - Update
    patches.kernel.org/6.11.3-256-drm-amd-display-Fix-index-out-of-bounds-in-DCN.patch
    (bsc#1012628 CVE-2024-49895 bsc#1232352).
  - Update
    patches.kernel.org/6.11.3-257-drm-amd-display-Fix-index-out-of-bounds-in-deg.patch
    (bsc#1012628 CVE-2024-49894 bsc#1232354).
  - Update
    patches.kernel.org/6.11.3-258-drm-amd-display-Implement-bounds-check-for-str.patch
    (bsc#1012628 CVE-2024-49970 bsc#1232516).
  - Update
    patches.kernel.org/6.11.3-259-drm-amd-display-Fix-index-out-of-bounds-in-DCN.patch
    (bsc#1012628 CVE-2024-49969 bsc#1232519).
  - Update
    patches.kernel.org/6.11.3-263-drm-amd-display-Check-stream_status-before-it-.patch
    (bsc#1012628 CVE-2024-49893 bsc#1232350).
  - Update
    patches.kernel.org/6.11.3-264-drm-amd-display-Avoid-overflow-assignment-in-l.patch
    (bsc#1012628 CVE-2024-50016 bsc#1232420).
  - Update
    patches.kernel.org/6.11.3-265-drm-amd-display-Initialize-get_bytes_per_eleme.patch
    (bsc#1012628 CVE-2024-49892 bsc#1232220).
  - Update
    patches.kernel.org/6.11.3-269-scsi-lpfc-Validate-hdwq-pointers-before-derefe.patch
    (bsc#1012628 CVE-2024-49891 bsc#1232218).
  - Update
    patches.kernel.org/6.11.3-286-drm-amd-pm-ensure-the-fw_info-is-not-null-befo.patch
    (bsc#1012628 CVE-2024-49890 bsc#1232217).
  - Update
    patches.kernel.org/6.11.3-299-ksmbd-add-refcnt-to-ksmbd_conn-struct.patch
    (bsc#1012628 CVE-2024-49988 bsc#1232482).
  - Update
    patches.kernel.org/6.11.3-302-ext4-filesystems-without-casefold-feature-cann.patch
    (bsc#1012628 CVE-2024-49968 bsc#1232264).
  - Update
    patches.kernel.org/6.11.3-305-ext4-avoid-use-after-free-in-ext4_ext_show_lea.patch
    (bsc#1012628 CVE-2024-49889 bsc#1232215).
  - Update
    patches.kernel.org/6.11.3-306-ext4-fix-i_data_sem-unlock-order-in-ext4_ind_m.patch
    (bsc#1012628 CVE-2024-50006 bsc#1232442).
  - Update
    patches.kernel.org/6.11.3-309-bpftool-Fix-undefined-behavior-in-qsort-NULL-0.patch
    (bsc#1012628 CVE-2024-49987 bsc#1232258).
  - Update
    patches.kernel.org/6.11.3-310-bpf-Fix-a-sdiv-overflow-issue.patch
    (bsc#1012628 CVE-2024-49888 bsc#1232208).
  - Update
    patches.kernel.org/6.11.3-333-f2fs-fix-to-don-t-panic-system-for-no-free-seg.patch
    (bsc#1012628 CVE-2024-49887 bsc#1232206).
  - Update
    patches.kernel.org/6.11.3-343-platform-x86-x86-android-tablets-Fix-use-after.patch
    (bsc#1012628 CVE-2024-49986 bsc#1232093).
  - Update
    patches.kernel.org/6.11.3-344-platform-x86-ISST-Fix-the-KASAN-report-slab-ou.patch
    (bsc#1012628 CVE-2024-49886 bsc#1232196).
  - Update
    patches.kernel.org/6.11.3-346-i2c-stm32f7-Do-not-prepare-unprepare-clock-dur.patch
    (bsc#1012628 CVE-2024-49985 bsc#1232094).
  - Update
    patches.kernel.org/6.11.3-349-media-i2c-ar0521-Use-cansleep-version-of-gpiod.patch
    (bsc#1012628 CVE-2024-49961 bsc#1232148).
  - Update
    patches.kernel.org/6.11.3-362-mm-slub-avoid-zeroing-kmalloc-redzone.patch
    (bsc#1012628 CVE-2024-49885 bsc#1232197).
  - Update
    patches.kernel.org/6.11.3-365-drm-v3d-Prevent-out-of-bounds-access-in-perfor.patch
    (bsc#1012628 CVE-2024-49984 bsc#1232095).
  - Update
    patches.kernel.org/6.11.3-377-ext4-no-need-to-continue-when-the-number-of-en.patch
    (bsc#1012628 CVE-2024-49967 bsc#1232140).
  - Update
    patches.kernel.org/6.11.3-379-ext4-fix-slab-use-after-free-in-ext4_split_ext.patch
    (bsc#1012628 CVE-2024-49884 bsc#1232198).
  - Update
    patches.kernel.org/6.11.3-382-ext4-dax-fix-overflowing-extents-beyond-inode-.patch
    (bsc#1012628 CVE-2024-50015 bsc#1232079).
  - Update
    patches.kernel.org/6.11.3-384-ext4-drop-ppath-from-ext4_ext_replay_update_ex.patch
    (bsc#1012628 CVE-2024-49983 bsc#1232096).
  - Update
    patches.kernel.org/6.11.3-385-ext4-aovid-use-after-free-in-ext4_ext_insert_e.patch
    (bsc#1012628 CVE-2024-49883 bsc#1232199).
  - Update
    patches.kernel.org/6.11.3-386-ext4-fix-double-brelse-the-buffer-of-the-exten.patch
    (bsc#1012628 CVE-2024-49882 bsc#1232200).
  - Update
    patches.kernel.org/6.11.3-387-ext4-fix-timer-use-after-free-on-failed-mount.patch
    (bsc#1012628 CVE-2024-49960 bsc#1232395).
  - Update
    patches.kernel.org/6.11.3-388-ext4-fix-access-to-uninitialised-lock-in-fc-re.patch
    (bsc#1012628 CVE-2024-50014 bsc#1232446).
  - Update
    patches.kernel.org/6.11.3-389-ext4-update-orig_path-in-ext4_find_extent.patch
    (bsc#1012628 CVE-2024-49881 bsc#1232201).
  - Update
    patches.kernel.org/6.11.3-395-ext4-fix-off-by-one-issue-in-alloc_flex_gd.patch
    (bsc#1012628 CVE-2024-49880 bsc#1232205).
  - Update
    patches.kernel.org/6.11.3-403-drm-omapdrm-Add-missing-check-for-alloc_ordere.patch
    (bsc#1012628 CVE-2024-49879 bsc#1232349).
  - Update
    patches.kernel.org/6.11.3-404-resource-fix-region_intersects-vs-add_memory_d.patch
    (bsc#1012628 CVE-2024-49878 bsc#1232340).
  - Update
    patches.kernel.org/6.11.3-406-jbd2-stop-waiting-for-space-when-jbd2_cleanup_.patch
    (bsc#1012628 CVE-2024-49959 bsc#1232149).
  - Update
    patches.kernel.org/6.11.3-411-ocfs2-reserve-space-for-inline-xattr-before-at.patch
    (bsc#1012628 CVE-2024-49958 bsc#1232151).
  - Update
    patches.kernel.org/6.11.3-412-ocfs2-cancel-dqi_sync_work-before-freeing-oinf.patch
    (bsc#1012628 CVE-2024-49966 bsc#1232141).
  - Update
    patches.kernel.org/6.11.3-413-ocfs2-remove-unreasonable-unlock-in-ocfs2_read.patch
    (bsc#1012628 CVE-2024-49965 bsc#1232142).
  - Update
    patches.kernel.org/6.11.3-414-ocfs2-fix-null-ptr-deref-when-journal-load-fai.patch
    (bsc#1012628 CVE-2024-49957 bsc#1232152).
  - Update
    patches.kernel.org/6.11.3-415-ocfs2-fix-possible-null-ptr-deref-in-ocfs2_set.patch
    (bsc#1012628 CVE-2024-49877 bsc#1232339).
  - Update
    patches.kernel.org/6.11.3-421-drm-xe-fix-UAF-around-queue-destruction.patch
    (bsc#1012628 CVE-2024-49876 bsc#1232336).
  - Update
    patches.kernel.org/6.11.3-428-exfat-fix-memory-leak-in-exfat_load_bitmap.patch
    (bsc#1012628 CVE-2024-50013 bsc#1232080).
  - Update
    patches.kernel.org/6.11.3-432-nfsd-map-the-EBADMSG-to-nfserr_io-to-avoid-war.patch
    (bsc#1012628 CVE-2024-49875 bsc#1232333).
  - Update
    patches.kernel.org/6.11.3-434-i3c-master-svc-Fix-use-after-free-vulnerabilit.patch
    (bsc#1012628 CVE-2024-49874 bsc#1232295).
  - Update
    patches.kernel.org/6.11.3-440-aoe-fix-the-potential-use-after-free-problem-i.patch
    (bsc#1012628 CVE-2024-49982 bsc#1232097).
  - Update
    patches.kernel.org/6.11.3-445-remoteproc-k3-r5-Fix-error-handling-when-power.patch
    (bsc#1012628 CVE-2024-50176 bsc#1233091).
  - Update
    patches.kernel.org/6.11.3-446-gfs2-fix-double-destroy_workqueue-error.patch
    (bsc#1012628 CVE-2024-49956 bsc#1232153).
  - Update
    patches.kernel.org/6.11.3-457-media-venus-fix-use-after-free-bug-in-venus_re.patch
    (bsc#1012628 CVE-2024-49981 bsc#1232098).
  - Update
    patches.kernel.org/6.11.3-459-media-qcom-camss-Remove-use_count-guard-in-sto.patch
    (bsc#1012628 CVE-2024-50175 bsc#1233092).
  - Update
    patches.kernel.org/6.11.3-470-vrf-revert-vrf-Remove-unnecessary-RCU-bh-criti.patch
    (bsc#1012628 CVE-2024-49980 bsc#1232099).
  - Update
    patches.kernel.org/6.11.3-471-net-gso-fix-tcp-fraglist-segmentation-after-pu.patch
    (bsc#1012628 CVE-2024-49979 bsc#1232100).
  - Update
    patches.kernel.org/6.11.3-472-gso-fix-udp-gso-fraglist-segmentation-after-pu.patch
    (bsc#1012628 CVE-2024-49978 bsc#1232101).
  - Update
    patches.kernel.org/6.11.3-475-net-stmmac-Fix-zero-division-error-when-disabl.patch
    (bsc#1012628 CVE-2024-49977 bsc#1232102).
  - Update
    patches.kernel.org/6.11.3-477-mm-filemap-fix-filemap_get_folios_contig-THP-p.patch
    (bsc#1012628 CVE-2024-49873 bsc#1232291).
  - Update
    patches.kernel.org/6.11.3-478-mm-hugetlb-fix-memfd_pin_folios-free_huge_page.patch
    (bsc#1012628 CVE-2024-49964 bsc#1232144).
  - Update
    patches.kernel.org/6.11.3-481-mm-gup-fix-memfd_pin_folios-alloc-race-panic.patch
    (bsc#1012628 CVE-2024-49872 bsc#1232288).
  - Update
    patches.kernel.org/6.11.3-483-Input-adp5589-keys-fix-NULL-pointer-dereferenc.patch
    (bsc#1012628 CVE-2024-49871 bsc#1232287).
  - Update
    patches.kernel.org/6.11.3-486-cachefiles-fix-dentry-leak-in-cachefiles_open_.patch
    (bsc#1012628 CVE-2024-49870 bsc#1232279).
  - Update
    patches.kernel.org/6.11.3-493-btrfs-send-fix-buffer-overflow-detection-when-.patch
    (bsc#1012628 CVE-2024-49869 bsc#1232278).
  - Update
    patches.kernel.org/6.11.3-494-btrfs-fix-a-NULL-pointer-dereference-when-fail.patch
    (bsc#1012628 CVE-2024-49868 bsc#1232272).
  - Update
    patches.kernel.org/6.11.3-497-btrfs-wait-for-fixup-workers-before-stopping-c.patch
    (bsc#1012628 CVE-2024-49867 bsc#1232262).
  - Update
    patches.kernel.org/6.11.3-498-cpufreq-Avoid-a-bad-reference-count-on-CPU-nod.patch
    (bsc#1012628 CVE-2024-50012 bsc#1232386).
  - Update
    patches.kernel.org/6.11.3-503-mac802154-Fix-potential-RCU-dereference-issue-.patch
    (bsc#1012628 CVE-2024-50005 bsc#1232082).
  - Update
    patches.kernel.org/6.11.3-507-tracing-timerlat-Drop-interface_lock-in-stop_k.patch
    (bsc#1012628 CVE-2024-49976 bsc#1232103).
  - Update
    patches.kernel.org/6.11.3-508-tracing-timerlat-Fix-a-race-during-cpuhp-proce.patch
    (bsc#1012628 CVE-2024-49866 bsc#1232259).
  - Update
    patches.kernel.org/6.11.3-515-drm-panthor-Fix-access-to-uninitialized-variab.patch
    (bsc#1012628 CVE-2024-50173 bsc#1233094).
  - Update
    patches.kernel.org/6.11.3-524-drm-amd-display-update-DML2-policy-EnhancedPre.patch
    (bsc#1012628 CVE-2024-50004 bsc#1232396).
  - Update
    patches.kernel.org/6.11.3-525-drm-amd-display-Fix-system-hang-while-resume-w.patch
    (bsc#1012628 CVE-2024-50003 bsc#1232385).
  - Update
    patches.kernel.org/6.11.3-531-uprobes-fix-kernel-info-leak-via-uprobes-vma.patch
    (bsc#1012628 CVE-2024-49975 bsc#1232104).
  - Update
    patches.kernel.org/6.11.3-536-NFSD-Limit-the-number-of-concurrent-async-COPY.patch
    (bsc#1012628 CVE-2024-49974 bsc#1232383).
  - Update
    patches.kernel.org/6.11.3-540-r8169-add-tally-counter-fields-added-with-RTL8.patch
    (bsc#1012628 CVE-2024-49973 bsc#1232105).
  - Update
    patches.kernel.org/6.11.3-542-ACPI-battery-Fix-possible-crash-when-unregiste.patch
    (bsc#1012628 CVE-2024-49955 bsc#1232154).
  - Update
    patches.kernel.org/6.11.3-544-drm-xe-vm-move-xa_alloc-to-prevent-UAF.patch
    (bsc#1012628 CVE-2024-49865 bsc#1232257).
  - Update
    patches.kernel.org/6.11.3-549-rxrpc-Fix-a-race-between-socket-set-up-and-I-O.patch
    (bsc#1012628 CVE-2024-49864 bsc#1232256).
  - Update
    patches.kernel.org/6.11.3-550-vhost-scsi-null-ptr-dereference-in-vhost_scsi_.patch
    (bsc#1012628 CVE-2024-49863 bsc#1232255).
  - Update
    patches.kernel.org/6.11.4-001-unicode-Don-t-special-case-ignorable-code-poin.patch
    (bsc#1012628 CVE-2024-50089 bsc#1232860).
  - Update
    patches.kernel.org/6.11.4-002-net-fec-don-t-save-PTP-state-if-PTP-is-unsuppo.patch
    (bsc#1012628 CVE-2024-50097 bsc#1232871).
  - Update
    patches.kernel.org/6.11.4-011-ntfs3-Change-to-non-blocking-allocation-in-ntf.patch
    (bsc#1012628 CVE-2024-50065 bsc#1231899).
  - Update
    patches.kernel.org/6.11.4-014-zram-free-secondary-algorithms-names.patch
    (bsc#1012628 CVE-2024-50064 bsc#1231901).
  - Update
    patches.kernel.org/6.11.4-022-ext4-don-t-set-SB_RDONLY-after-filesystem-erro.patch
    (bsc#1012628 CVE-2024-50191 bsc#1233101).
  - Update
    patches.kernel.org/6.11.4-026-bpf-Prevent-tail-call-between-progs-attached-t.patch
    (bsc#1012628 CVE-2024-50063 bsc#1232435).
  - Update
    patches.kernel.org/6.11.4-028-RDMA-mad-Improve-handling-of-timed-out-WRs-of-.patch
    (bsc#1012628 CVE-2024-50095 bsc#1232873).
  - Update
    patches.kernel.org/6.11.4-031-RDMA-rtrs-srv-Avoid-null-pointer-deref-during-.patch
    (bsc#1012628 CVE-2024-50062 bsc#1232232).
  - Update
    patches.kernel.org/6.11.4-036-i3c-master-cdns-Fix-use-after-free-vulnerabili.patch
    (bsc#1012628 CVE-2024-50061 bsc#1232263).
  - Update
    patches.kernel.org/6.11.4-038-io_uring-check-if-we-need-to-reschedule-during.patch
    (bsc#1012628 CVE-2024-50060 bsc#1232417).
  - Update
    patches.kernel.org/6.11.4-039-ntb-ntb_hw_switchtec-Fix-use-after-free-vulner.patch
    (bsc#1012628 CVE-2024-50059 bsc#1232345).
  - Update
    patches.kernel.org/6.11.4-052-clk-imx-Remove-CLK_SET_PARENT_GATE-for-DRAM-mu.patch
    (bsc#1012628 CVE-2024-50181 bsc#1233127).
  - Update
    patches.kernel.org/6.11.4-053-serial-protect-uart_port_dtr_rts-in-uart_shutd.patch
    (bsc#1012628 CVE-2024-50058 bsc#1232285).
  - Update
    patches.kernel.org/6.11.4-054-usb-typec-tipd-Free-IRQ-only-if-it-was-request.patch
    (bsc#1012628 CVE-2024-50057 bsc#1232393).
  - Update
    patches.kernel.org/6.11.4-063-virtio_pmem-Check-device-status-before-request.patch
    (bsc#1012628 CVE-2024-50184 bsc#1233135).
  - Update
    patches.kernel.org/6.11.4-066-usb-gadget-uvc-Fix-ERR_PTR-dereference-in-uvc_.patch
    (bsc#1012628 CVE-2024-50056 bsc#1232389).
  - Update
    patches.kernel.org/6.11.4-067-dm-vdo-don-t-refer-to-dedupe_context-after-rel.patch
    (bsc#1012628 CVE-2024-50091 bsc#1232872).
  - Update
    patches.kernel.org/6.11.4-068-driver-core-bus-Fix-double-free-in-driver-API-.patch
    (bsc#1012628 CVE-2024-50055 bsc#1232329).
  - Update
    patches.kernel.org/6.11.4-071-scsi-lpfc-Ensure-DA_ID-handling-completion-bef.patch
    (bsc#1012628 CVE-2024-50183 bsc#1233130).
  - Update
    patches.kernel.org/6.11.4-073-drm-xe-oa-Fix-overflow-in-oa-batch-buffer.patch
    (bsc#1012628 CVE-2024-50090 bsc#1232862).
  - Update
    patches.kernel.org/6.11.4-074-drm-amd-display-Check-null-pointer-before-dere.patch
    (bsc#1012628 CVE-2024-50049 bsc#1232309).
  - Update
    patches.kernel.org/6.11.4-075-fbcon-Fix-a-NULL-pointer-dereference-issue-in-.patch
    (bsc#1012628 CVE-2024-50048 bsc#1232310).
  - Update
    patches.kernel.org/6.11.4-076-smb-client-fix-UAF-in-async-decryption.patch
    (bsc#1012628 CVE-2024-50047 bsc#1232418).
  - Update
    patches.kernel.org/6.11.4-077-fbdev-sisfb-Fix-strbuf-array-overflow.patch
    (bsc#1012628 CVE-2024-50180 bsc#1233125).
  - Update
    patches.kernel.org/6.11.4-082-ice-fix-memleak-in-ice_init_tx_topology.patch
    (bsc#1012628 CVE-2024-50190 bsc#1233090).
  - Update
    patches.kernel.org/6.11.4-086-NFSv4-Prevent-NULL-pointer-dereference-in-nfs4.patch
    (bsc#1012628 CVE-2024-50046 bsc#1231902).
  - Update
    patches.kernel.org/6.11.4-087-net-phy-dp83869-fix-memory-corruption-when-ena.patch
    (bsc#1012628 CVE-2024-50188 bsc#1233107).
  - Update
    patches.kernel.org/6.11.4-088-sfc-Don-t-invoke-xdp_do_flush-from-netpoll.patch
    (bsc#1012628 CVE-2024-50094 bsc#1232875).
  - Update
    patches.kernel.org/6.11.4-096-netfilter-br_netfilter-fix-panic-with-metadata.patch
    (bsc#1012628 CVE-2024-50045 bsc#1231903).
  - Update
    patches.kernel.org/6.11.4-099-Bluetooth-RFCOMM-FIX-possible-deadlock-in-rfco.patch
    (bsc#1012628 CVE-2024-50044 bsc#1231904).
  - Update
    patches.kernel.org/6.11.4-102-nfsd-fix-possible-badness-in-FREE_STATEID.patch
    (bsc#1012628 CVE-2024-50043 bsc#1231905).
  - Update
    patches.kernel.org/6.11.4-103-thermal-intel-int340x-processor-Fix-warning-du.patch
    (bsc#1012628 CVE-2024-50093 bsc#1232877).
  - Update
    patches.kernel.org/6.11.4-120-ice-Fix-increasing-MSI-X-on-VF.patch
    (bsc#1012628 CVE-2024-50042 bsc#1231906).
  - Update
    patches.kernel.org/6.11.4-121-i40e-Fix-macvlan-leak-by-synchronizing-access-.patch
    (bsc#1012628 CVE-2024-50041 bsc#1231907).
  - Update
    patches.kernel.org/6.11.4-122-igb-Do-not-bring-the-device-up-after-non-fatal.patch
    (bsc#1012628 CVE-2024-50040 bsc#1231908).
  - Update
    patches.kernel.org/6.11.4-124-net-sched-accept-TCA_STAB-only-for-root-qdisc.patch
    (bsc#1012628 CVE-2024-50039 bsc#1231909).
  - Update
    patches.kernel.org/6.11.4-131-netfilter-xtables-avoid-NFPROTO_UNSPEC-where-n.patch
    (bsc#1012628 CVE-2024-50038 bsc#1231910).
  - Update
    patches.kernel.org/6.11.4-135-net-netconsole-fix-wrong-warning.patch
    (bsc#1012628 CVE-2024-50092 bsc#1232874).
  - Update
    patches.kernel.org/6.11.4-136-drm-fbdev-dma-Only-cleanup-deferred-I-O-if-nec.patch
    (bsc#1012628 CVE-2024-50037 bsc#1231911).
  - Update
    patches.kernel.org/6.11.4-137-net-do-not-delay-dst_entries_add-in-dst_releas.patch
    (bsc#1012628 CVE-2024-50036 bsc#1231912).
  - Update
    patches.kernel.org/6.11.4-144-ppp-fix-ppp_async_encode-illegal-access.patch
    (bsc#1012628 CVE-2024-50035 bsc#1232392).
  - Update
    patches.kernel.org/6.11.4-145-net-smc-fix-lacks-of-icsk_syn_mss-with-IPPROTO.patch
    (bsc#1012628 CVE-2024-50034 bsc#1231913).
  - Update
    patches.kernel.org/6.11.4-146-slip-make-slhc_remember-more-robust-against-ma.patch
    (bsc#1012628 CVE-2024-50033 bsc#1231914).
  - Update
    patches.kernel.org/6.11.4-147-rcu-nocb-Fix-rcuog-wake-up-from-offline-softir.patch
    (bsc#1012628 CVE-2024-50032 bsc#1231915).
  - Update
    patches.kernel.org/6.11.4-156-HID-amd_sfh-Switch-to-device-managed-dmam_allo.patch
    (bsc#1012628 CVE-2024-50189 bsc#1233105).
  - Update
    patches.kernel.org/6.11.4-170-drm-v3d-Stop-the-active-perfmon-before-being-d.patch
    (bsc#1012628 CVE-2024-50031 bsc#1231947).
  - Update
    patches.kernel.org/6.11.4-171-drm-vc4-Stop-the-active-perfmon-before-being-d.patch
    (bsc#1012628 CVE-2024-50187 bsc#1233108).
  - Update
    patches.kernel.org/6.11.4-176-drm-xe-ct-prevent-UAF-in-send_recv.patch
    (bsc#1012628 CVE-2024-50030 bsc#1231948).
  - Update
    patches.kernel.org/6.11.4-178-Bluetooth-hci_conn-Fix-UAF-in-hci_enhanced_set.patch
    (bsc#1012628 CVE-2024-50029 bsc#1231949).
  - Update
    patches.kernel.org/6.11.4-179-thermal-core-Reference-count-the-zone-in-therm.patch
    (bsc#1012628 CVE-2024-50028 bsc#1231950).
  - Update
    patches.kernel.org/6.11.4-180-thermal-core-Free-tzp-copy-along-with-the-ther.patch
    (bsc#1012628 CVE-2024-50027 bsc#1231951).
  - Update
    patches.kernel.org/6.11.4-181-scsi-wd33c93-Don-t-use-stale-scsi_pointer-valu.patch
    (bsc#1012628 CVE-2024-50026 bsc#1231952).
  - Update
    patches.kernel.org/6.11.4-182-scsi-fnic-Move-flush_work-initialization-out-o.patch
    (bsc#1012628 CVE-2024-50025 bsc#1231953).
  - Update
    patches.kernel.org/6.11.4-189-net-explicitly-clear-the-sk-pointer-when-pf-cr.patch
    (bsc#1012628 CVE-2024-50186 bsc#1233110).
  - Update
    patches.kernel.org/6.11.4-190-net-Fix-an-unsafe-loop-on-the-list.patch
    (bsc#1012628 CVE-2024-50024 bsc#1231954).
  - Update
    patches.kernel.org/6.11.4-192-net-phy-Remove-LED-entry-from-LEDs-list-on-unr.patch
    (bsc#1012628 CVE-2024-50023 bsc#1231955).
  - Update
    patches.kernel.org/6.11.4-194-mptcp-handle-consistently-DSS-corruption.patch
    (bsc#1012628 CVE-2024-50185 bsc#1233109).
  - Update
    patches.kernel.org/6.11.4-196-device-dax-correct-pgoff-align-in-dax_set_mapp.patch
    (bsc#1012628 CVE-2024-50022 bsc#1231956).
  - Update
    patches.kernel.org/6.11.4-197-ice-Fix-improper-handling-of-refcount-in-ice_d.patch
    (bsc#1012628 CVE-2024-50021 bsc#1231957).
  - Update
    patches.kernel.org/6.11.4-198-ice-Fix-improper-handling-of-refcount-in-ice_s.patch
    (bsc#1012628 CVE-2024-50020 bsc#1231989).
  - Update
    patches.kernel.org/6.11.4-199-nouveau-dmem-Fix-vulnerability-in-migrate_to_r.patch
    (bsc#1012628 CVE-2024-50096 bsc#1232870).
  - Update
    patches.kernel.org/6.11.4-207-kthread-unpark-only-parked-kthread.patch
    (bsc#1012628 CVE-2024-50019 bsc#1231990).
  - Update
    patches.kernel.org/6.11.4-209-secretmem-disable-memfd_secret-if-arch-cannot-.patch
    (bsc#1012628 CVE-2024-50182 bsc#1233129).
  - Update
    patches.kernel.org/6.11.5-001-btrfs-fix-uninitialized-pointer-free-in-add_in.patch
    (bsc#1012628 CVE-2024-50088 bsc#1232498).
  - Update
    patches.kernel.org/6.11.5-002-btrfs-fix-uninitialized-pointer-free-on-read_a.patch
    (bsc#1012628 CVE-2024-50087 bsc#1232499).
  - Update
    patches.kernel.org/6.11.5-003-ksmbd-fix-user-after-free-from-session-log-off.patch
    (bsc#1012628 CVE-2024-50086 bsc#1232521).
  - Update
    patches.kernel.org/6.11.5-006-mptcp-pm-fix-UaF-read-in-mptcp_pm_nl_rm_addr_o.patch
    (bsc#1012628 CVE-2024-50085 bsc#1232508).
  - Update
    patches.kernel.org/6.11.5-012-posix-clock-Fix-missing-timespec64-check-in-pc.patch
    (bsc#1012628 CVE-2024-50195 bsc#1233103).
  - Update
    patches.kernel.org/6.11.5-015-arm64-probes-Remove-broken-LDR-literal-uprobe-.patch
    (bsc#1012628 CVE-2024-50099 bsc#1232887).
  - Update
    patches.kernel.org/6.11.5-017-arm64-probes-Fix-uprobes-for-big-endian-kernel.patch
    (bsc#1012628 CVE-2024-50194 bsc#1233111).
  - Update
    patches.kernel.org/6.11.5-019-net-microchip-vcap-api-Fix-memory-leaks-in-vca.patch
    (bsc#1012628 CVE-2024-50084 bsc#1232494).
  - Update
    patches.kernel.org/6.11.5-021-maple_tree-correct-tree-corruption-on-spanning.patch
    (bsc#1012628 CVE-2024-50200 bsc#1233088).
  - Update
    patches.kernel.org/6.11.5-026-mm-mremap-fix-move_normal_pmd-retract_page_tab.patch
    (bsc#1012628 CVE-2024-50066 bsc#1232078).
  - Update
    patches.kernel.org/6.11.5-029-mm-swapfile-skip-HugeTLB-pages-for-unuse_vma.patch
    (bsc#1012628 CVE-2024-50199 bsc#1233112).
  - Update
    patches.kernel.org/6.11.5-030-mm-damon-tests-sysfs-kunit.h-fix-memory-leak-i.patch
    (bsc#1012628 CVE-2024-50068 bsc#1232512).
  - Update
    patches.kernel.org/6.11.5-031-tcp-fix-mptcp-DSS-corruption-due-to-large-pmtu.patch
    (bsc#1012628 CVE-2024-50083 bsc#1232493).
  - Update
    patches.kernel.org/6.11.5-035-iommu-vt-d-Fix-incorrect-pci_for_each_dma_alia.patch
    (bsc#1012628 CVE-2024-50101 bsc#1232869).
  - Update
    patches.kernel.org/6.11.5-047-blk-rq-qos-fix-crash-on-rq_qos_wait-vs.-rq_qos.patch
    (bsc#1012628 CVE-2024-50082 bsc#1232500).
  - Update
    patches.kernel.org/6.11.5-049-blk-mq-setup-queue-tag_set-before-initializing.patch
    (bsc#1012628 CVE-2024-50081 bsc#1232501).
  - Update
    patches.kernel.org/6.11.5-050-ublk-don-t-allow-user-copy-for-unprivileged-de.patch
    (bsc#1012628 CVE-2024-50080 bsc#1232502).
  - Update
    patches.kernel.org/6.11.5-051-io_uring-sqpoll-ensure-task-state-is-TASK_RUNN.patch
    (bsc#1012628 CVE-2024-50079 bsc#1232495).
  - Update
    patches.kernel.org/6.11.5-055-scsi-ufs-core-Set-SDEV_OFFLINE-when-UFS-is-shu.patch
    (bsc#1012628 CVE-2024-50098 bsc#1232881).
  - Update
    patches.kernel.org/6.11.5-058-drm-radeon-Fix-encoder-possible_clones.patch
    (bsc#1012628 CVE-2024-50201 bsc#1233104).
  - Update
    patches.kernel.org/6.11.5-075-iio-light-veml6030-fix-IIO-device-retrieval-fr.patch
    (bsc#1012628 CVE-2024-50198 bsc#1233100).
  - Update
    patches.kernel.org/6.11.5-093-Bluetooth-Call-iso_exit-on-module-unload.patch
    (bsc#1012628 CVE-2024-50078 bsc#1232503).
  - Update
    patches.kernel.org/6.11.5-095-Bluetooth-ISO-Fix-multiple-init-when-debugfs-i.patch
    (bsc#1012628 CVE-2024-50077 bsc#1232504).
  - Update
    patches.kernel.org/6.11.5-098-vt-prevent-kernel-infoleak-in-con_font_get.patch
    (bsc#1012628 CVE-2024-50076 bsc#1232505).
  - Update
    patches.kernel.org/6.11.5-099-xhci-tegra-fix-checked-USB2-port-number.patch
    (bsc#1012628 CVE-2024-50075 bsc#1232506).
  - Update
    patches.kernel.org/6.11.5-105-USB-gadget-dummy-hcd-Fix-task-hung-problem.patch
    (bsc#1012628 CVE-2024-50100 bsc#1232876).
  - Update
    patches.kernel.org/6.11.5-112-parport-Proper-fix-for-array-out-of-bounds-acc.patch
    (bsc#1012628 CVE-2024-50074 bsc#1232507).
  - Update
    patches.kernel.org/6.11.5-117-x86-entry_32-Clear-CPU-buffers-after-register-.patch
    (bsc#1012628 CVE-2024-50193 bsc#1233102).
  - Update
    patches.kernel.org/6.11.5-118-tty-n_gsm-Fix-use-after-free-in-gsm_cleanup_mu.patch
    (bsc#1012628 CVE-2024-50073 bsc#1232520).
  - Update
    patches.kernel.org/6.11.5-119-x86-bugs-Use-code-segment-selector-for-VERW-op.patch
    (bsc#1012628 CVE-2024-50072 bsc#1232513).
  - Update
    patches.kernel.org/6.11.5-120-pinctrl-nuvoton-fix-a-double-free-in-ma35_pinc.patch
    (bsc#1012628 CVE-2024-50071 bsc#1232509).
  - Update
    patches.kernel.org/6.11.5-121-pinctrl-intel-platform-fix-error-path-in-devic.patch
    (bsc#1012628 CVE-2024-50197 bsc#1233089).
  - Update
    patches.kernel.org/6.11.5-122-pinctrl-ocelot-fix-system-hang-on-level-based-.patch
    (bsc#1012628 CVE-2024-50196 bsc#1233113).
  - Update
    patches.kernel.org/6.11.5-123-pinctrl-stm32-check-devm_kasprintf-returned-va.patch
    (bsc#1012628 CVE-2024-50070 bsc#1232510).
  - Update
    patches.kernel.org/6.11.5-124-pinctrl-apple-check-devm_kasprintf-returned-va.patch
    (bsc#1012628 CVE-2024-50069 bsc#1232511).
  - Update
    patches.kernel.org/6.11.5-125-irqchip-gic-v4-Don-t-allow-a-VMOVP-on-a-dying-.patch
    (bsc#1012628 CVE-2024-50192 bsc#1233106).
  - Update
    patches.kernel.org/6.11.6-001-bpf-Use-raw_spinlock_t-in-ringbuf.patch
    (bsc#1012628 CVE-2024-50138 bsc#1232935).
  - Update
    patches.kernel.org/6.11.6-003-reset-starfive-jh71x0-Fix-accessing-the-empty-.patch
    (bsc#1012628 CVE-2024-50137 bsc#1232932).
  - Update
    patches.kernel.org/6.11.6-005-bpf-Make-sure-internal-and-UAPI-bpf_redirect-f.patch
    (bsc#1012628 CVE-2024-50163 bsc#1233098).
  - Update
    patches.kernel.org/6.11.6-007-bpf-devmap-provide-rxq-after-redirect.patch
    (bsc#1012628 CVE-2024-50162 bsc#1233075).
  - Update
    patches.kernel.org/6.11.6-011-RDMA-bnxt_re-Fix-a-possible-memory-leak.patch
    (bsc#1012628 CVE-2024-50172 bsc#1233029).
  - Update
    patches.kernel.org/6.11.6-013-RDMA-bnxt_re-Add-a-check-for-memory-allocation.patch
    (bsc#1012628 CVE-2024-50209 bsc#1233114).
  - Update
    patches.kernel.org/6.11.6-018-bpf-Check-the-remaining-info_cnt-before-repeat.patch
    (bsc#1012628 CVE-2024-50161 bsc#1233037).
  - Update
    patches.kernel.org/6.11.6-029-sched-core-Disable-page-allocation-in-task_tic.patch
    (bsc#1012628 CVE-2024-50140 bsc#1233060).
  - Update
    patches.kernel.org/6.11.6-030-ALSA-hda-cs8409-Fix-possible-NULL-dereference.patch
    (bsc#1012628 CVE-2024-50160 bsc#1233074).
  - Update
    patches.kernel.org/6.11.6-031-firmware-arm_scmi-Fix-the-double-free-in-scmi_.patch
    (bsc#1012628 CVE-2024-50159 bsc#1233041).
  - Update
    patches.kernel.org/6.11.6-040-RDMA-bnxt_re-Fix-out-of-bound-check.patch
    (bsc#1012628 CVE-2024-50158 bsc#1233036).
  - Update
    patches.kernel.org/6.11.6-043-RDMA-bnxt_re-Avoid-CPU-lockups-due-fifo-occupa.patch
    (bsc#1012628 CVE-2024-50157 bsc#1233032).
  - Update
    patches.kernel.org/6.11.6-046-RDMA-bnxt_re-Fix-a-bug-while-setting-up-Level-.patch
    (bsc#1012628 CVE-2024-50208 bsc#1233117).
  - Update
    patches.kernel.org/6.11.6-055-drm-msm-Avoid-NULL-dereference-in-msm_disp_sta.patch
    (bsc#1012628 CVE-2024-50156 bsc#1233073).
  - Update
    patches.kernel.org/6.11.6-063-ring-buffer-Fix-reader-locking-when-changing-t.patch
    (bsc#1012628 CVE-2024-50207 bsc#1233122).
  - Update
    patches.kernel.org/6.11.6-066-netdevsim-use-cond_resched-in-nsim_dev_trap_re.patch
    (bsc#1012628 CVE-2024-50155 bsc#1233035).
  - Update
    patches.kernel.org/6.11.6-072-net-systemport-fix-potential-memory-leak-in-bc.patch
    (bsc#1012628 CVE-2024-50171 bsc#1233057).
  - Update
    patches.kernel.org/6.11.6-076-net-bcmasp-fix-potential-memory-leak-in-bcmasp.patch
    (bsc#1012628 CVE-2024-50170 bsc#1233030).
  - Update
    patches.kernel.org/6.11.6-078-tcp-dccp-Don-t-use-timer_pending-in-reqsk_queu.patch
    (bsc#1012628 CVE-2024-50154 bsc#1233072).
  - Update
    patches.kernel.org/6.11.6-084-scsi-target-core-Fix-null-ptr-deref-in-target_.patch
    (bsc#1012628 CVE-2024-50153 bsc#1233061).
  - Update
    patches.kernel.org/6.11.6-085-smb-client-fix-possible-double-free-in-smb2_se.patch
    (bsc#1012628 CVE-2024-50152 bsc#1233033).
  - Update
    patches.kernel.org/6.11.6-086-smb-client-fix-OOBs-when-building-SMB2_IOCTL-r.patch
    (bsc#1012628 CVE-2024-50151 bsc#1233055).
  - Update
    patches.kernel.org/6.11.6-087-usb-typec-altmode-should-keep-reference-to-par.patch
    (bsc#1012628 CVE-2024-50150 bsc#1233051).
  - Update
    patches.kernel.org/6.11.6-089-drm-xe-fix-unbalanced-rpm-put-with-fence_fini.patch
    (bsc#1012628 CVE-2024-50144 bsc#1233040).
  - Update
    patches.kernel.org/6.11.6-092-drm-xe-Don-t-free-job-in-TDR.patch
    (bsc#1012628 CVE-2024-50149 bsc#1233034).
  - Update
    patches.kernel.org/6.11.6-095-Bluetooth-bnep-fix-wild-memory-access-in-proto.patch
    (bsc#1012628 CVE-2024-50148 bsc#1233063).
  - Update
    patches.kernel.org/6.11.6-097-net-ethernet-mtk_eth_soc-fix-memory-corruption.patch
    (bsc#1012628 CVE-2024-50206 bsc#1233288).
  - Update
    patches.kernel.org/6.11.6-099-net-mlx5-Fix-command-bitmask-initialization.patch
    (bsc#1012628 CVE-2024-50147 bsc#1233067).
  - Update
    patches.kernel.org/6.11.6-100-net-mlx5-Unregister-notifier-on-eswitch-init-f.patch
    (bsc#1012628 CVE-2024-50136 bsc#1232914).
  - Update
    patches.kernel.org/6.11.6-101-net-mlx5e-Don-t-call-cleanup-on-profile-rollba.patch
    (bsc#1012628 CVE-2024-50146 bsc#1233056).
  - Update
    patches.kernel.org/6.11.6-107-nvme-pci-fix-race-condition-between-reset-and-.patch
    (bsc#1012628 CVE-2024-50135 bsc#1232888).
  - Update
    patches.kernel.org/6.11.6-121-uprobe-avoid-out-of-bounds-memory-access-of-fe.patch
    (bsc#1012628 CVE-2024-50067 bsc#1232416).
  - Update
    patches.kernel.org/6.11.6-122-drm-vboxvideo-Replace-fake-VLA-at-end-of-vbva_.patch
    (bsc#1012628 CVE-2024-50134 bsc#1232890).
  - Update
    patches.kernel.org/6.11.6-129-udf-refactor-inode_bmap-to-handle-error.patch
    (bsc#1012628 CVE-2024-50211 bsc#1233096).
  - Update
    patches.kernel.org/6.11.6-130-udf-fix-uninit-value-use-in-udf_get_fileshorta.patch
    (bsc#1012628 CVE-2024-50143 bsc#1233038).
  - Update
    patches.kernel.org/6.11.6-136-LoongArch-Don-t-crash-in-stack_top-for-tasks-w.patch
    (bsc#1012628 CVE-2024-50133 bsc#1232854).
  - Update
    patches.kernel.org/6.11.6-139-tracing-probes-Fix-MAX_TRACE_ARGS-limit-handli.patch
    (bsc#1012628 CVE-2024-50132 bsc#1232861).
  - Update
    patches.kernel.org/6.11.6-140-tracing-Consider-the-NULL-character-when-valid.patch
    (bsc#1012628 CVE-2024-50131 bsc#1232896).
  - Update
    patches.kernel.org/6.11.6-143-xfrm-validate-new-SA-s-prefixlen-using-SA-fami.patch
    (bsc#1012628 CVE-2024-50142 bsc#1233028).
  - Update
    patches.kernel.org/6.11.6-144-netfilter-bpf-must-hold-reference-on-net-names.patch
    (bsc#1012628 CVE-2024-50130 bsc#1232894).
  - Update
    patches.kernel.org/6.11.6-145-net-pse-pd-Fix-out-of-bound-for-loop.patch
    (bsc#1012628 CVE-2024-50129 bsc#1232856).
  - Update
    patches.kernel.org/6.11.6-146-net-sun3_82586-fix-potential-memory-leak-in-su.patch
    (bsc#1012628 CVE-2024-50168 bsc#1233059).
  - Update
    patches.kernel.org/6.11.6-147-be2net-fix-potential-memory-leak-in-be_xmit.patch
    (bsc#1012628 CVE-2024-50167 bsc#1233049).
  - Update
    patches.kernel.org/6.11.6-151-octeon_ep-Add-SKB-allocation-failures-handling.patch
    (bsc#1012628 CVE-2024-50145 bsc#1233044).
  - Update
    patches.kernel.org/6.11.6-155-fsl-fman-Fix-refcount-handling-of-fman-related.patch
    (bsc#1012628 CVE-2024-50166 bsc#1233050).
  - Update
    patches.kernel.org/6.11.6-157-net-wwan-fix-global-oob-in-wwan_rtnl_policy.patch
    (bsc#1012628 CVE-2024-50128 bsc#1232905).
  - Update
    patches.kernel.org/6.11.6-162-bpf-Preserve-param-string-when-parsing-mount-o.patch
    (bsc#1012628 CVE-2024-50165 bsc#1233031).
  - Update
    patches.kernel.org/6.11.6-164-bpf-Fix-overloading-of-MEM_UNINIT-s-meaning.patch
    (bsc#1012628 CVE-2024-50164 bsc#1233099).
  - Update
    patches.kernel.org/6.11.6-167-net-sched-fix-use-after-free-in-taprio_change.patch
    (bsc#1012628 CVE-2024-50127 bsc#1232907).
  - Update
    patches.kernel.org/6.11.6-168-net-sched-use-RCU-read-side-critical-section-i.patch
    (bsc#1012628 CVE-2024-50126 bsc#1232895).
  - Update
    patches.kernel.org/6.11.6-170-posix-clock-posix-clock-Fix-unbalanced-locking.patch
    (bsc#1012628 CVE-2024-50210 bsc#1233097).
  - Update
    patches.kernel.org/6.11.6-172-Bluetooth-SCO-Fix-UAF-on-sco_sock_timeout.patch
    (bsc#1012628 CVE-2024-50125 bsc#1232928).
  - Update
    patches.kernel.org/6.11.6-173-Bluetooth-ISO-Fix-UAF-on-iso_sock_timeout.patch
    (bsc#1012628 CVE-2024-50124 bsc#1232926).
  - Update
    patches.kernel.org/6.11.6-180-bpf-Add-the-missing-BPF_LINK_TYPE-invocation-f.patch
    (bsc#1012628 CVE-2024-50123 bsc#1232857).
  - Update
    patches.kernel.org/6.11.6-187-PCI-Hold-rescan-lock-while-adding-devices-duri.patch
    (bsc#1012628 CVE-2024-50122 bsc#1232930).
  - Update
    patches.kernel.org/6.11.6-191-ALSA-firewire-lib-Avoid-division-by-zero-in-ap.patch
    (bsc#1012628 CVE-2024-50205 bsc#1233293).
  - Update
    patches.kernel.org/6.11.6-194-nfsd-cancel-nfsd_shrinker_work-using-sync-mode.patch
    (bsc#1012628 CVE-2024-50121 bsc#1232925).
  - Update
    patches.kernel.org/6.11.6-196-smb-client-Handle-kstrdup-failures-for-passwor.patch
    (bsc#1012628 CVE-2024-50120 bsc#1232924).
  - Update
    patches.kernel.org/6.11.6-197-cifs-fix-warning-when-destroy-cifs_io_request_.patch
    (bsc#1012628 CVE-2024-50119 bsc#1232858).
  - Update
    patches.kernel.org/6.11.6-207-btrfs-reject-ro-rw-reconfiguration-if-there-ar.patch
    (bsc#1012628 CVE-2024-50118 bsc#1232859).
  - Update
    patches.kernel.org/6.11.6-210-drm-amd-Guard-against-bad-data-for-ATIF-ACPI-m.patch
    (bsc#1012628 CVE-2024-50117 bsc#1232897).
  - Update
    patches.kernel.org/6.11.6-212-ACPI-PRM-Find-EFI_MEMORY_RUNTIME-block-for-PRM.patch
    (bsc#1012628 CVE-2024-50141 bsc#1233065).
  - Update
    patches.kernel.org/6.11.6-214-nilfs2-fix-kernel-bug-due-to-missing-clearing-.patch
    (bsc#1012628 CVE-2024-50116 bsc#1232892).
  - Update
    patches.kernel.org/6.11.6-218-KVM-nSVM-Ignore-nCR3-4-0-when-loading-PDPTEs-f.patch
    (bsc#1012628 CVE-2024-50115 bsc#1232919).
  - Update
    patches.kernel.org/6.11.6-219-KVM-arm64-Unregister-redistributor-for-failed-.patch
    (bsc#1012628 CVE-2024-50114 bsc#1232912).
  - Update
    patches.kernel.org/6.11.6-220-KVM-arm64-Fix-shift-out-of-bounds-bug.patch
    (bsc#1012628 CVE-2024-50139 bsc#1233062).
  - Update
    patches.kernel.org/6.11.6-222-firewire-core-fix-invalid-port-index-for-paren.patch
    (bsc#1012628 CVE-2024-50113 bsc#1232891).
  - Update
    patches.kernel.org/6.11.6-223-x86-lam-Disable-ADDRESS_MASKING-in-most-cases.patch
    (bsc#1012628 CVE-2024-50112 bsc#1232867).
  - Update
    patches.kernel.org/6.11.6-228-LoongArch-Enable-IRQ-if-do_ale-triggered-in-ir.patch
    (bsc#1012628 CVE-2024-50111 bsc#1232866).
  - Update
    patches.kernel.org/6.11.6-230-xfrm-fix-one-more-kernel-infoleak-in-algo-dump.patch
    (bsc#1012628 CVE-2024-50110 bsc#1232885).
  - Update
    patches.kernel.org/6.11.6-232-md-raid10-fix-null-ptr-dereference-in-raid10_s.patch
    (bsc#1012628 CVE-2024-50109 bsc#1232886).
  - Update
    patches.kernel.org/6.11.6-234-drm-amd-display-Disable-PSR-SU-on-Parade-08-01.patch
    (bsc#1012628 CVE-2024-50108 bsc#1232884).
  - Update
    patches.kernel.org/6.11.6-235-platform-x86-intel-pmc-Fix-pmc_core_iounmap-to.patch
    (bsc#1012628 CVE-2024-50107 bsc#1232883).
  - Update
    patches.kernel.org/6.11.6-239-nfsd-fix-race-between-laundromat-and-free_stat.patch
    (bsc#1012628 CVE-2024-50106 bsc#1232882).
  - Update
    patches.kernel.org/6.11.6-247-ASoC-qcom-sc7280-Fix-missing-Soundwire-runtime.patch
    (bsc#1012628 CVE-2024-50105 bsc#1232879).
  - Update
    patches.kernel.org/6.11.6-248-ASoC-qcom-sdm845-add-missing-soundwire-runtime.patch
    (bsc#1012628 CVE-2024-50104 bsc#1232868).
  - Update
    patches.kernel.org/6.11.6-249-ASoC-qcom-Fix-NULL-Dereference-in-asoc_qcom_lp.patch
    (bsc#1012628 CVE-2024-50103 bsc#1232878).
  - Update
    patches.kernel.org/6.11.6-257-x86-fix-user-address-masking-non-canonical-spe.patch
    (bsc#1012628 CVE-2024-50102 bsc#1232880).
  - Update
    patches.kernel.org/6.11.7-024-macsec-Fix-use-after-free-while-sending-the-of.patch
    (bsc#1012628 CVE-2024-50261 bsc#1233253).
  - Update
    patches.kernel.org/6.11.7-026-sock_map-fix-a-NULL-pointer-dereference-in-soc.patch
    (bsc#1012628 CVE-2024-50260 bsc#1233178).
  - Update
    patches.kernel.org/6.11.7-037-netdevsim-Add-trailing-zero-to-terminate-the-s.patch
    (bsc#1012628 CVE-2024-50259 bsc#1233214).
  - Update
    patches.kernel.org/6.11.7-039-bpf-Fix-out-of-bounds-write-in-trie_get_next_k.patch
    (bsc#1012628 CVE-2024-50262 bsc#1233239).
  - Update
    patches.kernel.org/6.11.7-040-net-fix-crash-when-config-small-gso_max_size-g.patch
    (bsc#1012628 CVE-2024-50258 bsc#1233221).
  - Update
    patches.kernel.org/6.11.7-041-netfilter-Fix-use-after-free-in-get_info.patch
    (bsc#1012628 CVE-2024-50257 bsc#1233244).
  - Update
    patches.kernel.org/6.11.7-042-netfilter-nf_reject_ipv6-fix-potential-crash-i.patch
    (bsc#1012628 CVE-2024-50256 bsc#1233200).
  - Update
    patches.kernel.org/6.11.7-043-Bluetooth-hci-fix-null-ptr-deref-in-hci_read_s.patch
    (bsc#1012628 CVE-2024-50255 bsc#1233238).
  - Update
    patches.kernel.org/6.11.7-044-bpf-Free-dynamically-allocated-bits-in-bpf_ite.patch
    (bsc#1012628 CVE-2024-50254 bsc#1233183).
  - Update
    patches.kernel.org/6.11.7-046-bpf-Check-the-validity-of-nr_words-in-bpf_iter.patch
    (bsc#1012628 CVE-2024-50253 bsc#1233186).
  - Update
    patches.kernel.org/6.11.7-051-mlxsw-spectrum_ipip-Fix-memory-leak-when-chang.patch
    (bsc#1012628 CVE-2024-50252 bsc#1233201).
  - Update
    patches.kernel.org/6.11.7-053-netfilter-nft_payload-sanitize-offset-and-leng.patch
    (bsc#1012628 CVE-2024-50251 bsc#1233248).
  - Update
    patches.kernel.org/6.11.7-059-fsdax-dax_unshare_iter-needs-to-copy-entire-bl.patch
    (bsc#1012628 CVE-2024-50250 bsc#1233226).
  - Update
    patches.kernel.org/6.11.7-064-ACPI-CPPC-Make-rmw_lock-a-raw_spin_lock.patch
    (bsc#1012628 CVE-2024-50249 bsc#1233197).
  - Update
    patches.kernel.org/6.11.7-080-ntfs3-Add-bounds-checking-to-mi_enum_attr.patch
    (bsc#1012628 CVE-2024-50248 bsc#1233219).
  - Update
    patches.kernel.org/6.11.7-081-fs-ntfs3-Check-if-more-than-chunk-size-bytes-a.patch
    (bsc#1012628 CVE-2024-50247 bsc#1233271).
  - Update
    patches.kernel.org/6.11.7-084-fs-ntfs3-Add-rough-attr-alloc_size-check.patch
    (bsc#1012628 CVE-2024-50246 bsc#1233207).
  - Update
    patches.kernel.org/6.11.7-085-fs-ntfs3-Fix-possible-deadlock-in-mi_read.patch
    (bsc#1012628 CVE-2024-50245 bsc#1233203).
  - Update
    patches.kernel.org/6.11.7-086-fs-ntfs3-Additional-check-in-ni_clear.patch
    (bsc#1012628 CVE-2024-50244 bsc#1233270).
  - Update
    patches.kernel.org/6.11.7-087-fs-ntfs3-Fix-general-protection-fault-in-run_i.patch
    (bsc#1012628 CVE-2024-50243 bsc#1233269).
  - Update
    patches.kernel.org/6.11.7-088-fs-ntfs3-Additional-check-in-ntfs_file_release.patch
    (bsc#1012628 CVE-2024-50242 bsc#1233268).
  - Update
    patches.kernel.org/6.11.7-100-NFSD-Initialize-struct-nfsd4_copy-earlier.patch
    (bsc#1012628 CVE-2024-50241 bsc#1233187).
  - Update
    patches.kernel.org/6.11.7-111-phy-qcom-qmp-usb-fix-NULL-deref-on-runtime-sus.patch
    (bsc#1012628 CVE-2024-50240 bsc#1233217).
  - Update
    patches.kernel.org/6.11.7-112-phy-qcom-qmp-usb-legacy-fix-NULL-deref-on-runt.patch
    (bsc#1012628 CVE-2024-50239 bsc#1233180).
  - Update
    patches.kernel.org/6.11.7-113-phy-qcom-qmp-usbc-fix-NULL-deref-on-runtime-su.patch
    (bsc#1012628 CVE-2024-50238 bsc#1233182).
  - Update
    patches.kernel.org/6.11.7-120-wifi-mac80211-do-not-pass-a-stopped-vif-to-the.patch
    (bsc#1012628 CVE-2024-50237 bsc#1233216).
  - Update
    patches.kernel.org/6.11.7-121-wifi-ath10k-Fix-memory-leak-in-management-tx.patch
    (bsc#1012628 CVE-2024-50236 bsc#1233212).
  - Update
    patches.kernel.org/6.11.7-122-wifi-cfg80211-clear-wdev-cqm_config-pointer-on.patch
    (bsc#1012628 CVE-2024-50235 bsc#1233176).
  - Update
    patches.kernel.org/6.11.7-123-wifi-iwlegacy-Clear-stale-interrupts-before-re.patch
    (bsc#1012628 CVE-2024-50234 bsc#1233211).
  - Update
    patches.kernel.org/6.11.7-125-staging-iio-frequency-ad9832-fix-division-by-z.patch
    (bsc#1012628 CVE-2024-50233 bsc#1233210).
  - Update
    patches.kernel.org/6.11.7-127-iio-adc-ad7124-fix-division-by-zero-in-ad7124_.patch
    (bsc#1012628 CVE-2024-50232 bsc#1233209).
  - Update
    patches.kernel.org/6.11.7-129-iio-gts-helper-Fix-memory-leaks-in-iio_gts_bui.patch
    (bsc#1012628 CVE-2024-50231 bsc#1233208).
  - Update
    patches.kernel.org/6.11.7-131-nilfs2-fix-kernel-bug-due-to-missing-clearing-.patch
    (bsc#1012628 CVE-2024-50230 bsc#1233206).
  - Update
    patches.kernel.org/6.11.7-132-nilfs2-fix-potential-deadlock-with-newly-creat.patch
    (bsc#1012628 CVE-2024-50229 bsc#1233205).
  - Update
    patches.kernel.org/6.11.7-134-mm-shmem-fix-data-race-in-shmem_getattr.patch
    (bsc#1012628 CVE-2024-50228 bsc#1233204).
  - Update
    patches.kernel.org/6.11.7-138-thunderbolt-Fix-KASAN-reported-stack-out-of-bo.patch
    (bsc#1012628 CVE-2024-50227 bsc#1233181).
  - Update
    patches.kernel.org/6.11.7-141-cxl-port-Fix-use-after-free-permit-out-of-orde.patch
    (bsc#1012628 CVE-2024-50226 bsc#1233195).
  - Update
    patches.kernel.org/6.11.7-149-btrfs-fix-error-propagation-of-split-bios.patch
    (bsc#1012628 CVE-2024-50225 bsc#1233193).
  - Update
    patches.kernel.org/6.11.7-150-spi-spi-fsl-dspi-Fix-crash-when-not-using-GPIO.patch
    (bsc#1012628 CVE-2024-50224 bsc#1233188).
  - Update
    patches.kernel.org/6.11.7-162-sched-numa-Fix-the-potential-null-pointer-dere.patch
    (bsc#1012628 CVE-2024-50223 bsc#1233192).
  - Update
    patches.kernel.org/6.11.7-164-iov_iter-fix-copy_page_from_iter_atomic-if-KMA.patch
    (bsc#1012628 CVE-2024-50222 bsc#1233184).
  - Update
    patches.kernel.org/6.11.7-167-drm-amd-pm-Vangogh-Fix-kernel-memory-out-of-bo.patch
    (bsc#1012628 CVE-2024-50221 bsc#1233185).
  - Update
    patches.kernel.org/6.11.7-172-fork-do-not-invoke-uffd-on-fork-if-error-occur.patch
    (bsc#1012628 CVE-2024-50220 bsc#1233175).
  - Update
    patches.kernel.org/6.11.7-173-fork-only-invoke-khugepaged-ksm-hooks-if-no-er.patch
    (bsc#1012628 CVE-2024-50263 bsc#1233254).
  - Update
    patches.kernel.org/6.11.7-177-ocfs2-pass-u64-to-ocfs2_truncate_inline-maybe-.patch
    (bsc#1012628 CVE-2024-50218 bsc#1233191).
  - Update
    patches.kernel.org/6.11.7-180-btrfs-fix-use-after-free-of-block-device-file-.patch
    (bsc#1012628 CVE-2024-50217 bsc#1233194).
  - Update
    patches.kernel.org/6.11.7-182-xfs-fix-finding-a-last-resort-AG-in-xfs_filest.patch
    (bsc#1012628 CVE-2024-50216 bsc#1233179).
  - Update
    patches.kernel.org/6.11.7-185-nvmet-auth-assign-dh_key-to-NULL-after-kfree_s.patch
    (bsc#1012628 CVE-2024-50215 bsc#1233189).
  - Update
    patches.kernel.org/6.11.7-189-drm-connector-hdmi-Fix-memory-leak-in-drm_disp.patch
    (bsc#1012628 CVE-2024-50214 bsc#1233177).
  - Update
    patches.kernel.org/6.11.7-190-drm-tests-hdmi-Fix-memory-leaks-in-drm_display.patch
    (bsc#1012628 CVE-2024-50213 bsc#1233174).
  - Update
    patches.kernel.org/6.11.7-247-lib-alloc_tag_module_unload-must-wait-for-pend.patch
    (bsc#1012628 CVE-2024-50212 bsc#1233173).
  - commit e3c376e

++++ kernel-pae:

  - Linux 6.11.8 (bsc#1012628).
  - vsock/virtio: Initialization of the dangling pointer occurring
    in vsk->trans (bsc#1012628).
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling
    pointer (bsc#1012628).
  - xtensa: Emulate one-byte cmpxchg (bsc#1012628).
  - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
    (bsc#1012628).
  - drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
    (bsc#1012628).
  - drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
    (bsc#1012628).
  - drm/xe: Move LNL scheduling WA to xe_device.h (bsc#1012628).
  - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
    (bsc#1012628).
  - block: fix queue limits checks in blk_rq_map_user_bvec for real
    (bsc#1012628).
  - blacklist.conf: drop it
  - block: rework bio splitting (bsc#1012628).
  - firmware: qcom: scm: suppress download mode error (bsc#1012628).
  - firmware: qcom: scm: Refactor code to support multiple dload
    mode (bsc#1012628).
  - Update config files.
  - selftests: hugetlb_dio: check for initial conditions to skip
    in the start (bsc#1012628).
  - ucounts: fix counter leak in inc_rlimit_get_ucounts()
    (bsc#1012628).
  - ocfs2: remove entry once instead of null-ptr-dereference in
    ocfs2_xa_remove() (bsc#1012628).
  - irqchip/gic-v3: Force propagation of the active state with a
    read-back (bsc#1012628).
  - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state
    allocation (bsc#1012628).
  - staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation
    (bsc#1012628).
  - thunderbolt: Fix connection issue with Pluggable UD-4VPD dock
    (bsc#1012628).
  - clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
    (bsc#1012628).
  - clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
    (bsc#1012628).
  - USB: serial: option: add Quectel RG650V (bsc#1012628).
  - USB: serial: option: add Fibocom FG132 0x0112 composition
    (bsc#1012628).
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx
    (bsc#1012628).
  - USB: serial: io_edgeport: fix use after free in debug printk
    (bsc#1012628).
  - usb: typec: fix potential out of bounds in
    ucsi_ccg_update_set_new_cam_cmd() (bsc#1012628).
  - usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
    (bsc#1012628).
  - usb: dwc3: fix fault at system suspend if device was already
    runtime suspended (bsc#1012628).
  - usb: musb: sunxi: Fix accessing an released usb phy
    (bsc#1012628).
  - thunderbolt: Add only on-board retimers when
    !CONFIG_USB4_DEBUGFS_MARGINING (bsc#1012628).
  - mm/thp: fix deferred split unqueue naming and locking
    (bsc#1012628).
  - mm/mlock: set the correct prev on failure (bsc#1012628).
  - mm/damon/core: handle zero schemes apply interval (bsc#1012628).
  - mm/damon/core: handle zero {aggregation,ops_update} intervals
    (bsc#1012628).
  - mm/damon/core: avoid overflow in damon_feed_loop_next_input()
    (bsc#1012628).
  - signal: restore the override_rlimit logic (bsc#1012628).
  - objpool: fix to make percpu slot allocation more robust
    (bsc#1012628).
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
    (bsc#1012628).
  - clk: qcom: clk-alpha-pll: Fix pll post div mask when width is
    not set (bsc#1012628).
  - clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
    (bsc#1012628).
  - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE
    is not set (bsc#1012628).
  - filemap: Fix bounds checking in filemap_read() (bsc#1012628).
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED
    in uvc_parse_format (bsc#1012628).
  - platform/x86/amd/pmf: Add SMU metrics table support for 1Ah
    family 60h model (bsc#1012628).
  - platform/x86/amd/pmf: Update SMU metrics table for 1AH family
    series (bsc#1012628).
  - platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header
    (bsc#1012628).
  - btrfs: reinitialize delayed ref list after deleting it from
    the list (bsc#1012628).
  - btrfs: fix per-subvolume RO/RW flags with new mount API
    (bsc#1012628).
  - btrfs: fix the length of reserved qgroup to free (bsc#1012628).
  - idpf: fix idpf_vc_core_init error path (bsc#1012628).
  - idpf: avoid vport access in idpf_get_link_ksettings
    (bsc#1012628).
  - KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before
    running it to avoid spurious interrupts (bsc#1012628).
  - mm/slab: fix warning caused by duplicate kmem_cache creation
    in kmem_buckets_create (bsc#1012628).
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard
    hint (bsc#1012628).
  - arm64: Kconfig: Make SME depend on BROKEN for now (bsc#1012628).
  - Update config files.
  - arm64/sve: Discard stale CPU state when handling SVE traps
    (bsc#1012628).
  - mptcp: use sock_kfree_s instead of kfree (bsc#1012628).
  - net: vertexcom: mse102x: Fix possible double free of TX skb
    (bsc#1012628).
  - net: wwan: t7xx: Fix off-by-one error in
    t7xx_dpmaif_rx_buf_alloc() (bsc#1012628).
  - tracing: Fix tracefs mount options (bsc#1012628).
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (bsc#1012628).
  - scsi: ufs: core: Start the RTC update work later (bsc#1012628).
  - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (bsc#1012628).
  - mptcp: no admin perm to list endpoints (bsc#1012628).
  - dm: fix a crash if blk_alloc_disk fails (bsc#1012628).
  - dm-unstriped: cast an operand to sector_t to prevent potential
    uint32_t overflow (bsc#1012628).
  - dm cache: fix potential out-of-bounds access on the first resume
    (bsc#1012628).
  - dm cache: optimize dirty bit checking with find_next_bit when
    resizing (bsc#1012628).
  - dm cache: fix out-of-bounds access to the dirty bitset when
    resizing (bsc#1012628).
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr
    error (bsc#1012628).
  - dm cache: correct the number of origin blocks to match the
    target length (bsc#1012628).
  - KEYS: trusted: dcp: fix NULL dereference in AEAD crypto
    operation (bsc#1012628).
  - thermal/drivers/qcom/lmh: Remove false lockdep backtrace
    (bsc#1012628).
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not
    supported (bsc#1012628).
  - drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (bsc#1012628).
  - drm/amdgpu: Adjust debugfs register access permissions
    (bsc#1012628).
  - drm/amdgpu: add missing size check in
    amdgpu_debugfs_gprwave_read() (bsc#1012628).
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions
    (bsc#1012628).
  - drm/panthor: Be stricter about IO mapping flags (bsc#1012628).
  - drm/panthor: Lock XArray when getting entries for the VM
    (bsc#1012628).
  - drm/amd/display: parse umc_info or vram_info based on ASIC
    (bsc#1012628).
  - drm/amd/pm: correct the workload setting (bsc#1012628).
  - drm/imagination: Break an object reference loop (bsc#1012628).
  - drm/imagination: Add a per-file PVR context list (bsc#1012628).
  - drm/amd/display: Fix brightness level not retained over reboot
    (bsc#1012628).
  - drm/amd/pm: always pick the pptable from IFWI (bsc#1012628).
  - rpmsg: glink: Handle rejected intent request better
    (bsc#1012628).
  - tpm: Lock TPM chip in tpm_pm_suspend() first (bsc#1012628).
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode
    (bsc#1012628).
  - drm/xe: Set mask bits for CCS_MODE register (bsc#1012628).
  - drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure
    in exec IOCTL (bsc#1012628).
  - drm/xe: Fix possible exec queue leak in exec IOCTL
    (bsc#1012628).
  - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
    (bsc#1012628).
  - ksmbd: Fix the missing xa_store error check (bsc#1012628).
  - ksmbd: check outstanding simultaneous SMB operations
    (bsc#1012628).
  - ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
    (bsc#1012628).
  - can: {cc770,sja1000}_isa: allow building on x86_64
    (bsc#1012628).
  - Update config files. (say =N)
  - can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing
    configuration when switching CAN modes (bsc#1012628).
  - can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
    (bsc#1012628).
  - can: m_can: m_can_close(): don't call free_irq() for IRQ-less
    devices (bsc#1012628).
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
    (bsc#1012628).
  - media: v4l2-tpg: prevent the risk of a division by zero
    (bsc#1012628).
  - media: vivid: fix buffer overwrite when using > 32 buffers
    (bsc#1012628).
  - media: pulse8-cec: fix data timestamp at pulse8_setup()
    (bsc#1012628).
  - media: av7110: fix a spectre vulnerability (bsc#1012628).
  - media: cx24116: prevent overflows on SNR calculus (bsc#1012628).
  - media: s5p-jpeg: prevent buffer overflows (bsc#1012628).
  - media: ar0521: don't overflow when checking PLL values
    (bsc#1012628).
  - media: mgb4: protect driver against spectre (bsc#1012628).
  - media: dvb-core: add missing buffer index check (bsc#1012628).
  - ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
    (bsc#1012628).
  - ASoC: stm32: spdifrx: fix dma channel release in
    stm32_spdifrx_remove (bsc#1012628).
  - thermal/of: support thermal zones w/o trips subnode
    (bsc#1012628).
  - tools/lib/thermal: Fix sampling handler context ptr
    (bsc#1012628).
  - ALSA: firewire-lib: fix return value on fail in
    amdtp_tscm_init() (bsc#1012628).
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
    (bsc#1012628).
  - media: adv7604: prevent underflow condition when reporting
    colorspace (bsc#1012628).
  - media: dvb_frontend: don't play tricks with underflow values
    (bsc#1012628).
  - media: dvbdev: prevent the risk of out of memory access
    (bsc#1012628).
  - media: stb0899_algo: initialize cfr before using it
    (bsc#1012628).
  - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
    (bsc#1012628).
  - drivers: net: ionic: add missed debugfs cleanup to ionic_probe()
    error path (bsc#1012628).
  - net/smc: do not leave a dangling sk pointer in __smc_create()
    (bsc#1012628).
  - rxrpc: Fix missing locking causing hanging calls (bsc#1012628).
  - net: arc: rockchip: fix emac mdio node support (bsc#1012628).
  - net: arc: fix the device for dma_map_single/dma_unmap_single
    (bsc#1012628).
  - virtio_net: Update rss when set queue (bsc#1012628).
  - virtio_net: Sync rss config to device when virtnet_probe
    (bsc#1012628).
  - virtio_net: Add hash_key_length check (bsc#1012628).
  - virtio_net: Support dynamic rss indirection table size
    (bsc#1012628).
  - netfilter: nf_tables: wait for rcu grace period on net_device
    removal (bsc#1012628).
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single
    irq case (bsc#1012628).
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (bsc#1012628).
  - net: hns3: fix kernel crash when uninstalling driver
    (bsc#1012628).
  - e1000e: Remove Meteor Lake SMBUS workarounds (bsc#1012628).
  - i40e: fix race condition by adding filter's intermediate sync
    state (bsc#1012628).
  - ice: change q_index variable type to s16 to store -1 value
    (bsc#1012628).
  - can: c_can: fix {rx,tx}_errors statistics (bsc#1012628).
  - net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine
    starts (bsc#1012628).
  - net: enetc: allocate vf_state during PF probes (bsc#1012628).
  - sctp: properly validate chunk size in sctp_sf_ootb()
    (bsc#1012628).
  - dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property
    value (bsc#1012628).
  - net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd
    tracepoint (bsc#1012628).
  - net: enetc: set MAC address to the VF net_device (bsc#1012628).
  - regulator: rtq2208: Fix uninitialized use of regulator_config
    (bsc#1012628).
  - security/keys: fix slab-out-of-bounds in key_task_permission
    (bsc#1012628).
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping
    (bsc#1012628).
  - NFS: Further fixes to attribute delegation a/mtime changes
    (bsc#1012628).
  - NFS: Fix attribute delegation behaviour on exclusive create
    (bsc#1012628).
  - NFSv3: only use NFS timeout for MOUNT when protocols are
    compatible (bsc#1012628).
  - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (bsc#1012628).
  - platform/x86/amd/pmc: Detect when STB is not available
    (bsc#1012628).
  - HID: core: zero-initialize the report buffer (bsc#1012628).
  - arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
    (bsc#1012628).
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
    (bsc#1012628).
  - ARM: dts: rockchip: Fix the spi controller on rk3036
    (bsc#1012628).
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi
    (bsc#1012628).
  - ARM: dts: rockchip: fix rk3036 acodec node (bsc#1012628).
  - arm64: dts: rockchip: remove orphaned pinctrl-names from
    pinephone pro (bsc#1012628).
  - firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM
    bridge enabling (bsc#1012628).
  - firmware: arm_scmi: Fix slab-use-after-free in
    scmi_bus_notifier() (bsc#1012628).
  - arm64: dts: imx8mp-phyboard-pollux: Set Video PLL1 frequency
    to 506.8 MHz (bsc#1012628).
  - arm64: dts: imx8mp: correct sdhc ipg clk (bsc#1012628).
  - arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs (bsc#1012628).
  - arm64: dts: qcom: sm8450 fix PIPE clock specification for pcie1
    (bsc#1012628).
  - arm64: dts: rockchip: remove num-slots property from
    rk3328-nanopi-r2s-plus (bsc#1012628).
  - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
    (bsc#1012628).
  - arm64: dts: rockchip: Remove #cooling-cells from fan on
    Theobroma lion (bsc#1012628).
  - arm64: dts: rockchip: Remove undocumented supports-emmc property
    (bsc#1012628).
  - arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
    (bsc#1012628).
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
    (bsc#1012628).
  - arm64: dts: rockchip: Fix bluetooth properties on rk3566 box
    demo (bsc#1012628).
  - arm64: dts: rockchip: Drop regulator-init-microvolt from two
    boards (bsc#1012628).
  - arm64: dts: rockchip: fix i2c2 pinctrl-names property on
    anbernic-rg353p/v (bsc#1012628).
  - arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
    (bsc#1012628).
  - arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
    (bsc#1012628).
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
    (bsc#1012628).
  - EDAC/qcom: Make irq configuration optional (bsc#1012628).
  - firmware: qcom: scm: fix a NULL-pointer dereference
    (bsc#1012628).
  - arm64: dts: rockchip: Designate Turing RK1's system power
    controller (bsc#1012628).
  - arm64: dts: rockchip: Start cooling maps numbering from zero
    on ROCK 5B (bsc#1012628).
  - arm64: dts: rockchip: Move L3 cache outside CPUs in RK3588(S)
    SoC dtsi (bsc#1012628).
  - arm64: dts: rockchip: Fix rt5651 compatible value on
    rk3399-sapphire-excavator (bsc#1012628).
  - arm64: dts: rockchip: Fix rt5651 compatible value on
    rk3399-eaidk-610 (bsc#1012628).
  - commit 099023b
  - Mass CVE update.
  - Update
    patches.kernel.org/6.11.1-008-Bluetooth-btintel_pcie-Allocate-memory-for-dri.patch
    (bsc#1012628 CVE-2024-46869 bsc#1231173).
  - Update
    patches.kernel.org/6.11.1-012-USB-usbtmc-prevent-kernel-usb-infoleak.patch
    (bsc#1012628 CVE-2024-47671 bsc#1231541).
  - Update
    patches.kernel.org/6.11.2-001-wifi-ath11k-use-work-queue-to-process-beacon-t.patch
    (bsc#1012628 CVE-2024-47724 bsc#1232073).
  - Update
    patches.kernel.org/6.11.2-003-wifi-rtw88-always-wait-for-both-firmware-loadi.patch
    (bsc#1012628 CVE-2024-47718 bsc#1232015).
  - Update
    patches.kernel.org/6.11.2-008-crypto-iaa-Fix-potential-use-after-free-bug.patch
    (bsc#1012628 CVE-2024-47732 bsc#1232109).
  - Update
    patches.kernel.org/6.11.2-024-wifi-rtw89-remove-unused-C2H-event-ID-RTW89_MA.patch
    (bsc#1012628 CVE-2024-47721 bsc#1232052).
  - Update
    patches.kernel.org/6.11.2-027-RISC-V-KVM-Don-t-zero-out-PMU-snapshot-area-be.patch
    (bsc#1012628 CVE-2024-47717 bsc#1232041).
  - Update
    patches.kernel.org/6.11.2-033-ARM-9410-1-vfp-Use-asm-volatile-in-fmrx-fmxr-m.patch
    (bsc#1012628 CVE-2024-47716 bsc#1232053).
  - Update
    patches.kernel.org/6.11.2-034-powercap-intel_rapl-Fix-off-by-one-in-get_rpi.patch
    (bsc#1012628 CVE-2024-49862 bsc#1231871).
  - Update
    patches.kernel.org/6.11.2-040-drivers-perf-Fix-ali_drw_pmu-driver-interrupt-.patch
    (bsc#1012628 CVE-2024-47731 bsc#1232117).
  - Update
    patches.kernel.org/6.11.2-046-wifi-mac80211-don-t-use-rate-mask-for-offchann.patch
    (bsc#1012628 CVE-2024-47738 bsc#1232114).
  - Update
    patches.kernel.org/6.11.2-048-wifi-iwlwifi-mvm-set-the-cipher-for-secured-ND.patch
    (bsc#1012628 CVE-2024-49857 bsc#1232203).
  - Update
    patches.kernel.org/6.11.2-073-wifi-mt76-mt7915-fix-oops-on-non-dbdc-mt7986.patch
    (bsc#1012628 CVE-2024-47715 bsc#1231860).
  - Update
    patches.kernel.org/6.11.2-075-wifi-mt76-mt7996-use-hweight16-to-get-correct-.patch
    (bsc#1012628 CVE-2024-47714 bsc#1232018).
  - Update
    patches.kernel.org/6.11.2-080-x86-sgx-Fix-deadlock-in-SGX-NUMA-node-search.patch
    (bsc#1012628 CVE-2024-49856 bsc#1232202).
  - Update
    patches.kernel.org/6.11.2-085-crypto-hisilicon-qm-inject-error-before-stoppi.patch
    (bsc#1012628 CVE-2024-47730 bsc#1232075).
  - Update
    patches.kernel.org/6.11.2-093-wifi-mac80211-use-two-phase-skb-reclamation-in.patch
    (bsc#1012628 CVE-2024-47713 bsc#1232016).
  - Update
    patches.kernel.org/6.11.2-094-wifi-wilc1000-fix-potential-RCU-dereference-is.patch
    (bsc#1012628 CVE-2024-47712 bsc#1232017).
  - Update
    patches.kernel.org/6.11.2-099-af_unix-Don-t-return-OOB-skb-in-manage_oob.patch
    (bsc#1012628 CVE-2024-47711 bsc#1232054).
  - Update
    patches.kernel.org/6.11.2-102-sock_map-Add-a-cond_resched-in-sock_hash_free.patch
    (bsc#1012628 CVE-2024-47710 bsc#1232049).
  - Update
    patches.kernel.org/6.11.2-103-can-bcm-Clear-bo-bcm_proc_read-after-remove_pr.patch
    (bsc#1012628 CVE-2024-47709 bsc#1232048).
  - Update
    patches.kernel.org/6.11.2-112-netkit-Assign-missing-bpf_net_context.patch
    (bsc#1012628 CVE-2024-47708 bsc#1231933).
  - Update
    patches.kernel.org/6.11.2-117-ipv6-avoid-possible-NULL-deref-in-rt6_uncached.patch
    (bsc#1012628 CVE-2024-47707 bsc#1231935).
  - Update
    patches.kernel.org/6.11.2-119-nbd-fix-race-between-timeout-and-normal-comple.patch
    (bsc#1012628 CVE-2024-49855 bsc#1232195).
  - Update
    patches.kernel.org/6.11.2-120-block-bfq-fix-possible-UAF-for-bfqq-bic-with-m.patch
    (bsc#1012628 CVE-2024-47706 bsc#1231942).
  - Update
    patches.kernel.org/6.11.2-127-erofs-handle-overlapped-pclusters-out-of-craft.patch
    (bsc#1012628 CVE-2024-47736 bsc#1232112).
  - Update
    patches.kernel.org/6.11.2-128-block-bfq-fix-uaf-for-accessing-waker_bfqq-aft.patch
    (bsc#1012628 CVE-2024-49854 bsc#1232193).
  - Update
    patches.kernel.org/6.11.2-132-block-fix-potential-invalid-pointer-dereferenc.patch
    (bsc#1012628 CVE-2024-47705 bsc#1231872).
  - Update
    patches.kernel.org/6.11.2-136-firmware-arm_scmi-Fix-double-free-in-OPTEE-tra.patch
    (bsc#1012628 CVE-2024-49853 bsc#1232192).
  - Update
    patches.kernel.org/6.11.2-201-drm-amd-display-Check-link_res-hpo_dp_link_enc.patch
    (bsc#1012628 CVE-2024-47704 bsc#1231944).
  - Update
    patches.kernel.org/6.11.2-202-drm-amd-display-Add-null-check-for-set_output_.patch
    (bsc#1012628 CVE-2024-47720 bsc#1232043).
  - Update
    patches.kernel.org/6.11.2-216-drm-xe-Use-reserved-copy-engine-for-user-binds.patch
    (bsc#1012628 CVE-2024-47729 bsc#1232077).
  - Update
    patches.kernel.org/6.11.2-219-scsi-elx-libefc-Fix-potential-use-after-free-i.patch
    (bsc#1012628 CVE-2024-49852 bsc#1232819).
  - Update
    patches.kernel.org/6.11.2-220-jfs-fix-out-of-bounds-in-dbNextAG-and-diAlloc.patch
    (bsc#1012628 CVE-2024-47723 bsc#1232050).
  - Update
    patches.kernel.org/6.11.2-253-tpm-Clean-up-TPM-space-after-command-failure.patch
    (bsc#1012628 CVE-2024-49851 bsc#1232134).
  - Update
    patches.kernel.org/6.11.2-257-bpf-lsm-Add-check-for-BPF-LSM-return-value.patch
    (bsc#1012628 CVE-2024-47703 bsc#1231946).
  - Update
    patches.kernel.org/6.11.2-263-bpf-Fail-verification-for-sign-extension-of-pa.patch
    (bsc#1012628 CVE-2024-47702 bsc#1231924).
  - Update
    patches.kernel.org/6.11.2-297-bpf-correctly-handle-malformed-BPF_CORE_TYPE_I.patch
    (bsc#1012628 CVE-2024-49850 bsc#1232189).
  - Update
    patches.kernel.org/6.11.2-312-ext4-avoid-OOB-when-system.data-xattr-changes-.patch
    (bsc#1012628 CVE-2024-47701 bsc#1231920).
  - Update
    patches.kernel.org/6.11.2-313-ext4-check-stripe-size-compatibility-on-remoun.patch
    (bsc#1012628 CVE-2024-47700 bsc#1231919).
  - Update
    patches.kernel.org/6.11.2-315-nilfs2-fix-potential-null-ptr-deref-in-nilfs_b.patch
    (bsc#1012628 CVE-2024-47699 bsc#1231916).
  - Update
    patches.kernel.org/6.11.2-317-nilfs2-fix-potential-oob-read-in-nilfs_btree_c.patch
    (bsc#1012628 CVE-2024-47757 bsc#1232187).
  - Update
    patches.kernel.org/6.11.2-320-bpf-Fix-helper-writes-to-read-only-maps.patch
    (bsc#1012628 CVE-2024-49861 bsc#1232254).
  - Update
    patches.kernel.org/6.11.2-322-bpf-Zero-former-ARG_PTR_TO_-LONG-INT-args-in-c.patch
    (bsc#1012628 CVE-2024-47728 bsc#1232076).
  - Update
    patches.kernel.org/6.11.2-364-drivers-media-dvb-frontends-rtl2832-fix-an-out.patch
    (bsc#1012628 CVE-2024-47698 bsc#1231859).
  - Update
    patches.kernel.org/6.11.2-365-drivers-media-dvb-frontends-rtl2830-fix-an-out.patch
    (bsc#1012628 CVE-2024-47697 bsc#1231858).
  - Update
    patches.kernel.org/6.11.2-369-PCI-keystone-Fix-if-statement-expression-in-ks.patch
    (bsc#1012628 CVE-2024-47756 bsc#1232185).
  - Update
    patches.kernel.org/6.11.2-381-RDMA-iwcm-Fix-WARNING-at_kernel-workqueue.c-ch.patch
    (bsc#1012628 CVE-2024-47696 bsc#1231864).
  - Update
    patches.kernel.org/6.11.2-386-media-mediatek-vcodec-Fix-H264-multi-stateless.patch
    (bsc#1012628 CVE-2024-47754 bsc#1232131).
  - Update
    patches.kernel.org/6.11.2-387-media-mediatek-vcodec-Fix-VP8-stateless-decode.patch
    (bsc#1012628 CVE-2024-47753 bsc#1231868).
  - Update
    patches.kernel.org/6.11.2-388-media-mediatek-vcodec-Fix-H264-stateless-decod.patch
    (bsc#1012628 CVE-2024-47752 bsc#1232130).
  - Update
    patches.kernel.org/6.11.2-391-RDMA-rtrs-clt-Reset-cid-to-con_num-1-to-stay-i.patch
    (bsc#1012628 CVE-2024-47695 bsc#1231931).
  - Update
    patches.kernel.org/6.11.2-398-IB-mlx5-Fix-UMR-pd-cleanup-on-error-flow-of-dr.patch
    (bsc#1012628 CVE-2024-47694 bsc#1232014).
  - Update
    patches.kernel.org/6.11.2-399-IB-core-Fix-ib_cache_setup_one-error-flow-clea.patch
    (bsc#1012628 CVE-2024-47693 bsc#1232013).
  - Update
    patches.kernel.org/6.11.2-402-PCI-kirin-Fix-buffer-overflow-in-kirin_pcie_pa.patch
    (bsc#1012628 CVE-2024-47751 bsc#1232127).
  - Update
    patches.kernel.org/6.11.2-410-RDMA-hns-Fix-Use-After-Free-of-rsv_qp-on-HIP08.patch
    (bsc#1012628 CVE-2024-47750 bsc#1232182).
  - Update
    patches.kernel.org/6.11.2-412-RDMA-hns-Fix-spin_unlock_irqrestore-called-wit.patch
    (bsc#1012628 CVE-2024-47735 bsc#1232111).
  - Update
    patches.kernel.org/6.11.2-422-RDMA-cxgb4-Added-NULL-check-for-lookup_atid.patch
    (bsc#1012628 CVE-2024-47749 bsc#1232180).
  - Update
    patches.kernel.org/6.11.2-424-ntb-intel-Fix-the-NULL-vs-IS_ERR-bug-for-debug.patch
    (bsc#1012628 CVE-2023-52917 bsc#1231849).
  - Update
    patches.kernel.org/6.11.2-427-nfsd-call-cache_put-if-xdr_reserve_space-retur.patch
    (bsc#1012628 CVE-2024-47737 bsc#1232056).
  - Update
    patches.kernel.org/6.11.2-428-nfsd-return-EINVAL-when-namelen-is-0.patch
    (bsc#1012628 CVE-2024-47692 bsc#1231857).
  - Update
    patches.kernel.org/6.11.2-439-f2fs-fix-to-avoid-use-after-free-in-f2fs_stop_.patch
    (bsc#1012628 CVE-2024-47691 bsc#1232012).
  - Update
    patches.kernel.org/6.11.2-442-f2fs-get-rid-of-online-repaire-on-corrupted-di.patch
    (bsc#1012628 CVE-2024-47690 bsc#1232011).
  - Update
    patches.kernel.org/6.11.2-443-f2fs-fix-to-don-t-set-SB_RDONLY-in-f2fs_handle.patch
    (bsc#1012628 CVE-2024-47689 bsc#1232010).
  - Update
    patches.kernel.org/6.11.2-460-driver-core-Fix-a-potential-null-ptr-deref-in-.patch
    (bsc#1012628 CVE-2024-47688 bsc#1232009).
  - Update
    patches.kernel.org/6.11.2-469-vdpa-mlx5-Fix-invalid-mr-resource-destroy.patch
    (bsc#1012628 CVE-2024-47687 bsc#1232003).
  - Update
    patches.kernel.org/6.11.2-470-vhost_vdpa-assign-irq-bypass-producer-token-co.patch
    (bsc#1012628 CVE-2024-47748 bsc#1232174).
  - Update
    patches.kernel.org/6.11.2-471-ep93xx-clock-Fix-off-by-one-in-ep93xx_div_reca.patch
    (bsc#1012628 CVE-2024-47686 bsc#1232000).
  - Update
    patches.kernel.org/6.11.2-477-netfilter-nf_reject_ipv6-fix-nf_reject_ip6_tcp.patch
    (bsc#1012628 CVE-2024-47685 bsc#1231998).
  - Update
    patches.kernel.org/6.11.2-478-net-seeq-Fix-use-after-free-vulnerability-in-e.patch
    (bsc#1012628 CVE-2024-47747 bsc#1232145).
  - Update
    patches.kernel.org/6.11.2-480-tcp-check-skb-is-non-NULL-in-tcp_rto_delta_us.patch
    (bsc#1012628 CVE-2024-47684 bsc#1231987).
  - Update
    patches.kernel.org/6.11.2-486-bonding-Fix-unnecessary-warnings-and-logs-from.patch
    (bsc#1012628 CVE-2024-47734 bsc#1232055).
  - Update
    patches.kernel.org/6.11.2-497-fuse-use-exclusive-lock-when-FUSE_I_CACHE_IO_M.patch
    (bsc#1012628 CVE-2024-47746 bsc#1232137).
  - Update
    patches.kernel.org/6.11.2-499-mm-call-the-security_mmap_file-LSM-hook-in-rem.patch
    (bsc#1012628 CVE-2024-47745 bsc#1232135).
  - Update
    patches.kernel.org/6.11.2-528-iommufd-Protect-against-overflow-of-ALIGN-duri.patch
    (bsc#1012628 CVE-2024-47719 bsc#1231865).
  - Update
    patches.kernel.org/6.11.2-537-KVM-Use-dedicated-mutex-to-protect-kvm_usage_c.patch
    (bsc#1012628 CVE-2024-47744 bsc#1232132).
  - Update
    patches.kernel.org/6.11.2-538-drm-amd-display-Skip-Recompute-DSC-Params-if-n.patch
    (bsc#1012628 CVE-2024-47683 bsc#1231975).
  - Update
    patches.kernel.org/6.11.2-562-x86-tdx-Fix-in-kernel-MMIO-check.patch
    (bsc#1012628 CVE-2024-47727 bsc#1232116).
  - Update
    patches.kernel.org/6.11.2-563-KEYS-prevent-NULL-pointer-dereference-in-find_.patch
    (bsc#1012628 CVE-2024-47743 bsc#1232129).
  - Update
    patches.kernel.org/6.11.2-569-scsi-sd-Fix-off-by-one-error-in-sd_read_block_.patch
    (bsc#1012628 CVE-2024-47682 bsc#1231856).
  - Update
    patches.kernel.org/6.11.2-592-firmware_loader-Block-path-traversal.patch
    (bsc#1012628 CVE-2024-47742 bsc#1232126).
  - Update
    patches.kernel.org/6.11.2-603-ACPI-sysfs-validate-return-type-of-_STR-method.patch
    (bsc#1012628 CVE-2024-49860 bsc#1231861).
  - Update
    patches.kernel.org/6.11.2-606-efistub-tpm-Use-ACPI-reclaim-memory-for-event-.patch
    (bsc#1012628 CVE-2024-49858 bsc#1232251).
  - Update
    patches.kernel.org/6.11.2-615-wifi-mt76-mt7996-fix-NULL-pointer-dereference-.patch
    (bsc#1012628 CVE-2024-47681 bsc#1231855).
  - Update
    patches.kernel.org/6.11.2-625-btrfs-fix-race-setting-file-private-on-concurr.patch
    (bsc#1012628 CVE-2024-47741 bsc#1231869).
  - Update
    patches.kernel.org/6.11.2-628-f2fs-fix-to-wait-dio-completion.patch
    (bsc#1012628 CVE-2024-47726 bsc#1232113).
  - Update
    patches.kernel.org/6.11.2-632-f2fs-Require-FMODE_WRITE-for-atomic-write-ioct.patch
    (bsc#1012628 CVE-2024-47740 bsc#1231867).
  - Update
    patches.kernel.org/6.11.2-633-f2fs-check-discard-support-for-conventional-zo.patch
    (bsc#1012628 CVE-2024-47680 bsc#1231970).
  - Update
    patches.kernel.org/6.11.2-634-f2fs-fix-to-check-atomic_file-in-f2fs-ioctl-in.patch
    (bsc#1012628 CVE-2024-49859 bsc#1232252).
  - Update
    patches.kernel.org/6.11.2-644-vfs-fix-race-between-evice_inodes-and-find_ino.patch
    (bsc#1012628 CVE-2024-47679 bsc#1231930).
  - Update
    patches.kernel.org/6.11.2-645-netfs-Delete-subtree-of-fs-netfs-when-netfs-mo.patch
    (bsc#1012628 CVE-2024-47733 bsc#1232110).
  - Update
    patches.kernel.org/6.11.2-649-icmp-change-the-order-of-rate-limits.patch
    (bsc#1012628 CVE-2024-47678 bsc#1231854).
  - Update
    patches.kernel.org/6.11.2-653-padata-use-integer-wrap-around-to-prevent-dead.patch
    (bsc#1012628 CVE-2024-47739 bsc#1232124).
  - Update
    patches.kernel.org/6.11.2-677-exfat-resolve-memory-leak-from-exfat_create_up.patch
    (bsc#1012628 CVE-2024-47677 bsc#1231853).
  - Update
    patches.kernel.org/6.11.2-686-mm-hugetlb.c-fix-UAF-of-vma-in-hugetlb-fault-p.patch
    (bsc#1012628 CVE-2024-47676 bsc#1231927).
  - Update
    patches.kernel.org/6.11.2-694-bpf-Fix-use-after-free-in-bpf_uprobe_multi_lin.patch
    (bsc#1012628 CVE-2024-47675 bsc#1231926).
  - Update
    patches.kernel.org/6.11.3-001-static_call-Handle-module-init-failure-correct.patch
    (bsc#1012628 CVE-2024-50002 bsc#1232083).
  - Update
    patches.kernel.org/6.11.3-002-static_call-Replace-pointless-WARN_ON-in-stati.patch
    (bsc#1012628 CVE-2024-49954 bsc#1232155).
  - Update
    patches.kernel.org/6.11.3-014-mailbox-bcm2835-Fix-timeout-during-suspend-mod.patch
    (bsc#1012628 CVE-2024-49963 bsc#1232147).
  - Update
    patches.kernel.org/6.11.3-016-ceph-remove-the-incorrect-Fw-reference-check-w.patch
    (bsc#1012628 CVE-2024-50179 bsc#1233123).
  - Update
    patches.kernel.org/6.11.3-020-net-mlx5-Fix-error-path-in-multi-packet-WQE-tr.patch
    (bsc#1012628 CVE-2024-50001 bsc#1232084).
  - Update
    patches.kernel.org/6.11.3-022-net-mlx5e-Fix-NULL-deref-in-mlx5e_tir_builder_.patch
    (bsc#1012628 CVE-2024-50000 bsc#1232085).
  - Update
    patches.kernel.org/6.11.3-024-net-mlx5e-Fix-crash-caused-by-calling-__xfrm_s.patch
    (bsc#1012628 CVE-2024-49953 bsc#1232156).
  - Update
    patches.kernel.org/6.11.3-029-netfilter-nf_tables-prevent-nf_skb_duplicated-.patch
    (bsc#1012628 CVE-2024-49952 bsc#1232157).
  - Update
    patches.kernel.org/6.11.3-031-Bluetooth-MGMT-Fix-possible-crash-on-mgmt_inde.patch
    (bsc#1012628 CVE-2024-49951 bsc#1232158).
  - Update
    patches.kernel.org/6.11.3-032-Bluetooth-L2CAP-Fix-uaf-in-l2cap_connect.patch
    (bsc#1012628 CVE-2024-49950 bsc#1232159).
  - Update
    patches.kernel.org/6.11.3-035-afs-Fix-the-setting-of-the-server-responding-f.patch
    (bsc#1012628 CVE-2024-49999 bsc#1232086).
  - Update
    patches.kernel.org/6.11.3-036-net-dsa-improve-shutdown-sequence.patch
    (bsc#1012628 CVE-2024-49998 bsc#1232087).
  - Update
    patches.kernel.org/6.11.3-039-net-ethernet-lantiq_etop-fix-memory-disclosure.patch
    (bsc#1012628 CVE-2024-49997 bsc#1232088).
  - Update
    patches.kernel.org/6.11.3-042-net-avoid-potential-underflow-in-qdisc_pkt_len.patch
    (bsc#1012628 CVE-2024-49949 bsc#1232160).
  - Update
    patches.kernel.org/6.11.3-043-net-add-more-sanity-checks-to-qdisc_pkt_len_in.patch
    (bsc#1012628 CVE-2024-49948 bsc#1232161).
  - Update
    patches.kernel.org/6.11.3-047-net-test-for-not-too-small-csum_start-in-virti.patch
    (bsc#1012628 CVE-2024-49947 bsc#1232162).
  - Update
    patches.kernel.org/6.11.3-048-ppp-do-not-assume-bh-is-held-in-ppp_channel_br.patch
    (bsc#1012628 CVE-2024-49946 bsc#1232164).
  - Update
    patches.kernel.org/6.11.3-051-net-ncsi-Disable-the-ncsi-work-before-freeing-.patch
    (bsc#1012628 CVE-2024-49945 bsc#1232165).
  - Update
    patches.kernel.org/6.11.3-054-sctp-set-sk_state-back-to-CLOSED-if-autobind-f.patch
    (bsc#1012628 CVE-2024-49944 bsc#1232166).
  - Update
    patches.kernel.org/6.11.3-056-drm-panthor-Fix-race-when-converting-group-han.patch
    (bsc#1012628 CVE-2024-50174 bsc#1233093).
  - Update
    patches.kernel.org/6.11.3-066-ASoC-Intel-soc-acpi-intel-rpl-match-add-missin.patch
    (bsc#1012628 CVE-2024-50011 bsc#1232081).
  - Update
    patches.kernel.org/6.11.3-071-drm-xe-guc_submit-add-missing-locking-in-wedge.patch
    (bsc#1012628 CVE-2024-49943 bsc#1232167).
  - Update
    patches.kernel.org/6.11.3-073-drm-xe-Prevent-null-pointer-access-in-xe_migra.patch
    (bsc#1012628 CVE-2024-49942 bsc#1232168).
  - Update
    patches.kernel.org/6.11.3-074-cifs-Fix-buffer-overflow-when-parsing-NFS-repa.patch
    (bsc#1012628 CVE-2024-49996 bsc#1232089).
  - Update
    patches.kernel.org/6.11.3-076-gpiolib-Fix-potential-NULL-pointer-dereference.patch
    (bsc#1012628 CVE-2024-49941 bsc#1232169).
  - Update
    patches.kernel.org/6.11.3-084-l2tp-prevent-possible-tunnel-refcount-underflo.patch
    (bsc#1012628 CVE-2024-49940 bsc#1232812).
  - Update
    patches.kernel.org/6.11.3-086-wifi-rtw89-avoid-to-add-interface-to-list-twic.patch
    (bsc#1012628 CVE-2024-49939 bsc#1232381).
  - Update
    patches.kernel.org/6.11.3-087-wifi-ath9k_htc-Use-__skb_set_length-for-resett.patch
    (bsc#1012628 CVE-2024-49938 bsc#1232552).
  - Update
    patches.kernel.org/6.11.3-095-wifi-cfg80211-Set-correct-chandef-when-startin.patch
    (bsc#1012628 CVE-2024-49937 bsc#1232427).
  - Update
    patches.kernel.org/6.11.3-096-net-xen-netback-prevent-UAF-in-xenvif_flush_ha.patch
    (bsc#1012628 CVE-2024-49936 bsc#1232424).
  - Update
    patches.kernel.org/6.11.3-100-ACPI-PAD-fix-crash-in-exit_round_robin.patch
    (bsc#1012628 CVE-2024-49935 bsc#1232370).
  - Update
    patches.kernel.org/6.11.3-103-exec-don-t-WARN-for-racy-path_noexec-check.patch
    (bsc#1012628 CVE-2024-50010 bsc#1232388).
  - Update
    patches.kernel.org/6.11.3-104-fs-inode-Prevent-dump_mapping-accessing-invali.patch
    (bsc#1012628 CVE-2024-49934 bsc#1232387).
  - Update
    patches.kernel.org/6.11.3-112-blk_iocost-fix-more-out-of-bound-shifts.patch
    (bsc#1012628 CVE-2024-49933 bsc#1232368).
  - Update
    patches.kernel.org/6.11.3-113-btrfs-don-t-readahead-the-relocation-inode-on-.patch
    (bsc#1012628 CVE-2024-49932 bsc#1232376).
  - Update
    patches.kernel.org/6.11.3-114-wifi-ath12k-fix-array-out-of-bound-access-in-S.patch
    (bsc#1012628 CVE-2024-49931 bsc#1232275).
  - Update
    patches.kernel.org/6.11.3-115-wifi-ath11k-fix-array-out-of-bound-access-in-S.patch
    (bsc#1012628 CVE-2024-49930 bsc#1232260).
  - Update
    patches.kernel.org/6.11.3-121-ACPICA-check-null-return-of-ACPI_ALLOCATE_ZERO.patch
    (bsc#1012628 CVE-2024-49962 bsc#1232314).
  - Update
    patches.kernel.org/6.11.3-122-tipc-guard-against-string-buffer-overrun.patch
    (bsc#1012628 CVE-2024-49995 bsc#1232432).
  - Update
    patches.kernel.org/6.11.3-139-wifi-iwlwifi-mvm-avoid-NULL-pointer-dereferenc.patch
    (bsc#1012628 CVE-2024-49929 bsc#1232253).
  - Update
    patches.kernel.org/6.11.3-150-block-fix-integer-overflow-in-BLKSECDISCARD.patch
    (bsc#1012628 CVE-2024-49994 bsc#1225770).
  - Update
    patches.kernel.org/6.11.3-151-cpufreq-amd-pstate-add-check-for-cpufreq_cpu_g.patch
    (bsc#1012628 CVE-2024-50009 bsc#1232318).
  - Update
    patches.kernel.org/6.11.3-152-cpufreq-loongson3-Use-raw_smp_processor_id-in-.patch
    (bsc#1012628 CVE-2024-50178 bsc#1233121).
  - Update
    patches.kernel.org/6.11.3-155-wifi-rtw89-avoid-reading-out-of-bounds-when-lo.patch
    (bsc#1012628 CVE-2024-49928 bsc#1232250).
  - Update
    patches.kernel.org/6.11.3-158-net-napi-Prevent-overflow-of-napi_defer_hard_i.patch
    (bsc#1012628 CVE-2024-50018 bsc#1232419).
  - Update
    patches.kernel.org/6.11.3-162-wifi-mwifiex-Fix-memcpy-field-spanning-write-w.patch
    (bsc#1012628 CVE-2024-50008 bsc#1232317).
  - Update
    patches.kernel.org/6.11.3-166-x86-ioapic-Handle-allocation-failures-graceful.patch
    (bsc#1012628 CVE-2024-49927 bsc#1232249).
  - Update
    patches.kernel.org/6.11.3-180-x86-mm-ident_map-Use-gbpages-only-where-full-G.patch
    (bsc#1012628 CVE-2024-50017 bsc#1232312).
  - Update
    patches.kernel.org/6.11.3-181-ALSA-asihpi-Fix-potential-OOB-array-access.patch
    (bsc#1012628 CVE-2024-50007 bsc#1232394).
  - Update
    patches.kernel.org/6.11.3-187-rcu-tasks-Fix-access-non-existent-percpu-rtpcp.patch
    (bsc#1012628 CVE-2024-49926 bsc#1232247).
  - Update
    patches.kernel.org/6.11.3-189-fbdev-efifb-Register-sysfs-groups-through-driv.patch
    (bsc#1012628 CVE-2024-49925 bsc#1232224).
  - Update
    patches.kernel.org/6.11.3-190-fbdev-pxafb-Fix-possible-use-after-free-in-pxa.patch
    (bsc#1012628 CVE-2024-49924 bsc#1232364).
  - Update
    patches.kernel.org/6.11.3-200-drm-stm-Avoid-use-after-free-issues-with-crtc-.patch
    (bsc#1012628 CVE-2024-49992 bsc#1232430).
  - Update
    patches.kernel.org/6.11.3-201-drm-amd-display-Pass-non-null-to-dcn20_validat.patch
    (bsc#1012628 CVE-2024-49923 bsc#1232361).
  - Update
    patches.kernel.org/6.11.3-202-drm-amd-display-Check-null-pointers-before-usi.patch
    (bsc#1012628 CVE-2024-49922 bsc#1232374).
  - Update
    patches.kernel.org/6.11.3-203-drm-amd-display-Check-null-pointers-before-use.patch
    (bsc#1012628 CVE-2024-49921 bsc#1232371).
  - Update
    patches.kernel.org/6.11.3-204-drm-amd-display-Check-null-pointers-before-mul.patch
    (bsc#1012628 CVE-2024-49920 bsc#1232313).
  - Update
    patches.kernel.org/6.11.3-206-drm-amdkfd-amdkfd_free_gtt_mem-clear-the-corre.patch
    (bsc#1012628 CVE-2024-49991 bsc#1232282).
  - Update
    patches.kernel.org/6.11.3-207-drm-amd-display-Add-null-check-for-head_pipe-i.patch
    (bsc#1012628 CVE-2024-49919 bsc#1231968).
  - Update
    patches.kernel.org/6.11.3-208-drm-amd-display-Add-null-check-for-head_pipe-i.patch
    (bsc#1012628 CVE-2024-49918 bsc#1231967).
  - Update
    patches.kernel.org/6.11.3-209-drm-amd-display-Add-NULL-check-for-clk_mgr-and.patch
    (bsc#1012628 CVE-2024-49917 bsc#1231965).
  - Update
    patches.kernel.org/6.11.3-210-drm-amd-display-Add-NULL-check-for-clk_mgr-and.patch
    (bsc#1012628 CVE-2024-49916 bsc#1231964).
  - Update
    patches.kernel.org/6.11.3-211-drm-amd-display-Add-NULL-check-for-clk_mgr-in-.patch
    (bsc#1012628 CVE-2024-49915 bsc#1231963).
  - Update
    patches.kernel.org/6.11.3-212-drm-xe-hdcp-Check-GSC-structure-validity.patch
    (bsc#1012628 CVE-2024-49990 bsc#1232484).
  - Update
    patches.kernel.org/6.11.3-213-drm-amd-display-Add-null-check-for-pipe_ctx-pl.patch
    (bsc#1012628 CVE-2024-49914 bsc#1232369).
  - Update
    patches.kernel.org/6.11.3-214-drm-amd-display-Add-null-check-for-top_pipe_to.patch
    (bsc#1012628 CVE-2024-49913 bsc#1232307).
  - Update
    patches.kernel.org/6.11.3-222-drm-amd-display-Handle-null-stream_status-in-p.patch
    (bsc#1012628 CVE-2024-49912 bsc#1232367).
  - Update
    patches.kernel.org/6.11.3-223-drm-amd-display-Add-NULL-check-for-function-po.patch
    (bsc#1012628 CVE-2024-49911 bsc#1232366).
  - Update
    patches.kernel.org/6.11.3-224-drm-amd-display-Add-NULL-check-for-function-po.patch
    (bsc#1012628 CVE-2024-49910 bsc#1232365).
  - Update
    patches.kernel.org/6.11.3-225-drm-amd-display-Add-NULL-check-for-function-po.patch
    (bsc#1012628 CVE-2024-49909 bsc#1232337).
  - Update
    patches.kernel.org/6.11.3-226-drm-amd-display-fix-a-UBSAN-warning-in-DML2.1.patch
    (bsc#1012628 CVE-2024-50177 bsc#1233115).
  - Update
    patches.kernel.org/6.11.3-227-drm-amd-display-Add-null-check-for-afb-in-amdg.patch
    (bsc#1012628 CVE-2024-49908 bsc#1232335).
  - Update
    patches.kernel.org/6.11.3-228-drm-amd-display-Check-null-pointers-before-usi.patch
    (bsc#1012628 CVE-2024-49907 bsc#1232334).
  - Update
    patches.kernel.org/6.11.3-229-drm-amd-display-Check-null-pointer-before-try-.patch
    (bsc#1012628 CVE-2024-49906 bsc#1232332).
  - Update
    patches.kernel.org/6.11.3-230-drm-amd-display-Add-null-check-for-afb-in-amdg.patch
    (bsc#1012628 CVE-2024-49905 bsc#1232357).
  - Update
    patches.kernel.org/6.11.3-232-drm-amd-display-fix-double-free-issue-during-a.patch
    (bsc#1012628 CVE-2024-49989 bsc#1232483).
  - Update
    patches.kernel.org/6.11.3-233-drm-amdgpu-add-list-empty-check-to-avoid-null-.patch
    (bsc#1012628 CVE-2024-49904 bsc#1232356).
  - Update
    patches.kernel.org/6.11.3-235-jfs-Fix-uaf-in-dbFreeBits.patch
    (bsc#1012628 CVE-2024-49903 bsc#1232362).
  - Update
    patches.kernel.org/6.11.3-236-jfs-check-if-leafidx-greater-than-num-leaves-p.patch
    (bsc#1012628 CVE-2024-49902 bsc#1232378).
  - Update
    patches.kernel.org/6.11.3-239-drm-msm-adreno-Assign-msm_gpu-pdev-earlier-to-.patch
    (bsc#1012628 CVE-2024-49901 bsc#1232305).
  - Update
    patches.kernel.org/6.11.3-240-jfs-Fix-uninit-value-access-of-new_ea-in-ea_bu.patch
    (bsc#1012628 CVE-2024-49900 bsc#1232359).
  - Update
    patches.kernel.org/6.11.3-250-drm-amd-display-Initialize-denominators-defaul.patch
    (bsc#1012628 CVE-2024-49899 bsc#1232358).
  - Update
    patches.kernel.org/6.11.3-251-drm-amd-display-Check-null-initialized-variabl.patch
    (bsc#1012628 CVE-2024-49898 bsc#1232222).
  - Update
    patches.kernel.org/6.11.3-252-drm-amd-display-Check-phantom_stream-before-it.patch
    (bsc#1012628 CVE-2024-49897 bsc#1232355).
  - Update
    patches.kernel.org/6.11.3-253-drm-amd-display-Check-stream-before-comparing-.patch
    (bsc#1012628 CVE-2024-49896 bsc#1232221).
  - Update
    patches.kernel.org/6.11.3-254-drm-amd-display-Deallocate-DML-memory-if-alloc.patch
    (bsc#1012628 CVE-2024-49972 bsc#1232315).
  - Update
    patches.kernel.org/6.11.3-255-drm-amd-display-Increase-array-size-of-dummy_b.patch
    (bsc#1012628 CVE-2024-49971 bsc#1232473).
  - Update
    patches.kernel.org/6.11.3-256-drm-amd-display-Fix-index-out-of-bounds-in-DCN.patch
    (bsc#1012628 CVE-2024-49895 bsc#1232352).
  - Update
    patches.kernel.org/6.11.3-257-drm-amd-display-Fix-index-out-of-bounds-in-deg.patch
    (bsc#1012628 CVE-2024-49894 bsc#1232354).
  - Update
    patches.kernel.org/6.11.3-258-drm-amd-display-Implement-bounds-check-for-str.patch
    (bsc#1012628 CVE-2024-49970 bsc#1232516).
  - Update
    patches.kernel.org/6.11.3-259-drm-amd-display-Fix-index-out-of-bounds-in-DCN.patch
    (bsc#1012628 CVE-2024-49969 bsc#1232519).
  - Update
    patches.kernel.org/6.11.3-263-drm-amd-display-Check-stream_status-before-it-.patch
    (bsc#1012628 CVE-2024-49893 bsc#1232350).
  - Update
    patches.kernel.org/6.11.3-264-drm-amd-display-Avoid-overflow-assignment-in-l.patch
    (bsc#1012628 CVE-2024-50016 bsc#1232420).
  - Update
    patches.kernel.org/6.11.3-265-drm-amd-display-Initialize-get_bytes_per_eleme.patch
    (bsc#1012628 CVE-2024-49892 bsc#1232220).
  - Update
    patches.kernel.org/6.11.3-269-scsi-lpfc-Validate-hdwq-pointers-before-derefe.patch
    (bsc#1012628 CVE-2024-49891 bsc#1232218).
  - Update
    patches.kernel.org/6.11.3-286-drm-amd-pm-ensure-the-fw_info-is-not-null-befo.patch
    (bsc#1012628 CVE-2024-49890 bsc#1232217).
  - Update
    patches.kernel.org/6.11.3-299-ksmbd-add-refcnt-to-ksmbd_conn-struct.patch
    (bsc#1012628 CVE-2024-49988 bsc#1232482).
  - Update
    patches.kernel.org/6.11.3-302-ext4-filesystems-without-casefold-feature-cann.patch
    (bsc#1012628 CVE-2024-49968 bsc#1232264).
  - Update
    patches.kernel.org/6.11.3-305-ext4-avoid-use-after-free-in-ext4_ext_show_lea.patch
    (bsc#1012628 CVE-2024-49889 bsc#1232215).
  - Update
    patches.kernel.org/6.11.3-306-ext4-fix-i_data_sem-unlock-order-in-ext4_ind_m.patch
    (bsc#1012628 CVE-2024-50006 bsc#1232442).
  - Update
    patches.kernel.org/6.11.3-309-bpftool-Fix-undefined-behavior-in-qsort-NULL-0.patch
    (bsc#1012628 CVE-2024-49987 bsc#1232258).
  - Update
    patches.kernel.org/6.11.3-310-bpf-Fix-a-sdiv-overflow-issue.patch
    (bsc#1012628 CVE-2024-49888 bsc#1232208).
  - Update
    patches.kernel.org/6.11.3-333-f2fs-fix-to-don-t-panic-system-for-no-free-seg.patch
    (bsc#1012628 CVE-2024-49887 bsc#1232206).
  - Update
    patches.kernel.org/6.11.3-343-platform-x86-x86-android-tablets-Fix-use-after.patch
    (bsc#1012628 CVE-2024-49986 bsc#1232093).
  - Update
    patches.kernel.org/6.11.3-344-platform-x86-ISST-Fix-the-KASAN-report-slab-ou.patch
    (bsc#1012628 CVE-2024-49886 bsc#1232196).
  - Update
    patches.kernel.org/6.11.3-346-i2c-stm32f7-Do-not-prepare-unprepare-clock-dur.patch
    (bsc#1012628 CVE-2024-49985 bsc#1232094).
  - Update
    patches.kernel.org/6.11.3-349-media-i2c-ar0521-Use-cansleep-version-of-gpiod.patch
    (bsc#1012628 CVE-2024-49961 bsc#1232148).
  - Update
    patches.kernel.org/6.11.3-362-mm-slub-avoid-zeroing-kmalloc-redzone.patch
    (bsc#1012628 CVE-2024-49885 bsc#1232197).
  - Update
    patches.kernel.org/6.11.3-365-drm-v3d-Prevent-out-of-bounds-access-in-perfor.patch
    (bsc#1012628 CVE-2024-49984 bsc#1232095).
  - Update
    patches.kernel.org/6.11.3-377-ext4-no-need-to-continue-when-the-number-of-en.patch
    (bsc#1012628 CVE-2024-49967 bsc#1232140).
  - Update
    patches.kernel.org/6.11.3-379-ext4-fix-slab-use-after-free-in-ext4_split_ext.patch
    (bsc#1012628 CVE-2024-49884 bsc#1232198).
  - Update
    patches.kernel.org/6.11.3-382-ext4-dax-fix-overflowing-extents-beyond-inode-.patch
    (bsc#1012628 CVE-2024-50015 bsc#1232079).
  - Update
    patches.kernel.org/6.11.3-384-ext4-drop-ppath-from-ext4_ext_replay_update_ex.patch
    (bsc#1012628 CVE-2024-49983 bsc#1232096).
  - Update
    patches.kernel.org/6.11.3-385-ext4-aovid-use-after-free-in-ext4_ext_insert_e.patch
    (bsc#1012628 CVE-2024-49883 bsc#1232199).
  - Update
    patches.kernel.org/6.11.3-386-ext4-fix-double-brelse-the-buffer-of-the-exten.patch
    (bsc#1012628 CVE-2024-49882 bsc#1232200).
  - Update
    patches.kernel.org/6.11.3-387-ext4-fix-timer-use-after-free-on-failed-mount.patch
    (bsc#1012628 CVE-2024-49960 bsc#1232395).
  - Update
    patches.kernel.org/6.11.3-388-ext4-fix-access-to-uninitialised-lock-in-fc-re.patch
    (bsc#1012628 CVE-2024-50014 bsc#1232446).
  - Update
    patches.kernel.org/6.11.3-389-ext4-update-orig_path-in-ext4_find_extent.patch
    (bsc#1012628 CVE-2024-49881 bsc#1232201).
  - Update
    patches.kernel.org/6.11.3-395-ext4-fix-off-by-one-issue-in-alloc_flex_gd.patch
    (bsc#1012628 CVE-2024-49880 bsc#1232205).
  - Update
    patches.kernel.org/6.11.3-403-drm-omapdrm-Add-missing-check-for-alloc_ordere.patch
    (bsc#1012628 CVE-2024-49879 bsc#1232349).
  - Update
    patches.kernel.org/6.11.3-404-resource-fix-region_intersects-vs-add_memory_d.patch
    (bsc#1012628 CVE-2024-49878 bsc#1232340).
  - Update
    patches.kernel.org/6.11.3-406-jbd2-stop-waiting-for-space-when-jbd2_cleanup_.patch
    (bsc#1012628 CVE-2024-49959 bsc#1232149).
  - Update
    patches.kernel.org/6.11.3-411-ocfs2-reserve-space-for-inline-xattr-before-at.patch
    (bsc#1012628 CVE-2024-49958 bsc#1232151).
  - Update
    patches.kernel.org/6.11.3-412-ocfs2-cancel-dqi_sync_work-before-freeing-oinf.patch
    (bsc#1012628 CVE-2024-49966 bsc#1232141).
  - Update
    patches.kernel.org/6.11.3-413-ocfs2-remove-unreasonable-unlock-in-ocfs2_read.patch
    (bsc#1012628 CVE-2024-49965 bsc#1232142).
  - Update
    patches.kernel.org/6.11.3-414-ocfs2-fix-null-ptr-deref-when-journal-load-fai.patch
    (bsc#1012628 CVE-2024-49957 bsc#1232152).
  - Update
    patches.kernel.org/6.11.3-415-ocfs2-fix-possible-null-ptr-deref-in-ocfs2_set.patch
    (bsc#1012628 CVE-2024-49877 bsc#1232339).
  - Update
    patches.kernel.org/6.11.3-421-drm-xe-fix-UAF-around-queue-destruction.patch
    (bsc#1012628 CVE-2024-49876 bsc#1232336).
  - Update
    patches.kernel.org/6.11.3-428-exfat-fix-memory-leak-in-exfat_load_bitmap.patch
    (bsc#1012628 CVE-2024-50013 bsc#1232080).
  - Update
    patches.kernel.org/6.11.3-432-nfsd-map-the-EBADMSG-to-nfserr_io-to-avoid-war.patch
    (bsc#1012628 CVE-2024-49875 bsc#1232333).
  - Update
    patches.kernel.org/6.11.3-434-i3c-master-svc-Fix-use-after-free-vulnerabilit.patch
    (bsc#1012628 CVE-2024-49874 bsc#1232295).
  - Update
    patches.kernel.org/6.11.3-440-aoe-fix-the-potential-use-after-free-problem-i.patch
    (bsc#1012628 CVE-2024-49982 bsc#1232097).
  - Update
    patches.kernel.org/6.11.3-445-remoteproc-k3-r5-Fix-error-handling-when-power.patch
    (bsc#1012628 CVE-2024-50176 bsc#1233091).
  - Update
    patches.kernel.org/6.11.3-446-gfs2-fix-double-destroy_workqueue-error.patch
    (bsc#1012628 CVE-2024-49956 bsc#1232153).
  - Update
    patches.kernel.org/6.11.3-457-media-venus-fix-use-after-free-bug-in-venus_re.patch
    (bsc#1012628 CVE-2024-49981 bsc#1232098).
  - Update
    patches.kernel.org/6.11.3-459-media-qcom-camss-Remove-use_count-guard-in-sto.patch
    (bsc#1012628 CVE-2024-50175 bsc#1233092).
  - Update
    patches.kernel.org/6.11.3-470-vrf-revert-vrf-Remove-unnecessary-RCU-bh-criti.patch
    (bsc#1012628 CVE-2024-49980 bsc#1232099).
  - Update
    patches.kernel.org/6.11.3-471-net-gso-fix-tcp-fraglist-segmentation-after-pu.patch
    (bsc#1012628 CVE-2024-49979 bsc#1232100).
  - Update
    patches.kernel.org/6.11.3-472-gso-fix-udp-gso-fraglist-segmentation-after-pu.patch
    (bsc#1012628 CVE-2024-49978 bsc#1232101).
  - Update
    patches.kernel.org/6.11.3-475-net-stmmac-Fix-zero-division-error-when-disabl.patch
    (bsc#1012628 CVE-2024-49977 bsc#1232102).
  - Update
    patches.kernel.org/6.11.3-477-mm-filemap-fix-filemap_get_folios_contig-THP-p.patch
    (bsc#1012628 CVE-2024-49873 bsc#1232291).
  - Update
    patches.kernel.org/6.11.3-478-mm-hugetlb-fix-memfd_pin_folios-free_huge_page.patch
    (bsc#1012628 CVE-2024-49964 bsc#1232144).
  - Update
    patches.kernel.org/6.11.3-481-mm-gup-fix-memfd_pin_folios-alloc-race-panic.patch
    (bsc#1012628 CVE-2024-49872 bsc#1232288).
  - Update
    patches.kernel.org/6.11.3-483-Input-adp5589-keys-fix-NULL-pointer-dereferenc.patch
    (bsc#1012628 CVE-2024-49871 bsc#1232287).
  - Update
    patches.kernel.org/6.11.3-486-cachefiles-fix-dentry-leak-in-cachefiles_open_.patch
    (bsc#1012628 CVE-2024-49870 bsc#1232279).
  - Update
    patches.kernel.org/6.11.3-493-btrfs-send-fix-buffer-overflow-detection-when-.patch
    (bsc#1012628 CVE-2024-49869 bsc#1232278).
  - Update
    patches.kernel.org/6.11.3-494-btrfs-fix-a-NULL-pointer-dereference-when-fail.patch
    (bsc#1012628 CVE-2024-49868 bsc#1232272).
  - Update
    patches.kernel.org/6.11.3-497-btrfs-wait-for-fixup-workers-before-stopping-c.patch
    (bsc#1012628 CVE-2024-49867 bsc#1232262).
  - Update
    patches.kernel.org/6.11.3-498-cpufreq-Avoid-a-bad-reference-count-on-CPU-nod.patch
    (bsc#1012628 CVE-2024-50012 bsc#1232386).
  - Update
    patches.kernel.org/6.11.3-503-mac802154-Fix-potential-RCU-dereference-issue-.patch
    (bsc#1012628 CVE-2024-50005 bsc#1232082).
  - Update
    patches.kernel.org/6.11.3-507-tracing-timerlat-Drop-interface_lock-in-stop_k.patch
    (bsc#1012628 CVE-2024-49976 bsc#1232103).
  - Update
    patches.kernel.org/6.11.3-508-tracing-timerlat-Fix-a-race-during-cpuhp-proce.patch
    (bsc#1012628 CVE-2024-49866 bsc#1232259).
  - Update
    patches.kernel.org/6.11.3-515-drm-panthor-Fix-access-to-uninitialized-variab.patch
    (bsc#1012628 CVE-2024-50173 bsc#1233094).
  - Update
    patches.kernel.org/6.11.3-524-drm-amd-display-update-DML2-policy-EnhancedPre.patch
    (bsc#1012628 CVE-2024-50004 bsc#1232396).
  - Update
    patches.kernel.org/6.11.3-525-drm-amd-display-Fix-system-hang-while-resume-w.patch
    (bsc#1012628 CVE-2024-50003 bsc#1232385).
  - Update
    patches.kernel.org/6.11.3-531-uprobes-fix-kernel-info-leak-via-uprobes-vma.patch
    (bsc#1012628 CVE-2024-49975 bsc#1232104).
  - Update
    patches.kernel.org/6.11.3-536-NFSD-Limit-the-number-of-concurrent-async-COPY.patch
    (bsc#1012628 CVE-2024-49974 bsc#1232383).
  - Update
    patches.kernel.org/6.11.3-540-r8169-add-tally-counter-fields-added-with-RTL8.patch
    (bsc#1012628 CVE-2024-49973 bsc#1232105).
  - Update
    patches.kernel.org/6.11.3-542-ACPI-battery-Fix-possible-crash-when-unregiste.patch
    (bsc#1012628 CVE-2024-49955 bsc#1232154).
  - Update
    patches.kernel.org/6.11.3-544-drm-xe-vm-move-xa_alloc-to-prevent-UAF.patch
    (bsc#1012628 CVE-2024-49865 bsc#1232257).
  - Update
    patches.kernel.org/6.11.3-549-rxrpc-Fix-a-race-between-socket-set-up-and-I-O.patch
    (bsc#1012628 CVE-2024-49864 bsc#1232256).
  - Update
    patches.kernel.org/6.11.3-550-vhost-scsi-null-ptr-dereference-in-vhost_scsi_.patch
    (bsc#1012628 CVE-2024-49863 bsc#1232255).
  - Update
    patches.kernel.org/6.11.4-001-unicode-Don-t-special-case-ignorable-code-poin.patch
    (bsc#1012628 CVE-2024-50089 bsc#1232860).
  - Update
    patches.kernel.org/6.11.4-002-net-fec-don-t-save-PTP-state-if-PTP-is-unsuppo.patch
    (bsc#1012628 CVE-2024-50097 bsc#1232871).
  - Update
    patches.kernel.org/6.11.4-011-ntfs3-Change-to-non-blocking-allocation-in-ntf.patch
    (bsc#1012628 CVE-2024-50065 bsc#1231899).
  - Update
    patches.kernel.org/6.11.4-014-zram-free-secondary-algorithms-names.patch
    (bsc#1012628 CVE-2024-50064 bsc#1231901).
  - Update
    patches.kernel.org/6.11.4-022-ext4-don-t-set-SB_RDONLY-after-filesystem-erro.patch
    (bsc#1012628 CVE-2024-50191 bsc#1233101).
  - Update
    patches.kernel.org/6.11.4-026-bpf-Prevent-tail-call-between-progs-attached-t.patch
    (bsc#1012628 CVE-2024-50063 bsc#1232435).
  - Update
    patches.kernel.org/6.11.4-028-RDMA-mad-Improve-handling-of-timed-out-WRs-of-.patch
    (bsc#1012628 CVE-2024-50095 bsc#1232873).
  - Update
    patches.kernel.org/6.11.4-031-RDMA-rtrs-srv-Avoid-null-pointer-deref-during-.patch
    (bsc#1012628 CVE-2024-50062 bsc#1232232).
  - Update
    patches.kernel.org/6.11.4-036-i3c-master-cdns-Fix-use-after-free-vulnerabili.patch
    (bsc#1012628 CVE-2024-50061 bsc#1232263).
  - Update
    patches.kernel.org/6.11.4-038-io_uring-check-if-we-need-to-reschedule-during.patch
    (bsc#1012628 CVE-2024-50060 bsc#1232417).
  - Update
    patches.kernel.org/6.11.4-039-ntb-ntb_hw_switchtec-Fix-use-after-free-vulner.patch
    (bsc#1012628 CVE-2024-50059 bsc#1232345).
  - Update
    patches.kernel.org/6.11.4-052-clk-imx-Remove-CLK_SET_PARENT_GATE-for-DRAM-mu.patch
    (bsc#1012628 CVE-2024-50181 bsc#1233127).
  - Update
    patches.kernel.org/6.11.4-053-serial-protect-uart_port_dtr_rts-in-uart_shutd.patch
    (bsc#1012628 CVE-2024-50058 bsc#1232285).
  - Update
    patches.kernel.org/6.11.4-054-usb-typec-tipd-Free-IRQ-only-if-it-was-request.patch
    (bsc#1012628 CVE-2024-50057 bsc#1232393).
  - Update
    patches.kernel.org/6.11.4-063-virtio_pmem-Check-device-status-before-request.patch
    (bsc#1012628 CVE-2024-50184 bsc#1233135).
  - Update
    patches.kernel.org/6.11.4-066-usb-gadget-uvc-Fix-ERR_PTR-dereference-in-uvc_.patch
    (bsc#1012628 CVE-2024-50056 bsc#1232389).
  - Update
    patches.kernel.org/6.11.4-067-dm-vdo-don-t-refer-to-dedupe_context-after-rel.patch
    (bsc#1012628 CVE-2024-50091 bsc#1232872).
  - Update
    patches.kernel.org/6.11.4-068-driver-core-bus-Fix-double-free-in-driver-API-.patch
    (bsc#1012628 CVE-2024-50055 bsc#1232329).
  - Update
    patches.kernel.org/6.11.4-071-scsi-lpfc-Ensure-DA_ID-handling-completion-bef.patch
    (bsc#1012628 CVE-2024-50183 bsc#1233130).
  - Update
    patches.kernel.org/6.11.4-073-drm-xe-oa-Fix-overflow-in-oa-batch-buffer.patch
    (bsc#1012628 CVE-2024-50090 bsc#1232862).
  - Update
    patches.kernel.org/6.11.4-074-drm-amd-display-Check-null-pointer-before-dere.patch
    (bsc#1012628 CVE-2024-50049 bsc#1232309).
  - Update
    patches.kernel.org/6.11.4-075-fbcon-Fix-a-NULL-pointer-dereference-issue-in-.patch
    (bsc#1012628 CVE-2024-50048 bsc#1232310).
  - Update
    patches.kernel.org/6.11.4-076-smb-client-fix-UAF-in-async-decryption.patch
    (bsc#1012628 CVE-2024-50047 bsc#1232418).
  - Update
    patches.kernel.org/6.11.4-077-fbdev-sisfb-Fix-strbuf-array-overflow.patch
    (bsc#1012628 CVE-2024-50180 bsc#1233125).
  - Update
    patches.kernel.org/6.11.4-082-ice-fix-memleak-in-ice_init_tx_topology.patch
    (bsc#1012628 CVE-2024-50190 bsc#1233090).
  - Update
    patches.kernel.org/6.11.4-086-NFSv4-Prevent-NULL-pointer-dereference-in-nfs4.patch
    (bsc#1012628 CVE-2024-50046 bsc#1231902).
  - Update
    patches.kernel.org/6.11.4-087-net-phy-dp83869-fix-memory-corruption-when-ena.patch
    (bsc#1012628 CVE-2024-50188 bsc#1233107).
  - Update
    patches.kernel.org/6.11.4-088-sfc-Don-t-invoke-xdp_do_flush-from-netpoll.patch
    (bsc#1012628 CVE-2024-50094 bsc#1232875).
  - Update
    patches.kernel.org/6.11.4-096-netfilter-br_netfilter-fix-panic-with-metadata.patch
    (bsc#1012628 CVE-2024-50045 bsc#1231903).
  - Update
    patches.kernel.org/6.11.4-099-Bluetooth-RFCOMM-FIX-possible-deadlock-in-rfco.patch
    (bsc#1012628 CVE-2024-50044 bsc#1231904).
  - Update
    patches.kernel.org/6.11.4-102-nfsd-fix-possible-badness-in-FREE_STATEID.patch
    (bsc#1012628 CVE-2024-50043 bsc#1231905).
  - Update
    patches.kernel.org/6.11.4-103-thermal-intel-int340x-processor-Fix-warning-du.patch
    (bsc#1012628 CVE-2024-50093 bsc#1232877).
  - Update
    patches.kernel.org/6.11.4-120-ice-Fix-increasing-MSI-X-on-VF.patch
    (bsc#1012628 CVE-2024-50042 bsc#1231906).
  - Update
    patches.kernel.org/6.11.4-121-i40e-Fix-macvlan-leak-by-synchronizing-access-.patch
    (bsc#1012628 CVE-2024-50041 bsc#1231907).
  - Update
    patches.kernel.org/6.11.4-122-igb-Do-not-bring-the-device-up-after-non-fatal.patch
    (bsc#1012628 CVE-2024-50040 bsc#1231908).
  - Update
    patches.kernel.org/6.11.4-124-net-sched-accept-TCA_STAB-only-for-root-qdisc.patch
    (bsc#1012628 CVE-2024-50039 bsc#1231909).
  - Update
    patches.kernel.org/6.11.4-131-netfilter-xtables-avoid-NFPROTO_UNSPEC-where-n.patch
    (bsc#1012628 CVE-2024-50038 bsc#1231910).
  - Update
    patches.kernel.org/6.11.4-135-net-netconsole-fix-wrong-warning.patch
    (bsc#1012628 CVE-2024-50092 bsc#1232874).
  - Update
    patches.kernel.org/6.11.4-136-drm-fbdev-dma-Only-cleanup-deferred-I-O-if-nec.patch
    (bsc#1012628 CVE-2024-50037 bsc#1231911).
  - Update
    patches.kernel.org/6.11.4-137-net-do-not-delay-dst_entries_add-in-dst_releas.patch
    (bsc#1012628 CVE-2024-50036 bsc#1231912).
  - Update
    patches.kernel.org/6.11.4-144-ppp-fix-ppp_async_encode-illegal-access.patch
    (bsc#1012628 CVE-2024-50035 bsc#1232392).
  - Update
    patches.kernel.org/6.11.4-145-net-smc-fix-lacks-of-icsk_syn_mss-with-IPPROTO.patch
    (bsc#1012628 CVE-2024-50034 bsc#1231913).
  - Update
    patches.kernel.org/6.11.4-146-slip-make-slhc_remember-more-robust-against-ma.patch
    (bsc#1012628 CVE-2024-50033 bsc#1231914).
  - Update
    patches.kernel.org/6.11.4-147-rcu-nocb-Fix-rcuog-wake-up-from-offline-softir.patch
    (bsc#1012628 CVE-2024-50032 bsc#1231915).
  - Update
    patches.kernel.org/6.11.4-156-HID-amd_sfh-Switch-to-device-managed-dmam_allo.patch
    (bsc#1012628 CVE-2024-50189 bsc#1233105).
  - Update
    patches.kernel.org/6.11.4-170-drm-v3d-Stop-the-active-perfmon-before-being-d.patch
    (bsc#1012628 CVE-2024-50031 bsc#1231947).
  - Update
    patches.kernel.org/6.11.4-171-drm-vc4-Stop-the-active-perfmon-before-being-d.patch
    (bsc#1012628 CVE-2024-50187 bsc#1233108).
  - Update
    patches.kernel.org/6.11.4-176-drm-xe-ct-prevent-UAF-in-send_recv.patch
    (bsc#1012628 CVE-2024-50030 bsc#1231948).
  - Update
    patches.kernel.org/6.11.4-178-Bluetooth-hci_conn-Fix-UAF-in-hci_enhanced_set.patch
    (bsc#1012628 CVE-2024-50029 bsc#1231949).
  - Update
    patches.kernel.org/6.11.4-179-thermal-core-Reference-count-the-zone-in-therm.patch
    (bsc#1012628 CVE-2024-50028 bsc#1231950).
  - Update
    patches.kernel.org/6.11.4-180-thermal-core-Free-tzp-copy-along-with-the-ther.patch
    (bsc#1012628 CVE-2024-50027 bsc#1231951).
  - Update
    patches.kernel.org/6.11.4-181-scsi-wd33c93-Don-t-use-stale-scsi_pointer-valu.patch
    (bsc#1012628 CVE-2024-50026 bsc#1231952).
  - Update
    patches.kernel.org/6.11.4-182-scsi-fnic-Move-flush_work-initialization-out-o.patch
    (bsc#1012628 CVE-2024-50025 bsc#1231953).
  - Update
    patches.kernel.org/6.11.4-189-net-explicitly-clear-the-sk-pointer-when-pf-cr.patch
    (bsc#1012628 CVE-2024-50186 bsc#1233110).
  - Update
    patches.kernel.org/6.11.4-190-net-Fix-an-unsafe-loop-on-the-list.patch
    (bsc#1012628 CVE-2024-50024 bsc#1231954).
  - Update
    patches.kernel.org/6.11.4-192-net-phy-Remove-LED-entry-from-LEDs-list-on-unr.patch
    (bsc#1012628 CVE-2024-50023 bsc#1231955).
  - Update
    patches.kernel.org/6.11.4-194-mptcp-handle-consistently-DSS-corruption.patch
    (bsc#1012628 CVE-2024-50185 bsc#1233109).
  - Update
    patches.kernel.org/6.11.4-196-device-dax-correct-pgoff-align-in-dax_set_mapp.patch
    (bsc#1012628 CVE-2024-50022 bsc#1231956).
  - Update
    patches.kernel.org/6.11.4-197-ice-Fix-improper-handling-of-refcount-in-ice_d.patch
    (bsc#1012628 CVE-2024-50021 bsc#1231957).
  - Update
    patches.kernel.org/6.11.4-198-ice-Fix-improper-handling-of-refcount-in-ice_s.patch
    (bsc#1012628 CVE-2024-50020 bsc#1231989).
  - Update
    patches.kernel.org/6.11.4-199-nouveau-dmem-Fix-vulnerability-in-migrate_to_r.patch
    (bsc#1012628 CVE-2024-50096 bsc#1232870).
  - Update
    patches.kernel.org/6.11.4-207-kthread-unpark-only-parked-kthread.patch
    (bsc#1012628 CVE-2024-50019 bsc#1231990).
  - Update
    patches.kernel.org/6.11.4-209-secretmem-disable-memfd_secret-if-arch-cannot-.patch
    (bsc#1012628 CVE-2024-50182 bsc#1233129).
  - Update
    patches.kernel.org/6.11.5-001-btrfs-fix-uninitialized-pointer-free-in-add_in.patch
    (bsc#1012628 CVE-2024-50088 bsc#1232498).
  - Update
    patches.kernel.org/6.11.5-002-btrfs-fix-uninitialized-pointer-free-on-read_a.patch
    (bsc#1012628 CVE-2024-50087 bsc#1232499).
  - Update
    patches.kernel.org/6.11.5-003-ksmbd-fix-user-after-free-from-session-log-off.patch
    (bsc#1012628 CVE-2024-50086 bsc#1232521).
  - Update
    patches.kernel.org/6.11.5-006-mptcp-pm-fix-UaF-read-in-mptcp_pm_nl_rm_addr_o.patch
    (bsc#1012628 CVE-2024-50085 bsc#1232508).
  - Update
    patches.kernel.org/6.11.5-012-posix-clock-Fix-missing-timespec64-check-in-pc.patch
    (bsc#1012628 CVE-2024-50195 bsc#1233103).
  - Update
    patches.kernel.org/6.11.5-015-arm64-probes-Remove-broken-LDR-literal-uprobe-.patch
    (bsc#1012628 CVE-2024-50099 bsc#1232887).
  - Update
    patches.kernel.org/6.11.5-017-arm64-probes-Fix-uprobes-for-big-endian-kernel.patch
    (bsc#1012628 CVE-2024-50194 bsc#1233111).
  - Update
    patches.kernel.org/6.11.5-019-net-microchip-vcap-api-Fix-memory-leaks-in-vca.patch
    (bsc#1012628 CVE-2024-50084 bsc#1232494).
  - Update
    patches.kernel.org/6.11.5-021-maple_tree-correct-tree-corruption-on-spanning.patch
    (bsc#1012628 CVE-2024-50200 bsc#1233088).
  - Update
    patches.kernel.org/6.11.5-026-mm-mremap-fix-move_normal_pmd-retract_page_tab.patch
    (bsc#1012628 CVE-2024-50066 bsc#1232078).
  - Update
    patches.kernel.org/6.11.5-029-mm-swapfile-skip-HugeTLB-pages-for-unuse_vma.patch
    (bsc#1012628 CVE-2024-50199 bsc#1233112).
  - Update
    patches.kernel.org/6.11.5-030-mm-damon-tests-sysfs-kunit.h-fix-memory-leak-i.patch
    (bsc#1012628 CVE-2024-50068 bsc#1232512).
  - Update
    patches.kernel.org/6.11.5-031-tcp-fix-mptcp-DSS-corruption-due-to-large-pmtu.patch
    (bsc#1012628 CVE-2024-50083 bsc#1232493).
  - Update
    patches.kernel.org/6.11.5-035-iommu-vt-d-Fix-incorrect-pci_for_each_dma_alia.patch
    (bsc#1012628 CVE-2024-50101 bsc#1232869).
  - Update
    patches.kernel.org/6.11.5-047-blk-rq-qos-fix-crash-on-rq_qos_wait-vs.-rq_qos.patch
    (bsc#1012628 CVE-2024-50082 bsc#1232500).
  - Update
    patches.kernel.org/6.11.5-049-blk-mq-setup-queue-tag_set-before-initializing.patch
    (bsc#1012628 CVE-2024-50081 bsc#1232501).
  - Update
    patches.kernel.org/6.11.5-050-ublk-don-t-allow-user-copy-for-unprivileged-de.patch
    (bsc#1012628 CVE-2024-50080 bsc#1232502).
  - Update
    patches.kernel.org/6.11.5-051-io_uring-sqpoll-ensure-task-state-is-TASK_RUNN.patch
    (bsc#1012628 CVE-2024-50079 bsc#1232495).
  - Update
    patches.kernel.org/6.11.5-055-scsi-ufs-core-Set-SDEV_OFFLINE-when-UFS-is-shu.patch
    (bsc#1012628 CVE-2024-50098 bsc#1232881).
  - Update
    patches.kernel.org/6.11.5-058-drm-radeon-Fix-encoder-possible_clones.patch
    (bsc#1012628 CVE-2024-50201 bsc#1233104).
  - Update
    patches.kernel.org/6.11.5-075-iio-light-veml6030-fix-IIO-device-retrieval-fr.patch
    (bsc#1012628 CVE-2024-50198 bsc#1233100).
  - Update
    patches.kernel.org/6.11.5-093-Bluetooth-Call-iso_exit-on-module-unload.patch
    (bsc#1012628 CVE-2024-50078 bsc#1232503).
  - Update
    patches.kernel.org/6.11.5-095-Bluetooth-ISO-Fix-multiple-init-when-debugfs-i.patch
    (bsc#1012628 CVE-2024-50077 bsc#1232504).
  - Update
    patches.kernel.org/6.11.5-098-vt-prevent-kernel-infoleak-in-con_font_get.patch
    (bsc#1012628 CVE-2024-50076 bsc#1232505).
  - Update
    patches.kernel.org/6.11.5-099-xhci-tegra-fix-checked-USB2-port-number.patch
    (bsc#1012628 CVE-2024-50075 bsc#1232506).
  - Update
    patches.kernel.org/6.11.5-105-USB-gadget-dummy-hcd-Fix-task-hung-problem.patch
    (bsc#1012628 CVE-2024-50100 bsc#1232876).
  - Update
    patches.kernel.org/6.11.5-112-parport-Proper-fix-for-array-out-of-bounds-acc.patch
    (bsc#1012628 CVE-2024-50074 bsc#1232507).
  - Update
    patches.kernel.org/6.11.5-117-x86-entry_32-Clear-CPU-buffers-after-register-.patch
    (bsc#1012628 CVE-2024-50193 bsc#1233102).
  - Update
    patches.kernel.org/6.11.5-118-tty-n_gsm-Fix-use-after-free-in-gsm_cleanup_mu.patch
    (bsc#1012628 CVE-2024-50073 bsc#1232520).
  - Update
    patches.kernel.org/6.11.5-119-x86-bugs-Use-code-segment-selector-for-VERW-op.patch
    (bsc#1012628 CVE-2024-50072 bsc#1232513).
  - Update
    patches.kernel.org/6.11.5-120-pinctrl-nuvoton-fix-a-double-free-in-ma35_pinc.patch
    (bsc#1012628 CVE-2024-50071 bsc#1232509).
  - Update
    patches.kernel.org/6.11.5-121-pinctrl-intel-platform-fix-error-path-in-devic.patch
    (bsc#1012628 CVE-2024-50197 bsc#1233089).
  - Update
    patches.kernel.org/6.11.5-122-pinctrl-ocelot-fix-system-hang-on-level-based-.patch
    (bsc#1012628 CVE-2024-50196 bsc#1233113).
  - Update
    patches.kernel.org/6.11.5-123-pinctrl-stm32-check-devm_kasprintf-returned-va.patch
    (bsc#1012628 CVE-2024-50070 bsc#1232510).
  - Update
    patches.kernel.org/6.11.5-124-pinctrl-apple-check-devm_kasprintf-returned-va.patch
    (bsc#1012628 CVE-2024-50069 bsc#1232511).
  - Update
    patches.kernel.org/6.11.5-125-irqchip-gic-v4-Don-t-allow-a-VMOVP-on-a-dying-.patch
    (bsc#1012628 CVE-2024-50192 bsc#1233106).
  - Update
    patches.kernel.org/6.11.6-001-bpf-Use-raw_spinlock_t-in-ringbuf.patch
    (bsc#1012628 CVE-2024-50138 bsc#1232935).
  - Update
    patches.kernel.org/6.11.6-003-reset-starfive-jh71x0-Fix-accessing-the-empty-.patch
    (bsc#1012628 CVE-2024-50137 bsc#1232932).
  - Update
    patches.kernel.org/6.11.6-005-bpf-Make-sure-internal-and-UAPI-bpf_redirect-f.patch
    (bsc#1012628 CVE-2024-50163 bsc#1233098).
  - Update
    patches.kernel.org/6.11.6-007-bpf-devmap-provide-rxq-after-redirect.patch
    (bsc#1012628 CVE-2024-50162 bsc#1233075).
  - Update
    patches.kernel.org/6.11.6-011-RDMA-bnxt_re-Fix-a-possible-memory-leak.patch
    (bsc#1012628 CVE-2024-50172 bsc#1233029).
  - Update
    patches.kernel.org/6.11.6-013-RDMA-bnxt_re-Add-a-check-for-memory-allocation.patch
    (bsc#1012628 CVE-2024-50209 bsc#1233114).
  - Update
    patches.kernel.org/6.11.6-018-bpf-Check-the-remaining-info_cnt-before-repeat.patch
    (bsc#1012628 CVE-2024-50161 bsc#1233037).
  - Update
    patches.kernel.org/6.11.6-029-sched-core-Disable-page-allocation-in-task_tic.patch
    (bsc#1012628 CVE-2024-50140 bsc#1233060).
  - Update
    patches.kernel.org/6.11.6-030-ALSA-hda-cs8409-Fix-possible-NULL-dereference.patch
    (bsc#1012628 CVE-2024-50160 bsc#1233074).
  - Update
    patches.kernel.org/6.11.6-031-firmware-arm_scmi-Fix-the-double-free-in-scmi_.patch
    (bsc#1012628 CVE-2024-50159 bsc#1233041).
  - Update
    patches.kernel.org/6.11.6-040-RDMA-bnxt_re-Fix-out-of-bound-check.patch
    (bsc#1012628 CVE-2024-50158 bsc#1233036).
  - Update
    patches.kernel.org/6.11.6-043-RDMA-bnxt_re-Avoid-CPU-lockups-due-fifo-occupa.patch
    (bsc#1012628 CVE-2024-50157 bsc#1233032).
  - Update
    patches.kernel.org/6.11.6-046-RDMA-bnxt_re-Fix-a-bug-while-setting-up-Level-.patch
    (bsc#1012628 CVE-2024-50208 bsc#1233117).
  - Update
    patches.kernel.org/6.11.6-055-drm-msm-Avoid-NULL-dereference-in-msm_disp_sta.patch
    (bsc#1012628 CVE-2024-50156 bsc#1233073).
  - Update
    patches.kernel.org/6.11.6-063-ring-buffer-Fix-reader-locking-when-changing-t.patch
    (bsc#1012628 CVE-2024-50207 bsc#1233122).
  - Update
    patches.kernel.org/6.11.6-066-netdevsim-use-cond_resched-in-nsim_dev_trap_re.patch
    (bsc#1012628 CVE-2024-50155 bsc#1233035).
  - Update
    patches.kernel.org/6.11.6-072-net-systemport-fix-potential-memory-leak-in-bc.patch
    (bsc#1012628 CVE-2024-50171 bsc#1233057).
  - Update
    patches.kernel.org/6.11.6-076-net-bcmasp-fix-potential-memory-leak-in-bcmasp.patch
    (bsc#1012628 CVE-2024-50170 bsc#1233030).
  - Update
    patches.kernel.org/6.11.6-078-tcp-dccp-Don-t-use-timer_pending-in-reqsk_queu.patch
    (bsc#1012628 CVE-2024-50154 bsc#1233072).
  - Update
    patches.kernel.org/6.11.6-084-scsi-target-core-Fix-null-ptr-deref-in-target_.patch
    (bsc#1012628 CVE-2024-50153 bsc#1233061).
  - Update
    patches.kernel.org/6.11.6-085-smb-client-fix-possible-double-free-in-smb2_se.patch
    (bsc#1012628 CVE-2024-50152 bsc#1233033).
  - Update
    patches.kernel.org/6.11.6-086-smb-client-fix-OOBs-when-building-SMB2_IOCTL-r.patch
    (bsc#1012628 CVE-2024-50151 bsc#1233055).
  - Update
    patches.kernel.org/6.11.6-087-usb-typec-altmode-should-keep-reference-to-par.patch
    (bsc#1012628 CVE-2024-50150 bsc#1233051).
  - Update
    patches.kernel.org/6.11.6-089-drm-xe-fix-unbalanced-rpm-put-with-fence_fini.patch
    (bsc#1012628 CVE-2024-50144 bsc#1233040).
  - Update
    patches.kernel.org/6.11.6-092-drm-xe-Don-t-free-job-in-TDR.patch
    (bsc#1012628 CVE-2024-50149 bsc#1233034).
  - Update
    patches.kernel.org/6.11.6-095-Bluetooth-bnep-fix-wild-memory-access-in-proto.patch
    (bsc#1012628 CVE-2024-50148 bsc#1233063).
  - Update
    patches.kernel.org/6.11.6-097-net-ethernet-mtk_eth_soc-fix-memory-corruption.patch
    (bsc#1012628 CVE-2024-50206 bsc#1233288).
  - Update
    patches.kernel.org/6.11.6-099-net-mlx5-Fix-command-bitmask-initialization.patch
    (bsc#1012628 CVE-2024-50147 bsc#1233067).
  - Update
    patches.kernel.org/6.11.6-100-net-mlx5-Unregister-notifier-on-eswitch-init-f.patch
    (bsc#1012628 CVE-2024-50136 bsc#1232914).
  - Update
    patches.kernel.org/6.11.6-101-net-mlx5e-Don-t-call-cleanup-on-profile-rollba.patch
    (bsc#1012628 CVE-2024-50146 bsc#1233056).
  - Update
    patches.kernel.org/6.11.6-107-nvme-pci-fix-race-condition-between-reset-and-.patch
    (bsc#1012628 CVE-2024-50135 bsc#1232888).
  - Update
    patches.kernel.org/6.11.6-121-uprobe-avoid-out-of-bounds-memory-access-of-fe.patch
    (bsc#1012628 CVE-2024-50067 bsc#1232416).
  - Update
    patches.kernel.org/6.11.6-122-drm-vboxvideo-Replace-fake-VLA-at-end-of-vbva_.patch
    (bsc#1012628 CVE-2024-50134 bsc#1232890).
  - Update
    patches.kernel.org/6.11.6-129-udf-refactor-inode_bmap-to-handle-error.patch
    (bsc#1012628 CVE-2024-50211 bsc#1233096).
  - Update
    patches.kernel.org/6.11.6-130-udf-fix-uninit-value-use-in-udf_get_fileshorta.patch
    (bsc#1012628 CVE-2024-50143 bsc#1233038).
  - Update
    patches.kernel.org/6.11.6-136-LoongArch-Don-t-crash-in-stack_top-for-tasks-w.patch
    (bsc#1012628 CVE-2024-50133 bsc#1232854).
  - Update
    patches.kernel.org/6.11.6-139-tracing-probes-Fix-MAX_TRACE_ARGS-limit-handli.patch
    (bsc#1012628 CVE-2024-50132 bsc#1232861).
  - Update
    patches.kernel.org/6.11.6-140-tracing-Consider-the-NULL-character-when-valid.patch
    (bsc#1012628 CVE-2024-50131 bsc#1232896).
  - Update
    patches.kernel.org/6.11.6-143-xfrm-validate-new-SA-s-prefixlen-using-SA-fami.patch
    (bsc#1012628 CVE-2024-50142 bsc#1233028).
  - Update
    patches.kernel.org/6.11.6-144-netfilter-bpf-must-hold-reference-on-net-names.patch
    (bsc#1012628 CVE-2024-50130 bsc#1232894).
  - Update
    patches.kernel.org/6.11.6-145-net-pse-pd-Fix-out-of-bound-for-loop.patch
    (bsc#1012628 CVE-2024-50129 bsc#1232856).
  - Update
    patches.kernel.org/6.11.6-146-net-sun3_82586-fix-potential-memory-leak-in-su.patch
    (bsc#1012628 CVE-2024-50168 bsc#1233059).
  - Update
    patches.kernel.org/6.11.6-147-be2net-fix-potential-memory-leak-in-be_xmit.patch
    (bsc#1012628 CVE-2024-50167 bsc#1233049).
  - Update
    patches.kernel.org/6.11.6-151-octeon_ep-Add-SKB-allocation-failures-handling.patch
    (bsc#1012628 CVE-2024-50145 bsc#1233044).
  - Update
    patches.kernel.org/6.11.6-155-fsl-fman-Fix-refcount-handling-of-fman-related.patch
    (bsc#1012628 CVE-2024-50166 bsc#1233050).
  - Update
    patches.kernel.org/6.11.6-157-net-wwan-fix-global-oob-in-wwan_rtnl_policy.patch
    (bsc#1012628 CVE-2024-50128 bsc#1232905).
  - Update
    patches.kernel.org/6.11.6-162-bpf-Preserve-param-string-when-parsing-mount-o.patch
    (bsc#1012628 CVE-2024-50165 bsc#1233031).
  - Update
    patches.kernel.org/6.11.6-164-bpf-Fix-overloading-of-MEM_UNINIT-s-meaning.patch
    (bsc#1012628 CVE-2024-50164 bsc#1233099).
  - Update
    patches.kernel.org/6.11.6-167-net-sched-fix-use-after-free-in-taprio_change.patch
    (bsc#1012628 CVE-2024-50127 bsc#1232907).
  - Update
    patches.kernel.org/6.11.6-168-net-sched-use-RCU-read-side-critical-section-i.patch
    (bsc#1012628 CVE-2024-50126 bsc#1232895).
  - Update
    patches.kernel.org/6.11.6-170-posix-clock-posix-clock-Fix-unbalanced-locking.patch
    (bsc#1012628 CVE-2024-50210 bsc#1233097).
  - Update
    patches.kernel.org/6.11.6-172-Bluetooth-SCO-Fix-UAF-on-sco_sock_timeout.patch
    (bsc#1012628 CVE-2024-50125 bsc#1232928).
  - Update
    patches.kernel.org/6.11.6-173-Bluetooth-ISO-Fix-UAF-on-iso_sock_timeout.patch
    (bsc#1012628 CVE-2024-50124 bsc#1232926).
  - Update
    patches.kernel.org/6.11.6-180-bpf-Add-the-missing-BPF_LINK_TYPE-invocation-f.patch
    (bsc#1012628 CVE-2024-50123 bsc#1232857).
  - Update
    patches.kernel.org/6.11.6-187-PCI-Hold-rescan-lock-while-adding-devices-duri.patch
    (bsc#1012628 CVE-2024-50122 bsc#1232930).
  - Update
    patches.kernel.org/6.11.6-191-ALSA-firewire-lib-Avoid-division-by-zero-in-ap.patch
    (bsc#1012628 CVE-2024-50205 bsc#1233293).
  - Update
    patches.kernel.org/6.11.6-194-nfsd-cancel-nfsd_shrinker_work-using-sync-mode.patch
    (bsc#1012628 CVE-2024-50121 bsc#1232925).
  - Update
    patches.kernel.org/6.11.6-196-smb-client-Handle-kstrdup-failures-for-passwor.patch
    (bsc#1012628 CVE-2024-50120 bsc#1232924).
  - Update
    patches.kernel.org/6.11.6-197-cifs-fix-warning-when-destroy-cifs_io_request_.patch
    (bsc#1012628 CVE-2024-50119 bsc#1232858).
  - Update
    patches.kernel.org/6.11.6-207-btrfs-reject-ro-rw-reconfiguration-if-there-ar.patch
    (bsc#1012628 CVE-2024-50118 bsc#1232859).
  - Update
    patches.kernel.org/6.11.6-210-drm-amd-Guard-against-bad-data-for-ATIF-ACPI-m.patch
    (bsc#1012628 CVE-2024-50117 bsc#1232897).
  - Update
    patches.kernel.org/6.11.6-212-ACPI-PRM-Find-EFI_MEMORY_RUNTIME-block-for-PRM.patch
    (bsc#1012628 CVE-2024-50141 bsc#1233065).
  - Update
    patches.kernel.org/6.11.6-214-nilfs2-fix-kernel-bug-due-to-missing-clearing-.patch
    (bsc#1012628 CVE-2024-50116 bsc#1232892).
  - Update
    patches.kernel.org/6.11.6-218-KVM-nSVM-Ignore-nCR3-4-0-when-loading-PDPTEs-f.patch
    (bsc#1012628 CVE-2024-50115 bsc#1232919).
  - Update
    patches.kernel.org/6.11.6-219-KVM-arm64-Unregister-redistributor-for-failed-.patch
    (bsc#1012628 CVE-2024-50114 bsc#1232912).
  - Update
    patches.kernel.org/6.11.6-220-KVM-arm64-Fix-shift-out-of-bounds-bug.patch
    (bsc#1012628 CVE-2024-50139 bsc#1233062).
  - Update
    patches.kernel.org/6.11.6-222-firewire-core-fix-invalid-port-index-for-paren.patch
    (bsc#1012628 CVE-2024-50113 bsc#1232891).
  - Update
    patches.kernel.org/6.11.6-223-x86-lam-Disable-ADDRESS_MASKING-in-most-cases.patch
    (bsc#1012628 CVE-2024-50112 bsc#1232867).
  - Update
    patches.kernel.org/6.11.6-228-LoongArch-Enable-IRQ-if-do_ale-triggered-in-ir.patch
    (bsc#1012628 CVE-2024-50111 bsc#1232866).
  - Update
    patches.kernel.org/6.11.6-230-xfrm-fix-one-more-kernel-infoleak-in-algo-dump.patch
    (bsc#1012628 CVE-2024-50110 bsc#1232885).
  - Update
    patches.kernel.org/6.11.6-232-md-raid10-fix-null-ptr-dereference-in-raid10_s.patch
    (bsc#1012628 CVE-2024-50109 bsc#1232886).
  - Update
    patches.kernel.org/6.11.6-234-drm-amd-display-Disable-PSR-SU-on-Parade-08-01.patch
    (bsc#1012628 CVE-2024-50108 bsc#1232884).
  - Update
    patches.kernel.org/6.11.6-235-platform-x86-intel-pmc-Fix-pmc_core_iounmap-to.patch
    (bsc#1012628 CVE-2024-50107 bsc#1232883).
  - Update
    patches.kernel.org/6.11.6-2