Packages changed:
  chrony (4.1 -> 4.2)
  expat (2.4.1 -> 2.4.2)
  gpg2 (2.3.3 -> 2.3.4)
  gpgme
  grub2
  installation-images-MicroOS (17.30 -> 17.31)
  kernel-source (5.15.8 -> 5.15.12)
  kubernetes1.22
  libcap (2.61 -> 2.62)
  libthai (0.1.28 -> 0.1.29)
  pango (1.50.2 -> 1.50.3)
  python-SQLAlchemy (1.4.27 -> 1.4.29)
  python-ordered-set
  python-setuptools
  qemu (6.1.0 -> 6.2.0)
  raspberrypi-firmware (2021.11.16 -> 2021.12.01)
  raspberrypi-firmware-config (2021.11.16 -> 2021.12.01)
  sssd (2.6.1 -> 2.6.2)
  wicked (0.6.67 -> 0.6.68)
  yast2 (4.4.31 -> 4.4.32)

=== Details ===

==== chrony ====
Version update (4.1 -> 4.2)
Subpackages: chrony-pool-openSUSE

- Update to 4.2
  * Add support for NTPv4 extension field improving synchronisation
    stability and resolution of root delay and dispersion
    (experimental)
  * Add support for NTP over PTP (experimental)
  * Add support for AES-CMAC and hash functions in GnuTLS
  * Improve server interleaved mode to be more reliable and support
    multiple clients behind NAT
  * Update seccomp filter
  * Fix RTC support with 64-bit time_t on 32-bit Linux
  * Fix seccomp filter to work correctly with bind*device directives
- Obsoleted patches:
  * chrony-refid-internal-md5.patch
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch
- Update clknetsim to snapshot 470b5e9.
- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).
- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch

==== expat ====
Version update (2.4.1 -> 2.4.2)

- update to 2.4.2:
  * Link againgst libm for function "isnan"
  * Include expat_config.h as early as possible
  * Autotools: Include files with release archives:
  - buildconf.sh
  - fuzz/*.c
  * Autotools: Sync CMake templates
  * docs: Document that function XML_GetBuffer may return NULL
    when asking for a buffer of 0 (zero) bytes size
  * docs: Fix return value docs for both
    XML_SetBillionLaughsAttackProtection* functions
  * Version info bumped from 9:1:8 to 9:2:8

==== gpg2 ====
Version update (2.3.3 -> 2.3.4)

- GnuPG 2.3.4:
  * gpg: New option --min-rsa-length
  * gpg: New option --forbid-gen-key
  * gpg: New option --override-compliance-check
  * gpgconf: New command --show-configs
  * agent,dirmngr,keyboxd: New option --steal-socket
  * gpg: Fix printing of binary notations
  * gpg: Remove stale ultimately trusted keys from the trustdb
  * gpg: Fix indentation of --print-mds and --print-md sha512
  * gpg: Emit gpg 2.2 compatible Ed25519 signature
  * gpgsm: Detect circular chains in --list-chain
  * dirmngr: Make reading resolv.conf more robust
  * dirmngr: Ask keyservers to provide the key fingerprints
  * gpgconf: Allow changing gpg's deprecated keyserver option
  * gpg-wks-server: Fix created file permissions
  * scd: Support longer data for ssh-agent authentication with
    openpgp cards
  * scd: Modify DEVINFO behavior to support looping forever
  * Silence warning about the rootdir under Unices w/o a mounted
    /proc file system
  * Fix possible build problems about missing include files

==== gpgme ====

- Add patches to support building bindings packages for
  Python 3.10
  * gpgme-D545-python310.patch -- https://dev.gnupg.org/D545
  * gpgme-D546-python310.patch -- https://dev.gnupg.org/D546

==== grub2 ====
Subpackages: grub2-arm64-efi grub2-snapper-plugin

- Fix CVE-2021-3981 (bsc#1189644)
  * 0001-grub-mkconfig-restore-umask-for-grub.cfg.patch
- Fix can't allocate initrd error (bsc#1191378)
  * 0001-Factor-out-grub_efi_linux_boot.patch
  * 0002-Fix-race-in-EFI-validation.patch
  * 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
  * 0004-Try-to-pick-better-locations-for-kernel-and-initrd.patch
  * 0005-x86-efi-Use-bounce-buffers-for-reading-to-addresses-.patch
  * 0006-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch
  * 0007-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch
  * 0008-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch
  * 0009-x86-efi-Reduce-maximum-bounce-buffer-size-to-16-MiB.patch
  * 0010-efilinux-Fix-integer-overflows-in-grub_cmd_initrd.patch
  * 0011-Also-define-GRUB_EFI_MAX_ALLOCATION_ADDRESS-for-RISC.patch

==== installation-images-MicroOS ====
Version update (17.30 -> 17.31)

- merge gh#openSUSE/installation-images#559
- Remove more binaries appearing with Ruby 3.0 (bsc#1193192)
- 17.31

==== kernel-source ====
Version update (5.15.8 -> 5.15.12)

- Update config files.
- commit 375fcb8
- Linux 5.15.12 (bsc#1012628).
- arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd
  (bsc#1012628).
- net: usb: lan78xx: add Allied Telesis AT29M2-AF (bsc#1012628).
- ext4: prevent partial update of the extent blocks (bsc#1012628).
- ext4: check for out-of-order index extents in
  ext4_valid_extent_entries() (bsc#1012628).
- ext4: check for inconsistent extents between index and leaf
  block (bsc#1012628).
- selftests: KVM: Fix non-x86 compiling (bsc#1012628).
- HID: holtek: fix mouse probing (bsc#1012628).
- HID: potential dereference of null pointer (bsc#1012628).
- NFSD: Fix READDIR buffer overflow (bsc#1012628).
- PM: sleep: Fix error handling in dpm_prepare() (bsc#1012628).
- arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode
  (bsc#1012628).
- bus: sunxi-rsb: Fix shutdown (bsc#1012628).
- spi: change clk_disable_unprepare to clk_unprepare
  (bsc#1012628).
- ucounts: Fix rlimit max values check (bsc#1012628).
- drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf
  (bsc#1012628).
- ASoC: meson: aiu: fifo: Add missing
  dma_coerce_mask_and_coherent() (bsc#1012628).
- RDMA/hns: Fix RNR retransmission issue for HIP08 (bsc#1012628).
- IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
  (bsc#1012628).
- RDMA/hns: Replace kfree() with kvfree() (bsc#1012628).
- netfilter: nf_tables: fix use-after-free in
  nft_set_catchall_destroy() (bsc#1012628).
- netfilter: fix regression in looped (broad|multi)cast's MAC
  handling (bsc#1012628).
- ARM: dts: imx6qdl-wandboard: Fix Ethernet support (bsc#1012628).
- ice: Use xdp_buf instead of rx_buf for xsk zero-copy
  (bsc#1012628).
- ice: xsk: return xsk buffers back to pool when cleaning the ring
  (bsc#1012628).
- net: marvell: prestera: fix incorrect return of port_find
  (bsc#1012628).
- net: marvell: prestera: fix incorrect structure access
  (bsc#1012628).
- qlcnic: potential dereference null pointer of
  rx_queue->page_ring (bsc#1012628).
- tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex
  (bsc#1012628).
- ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie
  (bsc#1012628).
- inet: fully convert sk->sk_rx_dst to RCU rules (bsc#1012628).
- net: accept UFOv6 packages in virtio_net_hdr_to_skb
  (bsc#1012628).
- net: skip virtio_net_hdr_set_proto if protocol already set
  (bsc#1012628).
- igb: fix deadlock caused by taking RTNL in RPM resume path
  (bsc#1012628).
- ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
  (bsc#1012628).
- gpio: virtio: remove timeout (bsc#1012628).
- bonding: fix ad_actor_system option setting to default
  (bsc#1012628).
- fjes: Check for error irq (bsc#1012628).
- drivers: net: smc911x: Check for error irq (bsc#1012628).
- net: ks8851: Check for error irq (bsc#1012628).
- sfc: Check null pointer of rx_queue->page_ring (bsc#1012628).
- sfc: falcon: Check null pointer of rx_queue->page_ring
  (bsc#1012628).
- asix: fix uninit-value in asix_mdio_read() (bsc#1012628).
- asix: fix wrong return value in asix_check_host_enable()
  (bsc#1012628).
- io_uring: zero iocb->ki_pos for stream file types (bsc#1012628).
- veth: ensure skb entering GRO are not cloned (bsc#1012628).
- net: stmmac: ptp: fix potentially overflowing expression
  (bsc#1012628).
- net: bridge: Use array_size() helper in copy_to_user()
  (bsc#1012628).
- net: bridge: fix ioctl old_deviceless bridge argument
  (bsc#1012628).
- r8152: fix the force speed doesn't work for RTL8156
  (bsc#1012628).
- net: stmmac: dwmac-visconti: Fix value of
  ETHER_CLK_SEL_FREQ_SEL_2P5M (bsc#1012628).
- Input: elantech - fix stack out of bound access in
  elantech_change_report_id() (bsc#1012628).
- pinctrl: bcm2835: Change init order for gpio hogs (bsc#1012628).
- hwmon: (lm90) Fix usage of CONFIG2 register in detect function
  (bsc#1012628).
- hwmon: (lm90) Prevent integer overflow/underflow in hysteresis
  calculations (bsc#1012628).
- hwmon: (lm90) Introduce flag indicating extended temperature
  support (bsc#1012628).
- hwmon: (lm90) Add basic support for TI TMP461 (bsc#1012628).
- hwmon: (lm90) Drop critical attribute support for MAX6654
  (bsc#1012628).
- ARM: 9160/1: NOMMU: Reload __secondary_data after
  PROCINFO_INITFUNC (bsc#1012628).
- uapi: Fix undefined __always_inline on non-glibc systems
  (bsc#1012628).
- compiler.h: Fix annotation macro misplacement with Clang
  (bsc#1012628).
- platform/x86/intel: Remove X86_PLATFORM_DRIVERS_INTEL
  (bsc#1012628).
- kernel/crash_core: suppress unknown crashkernel parameter
  warning (bsc#1012628).
- Revert "x86/boot: Pull up cmdline preparation and early param
  parsing" (bsc#1012628).
- x86/boot: Move EFI range reservation after cmdline parsing
  (bsc#1012628).
- ALSA: jack: Check the return value of kstrdup() (bsc#1012628).
- ALSA: drivers: opl3: Fix incorrect use of vp->state
  (bsc#1012628).
- ALSA: rawmidi - fix the uninitalized user_pversion
  (bsc#1012628).
- ALSA: hda/hdmi: Disable silent stream on GLK (bsc#1012628).
- ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
  (bsc#1012628).
- ALSA: hda/realtek: Add new alc285-hp-amp-init model
  (bsc#1012628).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
  (bsc#1012628).
- ALSA: hda/realtek: Fix quirk for Clevo NJ51CU (bsc#1012628).
- ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s
  (bsc#1012628).
- ASoC: tegra: Add DAPM switches for headphones and mic jack
  (bsc#1012628).
- ASoC: tegra: Restore headphones jack name on Nyan Big
  (bsc#1012628).
- Input: atmel_mxt_ts - fix double free in mxt_read_info_block
  (bsc#1012628).
- ipmi: bail out if init_srcu_struct fails (bsc#1012628).
- ipmi: ssif: initialize ssif_info->client early (bsc#1012628).
- ipmi: fix initialization when workqueue allocation fails
  (bsc#1012628).
- parisc: Correct completer in lws start (bsc#1012628).
- parisc: Fix mask used to select futex spinlock (bsc#1012628).
- tee: handle lookup of shm with reference count 0 (bsc#1012628).
- x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
  (bsc#1012628).
- platform/x86: amd-pmc: only use callbacks for suspend
  (bsc#1012628).
- platform/x86: intel_pmc_core: fix memleak on registration
  failure (bsc#1012628).
- KVM: x86: Always set kvm_run->if_flag (bsc#1012628).
- KVM: x86/mmu: Don't advance iterator after restart due to
  yielding (bsc#1012628).
- KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is
  required (bsc#1012628).
- KVM: VMX: Always clear vmx->fail on emulation_required
  (bsc#1012628).
- KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU ==
  this vCPU (bsc#1012628).
- pinctrl: stm32: consider the GPIO offset to expose all the
  GPIO lines (bsc#1012628).
- gpio: dln2: Fix interrupts when replugging the device
  (bsc#1012628).
- mmc: sdhci-tegra: Fix switch to HS400ES mode (bsc#1012628).
- mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO
  commands (bsc#1012628).
- mmc: core: Disable card detect during shutdown (bsc#1012628).
- mmc: mmci: stm32: clear DLYB_CR after sending tuning command
  (bsc#1012628).
- ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
  (bsc#1012628).
- ksmbd: fix error code in ndr_read_int32() (bsc#1012628).
- ksmbd: fix uninitialized symbol 'pntsd_size' (bsc#1012628).
- ksmbd: disable SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
  (bsc#1012628).
- mac80211: fix locking in ieee80211_start_ap error path
  (bsc#1012628).
- mm: mempolicy: fix THP allocations escaping mempolicy
  restrictions (bsc#1012628).
- mm, hwpoison: fix condition in free hugetlb page path
  (bsc#1012628).
- mm/hwpoison: clear MF_COUNT_INCREASED before retrying
  get_any_page() (bsc#1012628).
- mm/damon/dbgfs: protect targets destructions with kdamond_lock
  (bsc#1012628).
- tee: optee: Fix incorrect page free bug (bsc#1012628).
- f2fs: fix to do sanity check on last xattr entry in
  __f2fs_setxattr() (bsc#1012628).
- netfs: fix parameter of cleanup() (bsc#1012628).
- KVM: VMX: Fix stale docs for
  kvm-intel.emulate_invalid_guest_state (bsc#1012628).
- arm64: dts: lx2160a: fix scl-gpios property name (bsc#1012628).
- kfence: fix memory leak when cat kfence objects (bsc#1012628).
- Input: iqs626a - prohibit inlining of channel parsing functions
  (bsc#1012628).
- Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312
  (bsc#1012628).
- Input: goodix - add id->model mapping for the "9111" model
  (bsc#1012628).
- ASoC: tas2770: Fix setting of high sample rates (bsc#1012628).
- ASoC: SOF: Intel: pci-tgl: add new ADL-P variant (bsc#1012628).
- ASoC: SOF: Intel: pci-tgl: add ADL-N support (bsc#1012628).
- ASoC: rt5682: fix the wrong jack type detected (bsc#1012628).
- pinctrl: mediatek: fix global-out-of-bounds issue (bsc#1012628).
- hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
  (bsc#1012628).
- hwmon: (lm90) Do not report 'busy' status bit as alarm
  (bsc#1012628).
- r8152: sync ocp base (bsc#1012628).
- ax25: NPD bug when detaching AX25 device (bsc#1012628).
- hamradio: defer ax25 kfree after unregister_netdev
  (bsc#1012628).
- hamradio: improve the incomplete fix to avoid NPD (bsc#1012628).
- tun: avoid double free in tun_free_netdev (bsc#1012628).
- phonet/pep: refuse to enable an unbound pipe (bsc#1012628).
- Refresh
  patches.suse/add-product-identifying-information-to-vmcoreinfo.patch.
- commit 202eb92
- Disable patches.suse/btrfs-use-the-new-VFS-super_block_dev.patch (bsc#1194007)
  Better to disable it completely.
- commit 730a488
- Linux 5.15.11 (bsc#1012628).
- xen/netback: don't queue unlimited number of packages
  (bsc#1012628).
- xen/netback: fix rx queue stall detection (bsc#1012628).
- xen/console: harden hvc_xen against event channel storms
  (bsc#1012628).
- xen/netfront: harden netfront against event channel storms
  (bsc#1012628).
- xen/blkfront: harden blkfront against event channel storms
  (bsc#1012628).
- Revert "xsk: Do not sleep in poll() when need_wakeup set"
  (bsc#1012628).
- selftests/damon: test debugfs file reads/writes with huge count
  (bsc#1012628).
- bus: ti-sysc: Fix variable set but not used warning for
  reinit_modules (bsc#1012628).
- io-wq: drop wqe lock before creating new worker (bsc#1012628).
- rcu: Mark accesses to rcu_state.n_force_qs (bsc#1012628).
- io-wq: check for wq exit after adding new worker task_work
  (bsc#1012628).
- io-wq: remove spurious bit clear on task_work addition
  (bsc#1012628).
- scsi: scsi_debug: Sanity check block descriptor length in
  resp_mode_select() (bsc#1012628).
- scsi: scsi_debug: Fix type in min_t to avoid stack OOB
  (bsc#1012628).
- scsi: scsi_debug: Don't call kcalloc() if size arg is zero
  (bsc#1012628).
- ovl: fix warning in ovl_create_real() (bsc#1012628).
- fuse: annotate lock in fuse_reverse_inval_entry() (bsc#1012628).
- media: mxl111sf: change mutex_init() location (bsc#1012628).
- USB: core: Make do_proc_control() and do_proc_bulk() killable
  (bsc#1012628).
- bpf: Fix extable address check (bsc#1012628).
- bpf, x64: Factor out emission of REX byte in more cases
  (bsc#1012628).
- mptcp: add missing documented NL params (bsc#1012628).
- xsk: Do not sleep in poll() when need_wakeup set (bsc#1012628).
- ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
  (bsc#1012628).
- can: m_can: pci: use custom bit timings for Elkhart Lake
  (bsc#1012628).
- can: m_can: make custom bittiming fields const (bsc#1012628).
- Revert "can: m_can: remove support for custom bit timing"
  (bsc#1012628).
- drm/amd/pm: fix reading SMU FW version from amdgpu_firmware_info
  on YC (bsc#1012628).
- drm/amdgpu: don't override default ECO_BITs setting
  (bsc#1012628).
- drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE
  (bsc#1012628).
- powerpc/module_64: Fix livepatching for RO modules
  (bsc#1012628).
- libata: if T_LENGTH is zero, dma direction should be DMA_NONE
  (bsc#1012628).
- perf inject: Fix segfault due to perf_data__fd() without open
  (bsc#1012628).
- perf inject: Fix segfault due to close without open
  (bsc#1012628).
- riscv: dts: unmatched: Add gpio card detect to mmc-spi-slot
  (bsc#1012628).
- riscv: dts: unleashed: Add gpio card detect to mmc-spi-slot
  (bsc#1012628).
- locking/rtmutex: Fix incorrect condition in
  rtmutex_spin_on_owner() (bsc#1012628).
- cifs: sanitize multiple delimiters in prepath (bsc#1012628).
- timekeeping: Really make sure wall_to_monotonic isn't positive
  (bsc#1012628).
- serial: 8250_fintek: Fix garbled text for console (bsc#1012628).
- iocost: Fix divide-by-zero on donation from low hweight cgroup
  (bsc#1012628).
- zonefs: add MODULE_ALIAS_FS (bsc#1012628).
- btrfs: fix missing blkdev_put() call in btrfs_scan_one_device()
  (bsc#1012628).
- btrfs: check WRITE_ERR when trying to read an extent buffer
  (bsc#1012628).
- btrfs: fix double free of anon_dev after failure to create
  subvolume (bsc#1012628).
- Refresh
  patches.suse/btrfs-use-the-new-VFS-super_block_dev.patch.
- btrfs: fix memory leak in __add_inode_ref() (bsc#1012628).
- selinux: fix sleeping function called from invalid context
  (bsc#1012628).
- USB: serial: option: add Telit FN990 compositions (bsc#1012628).
- USB: serial: cp210x: fix CP2105 GPIO registration (bsc#1012628).
- usb: gadget: u_ether: fix race in setting MAC address in setup
  phase (bsc#1012628).
- usb: typec: tcpm: fix tcpm unregister port but leave a pending
  timer (bsc#1012628).
- usb: cdnsp: Fix lack of spin_lock_irqsave/spin_lock_restore
  (bsc#1012628).
- usb: cdnsp: Fix issue in cdnsp_log_ep trace event (bsc#1012628).
- usb: cdnsp: Fix incorrect calling of cdnsp_died function
  (bsc#1012628).
- usb: cdnsp: Fix incorrect status for control request
  (bsc#1012628).
- usb: xhci: Extend support for runtime power management for
  AMD's Yellow carp (bsc#1012628).
- usb: xhci-mtk: fix list_del warning when enable list debug
  (bsc#1012628).
- PCI/MSI: Mask MSI-X vectors only on success (bsc#1012628).
- PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error (bsc#1012628).
- usb: dwc2: fix STM ID/VBUS detection startup delay in
  dwc2_driver_probe (bsc#1012628).
- USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04)
  (bsc#1012628).
- tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
  (bsc#1012628).
- KVM: x86: Drop guest CPUID check for host initiated writes to
  MSR_IA32_PERF_CAPABILITIES (bsc#1012628).
- Revert "usb: early: convert to readl_poll_timeout_atomic()"
  (bsc#1012628).
- USB: gadget: bRequestType is a bitfield, not a enum
  (bsc#1012628).
- powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n (bsc#1012628).
- bpf, selftests: Fix racing issue in btf_skc_cls_ingress test
  (bsc#1012628).
- bpf: Fix extable fixup offset (bsc#1012628).
- arm64: kexec: Fix missing error code 'ret' warning in
  load_other_segments() (bsc#1012628).
- afs: Fix mmap (bsc#1012628).
- sit: do not call ipip6_dev_free() from sit_init_net()
  (bsc#1012628).
- net: systemport: Add global locking for descriptor lifecycle
  (bsc#1012628).
- net/smc: Prevent smc_release() from long blocking (bsc#1012628).
- net: Fix double 0x prefix print in SKB dump (bsc#1012628).
- dsa: mv88e6xxx: fix debug print for SPEED_UNFORCED
  (bsc#1012628).
- sfc_ef100: potential dereference of null pointer (bsc#1012628).
- net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup
  (bsc#1012628).
- net/packet: rx_owner_map depends on pg_vec (bsc#1012628).
- netdevsim: Zero-initialize memory for new map's value in
  function nsim_bpf_map_alloc (bsc#1012628).
- ixgbe: set X550 MDIO speed before talking to PHY (bsc#1012628).
- ixgbe: Document how to enable NBASE-T support (bsc#1012628).
- igc: Fix typo in i225 LTR functions (bsc#1012628).
- igbvf: fix double free in `igbvf_probe` (bsc#1012628).
- igb: Fix removal of unicast MAC filters of VFs (bsc#1012628).
- soc/tegra: fuse: Fix bitwise vs. logical OR warning
  (bsc#1012628).
- mptcp: fix deadlock in __mptcp_push_pending() (bsc#1012628).
- mptcp: clear 'kern' flag from fallback sockets (bsc#1012628).
- mptcp: remove tcp ulp setsockopt support (bsc#1012628).
- drm/amd/pm: fix a potential gpu_metrics_table memory leak
  (bsc#1012628).
- drm/amd/display: Set exit_optimized_pwr_state for DCN31
  (bsc#1012628).
- ice: Don't put stale timestamps in the skb (bsc#1012628).
- ice: Use div64_u64 instead of div_u64 in adjfine (bsc#1012628).
- rds: memory leak in __rds_conn_create() (bsc#1012628).
- flow_offload: return EOPNOTSUPP for the unsupported mpls action
  type (bsc#1012628).
- net: stmmac: fix tc flower deletion for VLAN priority Rx
  steering (bsc#1012628).
- mac80211: fix lookup when adding AddBA extension element
  (bsc#1012628).
- cfg80211: Acquire wiphy mutex on regulatory work (bsc#1012628).
- mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock
  (bsc#1012628).
- drm/i915/display: Fix an unsigned subtraction which can never
  be negative (bsc#1012628).
- drm/ast: potential dereference of null pointer (bsc#1012628).
- mptcp: never allow the PM to close a listener subflow
  (bsc#1012628).
- selftest/net/forwarding: declare NETIFS p9 p10 (bsc#1012628).
- net: dsa: mv88e6xxx: Unforce speed & duplex in mac_link_down()
  (bsc#1012628).
- selftests/net: toeplitz: fix udp option (bsc#1012628).
- net/sched: sch_ets: don't remove idle classes from the
  round-robin list (bsc#1012628).
- drm: simpledrm: fix wrong unit with pixel clock (bsc#1012628).
- dmaengine: st_fdma: fix MODULE_ALIAS (bsc#1012628).
- dmaengine: idxd: fix missed completion on abort path
  (bsc#1012628).
- selftests: Fix IPv6 address bind tests (bsc#1012628).
- selftests: Fix raw socket bind tests with VRF (bsc#1012628).
- selftests: Add duplicate config only for MD5 VRF tests
  (bsc#1012628).
- net: hns3: fix race condition in debugfs (bsc#1012628).
- net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
  (bsc#1012628).
- selftests: icmp_redirect: pass xfail=0 to log_test()
  (bsc#1012628).
- netdevsim: don't overwrite read only ethtool parms
  (bsc#1012628).
- inet_diag: fix kernel-infoleak for UDP sockets (bsc#1012628).
- sch_cake: do not call cake_destroy() from cake_init()
  (bsc#1012628).
- s390/kexec_file: fix error handling when applying relocations
  (bsc#1012628).
- selftests: net: Correct ping6 expected rc from 2 to 1
  (bsc#1012628).
- Revert "drm/fb-helper: improve DRM fbdev emulation device names"
  (bsc#1012628).
- vdpa: Consider device id larger than 31 (bsc#1012628).
- virtio/vsock: fix the transport to work with VMADDR_CID_ANY
  (bsc#1012628).
- virtio: always enter drivers/virtio/ (bsc#1012628).
- iwlwifi: mvm: don't crash on invalid rate w/o STA (bsc#1012628).
- soc: imx: Register SoC device only on i.MX boards (bsc#1012628).
- clk: Don't parent clks until the parent is fully registered
  (bsc#1012628).
- arm64: dts: imx8mq: remove interconnect property from lcdif
  (bsc#1012628).
- ARM: socfpga: dts: fix qspi node compatible (bsc#1012628).
- ceph: initialize pathlen variable in reconnect_caps_cb
  (bsc#1012628).
- ceph: fix duplicate increment of opened_inodes metric
  (bsc#1012628).
- tee: amdtee: fix an IS_ERR() vs NULL bug (bsc#1012628).
- mac80211: track only QoS data frames for admission control
  (bsc#1012628).
- dmaengine: idxd: fix calling wq quiesce inside spinlock
  (bsc#1012628).
- dmaengine: idxd: add halt interrupt support (bsc#1012628).
- arm64: dts: rockchip: fix poweroff on helios64 (bsc#1012628).
- arm64: dts: rockchip: fix audio-supply for Rock Pi 4
  (bsc#1012628).
- arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply
  (bsc#1012628).
- arm64: dts: rockchip: fix rk3308-roc-cc vcc-sd supply
  (bsc#1012628).
- arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from
  rk3399-khadas-edge (bsc#1012628).
- pinctrl: amd: Fix wakeups when IRQ is shared with SCI
  (bsc#1012628).
- drm/i915/hdmi: Turn DP++ TMDS output buffers back on in
  encoder->shutdown() (bsc#1012628).
- drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915
  (bsc#1012628).
- scsi: ufs: core: Retry START_STOP on UNIT_ATTENTION
  (bsc#1012628).
- btrfs: remove stale comment about the btrfs_show_devname
  (bsc#1012628).
- btrfs: update latest_dev when we create a sprout device
  (bsc#1012628).
- btrfs: use latest_dev in btrfs_show_devname (bsc#1012628).
- btrfs: convert latest_bdev type to btrfs_device and rename
  (bsc#1012628).
- audit: improve robustness of the audit queue handling
  (bsc#1012628).
- dm btree remove: fix use after free in rebalance_children()
  (bsc#1012628).
- ceph: fix up non-directory creation in SGID directories
  (bsc#1012628).
- arm64: dts: ten64: remove redundant interrupt declaration for
  gpio-keys (bsc#1012628).
- recordmcount.pl: look for jgnop instruction as well as bcrl
  on s390 (bsc#1012628).
- s390/entry: fix duplicate tracking of irq nesting level
  (bsc#1012628).
- vdpa: check that offsets are within bounds (bsc#1012628).
- virtio_ring: Fix querying of maximum DMA mapping size for
  virtio device (bsc#1012628).
- vduse: check that offset is within bounds in get_config()
  (bsc#1012628).
- vduse: fix memory corruption in vduse_dev_ioctl() (bsc#1012628).
- bpf, selftests: Update test case for atomic cmpxchg on r0 with
  pointer (bsc#1012628).
- bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
  (bsc#1012628).
- bpf, selftests: Add test case trying to taint map value pointer
  (bsc#1012628).
- bpf: Make 32->64 bounds propagation slightly more robust
  (bsc#1012628).
- bpf: Fix signed bounds propagation after mov32 (bsc#1012628).
- bpf, selftests: Add test case for atomic fetch on spilled
  pointer (bsc#1012628).
- bpf: Fix kernel address leakage in atomic fetch (bsc#1012628).
- firmware: arm_scpi: Fix string overflow in SCPI genpd driver
  (bsc#1012628).
- mac80211: validate extended element ID is present (bsc#1012628).
- mac80211: send ADDBA requests using the tid/queue of the
  aggregation session (bsc#1012628).
- mac80211: mark TX-during-stop for TX in in_reconfig
  (bsc#1012628).
- mac80211: fix regression in SSN handling of addba tx
  (bsc#1012628).
- mac80211: fix rate control for retransmitted frames
  (bsc#1012628).
- KVM: X86: Fix tlb flush for tdp in kvm_invalidate_pcid()
  (bsc#1012628).
- x86/kvm: remove unused ack_notifier callbacks (bsc#1012628).
- KVM: downgrade two BUG_ONs to WARN_ON_ONCE (bsc#1012628).
- KVM: selftests: Make sure kvm_create_max_vcpus test won't hit
  RLIMIT_NOFILE (bsc#1012628).
- KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled
  (bsc#1012628).
- reset: tegra-bpmp: Revert Handle errors in BPMP response
  (bsc#1012628).
- commit 9903b31
- Linux 5.15.10 (bsc#1012628).
- perf inject: Fix itrace space allowed for new attributes
  (bsc#1012628).
- fuse: make sure reclaim doesn't write the inode (bsc#1012628).
- staging: most: dim2: use device release method (bsc#1012628).
- tracing: Fix a kmemleak false positive in tracing_map
  (bsc#1012628).
- drm/amdkfd: process_info lock not needed for svm (bsc#1012628).
- drm/amd/display: add connector type check for CRC source set
  (bsc#1012628).
- drm/amdkfd: fix double free mem structure (bsc#1012628).
- drm/amd/display: Fix for the no Audio bug with Tiled Displays
  (bsc#1012628).
- drm/amdgpu: check atomic flag to differeniate with legacy path
  (bsc#1012628).
- drm/amdgpu: cancel the correct hrtimer on exit (bsc#1012628).
- net: netlink: af_netlink: Prevent empty skb by adding a check
  on len (bsc#1012628).
- i2c: rk3x: Handle a spurious start completion interrupt flag
  (bsc#1012628).
- parisc/agp: Annotate parisc agp init functions with __init
  (bsc#1012628).
- ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P
  (bsc#1012628).
- ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid
  (bsc#1012628).
- loop: Use pr_warn_once() for loop_control_remove() warning
  (bsc#1012628).
- net/mlx4_en: Update reported link modes for 1/10G (bsc#1012628).
- Revert "tty: serial: fsl_lpuart: drop earlycon entry for
  i.MX8QXP" (bsc#1012628).
- s390/test_unwind: use raw opcode instead of invalid instruction
  (bsc#1012628).
- KVM: arm64: Save PSTATE early on exit (bsc#1012628).
- drm/msm/dp: Avoid unpowered AUX xfers that caused crashes
  (bsc#1012628).
- drm/msm/dsi: set default num_data_lanes (bsc#1012628).
- drm/msm/a6xx: Fix uinitialized use of gpu_scid (bsc#1012628).
- drm/msm: Fix null ptr access msm_ioctl_gem_submit()
  (bsc#1012628).
- i2c: virtio: fix completion handling (bsc#1012628).
- vmxnet3: fix minimum vectors alloc issue (bsc#1012628).
- ice: fix FDIR init missing when reset VF (bsc#1012628).
- RDMA/irdma: Don't arm the CQ more than two times if no CE for
  this CQ (bsc#1012628).
- RDMA/irdma: Report correct WC errors (bsc#1012628).
- RDMA/irdma: Fix a potential memory allocation issue in
  'irdma_prm_add_pble_mem()' (bsc#1012628).
- RDMA/irdma: Fix a user-after-free in add_pble_prm (bsc#1012628).
- netfs: Fix lockdep warning from taking sb_writers whilst
  holding mmap_lock (bsc#1012628).
- perf bpf_skel: Do not use typedef to avoid error on old clang
  (bsc#1012628).
- clk: qcom: sm6125-gcc: Swap ops of ice and apps on sdcc1
  (bsc#1012628).
- dt-bindings: media: nxp,imx7-mipi-csi2: Drop bad if/then schema
  (bsc#1012628).
- inet: use #ifdef CONFIG_SOCK_RX_QUEUE_MAPPING consistently
  (bsc#1012628).
- mtd: rawnand: Fix nand_choose_best_timings() on unsupported
  interface (bsc#1012628).
- mtd: rawnand: Fix nand_erase_op delay (bsc#1012628).
- RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow
  (bsc#1012628).
- RDMA: Fix use-after-free in rxe_queue_cleanup (bsc#1012628).
- hwmon: (corsair-psu) fix plain integer used as NULL pointer
  (bsc#1012628).
- nfc: fix segfault in nfc_genl_dump_devices_done (bsc#1012628).
- commit 85804f3
- Linux 5.15.9 (bsc#1012628).
- netfilter: selftest: conntrack_vrf.sh: fix file permission
  (bsc#1012628).
- commit edf812e

==== kubernetes1.22 ====

- Tidy up merge marker

==== libcap ====
Version update (2.61 -> 2.62)

- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID

==== libthai ====
Version update (0.1.28 -> 0.1.29)
Subpackages: libthai-data libthai0

- Update to version 0.1.29.
  * Rewritten thbrk test.
  * More compliance with UAX#14 (Unicode Line Breaking Algorithm)
    for thbrk.
  * Fix a typo in TIS-620 character name in tis.h.
  * Updated word break dictionary.

==== pango ====
Version update (1.50.2 -> 1.50.3)

- Update to version 1.50.3:
  + pango-view: Add --serialize-to option for easy bug reporting.
  + Revert a transformation change that broke metrics for vertical
    text.
  + Handle fonts without space glyph (such as icon fonts) better.
  + Fix some corner cases of line width accounting.
  + Fix line height with emulated Small Caps.

==== python-SQLAlchemy ====
Version update (1.4.27 -> 1.4.29)

- Update to 1.4.29:
  - truly, just plenty of small bugfixes, see the changelog on the Web
    https://docs.sqlalchemy.org/en/14/changelog/changelog_14.html#change-1.4.29
- update to 1.4.28:
  Bugfixes, see
  * https://docs.sqlalchemy.org/en/14/changelog/changelog_14.html#change-1.4.28

==== python-ordered-set ====

- Do not disable python36 here. This package is so deep in the
  dependency tree, you have to do it globally.
- Upstream supoorted only python >= 3.5, so disable python 2 and
  also python 3.6 (End of support).

==== python-setuptools ====

- Remove unzip BuildRequires: the tarball is proper gz compressed,
  no zip files to decompress here.

==== qemu ====
Version update (6.1.0 -> 6.2.0)

- Fix testsuite failures by not using modules when building tests
  (and some other, also testsuite related, spec file problems)
- [JIRA] (SLE-20965) Make QEMU guests more failsafe when resizing
  SCSI passthrough disks
  * Patches added:
    scsi-generic-replace-logical-block-count.patch
- Add an audio-oss sub-package
- Add some new (mostly documentation) files in the package
- Remove option --audio-drv-list because audio is detected by
  meson automatically in latest version.
- Remove options --disable-jemalloc and --disable-tcmalloc
  which are changed in v6.2.0.
- Update to v 6.2.0. For full release notese, see:
  * https://wiki.qemu.org/ChangeLog/6.2.
  Be sure to also check the following pages:
  * https://qemu-project.gitlab.io/qemu/about/removed-features.html
  * https://qemu-project.gitlab.io/qemu/about/deprecated.html
  Some notable changes:
  * virtio-mem: guest memory dumps are now fully supported, along
    with pre-copy/post-copy migration and background guest snapshots
  * QMP: support for nw DEVICE_UNPLUG_GUEST_ERROR to detect
    guest-reported hotplug failures
  * TCG: improvements to TCG plugin argument syntax, and multi-core
    support for cache plugin
  * 68k: improved support for Apple?s NuBus, including ability to
    load declaration ROMs, and slot IRQ support
  * ARM: macOS hosts with Apple Silicon CPUs now support ?hvf?
    accelerator for AArch64 guests
  * ARM: emulation support for Fujitsu A64FX processor model
  * ARM: emulation support for kudo-mbc machine type
  * ARM: M-profile MVE extension is now supported for Cortex-M55
  * ARM: ?virt? machine now supports an emulated ITS (Interrupt
    Translation Service) and supports more than 123 CPUs in
    emulation mode
  * ARM: xlnx-zcu102 and xlnx-versal-virt machines now support
    BBRAM and eFUSE devices
  * PowerPC: improved POWER10 support for the ?powernv? machine type
  * PowerPC: initial support for POWER10 DD2.0 CPU model
  * PowerPC: support for FORM2 PAPR NUMA descriptions for ?pseries? machine type
  * RISC-V: support for Zb[abcs] instruction set extensions
  * RISC-V: support for vhost-user and numa mem options across all boards
  * RISC-V: SiFive PWM support
  * x86: support for new Snowridge-v4 CPU model
  * x86: guest support for Intel SGX
  * x86: AMD SEV guests now support measurement of kernel binary when doing
    direct kernel boot (not using a bootloader)
  * Patches dropped:
  9pfs-fix-crash-in-v9fs_walk.patch
  block-introduce-max_hw_iov-for-use-in-sc.patch
  hmp-Unbreak-change-vnc.patch
  hw-acpi-ich9-Add-compat-prop-to-keep-HPC.patch
  hw-i386-acpi-build-Deny-control-on-PCIe-.patch
  i386-cpu-Remove-AVX_VNNI-feature-from-Co.patch
  net-vmxnet3-validate-configuration-value.patch
  pcie-rename-native-hotplug-to-x-native-h.patch
  plugins-do-not-limit-exported-symbols-if.patch
  plugins-execlog-removed-unintended-s-at-.patch
  qemu-nbd-Change-default-cache-mode-to-wr.patch
  qemu-sockets-fix-unix-socket-path-copy-a.patch
  target-arm-Don-t-skip-M-profile-reset-en.patch
  target-i386-add-missing-bits-to-CR4_RESE.patch
  tcg-arm-Fix-tcg_out_vec_op-function-sign.patch
  uas-add-stream-number-sanity-checks.patch
  vhost-vsock-fix-migration-issue-when-seq.patch
  virtio-balloon-don-t-start-free-page-hin.patch
  virtio-mem-pci-Fix-memory-leak-when-crea.patch
  virtio-net-fix-use-after-unmap-free-for-.patch

==== raspberrypi-firmware ====
Version update (2021.11.16 -> 2021.12.01)

- Update to 1a0297bfbf (2021-12-01):
  * firmware: board_info: Add upstream dtb names for cm1 & 3
  * firmware: board_info: Add upstream dtb name for cm4
    See: #1660
  * firmware: platform: Allow users to disable camera boot HMAC check
    See: #1657
  * firmware: clock: 2711: Fix potential API issue in 2711 VCO setup
  * firmware: arm_loader: Enable USB MSD boot mode on Zero 2 W
  * firmware: isp: Fix Rec.709 colour space problems

==== raspberrypi-firmware-config ====
Version update (2021.11.16 -> 2021.12.01)

- Update to 1a0297bfbf (2021-12-01):
  * firmware: board_info: Add upstream dtb names for cm1 & 3
  * firmware: board_info: Add upstream dtb name for cm4
    See: #1660
  * firmware: platform: Allow users to disable camera boot HMAC check
    See: #1657
  * firmware: clock: 2711: Fix potential API issue in 2711 VCO setup
  * firmware: arm_loader: Enable USB MSD boot mode on Zero 2 W
  * firmware: isp: Fix Rec.709 colour space problems

==== sssd ====
Version update (2.6.1 -> 2.6.2)
Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap

- Update to release 2.6.2
  * Quick log out and log in did not correctly refresh user's
    initgroups in no_session PAM schema due to lingering systemd
    processes.

==== wicked ====
Version update (0.6.67 -> 0.6.68)
Subpackages: wicked-service

- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)

==== yast2 ====
Version update (4.4.31 -> 4.4.32)

- properly pass named arguments in ruby3 (bsc#1193192)
- 4.4.32