This update for cpio fixes the following issues: Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for CVE-2023-7207 (bsc#1218571, bsc#1219238)

This update for openssl-100 fixes the following issues: CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).

This update for timezone fixes the following issues: Update to version 2024a Kazakhstan unifies on UTC+5 Palestine springs forward a week later than previously predicted in 2024 and 2025 Asia/HoChiMinh's 1955-07-01 transition occurred at 01:00 not 00:00 From 1947 through 1949, Toronto's transitions occurred at 02:00 not 00:00 In 1911 Miquelon adopted standard time on June 15, not May 15 The FROM and TO columns of Rule lines can no longer be "minimum" localtime no longer mishandle some timestamps strftime %s now uses tmgmtoff if available Ittoqqortoormiit, Greenland changes time zones on 2024-03-31 Vostok, Antarctica changed time zones on 2023-12-18 Casey, Antarctica changed time zones five times since 2020 Code and data fixes for Palestine timestamps starting in 2072 A new data file zonenow.tab for timestamps starting now Much of Greenland changed its standard time from -03 to -02 on 2023-03-25 localtime.c no longer mishandles TZif files that contain a single transition into a DST regime tzselect no longer creates temporary files tzselect no longer mishandles the following: Spaces and most other special characters in BUGEMAIL, PACKAGE, TZDIR, and VERSION. TZ strings when using mawk 1.4.3, which mishandles regular expressions of the form /X{2,}/ ISO 6709 coordinates when using an awk that lacks the GNU extension of newlines in -v option-arguments Non UTF-8 locales when using an iconv command that lacks the GNU //TRANSLIT extension zic no longer mishandles data for Palestine after the year 2075

This update for gstreamer-plugins-bad fixes the following issues: CVE-2023-44446: Fixed use-after-free remote code execution vulnerability via MXF file (bsc#1217213).

This update for vim fixes the following issues: CVE-2023-48231: Fixed Use-After-Free in winclose() (bsc#1217316). CVE-2023-48232: Fixed Floating point Exception in adjustplinesforskipcol() (bsc#1217320). CVE-2023-48233: Fixed overflow with count for :s command (bsc#1217321). CVE-2023-48234: Fixed overflow in nvzgetcount (bsc#1217324). CVE-2023-48235: Fixed overflow in ex address parsing (bsc#1217326). CVE-2023-48236: Fixed overflow in getnumber (bsc#1217329). CVE-2023-48237: Fixed overflow in shiftline (bsc#1217330). CVE-2023-48706: Fixed heap-use-after-free in exsubstitute (bsc#1217432). CVE-2024-22667: Fixed stack-based buffer overflow in didsetlangmap function in map.c (bsc#1219581). CVE-2023-4750: Fixed heap use-after-free in function btquickfix (bsc#1215005). Updated to version 9.1 with patch level 0111: https://github.com/vim/vim/compare/v9.0.2103...v9.1.0111

This update for postgresql-jdbc fixes the following issues: CVE-2024-1597: Fixed SQL Injection via line comment generation (bsc#1220644).

This update for SAPHanaSR fixes the following issues: SAPHanaSR was updated to version 0.162.3:

Fixed the hexdump log for empty node states

Catch monitor calls for non-cloned resources and report them as unsupported instead of 'command not found' (bsc#1218333) Fixed the scope of variable 'site' to be global (bsc#1219194) susChkSrv.py - relocate function logTimestamp()

Updated man pages:

SAPHanaSR.7 ocfsuseSAPHana.7 SAPHanaSRmaintenanceexamples.7 SAPHanaSR.py.7 SAPHanaSR-showAttr.8

Fixed a regression in topology found during QE testing (bsc#1219785)

This update for grub2 fixes the following issues: Make consistent check to enable relative path on btrfs (bsc#1174567) (bsc#1216912)

This update for postgresql fixes the following issues: Require fillup package to properly create the config file (bsc#1219340)

This update for python-pip fixes the following issues: Removed .exe files from the RPM package, to prevent issues with security scanners (bsc#1212015).

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.8.0 ESR (MFSA 2024-06) (bsc#1220048): CVE-2024-1546: Out-of-bounds memory read in networking channels CVE-2024-1547: Alert dialog could have been spoofed on another site CVE-2024-1548: Fullscreen Notification could have been hidden by select element CVE-2024-1549: Custom cursor could obscure the permission dialog CVE-2024-1550: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants CVE-2024-1551: Multipart HTTP Responses would accept the Set-Cookie header in response parts CVE-2024-1552: Incorrect code generation on 32-bit ARM devices

CVE-2024-1553: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8

Recommend libfido2-udev on codestreams that exist, in order to try to get security keys (e.g. Yubikeys) work out of the box. (bsc#1184272)

This update for postgresql14 fixes the following issues: Upgrade to 14.11: CVE-2024-0985: Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY (bsc#1219679).

This update for postgresql13 fixes the following issues: Upgrade to 13.14: CVE-2024-0985: Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY (bsc#1219679).

This update for perl fixes the following issues: CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999).

This update of glibc fixes the following issues: Security issue fixed: CVE-2023-4813: Fixed a potential use-after-free in gaihinet() (bsc#1215286, BZ #28931) Other issues fixed: S390: Fix relocation of nlcurrentLCCATETORYused in static build (bsc#1215504, BZ #19860) added GB18030-2022 charmap (jsc#PED-4908, BZ #30243)

This update for postgresql15 fixes the following issues: Upgrade to 15.6: CVE-2024-0985: Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY (bsc#1219679).

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-1086: Fixed a use-after-free vulnerability inside the nftables component that could have been exploited to achieve local privilege escalation (bsc#1219434). CVE-2023-51780: Fixed a use-after-free in dovccioctl in net/atm/ioctl.c, because of a vccrecvmsg race condition (bsc#1218730). CVE-2023-46838: Fixed an issue with Xen netback processing of zero-length transmit fragment (bsc#1218836). CVE-2021-33631: Fixed an integer overflow in ext4writeinlinedataend() (bsc#1219412). CVE-2023-47233: Fixed a use-after-free in the device unplugging (disconnect the USB by hotplug) code inside the brcm80211 component (bsc#1216702). CVE-2023-51043: Fixed use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drmatomic.c (bsc#1219120). CVE-2024-0775: Fixed use-after-free in ext4remount in fs/ext4/super.c that could allow a local user to cause an information leak problem while freeing the old quota file names before a potential failure (bsc#1219053). CVE-2023-6040: Fixed an out-of-bounds access vulnerability while creating a new netfilter table, lack of a safeguard against invalid nftables family (pf) values within nftablesnewtable function (bsc#1218752). CVE-2023-51782: Fixed use-after-free in roseioctl in net/rose/afrose.c because of a roseaccept race condition (bsc#1218757). CVE-2024-0340: Fixed information disclosure in vhost/vhost.c:vhostnewmsg() (bsc#1218689). CVE-2023-51042: Fixed use-after-free in amdgpucswaitallfences in drivers/gpu/drm/amd/amdgpu/amdgpucs.c (bsc#1219128). The following non-security bugs were fixed: Store the old kernel changelog entries in kernel-docs package (bsc#1218713) 9p: missing chunk of "fs/9p: Do not update file type when updating file attributes" (git-fixes). ACPICA: Avoid cache flush inside virtual machines (git-fixes). GFS2: Flush the GFS2 delete workqueue before stopping the kernel threads (git-fixes). KVM: s390: vsie: Fix STFLE interpretive execution identification (git-fixes bsc#1219022). UAPI: ndctl: Fix g++-unsupported initialisation in headers (git-fixes). USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (git-fixes). USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (git-fixes). USB: serial: option: add entry for Sierra EM9191 with new firmware (git-fixes). USB: serial: option: fix FM101R-GL defines (git-fixes). acpi/nfit: Require opt-in for read-only label configurations (git-fixes). acpi/nfit: improve bounds checking for 'func' (git-fixes). affs: fix basic permission bits to actually work (git-fixes). aio: fix mremap after fork null-deref (git-fixes). asix: Add check for usbnetgetendpoints (git-fixes). bnxten: Log unknown link speed appropriately (git-fixes). ceph: fix incorrect revoked caps assert in cephfillfilesize() (bsc#1219445). chardev: fix error handling in cdevdeviceadd() (git-fixes). configfs: fix a deadlock in configfssymlink() (git-fixes). configfs: fix a race in configfs{,un}registersubsystem() (git-fixes). configfs: fix a use-after-free in configfsopenfile (git-fixes). configfs: fix configitem refcnt leak in configfsrmdir() (git-fixes). configfs: fix memleak in configfsreleasebinfile (git-fixes). configfs: new object reprsenting tree fragments (git-fixes). configfs: provide exclusion between IO and removals (git-fixes). configfs: stash the data we need into configfsbuffer at open time (git-fixes). ext4: Avoid freeing inodes on dirty list (bsc#1216989). ext4: silence the warning when evicting inode with dioreadnolock (bsc#1206889). fat: add ratelimit to fatentbread() (git-fixes). fs/exofs: fix potential memory leak in mount option parsing (git-fixes). fs/fat/fatent.c: add condresched() to fatcountfreeclusters() (git-fixes). fs/fat/file.c: issue flush after the writeback of FAT (git-fixes). fs/file.c: initialize initfiles.resizewait (git-fixes). fs: do not audit the capability check in simplexattrlist() (git-fixes). fs: ocfs2: namei: check return value of ocfs2addentry() (git-fixes). fs: orangefs: fix error return code of orangefsrevalidatelookup() (git-fixes). fs: ratelimit findgetblockslow() failure message (git-fixes). fs: warn about impending deprecation of mandatory locks (git-fixes). gfs2: Allow locknolock mount to specify jid=X (git-fixes). gfs2: Check sbbsizeshift after reading superblock (git-fixes). gfs2: Do not call dlm after protocol is unmounted (git-fixes). gfs2: Do not set GFS2RDFUPTODATE when the lvb is updated (git-fixes). gfs2: Do not skip dlm unlock if glock had an lvb (git-fixes). gfs2: Fix inode height consistency check (git-fixes). gfs2: Fix lrucount going negative (git-fixes). gfs2: Fix marking bitmaps non-full (git-fixes). gfs2: Fix possible data races in gfs2showoptions() (git-fixes). gfs2: Fix sign extension bug in gfs2updatestats (git-fixes). gfs2: Fix use-after-free in gfs2glockshrinkscan (git-fixes). gfs2: Free rdbits later in gfs2clearrgrpd to fix use-after-free (git-fixes). gfs2: Make sure FITRIM minlen is rounded up to fs block size (git-fixes). gfs2: Special-case rindex for gfs2grow (git-fixes). gfs2: Wake up when sdglockdisposal becomes zero (git-fixes). gfs2: add validation checks for size of superblock (git-fixes). gfs2: assign rgrp glock before computebitstructs (git-fixes). gfs2: check for empty rgrp tree in gfs2riupdate (git-fixes). gfs2: check for live vs. read-only file system in gfs2fitrim (git-fixes). gfs2: clear bufintr when ending a transaction in sweepbhforrgrps (git-fixes). gfs2: fix use-after-free on transaction ail lists (git-fixes). gfs2: ignore negated quota changes (git-fixes). gfs2: initialize transaction trailXlists earlier (git-fixes). gfs2: report "already frozen/thawed" errors (git-fixes). gfs2: take jdata unstuff into account in dogrow (git-fixes). gfs2atomicopen(): fix OEXCL|OCREAT handling on cold dcache (git-fixes). gtp: change NETUDPTUNNEL dependency to select (git-fixes). helpnext should increase position index (git-fixes). iomap: sub-block dio needs to zeroout beyond EOF (git-fixes). kernfs: Separate kernfsprcontbuf and renamelock (git-fixes). kernfs: bring names in comments in line with code (git-fixes). kernfs: fix use-after-free in kernfsremove (git-fixes). libceph: use kernelconnect() (bsc#1219446). libnvdimm/btt: Fix LBA masking during 'free list' population (git-fixes). libnvdimm/btt: Fix a kmemdup failure check (git-fixes). libnvdimm/btt: Remove unnecessary code in bttfreelistinit (git-fixes). libnvdimm/btt: fix variable 'rc' set but not used (git-fixes). libnvdimm/namespace: Fix a potential NULL pointer dereference (git-fixes). libnvdimm/ofpmem: Use devmkstrdup instead of kstrdup and check its return value (git-fixes). libnvdimm/pmem: Delete include of nd-core.h (git-fixes). libnvdimm/pmem: fix a possible OOB access when read and write pmem (git-fixes). libnvdimm/region: Fix label activation vs errors (git-fixes). libnvdimm: Fix compilation warnings with W=1 (git-fixes). libnvdimm: Out of bounds read in ndioctl() (git-fixes). libnvdimm: Validate command family indices (git-fixes). libnvdimm: cover up changes in struct nvdimmbusdescriptor (git-fixes). locks: print a warning when mount fails due to lack of "mand" support (git-fixes). mce: fix setmcenospec to always unmap the whole page (git-fixes). mkspec: Include constraints for both multibuild and plain package always There is no need to check for multibuild flag, the constraints can be always generated for both cases. mlx4: handle non-napi callers to napipoll (git-fixes). mlxsw: spectrum: Avoid -Wformat-truncation warnings (git-fixes). mlxsw: spectrum: Properly cleanup LAG uppers when removing port from LAG (git-fixes). mlxsw: spectrum: Set LAG port collector only when active (git-fixes). mm,mremap: bail out earlier in mremapto under map pressure (bsc#1123986). net/mlx5: Do not call timecounter cyc2time directly from 1PPS flow (git-fixes). net: (cpts) fix a missing check of clkprepare (git-fixes). net: dsa: bcmsf2: Propagate error value from mdiowrite (git-fixes). net: dsa: mv88e6xxx: Work around mv886e6161 SERDES missing MIIPHYSID2 (git-fixes). net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0 (git-fixed). net: dsa: qca8k: Enable delay for RGMIIID mode (git-fixes). net: ethernet: ti: fix possible object reference leak (git-fixes). net: fec: Do not use netdev messages too early (git-fixes). net: ks8851: Delay requesting IRQ until opened (git-fixes). net: ks8851: Reassert reset pin if chip ID check fails (git-fixes). net: ks8851: Set initial carrier state to down (git-fixes). net: macb: Add null check for PCLK and HCLK (git-fixed). net: mv643xxeth: disable clk on error path in mv643xxethsharedprobe() (git-fixes). net: mvneta: fix double free of txq->buf (git-fixes). net: phy: sfp: warn the user when no txdisable pin is available (git-fixes). net: phylink: avoid resolving link state too early (git-fixes). net: sfp: do not probe SFP module before we're attached (git-fixes). net: stmmac: Disable EEE mode earlier in XMIT callback (git-fixes). net: stmmac: Fallback to Platform Data clock in Watchdog conversion (git-fixes). net: stmmac: do not overwrite discardframe status (git-fixes). net: stmmac: dwmac-rk: fix error handling in rkgmacpowerup() (git-fixes). net: stmmac: dwmac1000: Clear unused address entries (git-fixed). net: stmmac: dwmac1000: fix out-of-bounds mac address reg setting (git-fixes). net: stmmac: dwmac4/5: Clear unused address entries (git-fixes). net: systemport: Fix reception of BPDUs (git-fixes). net: xilinx: fix possible object reference leak (git-fixed). nfsd: drop stmutex and rpmutex before calling movetocloselru() (bsc#1217525). nvdimm/btt: do not call delgendisk() if not needed (git-fixes). nvdimm: Allow overwrite in the presence of disabled dimms (git-fixes). nvdimm: Fix badblocks clear off-by-one error (git-fixes). nvmet-tcp: fix a crash in nvmetreqcomplete() (git-fixes). orangefs: Fix kmemleak in orangefspreparedebugfshelpstring() (git-fixes). orangefs: Fix sysfs not cleanup when dev init failed (git-fixes). orangefs: fix orangefs df output (git-fixes). orangefs: rate limit the client not running info message (git-fixes). powerpc/powernv: Add a null pointer check in opaleventinit() (bsc#1065729). powerpc/powernv: Add a null pointer check in opalpowercapinit() (bsc#1181674 ltc#189159 git-fixes). powerpc/pseries/memhotplug: Quieten some DLPAR operations (bsc#1065729). powerpc/pseries/memhp: Fix access beyond end of drmem array (bsc#1065729). powerpc: Do not clobber f0/vs0 during fp|altivec register save (bsc#1065729). preserve KABI for struct platstmmacenetdata (git-fixes). preserve KABI for struct sfpsocketops (git-fixes). proc: fix /proc//mapfiles lookup (git-fixes). pstore/ram: Check start of empty przs during init (git-fixes). pstore/ram: Fix error return code in ramoopsprobe() (git-fixes). pstore/ram: Run without kernel crash dump region (git-fixes). pstore: Avoid kcore oops by vmap()ing with VMIOREMAP (git-fixes). pstore: ramcore: fix possible overflow in persistentraminitecc() (git-fixes). r8169: fix data corruption issue on RTL8402 (git-fixes). reiserfs: Check the return value from getblk() (git-fixes). reiserfs: Replace 1-element array with C99 style flex-array (git-fixes). s390/dasd: fix double module refcount decrement (bsc#1141539). scsi: qedf: fcrportpriv reference counting fixes (bsc#1212152). scsi: qla0xxx: Fix system crash due to bad pointer access (git-fixes). sfc: initialise found bitmap in efxef10mtdprobe (git-fixes). statfs: enforce statfs[64] structure initialization (git-fixes). tracing/trigger: Fix to return error if failed to alloc snapshot (git-fixes). usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (git-fixes). veth: Fixing transmit return status for dropped packets (git-fixes). vfs: make freezesuper abort when syncfilesystem returns error (git-fixes). writeback: Export inodeiolistdel() (bsc#1216989). x86/CPU/AMD: Check vendor in the AMD microcode callback (git-fixes). x86/alternatives: Sync core before enabling interrupts (git-fixes). x86/asm: Ensure asm/proto.h can be included stand-alone (git-fixes). x86/bugs: Add "unknown" reporting for MMIO Stale Data (git-fixes). x86/build: Treat R386PLT32 relocation as R386PC32 (git-fixes). x86/build: Turn off -fcf-protection for realmode targets (git-fixes). x86/cpu/hygon: Fix the CPU topology evaluation for real (git-fixes). x86/cpu: Add another Alder Lake CPU to the Intel family (git-fixes). x86/fpu: Use Alignof to avoid undefined behavior in TYPEALIGN (git-fixes). x86/kvm/lapic: always disable MMIO interface in x2APIC mode (git-fixes). x86/kvm: Do not try to disable kvmclock if it was not enabled (git-fixes). x86/lib: Fix overflow when counting digits (git-fixes). x86/mce: relocate set{clear}mcenospec() functions (git-fixes). x86/microcode/AMD: Track patch allocation size explicitly (git-fixes). x86/microcode/intel: Do not retry microcode reloading on the APs (git-fixes). x86/mm: Add a x86haspatwp() helper (git-fixes). x86/pat: Fix x86haspatwp() (git-fixes). x86/pat: Pass valid address to sanitizephys() (git-fixes). x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes). x86/pm: Fix false positive kmemleak report in msrbuildcontext() (git-fixes). x86/purgatory: Do not generate debug info for purgatory.ro (git-fixes). x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes). x86/topology: Fix duplicated core ID within a package (git-fixes). x86/topology: Fix multiple packages shown on a single-package system (git-fixes). x86/unwind/orc: Fix unreliable stack dump with gcov (git-fixes). x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry (git-fixes). x86: Clear .brk area at early boot (git-fixes). x86: Fix getwchan() for !STACKTRACE (git-fixes). x86: Fix getwchan() to support the ORC unwinder (git-fixes). x86: Mark stopthiscpu() noreturn (git-fixes). x86: Pin task-stack in getwchan() (git-fixes). x86: alwaysinline {rd,wr}msr() (git-fixes).

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-1086: Fixed a use-after-free vulnerability inside the nftables component that could have been exploited to achieve local privilege escalation (bsc#1219434). CVE-2024-0340: Fixed information disclosure in vhost/vhost.c:vhostnewmsg() (bsc#1218689). CVE-2023-51780: Fixed a use-after-free in dovccioctl in net/atm/ioctl.c, because of a vccrecvmsg race condition (bsc#1218730). CVE-2023-46838: Fixed an issue with Xen netback processing of zero-length transmit fragment (bsc#1218836). CVE-2021-33631: Fixed an integer overflow in ext4writeinlinedataend() (bsc#1219412). CVE-2023-47233: Fixed a use-after-free in the device unplugging (disconnect the USB by hotplug) code inside the brcm80211 component (bsc#1216702). CVE-2023-51043: Fixed use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drmatomic.c (bsc#1219120). CVE-2024-0775: Fixed use-after-free in ext4remount in fs/ext4/super.c that could allow a local user to cause an information leak problem while freeing the old quota file names before a potential failure (bsc#1219053). CVE-2023-6040: Fixed an out-of-bounds access vulnerability while creating a new netfilter table, lack of a safeguard against invalid nftables family (pf) values within nftablesnewtable function (bsc#1218752). CVE-2023-51782: Fixed use-after-free in roseioctl in net/rose/afrose.c because of a roseaccept race condition (bsc#1218757). CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946). CVE-2023-6535: Fixed a NULL pointer dereference in nvmettcpexecuterequest (bsc#1217988). CVE-2023-6536: Fixed a NULL pointer dereference in nvmetreqcomplete (bsc#1217989). CVE-2023-6356: Fixed a NULL pointer dereference in nvmettcpbuildpduiovec (bsc#1217987). CVE-2023-51042: Fixed use-after-free in amdgpucswaitallfences in drivers/gpu/drm/amd/amdgpu/amdgpucs.c (bsc#1219128). The following non-security bugs were fixed: 9p: missing chunk of "fs/9p: Do not update file type when updating file attributes" (git-fixes). ACPICA: Avoid cache flush inside virtual machines (git-fixes). GFS2: Flush the GFS2 delete workqueue before stopping the kernel threads (git-fixes). KVM: s390: vsie: Fix STFLE interpretive execution identification (git-fixes bsc#1219022). UAPI: ndctl: Fix g++-unsupported initialisation in headers (git-fixes). USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (git-fixes). USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (git-fixes). USB: serial: option: add entry for Sierra EM9191 with new firmware (git-fixes). USB: serial: option: fix FM101R-GL defines (git-fixes). acpi/nfit: Require opt-in for read-only label configurations (git-fixes). acpi/nfit: improve bounds checking for 'func' (git-fixes). affs: fix basic permission bits to actually work (git-fixes). aio: fix mremap after fork null-deref (git-fixes). asix: Add check for usbnetgetendpoints (git-fixes). bnxten: Log unknown link speed appropriately (git-fixes). build: Limit kernel-source build to architectures for which the kernel binary is built (bsc#1108281). ceph: fix incorrect revoked caps assert in cephfillfilesize() (bsc#1219445). chardev: fix error handling in cdevdeviceadd() (git-fixes). configfs: fix a deadlock in configfssymlink() (git-fixes). configfs: fix a race in configfs{,un}registersubsystem() (git-fixes). configfs: fix a use-after-free in configfsopenfile (git-fixes). configfs: fix configitem refcnt leak in configfsrmdir() (git-fixes). configfs: fix memleak in configfsreleasebinfile (git-fixes). configfs: new object reprsenting tree fragments (git-fixes). configfs: provide exclusion between IO and removals (git-fixes). configfs: stash the data we need into configfsbuffer at open time (git-fixes). docs: Store the old kernel changelog entries in kernel-docs package (bsc#1218713). ext4: Avoid freeing inodes on dirty list (bsc#1216989). ext4: silence the warning when evicting inode with dioreadnolock (bsc#1206889). fat: add ratelimit to fatentbread() (git-fixes). fs/exofs: fix potential memory leak in mount option parsing (git-fixes). fs/fat/fatent.c: add condresched() to fatcountfreeclusters() (git-fixes). fs/fat/file.c: issue flush after the writeback of FAT (git-fixes). fs/file.c: initialize initfiles.resizewait (git-fixes). fs: do not audit the capability check in simplexattrlist() (git-fixes). fs: ocfs2: namei: check return value of ocfs2addentry() (git-fixes). fs: orangefs: fix error return code of orangefsrevalidatelookup() (git-fixes). fs: ratelimit findgetblockslow() failure message (git-fixes). fs: warn about impending deprecation of mandatory locks (git-fixes). gfs2: Allow locknolock mount to specify jid=X (git-fixes). gfs2: Check sbbsizeshift after reading superblock (git-fixes). gfs2: Do not call dlm after protocol is unmounted (git-fixes). gfs2: Do not set GFS2RDFUPTODATE when the lvb is updated (git-fixes). gfs2: Do not skip dlm unlock if glock had an lvb (git-fixes). gfs2: Fix inode height consistency check (git-fixes). gfs2: Fix lrucount going negative (git-fixes). gfs2: Fix marking bitmaps non-full (git-fixes). gfs2: Fix possible data races in gfs2showoptions() (git-fixes). gfs2: Fix sign extension bug in gfs2updatestats (git-fixes). gfs2: Fix use-after-free in gfs2glockshrinkscan (git-fixes). gfs2: Free rdbits later in gfs2clearrgrpd to fix use-after-free (git-fixes). gfs2: Make sure FITRIM minlen is rounded up to fs block size (git-fixes). gfs2: Special-case rindex for gfs2grow (git-fixes). gfs2: Wake up when sdglockdisposal becomes zero (git-fixes). gfs2: add validation checks for size of superblock (git-fixes). gfs2: assign rgrp glock before computebitstructs (git-fixes). gfs2: check for empty rgrp tree in gfs2riupdate (git-fixes). gfs2: check for live vs. read-only file system in gfs2fitrim (git-fixes). gfs2: clear bufintr when ending a transaction in sweepbhforrgrps (git-fixes). gfs2: fix use-after-free on transaction ail lists (git-fixes). gfs2: ignore negated quota changes (git-fixes). gfs2: initialize transaction trailXlists earlier (git-fixes). gfs2: report "already frozen/thawed" errors (git-fixes). gfs2: take jdata unstuff into account in dogrow (git-fixes). gfs2atomicopen(): fix OEXCL|OCREAT handling on cold dcache (git-fixes). gtp: change NETUDPTUNNEL dependency to select (git-fixes). helpnext should increase position index (git-fixes). iomap: sub-block dio needs to zeroout beyond EOF (git-fixes). kernfs: Separate kernfsprcontbuf and renamelock (git-fixes). kernfs: bring names in comments in line with code (git-fixes). kernfs: fix use-after-free in kernfsremove (git-fixes). libceph: use kernelconnect() (bsc#1219446). libnvdimm/btt: Fix LBA masking during 'free list' population (git-fixes). libnvdimm/btt: Fix a kmemdup failure check (git-fixes). libnvdimm/btt: Remove unnecessary code in bttfreelistinit (git-fixes). libnvdimm/btt: fix variable 'rc' set but not used (git-fixes). libnvdimm/namespace: Fix a potential NULL pointer dereference (git-fixes). libnvdimm/ofpmem: Use devmkstrdup instead of kstrdup and check its return value (git-fixes). libnvdimm/pmem: Delete include of nd-core.h (git-fixes). libnvdimm/pmem: fix a possible OOB access when read and write pmem (git-fixes). libnvdimm/region: Fix label activation vs errors (git-fixes). libnvdimm: Fix compilation warnings with W=1 (git-fixes). libnvdimm: Out of bounds read in ndioctl() (git-fixes). libnvdimm: Validate command family indices (git-fixes). libnvdimm: cover up changes in struct nvdimmbusdescriptor (git-fixes). locks: print a warning when mount fails due to lack of "mand" support (git-fixes). mce: fix setmcenospec to always unmap the whole page (git-fixes). mlx4: handle non-napi callers to napipoll (git-fixes). mlxsw: spectrum: Avoid -Wformat-truncation warnings (git-fixes). mlxsw: spectrum: Properly cleanup LAG uppers when removing port from LAG (git-fixes). mlxsw: spectrum: Set LAG port collector only when active (git-fixes). mm,mremap: bail out earlier in mremapto under map pressure (bsc#1123986). net/mlx5: Do not call timecounter cyc2time directly from 1PPS flow (git-fixes). net: (cpts) fix a missing check of clkprepare (git-fixes). net: dsa: bcmsf2: Propagate error value from mdiowrite (git-fixes). net: dsa: mv88e6xxx: Work around mv886e6161 SERDES missing MIIPHYSID2 (git-fixes). net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0 (git-fixed). net: dsa: qca8k: Enable delay for RGMIIID mode (git-fixes). net: ethernet: ti: fix possible object reference leak (git-fixes). net: fec: Do not use netdev messages too early (git-fixes). net: ks8851: Delay requesting IRQ until opened (git-fixes). net: ks8851: Reassert reset pin if chip ID check fails (git-fixes). net: ks8851: Set initial carrier state to down (git-fixes). net: macb: Add null check for PCLK and HCLK (git-fixed). net: mv643xxeth: disable clk on error path in mv643xxethsharedprobe() (git-fixes). net: mvneta: fix double free of txq->buf (git-fixes). net: phy: sfp: warn the user when no txdisable pin is available (git-fixes). net: phylink: avoid resolving link state too early (git-fixes). net: sfp: do not probe SFP module before we're attached (git-fixes). net: stmmac: Disable EEE mode earlier in XMIT callback (git-fixes). net: stmmac: Fallback to Platform Data clock in Watchdog conversion (git-fixes). net: stmmac: do not overwrite discardframe status (git-fixes). net: stmmac: dwmac-rk: fix error handling in rkgmacpowerup() (git-fixes). net: stmmac: dwmac1000: Clear unused address entries (git-fixed). net: stmmac: dwmac1000: fix out-of-bounds mac address reg setting (git-fixes). net: stmmac: dwmac4/5: Clear unused address entries (git-fixes). net: systemport: Fix reception of BPDUs (git-fixes). net: xilinx: fix possible object reference leak (git-fixed). nfs: NFS 4.0 LOCK calls getting constant NFS4ERRBADSEQID (bsc#1218968). nfsd: drop stmutex and rpmutex before calling movetocloselru() (bsc#1217525). nvdimm/btt: do not call delgendisk() if not needed (git-fixes). nvdimm: Allow overwrite in the presence of disabled dimms (git-fixes). nvdimm: Fix badblocks clear off-by-one error (git-fixes). nvmet-tcp: fix a crash in nvmetreqcomplete() (git-fixes). orangefs: Fix kmemleak in orangefspreparedebugfshelpstring() (git-fixes). orangefs: Fix sysfs not cleanup when dev init failed (git-fixes). orangefs: fix orangefs df output (git-fixes). orangefs: rate limit the client not running info message (git-fixes). powerpc/powernv: Add a null pointer check in opaleventinit() (bsc#1065729). powerpc/powernv: Add a null pointer check in opalpowercapinit() (bsc#1181674 ltc#189159 git-fixes). powerpc/pseries/memhotplug: Quieten some DLPAR operations (bsc#1065729). powerpc/pseries/memhp: Fix access beyond end of drmem array (bsc#1065729). powerpc: Do not clobber f0/vs0 during fp|altivec register save (bsc#1065729). preserve KABI for struct platstmmacenetdata (git-fixes). preserve KABI for struct sfpsocketops (git-fixes). proc: fix /proc//mapfiles lookup (git-fixes). pstore/ram: Check start of empty przs during init (git-fixes). pstore/ram: Fix error return code in ramoopsprobe() (git-fixes). pstore/ram: Run without kernel crash dump region (git-fixes). pstore: Avoid kcore oops by vmap()ing with VMIOREMAP (git-fixes). pstore: ramcore: fix possible overflow in persistentraminitecc() (git-fixes). r8169: fix data corruption issue on RTL8402 (git-fixes). reiserfs: Check the return value from getblk() (git-fixes). reiserfs: Replace 1-element array with C99 style flex-array (git-fixes). s390/dasd: fix double module refcount decrement (bsc#1141539). scripts/gitsort/gitsort.py: Add 'perf-tools' branch scsi: qla0xxx: Fix system crash due to bad pointer access (git-fixes). sfc: initialise found bitmap in efxef10mtdprobe (git-fixes). statfs: enforce statfs[64] structure initialization (git-fixes). tracing/trigger: Fix to return error if failed to alloc snapshot (git-fixes). usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (git-fixes). veth: Fixing transmit return status for dropped packets (git-fixes). vfs: make freezesuper abort when syncfilesystem returns error (git-fixes). writeback: Export inodeiolistdel() (bsc#1216989). x86/CPU/AMD: Check vendor in the AMD microcode callback (git-fixes). x86/alternatives: Sync core before enabling interrupts (git-fixes). x86/asm: Ensure asm/proto.h can be included stand-alone (git-fixes). x86/bugs: Add "unknown" reporting for MMIO Stale Data (git-fixes). x86/build: Treat R386PLT32 relocation as R386PC32 (git-fixes). x86/build: Turn off -fcf-protection for realmode targets (git-fixes). x86/cpu/hygon: Fix the CPU topology evaluation for real (git-fixes). x86/cpu: Add another Alder Lake CPU to the Intel family (git-fixes). x86/fpu: Use Alignof to avoid undefined behavior in TYPEALIGN (git-fixes). x86/kvm/lapic: always disable MMIO interface in x2APIC mode (git-fixes). x86/kvm: Do not try to disable kvmclock if it was not enabled (git-fixes). x86/lib: Fix overflow when counting digits (git-fixes). x86/mce: relocate set{clear}mcenospec() functions (git-fixes). x86/microcode/AMD: Track patch allocation size explicitly (git-fixes). x86/microcode/intel: Do not retry microcode reloading on the APs (git-fixes). x86/mm: Add a x86haspatwp() helper (git-fixes). x86/pat: Fix x86haspatwp() (git-fixes). x86/pat: Pass valid address to sanitizephys() (git-fixes). x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes). x86/pm: Fix false positive kmemleak report in msrbuildcontext() (git-fixes). x86/purgatory: Do not generate debug info for purgatory.ro (git-fixes). x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes). x86/topology: Fix duplicated core ID within a package (git-fixes). x86/topology: Fix multiple packages shown on a single-package system (git-fixes). x86/unwind/orc: Fix unreliable stack dump with gcov (git-fixes). x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry (git-fixes). x86: Clear .brk area at early boot (git-fixes). x86: Fix getwchan() for !STACKTRACE (git-fixes). x86: Fix getwchan() to support the ORC unwinder (git-fixes). x86: Mark stopthiscpu() noreturn (git-fixes). x86: Pin task-stack in getwchan() (git-fixes). x86: alwaysinline {rd,wr}msr() (git-fixes).

This update for python fixes the following issues: CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638).

This update for scap-security-guide fixes the following issues: updated to 0.1.71 (jsc#ECO-3319) Add RHEL 9 STIG Add support for Debian 12 Update PCI-DSS profile for RHEL

lots of bugfixes and improvements for SLE

switch buggy journald plugindir remediation to write into journald.conf. (bsc#1217832)

This update for gstreamer fixes the following issues: CVE-2023-40474: Fixed an integer overflow during MXF file parsing (bsc#1215796).

This update for rear116 fixes the following issues: CVE-2024-23301: Corrected world-readable permissions for initrd, which could be an issue if it contains sensitive information (bsc#1218728).

This update for cpio fixes the following issues: CVE-2023-7207: Fixed a path traversal issue that could lead to an arbitrary file write during archive extraction (bsc#1218571).

This update for tomcat fixes the following issues: Security fixes: CVE-2023-46589: Fixed HTTP request smuggling due to incorrect headers parsing. (bsc#1217649) Other fixes: Streamline how patches are handled in the spec file of the package

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.7.0 ESR (MFSA 2024-02) (bsc#1218955): CVE-2024-0741: Out of bounds write in ANGLE CVE-2024-0742: Failure to update user input timestamp CVE-2024-0746: Crash when listing printers on Linux CVE-2024-0747: Bypass of Content Security Policy when directive unsafe-inline was set CVE-2024-0749: Phishing site popup could show local origin in address bar CVE-2024-0750: Potential permissions request bypass via clickjacking CVE-2024-0751: Privilege escalation through devtools CVE-2024-0753: HSTS policy on subdomain could bypass policy of upper domain CVE-2024-0755: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7

This update for systemd fixes the following issues: man: document that PAMName= and NotifyAccess=all don't mix well man: add brief documentation for the (sd-pam) processes created due to PAMName= service: accept the fact that the three xyzgood() functions return ints service: drop pure decorator on static function service: a cgroup empty notification isn't reason enough to go down (bsc#1212207) service: add explanatory comments to controlpidgood() and cgroupgood() service: fix mainpidgood() comment utmp-wtmp: handle EINTR gracefully when waiting to write to tty utmp-wtmp: fix error in case isatty() fails sd-netlink: handle EINTR from poll() gracefully, as success stdio-bridge: don't be bothered with EINTR sd-bus: handle -EINTR return from buspoll() (bsc#1215241) libsystemd: ignore both EINTR and EAGAIN errno-util: introduce ERRNOISTRANSIENT() man/systemd-fsck@.service: clarify passno and noauto combination in /etc/fstab (bsc#1211725) units/initrd-parse-etc.service: Conflict with emergency.target umount: /usr/ should never be unmounted regardless of HAVESPLITUSR or not (bsc#1211576) core/mount: Don't unmount initramfs mounts man: describe that changing Storage= does not move existing data

This update for ca-certificates fixes the following issues: Invoke trust with the --overwrite option when running update-ca-certificates (bsc#1216685)

This update for pam fixes the following issues: CVE-2024-22365: Fixed a local denial of service during PAM login due to a missing check during path manipulation (bsc#1218475).

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946). CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bsc#1202095). CVE-2023-51779: Fixed a use-after-free because of a btsockioctl race condition in btsockrecvmsg (bsc#1218559). CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unauthenticated nearby device to spoof the BDADDR of the peer device to complete pairing without knowledge of the PIN (bsc#1179610 bsc#1215237). CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component that could lead to local privilege escalation. (bsc#1218258). CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947). CVE-2023-6932: Fixed a use-after-free vulnerability in the Linux kernel's ipv4: igmp component that could lead to local privilege escalation (bsc#1218253). CVE-2023-6121: Fixed an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem that could lead to information leak (bsc#1217250). The following non-security bugs were fixed: Fix termination state for idrforeachentryul() (bsc#1109837). Input: powermate - fix use-after-free in powermateconfigcomplete (git-fixes). KVM: s390/mm: Properly reset no-dat (git-fixes bsc#1218057). KVM: s390: vsie: fix wrong VIR 37 when MSO is used (git-fixes bsc#1217936). Limit kernel-source build to architectures for which the kernel binary is built (bsc#1108281). PCI: Disable ATS for specific Intel IPU E2000 devices (bsc#1218622). Resolve build warnings from previous series due to missing commit for Ice Lake freerunning counters perf/x86/intel/uncore: Add boxoffsets for free-running counters (jsc#PED-5023 bsc#1211439). Revert "Limit kernel-source-azure build to architectures for which we build binaries (bsc#1108281)." bcache: Fix bchbtreenodealloc to make the failure behavior consistent (git-fixes). bcache: Remove unnecessary NULL point check in node allocations (git-fixes). bcache: add code comments for bchbtreenodeget() and bchbtreenodealloc() (git-fixes). bcache: check return value from btreenodeallocreplacement() (git-fixes). bcache: prevent potential division by zero error (git-fixes). bcache: replace a mistaken ISERR() by ISERRORNULL() in btreegccoalesce() (git-fixes). bcache: revert replacing ISERRORNULL with ISERR (git-fixes). dm cache policy smq: ensure IO does not prevent cleaner policy progress (git-fixes). dm cache: add condresched() to various workqueue loops (git-fixes). dm crypt: add condresched() to dmcryptwrite() (git-fixes). dm flakey: do not corrupt the zero page (git-fixes). dm flakey: fix a crash with invalid table line (git-fixes). dm flakey: fix logic when corrupting a bio (git-fixes). dm integrity: call kmemcachedestroy() in dmintegrityinit() error path (git-fixes). dm raid: fix missing reconfigmutex unlock in raidctr() error paths (git-fixes). dm stats: check for and propagate allocpercpu failure (git-fixes). dm thin: add condresched() to various workqueue loops (git-fixes). dm verity: do not perform FEC for failed readahead IO (git-fixes). dm verity: fix error handling for checkatmostonce on FEC (git-fixes). dm verity: skip redundant verityhandleerr() on I/O errors (git-fixes). dm-integrity: do not modify bio's immutable biovec in integritymetadata() (git-fixes). dm-verity: align struct dmverityfecio properly (git-fixes). dm: remove flushscheduledwork() during localexit() (git-fixes). doc/README.SUSE: Add how to update the config for module signing (jsc#PED-5021) doc/README.SUSE: Remove how to build modules using kernel-source (jsc#PED-5021) doc/README.SUSE: Simplify the list of references (jsc#PED-5021) gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479). gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479). gve: Changes to add new TX queues (bsc#1214479). gve: Control path for DQO-QPL (bsc#1214479). gve: Do not fully free QPL pages on prefill errors (bsc#1214479). gve: Fix gve interrupt names (bsc#1214479). gve: Fixes for napipoll when budget is 0 (bsc#1214479). gve: RX path for DQO-QPL (bsc#1214479). gve: Set default duplex configuration to full (bsc#1214479). gve: Tx path for DQO-QPL (bsc#1214479). gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479). gve: XDP support GQI-QPL: helper function changes (bsc#1214479). gve: fix fraglist chaining (bsc#1214479). gve: trivial spell fix Recive to Receive (bsc#1214479). gve: unify driver name usage (bsc#1214479). ip6gre: proper dev{hold|put} in ndo[un]init methods (git-fixes). ip6tunnel: sit: proper dev{hold|put} in ndo[un]init methods (git-fixes). ip6vti: proper dev{hold|put} in ndo[un]init methods (git-fixes). ipv6/addrconf: fix a potential refcount underflow for idev (git-fixes). ipv6: remove extra devhold() for fallback tunnels (git-fixes). md/raid0: add discard support for the 'original' layout (git-fixes). md/raid1: fix error: ISO C90 forbids mixed declarations (git-fixes). md/raid1: free the r1bio before waiting for blocked rdev (git-fixes). md/raid1: hold the barrier until handlereaderror() finishes (git-fixes). md: do not leave 'MDRECOVERYFROZEN' in error path of mdsetreadonly() (git-fixes). md: raid1: fix potential OOB in raid1removedisk() (git-fixes). md: restore 'noioflag' for the last mddevresume() (git-fixes). mkspec: Add multibuild support (JSC-SLE#5501, boo#1211226, bsc#1218184) When MULTIBUILD option in config.sh is enabled generate a multibuild file listing all spec files. nbd: Add the maximum limit of allocated index in nbddevadd (git-fixes). nbd: Fix debugfscreatedir error checking (git-fixes). net/tg3: fix race condition in tg3resettask() (bsc#1217801). net/tg3: resolve deadlock in tg3resettask() during EEH (bsc#1217801). net: dsa: mv88e6xxx: Fix 88E6141/6341 2500mbps SERDES speed (git-fixes). net: ethernet: ti: cpsw: unsync mcast entries while switch promisc mode (git-fixes). net: macb: disable scatter-gather for macb on sama5d3 (git-fixes). net: stmmac: Move debugfs init/exit to ->probe()/->remove() (git-fixes). net: usb: ax88179178a: fix failed operations during ax88179reset (git-fixes). net: usb: qmiwwan: claim interface 4 for ZTE MF290 (git-fixes). net: usb: smsc95xx: Fix an error code in smsc95xxreset() (git-fixes). net: usb: smsc95xx: Fix uninit-value access in smsc95xxreadreg (git-fixes). netfilter: compat: prepare xtcompatinitoffsets to return errors (git-fixes). netfilter: compat: reject huge allocation requests (git-fixes). netfilter: ebtables: also count base chain policies (git-fixes). netfilter: ebtables: compat: un-break 32bit setsockopt when no rules are present (git-fixes). netfilter: ebtables: do not attempt to allocate 0-sized compat array (git-fixes). netfilter: nftables: fix use-after-free when deleting compat expressions (git-fixes). netfilter: nftcompat: use-after-free when deleting targets (git-fixes). netfilter: preserve KABI for xtcompatinitoffsets (git-fixes). nvme: sanitize metadata bounce buffer for reads (git-fixes). perf/x86/cstate: Add Rocket Lake CPU support (jsc#PED-5023 bsc#1211439). perf/x86/cstate: Add Tiger Lake CPU support (jsc#PED-5023 bsc#1211439). perf/x86/cstate: Update C-state counters for Ice Lake (jsc#PED-5023 bsc#1211439). perf/x86/intel/uncore: Add Comet Lake support (jsc#PED-5023 bsc#1211439). perf/x86/intel/uncore: Add IMC uncore support for Snow Ridge (jsc#PED-5023 bsc#1211439). perf/x86/intel/uncore: Add Ice Lake server uncore support (jsc#PED-5023 bsc#1211439). perf/x86/intel/uncore: Add Rocket Lake support (jsc#PED-5023 bsc#1211439). perf/x86/intel/uncore: Add new IMC PCI IDs for KabyLake, AmberLake and WhiskeyLake CPUs (jsc#PED-5023 bsc#1211439). perf/x86/intel/uncore: Add tabs to Uncore IMC PCI IDs (jsc#PED-5023 bsc#1211439). perf/x86/intel/uncore: Add uncore support for Snow Ridge server (jsc#PED-5023 bsc#1211439). perf/x86/intel/uncore: Clean up client IMC (jsc#PED-5023 bsc#1211439). perf/x86/intel/uncore: Factor out snruncoremmioinitbox (jsc#PED-5023 bsc#1211439). perf/x86/intel/uncore: Factor out box ref/unref functions (jsc#PED-5023 bsc#1211439). perf/x86/intel/uncore: Fix CASCOUNTWRITE issue for ICX (jsc#PED-5023 bsc#1211439 (git-fixes)). perf/x86/intel/uncore: Fix IIO event constraints for Snowridge (jsc#PED-5023 bsc#1211439 (git-fixes)). perf/x86/intel/uncore: Fix Intel ICX IIO event constraints (jsc#PED-5023 bsc#1211439 (git-fixes)). perf/x86/intel/uncore: Fix M2M event umask for Ice Lake server (jsc#PED-5023 bsc#1211439 (git-fixes)). perf/x86/intel/uncore: Fix broken readcounter() for SNB IMC PMU (jsc#PED-5023 bsc#1211439 (git-fixes)). perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32 (jsc#PED-5023 bsc#1211439 (git-fixes)). perf/x86/intel/uncore: Fix missing marker for snruncoreimcfreerunningevents (jsc#PED-5023 bsc#1211439 (git-fixes)). perf/x86/intel/uncore: Fix oops when counting IMC uncore events on some TGL (jsc#PED-5023 bsc#1211439 (git-fixes)). perf/x86/intel/uncore: Fix reference count leak in uncoreimcinitbox() (jsc#PED-5023 bsc#1211439 (git-fixes)). perf/x86/intel/uncore: Fix reference count leak in snruncoremmiomap() (jsc#PED-5023 bsc#1211439 (git-fixes)). perf/x86/intel/uncore: Fix the scale of the IMC free-running events (jsc#PED-5023 bsc#1211439 (git-fixes)). perf/x86/intel/uncore: Split the Ice Lake and Tiger Lake MSR uncore support (jsc#PED-5023 bsc#1211439). perf/x86/intel/uncore: Support MMIO type uncore blocks (jsc#PED-5023 bsc#1211439). perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server (jsc#PED-5023 bsc#1211439 (git-fixes)). perf/x86/intel/uncore: Update Ice Lake uncore units (jsc#PED-5023 bsc#1211439). perf/x86/intel: Add Icelake desktop CPUID (jsc#PED-5023 bsc#1211439). perf/x86/intel: Add Rocket Lake CPU support (jsc#PED-5023 bsc#1211439). perf/x86/intel: Add Tiger Lake CPU support (jsc#PED-5023 bsc#1211439). perf/x86/intel: Add more Icelake CPUIDs (jsc#PED-5023 bsc#1211439). perf/x86/intel: Fix Ice Lake event constraint table (jsc#PED-5023 bsc#1211439). perf/x86/intel: Fix invalid Bit 13 for Icelake MSROFFCORERSPx register (jsc#PED-5023 bsc#1211439). perf/x86/intel: Mark expected switch fall-throughs (jsc#PED-5023 bsc#1211439). perf/x86/msr: Add Comet Lake CPU support (jsc#PED-5023 bsc#1211439). perf/x86/msr: Add Rocket Lake CPU support (jsc#PED-5023 bsc#1211439). perf/x86/msr: Add Tiger Lake CPU support (jsc#PED-5023 bsc#1211439). perf/x86/msr: Add new CPU model numbers for Ice Lake (jsc#PED-5023 bsc#1211439). perf/x86/rapl: Add Ice Lake RAPL support (jsc#PED-5023 bsc#1211439). perf/x86: Add Intel Ice Lake NNPI uncore support (jsc#PED-5023 bsc#1211439). perf/x86: Add Intel Tiger Lake uncore support (jsc#PED-5023 bsc#1211439). r8152: Add RTL8152INACCESSIBLE checks to more loops (git-fixes). r8152: Add RTL8152INACCESSIBLE to r8153aldpsen() (git-fixes). r8152: Cancel hwphywork if we have an error in probe (git-fixes). r8152: Increase USB control msg timeout to 5000ms as per spec (git-fixes). r8152: Rename RTL8152UNPLUG to RTL8152INACCESSIBLE (git-fixes). r8152: Run the unload routine if we have errors during probe (git-fixes). rbd: avoid use-after-free in dorbdadd() when rbddevcreate() fails (git-fixes). ring-buffer: Fix memory leak of free page (git-fixes). s390/vx: fix save/restore of fpu kernel context (git-fixes bsc#1218362). sit: proper dev{hold|put} in ndo[un]init methods (git-fixes). tcp: fix under-evaluated ssthresh in TCP Vegas (git-fixes). tracing: Always update snapshot buffer size (git-fixes). tracing: Disable snapshot buffer when stopping instance tracers (git-fixes). tracing: Fix a possible race when disabling buffered events (bsc#1217036). tracing: Fix a warning when allocating buffered events fails (bsc#1217036). tracing: Fix incomplete locking when disabling buffered events (bsc#1217036). tracing: Fix warning in tracebufferedeventdisable() (git-fixes, bsc#1217036). tracing: Stop current tracer when resizing buffer (git-fixes). tracing: Update snapshot buffer on resize if it is allocated (git-fixes). tracing: relax traceeventevalupdate() execution with condresched() (git-fixes). usb: config: fix iteration issue in 'usbgetbosdescriptor()' (git-fixes). x86/cpu: Add Comet Lake to the Intel CPU models header (jsc#PED-5023 bsc#1211439). x86/cpu: Add Ice Lake NNPI to Intel family (jsc#PED-5023 bsc#1211439). x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (jsc#PED-5023 bsc#1211439). x86/cpu: Add Sapphire Rapids CPU model number (jsc#PED-5023 bsc#1211439). x86/cpu: Add Tiger Lake to Intel family (jsc#PED-5023 bsc#1211439). xfrm6: fix inet6dev refcount underflow problem (git-fixes). xfrm: reuse uncachedlist to track xdsts (git-fixes). xhci: Clear EHB bit only at end of interrupt handler (git-fixes). xsk: Fix incorrect netdev reference count (git-fixes).

This update for gcc48 fixes the following issues: Fixed miscompilation of glibc wcstod function on aarch64. (bsc#1218020)