Packages changed:
  aaa_base (84.87+git20210616.9cf42ff -> 84.87+git20210727.b447649)
  bash (5.1.4 -> 5.1.8)
  iproute2 (5.12 -> 5.13)
  ipset (7.11 -> 7.14)
  kernel-source (5.13.4 -> 5.13.6)
  libzypp (17.27.0 -> 17.28.0)
  lua54
  selinux-policy (20210419 -> 20210716)
  sudo
  systemd (248.3 -> 248.6)
  tpm2.0-abrmd (2.3.3 -> 2.4.0)
  tpm2.0-tools
  zypper (1.14.46 -> 1.14.48)

=== Details ===

==== aaa_base ====
Version update (84.87+git20210616.9cf42ff -> 84.87+git20210727.b447649)

- Update to version 84.87+git20210727.b447649:
  * Move /etc/profile.d/* to /usr/etc/profile.d/

==== bash ====
Version update (5.1.4 -> 5.1.8)

- Use a get_version_number.sh script
- Get patch lvl by running command to find it instead of hardcoding
- Remove old SUSE RPM constructs
- Clean spec file

==== iproute2 ====
Version update (5.12 -> 5.13)

- Update to release 5.13
  * mptcp: add support for port-based endpoints
  * nexthop: Add ability to specify group type, add support for
    resilient nexthop groups and nexthop buckets
  * ip: xfrm: add support for tfcpad
  * ip-nexthop: support flush by id
  * mptcp: add support for event monitoring
  * bridge: monitor: add support for vlan monitoring

==== ipset ====
Version update (7.11 -> 7.14)
Subpackages: libipset13

- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete

==== kernel-source ====
Version update (5.13.4 -> 5.13.6)

- Update config files.
  Just refresh.
- commit 2d7b44d
- Linux 5.13.6 (bsc#1012628).
- igc: Fix use-after-free error during reset (bsc#1012628).
- igb: Fix use-after-free error during reset (bsc#1012628).
- igc: change default return of igc_read_phy_reg() (bsc#1012628).
- ixgbe: Fix an error handling path in 'ixgbe_probe()'
  (bsc#1012628).
- igc: Fix an error handling path in 'igc_probe()' (bsc#1012628).
- igb: Fix an error handling path in 'igb_probe()' (bsc#1012628).
- fm10k: Fix an error handling path in 'fm10k_probe()'
  (bsc#1012628).
- e1000e: Fix an error handling path in 'e1000_probe()'
  (bsc#1012628).
- iavf: Fix an error handling path in 'iavf_probe()'
  (bsc#1012628).
- igb: Check if num of q_vectors is smaller than max before
  array access (bsc#1012628).
- igb: Fix position of assignment to *ring (bsc#1012628).
- net: stmmac: Terminate FPE workqueue in suspend (bsc#1012628).
- gve: Fix an error handling path in 'gve_probe()' (bsc#1012628).
- bpf, samples: Fix xdpsock with '-M' parameter missing unload
  process (bsc#1012628).
- bonding: fix suspicious RCU usage in bond_ipsec_add_sa()
  (bsc#1012628).
- bonding: fix null dereference in bond_ipsec_add_sa()
  (bsc#1012628).
- ixgbevf: use xso.real_dev instead of xso.dev in callback
  functions of struct xfrmdev_ops (bsc#1012628).
- bonding: fix suspicious RCU usage in bond_ipsec_del_sa()
  (bsc#1012628).
- bonding: disallow setting nested bonding + ipsec offload
  (bsc#1012628).
- bonding: Add struct bond_ipesc to manage SA (bsc#1012628).
- bonding: fix suspicious RCU usage in bond_ipsec_offload_ok()
  (bsc#1012628).
- bonding: fix incorrect return value of bond_ipsec_offload_ok()
  (bsc#1012628).
- ipv6: fix 'disable_policy' for fwd packets (bsc#1012628).
- stmmac: platform: Fix signedness bug in stmmac_probe_config_dt()
  (bsc#1012628).
- selftests: icmp_redirect: remove from checking for IPv6 route
  get (bsc#1012628).
- selftests: icmp_redirect: IPv6 PMTU info should be cleared
  after redirect (bsc#1012628).
- pwm: sprd: Ensure configuring period and duty_cycle isn't
  wrongly skipped (bsc#1012628).
- cxgb4: fix IRQ free race during driver unload (bsc#1012628).
- drm/vmwgfx: Fix a bad merge in otable batch takedown
  (bsc#1012628).
- mptcp: fix warning in __skb_flow_dissect() when do syn cookie
  for subflow join (bsc#1012628).
- mptcp: remove redundant req destruct in subflow_check_req()
  (bsc#1012628).
- mptcp: fix syncookie process if mptcp can not_accept new subflow
  (bsc#1012628).
- mptcp: add sk parameter for mptcp_get_options (bsc#1012628).
- mptcp: avoid processing packet if a subflow reset (bsc#1012628).
- selftests: mptcp: fix case multiple subflows limited by server
  (bsc#1012628).
- mptcp: use fast lock for subflows when possible (bsc#1012628).
- mptcp: refine mptcp_cleanup_rbuf (bsc#1012628).
- mptcp: properly account bulk freed memory (bsc#1012628).
- net: phy: marvell10g: fix differentiation of 88X3310 from
  88X3340 (bsc#1012628).
- nvme-pci: do not call nvme_dev_remove_admin from nvme_remove
  (bsc#1012628).
- net: ocelot: fix switchdev objects synced for wrong netdev
  with LAG offload (bsc#1012628).
- sfc: fix lack of XDP TX queues - error XDP TX failed (-22)
  (bsc#1012628).
- KVM: x86/pmu: Clear anythread deprecated bit when 0xa leaf is
  unsupported on the SVM (bsc#1012628).
- KVM: SVM: Return -EFAULT if copy_to_user() for SEV mig packet
  header fails (bsc#1012628).
- KVM: SVM: Fix sev_pin_memory() error checks in SEV migration
  utilities (bsc#1012628).
- arm64: mte: fix restoration of GCR_EL1 from suspend
  (bsc#1012628).
- ARM: dts: aspeed: Update e3c246d4i vuart properties
  (bsc#1012628).
- firmware: arm_scmi: Ensure drivers provide a probe function
  (bsc#1012628).
- perf inject: Fix dso->nsinfo refcounting (bsc#1012628).
- perf map: Fix dso->nsinfo refcounting (bsc#1012628).
- perf probe: Fix dso->nsinfo refcounting (bsc#1012628).
- perf env: Fix sibling_dies memory leak (bsc#1012628).
- perf test session_topology: Delete session->evlist
  (bsc#1012628).
- perf test event_update: Fix memory leak of evlist (bsc#1012628).
- perf test event_update: Fix memory leak of unit (bsc#1012628).
- perf dso: Fix memory leak in dso__new_map() (bsc#1012628).
- perf test maps__merge_in: Fix memory leak of maps (bsc#1012628).
- perf env: Fix memory leak of cpu_pmu_caps (bsc#1012628).
- perf report: Free generated help strings for sort option
  (bsc#1012628).
- perf script: Release zstd data (bsc#1012628).
- perf script: Fix memory 'threads' and 'cpus' leaks on exit
  (bsc#1012628).
- perf lzma: Close lzma stream on exit (bsc#1012628).
- perf probe-file: Delete namelist in del_events() on the error
  path (bsc#1012628).
- perf data: Close all files in close_dir() (bsc#1012628).
- perf sched: Fix record failure when CONFIG_SCHEDSTATS is not
  set (bsc#1012628).
- Kbuild: lto: fix module versionings mismatch in GNU make 3.X
  (bsc#1012628).
- ASoC: wm_adsp: Correct wm_coeff_tlv_get handling (bsc#1012628).
- spi: stm32: fixes pm_runtime calls in probe/remove
  (bsc#1012628).
- regulator: hi6421: Use correct variable type for regmap api
  val argument (bsc#1012628).
- regulator: hi6421: Fix getting wrong drvdata (bsc#1012628).
- spi: mediatek: fix fifo rx mode (bsc#1012628).
- ASoC: rt5631: Fix regcache sync errors on resume (bsc#1012628).
- bpf, test: fix NULL pointer dereference on invalid
  expected_attach_type (bsc#1012628).
- bpf: Fix tail_call_reachable rejection for interpreter when
  jit failed (bsc#1012628).
- xdp, net: Fix use-after-free in bpf_xdp_link_release
  (bsc#1012628).
- ASoC: SOF: Intel: Update ADL descriptor to use ACPI power states
  (bsc#1012628).
- timers: Fix get_next_timer_interrupt() with no timers pending
  (bsc#1012628).
- drm/vc4: hdmi: Drop devm interrupt handler for CEC interrupts
  (bsc#1012628).
- net: dsa: mv88e6xxx: NET_DSA_MV88E6XXX_PTP should depend on
  NET_DSA_MV88E6XXX (bsc#1012628).
- liquidio: Fix unintentional sign extension issue on left shift
  of u16 (bsc#1012628).
- s390/bpf: Perform r1 range checking before accessing
  jit->seen_reg[r1] (bsc#1012628).
- bpf, sockmap: Fix potential memory leak on unlikely error case
  (bsc#1012628).
- bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats
  (bsc#1012628).
- bpf, sockmap, udp: sk_prot needs inuse_idx set for proc stats
  (bsc#1012628).
- bpftool: Check malloc return value in mount_bpffs_for_pin
  (bsc#1012628).
- net: fix uninit-value in caif_seqpkt_sendmsg (bsc#1012628).
- spi: spi-cadence-quadspi: Fix division by zero warning
  (bsc#1012628).
- usb: hso: fix error handling code of hso_create_net_device
  (bsc#1012628).
- dma-mapping: handle vmalloc addresses in
  dma_common_{mmap,get_sgtable} (bsc#1012628).
- ASoC: soc-pcm: add a flag to reverse the stop sequence
  (bsc#1012628).
- efi/tpm: Differentiate missing and invalid final event log table
  (bsc#1012628).
- net: decnet: Fix sleeping inside in af_decnet (bsc#1012628).
- KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash
  (bsc#1012628).
- KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak (bsc#1012628).
- net: sched: fix memory leak in tcindex_partial_destroy_work
  (bsc#1012628).
- sctp: trim optlen when it's a huge value in sctp_setsockopt
  (bsc#1012628).
- netrom: Decrease sock refcount when sock timers expire
  (bsc#1012628).
- scsi: iscsi: Fix iface sysfs attr detection (bsc#1012628).
- scsi: target: Fix protect handling in WRITE SAME(32)
  (bsc#1012628).
- spi: cadence: Correct initialisation of runtime PM again
  (bsc#1012628).
- ACPI: Kconfig: Fix table override from built-in initrd
  (bsc#1012628).
- efi/dev-path-parser: Switch to use for_each_acpi_dev_match()
  (bsc#1012628).
- ACPI: utils: Fix reference counting in for_each_acpi_dev_match()
  (bsc#1012628).
- bnxt_en: don't disable an already disabled PCI device
  (bsc#1012628).
- bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe()
  (bsc#1012628).
- bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in
  bnxt_fw_rset_task() (bsc#1012628).
- bnxt_en: fix error path of FW reset (bsc#1012628).
- bnxt_en: Validate vlan protocol ID on RX packets (bsc#1012628).
- bnxt_en: Check abort error state in bnxt_half_open_nic()
  (bsc#1012628).
- net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition
  (bsc#1012628).
- net/tcp_fastopen: fix data races around tfo_active_disable_stamp
  (bsc#1012628).
- ALSA: hda: intel-dsp-cfg: add missing ElkhartLake PCI ID
  (bsc#1012628).
- net: hns3: fix possible mismatches resp of mailbox
  (bsc#1012628).
- net: hns3: fix rx VLAN offload state inconsistent issue
  (bsc#1012628).
- spi: spi-bcm2835: Fix deadlock (bsc#1012628).
- io_uring: fix memleak in io_init_wq_offload() (bsc#1012628).
- net/sched: act_skbmod: Skip non-Ethernet packets (bsc#1012628).
- ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions
  (bsc#1012628).
- ceph: don't WARN if we're still opening a session to an MDS
  (bsc#1012628).
- i2c: mpc: Poll for MCF (bsc#1012628).
- scsi: target: Fix NULL dereference on XCOPY completion
  (bsc#1012628).
- drm/ttm: Force re-init if ttm_global_init() fails (bsc#1012628).
- nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is
  not RESETTING (bsc#1012628).
- Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL
  LTE modem" (bsc#1012628).
- afs: Fix tracepoint string placement with built-in AFS
  (bsc#1012628).
- afs: check function return (bsc#1012628).
- afs: Fix setting of writeback_index (bsc#1012628).
- r8169: Avoid duplicate sysfs entry creation error (bsc#1012628).
- nvme: set the PRACT bit when using Write Zeroes with T10 PI
  (bsc#1012628).
- sctp: update active_key for asoc when old key is being replaced
  (bsc#1012628).
- udp: check encap socket in __udp_lib_err (bsc#1012628).
- ibmvnic: Remove the proper scrq flush (bsc#1012628).
- riscv: Fix 32-bit RISC-V boot failure (bsc#1012628).
- tcp: disable TFO blackhole logic by default (bsc#1012628).
- net: dsa: sja1105: make VID 4095 a bridge VLAN too
  (bsc#1012628).
- RISC-V: load initrd wherever it fits into memory (bsc#1012628).
- net: sched: cls_api: Fix the the wrong parameter (bsc#1012628).
- drm/panel: raspberrypi-touchscreen: Prevent double-free
  (bsc#1012628).
- dpaa2-switch: seed the buffer pool after allocating the swp
  (bsc#1012628).
- cifs: only write 64kb at a time when fallocating a small region
  of a file (bsc#1012628).
- cifs: fix fallocate when trying to allocate a hole
  (bsc#1012628).
- ACPI: fix NULL pointer dereference (bsc#1012628).
- io_uring: Fix race condition when sqp thread goes to sleep
  (bsc#1012628).
- mmc: core: Don't allocate IDA for OF aliases (bsc#1012628).
- s390/ftrace: fix ftrace_update_ftrace_func implementation
  (bsc#1012628).
- s390/boot: fix use of expolines in the DMA code (bsc#1012628).
- ALSA: usb-audio: Add missing proc text entry for BESPOKEN type
  (bsc#1012628).
- ALSA: usb-audio: Add registration quirk for JBL Quantum headsets
  (bsc#1012628).
- ALSA: sb: Fix potential ABBA deadlock in CSP driver
  (bsc#1012628).
- ALSA: hda/realtek: Fix pop noise and 2 Front Mic issues on a
  machine (bsc#1012628).
- ALSA: hdmi: Expose all pins on MSI MS-7C94 board (bsc#1012628).
- ALSA: pcm: Call substream ack() method upon compat mmap commit
  (bsc#1012628).
- ALSA: pcm: Fix mmap capability check (bsc#1012628).
- usb: xhci: avoid renesas_usb_fw.mem when it's unusable
  (bsc#1012628).
- xhci: Fix lost USB 2 remote wake (bsc#1012628).
- usb: ehci: Prevent missed ehci interrupts with edge-triggered
  MSI (bsc#1012628).
- KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state
  (bsc#1012628).
- usb: hub: Disable USB 3 device initiated lpm if exit latency
  is too high (bsc#1012628).
- usb: hub: Fix link power management max exit latency (MEL)
  calculations (bsc#1012628).
- USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS
  (bsc#1012628).
- usb: max-3421: Prevent corruption of freed memory (bsc#1012628).
- usb: renesas_usbhs: Fix superfluous irqs happen after
  usb_pkt_pop() (bsc#1012628).
- USB: serial: option: add support for u-blox LARA-R6 family
  (bsc#1012628).
- USB: serial: cp210x: fix comments for GE CS1000 (bsc#1012628).
- USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick
  (bsc#1012628).
- usb: gadget: Fix Unbalanced pm_runtime_enable in
  tegra_xudc_probe (bsc#1012628).
- usb: dwc2: Skip clock gating on Samsung SoCs (bsc#1012628).
- usb: dwc2: gadget: Fix GOUTNAK flow for Slave mode
  (bsc#1012628).
- usb: dwc2: gadget: Fix sending zero length packet in DDMA mode
  (bsc#1012628).
- usb: typec: tipd: Don't block probing of consumer of "connector"
  nodes (bsc#1012628).
- usb: typec: stusb160x: register role switch before interrupt
  registration (bsc#1012628).
- usb: typec: stusb160x: Don't block probing of consumer of
  "connector" nodes (bsc#1012628).
- firmware/efi: Tell memblock about EFI iomem reservations
  (bsc#1012628).
- tracepoints: Update static_call before tp_funcs when adding
  a tracepoint (bsc#1012628).
- tracing/histogram: Rename "cpu" to "common_cpu" (bsc#1012628).
- tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop
  (bsc#1012628).
- tracing: Synthetic event field_pos is an index not a boolean
  (bsc#1012628).
- btrfs: check for missing device in btrfs_trim_fs (bsc#1012628).
- btrfs: fix unpersisted i_size on fsync after expanding truncate
  (bsc#1012628).
- btrfs: fix lock inversion problem when doing qgroup extent
  tracing (bsc#1012628).
- media: ngene: Fix out-of-bounds bug in
  ngene_command_config_free_buf() (bsc#1012628).
- ixgbe: Fix packet corruption due to missing DMA sync
  (bsc#1012628).
- driver core: auxiliary bus: Fix memory leak when
  driver_register() fail (bsc#1012628).
- bus: mhi: pci_generic: Apply no-op for wake using sideband
  wake boolean (bsc#1012628).
- bus: mhi: core: Validate channel ID when processing command
  completions (bsc#1012628).
- bus: mhi: pci_generic: Fix inbound IPCR channel (bsc#1012628).
- posix-cpu-timers: Fix rearm racing against process tick
  (bsc#1012628).
- selftest: use mmap instead of posix_memalign to allocate memory
  (bsc#1012628).
- io_uring: explicitly count entries for poll reqs (bsc#1012628).
- io_uring: remove double poll entry on arm failure (bsc#1012628).
- io_uring: fix early fdput() of file (bsc#1012628).
- userfaultfd: do not untag user pointers (bsc#1012628).
- kfence: move the size check to the beginning of __kfence_alloc()
  (bsc#1012628).
- kfence: skip all GFP_ZONEMASK allocations (bsc#1012628).
- mm: call flush_dcache_page() in memcpy_to_page() and
  memzero_page() (bsc#1012628).
- mm: page_alloc: fix page_poison=1 / INIT_ON_ALLOC_DEFAULT_ON
  interaction (bsc#1012628).
- memblock: make for_each_mem_range() traverse MEMBLOCK_HOTPLUG
  regions (bsc#1012628).
- mm: fix the deadlock in finish_fault() (bsc#1012628).
- hugetlbfs: fix mount mode command line processing (bsc#1012628).
- rbd: don't hold lock_rwsem while running_list is being drained
  (bsc#1012628).
- rbd: always kick acquire on "acquired" and "released"
  notifications (bsc#1012628).
- misc: eeprom: at24: Always append device id even if label
  property is set (bsc#1012628).
- nds32: fix up stack guard gap (bsc#1012628).
- driver core: Prevent warning when removing a device link from
  unregistered consumer (bsc#1012628).
- drm: Return -ENOTTY for non-drm ioctls (bsc#1012628).
- drm/amdgpu: update gc golden setting for dimgrey_cavefish
  (bsc#1012628).
- drm/amdgpu: update the golden setting for vangogh (bsc#1012628).
- drm/amdgpu: update golden setting for sienna_cichlid
  (bsc#1012628).
- spi: spi-cadence-quadspi: Revert "Fix division by zero warning"
  (bsc#1012628).
- bonding: fix build issue (bsc#1012628).
- mptcp: fix 'masking a bool' warning (bsc#1012628).
- skbuff: Release nfct refcount on napi stolen or re-used skbs
  (bsc#1012628).
- ARM: multi_v7_defconfig: Make NOP_USB_XCEIV driver built-in
  (bsc#1012628).
- Documentation: Fix intiramfs script name (bsc#1012628).
- arm64: entry: fix KCOV suppression (bsc#1012628).
- perf inject: Close inject.output on exit (bsc#1012628).
- drm/i915/gvt: Clear d3_entered on elsp cmd submission
  (bsc#1012628).
- spi: spi-cadence-quadspi: Fix division by zero warning - try2
  (bsc#1012628).
- sfc: ensure correct number of XDP queues (bsc#1012628).
- skbuff: Fix build with SKB extensions disabled (bsc#1012628).
- commit b45358d
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (bsc#1188838
  CVE-2021-37576).
- commit b53c0bd
- Linux 5.13.5 (bsc#1012628).
- mt76: mt7921: continue to probe driver when fw already
  downloaded (bsc#1012628).
- udp: properly flush normal packet at GRO time (bsc#1012628).
- udp: annotate data races around unix_sk(sk)->gso_size
  (bsc#1012628).
- firmware: arm_scmi: Avoid padding in sensor message structure
  (bsc#1012628).
- drm/panel: nt35510: Do not fail if DSI read fails (bsc#1012628).
- perf test bpf: Free obj_buf (bsc#1012628).
- bpf: Track subprog poke descriptors correctly and fix
  use-after-free (bsc#1012628).
- bpftool: Properly close va_list 'ap' by va_end() on error
  (bsc#1012628).
- tools: bpf: Fix error in 'make -C tools/ bpf_install'
  (bsc#1012628).
- tcp: call sk_wmem_schedule before sk_mem_charge in zerocopy path
  (bsc#1012628).
- ipv6: tcp: drop silly ICMPv6 packet too big messages
  (bsc#1012628).
- tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized
  (bsc#1012628).
- tcp: annotate data races around tp->mtu_info (bsc#1012628).
- tcp: consistently disable header prediction for mptcp
  (bsc#1012628).
- ARM: dts: everest: Add phase corrections for eMMC (bsc#1012628).
- ARM: dts: tacoma: Add phase corrections for eMMC (bsc#1012628).
- ARM: dts: aspeed: Fix AST2600 machines line names (bsc#1012628).
- vboxsf: Add support for the atomic_open directory-inode op
  (bsc#1012628).
- vboxsf: Add vboxsf_[create|release]_sf_handle() helpers
  (bsc#1012628).
- vboxsf: Make vboxsf_dir_create() return the handle for the
  created file (bsc#1012628).
- vboxsf: Honor excl flag to the dir-inode create op
  (bsc#1012628).
- kbuild: do not suppress Kconfig prompts for silent build
  (bsc#1012628).
- dma-buf/sync_file: Don't leak fences on merge failure
  (bsc#1012628).
- net: fddi: fix UAF in fza_probe (bsc#1012628).
- net: dsa: properly check for the bridge_leave methods in
  dsa_switch_bridge_leave() (bsc#1012628).
- net: validate lwtstate->data before returning from
  skb_tunnel_info() (bsc#1012628).
- net: do not reuse skbuff allocated from skbuff_fclone_cache
  in the skb cache (bsc#1012628).
- net: send SYNACK packet with accepted fwmark (bsc#1012628).
- net: ti: fix UAF in tlan_remove_one (bsc#1012628).
- net: qcom/emac: fix UAF in emac_remove (bsc#1012628).
- net: moxa: fix UAF in moxart_mac_probe (bsc#1012628).
- net: ip_tunnel: fix mtu calculation for ETHER tunnel devices
  (bsc#1012628).
- net: bcmgenet: Ensure all TX/RX queues DMAs are disabled
  (bsc#1012628).
- net: netdevsim: use xso.real_dev instead of xso.dev in callback
  functions of struct xfrmdev_ops (bsc#1012628).
- net: marvell: always set skb_shared_info in
  mvneta_swbm_add_rx_fragment (bsc#1012628).
- net: bridge: sync fdb to new unicast-filtering ports
  (bsc#1012628).
- net/sched: act_ct: remove and free nf_table callbacks
  (bsc#1012628).
- vmxnet3: fix cksum offload issues for tunnels with non-default
  udp ports (bsc#1012628).
- netfilter: nf_tables: Fix dereference of null pointer flow
  (bsc#1012628).
- net/sched: act_ct: fix err check for nf_conntrack_confirm
  (bsc#1012628).
- netfilter: ctnetlink: suspicious RCU usage in
  ctnetlink_dump_helpinfo (bsc#1012628).
- net: ipv6: fix return value of ip6_skb_dst_mtu (bsc#1012628).
- net: dsa: mv88e6xxx: enable SerDes PCS register dump via
  ethtool -d on Topaz (bsc#1012628).
- net: dsa: mv88e6xxx: enable SerDes RX stats for Topaz
  (bsc#1012628).
- net: dsa: mv88e6xxx: enable devlink ATU hash param for Topaz
  (bsc#1012628).
- net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz
  (bsc#1012628).
- net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz
  (bsc#1012628).
- net: dsa: mv88e6xxx: enable .port_set_policy() on Topaz
  (bsc#1012628).
- net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear
  (bsc#1012628).
- f2fs: Show casefolding support only when supported
  (bsc#1012628).
- mm/userfaultfd: fix uffd-wp special cases for fork()
  (bsc#1012628).
- mm/thp: simplify copying of huge zero page pmd when fork
  (bsc#1012628).
- Revert "mm/shmem: fix shmem_swapin() race with swapoff"
  (bsc#1012628).
- Revert "swap: fix do_swap_page() race with swapoff"
  (bsc#1012628).
- arm64: dts: marvell: armada-37xx: move firmware node to generic
  dtsi file (bsc#1012628).
- firmware: turris-mox-rwtm: add marvell,armada-3700-rwtm-firmware
  compatible string (bsc#1012628).
- cifs: prevent NULL deref in cifs_compose_mount_options()
  (bsc#1012628).
- s390: introduce proper type handling call_on_stack() macro
  (bsc#1012628).
- s390/traps: do not test MONITOR CALL without CONFIG_BUG
  (bsc#1012628).
- thermal/core/thermal_of: Stop zone device before unregistering
  it (bsc#1012628).
- perf/x86/intel/uncore: Clean up error handling path of iio
  mapping (bsc#1012628).
- sched/fair: Fix CFS bandwidth hrtimer expiry type (bsc#1012628).
- scsi: qedf: Add check to synchronize abort and flush
  (bsc#1012628).
- scsi: libfc: Fix array index out of bound exception
  (bsc#1012628).
- scsi: libsas: Add LUN number check in .slave_alloc callback
  (bsc#1012628).
- scsi: aic7xxx: Fix unintentional sign extension issue on left
  shift of u8 (bsc#1012628).
- rtc: max77686: Do not enforce (incorrect) interrupt trigger type
  (bsc#1012628).
- arch/arm64/boot/dts/marvell: fix NAND partitioning scheme
  (bsc#1012628).
- kbuild: mkcompile_h: consider timestamp if
  KBUILD_BUILD_TIMESTAMP is set (bsc#1012628).
- arm64: dts: qcom: sm8150: Disable Adreno and modem by default
  (bsc#1012628).
- arm64: dts: qcom: sm8250: Fix pcie2_lane unit address
  (bsc#1012628).
- thermal/drivers/sprd: Add missing of_node_put for loop iteration
  (bsc#1012628).
- thermal/drivers/imx_sc: Add missing of_node_put for loop
  iteration (bsc#1012628).
- thermal/drivers/rcar_gen3_thermal: Do not shadow
  rcar_gen3_ths_tj_1 (bsc#1012628).
- thermal/core: Correct function name
  thermal_zone_device_unregister() (bsc#1012628).
- arm64: dts: imx8: conn: fix enet clock setting (bsc#1012628).
- arm64: dts: imx8mq: assign PCIe clocks (bsc#1012628).
- arm64: dts: imx8mn-beacon-som: Assign PMIC clock (bsc#1012628).
- arm64: dts: ls208xa: remove bus-num from dspi node
  (bsc#1012628).
- arm64: dts: rockchip: Update RK3399 PCI host bridge window to
  32-bit address memory (bsc#1012628).
- firmware: tegra: bpmp: Fix Tegra234-only builds (bsc#1012628).
- soc/tegra: fuse: Fix Tegra234-only builds (bsc#1012628).
- ARM: OMAP2+: Block suspend for am3 and am4 if PM is not
  configured (bsc#1012628).
- arm64: dts: qcom: sc7180: Add wakeup delay for adau codec
  (bsc#1012628).
- ARM: dts: stm32: fix stpmic node for stm32mp1 boards
  (bsc#1012628).
- ARM: dts: stm32: Rename spi-flash/mx66l51235l@N to flash@N on
  DHCOM SoM (bsc#1012628).
- ARM: dts: stm32: Rename eth@N to ethernet@N on DHCOM SoM
  (bsc#1012628).
- ARM: dts: stm32: Drop unused linux,wakeup from touchscreen
  node on DHCOM SoM (bsc#1012628).
- ARM: dts: stm32: fix the Odyssey SoM eMMC VQMMC supply
  (bsc#1012628).
- ARM: dts: stm32: fix ltdc pinctrl on microdev2.0-of7
  (bsc#1012628).
- ARM: dts: stm32: move stmmac axi config in ethernet node on
  stm32mp15 (bsc#1012628).
- ARM: dts: stm32: fix i2c node name on stm32f746 to prevent
  warnings (bsc#1012628).
- ARM: dts: rockchip: fix supply properties in io-domains nodes
  (bsc#1012628).
- arm64: dts: juno: Update SCPI nodes as per the YAML schema
  (bsc#1012628).
- i3c: master: svc: drop free_irq of devm_request_irq allocated
  irq (bsc#1012628).
- ARM: dts: bcm283x: Fix up GPIO LED node names (bsc#1012628).
- ARM: dts: bcm283x: Fix up MMC node names (bsc#1012628).
- ARM: dts: aspeed: Everest: Fix cable card PCA chips
  (bsc#1012628).
- firmware: arm_scmi: Fix the build when CONFIG_MAILBOX is not
  selected (bsc#1012628).
- firmware: arm_scmi: Add SMCCC discovery dependency in Kconfig
  (bsc#1012628).
- memory: tegra: Fix compilation warnings on 64bit platforms
  (bsc#1012628).
- ARM: dts: stm32: fix timer nodes on STM32 MCU to prevent
  warnings (bsc#1012628).
- ARM: dts: stm32: fix RCC node name on stm32f429 MCU
  (bsc#1012628).
- ARM: dts: stm32: fix gpio-keys node on STM32 MCU boards
  (bsc#1012628).
- ARM: dts: stm32: fix stm32mp157c-odyssey card detect pin
  (bsc#1012628).
- ARM: dts: stm32: Fix touchscreen node on dhcom-pdk2
  (bsc#1012628).
- ARM: dts: stm32: Remove extra size-cells on dhcom-pdk2
  (bsc#1012628).
- arm64: dts: qcom: sc7180: Move rmtfs memory region
  (bsc#1012628).
- arm64: dts: qcom: sm8250: fix display nodes (bsc#1012628).
- arm64: dts: qcom: sm8350: fix the node unit addresses
  (bsc#1012628).
- ARM: tegra: nexus7: Correct 3v3 regulator GPIO of PM269 variant
  (bsc#1012628).
- ARM: tegra: wm8903: Fix polarity of headphones-detection GPIO
  in device-trees (bsc#1012628).
- arm64: dts: ti: k3-am654x/j721e/j7200-common-proc-board:
  Fix MCU_RGMII1_TXC direction (bsc#1012628).
- arm64: tegra: Add PMU node for Tegra194 (bsc#1012628).
- ARM: dts: OMAP2+: Replace underscores in sub-mailbox node names
  (bsc#1012628).
- ARM: dts: am335x: fix ti,no-reset-on-init flag for gpios
  (bsc#1012628).
- ARM: dts: am437x-gp-evm: fix ti,no-reset-on-init flag for gpios
  (bsc#1012628).
- ARM: dts: am57xx-cl-som-am57x: fix ti,no-reset-on-init flag
  for gpios (bsc#1012628).
- kbuild: sink stdout from cmd for silent build (bsc#1012628).
- arm64: dts: renesas: beacon: Fix USB ref clock references
  (bsc#1012628).
- arm64: dts: renesas: beacon: Fix USB extal reference
  (bsc#1012628).
- rtc: mxc_v2: add missing MODULE_DEVICE_TABLE (bsc#1012628).
- ARM: dts: ux500: Fix orientation of Janice accelerometer
  (bsc#1012628).
- ARM: dts: imx6dl-riotboard: configure PHY clock and set proper
  EEE value (bsc#1012628).
- ARM: dts: ux500: Fix some compatible strings (bsc#1012628).
- ARM: dts: ux500: Fix orientation of accelerometer (bsc#1012628).
- ARM: dts: ux500: Rename gpio-controller node (bsc#1012628).
- ARM: dts: ux500: Fix interrupt cells (bsc#1012628).
- arm64: dts: rockchip: fix regulator-gpio states array
  (bsc#1012628).
- ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info
  (bsc#1012628).
- ARM: dts: imx6: phyFLEX: Fix UART hardware flow control
  (bsc#1012628).
- soc: mediatek: add missing MODULE_DEVICE_TABLE (bsc#1012628).
- soc: bcm: brcmstb: remove unused variable
  'brcmstb_machine_match' (bsc#1012628).
- ARM: dts: BCM5301X: Fix pinmux subnodes names (bsc#1012628).
- ARM: dts: Hurricane 2: Fix NAND nodes names (bsc#1012628).
- ARM: dts: BCM63xx: Fix NAND nodes names (bsc#1012628).
- ARM: NSP: dts: fix NAND nodes names (bsc#1012628).
- ARM: Cygnus: dts: fix NAND nodes names (bsc#1012628).
- ARM: brcmstb: dts: fix NAND nodes names (bsc#1012628).
- ARM: dts: BCM5301X: Fix NAND nodes names (bsc#1012628).
- reset: ti-syscon: fix to_ti_syscon_reset_data macro
  (bsc#1012628).
- arm64: dts: rockchip: Fix power-controller node names for rk3399
  (bsc#1012628).
- arm64: dts: rockchip: Fix power-controller node names for rk3328
  (bsc#1012628).
- arm64: dts: rockchip: Fix power-controller node names for px30
  (bsc#1012628).
- ARM: dts: rockchip: Fix power-controller node names for rk3288
  (bsc#1012628).
- ARM: dts: rockchip: Fix power-controller node names for rk3188
  (bsc#1012628).
- ARM: dts: rockchip: Fix power-controller node names for rk3066a
  (bsc#1012628).
- ARM: dts: rockchip: Fix IOMMU nodes properties on rk322x
  (bsc#1012628).
- ARM: dts: rockchip: Fix the timer clocks order (bsc#1012628).
- arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi
  (bsc#1012628).
- arm64: dts: rockchip: Use only supported PCIe link speed on
  rk3399 (bsc#1012628).
- ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin
  and rk3288 (bsc#1012628).
- ARM: dts: rockchip: Fix thermal sensor cells o rk322x
  (bsc#1012628).
- ARM: dts: gemini: add device_type on pci (bsc#1012628).
- ARM: dts: gemini: rename mdio to the right name (bsc#1012628).
- commit d9d5075
- r8152: Fix a deadlock by doubly PM resume (bsc#1186194).
- r8152: Fix potential PM refcount imbalance (bsc#1186194).
- commit f6cd057

==== libzypp ====
Version update (17.27.0 -> 17.28.0)

- Rephrase vendor conflict message in case 2 packages are
  involved (bsc#1187760)
  This covers the case where not the packages itself would change
  its vendor, but replaces a package from a different vendor.
- Fix solver jobs for PTFs (bsc#1186503)
- spec: switch to pkgconfig(openssl)
- Show key fpr from signature when signature check fails
  (bsc#1187224)
  Rpm by default only shows the short key ID when checking the
  signature of a package fails. This patch reads the signatures
  from the RPM headers and replaces she short IDs with the key
  fingerprints fetched from the signatures.
- Implement alternative single transaction commit strategy.
  This patch adds a experimental commit strategy that runs all
  operations in a single rpm transaction, speeding up the execution
  a lot.
- Use ZYPP_MEDIANETWORK=1 to enable the experimental new media
  backend.
- Implement zchunk download, refactor Downloader backend.
- Fix purge-kernels fails with kernels from Kernel:HEAD
  (bsc#1187738)
  There recently was a change in the kernel package naming scheme
  in regards to rc kernels. Since kernel upstream uses characters
  in the version that are not allowed in rpm versions a "-rc" was
  previously replaced with ".rc" which broke sorting by version, to
  fix this issue it was replaced with "~rc", which unfortunately
  broke the purge-kernels logic. This patch makes sure purge-kernel
  does apply the same conversion.
- version 17.28.0 (22)

==== lua54 ====

- Update upstream-bugs.patch and upstream-bugs-test.patch to fix
  bugs 4,5,6 for build and tests respectively.

==== selinux-policy ====
Version update (20210419 -> 20210716)
Subpackages: selinux-policy-targeted

- Update to version 20210716
- Remove interfaces for container module before building the package
  (bsc#1188184)
- Updated
  * fix_init.patch
  * fix_systemd_watch.patch
  to adapt to upstream changes
- Use tabrmd SELinux modules from tpm2.0-abrmd instead of storing
  here

==== sudo ====

- Fix LC_TIME incorrectly named LC_ATIME

==== systemd ====
Version update (248.3 -> 248.6)
Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev

- Import commit 73e9e6fb847513c6d62f2fb445778ef5bc0fe516 (merge of v248.6)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/cb29bcc5ef2c0ee659686c5d229646a6ba98ec50...73e9e6fb847513c6d62f2fb445778ef5bc0fe516
- Drop 0001-Revert-core-prevent-excessive-proc-self-mountinfo-pa.patch
  Commit 81107b8419c39f726fd2805517a5b9faab204e59 fixes
  https://github.com/systemd/systemd/issues/19464 which makes the
  aforementioned patch not needed anymore.
- Drop 1003-basic-unit-name-adjust-comments.patch
  It's been merged in SUSE/v248 branch
- Import commit cb29bcc5ef2c0ee659686c5d229646a6ba98ec50 (merge of v248.5)
  4a1c5f34bd basic/unit-name: do not use strdupa() on a path (bsc#1188063 CVE-2021-33910)
  [...]
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/94efce2ee59fca15a48ff9c232c8dd7cf930c0a0...cb29bcc5ef2c0ee659686c5d229646a6ba98ec50
- Drop 1002-basic-unit-name-do-not-use-strdupa-on-a-path.patch as it
  was merged in v248.5.
- Import commit 94efce2ee59fca15a48ff9c232c8dd7cf930c0a0 (merge of v248.4)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/c0aecee593511e49638579cb2b9ac8aaf1f8e6c8...94efce2ee59fca15a48ff9c232c8dd7cf930c0a0
- Drop 1001-unit-name-generate-a-clear-error-code-when-convertin.patch
  as it was merged in v248.4.
- Import commit c0aecee593511e49638579cb2b9ac8aaf1f8e6c8
  42ec1d537a login: use a hwdb entry for tagging Parallels' fb devices with 'master-of-seat' tag
  ecc7c7b462 login: use a hwdb entry for tagging HyperV's fb devices with 'master-of-seat' tag
  a4cfd70476 login: XGI Z7/Z9 (XG20 core) graphic chip requires master-of-seat to be set (bsc#1187154)
  ef553e0199 sd-dhcp-client: tentatively ignore FORCERENEW command (bsc#1185972 CVE-2020-13529)
  aae6c575fc sd-dhcp-client: logs when dhcp client unexpectedly gains a new lease
  258a3d2043 sd-dhcp-client: shorten code a bit
  0a80303114 sd-dhcp-client: check error earlier and reduce indentation

==== tpm2.0-abrmd ====
Version update (2.3.3 -> 2.4.0)
Subpackages: libtss2-tcti-tabrmd0

- Move selinux devel file to devel subpackage
- Update to version 2.4.0:
  - Service start depends on systemd device unit: dev-tpm0.device.
  - Numerous memory leaks.
  - udev settle service deprecation warnings.
  - StandardOutput=syslog deprecation warnings.
- Add selinux module files
- Move dbus files out of /etc

==== tpm2.0-tools ====

- Add 0001-tpm2_eventlog-fix-buffer-offset-when-reading-the-eve.patch to
  fix the offset of the read buffer

==== zypper ====
Version update (1.14.46 -> 1.14.48)
Subpackages: zypper-needs-restarting

- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel >= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48
- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47