Packages changed:
  bash
  ca-certificates-mozilla (2.50 -> 2.52)
  e2fsprogs
  elfutils
  filesystem
  gawk
  kernel-default-base (5.14.6 -> 5.14.9)
  kernel-source (5.14.6 -> 5.14.9)
  ldb (2.3.0 -> 2.4.0)
  libcap (2.51 -> 2.59)
  libjpeg-turbo
  libsolv (0.7.19 -> 0.7.20)
  libsoup2
  lz4
  suse-module-tools (16.0.10+7 -> 16.0.11)
  tar
  timezone (2021a -> 2021c)
  transactional-update (3.5.5 -> 3.5.6)

=== Details ===

==== bash ====

- Install bash_builtins manpage under the correct name

==== ca-certificates-mozilla ====
Version update (2.50 -> 2.52)

- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
  + HARICA Client ECC Root CA 2021
  + HARICA Client RSA Root CA 2021
  + HARICA TLS ECC Root CA 2021
  + HARICA TLS RSA Root CA 2021
  + TunTrust Root CA
- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
  (bsc#1190858)

==== e2fsprogs ====
Subpackages: libcom_err2 libext2fs2

- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them

==== elfutils ====
Subpackages: libasm1 libdw1 libelf1

- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310

==== filesystem ====

- don't perform UsrMerge if ZYPP_SINGLE_RPMTRANS is set. Rely on
  file trigger compat mode in that case and do it posttrans
  (boo#1189788).
- generic %ghost handling instead of hardcoding

==== gawk ====

- remove update-alternatives support, as on linux systems GNU software
    (i.e. gawk in this case) is usually considered the default implementation.
- use %make macros

==== kernel-default-base ====
Version update (5.14.6 -> 5.14.9)

- Add nls_utf8 module (boo#1190797)

==== kernel-source ====
Version update (5.14.6 -> 5.14.9)

- ALSA: usb-audio: Restrict rates for the shared clocks
  (bsc#1190418).
- commit d0ace7f
- Update
  patches.kernel.org/5.14.9-147-Revert-drm-vc4-hdmi-runtime-PM-changes.patch
  (bsc#1012628 bsc#1190469).
- Delete patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch.
  The former superseded the latter.
- commit 2bc4ba2
- Linux 5.14.9 (bsc#1012628).
- mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable()
  (bsc#1012628).
- ocfs2: drop acl cache for directories too (bsc#1012628).
- mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN
  (bsc#1012628).
- mm: fix uninitialized use in overcommit_policy_handler
  (bsc#1012628).
- usb: gadget: r8a66597: fix a loop in set_feature()
  (bsc#1012628).
- usb: gadget: u_audio: EP-OUT bInterval in fback frequency
  (bsc#1012628).
- usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
  (bsc#1012628).
- usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
  (bsc#1012628).
- usb: musb: tusb6010: uninitialized data in
  tusb_fifo_write_unaligned() (bsc#1012628).
- cifs: Not to defer close on file when lock is set (bsc#1012628).
- cifs: Fix soft lockup during fsstress (bsc#1012628).
- cifs: fix incorrect check for null pointer in header_assemble
  (bsc#1012628).
- xen/x86: fix PV trap handling on secondary processors
  (bsc#1012628).
- usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
  (bsc#1012628).
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital
  Multimeter (bsc#1012628).
- USB: cdc-acm: fix minor-number release (bsc#1012628).
- Revert "USB: bcma: Add a check for devm_gpiod_get"
  (bsc#1012628).
- binder: make sure fd closes complete (bsc#1012628).
- binder: fix freeze race (bsc#1012628).
- staging: greybus: uart: fix tty use after free (bsc#1012628).
- usb: isp1760: do not sleep in field register poll (bsc#1012628).
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
  (bsc#1012628).
- usb: dwc3: core: balance phy init and exit (bsc#1012628).
- usb: cdns3: fix race condition before setting doorbell
  (bsc#1012628).
- usb: core: hcd: Add support for deferring roothub registration
  (bsc#1012628).
- USB: serial: mos7840: remove duplicated 0xac24 device ID
  (bsc#1012628).
- USB: serial: option: add Telit LN920 compositions (bsc#1012628).
- USB: serial: option: remove duplicate USB device ID
  (bsc#1012628).
- USB: serial: option: add device id for Foxconn T99W265
  (bsc#1012628).
- misc: bcm-vk: fix tty registration race (bsc#1012628).
- misc: genwqe: Fixes DMA mask setting (bsc#1012628).
- mcb: fix error handling in mcb_alloc_bus() (bsc#1012628).
- KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer
  to KVM guest (bsc#1012628).
- erofs: fix up erofs_lookup tracepoint (bsc#1012628).
- nexthop: Fix division by zero while replacing a resilient group
  (bsc#1012628).
- btrfs: prevent __btrfs_dump_space_info() to underflow its free
  space (bsc#1012628).
- xhci: Set HCD flag to defer primary roothub registration
  (bsc#1012628).
- serial: 8250: 8250_omap: Fix RX_LVL register offset
  (bsc#1012628).
- serial: mvebu-uart: fix driver's tx_empty callback
  (bsc#1012628).
- scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE
  (bsc#1012628).
- drm/amd/pm: Update intermediate power state for SI
  (bsc#1012628).
- net: hso: fix muxed tty registration (bsc#1012628).
- platform/x86: amd-pmc: Increase the response register timeout
  (bsc#1012628).
- arm64: Restore forced disabling of KPTI on ThunderX
  (bsc#1012628).
- arm64: Mitigate MTE issues with str{n}cmp() (bsc#1012628).
- comedi: Fix memory leak in compat_insnlist() (bsc#1012628).
- regulator: qcom-rpmh-regulator: fix pm8009-1 ldo7 resource name
  (bsc#1012628).
- afs: Fix page leak (bsc#1012628).
- afs: Fix incorrect triggering of sillyrename on 3rd-party
  invalidation (bsc#1012628).
- afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS
  server (bsc#1012628).
- afs: Fix updating of i_blocks on file/dir extension
  (bsc#1012628).
- platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR()
  (bsc#1012628).
- regulator: max14577: Revert "regulator: max14577: Add proper
  module aliases strings" (bsc#1012628).
- NLM: Fix svcxdr_encode_owner() (bsc#1012628).
- virtio-net: fix pages leaking when building skb in big mode
  (bsc#1012628).
- enetc: Fix illegal access when reading affinity_hint
  (bsc#1012628).
- enetc: Fix uninitialized struct dim_sample field usage
  (bsc#1012628).
- net: dsa: tear down devlink port regions when tearing down
  the devlink port on error (bsc#1012628).
- net: bgmac-bcma: handle deferred probe error due to mac-address
  (bsc#1012628).
- napi: fix race inside napi_enable (bsc#1012628).
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest
  (bsc#1012628).
- net: hns3: fix change RSS 'hfunc' ineffective issue
  (bsc#1012628).
- net: hns3: fix inconsistent vf id print (bsc#1012628).
- net: hns3: fix misuse vf id and vport id in some logs
  (bsc#1012628).
- net: hns3: check queue id range before using (bsc#1012628).
- net: hns3: check vlan id before using it (bsc#1012628).
- net: hns3: fix a return value error in hclge_get_reset_status()
  (bsc#1012628).
- net/smc: add missing error check in smc_clc_prfx_set()
  (bsc#1012628).
- net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work
  (bsc#1012628).
- net: dsa: fix dsa_tree_setup error path (bsc#1012628).
- net: dsa: don't allocate the slave_mii_bus using devres
  (bsc#1012628).
- net: dsa: realtek: register the MDIO bus under devres
  (bsc#1012628).
- platform/x86: dell: fix DELL_WMI_PRIVACY dependencies & build
  error (bsc#1012628).
- kselftest/arm64: signal: Add SVE to the set of features we
  can check for (bsc#1012628).
- kselftest/arm64: signal: Skip tests if required features are
  missing (bsc#1012628).
- spi: Revert modalias changes (bsc#1012628).
- s390/qeth: fix NULL deref in qeth_clear_working_pool_list()
  (bsc#1012628).
- gpiolib: acpi: Make set-debounce-timeout failures non fatal
  (bsc#1012628).
- gpio: uniphier: Fix void functions to remove return value
  (bsc#1012628).
- qed: rdma - don't wait for resources under hw error recovery
  flow (bsc#1012628).
- mptcp: ensure tx skbs always have the MPTCP ext (bsc#1012628).
- nexthop: Fix memory leaks in nexthop notification chain
  listeners (bsc#1012628).
- nfc: st-nci: Add SPI ID matching DT compatible (bsc#1012628).
- net: ethernet: mtk_eth_soc: avoid creating duplicate offload
  entries (bsc#1012628).
- net: mscc: ocelot: fix forwarding from BLOCKING ports remaining
  enabled (bsc#1012628).
- net/mlx4_en: Don't allow aRFS for encapsulated packets
  (bsc#1012628).
- atlantic: Fix issue in the pm resume flow (bsc#1012628).
- drm/amdkfd: map SVM range with correct access permission
  (bsc#1012628).
- drm/amdkfd: fix dma mapping leaking warning (bsc#1012628).
- scsi: iscsi: Adjust iface sysfs attr detection (bsc#1012628).
- scsi: target: Fix the pgr/alua_support_store functions
  (bsc#1012628).
- tty: synclink_gt: rename a conflicting function name
  (bsc#1012628).
- fpga: machxo2-spi: Return an error on failure (bsc#1012628).
- fpga: machxo2-spi: Fix missing error code in
  machxo2_write_complete() (bsc#1012628).
- x86/fault: Fix wrong signal when vsyscall fails with pkey
  (bsc#1012628).
- nvme-tcp: fix incorrect h2cdata pdu offset accounting
  (bsc#1012628).
- nvme: keep ctrl->namespaces ordered (bsc#1012628).
- thermal/core: Potential buffer overflow in
  thermal_build_list_of_policies() (bsc#1012628).
- cifs: fix a sign extension bug (bsc#1012628).
- scsi: sd_zbc: Support disks with more than 2**32 logical blocks
  (bsc#1012628).
- scsi: ufs: Revert "Utilize Transfer Request List Completion
  Notification Register" (bsc#1012628).
- scsi: ufs: Retry aborted SCSI commands instead of completing
  these successfully (bsc#1012628).
- scsi: ufs: core: Unbreak the reset handler (bsc#1012628).
- scsi: qla2xxx: Restore initiator in dual mode (bsc#1012628).
- scsi: lpfc: Use correct scnprintf() limit (bsc#1012628).
- irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build
  (bsc#1012628).
- irqchip/gic-v3-its: Fix potential VPE leak on error
  (bsc#1012628).
- md: fix a lock order reversal in md_alloc (bsc#1012628).
- x86/asm: Fix SETZ size enqcmds() build failure (bsc#1012628).
- io_uring: fix race between poll completion and cancel_hash
  insertion (bsc#1012628).
- io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow
  (bsc#1012628).
- io_uring: put provided buffer meta data under memcg accounting
  (bsc#1012628).
- io_uring: don't punt files update to io-wq unconditionally
  (bsc#1012628).
- blktrace: Fix uaf in blk_trace access after removing by sysfs
  (bsc#1012628).
- net: phylink: Update SFP selected interface on advertising
  changes (bsc#1012628).
- net: macb: fix use after free on rmmod (bsc#1012628).
- net: stmmac: allow CSR clock of 300MHz (bsc#1012628).
- blk-mq: avoid to iterate over stale request (bsc#1012628).
- m68k: Double cast io functions to unsigned long (bsc#1012628).
- ipv6: delay fib6_sernum increase in fib6_add (bsc#1012628).
- dma-debug: prevent an error message from causing runtime
  problems (bsc#1012628).
- cpufreq: intel_pstate: Override parameters if HWP forced by BIOS
  (bsc#1012628).
- bpf: Add oversize check before call kvcalloc() (bsc#1012628).
- xen/balloon: use a kernel thread instead a workqueue
  (bsc#1012628).
- nvme-multipath: fix ANA state updates when a namespace is not
  present (bsc#1012628).
- nvme-rdma: destroy cm id before destroy qp to avoid use after
  free (bsc#1012628).
- sparc32: page align size in arch_dma_alloc (bsc#1012628).
- amd/display: downgrade validation failure log level
  (bsc#1012628).
- drm/ttm: fix type mismatch error on sparc64 (bsc#1012628).
- block: check if a profile is actually registered in
  blk_integrity_unregister (bsc#1012628).
- block: flush the integrity workqueue in blk_integrity_unregister
  (bsc#1012628).
- blk-cgroup: fix UAF by grabbing blkcg lock before destroying
  blkg pd (bsc#1012628).
- compiler.h: Introduce absolute_pointer macro (bsc#1012628).
- net: i825xx: Use absolute_pointer for memcpy from fixed memory
  location (bsc#1012628).
- sparc: avoid stringop-overread errors (bsc#1012628).
- qnx4: avoid stringop-overread errors (bsc#1012628).
- parisc: Use absolute_pointer() to define PAGE0 (bsc#1012628).
- drm/amdkfd: make needs_pcie_atomics FW-version dependent
  (bsc#1012628).
- drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo
  (bsc#1012628).
- drm/amd/display: Link training retry fix for abort case
  (bsc#1012628).
- amd/display: enable panel orientation quirks (bsc#1012628).
- arm64: Mark __stack_chk_guard as __ro_after_init (bsc#1012628).
- alpha: Declare virt_to_phys and virt_to_bus parameter as
  pointer to volatile (bsc#1012628).
- net: 6pack: Fix tx timeout and slot time (bsc#1012628).
- spi: Fix tegra20 build with CONFIG_PM=n (bsc#1012628).
- libperf evsel: Make use of FD robust (bsc#1012628).
- Revert drm/vc4 hdmi runtime PM changes (bsc#1012628).
- EDAC/synopsys: Fix wrong value type assignment for edac_mode
  (bsc#1012628).
- EDAC/dmc520: Assign the proper type to dimm->edac_mode
  (bsc#1012628).
- x86/setup: Call early_reserve_memory() earlier (bsc#1012628).
- thermal/drivers/int340x: Do not set a wrong tcc offset on resume
  (bsc#1012628).
- irqchip/armada-370-xp: Fix ack/eoi breakage (bsc#1012628).
- arm64: add MTE supported check to thread switching and syscall
  entry/exit (bsc#1012628).
- USB: serial: cp210x: fix dropped characters with CP2102
  (bsc#1012628).
- software node: balance refcount for managed software nodes
  (bsc#1012628).
- xen/balloon: fix balloon kthread freezing (bsc#1012628).
- qnx4: work around gcc false positive warning bug (bsc#1012628).
- usb: gadget: f_uac2: Add missing companion descriptor for
  feedback EP (bsc#1012628).
- usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval
  (bsc#1012628).
- Refresh patches.suse/drm-vc4-hdmi-Fix-HPD-GPIO-detection.patch.
- commit 85f5318
- arm64: Update config files. (bsc#1185927)
  Set PINCTRL_ZYNQMP as build-in.
- commit 4ae263c
- blacklist.conf: add idxd commit
- commit 06dbf6b
- nvmet: fix a width vs precision bug in
  nvmet_subsys_attr_serial_show() (git-fixes).
- commit fef4ef0
- Linux 5.14.8 (bsc#1012628).
- drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (bsc#1012628).
- selinux,smack: fix subjective/objective credential use mixups
  (bsc#1012628).
- io_uring: fix off-by-one in BUILD_BUG_ON check of
  __REQ_F_LAST_BIT (bsc#1012628).
- cifs: properly invalidate cached root handle when closing it
  (bsc#1012628).
- sched/idle: Make the idle timer expire in hard interrupt context
  (bsc#1012628).
- rtc: rx8010: select REGMAP_I2C (bsc#1012628).
- blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for
  multiple_queues (bsc#1012628).
- blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
  (bsc#1012628).
- block: genhd: don't call blkdev_show() with major_names_lock
  held (bsc#1012628).
- nvmet: fixup buffer overrun in nvmet_subsys_attr_serial()
  (bsc#1012628).
- pwm: stm32-lp: Don't modify HW state in .remove() callback
  (bsc#1012628).
- pwm: rockchip: Don't modify HW state in .remove() callback
  (bsc#1012628).
- pwm: img: Don't modify HW state in .remove() callback
  (bsc#1012628).
- habanalabs: cannot sleep while holding spinlock (bsc#1012628).
- habanalabs: add "in device creation" status (bsc#1012628).
- habanalabs: fix mmu node address resolution in debugfs
  (bsc#1012628).
- habanalabs: add validity check for event ID received from F/W
  (bsc#1012628).
- drm/amdgpu: fix fdinfo race with process exit (bsc#1012628).
- drm/amd/display: Fix memory leak reported by coverity
  (bsc#1012628).
- drm/amdgpu: Fixes to returning VBIOS RAS EEPROM address
  (bsc#1012628).
- habanalabs: fix nullifying of destroyed mmu pgt pool
  (bsc#1012628).
- thermal/drivers/rcar_gen3_thermal: Store TSC id as unsigned int
  (bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
  (bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
  (bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
  (bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
  (bsc#1012628).
- nilfs2: fix NULL pointer in nilfs_##name##_attr_release
  (bsc#1012628).
- nilfs2: fix memory leak in nilfs_sysfs_create_device_group
  (bsc#1012628).
- btrfs: fix lockdep warning while mounting sprout fs
  (bsc#1012628).
- btrfs: delay blkdev_put until after the device remove
  (bsc#1012628).
- btrfs: update the bdev time directly when closing (bsc#1012628).
- s390/unwind: use current_frame_address() to unwind current task
  (bsc#1012628).
- ceph: lockdep annotations for try_nonblocking_invalidate
  (bsc#1012628).
- ceph: remove the capsnaps when removing caps (bsc#1012628).
- ceph: request Fw caps before updating the mtime in
  ceph_write_iter (bsc#1012628).
- ceph: fix memory leak on decode error in ceph_handle_caps
  (bsc#1012628).
- ACPI: PM: s2idle: Run both AMD and Microsoft methods if both
  are supported (bsc#1012628).
- ASoC: audio-graph: respawn Platform Support (bsc#1012628).
- s390: add kmemleak annotation in stack_alloc() (bsc#1012628).
- dmaengine: xilinx_dma: Set DMA mask for coherent APIs
  (bsc#1012628).
- dmaengine: ioat: depends on !UML (bsc#1012628).
- cxl/pci: Introduce cdevm_file_operations (bsc#1012628).
- cxl: Move cxl_core to new directory (bsc#1012628).
- dmaengine: sprd: Add missing MODULE_DEVICE_TABLE (bsc#1012628).
- dmaengine: idxd: depends on !UML (bsc#1012628).
- riscv: dts: microchip: mpfs-icicle: Fix serial console
  (bsc#1012628).
- of: property: Disable fw_devlink DT support for X86
  (bsc#1012628).
- drm/ttm: Fix a deadlock if the target BO is not idle during swap
  (bsc#1012628).
- arm64: mm: limit linear region to 51 bits for KVM in nVHE mode
  (bsc#1012628).
- iommu/vt-d: Fix a deadlock in intel_svm_drain_prq()
  (bsc#1012628).
- iommu/vt-d: Fix PASID leak in intel_svm_unbind_mm()
  (bsc#1012628).
- iommu/amd: Relocate GAMSup check to early_enable_iommus
  (bsc#1012628).
- parisc: Move pci_dev_is_behind_card_dino to where it is used
  (bsc#1012628).
- dma-buf: DMABUF_DEBUG should depend on DMA_SHARED_BUFFER
  (bsc#1012628).
- Update config files.
- dma-buf: DMABUF_MOVE_NOTIFY should depend on DMA_SHARED_BUFFER
  (bsc#1012628).
- Update config files.
- drivers: base: cacheinfo: Get rid of
  DEFINE_SMP_CALL_CACHE_FUNCTION() (bsc#1012628).
- drm/amdgpu: Disable PCIE_DPM on Intel RKL Platform
  (bsc#1012628).
- thermal/core: Fix thermal_cooling_device_register() prototype
  (bsc#1012628).
- tracing/boot: Fix to loop on only subkeys (bsc#1012628).
- tools/bootconfig: Fix tracing_on option checking in
  ftrace2bconf.sh (bsc#1012628).
- Kconfig.debug: drop selecting non-existing
  HARDLOCKUP_DETECTOR_ARCH (bsc#1012628).
- init: move usermodehelper_enable() to populate_rootfs()
  (bsc#1012628).
- math: RATIONAL_KUNIT_TEST should depend on RATIONAL instead
  of selecting it (bsc#1012628).
- SUNRPC: don't pause on incomplete allocation (bsc#1012628).
- s390/entry: make oklabel within CHKSTG macro local
  (bsc#1012628).
- platform/chrome: cros_ec_trace: Fix format warnings
  (bsc#1012628).
- platform/chrome: sensorhub: Add trace events for sample
  (bsc#1012628).
- dmaengine: idxd: clear block on fault flag when clear wq
  (bsc#1012628).
- dmaengine: idxd: fix abort status check (bsc#1012628).
- dmaengine: idxd: fix wq slot allocation index check
  (bsc#1012628).
- dmaengine: idxd: have command status always set (bsc#1012628).
- dmanegine: idxd: cleanup all device related bits after disabling
  device (bsc#1012628).
- pwm: mxs: Don't modify HW state in .probe() after the PWM chip
  was registered (bsc#1012628).
- pwm: lpc32xx: Don't modify HW state in .probe() after the PWM
  chip was registered (bsc#1012628).
- ceph: cancel delayed work instead of flushing on mdsc teardown
  (bsc#1012628).
- thermal/drivers/qcom/spmi-adc-tm5: Don't abort probing if a
  sensor is not used (bsc#1012628).
- PM: sleep: core: Avoid setting power.must_resume to false
  (bsc#1012628).
- profiling: fix shift-out-of-bounds bugs (bsc#1012628).
- nilfs2: use refcount_dec_and_lock() to fix potential UAF
  (bsc#1012628).
- prctl: allow to setup brk for et_dyn executables (bsc#1012628).
- pwm: ab8500: Fix register offset calculation to not depend on
  probe order (bsc#1012628).
- 9p/trans_virtio: Remove sysfs file on probe failure
  (bsc#1012628).
- thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
  (bsc#1012628).
- n64cart: fix return value check in n64cart_probe()
  (bsc#1012628).
- staging: rtl8723bs: fix wpa_set_auth_algs() function
  (bsc#1012628).
- perf tools: Allow build-id with trailing zeros (bsc#1012628).
- perf symbol: Look for ImageBase in PE file to compute .text
  offset (bsc#1012628).
- perf test: Fix bpf test sample mismatch reporting (bsc#1012628).
- dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
  (bsc#1012628).
- RDMA/mlx5: Fix xlt_chunk_align calculation (bsc#1012628).
- RDMA/hns: Enable stash feature of HIP09 (bsc#1012628).
- um: virtio_uml: fix memory leak on init failures (bsc#1012628).
- coredump: fix memleak in dump_vma_snapshot() (bsc#1012628).
- um: fix stub location calculation (bsc#1012628).
- staging: rtl8192u: Fix bitwise vs logical operator in
  TranslateRxSignalStuff819xUsb() (bsc#1012628).
- console: consume APC, DM, DCS (bsc#1012628).
- PCI: aardvark: Fix reporting CRS value (bsc#1012628).
- PCI: pci-bridge-emul: Add PCIe Root Capabilities Register
  (bsc#1012628).
- commit 94242c6
- kernel-binary.spec: suse-kernel-rpm-scriptlets required for uninstall as
  well.
  Fixes: e98096d5cf85 ("rpm: Abolish scritplet templating (bsc#1189841).")
- commit e082fbf
- Linux 5.14.7 (bsc#1012628).
- net: stmmac: fix MAC not working when system resume back with
  WoL active (bsc#1012628).
- io_uring: ensure symmetry in handling iter types in
  loop_rw_iter() (bsc#1012628).
- swiotlb-xen: avoid double free (bsc#1012628).
- swiotlb-xen: fix late init retry (bsc#1012628).
- xen: reset legacy rtc flag for PV domU (bsc#1012628).
- xen: fix usage of pmd_populate in mremap for pv guests
  (bsc#1012628).
- bnx2x: Fix enabling network interfaces without VFs
  (bsc#1012628).
- arm64/sve: Use correct size when reinitialising SVE state
  (bsc#1012628).
- PM: base: power: don't try to use non-existing RTC for storing
  data (bsc#1012628).
- PCI: Add AMD GPU multi-function power dependencies
  (bsc#1012628).
- drm/amd/display: Get backlight from PWM if DMCU is not
  initialized (bsc#1012628).
- drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3
  (bsc#1012628).
- drm/amd/display: Fix white screen page fault for gpuvm
  (bsc#1012628).
- drm/amd/pm: fix runpm hang when amdgpu loaded prior to sound
  driver (bsc#1012628).
- drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (bsc#1012628).
- drm/amdgpu: use IS_ERR for debugfs APIs (bsc#1012628).
- drm/amdgpu: fix use after free during BO move (bsc#1012628).
- drm/amdgpu: add amdgpu_amdkfd_resume_iommu (bsc#1012628).
- drm/amdgpu: move iommu_resume before ip init/resume
  (bsc#1012628).
- drm/amd/pm: fix the issue of uploading powerplay table
  (bsc#1012628).
- drm/amdkfd: separate kfd_iommu_resume from kfd_resume
  (bsc#1012628).
- drm/radeon: pass drm dev radeon_agp_head_init directly
  (bsc#1012628).
- io_uring: allow retry for O_NONBLOCK if async is supported
  (bsc#1012628).
- drm/etnaviv: return context from etnaviv_iommu_context_get
  (bsc#1012628).
- drm/etnaviv: put submit prev MMU context when it exists
  (bsc#1012628).
- drm/etnaviv: stop abusing mmu_context as FE running marker
  (bsc#1012628).
- drm/etnaviv: keep MMU context across runtime suspend/resume
  (bsc#1012628).
- drm/etnaviv: exec and MMU state is lost when resetting the GPU
  (bsc#1012628).
- drm/etnaviv: fix MMU context leak on GPU reset (bsc#1012628).
- drm/etnaviv: reference MMU context when setting up hardware
  state (bsc#1012628).
- drm/etnaviv: add missing MMU context put when reaping MMU
  mapping (bsc#1012628).
- s390/sclp: fix Secure-IPL facility detection (bsc#1012628).
- net: qrtr: revert check in qrtr_endpoint_post() (bsc#1012628).
- x86/pat: Pass valid address to sanitize_phys() (bsc#1012628).
- x86/mm: Fix kern_addr_valid() to cope with existing but not
  present entries (bsc#1012628).
- x86/mce: Avoid infinite loop for copy from user recovery
  (bsc#1012628).
- net: remove the unnecessary check in cipso_v4_doi_free
  (bsc#1012628).
- net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
  (bsc#1012628).
- net-caif: avoid user-triggerable WARN_ON(1) (bsc#1012628).
- ptp: dp83640: don't define PAGE0 (bsc#1012628).
- dccp: don't duplicate ccid when cloning dccp sock (bsc#1012628).
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core
  (bsc#1012628).
- r6040: Restore MDIO clock frequency after MAC reset
  (bsc#1012628).
- tipc: increase timeout in tipc_sk_enqueue() (bsc#1012628).
- drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume
  __maybe_unused (bsc#1012628).
- rtc: cmos: Disable irq around direct invocation of
  cmos_interrupt() (bsc#1012628).
- drm/i915/dp: return proper DPRX link training result
  (bsc#1012628).
- perf machine: Initialize srcline string member in add_location
  struct (bsc#1012628).
- net/mlx5: FWTrace, cancel work on alloc pd error flow
  (bsc#1012628).
- net/mlx5: Fix potential sleeping in atomic context
  (bsc#1012628).
- net: stmmac: fix system hang caused by eee_ctrl_timer during
  suspend/resume (bsc#1012628).
- igc: fix tunnel offloading (bsc#1012628).
- nvme-tcp: fix io_work priority inversion (bsc#1012628).
- powerpc/64s: system call scv tabort fix for corrupt irq
  soft-mask state (bsc#1012628).
- events: Reuse value read using READ_ONCE instead of re-reading
  it (bsc#1012628).
- net: ipa: initialize all filter table slots (bsc#1012628).
- gen_compile_commands: fix missing 'sys' package (bsc#1012628).
- vhost_net: fix OoB on sendmsg() failure (bsc#1012628).
- net/af_unix: fix a data-race in unix_dgram_poll (bsc#1012628).
- net: dsa: destroy the phylink instance on any error in
  dsa_slave_phy_setup (bsc#1012628).
- x86/uaccess: Fix 32-bit __get_user_asm_u64() when
  CC_HAS_ASM_GOTO_OUTPUT=y (bsc#1012628).
- tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
  (bsc#1012628).
- selftest: net: fix typo in altname test (bsc#1012628).
- qed: Handle management FW error (bsc#1012628).
- udp_tunnel: Fix udp_tunnel_nic work-queue type (bsc#1012628).
- dt-bindings: arm: Fix Toradex compatible typo (bsc#1012628).
- ibmvnic: check failover_pending in login response (bsc#1012628).
- KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode
  changing registers (bsc#1012628).
- powerpc/64s: system call rfscv workaround for TM bugs
  (bsc#1012628).
- powerpc/mce: Fix access error in mce handler (bsc#1012628).
- s390/pci_mmio: fully validate the VMA before calling
  follow_pte() (bsc#1012628).
- bnxt_en: make bnxt_free_skbs() safe to call after
  bnxt_free_mem() (bsc#1012628).
- net: hns3: pad the short tunnel frame before sending to hardware
  (bsc#1012628).
- net: hns3: change affinity_mask to numa node range
  (bsc#1012628).
- net: hns3: disable mac in flr process (bsc#1012628).
- net: hns3: fix the timing issue of VF clearing interrupt sources
  (bsc#1012628).
- net: stmmac: platform: fix build warning when with
  !CONFIG_PM_SLEEP (bsc#1012628).
- Drivers: hv: vmbus: Fix kernel crash upon unbinding a device
  from uio_hv_generic driver (bsc#1012628).
- net/mlx5e: Fix mutual exclusion between CQE compression and
  HW TS (bsc#1012628).
- ice: Correctly deal with PFs that do not support RDMA
  (bsc#1012628).
- net: dsa: qca8k: fix kernel panic with legacy mdio mapping
  (bsc#1012628).
- net: dsa: lantiq_gswip: Add 200ms assert delay (bsc#1012628).
- net: hns3: fix the exception when query imp info (bsc#1012628).
- nvme: avoid race in shutdown namespace removal (bsc#1012628).
- blkcg: fix memory leak in blk_iolatency_init (bsc#1012628).
- net: dsa: flush switchdev workqueue before tearing down CPU/DSA
  ports (bsc#1012628).
- mlxbf_gige: clear valid_polarity upon open (bsc#1012628).
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
  (bsc#1012628).
- remoteproc: qcom: wcnss: Fix race with iris probe (bsc#1012628).
- mfd: db8500-prcmu: Adjust map to reality (bsc#1012628).
- PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
  (bsc#1012628).
- fuse: fix use after free in fuse_read_interrupt() (bsc#1012628).
- PCI: tegra194: Fix handling BME_CHGED event (bsc#1012628).
- PCI: tegra194: Fix MSI-X programming (bsc#1012628).
- PCI: tegra: Fix OF node reference leak (bsc#1012628).
- mfd: Don't use irq_create_mapping() to resolve a mapping
  (bsc#1012628).
- PCI: rcar: Fix runtime PM imbalance in rcar_pcie_ep_probe()
  (bsc#1012628).
- riscv: fix the global name pfn_base confliction error
  (bsc#1012628).
- KVM: arm64: Make hyp_panic() more robust when protected mode
  is enabled (bsc#1012628).
- tracing/probes: Reject events which have the same name of
  existing one (bsc#1012628).
- PCI: cadence: Use bitfield for *quirk_retrain_flag* instead
  of bool (bsc#1012628).
- PCI: cadence: Add quirk flag to set minimum delay in LTSSM
  Detect.Quiet state (bsc#1012628).
- PCI: j721e: Add PCIe support for J7200 (bsc#1012628).
- PCI: j721e: Add PCIe support for AM64 (bsc#1012628).
- PCI: Add ACS quirks for Cavium multi-function devices
  (bsc#1012628).
- watchdog: Start watchdog in watchdog_set_last_hw_keepalive
  only if appropriate (bsc#1012628).
- octeontx2-af: Add additional register check to rvu_poll_reg()
  (bsc#1012628).
- Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (bsc#1012628).
- flow: fix object-size-mismatch warning in
  flowi{4,6}_to_flowi_common() (bsc#1012628).
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
  (bsc#1012628).
- block, bfq: honor already-setup queue merges (bsc#1012628).
- PCI: ibmphp: Fix double unmap of io_mem (bsc#1012628).
- loop: reduce the loop_ctl_mutex scope (bsc#1012628).
- ethtool: Fix an error code in cxgb2.c (bsc#1012628).
- NTB: Fix an error code in ntb_msit_probe() (bsc#1012628).
- NTB: perf: Fix an error code in perf_setup_inbuf()
  (bsc#1012628).
- stmmac: dwmac-loongson:Fix missing return value (bsc#1012628).
- net: phylink: add suspend/resume support (bsc#1012628).
- mfd: axp20x: Update AXP288 volatile ranges (bsc#1012628).
- backlight: ktd253: Stabilize backlight (bsc#1012628).
- PCI: controller: PCI_IXP4XX should depend on ARCH_IXP4XX
  (bsc#1012628).
- PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing
  'ranges' (bsc#1012628).
- PCI: iproc: Fix BCMA probe resource handling (bsc#1012628).
- netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with
  mutex (bsc#1012628).
- KVM: arm64: Restrict IPA size to maximum 48 bits on 4K and
  16K page size (bsc#1012628).
- PCI: Fix pci_dev_str_match_path() alloc while atomic bug
  (bsc#1012628).
- mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
  (bsc#1012628).
- tracing/boot: Fix a hist trigger dependency for boot time
  tracing (bsc#1012628).
- mtd: mtdconcat: Judge callback existence based on the master
  (bsc#1012628).
- mtd: mtdconcat: Check _read, _write callbacks existence before
  assignment (bsc#1012628).
- KVM: arm64: Fix read-side race on updates to vcpu reset state
  (bsc#1012628).
- KVM: arm64: Handle PSCI resets before userspace touches vCPU
  state (bsc#1012628).
- PCI/PTM: Remove error message at boot (bsc#1012628).
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
  (bsc#1012628).
- mtd: rawnand: cafe: Fix a resource leak in the error handling
  path of 'cafe_nand_probe()' (bsc#1012628).
- ARC: export clear_user_page() for modules (bsc#1012628).
- perf config: Fix caching and memory leak in
  perf_home_perfconfig() (bsc#1012628).
- perf unwind: Do not overwrite
  FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} (bsc#1012628).
- perf bench inject-buildid: Handle writen() errors (bsc#1012628).
- gpio: mpc8xxx: Fix a resources leak in the error handling path
  of 'mpc8xxx_probe()' (bsc#1012628).
- gpio: mpc8xxx: Fix a potential double iounmap call in
  'mpc8xxx_probe()' (bsc#1012628).
- gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the
  code and avoid a leak (bsc#1012628).
- io_uring: retry in case of short read on block device
  (bsc#1012628).
- net: dsa: tag_rtl4_a: Fix egress tags (bsc#1012628).
- tools build: Fix feature detect clean for out of source builds
  (bsc#1012628).
- mptcp: fix possible divide by zero (bsc#1012628).
- selftests: mptcp: clean tmp files in simult_flows (bsc#1012628).
- net: hso: add failure handler for add_net_device (bsc#1012628).
- net: dsa: b53: Fix calculating number of switch ports
  (bsc#1012628).
- net: dsa: b53: Set correct number of ports in the DSA struct
  (bsc#1012628).
- mptcp: Only send extra TCP acks in eligible socket states
  (bsc#1012628).
- netfilter: socket: icmp6: fix use-after-scope (bsc#1012628).
- fq_codel: reject silly quantum parameters (bsc#1012628).
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
  (bsc#1012628).
- iwlwifi: move get pnvm file name to a separate function
  (bsc#1012628).
- iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()'
  (bsc#1012628).
- ip_gre: validate csum_start only on pull (bsc#1012628).
- net: dsa: b53: Fix IMP port setup on BCM5301x (bsc#1012628).
- bnxt_en: fix stored FW_PSID version masks (bsc#1012628).
- bnxt_en: Fix asic.rev in devlink dev info command (bsc#1012628).
- bnxt_en: Fix possible unintended driver initiated error recovery
  (bsc#1012628).
- ip6_gre: Revert "ip6_gre: add validation for csum_start"
  (bsc#1012628).
- mfd: lpc_sch: Rename GPIOBASE to prevent build error
  (bsc#1012628).
- cxgb3: fix oops on module removal (bsc#1012628).
- net: renesas: sh_eth: Fix freeing wrong tx descriptor
  (bsc#1012628).
- bnxt_en: Fix error recovery regression (bsc#1012628).
- net: dsa: bcm_sf2: Fix array overrun in
  bcm_sf2_num_active_ports() (bsc#1012628).
- s390/bpf: Fix optimizing out zero-extensions (bsc#1012628).
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
  (bsc#1012628).
- s390/bpf: Fix branch shortening during codegen pass
  (bsc#1012628).
- Update config files.
- commit aa9b3e1
- Revert "Revert "rpm: Abolish scritplet templating (bsc#1189841).""
  This reverts commit f924054cc523527b52203e352adb073db0962f5f.
  New suse-module-tools were accepted to factory:
  https://build.opensuse.org/request/show/919089
- commit 6abad1e

==== ldb ====
Version update (2.3.0 -> 2.4.0)

- Update to version 2.4.0
  + Improve calculate_popt_array_length()
  + Use C99 initializers for builtin_popt_options[]
  + pyldb: Fix Message.items() for a message containing elements
  + pyldb: Add test for Message.items()
  + tests: Use ldbsearch '--scope instead of '-s'
  + pyldb: fix a typo
  + Change page size of guidindexpackv1.ldb
  + Use a 1MiB lmdb so the test also passes on aarch64 CentOS stream
  + attrib_handler casefold: simplify space dropping
  + fix ldb_comparison_fold off-by-one overrun
  + CVE-2020-27840: pytests: move Dn.validate test to ldb
  + CVE-2020-27840 ldb_dn: avoid head corruption in ldb_dn_explode
  + CVE-2021-20277 ldb/attrib_handlers casefold: stay in bounds
  + CVE-2021-20277 ldb tests: ldb_match tests with extra spaces
  + improve comments for ldb_module_connect_backend()
  + test/ldb_tdb: correct introductory comments
  + ldb.h: remove undefined async_ctx function signatures
  + correct comments in attrib_handers val_to_int64
  + dn tests use cmocka print functions
  + ldb_match: remove redundant check
  + add tests for ldb_wildcard_compare
  + ldb_match: trailing chunk must match end of string
  + pyldb: catch potential overflow error in py_timestring
  + ldb: remove some 'if PY3's in tests
  + Add missing break in switch statement

==== libcap ====
Version update (2.51 -> 2.59)

- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=<IAB> module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.

==== libjpeg-turbo ====

- previous version updates fixes following bugs:
  CVE-2014-9092, CVE-2018-14498, CVE-2019-2201, CVE-2020-17541
  (bsc#1128712, bsc#1186764, bsc#807183, bsc#906761)

==== libsolv ====
Version update (0.7.19 -> 0.7.20)

- fix misparsing of '&' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20
- Disable python2 usage on suse_version >= 1550 by default (still
  possible to use osc build --with=python).

==== libsoup2 ====

- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)

==== lz4 ====

- version 1.9.3 fixes also CVE-2021-3520 [bsc#1185438]

==== suse-module-tools ====
Version update (16.0.10+7 -> 16.0.11)

- Update to version 16.0.11:
  * inkmp-script(postun): don't pass  existing files to weak-modules2
    (boo#1191200)
  * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
    (boo#1191260)

==== tar ====

- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  * bsc#1181131
  * bsc#1120610

==== timezone ====
Version update (2021a -> 2021c)

- timezone update 2021c:
  * Revert almost all of 2021b's changes to the 'backward' file
  * Fix a bug in 'zic -b fat' that caused old timestamps to be
    mishandled in 32-bit-only readers
- timezone update 2021b:
  * Jordan now starts DST on February's last Thursday.
  * Samoa no longer observes DST.
  * Move some backward-compatibility links to 'backward'.
  * Rename Pacific/Enderbury to Pacific/Kanton.
  * Correct many pre-1993 transitions in Malawi, Portugal, etc.
  * zic now creates each output file or link atomically.
  * zic -L no longer omits the POSIX TZ string in its output.
  * zic fixes for truncation and leap second table expiration.
  * zic now follows POSIX for TZ strings using all-year DST.
  * Fix some localtime crashes and bugs in obscure cases.
  * zdump -v now outputs more-useful boundary cases.
  * tzfile.5 better matches a draft successor to RFC 8536.

==== transactional-update ====
Version update (3.5.5 -> 3.5.6)
Subpackages: dracut-transactional-update libtukit0 transactional-update-zypp-config tukit

- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]