Packages changed:
  apparmor
  bash
  cloud-init
  conmon (2.0.30 -> 2.1.0)
  curl (7.83.0 -> 7.83.1)
  gcc12 (12.0.1+git192423 -> 12.1.0+git27)
  helm (3.8.0 -> 3.8.2)
  kernel-firmware (20220411 -> 20220509)
  kernel-source (5.17.5 -> 5.17.7)
  libapparmor
  libpng16
  libunwind
  lsof (4.94.0 -> 4.95.0)
  ncurses (6.3.20220423 -> 6.3.20220501)
  nfs-utils
  numactl (2.0.14.20.g4ee5e0c -> 2.0.14.39.g8b18345)
  open-iscsi
  openssl
  pcre2
  pigz (2.6 -> 2.7)
  protobuf
  python-importlib-metadata (4.8.2 -> 4.11.3)
  runc (1.1.1 -> 1.1.2)
  sqlite3 (3.38.3 -> 3.38.5)
  systemd (250.4 -> 250.5)
  tiff
  xfsprogs (5.15.0 -> 5.16.0)
  zlib-ng-compat

=== Details ===

==== apparmor ====
Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor

- Update samba-new-dcerpcd.patch for aarch64 which needs some
  additional rules; (bnc#1198309).
- Add python310-help-mr848.patch so that Tumbleweed can switch
  python3 to Python 3.10
  (https://gitlab.com/apparmor/apparmor/-/merge_requests/848)

==== bash ====
Subpackages: bash-sh

- use https:// for source urls

==== cloud-init ====

- python-mock is not required for build
  https://trello.com/c/S6eADbii/64-remove-python-mock

==== conmon ====
Version update (2.0.30 -> 2.1.0)

- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds >= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup

==== curl ====
Version update (7.83.0 -> 7.83.1)
Subpackages: libcurl4

- Update to 7.83.1:
  * Security fixes:
  - (bsc#1199225, CVE-2022-30115) HSTS bypass via trailing dot
  - (bsc#1199224, CVE-2022-27782) TLS and SSH connection too eager reuse
  - (bsc#1199223, CVE-2022-27781) CERTINFO never-ending busy-loop
  - (bsc#1199222, CVE-2022-27780) percent-encoded path separator in URL host
  - (bsc#1199221, CVE-2022-27779) cookie for trailing dot TLD
  - (bsc#1199220, CVE-2022-27778) removes wrong file on error
  * Bugfixes:
  - altsvc: fix host name matching for trailing dots
  - cirrus: Update to FreeBSD 12.3
  - cirrus: Use pip for Python packages on FreeBSD
  - conn: fix typo 'connnection' -> 'connection' in two function names
  - cookies: make bad_domain() not consider a trailing dot fine
  - curl: free resource in error path
  - curl: guard against size_t wraparound in no-clobber code
  - CURLOPT_DOH_URL.3: mention the known bug
  - CURLOPT_HSTS*FUNCTION.3: document the involved structs as well
  - CURLOPT_SSH_AUTH_TYPES.3: fix the default
  - data/test376: set a proper name
  - GHA/mbedtls: enabled nghttp2 in the build
  - gha: build msh3
  - gskit: fixed bogus setsockopt calls
  - gskit: remove unused function set_callback
  - hsts: ignore trailing dots when comparing hosts names
  - HTTP-COOKIES: add missing CURLOPT_COOKIESESSION
  - http: move Curl_allow_auth_to_host()
  - http_proxy/hyper: handle closed connections
  - hyper: fix test 357
  - Makefile: fix "make ca-firefox"
  - mbedtls: bail out if rng init fails
  - mbedtls: fix compile when h2-enabled
  - mbedtls: fix some error messages
  - misc: use "autoreconf -fi" instead buildconf
  - msh3: get msh3 version from MsH3Version
  - msh3: print boolean value as text representation
  - msh3: psss remote_port to MsH3ConnectionOpen
  - ngtcp2: add ca-fallback support for OpenSSL backend
  - nss: return error if seemingly stuck in a cert loop
  - openssl: define HAVE_SSL_CTX_SET_EC_CURVES for libressl
  - post_per_transfer: remove the updated file name
  - sectransp: bail out if SSLSetPeerDomainName fails
  - tests/server: declare variable 'reqlogfile' static
  - tests: fix markdown formatting in README
  - test{898,974,976}: add 'HTTP proxy' keywords
  - tls: check more TLS details for connection reuse
  - url: check SSH config match on connection reuse
  - urlapi: address (harmless) UndefinedBehavior sanitizer warning
  - urlapi: reject percent-decoding host name into separator bytes
  - x509asn1: make do_pubkey handle EC public keys

==== gcc12 ====
Version update (12.0.1+git192423 -> 12.1.0+git27)
Subpackages: libgcc_s1 libgomp1 libstdc++6

- Update to GCC 12.1 release, 1ea978e3066ac565a1ec28a96a4d61, git27
- Bump to 621650f64fb6679c457c33abf27c925f28bddc62, git9
  * GCC 12.1 release candidate
- Bump to f27848a5dc4d3b16cd4112bddcb59e0916eba623, git192706.
- Switch ppc64le to the IEEE long double ABI by default in Factory.
- Separate ppc64le from ppc/ppc64 specific configury.
- Add _multibuild to gather all .spec files and reduce the number
  of .changes files to one, autogenerated by change_spec.
- Drop %ringdisabled handling.
- Ada bootstrap now requires at least GCC 5, use GCC 7 on SLES 12
  instead of GCC 4.8.
- Drop no longer necessary gcc12-d-workaround.patch
- Bump to b85abacd902813daec5e44b97f275eb88caaf715, git192607.

==== helm ====
Version update (3.8.0 -> 3.8.2)

- Update to version 3.8.2:
  * Bump oras.land/oras-go from 1.1.0 to 1.1.1
  * Fixing downloader plugin error handling
  * Simplify testdata charts
  * Simplify testdata charts
  * Add tests for multi-level dependencies.
  * Fix value precedence
  * Bumping Kubernetes package versions
  * Updating vcs to latest version
  * Dont modify provided transport
  * Pass http getter as pointer in tests
  * Add docs block
  * Add transport option and tests
  * Reuse http transport
  * Updating Kubernetes libs to 0.23.4 (latest)
  * fix: remove deadcode
  * fix: helm package tests
  * fix: helm package with dependency update for charts with OCI dependencies
  * Fix typo Unset the env var before func return in Unit Test
  * add legal name check
  * maint: fix syntax error in deploy.sh
  * linting issue fixed
  * only apply overwrite if version is canary
  * overwrite flag added to az storage blob upload-batch
  * Avoid querying for OCI tags can explicit version provided in chart dependencies
  * Management of bearer tokens for tag listing
  * Updating Kubernetes packages to 1.23.3
  * refactor: use `os.ReadDir` for lightweight directory reading
  * Add IngressClass to manifests to be (un)installed
  * feat(comp): Shell completion for OCI
  * Fix install memory/goroutine leak

==== kernel-firmware ====
Version update (20220411 -> 20220509)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network

- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 & related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases

==== kernel-source ====
Version update (5.17.5 -> 5.17.7)

- Linux 5.17.7 (bsc#1012628).
- PCI: aardvark: Update comment about link going down after
  link-up (bsc#1012628).
- PCI: aardvark: Drop __maybe_unused from advk_pcie_disable_phy()
  (bsc#1012628).
- PCI: aardvark: Don't mask irq when mapping (bsc#1012628).
- PCI: aardvark: Remove irq_mask_ack() callback for INTx
  interrupts (bsc#1012628).
- PCI: aardvark: Use separate INTA interrupt for emulated root
  bridge (bsc#1012628).
- PCI: aardvark: Fix support for PME requester on emulated bridge
  (bsc#1012628).
- PCI: aardvark: Add support for PME interrupts (bsc#1012628).
- PCI: aardvark: Optimize writing PCI_EXP_RTCTL_PMEIE and
  PCI_EXP_RTSTA_PME on emulated bridge (bsc#1012628).
- PCI: aardvark: Add support for ERR interrupt on emulated bridge
  (bsc#1012628).
- PCI: aardvark: Enable MSI-X support (bsc#1012628).
- PCI: aardvark: Fix setting MSI address (bsc#1012628).
- PCI: aardvark: Add support for masking MSI interrupts
  (bsc#1012628).
- PCI: aardvark: Refactor unmasking summary MSI interrupt
  (bsc#1012628).
- PCI: aardvark: Use dev_fwnode() instead of
  of_node_to_fwnode(dev->of_node) (bsc#1012628).
- PCI: aardvark: Make msi_domain_info structure a static driver
  structure (bsc#1012628).
- PCI: aardvark: Make MSI irq_chip structures static driver
  structures (bsc#1012628).
- PCI: aardvark: Check return value of generic_handle_domain_irq()
  when processing INTx IRQ (bsc#1012628).
- PCI: aardvark: Rewrite IRQ code to chained IRQ handler
  (bsc#1012628).
- PCI: aardvark: Replace custom PCIE_CORE_INT_* macros with
  PCI_INTERRUPT_* (bsc#1012628).
- mmc: rtsx: add 74 Clocks in power on flow (bsc#1012628).
- selftest/vm: verify remap destination address in mremap_test
  (bsc#1012628).
- selftest/vm: verify mmap addr in mremap_test (bsc#1012628).
- KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt
  is advertised (bsc#1012628).
- KVM: x86/mmu: avoid NULL-pointer dereference on page freeing
  bugs (bsc#1012628).
- KVM: x86: Do not change ICR on write to APIC_SELF_IPI
  (bsc#1012628).
- x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume
  (bsc#1012628).
- KVM: selftests: Silence compiler warning in the
  kvm_page_table_test (bsc#1012628).
- kvm: selftests: do not use bitfields larger than 32-bits for
  PTEs (bsc#1012628).
- KVM: VMX: Exit to userspace if vCPU has injected exception
  and invalid state (bsc#1012628).
- KVM: SEV: Mark nested locking of vcpu->lock (bsc#1012628).
- iommu/dart: Add missing module owner to ops structure
  (bsc#1012628).
- fbdev: Make fb_release() return -ENODEV if fbdev was
  unregistered (bsc#1012628).
- kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has
  architectural PMU (bsc#1012628).
- net: rds: acquire refcount on TCP sockets (bsc#1012628).
- gpio: mvebu: drop pwm base assignment (bsc#1012628).
- parisc: Mark cr16 clock unstable on all SMP machines
  (bsc#1012628).
- btrfs: always log symlinks in full mode (bsc#1012628).
- smsc911x: allow using IRQ0 (bsc#1012628).
- selftests: ocelot: tc_flower_chains: specify conform-exceed
  action for policer (bsc#1012628).
- bnxt_en: Fix unnecessary dropping of RX packets (bsc#1012628).
- bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS
  flag (bsc#1012628).
- dt-bindings: pci: apple,pcie: Drop max-link-speed from example
  (bsc#1012628).
- selftests: mirror_gre_bridge_1q: Avoid changing PVID while
  interface is operational (bsc#1012628).
- rxrpc: Enable IPv6 checksums on transport socket (bsc#1012628).
- mld: respect RCU rules in ip6_mc_source() and ip6_mc_msfilter()
  (bsc#1012628).
- SUNRPC: Don't leak sockets in xs_local_connect() (bsc#1012628).
- hinic: fix bug of wq out of bound access (bsc#1012628).
- drm/msm/dp: remove fail safe mode related code (bsc#1012628).
- selftests/net: so_txtime: usage(): fix documentation of default
  clock (bsc#1012628).
- selftests/net: so_txtime: fix parsing of start time stamp on
  32 bit systems (bsc#1012628).
- net: emaclite: Add error handling for of_address_to_resource()
  (bsc#1012628).
- net: igmp: respect RCU rules in ip_mc_source() and
  ip_mc_msfilter() (bsc#1012628).
- net: cpsw: add missing of_node_put() in cpsw_probe_dt()
  (bsc#1012628).
- net: mdio: Fix ENOMEM return value in BCM6368 mux bus controller
  (bsc#1012628).
- net: stmmac: dwmac-sun8i: add missing of_node_put() in
  sun8i_dwmac_register_mdio_mux() (bsc#1012628).
- net: dsa: mt7530: add missing of_node_put() in mt7530_setup()
  (bsc#1012628).
- net: ethernet: mediatek: add missing of_node_put() in
  mtk_sgmii_init() (bsc#1012628).
- NFSv4: Don't invalidate inode attributes on delegation return
  (bsc#1012628).
- RDMA/irdma: Fix possible crash due to NULL netdev in notifier
  (bsc#1012628).
- RDMA/irdma: Reduce iWARP QP destroy time (bsc#1012628).
- RDMA/irdma: Flush iWARP QP if modified to ERR from RTR state
  (bsc#1012628).
- RDMA/siw: Fix a condition race issue in MPA request processing
  (bsc#1012628).
- SUNRPC release the transport of a relocated task with an
  assigned transport (bsc#1012628).
- ALSA: hda/realtek: Fix mute led issue on thinkpad with cs35l41
  s-codec (bsc#1012628).
- selftests/seccomp: Don't call read() on TTY from background pgrp
  (bsc#1012628).
- net/mlx5e: TC, fix decap fallback to uplink when int port not
  supported (bsc#1012628).
- net/mlx5e: Lag, Don't skip fib events on current dst
  (bsc#1012628).
- net/mlx5e: Lag, Fix fib_info pointer assignment (bsc#1012628).
- net/mlx5e: Lag, Fix use-after-free in fib event handler
  (bsc#1012628).
- net/mlx5: Fix deadlock in sync reset flow (bsc#1012628).
- net/mlx5: Avoid double clear or set of sync reset requested
  (bsc#1012628).
- net/mlx5: Fix matching on inner TTC (bsc#1012628).
- net/mlx5e: Fix the calling of update_buffer_lossy() API
  (bsc#1012628).
- net/mlx5e: CT: Fix queued up restore put() executing after
  relevant ft release (bsc#1012628).
- net/mlx5e: Don't match double-vlan packets if cvlan is not set
  (bsc#1012628).
- net/mlx5e: Fix wrong source vport matching on tunnel rule
  (bsc#1012628).
- net/mlx5: Fix slab-out-of-bounds while reading resource dump
  menu (bsc#1012628).
- net/mlx5e: Fix trust state reset in reload (bsc#1012628).
- iommu/dart: check return value after calling
  platform_get_resource() (bsc#1012628).
- iommu/vt-d: Drop stop marker messages (bsc#1012628).
- ASoC: soc-ops: fix error handling (bsc#1012628).
- ASoC: meson: axg-card: Fix nonatomic links (bsc#1012628).
- ASoC: meson: axg-tdm-interface: Fix formatters in trigger"
  (bsc#1012628).
- ASoC: dmaengine: Restore NULL prepare_slave_config() callback
  (bsc#1012628).
- hwmon: (pmbus) disable PEC if not enabled (bsc#1012628).
- hwmon: (adt7470) Fix warning on module removal (bsc#1012628).
- gpio: pca953x: fix irq_stat not updated when irq is disabled
  (irq_mask not set) (bsc#1012628).
- gpio: visconti: Fix fwnode of GPIO IRQ (bsc#1012628).
- NFC: netlink: fix sleep in atomic bug when firmware download
  timeout (bsc#1012628).
- nfc: nfcmrvl: main: reorder destructive operations in
  nfcmrvl_nci_unregister_dev to avoid bugs (bsc#1012628).
- nfc: replace improper check device_is_registered() in netlink
  related functions (bsc#1012628).
- can: grcan: only use the NAPI poll budget for RX (bsc#1012628).
- can: grcan: grcan_probe(): fix broken system id check for
  errata workaround needs (bsc#1012628).
- can: grcan: use ofdev->dev when allocating DMA memory
  (bsc#1012628).
- can: isotp: remove re-binding of bound socket (bsc#1012628).
- can: grcan: grcan_close(): fix deadlock (bsc#1012628).
- s390/dasd: Fix read inconsistency for ESE DASD devices
  (bsc#1012628).
- s390/dasd: Fix read for ESE with blksize < 4k (bsc#1012628).
- s390/dasd: prevent double format of tracks for ESE devices
  (bsc#1012628).
- s390/dasd: fix data corruption for ESE devices (bsc#1012628).
- ASoC: meson: Fix event generation for AUI CODEC mux
  (bsc#1012628).
- ASoC: meson: Fix event generation for G12A tohdmi mux
  (bsc#1012628).
- ASoC: meson: Fix event generation for AUI ACODEC mux
  (bsc#1012628).
- ASoC: wm8958: Fix change notifications for DSP controls
  (bsc#1012628).
- ASoC: rt9120: Correct the reg 0x09 size to one byte
  (bsc#1012628).
- ASoC: da7219: Fix change notifications for tone generator
  frequency (bsc#1012628).
- genirq: Synchronize interrupt thread startup (bsc#1012628).
- btrfs: skip compression property for anything other than files
  and dirs (bsc#1012628).
- btrfs: do not allow compression on nodatacow files
  (bsc#1012628).
- btrfs: export a helper for compression hard check (bsc#1012628).
- btrfs: do not BUG_ON() on failure to update inode when setting
  xattr (bsc#1012628).
- btrfs: force v2 space cache usage for subpage mount
  (bsc#1012628).
- btrfs: sysfs: export the balance paused state of exclusive
  operation (bsc#1012628).
- net: stmmac: disable Split Header (SPH) for Intel platforms
  (bsc#1012628).
- firewire: core: extend card->lock in fw_core_handle_bus_reset
  (bsc#1012628).
- firewire: remove check of list iterator against head past the
  loop body (bsc#1012628).
- firewire: fix potential uaf in outbound_phy_packet_callback()
  (bsc#1012628).
- timekeeping: Mark NMI safe time accessors as notrace
  (bsc#1012628).
- Revert "SUNRPC: attempt AF_LOCAL connect on setup"
  (bsc#1012628).
- hwmon: (pmbus) delta-ahe50dc-fan: work around hardware quirk
  (bsc#1012628).
- RISC-V: relocate DTB if it's outside memory region
  (bsc#1012628).
- drm/amdgpu: do not use passthrough mode in Xen dom0
  (bsc#1012628).
- drm/amd/display: Avoid reading audio pattern past
  AUDIO_CHANNELS_COUNT (bsc#1012628).
- iommu/arm-smmu-v3: Fix size calculation in
  arm_smmu_mm_invalidate_range() (bsc#1012628).
- iommu/vt-d: Calculate mask for non-aligned flushes
  (bsc#1012628).
- KVM: x86/svm: Account for family 17h event renumberings in
  amd_pmc_perf_hw_id (bsc#1012628).
- x86/fpu: Prevent FPU state corruption (bsc#1012628).
- gpiolib: of: fix bounds check for 'gpio-reserved-ranges'
  (bsc#1012628).
- mmc: core: Set HS clock speed before sending HS CMD13
  (bsc#1012628).
- mmc: sunxi-mmc: Fix DMA descriptors allocated above 32 bits
  (bsc#1012628).
- mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC
  (bsc#1012628).
- ALSA: fireworks: fix wrong return count shorter than expected
  by 4 bytes (bsc#1012628).
- ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers
  (bsc#1012628).
- parisc: Merge model and model name into one line in
  /proc/cpuinfo (bsc#1012628).
- Revert "parisc: Mark sched_clock unstable only if clocks are
  not syncronized" (bsc#1012628).
- Revert "parisc: Mark cr16 CPU clocksource unstable on all SMP
  machines" (bsc#1012628).
- MIPS: Fix CP0 counter erratum detection for R4k CPUs
  (bsc#1012628).
- ipmi:ipmi_ipmb: Fix null-ptr-deref in ipmi_unregister_smi()
  (bsc#1012628).
- ipmi: When handling send message responses, don't process the
  message (bsc#1012628).
- pci_irq_vector() can't be used in atomic context any
  longer. This conflicts with the usage of this function
  in nic_mbx_intr_handler(). age of this function in
  nic_mbx_intr_handler() (bsc#1012628).
- commit c9a5fa1
- Linux 5.17.6 (bsc#1012628).
- usb: mtu3: fix USB 3.0 dual-role-switch from device to host
  (bsc#1012628).
- floppy: disable FDRAWCMD by default (bsc#1012628).
- USB: quirks: add a Realtek card reader (bsc#1012628).
- USB: quirks: add STRING quirk for VCOM device (bsc#1012628).
- USB: serial: whiteheat: fix heap overflow in
  WHITEHEAT_GET_DTR_RTS (bsc#1012628).
- USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader
  (bsc#1012628).
- USB: serial: option: add support for Cinterion MV32-WA/MV32-WB
  (bsc#1012628).
- USB: serial: option: add Telit 0x1057, 0x1058, 0x1075
  compositions (bsc#1012628).
- usb: xhci: tegra:Fix PM usage reference leak of
  tegra_xusb_unpowergate_partitions (bsc#1012628).
- xhci: Enable runtime PM on second Alderlake controller
  (bsc#1012628).
- xhci: stop polling roothubs after shutdown (bsc#1012628).
- xhci: increase usb U3 -> U0 link resume timeout from 100ms to
  500ms (bsc#1012628).
- iio: dac: ad5592r: Fix the missing return value (bsc#1012628).
- iio: scd4x: check return of scd4x_write_and_fetch (bsc#1012628).
- iio: dac: ad5446: Fix read_raw not returning set value
  (bsc#1012628).
- iio: magnetometer: ak8975: Fix the error handling in
  ak8975_power_on() (bsc#1012628).
- iio: imu: inv_icm42600: Fix I2C init possible nack
  (bsc#1012628).
- usb: misc: fix improper handling of refcount in uss720_probe()
  (bsc#1012628).
- usb: core: Don't hold the device lock while sleeping in
  do_proc_control() (bsc#1012628).
- usb: typec: ucsi: Fix reuse of completion structure
  (bsc#1012628).
- usb: typec: ucsi: Fix role swapping (bsc#1012628).
- usb: gadget: uvc: Fix crash when encoding data for usb request
  (bsc#1012628).
- usb: gadget: configfs: clear deactivation flag in
  configfs_composite_unbind() (bsc#1012628).
- usb: dwc3: Try usb-role-switch first in dwc3_drd_init
  (bsc#1012628).
- usb: dwc3: core: Fix tx/rx threshold settings (bsc#1012628).
- usb: dwc3: core: Only handle soft-reset in DCTL (bsc#1012628).
- usb: dwc3: gadget: Return proper request status (bsc#1012628).
- usb: dwc3: pci: add support for the Intel Meteor Lake-P
  (bsc#1012628).
- usb: cdns3: Fix issue for clear halt endpoint (bsc#1012628).
- usb: phy: generic: Get the vbus supply (bsc#1012628).
- kernfs: fix NULL dereferencing in kernfs_remove (bsc#1012628).
- binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
  (bsc#1012628).
- binder: Address corner cases in deferred copy and fixup
  (bsc#1012628).
- serial: imx: fix overrun interrupts in DMA mode (bsc#1012628).
- serial: amba-pl011: do not time out prematurely when draining
  tx fifo (bsc#1012628).
- serial: 8250: Also set sticky MCR bits in console restoration
  (bsc#1012628).
- serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device
  (bsc#1012628).
- eeprom: at25: Use DMA safe buffers (bsc#1012628).
- arch_topology: Do not set llc_sibling if llc_id is invalid
  (bsc#1012628).
- topology: make core_mask include at least cluster_siblings
  (bsc#1012628).
- ceph: fix possible NULL pointer dereference for req->r_session
  (bsc#1012628).
- bus: mhi: host: pci_generic: Add missing poweroff() PM callback
  (bsc#1012628).
- bus: mhi: host: pci_generic: Flush recovery worker during freeze
  (bsc#1012628).
- arm64: dts: imx8mm-venice: fix spi2 pin configuration
  (bsc#1012628).
- pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config
  (bsc#1012628).
- f2fs: should not truncate blocks during roll-forward recovery
  (bsc#1012628).
- hex2bin: make the function hex_to_bin constant-time
  (bsc#1012628).
- hex2bin: fix access beyond string end (bsc#1012628).
- bus: fsl-mc-msi: Fix MSI descriptor mutex lock for
  msi_first_desc() (bsc#1012628).
- riscv: patch_text: Fixup last cpu should be master
  (bsc#1012628).
- x86/cpu: Load microcode during restore_processor_state()
  (bsc#1012628).
- x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests
  (bsc#1012628).
- iocost: don't reset the inuse weight of under-weighted debtors
  (bsc#1012628).
- virtio_net: fix wrong buf address calculation when using xdp
  (bsc#1012628).
- cpufreq: qcom-hw: drop affinity hint before freeing the IRQ
  (bsc#1012628).
- cpufreq: qcom-hw: fix the race between LMH worker and cpuhp
  (bsc#1012628).
- cpufreq: qcom-hw: fix the opp entries refcounting (bsc#1012628).
- cpufreq: qcom-cpufreq-hw: Fix throttle frequency value on EPSS
  platforms (bsc#1012628).
- video: fbdev: udlfb: properly check endpoint type (bsc#1012628).
- arm64: dts: meson: remove CPU opps below 1GHz for G12B boards
  (bsc#1012628).
- arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards
  (bsc#1012628).
- iio: dac: ad3552r: fix signedness bug in ad3552r_reset()
  (bsc#1012628).
- iio:imu:bmi160: disable regulator in error path (bsc#1012628).
- iio:filter:admv8818: select REGMAP_SPI for ADMV8818
  (bsc#1012628).
- mtd: rawnand: fix ecc parameters for mt7622 (bsc#1012628).
- tee: optee: add missing mutext_destroy in optee_ffa_probe
  (bsc#1012628).
- xsk: Fix l2fwd for copy mode + busy poll combo (bsc#1012628).
- arm64: dts: imx8qm: Correct SCU clock controller's compatible
  property (bsc#1012628).
- USB: Fix xhci event ring dequeue pointer ERDP update issue
  (bsc#1012628).
- soc: imx: imx8m-blk-ctrl: Fix IMX8MN_DISPBLK_PD_ISI hang
  (bsc#1012628).
- ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue
  (bsc#1012628).
- iio:dac:ad3552r: Fix an IS_ERR() vs NULL check (bsc#1012628).
- arm64: dts: imx8mq-tqma8mq: change the spi-nor tx (bsc#1012628).
- arm64: dts: imx8mn: Fix SAI nodes (bsc#1012628).
- arm64: dts: meson-sm1-bananapi-m5: fix wrong GPIO pin labeling
  for CON1 (bsc#1012628).
- phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe
  (bsc#1012628).
- phy: samsung: exynos5250-sata: fix missing device put in probe
  error paths (bsc#1012628).
- ARM: OMAP2+: Fix refcount leak in omap_gic_of_init
  (bsc#1012628).
- bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific
  (bsc#1012628).
- ARM: dts: dra7: Fix suspend warning for vpe powerdomain
  (bsc#1012628).
- phy: ti: omap-usb2: Fix error handling in
  omap_usb2_enable_clocks (bsc#1012628).
- ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek
  (bsc#1012628).
- ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name
  (bsc#1012628).
- ARM: dts: at91: fix pinctrl phandles (bsc#1012628).
- phy: mapphone-mdm6600: Fix PM error handling in
  phy_mdm6600_probe (bsc#1012628).
- phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe
  (bsc#1012628).
- interconnect: qcom: sc7180: Drop IP0 interconnects
  (bsc#1012628).
- interconnect: qcom: sdx55: Drop IP0 interconnects (bsc#1012628).
- ARM: dts: Fix mmc order for omap3-gta04 (bsc#1012628).
- ARM: dts: am33xx-l4: Add missing touchscreen clock properties
  (bsc#1012628).
- ARM: dts: am3517-evm: Fix misc pinmuxing (bsc#1012628).
- ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35
  (bsc#1012628).
- pinctrl: qcom: sm6350: fix order of UFS & SDC pins
  (bsc#1012628).
- ipvs: correctly print the memory size of ip_vs_conn_tab
  (bsc#1012628).
- phy: amlogic: fix error path in phy_g12a_usb3_pcie_probe()
  (bsc#1012628).
- pinctrl: mediatek: moore: Fix build error (bsc#1012628).
- mtd: rawnand: Fix return value check of
  wait_for_completion_timeout (bsc#1012628).
- mtd: fix 'part' field data corruption in mtd_info (bsc#1012628).
- pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered
  IRQs in EOI (bsc#1012628).
- memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode
  (bsc#1012628).
- net: dsa: Add missing of_node_put() in dsa_port_link_register_of
  (bsc#1012628).
- netfilter: nft_set_rbtree: overlap detection with element
  re-addition after deletion (bsc#1012628).
- bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from
  bpf_xmit lwt hook (bsc#1012628).
- pinctrl: rockchip: fix RK3308 pinmux bits (bsc#1012628).
- tcp: md5: incorrect tcp_header_len for incoming connections
  (bsc#1012628).
- pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL
  IRQ requested (bsc#1012628).
- tcp: ensure to use the most recently sent skb when filling
  the rate sample (bsc#1012628).
- wireguard: device: check for metadata_dst with skb_valid_dst()
  (bsc#1012628).
- sctp: check asoc strreset_chunk in sctp_generate_reconf_event
  (bsc#1012628).
- ARM: dts: imx6ull-colibri: fix vqmmc regulator (bsc#1012628).
- arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock
  (bsc#1012628).
- pinctrl: pistachio: fix use of irq_of_parse_and_map()
  (bsc#1012628).
- cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe
  (bsc#1012628).
- net: hns3: clear inited state and stop client after failed to
  register netdev (bsc#1012628).
- net: hns3: fix error log of tx/rx tqps stats (bsc#1012628).
- net: hns3: modify the return code of
  hclge_get_ring_chain_from_mbx (bsc#1012628).
- net: hns3: add validity check for message data length
  (bsc#1012628).
- net: hns3: add return value for mailbox handling in PF
  (bsc#1012628).
- net/smc: sync err code when tcp connection was refused
  (bsc#1012628).
- net: lan966x: fix a couple off by one bugs (bsc#1012628).
- ip_gre: Make o_seqno start from 0 in native mode (bsc#1012628).
- ip6_gre: Make o_seqno start from 0 in native mode (bsc#1012628).
- ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md
  mode (bsc#1012628).
- tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT
  (bsc#1012628).
- tcp: make sure treq->af_specific is initialized (bsc#1012628).
- bus: sunxi-rsb: Fix the return value of
  sunxi_rsb_device_create() (bsc#1012628).
- clk: sunxi: sun9i-mmc: check return value after calling
  platform_get_resource() (bsc#1012628).
- cpufreq: qcom-cpufreq-hw: Clear dcvs interrupts (bsc#1012628).
- mctp: defer the kfree of object mdev->addrs (bsc#1012628).
- net: bcmgenet: hide status block before TX timestamping
  (bsc#1012628).
- net: phy: marvell10g: fix return value on error (bsc#1012628).
- net: dsa: mv88e6xxx: Fix port_hidden_wait to account for
  port_base_addr (bsc#1012628).
- drm/sun4i: Remove obsolete references to PHYS_OFFSET
  (bsc#1012628).
- ice: wait 5 s for EMP reset after firmware flash (bsc#1012628).
- Bluetooth: hci_event: Fix checking for invalid handle on error
  status (bsc#1012628).
- net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK
  (bsc#1012628).
- io_uring: check reserved fields for send/sendmsg (bsc#1012628).
- io_uring: check reserved fields for recv/recvmsg (bsc#1012628).
- netfilter: nf_conntrack_tcp: re-init for syn packets only
  (bsc#1012628).
- netfilter: conntrack: fix udp offload timeout sysctl
  (bsc#1012628).
- platform/x86: asus-wmi: Potential buffer overflow in
  asus_wmi_evaluate_method_buf() (bsc#1012628).
- platform/x86: asus-wmi: Fix driver not binding when fan curve
  control probe fails (bsc#1012628).
- drm/amdkfd: Fix GWS queue count (bsc#1012628).
- drm/amd/display: Fix memory leak in dcn21_clock_source_create
  (bsc#1012628).
- tls: Skip tls_append_frag on zero copy size (bsc#1012628).
- bnx2x: fix napi API usage sequence (bsc#1012628).
- net: fec: add missing of_node_put() in fec_enet_init_stop_mode()
  (bsc#1012628).
- gfs2: Minor retry logic cleanup (bsc#1012628).
- gfs2: Make sure not to return short direct writes (bsc#1012628).
- gfs2: No short reads or writes upon glock contention
  (bsc#1012628).
- perf arm-spe: Fix addresses of synthesized SPE events
  (bsc#1012628).
- ixgbe: ensure IPsec VF<->PF compatibility (bsc#1012628).
- net: enetc: allow tc-etf offload even with NETIF_F_CSUM_MASK
  (bsc#1012628).
- Revert "ibmvnic: Add ethtool private flag for driver-defined
  queue limits" (bsc#1012628).
- tcp: fix F-RTO may not work correctly when receiving DSACK
  (bsc#1012628).
- ASoC: soc-pcm: use GFP_KERNEL when the code is sleepable
  (bsc#1012628).
- ASoC: cs35l41: Fix a shift-out-of-bounds warning found by UBSAN
  (bsc#1012628).
- ASoC: rt711/5682: check if bus is active before deferred jack
  detection (bsc#1012628).
- ASoC: Intel: soc-acpi: correct device endpoints for max98373
  (bsc#1012628).
- ASoC: wm8731: Disable the regulator when probing fails
  (bsc#1012628).
- Input: cypress-sf - register a callback to disable the
  regulators (bsc#1012628).
- ext4: fix bug_on in start_this_handle during umount filesystem
  (bsc#1012628).
- arch: xtensa: platforms: Fix deadlock in rs_close()
  (bsc#1012628).
- ksmbd: increment reference count of parent fp (bsc#1012628).
- ksmbd: set fixed sector size to FS_SECTOR_SIZE_INFORMATION
  (bsc#1012628).
- erofs: fix use-after-free of on-stack io[] (bsc#1012628).
- bonding: do not discard lowest hash bit for non layer3+4 hashing
  (bsc#1012628).
- x86: __memcpy_flushcache: fix wrong alignment if size > 2^32
  (bsc#1012628).
- cifs: destage any unwritten data to the server before calling
  copychunk_write (bsc#1012628).
- drivers: net: hippi: Fix deadlock in rr_close() (bsc#1012628).
- powerpc/perf: Fix 32bit compile (bsc#1012628).
- ALSA: hda: intel-dsp-config: Add RaptorLake PCI IDs
  (bsc#1012628).
- selftest/vm: verify mmap addr in mremap_test (bsc#1012628).
- selftest/vm: verify remap destination address in mremap_test
  (bsc#1012628).
- bfq: Fix warning in bfqq_request_over_limit() (bsc#1012628).
- Revert "ACPI: processor: idle: fix lockup regression on 32-bit
  ThinkPad T40" (bsc#1012628).
- Revert "block: inherit request start time from bio for
  BLK_CGROUP" (bsc#1012628).
- zonefs: Fix management of open zones (bsc#1012628).
- zonefs: Clear inode information flags on inode creation
  (bsc#1012628).
- kasan: prevent cpu_quarantine corruption when CPU offline and
  cache shrink occur at same time (bsc#1012628).
- mtd: rawnand: qcom: fix memory corruption that causes panic
  (bsc#1012628).
- netfilter: Update ip6_route_me_harder to consider L3 domain
  (bsc#1012628).
- drm/amdgpu: don't runtime suspend if there are displays attached
  (v3) (bsc#1012628).
- drm/i915: Check EDID for HDR static metadata when choosing blc
  (bsc#1012628).
- drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses
  (bsc#1012628).
- net: ethernet: stmmac: fix write to sgmii_adapter_base
  (bsc#1012628).
- ACPI: processor: idle: Avoid falling back to C3 type C-states
  (bsc#1012628).
- thermal: int340x: Fix attr.show callback prototype
  (bsc#1012628).
- btrfs: fix direct I/O read repair for split bios (bsc#1012628).
- btrfs: fix direct I/O writes for split bios on zoned devices
  (bsc#1012628).
- btrfs: fix leaked plug after failure syncing log on zoned
  filesystems (bsc#1012628).
- btrfs: zoned: use dedicated lock for data relocation
  (bsc#1012628).
- btrfs: fix assertion failure during scrub due to block group
  reallocation (bsc#1012628).
- ARM: dts: at91: sama7g5ek: enable pull-up on flexcom3 console
  lines (bsc#1012628).
- ARM: dts: imx8mm-venice-gw{71xx,72xx,73xx}: fix OTG controller
  OC mode (bsc#1012628).
- perf symbol: Pass is_kallsyms to symbols__fixup_end()
  (bsc#1012628).
- perf symbol: Update symbols__fixup_end() (bsc#1012628).
- perf symbol: Remove arch__symbols__fixup_end() (bsc#1012628).
- tty: n_gsm: fix missing mux reset on config change at responder
  (bsc#1012628).
- tty: n_gsm: fix restart handling via CLD command (bsc#1012628).
- tty: n_gsm: fix decoupled mux resource (bsc#1012628).
- tty: n_gsm: fix mux cleanup after unregister tty device
  (bsc#1012628).
- tty: n_gsm: fix wrong signal octet encoding in convergence
  layer type 2 (bsc#1012628).
- tty: n_gsm: fix frame reception handling (bsc#1012628).
- tty: n_gsm: fix malformed counter for out of frame data
  (bsc#1012628).
- netfilter: nft_socket: only do sk lookups when indev is
  available (bsc#1012628).
- tty: n_gsm: fix insufficient txframe size (bsc#1012628).
- tty: n_gsm: fix wrong DLCI release order (bsc#1012628).
- tty: n_gsm: fix missing explicit ldisc flush (bsc#1012628).
- tty: n_gsm: fix wrong command retry handling (bsc#1012628).
- tty: n_gsm: fix wrong command frame length field encoding
  (bsc#1012628).
- tty: n_gsm: fix wrong signal octets encoding in MSC
  (bsc#1012628).
- tty: n_gsm: fix missing tty wakeup in convergence layer type 2
  (bsc#1012628).
- tty: n_gsm: fix reset fifo race condition (bsc#1012628).
- tty: n_gsm: fix incorrect UA handling (bsc#1012628).
- tty: n_gsm: fix missing update of modem controls after DLCI open
  (bsc#1012628).
- tty: n_gsm: fix broken virtual tty handling (bsc#1012628).
- tty: n_gsm: fix invalid use of MSC in advanced option
  (bsc#1012628).
- tty: n_gsm: fix software flow control handling (bsc#1012628).
- tty: n_gsm: fix sometimes uninitialized warning in
  gsm_dlci_modem_output() (bsc#1012628).
- objtool: Fix code relocs vs weak symbols (bsc#1012628).
- objtool: Fix type of reloc::addend (bsc#1012628).
- powerpc/64: Add UADDR64 relocation support (bsc#1012628).
- Update config files.
- commit 35de487
- net: atlantic: always deep reset on pm op, fixing up my null
  deref regression (resume crash).
- commit e2300f2

==== libapparmor ====

- Update samba-new-dcerpcd.patch for aarch64 which needs some
  additional rules; (bnc#1198309).
- Add python310-help-mr848.patch so that Tumbleweed can switch
  python3 to Python 3.10
  (https://gitlab.com/apparmor/apparmor/-/merge_requests/848)

==== libpng16 ====

- switch source url to https

==== libunwind ====

- Enable build on riscv64 and run testsuite

==== lsof ====
Version update (4.94.0 -> 4.95.0)

- update to 4.95.0:
  * Update perl scripts for the past few decades of progress
  * Drop LSOF_CCDATE across all dialects to ensure reproducible builds
  * Fix FD field description.
  * Adjust alignment of buffer passed to stat().
  * Clean up source code and documents.
  - remove trailing whitespace,
  - fix some issues in scripts found through shellcheck, and
  - fix spelling
  * man page: fix hyphen issues
  * Fix broken LSOF_CFLAGS_OVERRIDE.
  * [linux] Remove sysvlegacy function.
  * [linux] use close_range instead of calling close repeatedly
  * Add -Q option for adjusting exit status when failed to find a
    search item (#129)
- drop lsof-no-build-date-etc.patch (obsolete)

==== ncurses ====
Version update (6.3.20220423 -> 6.3.20220501)
Subpackages: libncurses6 ncurses-utils terminfo-base

- Add ncurses patch  20220501
  + build-fix for debug-traces (report/patch by Chris Clayton).
- Add ncurses patch 20220430
  + modify samples for xterm mouse 1002/1003 modes to use 1006 mode, and
    also provide for focus in/out responses -TD
  + modify default case in handle_wheel() to always report button-release
    events, e.g., for xterm mouse mode 1003 (patch by Leonid S Usov).
  + improve valid_entryname() to disallow characters used in terminfo
    syntax: '#', '=', '|', '\'.
  + alter copy_termtype() to allocate new str_table and ext_str_table
    data rather than relying upon its callers.
  + use calloc in _nc_init_entry() when allocating stringbuf, to ensure
    it is initialized.
  + add library-level TYPE_CALLOC for consistency with TYPE_MALLOC.
  + add some debug-traces for tic/infocmp.
- Correct offsets of patches
  * ncurses-5.9-ibm327x.dif
  * ncurses-6.3.dif

==== nfs-utils ====
Subpackages: libnfsidmap1 nfs-client

- switch to https urls

==== numactl ====
Version update (2.0.14.20.g4ee5e0c -> 2.0.14.39.g8b18345)

- Update to version 2.0.14.39.g8b18345:
  * numa(3): Fix typos and punctuation
  * Avoid libnuma.so dependency on util.o
  * test/prefered: add test cases for new 'preferred-many' policy
  * test/prefered: fix compiling problem
  * numa(3): Update the man page
  * Update to support multiple nodes
  * numademo: Add a new test for multiple-preferred-nodes policy
  * numactl: Simplify preferred selection
  * libnuma: Export interface to set/get preferred nodes
  * util: Add new preferred-many type

==== open-iscsi ====
Subpackages: iscsiuio libopeniscsiusr0_2_0

- Update to latest upstream, including:
  * Added 'distclean' to Makefile targets
  * Ensure Makefile '.PHONY' targets set up correctly
  * fix an iscsid logout bug generating a false error
    and cleanup logout error messages

==== openssl ====

- Use same %description as openssl-3 (describe the software,
  not the project).

==== pcre2 ====

- do not enable jit-sealloc [bsc#1182864] [bsc#1199208]
- enable jit for s390x [bsc#1199196]

==== pigz ====
Version update (2.6 -> 2.7)

- update to 2.7:
  * Improved display of multiple-member gzip files
  * Better gzip compatibility and bug fixes
- add pigz-2.7-NOTHREAD-tests.patch to fix tests

==== protobuf ====

- Do not use %%autosetup, but %%setup and %%patch on other line
  * Allows building on SLE-12-SP5
- Add temporary patch gcc12-disable-__constinit-with-c++-11.patch
  that addresses gh#protocolbuffers/protobuf#9916.
- Remove change_desc_db.patch, because underlying bug in
  gh#googleapis/python-api-core#372 has been fixed.

==== python-importlib-metadata ====
Version update (4.8.2 -> 4.11.3)

- Prevent build for Python 3.6 which is not supported anymore
- Remove override to use deprecated setuptools usage
- update to 4.11.3:
  * #372: Removed cast of path items in FastPath, not needed.
  * #369: Fixed bug where ``EntryPoint.extras`` was returning
    match objects and not the extras strings.
  * #367: In ``Distribution.requires`` for egg-info, if ``requires.txt``
    is empty, return an empty list.
  * bpo-46246: Added ``__slots__`` to ``EntryPoints``.
  * #365 and bpo-46546: Avoid leaking ``method_name`` in
    ``DeprecatedList``.
- update to 4.10.1:
  - #361: Avoid potential REDoS in ``EntryPoint.pattern``.
- Update to 4.10.0:
  - #354: Removed Distribution._local factory. This
    functionality was created as a demonstration of the possible
    implementation. Now, the pep517 package provides this
    functionality directly through pep517.meta.load.
  - Require Python 3.7 or later.
  - #357: Fixed requirement generation from egg-info when a URL
    requirement is given.

==== runc ====
Version update (1.1.1 -> 1.1.2)

- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-24769
  * A bug was found in runc where runc exec --cap executed processes with
  non-empty inheritable Linux process capabilities, creating an atypical Linux
  environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
  CVE-2022-29162.
  * `runc spec` no longer sets any inheritable capabilities in the created
  example OCI spec (`config.json`) file.

==== sqlite3 ====
Version update (3.38.3 -> 3.38.5)

- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key

==== systemd ====
Version update (250.4 -> 250.5)
Subpackages: libsystemd0 libudev1 udev

- Import commit 0d950479e58dd3af007eb3780d600a5446aac519 (merge of v250.5)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/736db5a59f1ab1317ef64ec6e7dc394250178146...0d950479e58dd3af007eb3780d600a5446aac519
- Call pam_loginuid when creating user@.service (bsc#1198507)
  It's a backport of upstream commit 1000522a60ceade446773c67031b47a566d4a70d.

==== tiff ====

- security update:
  * CVE-2022-0907 [bsc#1197070]
    + tiff-CVE-2022-0907.patch
- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch
- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch
- switch source url to https

==== xfsprogs ====
Version update (5.15.0 -> 5.16.0)

- update to 5.16.0:
  - libxfs: remove kernel stubs from xfs_shared.h
  - debian: Generate .gitcensus instead of .census
  - libxfs changes merged from kernel 5.16
  - mkfs: increase the min log size to 64MB when possible
  - xfs_scrub: retry items that are ok except for XFAIL
  - xfs_scrub: fix xfrog_scrub_metadata error reporting
  - mkfs: enable inobtcount and bigtime by default
  - mkfs: prevent corruption of suboption string values
  - mkfs: document sample configuration file location
  - mkfs: add configuration files for a few LTS kernels
  - mkfs: add a config file for x86_64 pmem filesystems
  - xfs_quota: don't exit on "project" cmd failure
  - xfs_repair: don't guess about failure reason in phase6
  - xfs_repair: update 2ndary superblocks after upgrades
  - xfs_scrub: fix reporting if we can't open devices
  - xfs_scrub: report optional features in version
  - libxcmd: use emacs mode for command history editing
  - libfrog: always use the kernel GETFSMAP definitions
  - mkfs.xfs(8): fix default inode allocator description
  - xfs_quota(8): fix up dump and report documentation
  - xfs_quota(8): document units in limit command
  - misc: add a crc32c self test to mkfs and repair

==== zlib-ng-compat ====

- Add 'Provides: zlib-devel' to the compat package
- Remove useless mis-typed '-DWITH_SANITIZERS=ON'